last executing test programs: 9.884848834s ago: executing program 0 (id=7771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000600)="1835b1c0ab0a7ced0465268fbff5966088310bdf6979334125902c4054136a0fbd955617a904bfa7486e3cdc8051aa08affdd881c92b676660bbecd19094058d07037916beb1a448f453b11f7ee15fe3f2615086c45338c975f28105f57b4d48addbff113bd4d121b62d0858eb5ea5661eaf9ac54ef7dd1765ce41857bc4e23753c0a9346b9afe934292d58bbad5069aae9027e47d68f71309ca25fe5f", 0x9d}, {0x0}, {&(0x7f0000000080)}, {&(0x7f0000000440)}, {0x0}, {0x0}], 0x6}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x1}], 0x3, 0x40801) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 8.26001649s ago: executing program 0 (id=7776): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.845875023s ago: executing program 0 (id=7780): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7.472517847s ago: executing program 4 (id=7783): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00002e000000d4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x4, 0x33, {0x33, 0xa, "dd612532dd834da37e09324b9263cebe6d2b37f9452fee5409c5efe926cd8719ab89fc1c3af539a61b549da65cbeeb4dc0"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc2e5}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x40, 0x17}, &(0x7f0000000300)={0x0, 0xa, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000003c0)={0x40, 0x5, 0x3, "35eae8"}}) 5.64540338s ago: executing program 2 (id=7788): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x40, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "0018"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x20, 0x0, {0x24, 0x4, 0x0, 0x2, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x7b, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x10, "02270e000038ebcb9f726a0dba82"}, {0x2, 0x12, "01008548c8ee4a000000000000000000"}, {0x0, 0x9, "00de6c83d50800"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xa, "c8f46976e79ea788"}]}]}}}}}}}, 0x0) 5.643500608s ago: executing program 1 (id=7789): sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 5.596789286s ago: executing program 1 (id=7790): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x15c}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5.389768923s ago: executing program 2 (id=7791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000700000000850000000c000000b700000000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0], &(0x7f0000000300), 0x10, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000740)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f00000008c0)={r3, 0x1, 0x2}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x70, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000040), &(0x7f00000004c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x2, 0x2c, 0x0, @void, @void, @void, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000680)={0x84001, 0xd, 0x14}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r8, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r8, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000700)={'sit0\x00', &(0x7f00000006c0)={@remote, @multicast1, 0x5, 0x2}}) 5.196948865s ago: executing program 1 (id=7792): syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x236000, 0x1000, 0x0, 0x1}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 5.102667458s ago: executing program 1 (id=7793): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0xc4, "d876537131504563f3914d54ea089b220acc73a6b0cf80208b816f0b123870a5cb7a8faad9c2265b585a222075e54a00c4a0f7a1740a48d5844d1fbcc935d14801b3dc03cef33a4555769b3e94db32de9d650a63bbea8bf30f83ca62d04cbca1fdbba956cae515c5e7d5fedfc901c19b05331b7714e9386fccda88c14ae71e62fbffe5d635d5c50aa906165c0256d01c8a72708a2417b3ea1d21e1d03c82401964c43ddab2aa6966679b3d7819fa4247bd84cbd7d7e7b4e2f4ec699dab7ba38f95830407"}, 0x0}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000f00)={0x0, 0x0, 0x10, &(0x7f0000000880)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x46269303bccff8d6, 0x3, 0x8, 0x8, 0x9}]}}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 4.606018055s ago: executing program 3 (id=7795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x22) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ed900000000000000001200", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r0, 0x0, 0x0, 0x40002017, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}}, 0x4040850) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dvb_demux(&(0x7f0000000080), 0xc, 0x101040) r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 4.367919086s ago: executing program 2 (id=7796): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0xfff6, 0x0, 0x4000002}, 0x4000804) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$overlay(0x0, &(0x7f0000000240)='./my_configfs/target/dbroot\x00', &(0x7f0000000280), 0x885, &(0x7f0000000580)={[{@redirect_dir_nofollow}, {@uuid_auto}, {@verity_on}], [{@audit}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x1c1fd36b5c9f61c8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7748b23f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40041b0}, 0x40) write(r0, &(0x7f00000001c0)="8319dc30", 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) write$binfmt_misc(r0, &(0x7f0000000480)="1a762b4c8e6056de7ab509419f467a084eefbf4d971a3884e5c37b815984674c3403e03611daf0befc9520d993aa0de66dc3a87b9aa0a0ab1ce68278d6d2d1882ab6c78a823e7a63da603c6f61114766c052bb31d341e7f96f2e0f696a6ee486fe47147f78c40fcda989dad08e9cc031f62ecf6c7d80a692a51b354a94f87e77e45f4d7cbd1e55ad7395dadb0f0e4044a477da03b09112b04f869b824473adc572e19f91a69921cebe432cb091f96af7a0a1e1fc916f58fba27f80ab29a90c604a7043776095fe06e22327fa79bd7e020413160723c83dd927ed366e58857266012b95c94d76bcc2", 0xe8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, &(0x7f0000000080)={0x0, 0x2e, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) 4.299645011s ago: executing program 2 (id=7797): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 4.278953514s ago: executing program 4 (id=7798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) syz_open_dev$loop(0x0, 0x2, 0x2001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f0000000000)={0x20, 0x0, 0x5, 0x20000, 0x0, 0x3}, &(0x7f0000000080)=[0x0], 0x1, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120110017a75ad107d07aa04f9660102030109021b0001fb0380070904"], 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x260, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x230, 0x2, {{0x3, [0x10, 0x6, 0xc, 0x7, 0xb, 0xf, 0x7, 0x4, 0xa, 0xf, 0x1, 0x1, 0x1, 0x8, 0x8, 0x9], 0x0, [0x1, 0x2, 0x3, 0xfd2, 0x3, 0x5, 0x0, 0x7, 0x4, 0x81b9, 0x9, 0x7, 0x1, 0x1, 0x5, 0x101], [0xff, 0x2, 0x4, 0xb, 0x8, 0x401, 0xd, 0x9, 0x8, 0x40, 0x2, 0x1, 0x4, 0x1, 0x7, 0x6]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x94, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x40000000000}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0xffffffffffffffff}, {0xc, 0x4, 0xdaa}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x40}, {0xc, 0x4, 0x6}]}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x7c, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x1bfe}, {0xc, 0x4, 0x8000000000000000}, {0xc, 0x4, 0xffff}, {0xc, 0x4, 0x1}]}, @TCA_MQPRIO_MIN_RATE64={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x5}, {0xc, 0x3, 0x100000001}, {0xc, 0x3, 0xfffffffffffffffd}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x81}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x80000000}, {0xc, 0x3, 0x10000000}, {0xc, 0x3, 0x8001}, {0xc, 0x3, 0xf1}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x8}]}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x260}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) 3.797311888s ago: executing program 0 (id=7799): syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90873a"}, &(0x7f0000000300)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0) 3.604119888s ago: executing program 2 (id=7800): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) semget$private(0x0, 0x1, 0x405) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x1, 0x1000}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, 0x0, 0x0) syz_emit_ethernet(0xd81, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f0000000100)=[{0x0}], 0x1, 0x15c, 0x0) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.585018915s ago: executing program 3 (id=7801): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x40, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "0018"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000700)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x20, 0x0, {0x24, 0x4, 0x0, 