last executing test programs: 6m24.164995306s ago: executing program 1 (id=2): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x400, 0x0, 0x0, 0xffffffff}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2d, 0x1, 0x6, {0x2, @hdata="5b2dffe43d96bd3cc3c30eb2491e9c2dd607db2763bfaff6408f815a70229eccab40a168538ebfc37c7d08cadc8e061d67f8e320", {0x0, @multicast, 0x8, 0x6, [0x4, 0xc]}, @ah_ip4_spec={@remote, @private=0xa010102, 0xe, 0x9}, {0x0, @local, 0x7, 0x4, [0x759, 0xeb13]}, 0xc7, 0x9}, 0x4, [0x10001, 0x1, 0xfffffffa, 0x0]}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x2f, 0xd, 0x5, 0x9, 0x39, @local, @private2={0xfc, 0x2, '\x00', 0x10}, 0x700, 0x40, 0xbf8, 0x7f}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', r4, 0x7, 0x700, 0x200, 0x7ff, {{0x1b, 0x4, 0x3, 0x2c, 0x6c, 0x66, 0x0, 0x8, 0x29, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x55, 0x3, [{0x6, 0xb, "aa2b3fd91de80befc7"}, {0x6, 0x11, "aba0a5805c68e0fc25d727749c80aa"}, {0x5, 0x9, "a2d5f3870398d8"}, {0x7, 0x3, "17"}, {0x5, 0x4, "13ee"}, {0x0, 0x7, "6fee67b2e9"}, {0x5, 0xd, "69bcbdce6aaacf6461b0f2"}, {0x1, 0xf, "a7df8221d736240b22a6e04ca1"}]}]}}}}}) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(r5, 0x3, &(0x7f0000000080)=0x7fffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="21032cbd7000fedbdf25010000001c000280"], 0x30}, 0x1, 0x0, 0x0, 0x2404d090}, 0x4) 6m23.709384647s ago: executing program 1 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000afffffff1a230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) r8 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x12, 0x80800) fchmod(r8, 0x6) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 6m8.655262365s ago: executing program 32 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000037580)=""/102400, 0x19000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000afffffff1a230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x68}, 0x94) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) r8 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000340)=0x12, 0x80800) fchmod(r8, 0x6) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 10.770306022s ago: executing program 5 (id=989): syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x20, 0x1, 0x7ff, 0x6, 0x0, 0x9, 0x0, 0x7fff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x14, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xf, 0xf989, "cbd0c4eef6893d8cb09da5"}]}}}}}}}}, 0x0) mremap(&(0x7f000022c000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0), 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100100,use', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000480)="480000001400190d7ebdeb75fd0d8c162c84e48068d8c033ed7a80ffe0090f000060000000a2bc566109c87a0f7f8900fcff20000001002471083e0d5fcce62483c3f596a722191ed010a9557e7ff45938", 0x51}], 0x1) 10.253143775s ago: executing program 5 (id=991): socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 8.632970537s ago: executing program 4 (id=995): ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001300)={0x0, 0x8, 0xfffffffffffffff2}) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000dca40240d49c584645adbe16c485effead299109b1c2fbe87c2ced85bed42dd36d36f4289b36bf7ca40da021771fe7d3d9803af07d17147f19d2f0858a9af74a3b9b86048cf7e532bdb90e786127163ba388537fb4aebc9cc63bfd86c4dac988ed734d1e5b45379ea5d7fff71296cf9cf486360a8294a21953e10e7cc649bbce4154e56a6eb7e09c9a4cf5b4167e6123189c6ec86203fb01445c42796db608313d5c18a0ff875cb32caed9b356da1f24c37c19876e9037f1", @ANYRES32=r1, @ANYBLOB="c30407001b14bf26200012800b000100697036677265000010000280050017000100000004001200"], 0x40}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x72, "a2328fac8b271af6910453692f553c7c364909c94eb1c0943cfe01f9db26d78769cd4371d48c5c9d940f3f10181906b5d7b0de6737a8a1f1bec2466f548dde7f8cb763ce97df655c1bdd01167776c0941f2b4218da3fd9c586dc6bb6bb4e57aa7325649672eb44ad39e4888d70cc74b109b3"}, &(0x7f0000000080)=0x7a) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x6, @remote, 0x539}}}, 0x84) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000000000000100000000200000004000000000000005421ee236b22474b7fc6a0baa08bf04179c2a1ad22155e05a01d099a8d00ab9c"], 0x0, 0x2a}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20008004) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x201ff, 0x7f, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xb972, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYBLOB="03000200"], 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 7.010268015s ago: executing program 4 (id=997): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = getpid() capset(&(0x7f00000002c0)={0x19980330, r1}, &(0x7f0000000300)={0xffffb4e3, 0x6, 0x4, 0x80000000, 0x0, 0x1}) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e26, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x11}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xfff, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x6}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fef48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece090000000000000038cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d03000000000000003ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x4000000) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x401}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0xffffffffffffffff}}, 0x30) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000002940)={{r5, &(0x7f0000001040)='{&},,/]!/#(#-\x00', 0x0, &(0x7f0000001080)={@align=0x3, {0x6, 0x587a, 0x3, 0x3}}, 0x2, &(0x7f00000010c0), &(0x7f0000001100)=0xb50}, 0x8, &(0x7f0000002840)=[{0x2, 0x7c0, &(0x7f0000001140)='$\x00', &(0x7f0000001180)="0bca6098e254ef6aa026353e80f5e04b9e2eaab3ab776f454aacf77d8cd918f41b7fc7b7b64126e1c191e8f69b9882c0a185a1755bd22bdf488c43a07328fc2c7d234329e48f41c061deb80c0ab518c311191b687cb897045cb2240371b292ec00244728529cec38fc2e63af69c712a4252e97b46632b61565a89b18114fa77190b7027c4e2ed75369fd43bcd85f42b4c723f3accfced164ef63bb9451ab0835021fbb06c18b8a52c8f2d5a9d30f967296dc1613885d8a8f354010fd8f633fcdd0ec3f9de17ba2c1bc201ac55d947d5848bc625ed9fee7797f5a2898bd4cf61b26627effa0ce52e0c9b43bfaaceff73f1f242be3", 0xf4, 0x1a}, {0x1, 0x81, &(0x7f0000001280)='{%\x00', &(0x7f0000001380)="04275ffd30c004cf77a89d9fcd4e", 0xe, 0x12}, {0x3, 0x400, &(0x7f00000013c0)='/\x00', &(0x7f0000001400)="2de67da252abb4d8ab512ced16abe4ecf3346a4f4138d78cc366a4ce2a3b0b7c3e882a18e13ca2d3a5c50c2c09b72a", 0x2f, 0x10}, {0x2, 0x435, &(0x7f0000001440)='/dev/rtc0\x00', &(0x7f0000001480)="1237af33bd279dc8c057c2f7270c65f8e4a732c0ddb1c965e7a8de9b9785e1f480be390903f697b70d603873dd2ee5b1b62372a512998270b70ac3c5f270d78d2242f658c57b5b296d4eb44f9f639df9c418f25a0a5fa3e73982fb6d697c83f54f3d3ad614ffd1a90226608b7c748b8c63831127e80be5b300e1f6bc831ad0283654bfec430e8fcd5a9ea658b5bdc1cad48a9aa92709811fab041624a6e0f6da6e154f840d1fee33a30f6f5ee30027a35fb46831ba0a981534edfc9231dd2241db3b6f377057116b3523ca06f98d7e5ff6421555ffe18fade2f6f7831b9de816c7b17e2139bbe330a8422f26fc06", 0xee, 0x2a}, {0x3, 0xfffffff9, &(0x7f0000001580)='#)\x00', &(0x7f00000015c0)="e2b17bab8f7202b43a177a94dec0dfad33916df6353767a6007e20045ea174e24ce36c39d74eadb194c05e7c537df4ec26bbf996605509383389b0037b73930f6cc8957ce1bdc6f3f59241b7fe8c25824480d98f02c8eaa9a4b89898f768928813e9ed134768f909751640aec7a8c2b7b1a3d8157c", 0x75, 0x12}, {0x1, 0x6, &(0x7f0000001640)='{\'\x00', &(0x7f0000001680)="9580ea7829d3c6e6ed63b1e010bab30c68ce1c2e767143aea1e7bf9f483783d689376aa7dd3c4138912e068742fce54687b64e99e15983fef66f0822e6841e024a74082caff1cb08c964c492eba4aae518c7433e9a611a765c9f147c963c7a48322ca3623e634b5362c50e087b93b71b89086ef516d1df7622f7d366ebf78e6f33419cfb4394afb7a91ea49b67ba76db27e77a4b7ce6244fd953d25235e3ff5d6b2c5487f2d1f98b4b", 0xa9, 0x8}, {0x1, 0x1, &(0x7f0000001740)='/dev/rtc0\x00', &(0x7f0000001780)="836d190302b9e393f960a2b705f10b76254e443e375c9325e1ea6ac07fda05a0378050daf49a31dbf76987403b15289551b212e0b3bb170f7aa737dbc1680f88b90a192ed4e39709180af21cc18326", 0x4f, 0x50}, {0x3, 0x4, &(0x7f0000001800)='/dev/kvm\x00', &(0x7f0000001840)="5f7429fce7454eb6d4e67d1d6bfb950cc36e8714fc926d5552094a8ae4d26a7b2e13c4c425b9045b95a1b52c7fe6554f389a4f", 0x33, 0x14}]}) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a80)={0x11, 0x12, &(0x7f00000006c0)=ANY=[@ANYBLOB="18220000", @ANYRES32, @ANYBLOB="00000000ff01000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000900000000b7020000000000008500000086000000acb53000100000000547920f08000000183200000500"/56], &(0x7f0000000780)='GPL\x00', 0x3, 0xb5, &(0x7f0000000600)=""/181, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x3b6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, r8], &(0x7f00000007c0)=[{0x3, 0x3, 0x10, 0x3}, {0x3, 0x1, 0xc, 0xa}, {0x2, 0x1, 0xd, 0x9}, {0x5, 0x5, 0x1, 0x5}, {0x0, 0x3, 0x1, 0xb}, {0x2, 0x1, 0x5, 0xa}, {0x1, 0x2, 0xe, 0x4}], 0x10, 0x72}, 0x94) readv(r6, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/186, 0xba}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) bind$vsock_stream(r5, &(0x7f0000000280)={0x28, 0x0, 0x2711, @host}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 6.015857439s ago: executing program 3 (id=1000): r0 = io_uring_setup(0x21e9, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x383}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 5.90061192s ago: executing program 4 (id=1002): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40904, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x3, 0x161}) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) 5.899107594s ago: executing program 5 (id=1003): syz_emit_vhci(&(0x7f0000000440)=ANY=[], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x152) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@uuid_on}], [], 0x2c}) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, &(0x7f00000006c0)) 5.720299165s ago: executing program 4 (id=1004): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000003000000002000000000000000000000300000000010000000300000002000000000000000000000203000000090000000000000c"], 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000000d00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000900)={0x384, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x35, 0x2a, [@mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x5, [{0xc}, {0x18, 0x1}, {0x30}, {0x6, 0x1}, {0x24}]}, @rann={0x7e, 0x15, {{0x0, 0x7b}, 0x2, 0x5, @broadcast, 0x2, 0x2}}, @gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x64, 0xfa, "29f3e91aaa00b53b51afb0f1acb78187770aeea25a1b335e25dc5a8574005238b424b0cbb14df49eef3cb2acd0841755a7514b601f373606a17056b9ff678ac370123a4809385b6f8670332065f29e11cf5e9003e6677bfd1d6042e866dbd8ca"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "95598c11019e53efdef06ed53c9e"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x52, 0xfc, "8479014b1d4f714df7180b6620878d9d650a00785a40d95d18acfe6343410dd03c4fb4fb60958b1ee39710f07f5a5d04e89f8d54ae9a0edfbbc20d50c51a3b77624ec371e80107e2b6d5997ca213"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "936f5dc4f0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9fe}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}], @NL80211_ATTR_IE={0x241, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @measure_req={0x26, 0x1e, {0x40, 0x2, 0x9, "869e306ecd19b777d4249d97ffed3651c533792bdae53ee4c307a2"}}, @mesh_chsw={0x76, 0x6, {0x5, 0xfe, 0x14, 0x4742}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x9, @device_a, 0x2, @value=@broadcast, 0x0, 0x2, @device_b, 0x6}}, @random_vendor={0xdd, 0xe5, "069d07b6d121b77e4d2b97bd1f3785066520d372c31da5a0cf8cc2f4dd88177458fe4b76a63c18840a3e310f4a8151d1816b60a2768536ca5dd3eeb8dc0899552efae3a3b4ee3be91b273ca01c67e3e44ff99488f99ea0222e8e387e517fe6fc71ec4f299210b6405e350df2949ba8a8e9a370af1b3be7a3da395787c05aac27db0084b1da6f71c0ef7e5ee465e053ba7cf0e0a0f799348b69ad399c087cffa43ba28bf280bff9e46fcc889c6fed8a14799592033f0265287930d0bd94c65655ca060db26c4ad6dfc69c996e0eb147effa3cc2891c9026030fc1a9797dd88d9872fcee9626"}, @measure_req={0x26, 0x1f, {0x5, 0xf, 0x0, "852542d2f9df4d92c415c10f81645d77a064cc7441f80a1bfbdfd721"}}, @measure_req={0x26, 0x36, {0x10, 0x0, 0x7, "30e0e9d9c41e6463f94a95bdf0ea87769ba988f0a5ac0c67e293bae746386da74b6e1b8747f386ab9df3e240fb81f6a3cd2c57"}}, @perr={0x84, 0xa9, {0x2, 0xb, [{{}, @device_a, 0x2, @void, 0x3b}, {{}, @broadcast, 0xffffff6f, @void, 0x35}, {{}, @device_b, 0xffffffff, @void, 0x20}, {{0x0, 0x1}, @device_a, 0x80000001, @value, 0x32}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x22}, {{}, @broadcast, 0x2, @void, 0x26}, {{}, @device_a, 0x8000, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x35}, {{}, @device_b, 0x6, @void, 0x2b}, {{}, @broadcast, 0x7, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x3a}]}}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x8041) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x7fffffff, @local, 0xa3}, @in={0x2, 0x4e22, @remote}], 0x3c) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2e36}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r10, r1}, &(0x7f0000000240)=""/69, 0x45, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000008c0)) 5.640718508s ago: executing program 0 (id=1005): socket$packet(0x11, 0x3, 0x300) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000002180)={0x18, 0xffffffffffffffda, r1, {0x7e}}, 0x18) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000100)={0x5, &(0x7f00000041c0)=[{0x29, '\x00', @data, 0x7ff}, {0x26, '\x00', @buffer={"befc7be8387ff90dc0c02d35a3db569381f03560e0e7e6738210020a48d3181d", 0x20}, 0x7fe}]}) 5.615074517s ago: executing program 4 (id=1007): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0xfffd, @local}}, 0x1e) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073"], 0xfc}}, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x14, "20854e8c4b94a5715f8227fd4236ff0700000000"}, 0x0}) 5.459581945s ago: executing program 3 (id=1008): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x2, 0x101, 0xfffffc00, 0x400, 0x3, "54d208457f0b0000000301040000000000f700"}) 5.232530584s ago: executing program 0 (id=1009): open$dir(&(0x7f0000000000)='./file0\x00', 0xc2000, 0xd8) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, r2, 0x1, 0x400000}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000040)='totmaps\x00') r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@cswp={0x58, 0x114, 0x7, {{0x8c, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0xfffd, 0x8002, 0xfffffffffffffffe, 0x4000000000000004, 0x21, 0x9}}], 0x58, 0x8004}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x1}, 0x20) write$FUSE_INIT(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x48, 0x12, 0xbf68af9d17701211, 0x70bd29, 0x25dfdbff, {0x7}, [{0x4}, {0x30, 0x1, [@m_bpf={0x2c, 0x8, 0x0, 0x0, {{0x8}, {0x4, 0x1d}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x1d, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000094}, 0x0) 5.149864653s ago: executing program 3 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000100008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000208500000017000000bf91000000000000b7020000210000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110029bd7000fedbdf250c0000001800058007000100696200000c0002800800040006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8010) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x54, 0xfffe, 0x0, 0xb5ff, 0x15, "ec28a144f13d7607"}) write$binfmt_aout(r2, 0x0, 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) 4.988070236s ago: executing program 2 (id=1011): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_control_io$uac1(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000200)={0x40, 0x23, 0x85, {0x85, 0x11, "58d096a117d35932767a0ee76c8fc7860908f2e132ca79f3186b7411d86e114ddf7a8fe04b4ea83f4a175fa915566028243a8f036060ccb59a4a616752d00a8c7bee0bd050cd35c721ac770879b16635799bf4245eec56f3b4860ee54bce0eef0fbfb1feffffffdd714b848f95812210fea774cbf4d52ce4d8c2f504ea754fafe157cd"}}, &(0x7f0000000340)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "b1c39059568e6691745c5f263b1f59de598f6c0c99f963d78595111bd121da80b70c0183d4f6dfd27f0de791b77ae84789ac15d92601e0e26d0aba37d6"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0x3, 0x5c, "6f7a422074880a85847c84de87bbc3dee5f7b20560bdc5fd05203ed322fcd702b0cd34cdecda8ae970cab958e30da41c149568bb08861264bc16e73ffa6c167d5f3d6acc6eb20048c0573734f0166aa81ba2d8941b7aa6be0cf20864"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000500)={0x20, 0x81, 0x3, "3d670f"}, &(0x7f0000000540)={0x20, 0x82, 0x3, "66e1ce"}, &(0x7f0000000580)={0x20, 0x83, 0x3, 't-z'}, &(0x7f00000005c0)={0x20, 0x84, 0x1, "12"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "c19cfd"}}) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x20, 0x2, 0x86, {0x86, 0x24, "0ca3a941e46cd693ea1edaeb83f5427c93f369dace66f0bd51881b1b5783eaf8b23e9fdc1bfa9b48faee4151a87c633ca94a212127aa6f52829c68d48c940048110cf3d0f3242590d84fa9325339e7bee5dabbb1c9ba748393139a5c8581aab71480c4ef94c79e340031d0a39e6e6198608ba47c1ec5d2e5125480d385cf2980d084694c"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000800)={0x0, 0x14, 0x24, "ac1ae93e0a3529ee8ea8091350195528c9e7d53a1a98e92dd9806db54b5157e5fe471306"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x9}}) 3.936892028s ago: executing program 0 (id=1012): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000e00)={0x164, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x150, 0x11d, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x6}, {0x3, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x7}, {0x7, 0x6}, {0x6, 0x4}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x3, 0x6, 0x3, 0x2, 0x6, 0x40, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xe1, 0x9, 0x9, 0xfff9, 0x0, 0x6f8, 0x1ff]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0x6}, {0x3, 0x5}, {0x7, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0xa}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x4, 0x1}, {0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x0, 0x8}, {0x5, 0x5}, {0x6, 0x2}, {0x3, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x9, 0x1b, 0x16, 0x1, 0x30, 0x12, 0x1, 0x4, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x1, 0x9, 0x6c, 0x48, 0xb, 0x5, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x4, 0x7, 0x5, 0x6, 0x4, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x0, 0x6}, {0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x3}, {0x1, 0x2}, {0x7, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x6cf2, 0x1, 0x2, 0xf50b, 0x80, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xbd2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0}) syz_usb_connect$midi(0x5, 0x6d, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x4, 0x80, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0xff, [@midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x2, 