0x2, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x7b, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x10, "02270e000038ebcb9f726a0dba82"}, {0x2, 0x12, "01008548c8ee4a000000000000000000"}, {0x0, 0x9, "00de6c83d50800"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xa, "c8f46976e79ea788"}]}]}}}}}}}, 0x0) 3.201744939s ago: executing program 3 (id=7802): setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x73) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc0000000000008003000000000000000000000000000000ffffff7f", @ANYRES32=r3, @ANYBLOB="010000000400000000000000000200000c00000000000000000000002b000000f30000003a2d285cc980000009c30218c53c7cd86d7b2d8d14d3a461b6024510fa898556c26585000000002b133b08010000"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 2.253831913s ago: executing program 3 (id=7803): syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x236000, 0x1000, 0x0, 0x1}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) 1.977505361s ago: executing program 3 (id=7804): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.506616524s ago: executing program 1 (id=7805): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0018000000000000000c0000000c0000000200000000000000000000040000000000003203b9437337b3e819abae9262aa4e3cc6010cdb7218854b92c6320ed6f5fa515fc3b7b6723e26a10857128f168945054047c49b2cbacc896df6ae486d72f92dc0caa8f8d1a3a0fe48455445506273109b6f41c84aa48f98bfda56158c5b980dac1d3bf066"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000002000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xed00}, 0x10}, 0x94) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x100000003) 1.173418315s ago: executing program 0 (id=7806): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x6, 0x4, 0x1010, 0x89, 0x480, 0xffffffffffffffff, 0x4}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff67eaa8fce2501b004502001c0000e0000311907800000000000019000004000000089078"], 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x40000b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls}, 0x94) socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1, 0x2, 0x801, 0x0, 0x0, {0x13, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000000) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14008000100001000000000000000af4ffffff030a010400000000000000000500000a14f1020300000011000100000000002f0f91960500000a00000000008eda3b3ab36abf5698330979e0cb3723b43bc2f6382801c4127bd7b6a91244eeb9c9055415efdfab34befdf0fd214f4aa7024d13fff130443ee78c91364a0c3a3fd384838a7b4f407c865412850cfec72b2ee51ae634b81118ff0d25e8f366a038c65940c017cac84e5af051e7bd98aa9d035fba602bb38cf6d23987c2f05448110ddd521d009a8f8a15aae4915299c577bef18c126180e96793e8"], 0x3c}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000140)={0x0, 0x7}) 1.126796958s ago: executing program 4 (id=7807): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0xfff6, 0x0, 0x4000002}, 0x4000804) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$overlay(0x0, &(0x7f0000000240)='./my_configfs/target/dbroot\x00', &(0x7f0000000280), 0x885, &(0x7f0000000580)={[{@redirect_dir_nofollow}, {@uuid_auto}, {@verity_on}], [{@audit}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x1c1fd36b5c9f61c8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7748b23f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40041b0}, 0x40) write(r0, &(0x7f00000001c0)="8319dc30", 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) write$binfmt_misc(r0, &(0x7f0000000480)="1a762b4c8e6056de7ab509419f467a084eefbf4d971a3884e5c37b815984674c3403e03611daf0befc9520d993aa0de66dc3a87b9aa0a0ab1ce68278d6d2d1882ab6c78a823e7a63da603c6f61114766c052bb31d341e7f96f2e0f696a6ee486fe47147f78c40fcda989dad08e9cc031f62ecf6c7d80a692a51b354a94f87e77e45f4d7cbd1e55ad7395dadb0f0e4044a477da03b09112b04f869b824473adc572e19f91a69921cebe432cb091f96af7a0a1e1fc916f58fba27f80ab29a90c604a7043776095fe06e22327fa79bd7e020413160723c83dd927ed366e58857266012b95c94d76bcc2", 0xe8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, &(0x7f0000000080)={0x0, 0x2e, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) 617.3454ms ago: executing program 4 (id=7808): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 353.510225ms ago: executing program 4 (id=7809): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x2e}]}, 0x1c}, 0x1, 0xfff6, 0x0, 0x4000002}, 0x4000804) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$overlay(0x0, &(0x7f0000000240)='./my_configfs/target/dbroot\x00', &(0x7f0000000280), 0x885, &(0x7f0000000580)={[{@redirect_dir_nofollow}, {@uuid_auto}, {@verity_on}], [{@audit}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x1c1fd36b5c9f61c8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffffffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7748b23f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x51}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40041b0}, 0x40) write(r0, &(0x7f00000001c0)="8319dc30", 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) write$binfmt_misc(r0, &(0x7f0000000480)="1a762b4c8e6056de7ab509419f467a084eefbf4d971a3884e5c37b815984674c3403e03611daf0befc9520d993aa0de66dc3a87b9aa0a0ab1ce68278d6d2d1882ab6c78a823e7a63da603c6f61114766c052bb31d341e7f96f2e0f696a6ee486fe47147f78c40fcda989dad08e9cc031f62ecf6c7d80a692a51b354a94f87e77e45f4d7cbd1e55ad7395dadb0f0e4044a477da03b09112b04f869b824473adc572e19f91a69921cebe432cb091f96af7a0a1e1fc916f58fba27f80ab29a90c604a7043776095fe06e22327fa79bd7e020413160723c83dd927ed366e58857266012b95c94d76bcc2", 0xe8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, &(0x7f0000000080)={0x0, 0x2e, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) 299.372663ms ago: executing program 0 (id=7810): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1c}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000880)={0x20, 0x81, 0x3, "e6ad69"}, &(0x7f00000008c0)={0x20, 0x82, 0x2, '8S'}, &(0x7f0000000900)={0x20, 0x83, 0x1, "c1"}, &(0x7f0000000940)={0x20, 0x84, 0x2, "5e87"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "135bcc"}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000300)={0x14, &(0x7f0000000000)={0x0, 0x22, 0x2f, {0x2f, 0x34, "f245d50e84712f54cc1e1630e71c85905b823e5675c5f9f836a8112de0cdc4a2916836adf3cf1e4e9a3f9ebbd1"}}, &(0x7f0000000200)={0x0, 0x3, 0xcb, @string={0xcb, 0x3, "ae4d11128cfa30dd9b631aeeea63a74d730d7a73ecdd2fd2d61688b3c6f325c19f15cfe32e2459d06839442fea5f56309c215af91b21cc289720a023ab3f7c4d1173aa09655c267f5d6fca4bcadddcbb66b91cc38d1d36d18ed027184142153ea61cc993bb0dcd4416a14e83b89a40b69a50e5d6d7c002d19919b00a737ec2847d35954f2a54671eb08d69928edcf6fdb0e8b575ed62d462d2dfd3444d4fe00faf30fccc8bb3059710d5258ed2158011e91d4f481e518b0fc808a4099ced646115539935e9f7eafb84"}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x20, 0x9, 0x4f, "53a8a099839ff1abece19dcd7580bf530db3d115e48111689e5ed4690459656d2e27c6d6e5d7c2613165079c46f053d116868aa7c8c88edcece1e98ea95f8fa5193e35226196673748560c2d08a1b1"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000440)={0xc0, 0x5, 0x6, "17230466d5b6"}, &(0x7f0000000480)={0x40, 0x5, 0x4, 'Ix&U'}}) 196.825446ms ago: executing program 4 (id=7811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x40000000009) mq_notify(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x2e, 0x0, @thr={&(0x7f0000000240), 0x0}}) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) ptrace$cont(0x1f, 0x0, 0x0, 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 193.46766ms ago: executing program 1 (id=7812): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x180100, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './config/usb_gadget/g1/strings/0x409/serialnumber', [{}, {0x20, ':'}, {0x20, '\'\\'}, {0x20, '/dev/sequencer2\x00'}, {0x20, '})}'}], 0xa, "34734795562c88870f4a889b5170384a9b2d897f9d84c1aa0445f02b69ccd37d8d197cd7628fe92f28ba686f468ff4ec79441ce753f039243a8f48f2dd21102fd670723d7271b75ed28cf29b2d0ed9d1071c6c0ecf20f0b44a9f42b61bfcb97f509a7f4aab923afadad8bc027a7e0bb69679c0299fe212b7bda9e7b59c21ffd76db63139ead8b018c5d29b1141d7b73f16733cecf79435776d0597daaa243724966b8fc64dfac6ab7be12d65e11df7e0b8cca46c7b33ca58310d42d099ffe49ef7242da7b47ee0"}, 0x117) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x25042f2ad3610f7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) capset(&(0x7f0000000040)={0x20080522}, 0x0) mkdir(0x0, 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r4 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x20241, 0x1ff) close(r4) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x60881, 0x0) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) syz_emit_ethernet(0x72, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f070000000000880000"}}}}}}}, 