0x2, [{0x5, 0x1}, {0x6, 0xf4}], 0x7}, @ms_header={0x7, 0x24, 0x1, 0xd, 0x7}], [{{0x9, 0x5, 0xd, 0x0, 0x400, 0x1d, 0x2, 0x1, {0x12, 0x25, 0x1, 0xe, "98c95c70e62b8895d1340f1ac625"}}}, {{0x9, 0x5, 0xe, 0x4, 0x1e7, 0x1, 0x8f, 0x10, {0x13, 0x25, 0x1, 0xf, "d276e9d6af94ea392d29c5cc458065"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x7, 0xc, 0xa, 0x8}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0xba, &(0x7f0000000400)=@string={0xba, 0x3, "dfb0dc969cd0333d1738525d52b104fbc32aadf9991a181c9b0f33e2fd0de07a1c4cde6c986b33d85591c8bf657eea248bee46a9adcd06fb04867a653825754be37dd9eafc3596529320e4e8cb1bbc3e7947e8a83a07244ef72be0bb64abebeeec4905d9c9d2ff21fac5ff4f6f4fc3e259d3a4b48d007a86e59f777e702a271b9507320eb72421fd85658d6d2e488cd027dc22668213e5673e17fa8344ffdb2af77db876bba1e9b924780005a57ac78c0dfac92c0f851265"}}, {0x93, &(0x7f00000004c0)=@string={0x93, 0x3, "8d35c47a2e6b0382029b6806b1c055f725694ea44e783330e5415e4dc4e5fa1e38f66703a291d856070ba07c3a963aaf04d745c85f7498d2323ebfcc4a8cf9902ae9ede44bf86703fe05b3f093a44be2f649a8041501368bb811486662f09c295110d0bda3509770e31409e279c5a7b9b68ce78560ea73c8d4634697da51b6bb18e134e64307a059b15137ac498d98e97c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x406}}, {0xc, &(0x7f00000005c0)=@string={0xc, 0x3, "30686e54ce4336d7f7c7"}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x280080, 0x82, 0x24}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e0300000000000000010000000000009200000000000000000000000202000000002e000061"], 0x0, 0x46}, 0x28) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x3) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r4, 0x0, 0x0, 'syz1\x00', 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) prlimit64(r4, 0x5, &(0x7f0000000200)={0x5, 0x5}, &(0x7f00000002c0)) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f0000000680)={[0x4]}) 2.752471224s ago: executing program 5 (id=1013): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000", @ANYRES8, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017b100c82c991322bed3035a88000000000000000037341c43eea0c405b03742d572414284a9"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.62261385s ago: executing program 4 (id=1014): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) lseek(r1, 0x20000000f, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0022820c0000d55c"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0022820c0000d55c"], 0x0}, 0x0) 2.593294762s ago: executing program 2 (id=1015): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="f24e93e5801542bebe69141f5a5472c3b70c40ce108f729488a7ee97ed352046a1cc78d647fb4ed0f82dbfd6023b4384084ce965f7a25793bd098ed8437a9548362e8a02e03ae569b22b7f132903fee41edd4226908a3749ccc3dba61dc35261f6d67c5190db88099791ffe76eeb796d68dc00d65f7fbb9e753daf194a73e9cf1848d4262c270262d28064443978bf9b6560eb6223e4bceee04149351460a2", @ANYRES64=r0], 0x3a8}, 0x1, 0x0, 0x0, 0x4040000}, 0x20010800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%-5lx \x00'}, 0x20) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRESDEC=r6, @ANYBLOB="000000fe582f5b007e8c3a73eb92d86c12fe00ffff0000184700000100"/39], &(0x7f00000001c0)='GPL\x00', 0x4, 0x27, &(0x7f0000000300)=""/39, 0x41100, 0x40, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x7fff, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r4, r5, 0xffffffffffffffff, r6, r2, r5, r6], &(0x7f0000000600)=[{0x2, 0x2, 0xf, 0xb}, {0x4, 0x1, 0x10, 0xc}, {0x1, 0x4, 0x8, 0x7}, {0x5, 0x4, 0xb, 0xb}, {0x4, 0x1, 0x9}, {0x1, 0x800, 0x10, 0x5}, {0x2, 0x3, 0x10, 0xc}, {0x5, 0x2, 0xf, 0x7}], 0x10, 0x7}, 0xffffffffffffff40) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d83) fchown(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2.494809165s ago: executing program 5 (id=1016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x20, 0x1, 0x7ff, 0x6, 0x0, 0x9, 0x0, 0x7fff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) listen(r4, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x14, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xf, 0xf989, "cbd0c4eef6893d8cb09da5"}]}}}}}}}}, 0x0) mremap(&(0x7f000022c000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0), 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100100,use', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000480)="480000001400190d7ebdeb75fd0d8c162c84e48068d8c033ed7a80ffe0090f000060000000a2bc566109c87a0f7f8900fcff20000001002471083e0d5fcce62483c3f596a722191ed010a9557e7ff45938", 0x51}], 0x1) 1.661035613s ago: executing program 3 (id=1017): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000003000000002000000000000000000000300000000010000000300000002000000000000000000000203000000090000000000000c"], 0x0, 0x4a}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000000d00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000900)={0x384, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x35, 0x2a, [@mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x5, [{0xc}, {0x18, 0x1}, {0x30}, {0x6, 0x1}, {0x24}]}, @rann={0x7e, 0x15, {{0x0, 0x7b}, 0x2, 0x5, @broadcast, 0x2, 0x2}}, @gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x64, 0xfa, "29f3e91aaa00b53b51afb0f1acb78187770aeea25a1b335e25dc5a8574005238b424b0cbb14df49eef3cb2acd0841755a7514b601f373606a17056b9ff678ac370123a4809385b6f8670332065f29e11cf5e9003e6677bfd1d6042e866dbd8ca"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "95598c11019e53efdef06ed53c9e"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x52, 0xfc, "8479014b1d4f714df7180b6620878d9d650a00785a40d95d18acfe6343410dd03c4fb4fb60958b1ee39710f07f5a5d04e89f8d54ae9a0edfbbc20d50c51a3b77624ec371e80107e2b6d5997ca213"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "936f5dc4f0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9fe}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}], @NL80211_ATTR_IE={0x241, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @measure_req={0x26, 0x1e, {0x40, 0x2, 0x9, "869e306ecd19b777d4249d97ffed3651c533792bdae53ee4c307a2"}}, @mesh_chsw={0x76, 0x6, {0x5, 0xfe, 0x14, 0x4742}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x9, @device_a, 0x2, @value=@broadcast, 0x0, 0x2, @device_b, 0x6}}, @random_vendor={0xdd, 0xe5, "069d07b6d121b77e4d2b97bd1f3785066520d372c31da5a0cf8cc2f4dd88177458fe4b76a63c18840a3e310f4a8151d1816b60a2768536ca5dd3eeb8dc0899552efae3a3b4ee3be91b273ca01c67e3e44ff99488f99ea0222e8e387e517fe6fc71ec4f299210b6405e350df2949ba8a8e9a370af1b3be7a3da395787c05aac27db0084b1da6f71c0ef7e5ee465e053ba7cf0e0a0f799348b69ad399c087cffa43ba28bf280bff9e46fcc889c6fed8a14799592033f0265287930d0bd94c65655ca060db26c4ad6dfc69c996e0eb147effa3cc2891c9026030fc1a9797dd88d9872fcee9626"}, @measure_req={0x26, 0x1f, {0x5, 0xf, 0x0, "852542d2f9df4d92c415c10f81645d77a064cc7441f80a1bfbdfd721"}}, @measure_req={0x26, 0x36, {0x10, 0x0, 0x7, "30e0e9d9c41e6463f94a95bdf0ea87769ba988f0a5ac0c67e293bae746386da74b6e1b8747f386ab9df3e240fb81f6a3cd2c57"}}, @perr={0x84, 0xa9, {0x2, 0xb, [{{}, @device_a, 0x2, @void, 0x3b}, {{}, @broadcast, 0xffffff6f, @void, 0x35}, {{}, @device_b, 0xffffffff, @void, 0x20}, {{0x0, 0x1}, @device_a, 0x80000001, @value, 0x32}, {{0x0, 0x1}, @broadcast, 0x5, @value=@device_b, 0x22}, {{}, @broadcast, 0x2, @void, 0x26}, {{}, @device_a, 0x8000, @void, 0x6}, {{0x0, 0x1}, @broadcast, 0x4, @value, 0x35}, {{}, @device_b, 0x6, @void, 0x2b}, {{}, @broadcast, 0x7, @void, 0x2b}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x3a}]}}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x40}, 0x8041) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x7fffffff, @local, 0xa3}, @in={0x2, 0x4e22, @remote}], 0x3c) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x6, 0x9, 0x3, 0x7}, {0x6, 0x8, 0x70, 0x5}]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2e36}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r9, r1}, &(0x7f0000000240)=""/69, 0x45, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000008c0)) 1.458780716s ago: executing program 2 (id=1018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) unshare(0x22020400) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf01, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peek(0x3, r6, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r3, @ANYBLOB="030926bd7000fedbdf256800000008000300", @ANYRES32=r5, @ANYBLOB="2600c7"], 0xa4}, 0x1, 0x0, 0x0, 0x40880}, 0x40840) 1.45666438s ago: executing program 0 (id=1019): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001dc0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001e00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf251b00000008000300", @ANYRES32=r3, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c40)={'ip_vti0\x00', 0x0, 0x700, 0x8000, 0x4, 0x7, {{0x27, 0x4, 0x1, 0x7, 0x9c, 0x67, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x54, 0x4e, 0x3, 0x3, [{@private=0xa010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000000}, {@multicast1, 0x1}, {@local, 0x5}, {@multicast1, 0x2}, {@private=0xa010100, 0x1}, {@local}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast1, 0x7fff}]}, @timestamp={0x44, 0xc, 0x63, 0x0, 0x8, [0x8, 0x40]}, @rr={0x7, 0x27, 0xbf, [@empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}, @remote, @local]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000e40)={'ip6tnl0\x00', &(0x7f0000000dc0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x8, 0x21f, 0x10, @local, @remote, 0x7840, 0x8, 0x1, 0xd4}}) getpeername$packet(r0, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ec0)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000015c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001580)={&(0x7f0000002f00)=ANY=[@ANYBLOB="7c060000", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b40102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010003000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f9ffffff08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="3401028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffff000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRES32=0x0, @ANYBLOB="3802028038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000000400001002400010071756575655f6964000000000000000000000000000000000005000300030000000800040080000000080006000000000000000022567db0d5339fe32700cb6a79410b6a6308a55961d0e8dffa851f1eedd2c8a4a14b85c3caaab36cd5ec656fa090e8e8cec904c447c5b8a6f9f002321202496959f4a9501161a3c9dff6b07492158e4a53852cb0413c46df2b87ea5d234fdfe5f9dfa360097ee0234a6a17b3915067dbb81aa490da90126f70250da6fbb99b928f5865564645190ba759041fe31b01b524df76c44f419445e8f7b3350c5569a3150173bdb078fa3129904c87b976bad944fc4b3976f749c5caa1060df4977bd5a08fefd5ff713d7b7058f859bcafebb7be905d9e0238f493920a588037cc785e85322b333650fa74fc49f774ee96537b7a066902b9597229722048394c0a3482212b8cf76d8a596e81a37b9190276b3a36b39072d68dbea2583ab4a7638893eda95fa544f687ad328f1768ea549580fc1756b1cc4a047946b40c97e5caa653472e267db1ca4ec6d38aa4bc6cea78706db23a959f9f28d3270d725081970b4024db29", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000dcfe0100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001a0000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r6, @ANYBLOB="2801028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400070000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="00000100", @ANYRES32=r4, @ANYBLOB="0000028000000100000001006c625f686173685f737461747300000000000000000000000000000000000000000003000b0000000000040005000000000007000000000000000100000001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000240004000600000000000100000001006c625f686173685f737461747300000000000000000000000000000000000000000003000b0000000000040002060000000007000000000000000100000001006d6f64650000000000000000000000000000000000000000000000000000000000000300050000000000040062726f61646361737400000000000100", @ANYRES32=r6, @ANYBLOB="0000028000000100000001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000000003000300000000000400", @ANYRES32=r4, @ANYBLOB="00000700000000000000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=r5, @ANYBLOB="00000100000001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000000030003000000000004000600000000000100000001006c625f686173685f737461747300000000000000000000000000000000000000000003000b0000000000040007000000000007000000000000000100000001006270665f686173685f66756e6300000000000000000000000000000000000000000003000b00000000000400050000030400000004000206010000000600067f090000000d00020200f81f00ff7fa7040100000000000100000001006e6f746966795f70656572735f696e74657276616c00000000000000000000000000030003000000000004000000010000000100", @ANYRES32=r4, @ANYBLOB="0000028000000100000001006c625f706f72745f737461747300000000000000000000000000000000000000000003000b000000000004000700000000000600", @ANYRES32=r5, @ANYBLOB="00000100000001006d6f64650000000000000000000000000000000000000000000000000000000000000300050000000000040062726f61646361737400000000000100000001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000000003000300000000000400", @ANYRES32=r5, @ANYBLOB="000007005500000000000100", @ANYRES32=0x0, @ANYBLOB="000002800000010000000100656e61626c65640000000000000000000000000000000000000000000000000000000300060000000000040000000600", @ANYRES32=r8, @ANYBLOB="0000010000000100616374697665706f727400000000000000000000000000000000000000000000000003000300000000000400", @ANYRES32=r7, @ANYBLOB], 0x67c}, 0x1, 0x0, 0x0, 0x20048005}, 0x48010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r10 = memfd_create(&(0x7f0000000440)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.h\xfc\x14\x05\x00\xfd\xa4\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k2Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\x04\x87\xe1$a\xcd\xaf\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%u\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\xf7\xa9\xa4\x1c\x15+\x84\x04\xce#\xf6\xda\xaa\xeb|\xb9\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:l\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\xf73\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00\xb2\xc9\xe4\x14A\x92P\x83o\xdb\x1d{E\xe8\xec\x85\xd4\xd2\x19\x18\xfd\xfcc~Y\x8f\xb3\x1d<\x91O\xe7\x04\x11\x1f\xbdz\xf1J\xc2\xb2\xdfH\xa7\xa7\xb80I\xc7P\xe9\n\xc8\xd6\x82\xc0\x1d\x82\x83$ky\xea\x9c5\xf3kF\xf5\xf3\xb2\xf4\r\xe3\xfe\xe0\xef8@|\xf9UGNI\xd2\xd1\xda\xcf:\x94Y\xb0\x80\xc4N\x95\xec\x90{\x19\\\f\x8b\xe1L\x06\xf42\x0e\xd1\xa9i)?\x7f;\xee\xfe\xc2\x10)\x1dQ\xcac\x14\xe8L\x16\x12!\x8120\x8e\xc9--\x96\xe3\x82\x8dT\x9b,\xc6\x83\xcb\x9bW\xa81\x9b\x88\xce\xaa\x01\xe0\x8cfVu\xdc\xf6\'\xc10a\x11\x98\xd6\x9cGp\xfeQ0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x40010040) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0), 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRES8=r1, @ANYRESDEC=r3, @ANYRESOCT=0x0, @ANYRES64=r0], 0x2c4}}, 0x4044050) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x20000004}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a000905", @ANYBLOB="ea"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close(0x3) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0)=0xa, 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000600)={&(0x7f0000000280)=""/217, 0xd9, 0x2, 0x80000001}) 806.454563ms ago: executing program 5 (id=1023): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x141) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000c80)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002880)=""/60, 0x3c}], 0x1}, 0x2}], 0x1, 0x10000, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000300)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x1, 0x0, 0xfc, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e23, 0x9, 0x0, @opaque="e7"}}}}}, 0x0) 799.658606ms ago: executing program 2 (id=1024): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') exit(0xffff) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="34000000000803000000000000000000000000000900010073797a30000000000600024088a80000050003000100d42e695d7cc21eacec000004000480"], 0x34}}, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000020801"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000240)={0x4, 0x9e8f, 0x1, 'queue0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$getsig(0x4202, r4, 0xf, &(0x7f0000000140)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000009"], 0x50) (async) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x7, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r7, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0xffffffff, 0xe, 0xfffffffa, 0x6, 0x200, 0x4, 0x3, 0x40}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0xe4ffffff}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4, 0x0, 0x0, 0x1d}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0xf708, 0x800}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x8}, {0x10}, {0xb9, 0x3}, {0x0, 0x40}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {0xfffffffd, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0xfd6}, {0x0, 0x0, 0x0, 0x0, 0x270e9d48}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xb5}, {0x0, 0xffff000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x9, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x8, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x2}, {}, {}, {}, {0x2}, {}, {0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r9 = fsopen(&(0x7f0000000200)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 651.84709ms ago: executing program 3 (id=1025): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0xfffd, @local}}, 0x1e) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073"], 0xfc}}, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x14, "20854e8c4b94a5715f8227fd4236ff0700000000"}, 0x0}) 547.488212ms ago: executing program 2 (id=1026): openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000000c0)={0x10}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) fcntl$setstatus(r1, 0x4, 0x40800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x733, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) pselect6(0x40, &(0x7f0000000000)={0x100, 0x3ff, 0x0, 0x4, 0x6412, 0x1, 0x5, 0x2}, &(0x7f0000000040)={0x9b4, 0x0, 0x2, 0x0, 0xffff, 0xffffffffffffffff, 0xd, 0x7fffffffffffffff}, &(0x7f0000000080)={0xffffffffffff8001, 0x4, 0x2, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x1}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x1, 0xf0}, 0xfd}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1400225a36000100000018f400dbdf2504000080"], 0x14}], 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_open_dev$sg(&(0x7f0000000200), 0xff, 0x501100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=1027): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04024705"], 0x4a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b50000000008000000000000000001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffff7a0000fbffffff0005000000000000000000000000000000ff7f000000000000080000000000000001"], 0xc4}}, 0x8044) sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) kernel console output (not intermixed with test programs): b 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 259.899356][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.946872][ T5824] usb 6-1: Product: syz [ 259.965189][ T5824] usb 6-1: Manufacturer: syz [ 259.990479][ T5824] usb 6-1: SerialNumber: syz [ 260.015252][ T5824] usb 6-1: config 0 descriptor?? [ 260.288604][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.363535][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.466281][ T5824] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 260.502223][ T5629] Bluetooth: min 6 > max 0 [ 260.510355][ T5824] usb 6-1: USB disconnect, device number 21 [ 261.536629][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.479'. [ 262.388043][ T30] audit: type=1400 audit(1778914642.781:654): avc: denied { read write } for pid=7713 comm="syz.3.480" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 262.413959][ T30] audit: type=1400 audit(1778914642.799:655): avc: denied { open } for pid=7713 comm="syz.3.480" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 262.466987][ T30] audit: type=1400 audit(1778914642.865:656): avc: denied { bind } for pid=7713 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 262.659243][ T5629] Bluetooth: hci3: command 0x0406 tx timeout [ 262.798374][ T7719] No source specified [ 263.438282][ T5730] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 263.537501][ T30] audit: type=1400 audit(1778914643.848:657): avc: denied { mount } for pid=7722 comm="syz.3.483" name="/" dev="autofs" ino=18586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 263.669128][ T5730] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.693150][ T5730] usb 5-1: config 0 has no interface number 0 [ 263.716381][ T5730] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 263.755938][ T5730] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.788428][ T5730] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 263.812847][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.844227][ T5730] usb 5-1: config 0 descriptor?? [ 263.878765][ T5730] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 264.153328][ T7717] iowarrior 5-1:0.1: Error -90 while submitting URB [ 264.377425][ T5629] Bluetooth: hci2: unexpected event for opcode 0x040d [ 264.959857][ T7717] affs: No valid root block on device nullb0 [ 265.017456][ T30] audit: type=1400 audit(1778914645.242:658): avc: denied { getopt } for pid=7736 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 265.078202][ T5730] usb 5-1: USB disconnect, device number 19 [ 266.762136][ T5730] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 266.903396][ T7739] dummy0: entered allmulticast mode [ 266.944837][ T5730] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.966331][ T7739] Invalid source name [ 266.972195][ T30] audit: type=1400 audit(1778914647.076:659): avc: denied { create } for pid=7738 comm="syz.0.486" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 266.995550][ T5730] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.046030][ T30] audit: type=1400 audit(1778914647.076:660): avc: denied { mounton } for pid=7738 comm="syz.0.486" path="/101/file0" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 267.069835][ T5730] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 267.119319][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.166960][ T5730] usb 4-1: config 0 descriptor?? [ 267.182472][ T5730] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 267.210510][ T5730] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 267.514466][ T7755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.492'. [ 268.555638][ T30] audit: type=1400 audit(1778914648.555:661): avc: denied { open } for pid=7744 comm="syz.3.488" path="/dev/ptyqa" dev="devtmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 268.722921][ T30] audit: type=1400 audit(1778914648.583:662): avc: denied { ioctl } for pid=7744 comm="syz.3.488" path="/dev/ptyqa" dev="devtmpfs" ino=129 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 268.767826][ T7760] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 268.777242][ T5824] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 268.808079][ T7760] netlink: 760 bytes leftover after parsing attributes in process `syz.3.488'. [ 268.975271][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.997963][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.050125][ T5824] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 269.094440][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.125431][ T5824] usb 3-1: config 0 descriptor?? [ 269.876124][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 269.886182][ T7771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.491'. [ 270.160618][ T5824] usbhid 3-1:0.0: can't add hid device: -71 [ 270.219388][ T5824] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 270.294756][ T29] usb 4-1: USB disconnect, device number 25 [ 270.323853][ T5824] usb 3-1: USB disconnect, device number 20 [ 271.256251][ T7782] Cannot find add_set index 65532 as target [ 271.592167][ T5824] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 272.669797][ T5824] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.733738][ T5824] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.776417][ T5824] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.798953][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.828435][ T7782] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 272.860551][ T5824] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.427652][ T29] usb 3-1: USB disconnect, device number 21 [ 275.589936][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.504'. [ 276.828074][ T5824] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 276.975625][ T7827] Cannot find add_set index 65532 as target [ 277.273331][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.304108][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.318918][ T5824] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 277.333471][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.346446][ T7830] netlink: 'syz.0.509': attribute type 12 has an invalid length. [ 277.355390][ T7830] netlink: 'syz.0.509': attribute type 2 has an invalid length. [ 277.363538][ T5824] usb 5-1: config 0 descriptor?? [ 277.370636][ T5730] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 277.376031][ T7830] netlink: 452 bytes leftover after parsing attributes in process `syz.0.509'. [ 277.378653][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 277.592166][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.775101][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.821835][ T29] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 277.860128][ T5824] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 278.406299][ T5824] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 278.413893][ T5730] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.424146][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 278.441939][ T5824] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 278.484355][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.493507][ T5730] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 278.517047][ T5824] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 278.530333][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.541257][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.549289][ T5824] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 278.566655][ T7827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 278.574246][ T5730] usb 4-1: config 0 descriptor?? [ 278.579380][ T5824] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 278.593678][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 278.596411][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 278.600494][ T29] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 278.666299][ T5824] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 9: -71 [ 278.716308][ T5824] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -71 [ 278.742536][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.751175][ T5824] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 278.775272][ T5824] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 278.777286][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.098848][ T5824] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -71 [ 280.159907][ T9] usb 3-1: USB disconnect, device number 22 [ 280.180330][ T5730] usbhid 4-1:0.0: can't add hid device: -71 [ 280.202033][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.214118][ T5824] usb 5-1: USB disconnect, device number 20 [ 280.256739][ T29] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 16416, setting to 1024 [ 280.260194][ T5730] usb 4-1: USB disconnect, device number 26 [ 281.137648][ T7848] wg1 speed is unknown, defaulting to 1000 [ 281.952509][ T29] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 281.998122][ T7841] fido_id[7841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 282.647970][ T29] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.942072][ T30] audit: type=1400 audit(1778914661.955:663): avc: denied { connect } for pid=7860 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 283.139608][ T29] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 283.217187][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.276778][ T29] usb 1-1: can't set config #16, error -71 [ 283.343195][ T29] usb 1-1: USB disconnect, device number 22 [ 283.549550][ T806] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 283.763246][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 283.799035][ T806] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 283.845255][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.891055][ T806] usb 4-1: Product: syz [ 283.917989][ T806] usb 4-1: Manufacturer: syz [ 283.976679][ T806] usb 4-1: SerialNumber: syz [ 284.102768][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.516'. [ 284.996241][ T806] usb 4-1: config 0 descriptor?? [ 285.024361][ T806] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 285.036796][ T806] dvb-usb: bulk message failed: -22 (4/0) [ 285.083373][ T806] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.119741][ T806] dvb-usb: bulk message failed: -22 (5/0) [ 285.163395][ T806] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.264814][ T806] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.343168][ T806] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 285.381949][ T806] usb 4-1: media controller created [ 285.434544][ T806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 285.500809][ T806] usb 4-1: selecting invalid altsetting 3 [ 285.505499][ T5730] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 285.528607][ T806] ttusb2: set interface to alts=3 failed [ 285.619752][ T806] DVB: Unable to find symbol tda10086_attach() [ 285.649734][ T806] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 285.685544][ T806] dvb-usb: bulk message failed: -22 (4/0) [ 285.703794][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.730824][ T806] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.764796][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.789770][ T806] dvb-usb: bulk message failed: -22 (5/0) [ 285.817273][ T806] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 285.837384][ T5730] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 285.974294][ T7889] Cannot find add_set index 65532 as target [ 286.131971][ T806] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 286.142425][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.146817][ T806] usb 4-1: USB disconnect, device number 27 [ 286.256245][ T7891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.289994][ T806] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 286.311921][ T5730] usb 6-1: config 0 descriptor?? [ 286.349165][ T5824] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 286.521873][ T5824] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.548038][ T5824] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.591524][ T5824] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.636649][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.668475][ T7889] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.698508][ T5824] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.089977][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.523'. [ 287.099104][ T7896] netlink: 44 bytes leftover after parsing attributes in process `syz.5.523'. [ 287.421067][ T5824] usb 5-1: USB disconnect, device number 21 [ 287.475788][ T5730] usbhid 6-1:0.0: can't add hid device: -71 [ 287.501180][ T5730] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 287.538661][ T5730] usb 6-1: USB disconnect, device number 22 [ 288.117882][ T7899] vlan2: entered promiscuous mode [ 288.159419][ T7899] hsr0: entered promiscuous mode [ 288.183539][ T7899] vlan2: entered allmulticast mode [ 288.212276][ T7899] hsr0: entered allmulticast mode [ 288.233614][ T7899] hsr_slave_0: entered allmulticast mode [ 288.251101][ T7899] hsr_slave_1: entered allmulticast mode [ 288.276612][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.527'. [ 288.361466][ T7903] hsr_slave_1 (unregistering): left promiscuous mode [ 288.695330][ T5624] Bluetooth: hci0: unexpected event for opcode 0x0650 [ 288.711672][ T57] Bluetooth: hci6: Frame reassembly failed (-84) [ 290.858781][ T4933] Bluetooth: hci6: command 0xfc11 tx timeout [ 290.866475][ T5629] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 291.752520][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 291.834519][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.5.534'. [ 292.086912][ T7935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7935 comm=syz.2.535 [ 292.650582][ T7936] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 292.813412][ T7936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.269233][ T7935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7935 comm=syz.2.535 [ 293.438732][ T7917] ubi16: attaching mtd0 [ 293.487009][ T7917] ubi16: scanning is finished [ 293.491906][ T7917] ubi16: empty MTD device detected [ 293.529512][ T7920] netlink: 'syz.4.530': attribute type 10 has an invalid length. [ 293.537383][ T7920] netlink: 40 bytes leftover after parsing attributes in process `syz.4.530'. [ 293.548392][ T7920] bridge0: port 3(veth1_macvtap) entered blocking state [ 293.555764][ T7920] bridge0: port 3(veth1_macvtap) entered disabled state [ 293.563473][ T7920] veth1_macvtap: entered allmulticast mode [ 293.595404][ T7944] affs: No valid root block on device nullb0 [ 293.657817][ T7920] veth1_macvtap: left allmulticast mode [ 293.666271][ T7920] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 293.836504][ T7948] affs: No valid root block on device nullb0 [ 294.021795][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 294.306445][ T7953] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.308541][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.331443][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.371569][ T10] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 294.392423][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.456866][ T10] usb 6-1: config 0 descriptor?? [ 294.483837][ T7917] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 294.519183][ T7917] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 294.561866][ T7917] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 294.588882][ T7917] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 294.705472][ T7917] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 294.753168][ T7917] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 295.690217][ T7917] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2320708849 [ 295.841796][ T7917] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 295.876203][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.538'. [ 295.885035][ T7946] netlink: 44 bytes leftover after parsing attributes in process `syz.5.538'. [ 296.013558][ T7966] ubi16: background thread "ubi_bgt16d" started, PID 7966 [ 296.580872][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 296.604867][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 296.680925][ T10] usb 6-1: USB disconnect, device number 23 [ 296.836333][ T7980] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 297.178625][ T5854] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 297.485368][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.541143][ T5854] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 297.567977][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.623253][ T5854] usb 1-1: config 0 descriptor?? [ 297.655563][ T806] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 297.792117][ T30] audit: type=1400 audit(1778914675.908:664): avc: denied { create } for pid=7981 comm="syz.4.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 297.836916][ T806] usb 3-1: Using ep0 maxpacket: 16 [ 297.863769][ T806] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 297.886678][ T7986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.907756][ T806] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 297.925706][ T7986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.965611][ T806] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 297.987747][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.025779][ T806] usb 3-1: Product: syz [ 298.050795][ T806] usb 3-1: Manufacturer: syz [ 298.081345][ T806] usb 3-1: SerialNumber: syz [ 298.107029][ T806] usb 3-1: config 0 descriptor?? [ 298.250823][ T5854] ath6kl: Failed to read usb control message: -32 [ 298.298918][ T5854] ath6kl: Unable to read the bmi data from the device: -32 [ 298.320610][ T5854] ath6kl: Unable to recv target info: -32 [ 298.339366][ T7990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.352846][ T5854] ath6kl: Failed to init ath6kl core: -32 [ 298.391635][ T5854] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 298.411369][ T7990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.419633][ T30] audit: type=1400 audit(1778914676.470:665): avc: denied { getopt } for pid=7997 comm="syz.5.