0x0) write$P9_RREADLINK(r3, 0x0, 0x0) 138.358056ms ago: executing program 3 (id=7813): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x6, 0x4, 0x1010, 0x89, 0x480, 0xffffffffffffffff, 0x4}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff67eaa8fce2501b004502001c0000e0000311907800000000000019000004000000089078"], 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x40000b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls}, 0x94) socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x20, 0x1, 0x2, 0x801, 0x0, 0x0, {0x13, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c040}, 0x20000000) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14008000100001000000000000000af4ffffff030a010400000000000000000500000a14f1020300000011000100000000002f0f91960500000a00000000008eda3b3ab36abf5698330979e0cb3723b43bc2f6382801c4127bd7b6a91244eeb9c9055415efdfab34befdf0fd214f4aa7024d13fff130443ee78c91364a0c3a3fd384838a7b4f407c865412850cfec72b2ee51ae634b81118ff0d25e8f366a038c65940c017cac84e5af051e7bd98aa9d035fba602bb38cf6d23987c2f05448110ddd521d009a8f8a15aae4915299c577bef18c126180e96793e8"], 0x3c}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000140)={0x0, 0x7}) 0s ago: executing program 2 (id=7814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000700000000850000000c000000b700000000000000950000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0], &(0x7f0000000300), 0x10, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000740)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r2, 0xc0106450, &(0x7f00000008c0)={r3, 0x1, 0x2}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x70, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f00000004c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x2, 0x2c, 0x0, @void, @void, @void, @value=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000680)={0x84001, 0xd, 0x14}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r8, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) readv(r8, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4081, 0xff1}], 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000700)={'sit0\x00', &(0x7f00000006c0)={@remote, @multicast1, 0x5, 0x2}}) kernel console output (not intermixed with test programs): 1164.153455][ T10] hid_parser_main: 354 callbacks suppressed [ 1164.153470][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.179566][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.191536][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.201181][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.214485][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.242444][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.266727][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.288254][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.307469][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.342127][ T10] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0 [ 1164.383119][ T10] logitech-djreceiver 0003:046D:C71F.000E: collection stack underflow [ 1164.406104][ T10] logitech-djreceiver 0003:046D:C71F.000E: item 0 1 0 12 parsing failed [ 1164.432783][ T10] logitech-djreceiver 0003:046D:C71F.000E: logi_dj_probe: parse failed [ 1164.461286][ T10] logitech-djreceiver 0003:046D:C71F.000E: probe with driver logitech-djreceiver failed with error -22 [ 1164.569101][ T10] usb 5-1: USB disconnect, device number 53 [ 1164.830065][T25097] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 300 seconds [ 1166.654958][T28576] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1167.758588][ T30] audit: type=1326 audit(1786318859.559:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28587 comm="syz.3.6904" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff027b9e0d9 code=0x0 [ 1167.806811][T28601] binder: 28587:28601 unknown command 0 [ 1167.826694][T28601] binder: 28587:28601 ioctl c0306201 2000000004c0 returned -22 [ 1168.575293][T28575] lo speed is unknown, defaulting to 1000 [ 1168.719947][T28614] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1169.963457][T28629] binder: 28623:28629 unknown command 0 [ 1169.970852][T28629] binder: 28623:28629 ioctl c0306201 2000000004c0 returned -22 [ 1170.159426][T26722] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1170.219258][T13353] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1170.352349][T26722] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1170.379162][T13353] usb 5-1: Using ep0 maxpacket: 32 [ 1170.435118][T13353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1170.677141][T26722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1170.690000][T13353] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1170.704164][T26722] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1170.719908][T13353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.737013][T26722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1170.747743][T13353] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1170.763459][T26722] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1170.775515][T26722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.790635][T13353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.802241][T13353] usb 5-1: Product: syz [ 1170.807497][T13353] usb 5-1: Manufacturer: syz [ 1170.820654][T26722] usb 1-1: config 0 descriptor?? [ 1170.827647][T13353] usb 5-1: SerialNumber: syz [ 1170.886726][T13353] usb 5-1: interface 1 not found [ 1171.047410][T26722] hdpvr 1-1:0.0: firmware version 0x0 dated [ 1171.076868][T26722] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 1171.369096][T13353] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1171.383796][ T5611] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1171.552850][T13353] usb 4-1: Using ep0 maxpacket: 32 [ 1171.698512][T13353] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1171.743396][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1171.812970][T13353] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1171.940404][T13353] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.024433][T13353] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.128768][T13353] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.208857][T13353] usb 4-1: Product: syz [ 1172.323443][T13353] usb 4-1: Manufacturer: syz [ 1172.554032][T13353] usb 4-1: SerialNumber: syz [ 1173.226590][T13353] usb 4-1: interface 1 not found [ 1173.261288][T26722] hdpvr 1-1:0.0: Could not setup controls [ 1173.291907][T26722] hdpvr 1-1:0.0: registering videodev failed [ 1173.523288][T26722] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 1173.838950][T26722] usb 1-1: USB disconnect, device number 58 [ 1173.839784][ T10] usb 5-1: USB disconnect, device number 54 [ 1173.927685][ T5611] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1175.111870][T26722] usb 4-1: USB disconnect, device number 54 [ 1175.541304][T28688] overlayfs: failed to resolve './file2': -2 [ 1175.813810][ T5611] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 1177.578918][T26722] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1177.752875][T26722] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1177.793459][T26722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1177.842700][T26722] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1177.872090][T28710] syzkaller0: entered promiscuous mode [ 1177.898624][T26722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1177.937466][T26722] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1177.970738][T26722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.990267][T28710] syzkaller0: entered allmulticast mode [ 1178.026004][T26722] usb 5-1: config 0 descriptor?? [ 1178.077320][T28710] tipc: Enabled bearer , priority 0 [ 1178.257581][T26722] hdpvr 5-1:0.0: firmware version 0x0 dated [ 1178.283272][T26722] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1178.305283][ T5596] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 1178.333717][T28721] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6941'. [ 1178.947380][T26722] hdpvr 5-1:0.0: Could not setup controls [ 1178.955508][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 1178.968438][T26722] hdpvr 5-1:0.0: registering videodev failed [ 1178.988415][T28708] tipc: Resetting bearer [ 1179.002459][T26722] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 1179.054266][T26722] usb 5-1: USB disconnect, device number 55 [ 1180.149101][ T30] audit: type=1400 audit(1786318871.919:914): avc: denied { write } for pid=28734 comm="syz.2.6945" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1181.027059][ T30] audit: type=1400 audit(1786318871.919:915): avc: denied { write } for pid=28734 comm="syz.2.6945" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1181.259050][T13353] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1181.383474][ T30] audit: type=1400 audit(1786318873.159:916): avc: denied { write } for pid=28741 comm="syz.2.6946" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1181.948915][T13353] usb 5-1: Using ep0 maxpacket: 16 [ 1181.954952][T13353] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1182.032699][T13353] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.044035][T13353] usb 5-1: config 251 has 0 interfaces, different from the descriptor's value: 1 [ 1182.061156][T13353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.073446][T13353] usb 5-1: Product: syz [ 1182.078972][T13353] usb 5-1: Manufacturer: syz [ 1182.085284][T13353] usb 5-1: SerialNumber: syz [ 1183.994189][T28708] tipc: Disabling bearer [ 1184.069200][T28762] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1184.089724][T28762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1184.099925][T28762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6950'. [ 1184.133623][T13353] usb 5-1: USB disconnect, device number 56 [ 1184.769475][T26722] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1184.831247][T26685] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1184.951879][T26722] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1185.023846][T26685] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1185.035624][T26722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1185.052733][T26722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.090651][T26722] usb 4-1: config 0 descriptor?? [ 1185.098657][T28766] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1185.132817][T26685] usb 3-1: config 0 has no interfaces? [ 1185.270636][T26685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.296861][T26685] usb 3-1: Product: syz [ 1185.309169][T26685] usb 3-1: Manufacturer: syz [ 1185.317369][T26685] usb 3-1: SerialNumber: syz [ 1185.336206][T26685] usb 3-1: config 0 descriptor?? [ 1185.583900][T26685] usb 3-1: USB disconnect, device number 58 [ 1186.144619][T26722] hid_parser_main: 354 callbacks suppressed [ 1186.144642][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.159423][ T30] audit: type=1326 audit(1786318877.969:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28791 comm="syz.0.6962" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ef919e0d9 code=0x0 [ 1186.186361][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.195002][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.203758][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.212183][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.222942][T28796] binder: 28791:28796 unknown command 0 [ 1186.228850][T28796] binder: 28791:28796 ioctl c0306201 2000000004c0 returned -22 [ 1186.236550][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.247752][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.256626][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.265076][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.273471][T26722] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 1186.284213][T26722] logitech-djreceiver 0003:046D:C71F.000F: collection stack underflow [ 1186.292771][T26722] logitech-djreceiver 0003:046D:C71F.000F: item 0 1 0 12 parsing failed [ 1186.313817][T26722] logitech-djreceiver 0003:046D:C71F.000F: logi_dj_probe: parse failed [ 1186.324029][T26722] logitech-djreceiver 0003:046D:C71F.000F: probe with driver logitech-djreceiver failed with error -22 [ 1186.345066][T26722] usb 4-1: USB disconnect, device number 55 [ 1186.464173][ T5611] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 1188.215890][T28802] kAFS: No cell specified [ 1188.354727][T28836] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1188.388696][T28837] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1190.239569][T28837] nvme nvme0: failed to connect socket: -512 [ 1191.239271][T13328] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1191.550805][T13328] usb 3-1: Using ep0 maxpacket: 32 [ 1191.564937][T13328] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1191.575355][T13328] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1191.599134][T13328] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.614026][T13328] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.634788][T13328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.643935][T13328] usb 3-1: Product: syz [ 1191.655396][T13328] usb 3-1: Manufacturer: syz [ 1191.675026][T13328] usb 3-1: SerialNumber: syz [ 1191.701176][T13328] usb 3-1: interface 1 not found [ 1192.857737][ T5611] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1193.958890][T13328] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1194.130478][T13328] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1194.162383][T13328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.175308][T13328] usb 5-1: Product: syz [ 1194.180418][T13328] usb 5-1: Manufacturer: syz [ 1194.185187][T13328] usb 5-1: SerialNumber: syz [ 1194.198419][T13328] usb 5-1: config 0 descriptor?? [ 1194.853290][T13328] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1194.892702][T13339] usb 3-1: USB disconnect, device number 59 [ 1195.426882][T25097] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 330 seconds [ 1195.600625][ T5611] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 1196.929324][T28935] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7002'. [ 1196.981840][T26722] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1197.210886][T26722] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1197.315233][T13328] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1197.336102][T13328] usb 5-1: USB disconnect, device number 57 [ 1197.344958][T26722] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.368856][T26722] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1197.386955][T26722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.412088][T26722] usb 1-1: Product: syz [ 1197.427160][T26722] usb 1-1: Manufacturer: syz [ 1197.433270][T26722] usb 1-1: SerialNumber: syz [ 1197.451592][T26722] usb 1-1: 0:2 : does not exist [ 1197.456577][T26722] usb 1-1: unit 9 not found! [ 1197.464519][T26722] usb 1-1: unit 0 not found! [ 1198.081921][T26722] usb 1-1: USB disconnect, device number 59 [ 1198.125736][T26788] udevd[26788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1199.732832][ T30] audit: type=1400 audit(1786318891.449:918): avc: denied { write } for pid=28985 comm="syz.4.7016" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1200.029232][ T30] audit: type=1400 audit(1786318891.469:919): avc: denied { write } for pid=28985 comm="syz.4.7016" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1200.408260][T29009] tipc: Enabled bearer , priority 0 [ 1200.489151][T29012] syzkaller0: entered promiscuous mode [ 1200.531369][T29012] syzkaller0: entered allmulticast mode [ 1200.553097][T29009] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1200.649830][T29008] tipc: Resetting bearer [ 1200.751415][T29008] tipc: Disabling bearer [ 1200.773715][T29020] Cannot find add_set index 0 as target [ 1200.779011][T26722] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1200.951751][T26722] usb 4-1: Using ep0 maxpacket: 32 [ 1201.642878][T26722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1201.651757][T26722] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1201.670312][T26722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.681565][T26722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1201.708646][T26722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.717666][T26722] usb 4-1: Product: syz [ 1201.729236][T26722] usb 4-1: Manufacturer: syz [ 1201.774974][T26722] usb 4-1: SerialNumber: syz [ 1201.910044][T26722] usb 4-1: interface 1 not found [ 1202.009841][T29040] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1202.218343][T29046] syzkaller0: entered promiscuous mode [ 1202.249642][T29046] syzkaller0: entered allmulticast mode [ 1202.342554][T29045] binder: 29042:29045 unknown command 0 [ 1202.348767][T29043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1202.372556][T29045] binder: 29042:29045 ioctl c0306201 2000000004c0 returned -22 [ 1202.444005][ T5611] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1204.014362][ T10] usb 4-1: USB disconnect, device number 56 [ 1204.691964][T29065] tipc: Enabled bearer , priority 0 [ 1204.708085][T29065] syzkaller0: entered promiscuous mode [ 