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 298.475501][ T806] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 298.538711][ T806] usb 3-1: USB disconnect, device number 23 [ 300.183025][ T806] usb 1-1: USB disconnect, device number 23 [ 300.348241][ T10] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 300.384755][ T8009] Bluetooth: MGMT ver 1.23 [ 300.644537][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 300.663592][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 300.692578][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.192321][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.552'. [ 301.548212][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 301.550027][ T30] audit: type=1400 audit(1778914678.641:666): avc: denied { ioctl } for pid=8017 comm="syz.5.552" path="/dev/sg0" dev="devtmpfs" ino=803 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 301.557251][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 301.872546][ T30] audit: type=1400 audit(1778914679.735:667): avc: denied { getopt } for pid=8008 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.872633][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 302.050299][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.094318][ T10] usb 3-1: Product: syz [ 302.124904][ T10] usb 3-1: Manufacturer: syz [ 302.150514][ T10] usb 3-1: SerialNumber: syz [ 302.332275][ T8030] netlink: 'syz.0.558': attribute type 4 has an invalid length. [ 302.373578][ T8030] netlink: 17 bytes leftover after parsing attributes in process `syz.0.558'. [ 302.425907][ T30] audit: type=1400 audit(1778914680.250:668): avc: denied { mounton } for pid=8006 comm="syz.2.553" path="/118/file0" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 302.556733][ T30] audit: type=1400 audit(1778914680.372:669): avc: denied { read write } for pid=8006 comm="syz.2.553" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 302.664127][ T30] audit: type=1400 audit(1778914680.372:670): avc: denied { open } for pid=8006 comm="syz.2.553" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 303.171387][ T8037] Cannot find add_set index 65532 as target [ 303.385771][ T10] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 303.454977][ T10] usb 3-1: 1:1 : unsupported format bits 0x2002 [ 303.476037][ T10] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 303.532460][ T5824] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 303.944993][ T10] usb 3-1: unit 3 not found! [ 304.102305][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 304.136150][ T5824] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 304.151818][ T5824] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 304.177784][ T10] usb 3-1: USB disconnect, device number 24 [ 304.189789][ T5824] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.267969][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.311417][ T8037] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 304.418587][ T8043] netlink: 72 bytes leftover after parsing attributes in process `syz.2.560'. [ 304.440656][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 304.443411][ T5824] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.536545][ T30] audit: type=1400 audit(1778914682.215:671): avc: denied { getopt } for pid=8044 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 304.857418][ T8054] vlan1: entered allmulticast mode [ 304.878550][ T8054] veth0_vlan: entered allmulticast mode [ 304.914193][ T8052] vlan1: entered promiscuous mode [ 305.046821][ T5738] usb 6-1: USB disconnect, device number 24 [ 305.348985][ T5824] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 305.532920][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 305.545494][ T8065] macvlan0: mtu less than device minimum [ 305.558880][ T5824] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 305.591281][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 305.613339][ T8050] vlan1: left promiscuous mode [ 305.640044][ T5824] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 305.651389][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.683358][ T8050] vlan1: left allmulticast mode [ 305.688886][ T5824] usb 4-1: Product: syz [ 305.704846][ T5824] usb 4-1: Manufacturer: syz [ 305.727458][ T8050] veth0_vlan: left allmulticast mode [ 305.737705][ T5824] usb 4-1: SerialNumber: syz [ 305.784617][ T5824] usb 4-1: config 0 descriptor?? [ 307.010711][ T8057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.027914][ T8057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.074901][ T5824] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 307.115596][ T5824] usb 4-1: USB disconnect, device number 28 [ 307.300875][ T30] audit: type=1400 audit(1778914684.807:672): avc: denied { ioctl } for pid=8059 comm="syz.2.565" path="socket:[19517]" dev="sockfs" ino=19517 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 307.603706][ T5738] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 307.635769][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 307.806727][ T5738] usb 5-1: Using ep0 maxpacket: 32 [ 307.818159][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 307.846249][ T9] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 307.863591][ T8078] loop7: detected capacity change from 0 to 16384 [ 307.894722][ T5738] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 307.909751][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 308.110189][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 308.227620][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 308.245260][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.265359][ T9] usb 6-1: Product: syz [ 308.278755][ T9] usb 6-1: Manufacturer: syz [ 308.294158][ T9] usb 6-1: SerialNumber: syz [ 308.310302][ T9] usb 6-1: config 0 descriptor?? [ 308.320536][ T5738] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 308.378320][ T5738] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 308.407758][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.432943][ T5738] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 308.439618][ T8078] loop7: detected capacity change from 16384 to 0 [ 308.452102][ C0] I/O error, dev loop7, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 308.462759][ C1] I/O error, dev loop7, sector 392 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 2 [ 308.505544][ T5738] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.571380][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.587077][ T5730] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 308.587539][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.607821][ T5738] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 308.637421][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.668415][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 308.678232][ T9] usb 6-1: USB disconnect, device number 25 [ 308.682406][ T5738] usb 5-1: config 0 descriptor?? [ 308.817069][ T5730] usb 1-1: unable to get BOS descriptor or descriptor too short [ 308.825881][ T5730] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 308.863240][ T5730] usb 1-1: can't read configurations, error -71 [ 308.980086][ T5738] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 309.450861][ C0] usblp0: nonzero read bulk status received: -71 [ 309.451105][ T5738] usb 5-1: USB disconnect, device number 22 [ 309.464363][ T8101] usblp0: error -71 reading from printer [ 309.556485][ T30] audit: type=1400 audit(1778914686.913:673): avc: denied { create } for pid=8103 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 311.077764][ T8112] Cannot find add_set index 65532 as target [ 311.440062][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 311.550528][ T8076] usblp0: removed [ 311.587143][ T30] audit: type=1400 audit(1778914688.822:674): avc: denied { bind } for pid=8103 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 311.657751][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.780265][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 311.802144][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.821972][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.759024][ T8112] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 312.775760][ T30] audit: type=1400 audit(1778914689.599:675): avc: denied { write } for pid=8115 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 312.797319][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.004421][ T30] audit: type=1400 audit(1778914690.162:676): avc: denied { bind } for pid=8125 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.408778][ T5854] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 314.591625][ T5854] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.593804][ T10] usb 6-1: USB disconnect, device number 26 [ 314.691762][ T5854] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.742652][ T30] audit: type=1400 audit(1778914691.947:677): avc: denied { ioctl } for pid=8131 comm="syz.3.581" path="socket:[18354]" dev="sockfs" ino=18354 ioctlcmd=0x5320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.769400][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 314.898959][ T8135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=8135 comm=syz.3.581 [ 314.962858][ T5854] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.967782][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.584'. [ 315.468713][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.506432][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 315.524500][ T8128] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.557637][ T30] audit: type=1326 audit(1778914692.763:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.3.585" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf6af9ce59 code=0x0 [ 315.558436][ T5854] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.678737][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 315.871438][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 315.917784][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.126294][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.731454][ T29] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 316.840231][ T8151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.884266][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.932882][ T8151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.954319][ T29] usb 5-1: config 0 descriptor?? [ 317.386852][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 317.469571][ T10] libceph: connect (1)[c::]:6789 error -101 [ 317.483230][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 317.501702][ T10] libceph: connect (1)[c::]:6789 error -101 [ 317.508647][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 317.565357][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 317.625724][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 317.642087][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 317.685916][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 317.717631][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 317.727407][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 317.739368][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 317.754264][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 317.764148][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.788359][ T9] usb 4-1: config 0 descriptor?? [ 318.117155][ T30] audit: type=1400 audit(1778914694.969:679): avc: denied { read } for pid=8160 comm="syz.5.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.139975][ T10] libceph: connect (1)[c::]:6789 error -101 [ 318.146815][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 318.181243][ T5730] usb 3-1: USB disconnect, device number 25 [ 318.591743][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 318.608864][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 318.614938][ T8161] ceph: No mds server is up or the cluster is laggy [ 318.667226][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 318.682104][ T9] libceph: connect (1)[c::]:6789 error -101 [ 318.705288][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 319.036367][ T29] usb 5-1: USB disconnect, device number 23 [ 319.453135][ C1] usblp0: nonzero read bulk status received: -71 [ 319.459541][ T8177] usblp0: error -71 reading from printer [ 319.462679][ T5854] usb 4-1: USB disconnect, device number 29 [ 319.832971][ T5730] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 320.187330][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.198423][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.226176][ T5730] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 320.246279][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.300108][ T5854] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 320.300845][ T5730] usb 5-1: config 0 descriptor?? [ 320.491601][ T5854] usb 6-1: Using ep0 maxpacket: 8 [ 320.518825][ T5854] usb 6-1: config 1 has an invalid descriptor of length 130, skipping remainder of the config [ 320.569649][ T5854] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 320.613463][ T5854] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 320.666076][ T5854] usb 6-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 320.697654][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.732751][ T5854] usb 6-1: Product: syz [ 320.762330][ T5854] usb 6-1: Manufacturer: 鯴ည䘣倓䆬î—畗쟆Ùì§Ä脵ᇑ삞å½âž’䂣땤˿æ¯éŠ©æ©¾è”ƒéŸ¿æˆî·‘ê¾µá–æœç‹Ÿ [ 320.825468][ T5854] usb 6-1: SerialNumber: syz [ 321.101065][ T8159] usblp0: removed [ 321.270467][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 321.393436][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 321.402639][ T8195] netlink: 44 bytes leftover after parsing attributes in process `syz.4.592'. [ 321.749854][ T5730] usbhid 5-1:0.0: can't add hid device: -71 [ 321.756458][ T5730] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 321.783692][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 321.807643][ T5730] usb 5-1: USB disconnect, device number 24 [ 321.816205][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 321.841395][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 321.856730][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.876125][ T8192] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 321.907195][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.099711][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.201786][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.296650][ T5854] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 323.423345][ T30] audit: type=1400 audit(1778914700.239:680): avc: denied { ioctl } for pid=8204 comm="syz.4.599" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 323.621662][ T5854] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 323.673127][ T5854] usb 6-1: USB disconnect, device number 27 [ 323.760895][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 323.828395][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.5.601'. [ 323.832146][ T8206] binder: BINDER_SET_CONTEXT_MGR already set [ 323.843778][ T8206] binder: 8204:8206 ioctl 4018620d 200000000040 returned -16 [ 324.004367][ T8206] binder: 8204:8206 ioctl c0306201 2000000016c0 returned -14 [ 324.218121][ T5854] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 324.375840][ T5709] usb 3-1: USB disconnect, device number 26 [ 324.450572][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.541345][ T5854] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.660001][ T5854] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 324.767815][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.800050][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.877787][ T5854] usb 6-1: Product: syz [ 324.924497][ T5854] usb 6-1: Manufacturer: syz [ 324.971404][ T5854] usb 6-1: SerialNumber: syz [ 325.661914][ T806] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 325.742931][ T8212] tipc: Invalid UDP bearer configuration [ 325.743078][ T8212] tipc: Enabling of bearer rejected, failed to enable media [ 325.874767][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 326.031193][ T806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.154339][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.601'. [ 326.175550][ T806] usb 4-1: config 0 has no interfaces? [ 326.290968][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.5.601'. [ 326.345269][ T806] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 326.369086][ T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.387424][ T806] usb 4-1: Product: syz [ 326.396320][ T806] usb 4-1: Manufacturer: syz [ 326.405514][ T806] usb 4-1: SerialNumber: syz [ 326.441863][ T806] usb 4-1: config 0 descriptor?? [ 326.521693][ T5854] usb 6-1: 0:1 : does not exist [ 326.532006][ T5854] usb 6-1: BAAD SPEAKER p_chmask mismatch [ 326.609571][ T8228] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 326.636339][ T5854] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 326.697182][ T29] usb 4-1: USB disconnect, device number 30 [ 326.757566][ T5854] usb 6-1: USB disconnect, device number 28 [ 326.791906][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.734608][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 328.134666][ T8245] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 328.141302][ T8245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 328.149033][ T8245] vhci_hcd vhci_hcd.0: Device attached [ 328.199424][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 328.407942][ T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 328.417465][ T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 328.426153][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 328.437438][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 328.448283][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 328.457965][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 328.516176][ T8247] vhci_hcd: connection closed [ 328.517989][ T3321] vhci_hcd vhci_hcd.5: stop threads [ 328.557612][ T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 328.717850][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.852731][ T10] usb 3-1: config 0 descriptor?? [ 329.759787][ T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 329.832515][ T3321] vhci_hcd vhci_hcd.5: release socket [ 329.838236][ T3321] vhci_hcd vhci_hcd.5: disconnect device [ 330.244936][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 330.547262][ T9] usb 3-1: USB disconnect, device number 27 [ 330.659466][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 330.740157][ T9] usblp0: removed [ 330.755767][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 330.820580][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 330.907750][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.034416][ T8257] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 331.171853][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.896818][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.617'. [ 332.014545][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.028888][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.895522][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 