1204.720926][T29065] syzkaller0: entered allmulticast mode [ 1204.753524][T29065] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1204.871835][T29064] tipc: Resetting bearer [ 1205.120289][ T30] audit: type=1400 audit(1786318896.769:920): avc: denied { write } for pid=29066 comm="syz.4.7038" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1205.312272][ T30] audit: type=1400 audit(1786318896.799:921): avc: denied { write } for pid=29066 comm="syz.4.7038" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1205.381299][T29064] tipc: Disabling bearer [ 1206.097341][T29088] syzkaller0: entered promiscuous mode [ 1206.103020][T29088] syzkaller0: entered allmulticast mode [ 1206.123862][T29088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7046'. [ 1207.188434][T13353] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1207.252614][T29102] misc userio: The device must be registered before sending interrupts [ 1207.262634][T29102] misc userio: The device must be registered before sending interrupts [ 1207.895848][T13353] usb 3-1: Using ep0 maxpacket: 32 [ 1207.921039][T13353] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1207.957293][T13353] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1208.065601][T13353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.304006][T13353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1208.315007][T13353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.318893][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1208.323218][T13353] usb 3-1: Product: syz [ 1208.334831][T13353] usb 3-1: Manufacturer: syz [ 1208.339743][T13353] usb 3-1: SerialNumber: syz [ 1208.445851][T13353] usb 3-1: interface 1 not found [ 1208.890651][T29117] tipc: Enabled bearer , priority 0 [ 1208.923791][T29117] syzkaller0: entered promiscuous mode [ 1208.965190][T29117] syzkaller0: entered allmulticast mode [ 1208.998889][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1209.036147][ T5611] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1209.094263][T29122] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1209.762197][T29114] tipc: Resetting bearer [ 1210.005986][T29114] tipc: Disabling bearer [ 1210.118976][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1210.246847][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1210.270354][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1210.281124][ T10] usb 1-1: can't read configurations, error -71 [ 1210.326084][T26722] usb 3-1: USB disconnect, device number 60 [ 1211.233385][T29153] syzkaller0: entered promiscuous mode [ 1211.248532][T29153] syzkaller0: entered allmulticast mode [ 1211.258355][T29153] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7063'. [ 1211.961803][ T30] audit: type=1326 audit(1786318903.769:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29161 comm="syz.4.7066" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe7259e0d9 code=0x0 [ 1212.043920][T29167] binder: 29161:29167 ioctl c0306201 0 returned -14 [ 1212.351473][ T30] audit: type=1400 audit(1786318904.009:923): avc: denied { write } for pid=29164 comm="syz.1.7067" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1212.555780][ T10] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1212.575802][ T30] audit: type=1400 audit(1786318904.029:924): avc: denied { write } for pid=29164 comm="syz.1.7067" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1212.709349][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1212.725118][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.735444][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1212.747462][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.761444][ T10] usb 1-1: Product: syz [ 1212.769828][ T10] usb 1-1: Manufacturer: syz [ 1212.777797][ T10] usb 1-1: SerialNumber: syz [ 1212.844094][ T10] usb 1-1: 0:2 : does not exist [ 1212.858887][ T10] usb 1-1: unit 9 not found! [ 1212.881142][ T10] usb 1-1: unit 0 not found! [ 1212.919129][ T5611] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 1213.066201][T13357] usb 1-1: USB disconnect, device number 61 [ 1213.089882][T26685] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1213.118727][T26788] udevd[26788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1213.700257][T26685] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1213.714099][T26685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1213.734266][T26685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.755882][T26685] usb 4-1: config 0 descriptor?? [ 1213.771188][T29171] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1214.312781][T26685] hid_parser_main: 354 callbacks suppressed [ 1214.312804][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.338172][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.362306][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.380223][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.393358][ T5611] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 1214.395888][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.427520][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.445118][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.462963][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.480376][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.497486][T26685] logitech-djreceiver 0003:046D:C71F.0010: unknown main item tag 0x0 [ 1214.529188][T26685] logitech-djreceiver 0003:046D:C71F.0010: collection stack underflow [ 1214.570888][T26685] logitech-djreceiver 0003:046D:C71F.0010: item 0 1 0 12 parsing failed [ 1214.589542][T26685] logitech-djreceiver 0003:046D:C71F.0010: logi_dj_probe: parse failed [ 1215.088980][T26685] logitech-djreceiver 0003:046D:C71F.0010: probe with driver logitech-djreceiver failed with error -22 [ 1215.111999][T26685] usb 4-1: USB disconnect, device number 57 [ 1215.416439][T29206] syzkaller0: entered promiscuous mode [ 1215.422162][T29206] syzkaller0: entered allmulticast mode [ 1215.435116][T29206] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7077'. [ 1215.595996][ T30] audit: type=1400 audit(1786318907.369:925): avc: denied { write } for pid=29202 comm="syz.0.7076" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1216.477955][ T30] audit: type=1400 audit(1786318907.389:926): avc: denied { write } for pid=29202 comm="syz.0.7076" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1216.931169][ T30] audit: type=1400 audit(1786318908.709:927): avc: denied { write } for pid=29217 comm="syz.2.7082" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1217.197368][ T30] audit: type=1400 audit(1786318908.729:928): avc: denied { write } for pid=29217 comm="syz.2.7082" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1218.389223][T13357] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1218.559514][T13357] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1218.574393][T13357] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.587601][T13357] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1218.631837][T13357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.644425][T13357] usb 2-1: Product: syz [ 1218.672819][T13357] usb 2-1: Manufacturer: syz [ 1218.690803][T13357] usb 2-1: SerialNumber: syz [ 1218.727241][T13357] usb 2-1: 0:2 : does not exist [ 1218.743558][T13357] usb 2-1: unit 9 not found! [ 1218.902656][T26788] udevd[26788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1218.935802][T13357] usb 2-1: USB disconnect, device number 50 [ 1219.913637][T29264] syzkaller0: entered promiscuous mode [ 1219.923991][T29264] syzkaller0: entered allmulticast mode [ 1219.942067][T29264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7092'. [ 1220.202492][T13339] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1220.683778][ T30] audit: type=1400 audit(1786318912.049:929): avc: denied { write } for pid=29266 comm="syz.1.7094" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1220.710214][T13357] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1221.013566][ T30] audit: type=1400 audit(1786318912.469:930): avc: denied { write } for pid=29266 comm="syz.1.7094" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1221.108970][T13339] usb 1-1: Using ep0 maxpacket: 16 [ 1221.115119][T13339] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1221.238629][T13357] usb 3-1: Using ep0 maxpacket: 16 [ 1221.260917][T13357] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1221.337590][T13357] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.433326][T13357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.504384][T13357] usb 3-1: Product: syz [ 1221.538219][T13357] usb 3-1: Manufacturer: syz [ 1221.579068][T13339] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.583977][T13357] usb 3-1: SerialNumber: syz [ 1221.592129][T13339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.602590][T13339] usb 1-1: Product: syz [ 1221.606973][T13339] usb 1-1: Manufacturer: syz [ 1221.612423][T13339] usb 1-1: SerialNumber: syz [ 1222.939630][T13357] powermate 3-1:251.0: probe with driver powermate failed with error -22 [ 1222.986361][T13357] usb 3-1: USB disconnect, device number 61 [ 1223.970569][T13339] powermate 1-1:251.0: probe with driver powermate failed with error -22 [ 1223.982873][T13339] usb 1-1: USB disconnect, device number 62 [ 1224.375005][ T30] audit: type=1400 audit(1786318916.179:931): avc: denied { write } for pid=29293 comm="syz.1.7100" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1224.491212][T13339] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1224.499967][ T30] audit: type=1400 audit(1786318916.209:932): avc: denied { write } for pid=29293 comm="syz.1.7100" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1224.585380][T29303] kAFS: No cell specified [ 1224.669439][T13339] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1224.697719][T13339] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1224.716199][T13339] usb 1-1: config 0 has no interface number 0 [ 1224.728234][T29318] binder: 29317:29318 unknown command 0 [ 1224.741437][T13339] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1224.759324][T29318] binder: 29317:29318 ioctl c0306201 2000000004c0 returned -22 [ 1224.778469][T13339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.787049][T13339] usb 1-1: Product: syz [ 1224.795337][T13339] usb 1-1: Manufacturer: syz [ 1224.800288][T13339] usb 1-1: SerialNumber: syz [ 1224.807613][T13339] usb 1-1: config 0 descriptor?? [ 1224.816461][T13339] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1224.824495][T13339] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1225.019283][T13357] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1225.022497][T13339] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1225.035311][T29310] netlink: 'syz.0.7105': attribute type 2 has an invalid length. [ 1225.050489][T29310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7105'. [ 1225.060759][T13339] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1225.098013][T29310] : entered promiscuous mode [ 1225.126716][T28651] usb 1-1: USB disconnect, device number 63 [ 1225.190706][T13357] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1225.214450][T13357] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.236461][T13357] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1225.268685][T13357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.289659][T13357] usb 3-1: config 0 descriptor?? [ 1225.306615][T13357] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1225.422928][T29342] syzkaller0: entered promiscuous mode [ 1225.428606][T29342] syzkaller0: entered allmulticast mode [ 1225.442905][T29342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7114'. [ 1225.510689][T25097] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 360 seconds [ 1225.558135][T13339] usb 3-1: USB disconnect, device number 62 [ 1226.261927][T29351] Cannot find add_set index 0 as target [ 1226.898865][T13339] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1227.069485][T13339] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1227.089298][T13339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.318366][ T30] audit: type=1400 audit(1786318918.989:933): avc: denied { write } for pid=29360 comm="syz.3.7119" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1227.378166][T13339] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1227.485551][T13339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.510973][ T30] audit: type=1400 audit(1786318919.009:934): avc: denied { write } for pid=29360 comm="syz.3.7119" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1227.545016][T13339] usb 3-1: config 0 descriptor?? [ 1227.562982][T13339] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1227.606310][T13339] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1227.796433][T13339] usb 3-1: USB disconnect, device number 63 [ 1228.913546][T29390] syzkaller0: entered promiscuous mode [ 1228.923550][T29390] syzkaller0: entered allmulticast mode [ 1228.957082][T29390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7126'. [ 1228.969344][T29392] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1229.207369][T29401] Cannot find add_set index 0 as target [ 1229.894061][T29392] nvme nvme0: failed to connect socket: -111 [ 1230.298922][T13339] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1230.461710][T13339] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1230.480355][T13339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1230.499341][T13339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.516166][T13339] usb 1-1: config 0 descriptor?? [ 1230.529546][T29407] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1231.325151][ T30] audit: type=1400 audit(1786318922.609:935): avc: denied { write } for pid=29423 comm="syz.2.7135" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1231.449052][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1231.733387][ T30] audit: type=1400 audit(1786318922.619:936): avc: denied { write } for pid=29423 comm="syz.2.7135" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1231.872992][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1232.881541][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1232.897760][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1232.910196][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1232.920345][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1232.932406][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.945509][ T10] usb 4-1: config 0 descriptor?? [ 1232.966056][T13339] usbhid 1-1:0.0: can't add hid device: -71 [ 1232.972354][T13339] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1233.128884][T26722] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1233.181542][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.564983][T13339] usb 1-1: USB disconnect, device number 64 [ 1233.607975][ T10] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 1233.620832][ T10] hdpvr 4-1:0.0: device init failed [ 1233.642146][ T10] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1233.672242][ T10] usb 4-1: USB disconnect, device number 58 [ 1233.915867][T26722] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1233.926100][T26722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1233.936252][T26722] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1233.946794][T26722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1233.957462][T26722] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1233.967350][T13339] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 1233.976832][T26722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.989341][T26722] usb 3-1: config 0 descriptor?? [ 1234.311070][T26722] hdpvr 3-1:0.0: firmware version 0x0 dated [ 1234.361281][T26722] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 1234.643758][T13339] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1234.740355][ T30] audit: type=1400 audit(1786318926.489:937): avc: denied { write } for pid=29454 comm="syz.1.7146" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1235.077582][ T30] audit: type=1400 audit(1786318926.509:938): avc: denied { write } for pid=29454 comm="syz.1.7146" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1235.090839][T13339] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1235.120545][T13339] usb 1-1: config 0 has no interface number 0 [ 1235.126711][T13339] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1235.158624][T13339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.170427][T13339] usb 1-1: Product: syz [ 1235.174693][T13339] usb 1-1: Manufacturer: syz [ 1235.183575][T13339] usb 1-1: SerialNumber: syz [ 1235.201906][T29459] syzkaller1: entered promiscuous mode [ 1235.207530][T29459] syzkaller1: entered allmulticast mode [ 1235.270862][T13339] usb 1-1: config 0 descriptor?? [ 1235.293298][T13339] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1235.305967][T13339] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1235.456459][T26722] hdpvr 3-1:0.0: Could not setup controls [ 1235.474139][T26722] hdpvr 3-1:0.0: registering videodev failed [ 1235.495435][T13339] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1235.499727][T29447] netlink: 'syz.0.7142': attribute