332.904363][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 332.913123][ T8278] netlink: 'syz.4.619': attribute type 13 has an invalid length. [ 332.920889][ T8278] netlink: 'syz.4.619': attribute type 12 has an invalid length. [ 333.024294][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.620'. [ 333.133036][ T8283] netlink: 72 bytes leftover after parsing attributes in process `syz.5.620'. [ 333.175222][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.5.620'. [ 333.191075][ T9] usb 1-1: USB disconnect, device number 26 [ 333.543127][ T5708] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 333.903399][ T5708] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 334.399715][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.670068][ T5708] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 334.705869][ T5708] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.796287][ T5708] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 334.864826][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 334.914205][ T5708] usb 5-1: Product: syz [ 334.934177][ T5708] usb 5-1: Manufacturer: syz [ 334.983784][ T5708] cdc_wdm 5-1:1.0: skipping garbage [ 334.993643][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 335.016565][ T8312] netlink: 72 bytes leftover after parsing attributes in process `syz.2.628'. [ 335.025603][ T5708] cdc_wdm 5-1:1.0: skipping garbage [ 335.025673][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.628'. [ 335.080651][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 335.089799][ T5708] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 335.118490][ T8314] netlink: 24 bytes leftover after parsing attributes in process `syz.5.629'. [ 335.218538][ T8288] mmap: syz.4.622 (8288) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 335.223114][ T10] usb 1-1: device descriptor read/64, error -71 [ 335.644670][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 335.795261][ T10] usb 1-1: device descriptor read/64, error -71 [ 335.936599][ T10] usb usb1-port1: attempt power cycle [ 336.090149][ T5730] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 336.867803][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 336.972990][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.029377][ T10] usb 1-1: device descriptor read/8, error -71 [ 337.057314][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.144889][ T5730] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 337.208244][ T5730] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.287635][ T5730] usb 3-1: config 0 descriptor?? [ 337.365470][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 337.401109][ T5824] usb 5-1: USB disconnect, device number 25 [ 337.475163][ T10] usb 1-1: device descriptor read/8, error -71 [ 337.611594][ T8334] netlink: 'syz.3.634': attribute type 2 has an invalid length. [ 337.656068][ T10] usb usb1-port1: unable to enumerate USB device [ 337.821806][ T5730] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 337.842781][ T5730] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 337.882766][ T5730] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 337.920172][ T5730] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 337.951331][ T5730] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0 [ 338.041217][ T5730] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 338.123553][ T5824] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 338.167990][ T5730] playstation 0003:054C:0DF2.000A: Invalid reportID received, expected 9 got 32 [ 338.194082][ T5730] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense pairing info: -22 [ 338.298825][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 338.309930][ T5730] playstation 0003:054C:0DF2.000A: Failed to get MAC address from DualSense [ 338.383090][ T5824] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 338.425690][ T5730] playstation 0003:054C:0DF2.000A: Failed to create dualsense. [ 338.485150][ T5824] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 338.573372][ T5824] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 338.679127][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 338.694027][ T5730] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22 [ 338.755279][ T5824] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 338.817942][ T5730] usb 3-1: USB disconnect, device number 28 [ 338.826944][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 338.932163][ T5824] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 339.022670][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.146169][ T5824] usb 5-1: config 0 descriptor?? [ 339.628064][ T5824] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 339.955166][ T10] usb 5-1: USB disconnect, device number 26 [ 340.103102][ T5824] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 340.279550][ T10] usblp0: removed [ 340.442053][ T5824] usb 3-1: Using ep0 maxpacket: 32 [ 340.454648][ T5824] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 340.463807][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.473737][ T5824] usb 3-1: Product: syz [ 340.480689][ T5824] usb 3-1: Manufacturer: syz [ 340.485547][ T5824] usb 3-1: SerialNumber: syz [ 340.688174][ T8365] m>e5nè‹Ò: entered promiscuous mode [ 340.929748][ T5824] usb 3-1: config 0 descriptor?? [ 340.978811][ T5824] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 340.998292][ T5824] dvb-usb: bulk message failed: -22 (4/0) [ 341.004486][ T5824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 341.064973][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 341.077978][ T5824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 341.257285][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 341.288143][ T5824] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 341.340152][ T5824] usb 3-1: media controller created [ 341.460981][ T30] audit: type=1400 audit(1778914716.912:681): avc: denied { bind } for pid=8370 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 341.481669][ T8371] __nla_validate_parse: 2 callbacks suppressed [ 341.481679][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 341.506577][ T8373] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 341.522042][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.537045][ T8373] audit: out of memory in audit_log_start [ 341.665983][ T5824] usb 3-1: selecting invalid altsetting 3 [ 341.680121][ T5824] ttusb2: set interface to alts=3 failed [ 341.794865][ T5824] DVB: Unable to find symbol tda10086_attach() [ 341.806007][ T5824] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 341.886628][ T5824] dvb-usb: bulk message failed: -22 (4/0) [ 341.917511][ T5824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 341.999086][ T5824] dvb-usb: bulk message failed: -22 (5/0) [ 342.056069][ T5824] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 342.097389][ T5824] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 342.674976][ T5824] usb 3-1: USB disconnect, device number 29 [ 342.963069][ T5824] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 343.107771][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'. [ 343.163294][ T8389] netlink: 72 bytes leftover after parsing attributes in process `syz.2.651'. [ 343.225752][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'. [ 343.994745][ T8407] FAULT_INJECTION: forcing a failure. [ 343.994745][ T8407] name failslab, interval 1, probability 0, space 0, times 0 [ 344.015605][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.2.654 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.015625][ T8407] Tainted: [L]=SOFTLOCKUP [ 344.015629][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.015635][ T8407] Call Trace: [ 344.015638][ T8407] [ 344.015643][ T8407] dump_stack_lvl+0x100/0x190 [ 344.015663][ T8407] should_fail_ex.cold+0x5/0xa [ 344.015687][ T8407] ? tomoyo_realpath_from_path+0xb6/0x690 [ 344.015711][ T8407] should_failslab+0xc2/0x120 [ 344.015728][ T8407] __kmalloc_noprof+0xe0/0x850 [ 344.015745][ T8407] ? kfree+0x1dd/0x6c0 [ 344.015760][ T8407] tomoyo_realpath_from_path+0xb6/0x690 [ 344.015778][ T8407] tomoyo_path_number_perm+0x23c/0x580 [ 344.015791][ T8407] ? tomoyo_path_number_perm+0x22e/0x580 [ 344.015804][ T8407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 344.015829][ T8407] ? find_held_lock+0x2b/0x80 [ 344.015840][ T8407] ? __fget_files+0x215/0x3d0 [ 344.015852][ T8407] ? hook_file_ioctl_common+0x149/0x410 [ 344.015868][ T8407] ? __fget_files+0x215/0x3d0 [ 344.015883][ T8407] ? __fget_files+0x21f/0x3d0 [ 344.015898][ T8407] security_file_ioctl+0xd3/0x230 [ 344.015913][ T8407] __x64_sys_ioctl+0xb7/0x210 [ 344.015926][ T8407] do_syscall_64+0x10b/0xf80 [ 344.015941][ T8407] ? clear_bhb_loop+0x40/0x90 [ 344.015953][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.015964][ T8407] RIP: 0033:0x7fcf82d9caeb [ 344.015974][ T8407] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 344.015984][ T8407] RSP: 002b:00007fcf83be2450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.016000][ T8407] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007fcf82d9caeb [ 344.016007][ T8407] RDX: 00007fcf83be2bd0 RSI: 000000004020ae46 RDI: 0000000000000004 [ 344.016013][ T8407] RBP: 0000000000000004 R08: 0000000000000001 R09: 0000000000000070 [ 344.016019][ T8407] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000fec00000 [ 344.016025][ T8407] R13: 00007fcf83be2bd0 R14: 0000200000002000 R15: 0000000000000002 [ 344.016038][ T8407] [ 344.016042][ T8407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.430400][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 346.400405][ T8426] nbd: must specify at least one socket [ 346.781471][ T10] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 346.985140][ T10] usb 5-1: config 0 has an invalid interface number: 175 but max is 0 [ 347.015594][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.026833][ T10] usb 5-1: config 0 has no interface number 0 [ 347.032957][ T10] usb 5-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 347.049224][ T10] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 347.060727][ T10] usb 5-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 347.083161][ T10] usb 5-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 347.127667][ T10] usb 5-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 347.150060][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.182098][ T10] usb 5-1: Product: syz [ 347.201987][ T10] usb 5-1: Manufacturer: syz [ 347.222642][ T10] usb 5-1: SerialNumber: syz [ 347.246820][ T10] usb 5-1: config 0 descriptor?? [ 347.282826][ T10] symbolserial 5-1:0.175: symbol converter detected [ 347.326838][ T10] usb 5-1: symbol converter now attached to ttyUSB0 [ 347.494617][ T30] audit: type=1400 audit(1778914722.489:682): avc: denied { name_bind } for pid=8438 comm="syz.3.664" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 347.702641][ T30] audit: type=1400 audit(1778914722.664:683): avc: denied { execute_no_trans } for pid=8438 comm="syz.3.664" path="/138/file0" dev="tmpfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 347.767785][ T8428] macsec1: entered promiscuous mode [ 347.803322][ T8428] bridge0: entered promiscuous mode [ 347.857064][ T5730] usb 5-1: USB disconnect, device number 27 [ 347.872413][ T5730] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 347.886912][ T5730] symbolserial 5-1:0.175: device disconnected [ 347.907476][ T30] audit: type=1400 audit(1778914722.867:684): avc: denied { bind } for pid=8438 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.973464][ T30] audit: type=1400 audit(1778914722.867:685): avc: denied { listen } for pid=8438 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 348.264619][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 349.028751][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 349.767676][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.670'. [ 352.131247][ T8473] tc_dump_action: action bad kind [ 352.147181][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 354.242901][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 354.287079][ T8495] netlink: 72 bytes leftover after parsing attributes in process `syz.5.681'. [ 354.310061][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 355.277358][ T30] audit: type=1400 audit(1778914729.671:686): avc: denied { name_connect } for pid=8511 comm="syz.5.684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 359.019364][ T8525] ceph: No mds server is up or the cluster is laggy [ 360.174817][ T8537] wg1 speed is unknown, defaulting to 1000 [ 360.644403][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.690'. [ 360.888555][ T30] audit: type=1400 audit(1778914734.850:687): avc: denied { create } for pid=8534 comm="syz.3.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 362.391174][ T30] audit: type=1326 audit(1778914736.244:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.694" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf82d9ce59 code=0x0 [ 363.068866][ T5730] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 363.242097][ T5730] usb 6-1: Using ep0 maxpacket: 32 [ 363.273222][ T5730] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 363.293348][ T5730] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 363.321183][ T5730] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 363.346282][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.373034][ T8576] fuse: Bad value for 'fd' [ 363.385706][ T5730] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 363.427916][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 363.481836][ T5730] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 363.529675][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.584243][ T5730] usb 6-1: config 0 descriptor?? [ 363.821226][ T5730] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 364.704411][ T5730] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 364.888517][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 364.914413][ T5730] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 364.938503][ T5730] usb 1-1: config 0 has no interface number 0 [ 364.967264][ C0] usblp0: nonzero read bulk status received: -71 [ 364.975809][ T5730] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 364.987401][ T8593] usblp0: error -71 reading from printer [ 364.989519][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.013076][ T10] usb 6-1: USB disconnect, device number 29 [ 365.035773][ T5730] usb 1-1: Product: syz [ 365.051889][ T5730] usb 1-1: Manufacturer: syz [ 365.070527][ T5730] usb 1-1: SerialNumber: syz [ 365.095258][ T5730] usb 1-1: config 0 descriptor?? [ 365.568460][ T5730] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 365.594123][ T8584] wg1 speed is unknown, defaulting to 1000 [ 365.607805][ T5730] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 366.259427][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 366.319578][ T8615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.707'. [ 366.450611][ T5730] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 366.505353][ T5730] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 366.565647][ T5730] usb 1-1: USB disconnect, device number 31 [ 367.000762][ T5824] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 367.242047][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 367.250982][ T5824] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 367.259801][ T5824] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 367.272988][ T5824] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 367.283818][ T8592] usblp0: removed [ 367.287792][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 367.300402][ T5824] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 367.327590][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 367.736933][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 367.763541][ T5824] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 367.773815][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.791747][ T5824] usb 5-1: config 0 descriptor?? [ 368.049581][ T5824] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 368.426070][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 368.465198][ T8649] netlink: 44 bytes leftover after parsing attributes in process `syz.3.718'. [ 368.550343][ T5824] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 368.729390][ C0] usblp0: nonzero read bulk status received: -71 [ 368.736249][ T5730] usb 5-1: USB disconnect, device number 28 [ 368.743853][ T5824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.751851][ T8652] usblp0: error -71 reading from printer [ 368.761072][ T5824] usb 1-1: not running at top speed; connect to a high speed hub [ 368.786221][ T5824] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.798052][ T5824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.817039][ T5824] usb 1-1: string descriptor 0 read error: -22 [ 368.840900][ T5824] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.850132][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.875585][ T5824] usb 1-1: 0:2 : does not exist [ 369.202556][ T8665] netlink: 36 bytes leftover after parsing attributes in process `syz.2.721'. [ 370.778468][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.826721][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.934174][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.955044][ T8619] usblp0: removed [ 370.973986][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.044594][ T5824] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 371.086688][ T5824] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 371.102117][ T5824] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 371.156856][ T5824] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 371.233407][ T5824] usb 1-1: USB disconnect, device number 32 [ 372.124501][ T8694] macvtap1: entered promiscuous mode [ 372.153614][ T8694] macvtap1: entered allmulticast mode [ 372.219683][ T30] audit: type=1400 audit(1778914745.310:689): avc: denied { append } for pid=8693 comm="syz.0.727" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 372.264827][ T30] audit: type=1400 audit(1778914745.347:690): avc: denied { ioctl } for pid=8693 comm="syz.0.727" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 372.405446][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.728'. [ 372.452580][ T8699] netlink: 72 bytes leftover after parsing attributes in process `syz.5.728'. [ 372.490493][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.728'. [ 373.490861][ T8717] overlayfs: failed lookup in lower (newroot/133, name='bus', err=-40): overlapping layers [ 373.894600][ T8712] team0: Device gtp0 is up. Set it down before adding it as a team port [ 373.929319][ T5824] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 374.014581][ T30] audit: type=1400 audit(1778914746.972:691): avc: denied { accept } for pid=8720 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 374.056787][ T30] audit: type=1400 audit(1778914746.991:692): avc: denied { write } for pid=8720 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 374.106438][ T5824] usb 5-1: device descriptor read/64, error -71 [ 374.116352][ T30] audit: type=1400 audit(1778914747.064:693): avc: denied { read } for pid=8720 comm="syz.3.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 374.224226][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 374.234856][ T5730] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 374.377683][ T5824] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 374.403042][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.423954][ T5730] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.452496][ T5730] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 374.475620][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.502444][ T5730] usb 6-1: config 0 descriptor?? [ 374.519377][ T5824] usb 5-1: device descriptor read/64, error -71 [ 374.638614][ T5824] usb usb5-port1: attempt power cycle [ 374.989609][ T5730] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 374.997520][ T5730] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 375.005027][ T5730] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 375.014763][ T5824] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 375.054206][ T5730] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 375.075220][ T5730] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 375.094136][ T5824] usb 5-1: device descriptor read/8, error -71 [ 375.338325][ T5730] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 375.430003][ T5730] playstation 0003:054C:0DF2.000B: Invalid reportID received, expected 9 got 32 [ 375.450613][ T5730] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22 [ 375.466273][ T5824] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 375.485031][ T5730] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 375.504956][ T5730] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 375.516339][ T5824] usb 5-1: device descriptor read/8, error -71 [ 375.530569][ T5730] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22 [ 375.655926][ T5824] usb usb5-port1: unable to enumerate USB device [ 375.686332][ T5824] usb 6-1: USB disconnect, device number 30 [ 375.815859][ T8744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.852764][ T8744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.067321][ T5730] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 376.241570][ T5730] usb 1-1: Using ep0 maxpacket: 16 [ 376.252092][ T5730] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 376.277961][ T5730] usb 1-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 376.288025][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 376.305419][ T5730] usb 1-1: Product: syz [ 376.311854][ T5730] usb 1-1: Manufacturer: syz [ 376.319045][ T5730] usb 1-1: SerialNumber: syz [ 376.329354][ T5730] usb 1-1: config 0 descriptor?? [ 376.340435][ T5730] pwc: Philips SPC 880NC USB webcam detected. [ 376.542470][ T8758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 376.556711][ T8758] pim6reg: entered allmulticast mode [ 376.586212][ T5730] pwc: Warning: more than 1 configuration available. [ 376.609076][ T5730] pwc: Failed to set LED on/off time (-71) [ 376.629955][ T5730] pwc: send_video_command error -71 [ 376.639521][ T5730] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 376.654002][ T5730] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 376.675006][ T5730] usb 1-1: USB disconnect, device number 33 [ 376.808416][ T8764] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8764 comm=syz.5.744 [ 376.836510][ T8761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8761 comm=syz.5.744 [ 376.859475][ T8756] 9pnet_virtio: no channels available for device syz [ 376.911919][ T805] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 377.066865][ T30] audit: type=1400 audit(1778914749.788:694): avc: denied { read } for pid=8765 comm="syz.5.747" dev="sockfs" ino=22629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 377.089516][ T8766] 9p: Bad value for 'rfdno' [ 377.100010][ T8766] input: syz0 as /devices/virtual/input/input7 [ 377.106226][ T805] usb 5-1: Using ep0 maxpacket: 16 [ 377.132117][ T805] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.155150][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.205202][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.218065][ T805] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 377.228714][ T805] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.264219][ T805] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.275159][ T805] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.299327][ T805] usb 5-1: Manufacturer: syz [ 377.317547][ T805] usb 5-1: config 0 descriptor?? [ 377.379359][ T8767] ref_ctr increment failed for inode: 0x30b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880779fe200 [ 377.497195][ T5730] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 377.848959][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.750'. [ 377.940971][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 377.953064][ T5730] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 377.962447][ T5730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.976697][ T5730] usb 1-1: Product: syz [ 377.990159][ T5730] usb 1-1: Manufacturer: syz [ 378.004286][ T5730] usb 1-1: SerialNumber: syz [ 378.029502][ T5730] usb 1-1: config 0 descriptor?? [ 378.060475][ T805] rc_core: IR keymap rc-hauppauge not found [ 378.068121][ T5730] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 378.077882][ T805] Registered IR keymap rc-empty [ 378.099259][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 378.106793][ T5730] dvb-usb: bulk message failed: -22 (4/0) [ 378.120662][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 378.132624][ T5730] dvb-usb: bulk message failed: -22 (5/0) [ 378.141977][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 378.152302][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 378.186974][ T805] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 378.205451][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 378.218827][ T805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input8 [ 378.234401][ T5730] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 378.247602][ T5730] usb 1-1: media controller created [ 378.297754][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.314465][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 378.363476][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 378.386174][ T5730] usb 1-1: selecting invalid altsetting 3 [ 378.400067][ T5730] ttusb2: set interface to alts=3 failed [ 378.417661][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 378.450084][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 378.466433][ T5730] DVB: Unable to find symbol tda10086_attach() [ 378.474136][ T5730] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 378.559476][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 378.568679][ T5730] dvb-usb: bulk message failed: -22 (4/0) [ 378.574988][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 378.585262][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 378.592577][ T5730] dvb-usb: bulk message failed: -22 (5/0) [ 378.598412][ T5730] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 378.609769][ T5730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 378.619338][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 379.056936][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 379.064765][ T5730] usb 1-1: USB disconnect, device number 34 [ 379.132532][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 379.158010][ T5730] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 379.167548][ T805] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 379.190185][ T805] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 379.204189][ T805] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 379.233379][ T805] usb 5-1: USB disconnect, device number 33 [ 379.634887][ T8803] pim6reg: entered allmulticast mode [ 379.815986][ T30] audit: type=1400 audit(1778914752.336:695): avc: denied { connect } for pid=8801 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.955734][ T5854] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 379.970867][ T8810] netlink: 36 bytes leftover after parsing attributes in process `syz.5.758'. [ 380.150608][ T5854] usb 5-1: Using ep0 maxpacket: 32 [ 380.179616][ T5854] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 380.640829][ T5854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.694777][ T5854] usb 5-1: Product: syz [ 380.713703][ T5854] usb 5-1: Manufacturer: syz [ 380.736752][ T5854] usb 5-1: SerialNumber: syz [ 380.762570][ T5854] usb 5-1: config 0 descriptor?? [ 381.030907][ T5854] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 034 [ 381.243930][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.763'. [ 381.267093][ T805] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 381.466772][ T805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 381.482121][ T805] usb 1-1: not running at top speed; connect to a high speed hub [ 381.496125][ T805] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.512691][ T805] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.596072][ T805] usb 1-1: string descriptor 0 read error: -22 [ 381.604412][ T805] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.147387][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.160655][ T8806] i2c i2c-1: failure reading status [ 382.177837][ T805] usb 1-1: 0:2 : does not exist [ 382.230630][ T5854] usb 5-1: USB disconnect, device number 34 [ 382.860102][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.904249][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.179883][ T8836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.292906][ T8836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.547214][ T805] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 383.580626][ T805] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 383.609386][ T805] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 383.646407][ T805] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 383.726444][ T805] usb 1-1: USB disconnect, device number 35 [ 384.058853][ T30] audit: type=1400 audit(1778914756.241:696): avc: denied { append } for pid=8840 comm="syz.5.771" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 384.326831][ T8849] netlink: 24 bytes leftover after parsing attributes in process `syz.4.774'. [ 385.109968][ T30] audit: type=1400 audit(1778914757.210:697): avc: denied { write } for pid=8851 comm="syz.4.778" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 385.134599][ T8852] binder: 8851:8852 ioctl 8010661b 200000000080 returned -22 [ 385.172999][ T8852] binder: 8851:8852 ioctl c01864c6 2000000000c0 returned -22 [ 385.885606][ T8861] wg1 speed is unknown, defaulting to 1000 [ 385.920132][ T30] audit: type=1400 audit(1778914757.515:698): avc: denied { ioctl } for pid=8853 comm="syz.2.776" path="socket:[22863]" dev="sockfs" ino=22863 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.598703][ T806] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 386.982970][ T8874] netlink: 36 bytes leftover after parsing attributes in process `syz.0.781'. [ 386.988867][ T8878] netlink: 'syz.3.783': attribute type 13 has an invalid length. [ 387.364650][ T806] usb 5-1: Using ep0 maxpacket: 32 [ 387.395326][ T806] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 387.404622][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.435146][ T806] usb 5-1: Product: syz [ 387.452825][ T806] usb 5-1: Manufacturer: syz [ 387.474637][ T806] usb 5-1: SerialNumber: syz [ 387.510737][ T806] usb 5-1: config 0 descriptor?? [ 387.533848][ T806] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 387.545839][ T806] dvb-usb: bulk message failed: -22 (4/0) [ 387.568421][ T806] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 387.589939][ T806] dvb-usb: bulk message failed: -22 (5/0) [ 387.607335][ T806] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 387.660403][ T806] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.682824][ T5730] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 387.698886][ T806] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 387.720427][ T806] usb 5-1: media controller created [ 387.763527][ T806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.823222][ T806] usb 5-1: selecting invalid altsetting 3 [ 387.835365][ T806] ttusb2: set interface to alts=3 failed [ 387.863159][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 387.885909][ T5730] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 387.915106][ T806] DVB: Unable to find symbol tda10086_attach() [ 387.916193][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.942772][ T5730] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 387.954999][ T806] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 387.955112][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.975423][ T5730] usb 6-1: Product: syz [ 387.977803][ T806] dvb-usb: bulk message failed: -22 (4/0) [ 387.979819][ T5730] usb 6-1: Manufacturer: syz [ 387.996675][ T5730] usb 6-1: SerialNumber: syz [ 388.009708][ T5730] usb 6-1: config 0 descriptor?? [ 388.011268][ T806] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 388.055096][ T806] dvb-usb: bulk message failed: -22 (5/0) [ 388.074380][ T806] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 388.110521][ T806] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 388.174482][ T806] usb 5-1: USB disconnect, device number 35 [ 388.234281][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.244929][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.275640][ T5730] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 388.304939][ T5730] usb 6-1: USB disconnect, device number 31 [ 389.115894][ T806] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 390.051147][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.5.788'. [ 390.280973][ T30] audit: type=1400 audit(1778914761.983:699): avc: denied { setopt } for pid=8905 comm="syz.4.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 390.310779][ T8907] tipc: Started in network mode [ 390.358261][ T8907] tipc: Node identity 4255c01945a, cluster identity 4711 [ 390.393580][ T8907] tipc: Enabled bearer , priority 0 [ 390.466769][ T8910] syzkaller0: entered promiscuous mode [ 390.532674][ T8910] syzkaller0: entered allmulticast mode [ 391.178316][ T805] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 391.232612][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.340005][ T805] usb 5-1: device descriptor read/64, error -71 [ 391.372515][ T8914] wg1 speed is unknown, defaulting to 1000 [ 391.408792][ T8927] netlink: 148 bytes leftover after parsing attributes in process `syz.2.796'. [ 391.532528][ T5708] tipc: Node number set to 133546009 [ 391.612553][ T805] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 391.773268][ T805] usb 5-1: device descriptor read/64, error -71 [ 391.892985][ T805] usb usb5-port1: attempt power cycle [ 392.039610][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.799'. [ 392.069298][ T30] audit: type=1400 audit(1778914763.645:700): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 392.120568][ T8938] netlink: 72 bytes leftover after parsing attributes in process `syz.5.799'. [ 392.148757][ T8940] mmap: syz.0.800 (8940): VmData 37535744 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 392.177455][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.799'. [ 392.273126][ T805] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 392.328880][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.801'. [ 393.214358][ T805] usb 5-1: device descriptor read/8, error -71 [ 393.406377][ T8958] dlm: no locking on control device [ 393.484706][ T805] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 393.507628][ T805] usb 5-1: device descriptor read/8, error -71 [ 393.627988][ T8962] FAULT_INJECTION: forcing a failure. [ 393.627988][ T8962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.641212][ T8962] CPU: 0 UID: 0 PID: 8962 Comm: syz.5.806 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.641240][ T8962] Tainted: [L]=SOFTLOCKUP [ 393.641245][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.641256][ T8962] Call Trace: [ 393.641262][ T8962] [ 393.641268][ T8962] dump_stack_lvl+0x100/0x190 [ 393.641294][ T8962] should_fail_ex.cold+0x5/0xa [ 393.641319][ T8962] _copy_from_iter+0x1f4/0x1690 [ 393.641352][ T8962] ? __pfx__copy_from_iter+0x10/0x10 [ 393.641381][ T8962] ? sock_has_perm+0x25a/0x2f0 [ 393.641401][ T8962] ? __pfx_sock_has_perm+0x10/0x10 [ 393.641424][ T8962] hci_sock_sendmsg+0x4a1/0x2620 [ 393.641453][ T8962] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 393.641483][ T8962] sock_write_iter+0x524/0x5a0 [ 393.641505][ T8962] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 393.641528][ T8962] ? __pfx_sock_write_iter+0x10/0x10 [ 393.641559][ T8962] ? bpf_lsm_file_permission+0x9/0x10 [ 393.641575][ T8962] ? security_file_permission+0x76/0x210 [ 393.641600][ T8962] ? rw_verify_area+0xce/0x6d0 [ 393.641618][ T8962] vfs_write+0x6ac/0x1070 [ 393.641638][ T8962] ? __pfx_sock_write_iter+0x10/0x10 [ 393.641662][ T8962] ? __pfx_vfs_write+0x10/0x10 [ 393.641679][ T8962] ? find_held_lock+0x2b/0x80 [ 393.641712][ T8962] ksys_write+0x1f8/0x250 [ 393.641732][ T8962] ? __pfx_ksys_write+0x10/0x10 [ 393.641753][ T8962] ? rcu_is_watching+0x12/0xc0 [ 393.641783][ T8962] do_syscall_64+0x10b/0xf80 [ 393.641806][ T8962] ? clear_bhb_loop+0x40/0x90 [ 393.641828][ T8962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.641845][ T8962] RIP: 0033:0x7fdbd919ce59 [ 393.641866][ T8962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.641883][ T8962] RSP: 002b:00007fdbd73f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 393.641900][ T8962] RAX: ffffffffffffffda RBX: 00007fdbd9416090 RCX: 00007fdbd919ce59 [ 393.641910][ T8962] RDX: 000000000000000d RSI: 0000200000000000 RDI: 000000000000000d [ 393.641920][ T8962] RBP: 00007fdbd73f6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.641930][ T8962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.641939][ T8962] R13: 00007fdbd9416128 R14: 00007fdbd9416090 R15: 00007fff3b2277d8 [ 393.641963][ T8962] [ 393.913197][ T805] usb usb5-port1: unable to enumerate USB device [ 394.039641][ T8971] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 395.044462][ T5730] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 395.220345][ T5730] usb 6-1: Using ep0 maxpacket: 16 [ 395.245850][ T5730] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 395.287282][ T5730] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 395.347137][ T5730] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 395.347166][ T5730] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.347185][ T5730] usb 6-1: Product: syz [ 395.347198][ T5730] usb 6-1: Manufacturer: syz [ 395.347213][ T5730] usb 6-1: SerialNumber: syz [ 395.352805][ T5730] usb 6-1: config 0 descriptor?? [ 395.815097][ T8981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.840344][ T8981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.925685][ T5730] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 395.954056][ T5730] usb 6-1: USB disconnect, device number 32 [ 396.250129][ T9000] netlink: 68 bytes leftover after parsing attributes in process `syz.4.820'. [ 396.324067][ T30] audit: type=1400 audit(1778914767.523:701): avc: denied { create } for pid=8998 comm="syz.4.