type 2 has an invalid length. [ 1235.521645][T13339] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1235.528268][T26722] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 1235.543181][T29447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7142'. [ 1235.565596][T26722] usb 3-1: USB disconnect, device number 64 [ 1235.614730][T13339] usb 1-1: USB disconnect, device number 65 [ 1238.086102][ T5611] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 1238.340858][ T30] audit: type=1400 audit(1786318930.109:939): avc: denied { write } for pid=29505 comm="syz.4.7159" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1239.330941][ T30] audit: type=1400 audit(1786318930.139:940): avc: denied { write } for pid=29505 comm="syz.4.7159" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1240.435493][T26681] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1241.683179][T26681] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1241.749851][T26681] usb 5-1: config 0 has no interfaces? [ 1241.783973][T26681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.800476][T26681] usb 5-1: Product: syz [ 1241.807020][T26681] usb 5-1: Manufacturer: syz [ 1241.821672][T26681] usb 5-1: SerialNumber: syz [ 1241.832273][T26681] usb 5-1: config 0 descriptor?? [ 1242.454186][T29517] netlink: 'syz.4.7162': attribute type 2 has an invalid length. [ 1242.472547][T29517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7162'. [ 1242.498252][T26681] usb 5-1: USB disconnect, device number 58 [ 1242.508893][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1242.668976][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1242.685423][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1242.705735][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1242.720864][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.734519][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1242.753379][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.763076][ T10] usb 3-1: Product: syz [ 1242.773234][ T10] usb 3-1: Manufacturer: syz [ 1242.781956][ T10] usb 3-1: SerialNumber: syz [ 1242.806133][ T10] usb 3-1: interface 1 not found [ 1243.060969][ T5611] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1243.898858][ T10] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1243.999024][T26722] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1244.089765][ T10] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1244.103395][ T10] usb 2-1: config 0 has no interfaces? [ 1244.113337][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.129246][ T10] usb 2-1: Product: syz [ 1244.133470][ T10] usb 2-1: Manufacturer: syz [ 1244.138057][ T10] usb 2-1: SerialNumber: syz [ 1244.148889][ T10] usb 2-1: config 0 descriptor?? [ 1244.169046][T26722] usb 5-1: Using ep0 maxpacket: 16 [ 1244.177658][T26722] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1244.193667][T26722] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.214642][T26722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.231640][T26722] usb 5-1: Product: syz [ 1244.240922][T26722] usb 5-1: Manufacturer: syz [ 1244.249310][T26722] usb 5-1: SerialNumber: syz [ 1244.373047][T29573] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7177'. [ 1244.384644][ T10] usb 2-1: USB disconnect, device number 51 [ 1244.930388][T13354] usb 3-1: USB disconnect, device number 65 [ 1245.000781][T29585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1245.193455][T29592] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1245.336110][T29597] misc userio: The device must be registered before sending interrupts [ 1245.347119][T29597] misc userio: The device must be registered before sending interrupts [ 1245.452279][T13357] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 1245.477445][T29603] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7186'. [ 1245.553774][T29592] nvme nvme0: failed to connect socket: -111 [ 1245.621448][T13357] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1245.646347][T13357] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1245.661958][T13357] usb 1-1: config 0 has no interface number 0 [ 1245.669816][T13357] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1245.687763][T13357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.713398][T13357] usb 1-1: Product: syz [ 1245.723077][T13357] usb 1-1: Manufacturer: syz [ 1245.731615][T13357] usb 1-1: SerialNumber: syz [ 1245.756299][T13357] usb 1-1: config 0 descriptor?? [ 1245.770131][T13357] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1245.784170][T13357] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1246.340899][T13357] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1246.361429][T26722] powermate 5-1:251.0: probe with driver powermate failed with error -22 [ 1246.373489][T13357] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1246.392989][T26722] usb 5-1: USB disconnect, device number 59 [ 1246.403298][T13357] usb 1-1: USB disconnect, device number 66 [ 1246.927652][T29617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7189'. [ 1247.903486][T29640] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1248.799067][T26722] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1249.595722][T26722] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1249.648543][T26722] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1249.851713][T26722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.872526][T26722] usb 3-1: config 0 descriptor?? [ 1249.884083][T26722] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1249.958930][ T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1250.409140][T26722] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1250.499907][T13357] usb 3-1: USB disconnect, device number 66 [ 1250.529998][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1250.540404][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1250.553450][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.565630][ T10] usb 5-1: config 0 descriptor?? [ 1250.575751][T29656] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1250.640017][T26722] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1250.651477][T26722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1250.663115][T26722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.674843][T26722] usb 1-1: config 0 descriptor?? [ 1250.681641][T29668] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1251.041921][ T10] hid_parser_main: 354 callbacks suppressed [ 1251.041946][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.056463][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.066033][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.068950][T13357] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1251.084049][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.113970][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.141451][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.216489][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.317625][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.356268][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.410338][T13339] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1251.462791][ T10] logitech-djreceiver 0003:046D:C71F.0011: unknown main item tag 0x0 [ 1251.518258][T26722] logitech-djreceiver 0003:046D:C71F.0012: collection stack underflow [ 1251.528949][T26722] logitech-djreceiver 0003:046D:C71F.0012: item 0 1 0 12 parsing failed [ 1251.533541][ T10] logitech-djreceiver 0003:046D:C71F.0011: collection stack underflow [ 1251.537799][T26722] logitech-djreceiver 0003:046D:C71F.0012: logi_dj_probe: parse failed [ 1251.554401][T26722] logitech-djreceiver 0003:046D:C71F.0012: probe with driver logitech-djreceiver failed with error -22 [ 1251.562665][ T10] logitech-djreceiver 0003:046D:C71F.0011: item 0 1 0 12 parsing failed [ 1251.576120][T26722] usb 1-1: USB disconnect, device number 67 [ 1251.577049][T29682] syzkaller0: entered promiscuous mode [ 1251.590211][T13357] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1251.591392][ T10] logitech-djreceiver 0003:046D:C71F.0011: logi_dj_probe: parse failed [ 1251.608013][T29682] syzkaller0: entered allmulticast mode [ 1251.616102][ T10] logitech-djreceiver 0003:046D:C71F.0011: probe with driver logitech-djreceiver failed with error -22 [ 1251.625334][T13357] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1251.636008][ T10] usb 5-1: USB disconnect, device number 60 [ 1251.656463][T13357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.669012][T13339] usb 2-1: Using ep0 maxpacket: 16 [ 1251.681808][T13357] usb 