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 397.175077][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 397.345763][ T13] Bluetooth: hci6: Frame reassembly failed (-84) [ 397.379744][ T9010] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 398.055735][ T5730] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 398.212456][ T5730] usb 6-1: device descriptor read/64, error -71 [ 398.269142][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.832'. [ 398.489209][ T5730] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 398.518351][ T9043] netlink: 'syz.4.835': attribute type 1 has an invalid length. [ 398.564379][ T9043] netlink: 'syz.4.835': attribute type 2 has an invalid length. [ 398.604081][ T9043] netlink: 'syz.4.835': attribute type 2 has an invalid length. [ 398.663003][ T5730] usb 6-1: device descriptor read/64, error -71 [ 398.692120][ T9046] syzkaller0: left promiscuous mode [ 398.705683][ T9043] netlink: 'syz.4.835': attribute type 2 has an invalid length. [ 398.732809][ T9046] syzkaller0: left allmulticast mode [ 398.754854][ T9043] netlink: 'syz.4.835': attribute type 2 has an invalid length. [ 398.790818][ T9043] tipc: Enabling of bearer rejected, already enabled [ 398.805365][ T5730] usb usb6-port1: attempt power cycle [ 399.377246][ T5730] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 399.438481][ T5730] usb 6-1: device descriptor read/8, error -71 [ 399.553585][ T5629] Bluetooth: hci6: command 0x1003 tx timeout [ 399.565482][ T5624] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 399.986325][ T5730] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 400.049755][ T5730] usb 6-1: device descriptor read/8, error -71 [ 400.113787][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 400.193931][ T9082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9082 comm=syz.3.846 [ 400.211971][ T5730] usb usb6-port1: unable to enumerate USB device [ 400.243550][ T9083] sctp: [Deprecated]: syz.4.845 (pid 9083) Use of int in max_burst socket option. [ 400.243550][ T9083] Use struct sctp_assoc_value instead [ 400.308820][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 400.324561][ T9] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 400.354128][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 400.373809][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 400.395802][ T9] usb 1-1: Product: syz [ 400.408346][ T9] usb 1-1: Manufacturer: syz [ 400.428022][ T9] usb 1-1: SerialNumber: syz [ 400.459498][ T9] usb 1-1: config 0 descriptor?? [ 400.477901][ T9] pwc: Philips SPC 880NC USB webcam detected. [ 400.690044][ T9064] FAULT_INJECTION: forcing a failure. [ 400.690044][ T9064] name failslab, interval 1, probability 0, space 0, times 0 [ 400.720450][ T9064] CPU: 1 UID: 0 PID: 9064 Comm: syz.0.841 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.720479][ T9064] Tainted: [L]=SOFTLOCKUP [ 400.720485][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 400.720494][ T9064] Call Trace: [ 400.720500][ T9064] [ 400.720506][ T9064] dump_stack_lvl+0x100/0x190 [ 400.720531][ T9064] should_fail_ex.cold+0x5/0xa [ 400.720553][ T9064] ? tomoyo_encode2+0xfb/0x3c0 [ 400.720573][ T9064] should_failslab+0xc2/0x120 [ 400.720585][ T9064] __kmalloc_noprof+0xe0/0x850 [ 400.720604][ T9064] ? d_absolute_path+0x136/0x1b0 [ 400.720636][ T9064] tomoyo_encode2+0xfb/0x3c0 [ 400.720661][ T9064] tomoyo_encode+0x29/0x50 [ 400.720682][ T9064] tomoyo_realpath_from_path+0x18c/0x690 [ 400.720700][ T9064] tomoyo_path_number_perm+0x23c/0x580 [ 400.720712][ T9064] ? tomoyo_path_number_perm+0x22e/0x580 [ 400.720726][ T9064] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 400.720758][ T9064] ? find_held_lock+0x2b/0x80 [ 400.720774][ T9064] ? __fget_files+0x215/0x3d0 [ 400.720793][ T9064] ? hook_file_ioctl_common+0x149/0x410 [ 400.720817][ T9064] ? __fget_files+0x215/0x3d0 [ 400.720836][ T9064] ? __fget_files+0x21f/0x3d0 [ 400.720851][ T9064] security_file_ioctl+0xd3/0x230 [ 400.720867][ T9064] __x64_sys_ioctl+0xb7/0x210 [ 400.720880][ T9064] do_syscall_64+0x10b/0xf80 [ 400.720897][ T9064] ? clear_bhb_loop+0x40/0x90 [ 400.720918][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.720933][ T9064] RIP: 0033:0x7f578bd9ce59 [ 400.720947][ T9064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.720961][ T9064] RSP: 002b:00007f578cc77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.720977][ T9064] RAX: ffffffffffffffda RBX: 00007f578c015fa0 RCX: 00007f578bd9ce59 [ 400.720983][ T9064] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000007 [ 400.720989][ T9064] RBP: 00007f578cc77090 R08: 0000000000000000 R09: 0000000000000000 [ 400.720995][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.721000][ T9064] R13: 00007f578c016038 R14: 00007f578c015fa0 R15: 00007ffec5e5c6c8 [ 400.721014][ T9064] [ 400.721025][ T9064] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.054730][ T30] audit: type=1400 audit(1778914771.935:702): avc: denied { ioctl } for pid=9062 comm="syz.0.841" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x5608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 401.181603][ T9] pwc: Warning: more than 1 configuration available. [ 401.265911][ T9] pwc: Failed to set LED on/off time (-71) [ 401.299339][ T9] pwc: send_video_command error -71 [ 401.726444][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 401.742716][ T9] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 401.869926][ T9] usb 1-1: USB disconnect, device number 36 [ 403.390501][ T30] audit: type=1400 audit(1778914774.059:703): avc: denied { setopt } for pid=9118 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 403.693403][ T30] audit: type=1400 audit(1778914774.068:704): avc: denied { write } for pid=9118 comm="syz.5.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.027492][ T30] audit: type=1400 audit(1778914774.668:705): avc: denied { setopt } for pid=9142 comm="syz.5.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.120238][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 404.641571][ T30] audit: type=1326 audit(1778914775.240:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9144 comm="syz.4.862" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f775979ce59 code=0x0 [ 407.230048][ T30] audit: type=1400 audit(1778914777.632:707): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 407.347238][ T9185] lo: entered allmulticast mode [ 407.753083][ T29] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 409.007159][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 409.326129][ T29] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 409.380450][ T29] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6 [ 409.451795][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 121, changing to 7 [ 409.518974][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25344, setting to 1024 [ 409.578251][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 409.712255][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 409.763228][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.852054][ T29] usb 6-1: Product: syz [ 409.872916][ T29] usb 6-1: Manufacturer: syz [ 409.892425][ T29] usb 6-1: SerialNumber: syz [ 409.963275][ T29] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 410.021563][ T29] usbtest 6-1:1.0: Linux user mode ISO test driver [ 410.069227][ T29] usbtest 6-1:1.0: high-speed {control iso-out} tests (+alt) [ 411.571947][ T29] usb 6-1: USB disconnect, device number 37 [ 411.743304][ T9185] lo: left allmulticast mode [ 413.052810][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 414.173713][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.889'. [ 415.267851][ T9262] xt_ecn: cannot match TCP bits for non-tcp packets [ 415.437794][ T9266] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.897'. [ 415.481153][ T9266] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 416.995800][ T9279] fuse: fd is not a fuse device [ 417.374899][ T9284] Cannot find add_set index 65532 as target [ 417.715734][ T5854] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 417.830276][ T9292] netlink: 148 bytes leftover after parsing attributes in process `syz.4.905'. [ 418.014823][ T5854] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.070574][ T5854] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 418.139779][ T5854] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 418.200844][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.260600][ T9284] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 418.304294][ T5854] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 418.387976][ T30] audit: type=1400 audit(1778914787.934:708): avc: denied { bind } for pid=9298 comm="syz.2.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.451156][ T30] audit: type=1400 audit(1778914787.944:709): avc: denied { name_bind } for pid=9298 comm="syz.2.907" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 418.550892][ T30] audit: type=1400 audit(1778914787.944:710): avc: denied { node_bind } for pid=9298 comm="syz.2.907" saddr=224.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 419.204808][ T5624] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 419.323162][ T9] usb 6-1: USB disconnect, device number 38 [ 419.338090][ T9279] wg1 speed is unknown, defaulting to 1000 [ 419.504097][ T9310] vcan1: entered promiscuous mode [ 419.509599][ T9310] vcan1: entered allmulticast mode [ 419.554481][ T9311] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 419.578859][ T9311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.910'. [ 419.653096][ T9312] veth1: entered promiscuous mode [ 419.673805][ T9312] macsec1: entered allmulticast mode [ 419.683488][ T9312] veth1: entered allmulticast mode [ 420.208670][ T9323] netlink: 72 bytes leftover after parsing attributes in process `syz.2.914'. [ 420.235713][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'. [ 420.488568][ T5730] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 421.372230][ T9332] netlink: 148 bytes leftover after parsing attributes in process `syz.5.916'. [ 421.641948][ T5730] usb 1-1: Using ep0 maxpacket: 8 [ 421.651976][ T5730] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.661958][ T5730] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.672060][ T5730] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.682263][ T5730] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.772476][ T9340] 8021q: VLANs not supported on lo [ 421.818272][ T5730] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.312049][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.760819][ T5730] usb 1-1: usb_control_msg returned -71 [ 423.976685][ T5730] usbtmc 1-1:16.0: can't read capabilities [ 424.116417][ T5730] usb 1-1: USB disconnect, device number 37 [ 424.301415][ T9] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 424.327900][ T30] audit: type=1400 audit(1778914793.418:711): avc: denied { ioctl } for pid=9363 comm="syz.0.925" path="socket:[25218]" dev="sockfs" ino=25218 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 424.716966][ T9] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 424.729589][ T30] audit: type=1400 audit(1778914793.704:712): avc: denied { bind } for pid=9363 comm="syz.0.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 424.729682][ T9] usb 6-1: config 0 has no interface number 0 [ 424.805151][ T9] usb 6-1: config 0 interface 2 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.860317][ T30] audit: type=1400 audit(1778914793.704:713): avc: denied { name_bind } for pid=9363 comm="syz.0.925" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 424.968758][ T9] usb 6-1: config 0 interface 2 has no altsetting 0 [ 425.013101][ T9] usb 6-1: New USB device found, idVendor=174f, idProduct=5f31, bcdDevice=26.3f [ 425.044160][ T30] audit: type=1400 audit(1778914793.704:714): avc: denied { node_bind } for pid=9363 comm="syz.0.925" saddr=fe80::3f src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 425.044253][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.109085][ T9] usb 6-1: Product: syz [ 425.118792][ T9] usb 6-1: Manufacturer: syz [ 425.166957][ T9] usb 6-1: SerialNumber: syz [ 425.172895][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 425.226239][ T9] usb 6-1: config 0 descriptor?? [ 425.277904][ T9379] netlink: 72 bytes leftover after parsing attributes in process `syz.2.928'. [ 425.311859][ T9379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'. [ 425.590627][ T9] usb 6-1: USB disconnect, device number 39 [ 425.679055][ T9383] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 426.136069][ T9385] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 426.145390][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.154651][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.165602][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.172684][ T9385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.181031][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.188148][ T9385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.197557][ T9385] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 426.245336][ T9387] netlink: 148 bytes leftover after parsing attributes in process `syz.0.931'. [ 426.374194][ T30] audit: type=1400 audit(1778914795.311:715): avc: denied { read } for pid=9392 comm="syz.2.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 428.151662][ T9402] SET target dimension over the limit! [ 429.540819][ T30] audit: type=1400 audit(1778914798.219:716): avc: denied { read write } for pid=9423 comm="syz.4.941" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 429.887828][ T30] audit: type=1400 audit(1778914798.228:717): avc: denied { open } for pid=9423 comm="syz.4.941" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 430.054845][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 431.509947][ T9437] netlink: 148 bytes leftover after parsing attributes in process `syz.3.944'. [ 431.676117][ T9446] overlayfs: missing 'workdir' [ 431.756882][ T9446] overlayfs: missing 'lowerdir' [ 431.775908][ T5730] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 431.992640][ T5730] usb 6-1: Using ep0 maxpacket: 8 [ 432.007341][ T5730] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 432.040129][ T5730] usb 6-1: config 0 has no interface number 0 [ 432.049979][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 432.073906][ T5730] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 432.116233][ T5730] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 432.176351][ T5730] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 432.209940][ T5730] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 432.229272][ T5730] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 432.242491][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.252011][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 432.260714][ T5730] usb 6-1: config 0 descriptor?? [ 432.271908][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.298710][ T5730] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 432.315056][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.328511][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.344499][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.366690][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.384561][ T10] usb 5-1: config 0 descriptor?? [ 432.535566][ T5730] usb 6-1: USB disconnect, device number 40 [ 432.561447][ T5730] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 432.730705][ T30] audit: type=1400 audit(1778914801.182:718): avc: denied { read } for pid=9464 comm="syz.3.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 432.834425][ T10] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 432.870041][ T10] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 432.886494][ T10] microsoft 0003:045E:07DA.000C: usage index exceeded [ 432.910860][ T30] audit: type=1400 audit(1778914801.339:719): avc: denied { name_bind } for pid=9462 comm="syz.0.949" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 432.936663][ T10] microsoft 0003:045E:07DA.000C: item 0 2 2 2 parsing failed [ 432.948183][ T10] microsoft 0003:045E:07DA.000C: parse failed [ 432.963873][ T10] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 433.048966][ T5708] usb 5-1: USB disconnect, device number 40 [ 434.269624][ T9489] netlink: 148 bytes leftover after parsing attributes in process `syz.4.957'. [ 434.441004][ T30] audit: type=1400 audit(1778914802.752:720): avc: denied { connect } for pid=9496 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 434.467244][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 434.550120][ T30] audit: type=1400 audit(1778914802.798:721): avc: denied { setopt } for pid=9496 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 434.645203][ T30] audit: type=1400 audit(1778914802.807:722): avc: denied { read } for pid=5276 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 434.968149][ T30] audit: type=1400 audit(1778914803.241:723): avc: denied { read } for pid=9502 comm="syz.4.961" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 435.073360][ T30] audit: type=1400 audit(1778914803.306:724): avc: denied { create } for pid=9508 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 435.501961][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.959'. [ 435.591768][ T30] audit: type=1400 audit(1778914803.823:725): avc: denied { create } for pid=9520 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 435.643025][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 435.714361][ T30] audit: type=1400 audit(1778914803.850:726): avc: denied { getopt } for pid=9520 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 435.798398][ T30] audit: type=1400 audit(1778914803.860:727): avc: denied { create } for pid=9508 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 435.877195][ T30] audit: type=1400 audit(1778914803.860:728): avc: denied { write } for pid=9508 comm="syz.0.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 435.909219][ T9499] wg1 speed is unknown, defaulting to 1000 [ 436.275940][ T9532] netlink: 148 bytes leftover after parsing attributes in process `syz.3.968'. [ 436.293728][ T9535] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.967'. [ 436.385622][ T9535] netlink: Unknown conntrack attr (0) [ 438.024793][ T9556] wg1 speed is unknown, defaulting to 1000 [ 438.588773][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 438.761961][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 438.782896][ T10] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 438.792908][ T10] usb 5-1: config 0 has no interface number 0 [ 438.800760][ T10] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 438.811700][ T10] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.825070][ T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 438.848139][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.869007][ T10] usb 5-1: Product: syz [ 438.887859][ T10] usb 5-1: Manufacturer: syz [ 438.911903][ T10] usb 5-1: SerialNumber: syz [ 438.951455][ T10] usb 5-1: config 0 descriptor?? [ 438.989258][ T9550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 439.274520][ T10] usb 5-1: USB disconnect, device number 41 [ 440.165278][ T9577] netlink: 148 bytes leftover after parsing attributes in process `syz.4.980'. [ 440.438910][ T30] audit: type=1400 audit(1778914808.291:729): avc: denied { read } for pid=9586 comm="syz.4.982" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 440.522639][ T30] audit: type=1400 audit(1778914808.319:730): avc: denied { open } for pid=9586 comm="syz.4.982" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 440.649541][ T30] audit: type=1400 audit(1778914808.319:731): avc: denied { ioctl } for pid=9586 comm="syz.4.982" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 440.941463][ T30] audit: type=1400 audit(1778914808.762:732): avc: denied { getopt } for pid=9594 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 441.021572][ T30] audit: type=1400 audit(1778914808.790:733): avc: denied { setattr } for pid=9594 comm="syz.2.985" name="SCTPv6" dev="sockfs" ino=26661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.381715][ T9604] netlink: 36 bytes leftover after parsing attributes in process `syz.4.988'. [ 441.512646][ T30] audit: type=1400 audit(1778914809.279:734): avc: denied { bind } for pid=9599 comm="syz.4.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 441.587268][ T30] audit: type=1400 audit(1778914809.343:735): avc: denied { name_bind } for pid=9605 comm="syz.5.989" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 442.704795][ T5629] Bluetooth: hci6: command 0x1003 tx timeout [ 442.704808][ T5624] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 443.095259][ T5730] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 443.271216][ T5730] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.308273][ T5730] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 443.347843][ T5730] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 443.386831][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.436154][ T9623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 443.475102][ T5730] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.335941][ T9635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.424687][ T9635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.287135][ T30] audit: type=1400 audit(1778914812.769:736): avc: denied { read write } for pid=9641 comm="syz.4.997" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 445.368263][ T30] audit: type=1400 audit(1778914812.842:737): avc: denied { open } for pid=9641 comm="syz.4.997" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 446.082413][ T5730] usb 1-1: USB disconnect, device number 38 [ 446.799252][ T5730] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 446.998502][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.045137][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.066205][ T9671] fuse: Unknown parameter 'user_i00000000000000000000' [ 447.086962][ T5730] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 447.117508][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.159624][ T5730] usb 5-1: config 0 descriptor?? [ 447.499672][ T9678] atomic_op ffff888074855198 conn xmit_atomic 0000000000000000 [ 447.513067][ T9678] netlink: 'syz.0.1009': attribute type 29 has an invalid length. [ 447.877453][ T5730] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 447.899328][ T5730] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 447.934126][ T5730] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 448.001636][ T5730] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 448.062210][ T5730] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 448.098066][ T5730] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 448.205782][ T5730] playstation 0003:054C:0DF2.000D: Invalid reportID received, expected 9 got 32 [ 448.240758][ T5730] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -22 [ 448.260684][ T5730] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense [ 448.291894][ T5730] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 448.421374][ T5730] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -22 [ 448.461407][ T5730] usb 5-1: USB disconnect, device number 42 [ 448.904897][ T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 448.947079][ T9682] fido_id[9682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 449.086752][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 449.101090][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 449.119998][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.134367][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.165559][ T9] usb 1-1: string descriptor 0 read error: -22 [ 449.172217][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 449.184367][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.220514][ T9] usb 1-1: 0:2 : does not exist [ 449.832352][ T5730] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 449.863679][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.872511][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.932228][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.953556][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.990697][ T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 450.027947][ T5730] usb 5-1: Using ep0 maxpacket: 16 [ 450.036682][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 450.051721][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.077444][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.096013][ T9] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 450.116933][ T5730] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 450.171806][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.191898][ T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 450.212033][ T5730] usb 5-1: config 0 descriptor?? [ 450.270939][ T9] usb 1-1: USB disconnect, device number 39 [ 450.499416][ T30] audit: type=1326 audit(1778914817.578:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.3.1017" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf6af9ce59 code=0x0 [ 450.675707][ T5730] corsair 0003:1B1C:1B02.000E: unknown global tag 0xd [ 450.691866][ T5730] corsair 0003:1B1C:1B02.000E: item 0 1 1 13 parsing failed [ 450.707554][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 450.728476][ T5730] corsair 0003:1B1C:1B02.000E: parse failed [ 450.749078][ T5730] corsair 0003:1B1C:1B02.000E: probe with driver corsair failed with error -22 [ 450.758804][ T9711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1019'. [ 450.777081][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1019'. [ 450.898926][ T9712] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1018'. [ 450.987593][ T9716] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 451.404218][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 451.480422][ T5709] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 451.662716][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 451.677832][ T5709] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 451.692510][ T5709] usb 1-1: config 0 has no interface number 0 [ 451.707044][ T5709] usb 1-1: config 0 interface 89 altsetting 2 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 451.737746][ T5709] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x8A has invalid maxpacket 3840, setting to 64 [ 451.772519][ T5709] usb 1-1: config 0 interface 89 has no altsetting 0 [ 451.790466][ T5709] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 451.804757][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.824823][ T5709] usb 1-1: Product: syz [ 451.833941][ T5709] usb 1-1: Manufacturer: syz [ 451.845912][ T5709] usb 1-1: SerialNumber: syz [ 451.870020][ T5709] usb 1-1: config 0 descriptor?? [ 451.885844][ T5709] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 451.905617][ T5709] em28xx 1-1:0.89: Video interface 89 found: [ 451.920303][ T5709] em28xx 1-1:0.89: DVB interface 89 found: [ 452.221961][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 452.245914][ T5846] ------------[ cut here ]------------ [ 452.251605][ T5846] time_after(jiffies, warn_timeout) [ 452.251623][ T5846] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x36c/0x9d0, CPU#1: syz.1.10/5846 [ 452.266921][ T5846] Modules linked in: [ 452.270949][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.1.10 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.281682][ T5846] Tainted: [L]=SOFTLOCKUP [ 452.285344][ T30] audit: type=1400 audit(1778914819.231:739): avc: denied { name_connect } for pid=9739 comm="syz.3.1027" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 452.286539][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.318508][ T5846] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 452.324941][ T5846] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 3f 9d 4c 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 6f 44 14 fd 4d 85 ff 79 aa e8 85 49 14 fd 90 <0f> 0b 90 eb 9f e8 7a 49 14 fd 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 452.345120][ T5846] RSP: 0018:ffffc900052078c0 EFLAGS: 00010293 [ 452.351204][ T5846] RAX: 0000000000000000 RBX: ffff8880547f5000 RCX: ffffffff84f45551 [ 452.359268][ T5846] RDX: ffff88802fd20000 RSI: ffffffff84f4555b RDI: ffff88802fd20000 [ 452.368966][ T5846] RBP: fffffbfff1c81e50 R08: 0000000000000007 R09: 0000000000000000 [ 452.377130][ T5846] R10: ffffffffffffe900 R11: 0000000000000000 R12: 0000000100001b00 [ 452.385164][ T5846] R13: 0000000000001b58 R14: ffff8880547f5018 R15: ffffffffffffe900 [ 452.393227][ T5846] FS: 00007ff9647796c0(0000) GS:ffff888124470000(0000) knlGS:0000000000000000 [ 452.402229][ T5846] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 452.408816][ T5846] CR2: 00007fcf6bd4da08 CR3: 000000002b7af000 CR4: 00000000003526f0 [ 452.416867][ T5846] Call Trace: [ 452.420152][ T5846] [ 452.423116][ T5846] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 452.428667][ T5846] ? __pfx___might_resched+0x10/0x10 [ 452.434017][ T5846] ? io_wq_set_exit_on_idle+0x156/0x290 [ 452.439986][ T5846] io_uring_clean_tctx+0x114/0x180 [ 452.445444][ T5846] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 452.451079][ T5846] ? percpu_counter_add_batch+0xb9/0x230 [ 452.456768][ T5846] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 452.463276][ T5846] io_uring_cancel_generic+0x7b9/0x810 [ 452.468811][ T5846] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 452.474797][ T5846] ? __pfx___file_ref_put+0x10/0x10 [ 452.480056][ T5846] ? __pfx_autoremove_wake_function+0x10/0x10 [ 452.486152][ T5846] ? fput+0xd9/0x100 [ 452.490053][ T5846] ? io_uring_unreg_ringfd+0xca/0x140 [ 452.495436][ T5846] do_exit+0x344/0x2af0 [ 452.499658][ T5846] ? __pfx___might_resched+0x10/0x10 [ 452.504958][ T5846] ? __pfx_do_exit+0x10/0x10 [ 452.509606][ T5846] ? do_raw_spin_lock+0x128/0x260 [ 452.514653][ T5846] ? find_held_lock+0x2b/0x80 [ 452.519376][ T5846] ? get_signal+0x7e5/0x2210 [ 452.523969][ T5846] do_group_exit+0xd5/0x2a0 [ 452.528477][ T5846] get_signal+0x20ff/0x2210 [ 452.533035][ T5846] ? task_work_add+0x201/0x3b0 [ 452.537806][ T5846] ? __pfx_get_signal+0x10/0x10 [ 452.542698][ T5846] arch_do_signal_or_restart+0x91/0x7e0 [ 452.548650][ T5846] ? __pfx___fput_deferred+0x10/0x10 [ 452.554270][ T5846] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 452.560443][ T5846] ? rcu_is_watching+0x12/0xc0 [ 452.565279][ T5846] exit_to_user_mode_loop+0x8b/0x4f0 [ 452.570565][ T5846] ? rcu_is_watching+0x12/0xc0 [ 452.575388][ T5846] do_syscall_64+0x706/0xf80 [ 452.579975][ T5846] ? clear_bhb_loop+0x40/0x90 [ 452.584714][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.590604][ T5846] RIP: 0033:0x7ff96399ce59 [ 452.595116][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.614782][ T5846] RSP: 002b:00007ff964779028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 452.623227][ T5846] RAX: fffffffffffffe00 RBX: 00007ff963c15fa0 RCX: 00007ff96399ce59 [ 452.631244][ T5846] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000007 [ 452.639251][ T5846] RBP: 00007ff963a32d6f R08: 0000200000000180 R09: 0000000000000000 [ 452.647221][ T5846] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 452.655225][ T5846] R13: 00007ff963c16038 R14: 00007ff963c15fa0 R15: 00007ffeba912048 [ 452.663639][ T5846] [ 452.666655][ T5846] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 452.673930][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.1.10 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.684606][ T5846] Tainted: [L]=SOFTLOCKUP [ 452.688920][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.698967][ T5846] Call Trace: [ 452.702237][ T5846] [ 452.705157][ T5846] dump_stack_lvl+0x100/0x190 [ 452.709834][ T5846] vpanic+0x552/0x970 [ 452.713807][ T5846] ? __pfx_vpanic+0x10/0x10 [ 452.718311][ T5846] panic+0xd1/0xe0 [ 452.722027][ T5846] ? __pfx_panic+0x10/0x10 [ 452.726438][ T5846] ? check_panic_on_warn+0x1f/0x90 [ 452.731537][ T5846] check_panic_on_warn.cold+0x19/0x34 [ 452.736889][ T5846] ? io_wq_put_and_exit+0x36c/0x9d0 [ 452.742065][ T5846] __warn.cold+0x191/0x328 [ 452.746460][ T5846] __report_bug+0x296/0x3d0 [ 452.750947][ T5846] ? io_wq_put_and_exit+0x36c/0x9d0 [ 452.756125][ T5846] ? __pfx___report_bug+0x10/0x10 [ 452.761137][ T5846] ? do_raw_spin_lock+0x128/0x260 [ 452.766146][ T5846] ? find_held_lock+0x2b/0x80 [ 452.770803][ T5846] ? __wait_for_common+0x1f3/0x4c0 [ 452.775906][ T5846] ? rcu_is_watching+0x12/0xc0 [ 452.780659][ T5846] ? io_wq_put_and_exit+0x36c/0x9d0 [ 452.785839][ T5846] report_bug+0xb2/0x220 [ 452.790065][ T5846] ? io_wq_put_and_exit+0x36c/0x9d0 [ 452.795254][ T5846] handle_bug+0x16a/0x2a0 [ 452.799568][ T5846] exc_invalid_op+0x17/0x50 [ 452.804048][ T5846] asm_exc_invalid_op+0x1a/0x20 [ 452.808876][ T5846] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 452.814665][ T5846] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 3f 9d 4c 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 6f 44 14 fd 4d 85 ff 79 aa e8 85 49 14 fd 90 <0f> 0b 90 eb 9f e8 7a 49 14 fd 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 452.834251][ T5846] RSP: 0018:ffffc900052078c0 EFLAGS: 00010293 [ 452.840295][ T5846] RAX: 0000000000000000 RBX: ffff8880547f5000 RCX: ffffffff84f45551 [ 452.848242][ T5846] RDX: ffff88802fd20000 RSI: ffffffff84f4555b RDI: ffff88802fd20000 [ 452.856192][ T5846] RBP: fffffbfff1c81e50 R08: 0000000000000007 R09: 0000000000000000 [ 452.864145][ T5846] R10: ffffffffffffe900 R11: 0000000000000000 R12: 0000000100001b00 [ 452.872106][ T5846] R13: 0000000000001b58 R14: ffff8880547f5018 R15: ffffffffffffe900 [ 452.880060][ T5846] ? io_wq_put_and_exit+0x361/0x9d0 [ 452.885238][ T5846] ? io_wq_put_and_exit+0x36b/0x9d0 [ 452.890419][ T5846] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 452.895948][ T5846] ? __pfx___might_resched+0x10/0x10 [ 452.901218][ T5846] ? io_wq_set_exit_on_idle+0x156/0x290 [ 452.906753][ T5846] io_uring_clean_tctx+0x114/0x180 [ 452.911845][ T5846] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 452.917458][ T5846] ? percpu_counter_add_batch+0xb9/0x230 [ 452.923082][ T5846] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 452.929594][ T5846] io_uring_cancel_generic+0x7b9/0x810 [ 452.935042][ T5846] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 452.941014][ T5846] ? __pfx___file_ref_put+0x10/0x10 [ 452.946197][ T5846] ? __pfx_autoremove_wake_function+0x10/0x10 [ 452.952250][ T5846] ? fput+0xd9/0x100 [ 452.956132][ T5846] ? io_uring_unreg_ringfd+0xca/0x140 [ 452.961492][ T5846] do_exit+0x344/0x2af0 [ 452.965649][ T5846] ? __pfx___might_resched+0x10/0x10 [ 452.970920][ T5846] ? __pfx_do_exit+0x10/0x10 [ 452.975489][ T5846] ? do_raw_spin_lock+0x128/0x260 [ 452.980499][ T5846] ? find_held_lock+0x2b/0x80 [ 452.985156][ T5846] ? get_signal+0x7e5/0x2210 [ 452.989738][ T5846] do_group_exit+0xd5/0x2a0 [ 452.994229][ T5846] get_signal+0x20ff/0x2210 [ 452.998721][ T5846] ? task_work_add+0x201/0x3b0 [ 453.003470][ T5846] ? __pfx_get_signal+0x10/0x10 [ 453.008310][ T5846] arch_do_signal_or_restart+0x91/0x7e0 [ 453.013848][ T5846] ? __pfx___fput_deferred+0x10/0x10 [ 453.019118][ T5846] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 453.025263][ T5846] ? rcu_is_watching+0x12/0xc0 [ 453.030028][ T5846] exit_to_user_mode_loop+0x8b/0x4f0 [ 453.035297][ T5846] ? rcu_is_watching+0x12/0xc0 [ 453.040050][ T5846] do_syscall_64+0x706/0xf80 [ 453.044623][ T5846] ? clear_bhb_loop+0x40/0x90 [ 453.049288][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.055167][ T5846] RIP: 0033:0x7ff96399ce59 [ 453.059562][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.079150][ T5846] RSP: 002b:00007ff964779028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 453.087542][ T5846] RAX: fffffffffffffe00 RBX: 00007ff963c15fa0 RCX: 00007ff96399ce59 [ 453.095490][ T5846] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000007 [ 453.103444][ T5846] RBP: 00007ff963a32d6f R08: 0000200000000180 R09: 0000000000000000 [ 453.111404][ T5846] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 453.119360][ T5846] R13: 00007ff963c16038 R14: 00007ff963c15fa0 R15: 00007ffeba912048 [ 453.127324][ T5846] [ 453.130783][ T5846] Kernel Offset: disabled [ 453.135086][ T5846] Rebooting in 86400 seconds..