3-1: config 0 descriptor?? [ 1251.682145][T13339] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1251.698899][T13339] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.703958][T13357] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1251.734616][T13339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.742829][T13357] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1251.748140][T13357] usb 3-1: USB disconnect, device number 67 [ 1251.772164][T13339] usb 2-1: Product: syz [ 1251.779997][T13339] usb 2-1: Manufacturer: syz [ 1251.787639][T13339] usb 2-1: SerialNumber: syz [ 1253.969621][T13339] powermate 2-1:251.0: probe with driver powermate failed with error -22 [ 1254.109552][T13339] usb 2-1: USB disconnect, device number 52 [ 1255.590256][T25097] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 390 seconds [ 1255.772922][T29741] Cannot find add_set index 0 as target [ 1255.808053][T29739] busy [ 1256.412583][ T30] audit: type=1400 audit(1786318948.169:941): avc: denied { write } for pid=29745 comm="syz.2.7225" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1256.582615][ T30] audit: type=1400 audit(1786318948.189:942): avc: denied { write } for pid=29745 comm="syz.2.7225" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1257.716931][T26722] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1257.729375][ T30] audit: type=1400 audit(1786318948.799:943): avc: denied { write } for pid=29753 comm="syz.3.7226" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1257.956947][ T30] audit: type=1400 audit(1786318948.819:944): avc: denied { write } for pid=29753 comm="syz.3.7226" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1258.114370][T29764] misc userio: The device must be registered before sending interrupts [ 1258.131870][T26722] usb 1-1: Using ep0 maxpacket: 8 [ 1258.150748][T26722] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1258.165449][T29767] misc userio: The device must be registered before sending interrupts [ 1258.178044][T26722] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1258.193451][T26722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.203008][T26722] usb 1-1: Product: syz [ 1258.210934][T26722] usb 1-1: Manufacturer: syz [ 1258.215875][T26722] usb 1-1: SerialNumber: syz [ 1258.224736][T26722] usb 1-1: config 0 descriptor?? [ 1258.235560][T26722] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1258.254047][T26722] usb 1-1: setting power ON [ 1258.262283][T26722] dvb-usb: bulk message failed: -22 (2/0) [ 1258.305873][T26722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1258.331366][T26722] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1258.360106][T26722] usb 1-1: media controller created [ 1258.454739][T26722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1258.546378][T26722] usb 1-1: selecting invalid altsetting 6 [ 1258.576089][T26722] usb 1-1: digital interface selection failed (-22) [ 1258.603885][T26722] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1258.631901][T26722] usb 1-1: setting power OFF [ 1258.674693][T26722] dvb-usb: bulk message failed: -22 (2/0) [ 1258.705332][T26722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1258.731246][T26722] (NULL device *): no alternate interface [ 1258.813095][T26722] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1258.860353][T26722] usb 1-1: USB disconnect, device number 68 [ 1259.030059][T29782] netlink: 'syz.4.7231': attribute type 4 has an invalid length. [ 1259.628872][T13339] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1259.783981][T29807] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7240'. [ 1259.802222][T13339] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1259.830501][T13339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1259.841356][T13339] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1259.864222][T13339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1259.886850][T13339] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1259.911629][T13339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.939834][T13339] usb 4-1: config 0 descriptor?? [ 1260.166306][T13339] hdpvr 4-1:0.0: firmware version 0x0 dated [ 1260.183827][T13339] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1260.921845][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1260.929344][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1260.936761][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1260.952799][T13339] hdpvr 4-1:0.0: max device number reached, device register failed [ 1260.985294][T13339] usb 4-1: USB disconnect, device number 59 [ 1264.936140][T29869] tipc: Enabling of bearer rejected, failed to enable media [ 1265.113348][T29869] syzkaller0: entered promiscuous mode [ 1265.128128][T29869] syzkaller0: entered allmulticast mode [ 1265.336946][ T30] audit: type=1400 audit(1786318957.119:945): avc: denied { write } for pid=29871 comm="syz.2.7261" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1265.944832][ T30] audit: type=1400 audit(1786318957.119:946): avc: denied { write } for pid=29871 comm="syz.2.7261" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1266.357717][ T30] audit: type=1400 audit(1786318958.129:947): avc: denied { write } for pid=29883 comm="syz.2.7264" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1266.466151][ T30] audit: type=1400 audit(1786318958.149:948): avc: denied { write } for pid=29883 comm="syz.2.7264" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1266.529231][T13339] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1266.723663][T13339] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1266.755615][T13339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1266.774949][T13339] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1266.788034][T13339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1266.799224][T13339] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1266.809078][T13339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.826815][T13339] usb 1-1: config 0 descriptor?? [ 1267.042038][ T5611] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1267.057872][T13339] hdpvr 1-1:0.0: firmware version 0x0 dated [ 1267.074436][T13339] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 1267.128880][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1267.284445][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1267.295123][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1267.318712][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.344334][ T10] usb 4-1: config 0 descriptor?? [ 1267.352933][T29892] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1267.520073][T13339] hdpvr 1-1:0.0: max device number reached, device register failed [ 1267.605179][T13339] usb 1-1: USB disconnect, device number 69 [ 1267.803624][ T10] hid_parser_main: 718 callbacks suppressed [ 1267.803644][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.820505][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.828735][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.837188][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.845493][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.855069][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.864020][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.873742][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.885897][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.903111][ T10] logitech-djreceiver 0003:046D:C71F.0013: unknown main item tag 0x0 [ 1267.924953][ T10] logitech-djreceiver 0003:046D:C71F.0013: collection stack underflow [ 1267.942264][ T10] logitech-djreceiver 0003:046D:C71F.0013: item 0 1 0 12 parsing failed [ 1267.963660][ T10] logitech-djreceiver 0003:046D:C71F.0013: logi_dj_probe: parse failed [ 1267.972831][ T10] logitech-djreceiver 0003:046D:C71F.0013: probe with driver logitech-djreceiver failed with error -22 [ 1268.007599][ T10] usb 4-1: USB disconnect, device number 60 [ 1269.539079][ T10] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1269.651065][ T5611] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 1269.761535][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1269.789559][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1269.819112][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.853848][ T10] usb 3-1: config 0 descriptor?? [ 1269.917930][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1270.484543][ T10] usb 3-1: USB disconnect, device number 68 [ 1271.005634][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1271.352246][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1271.391927][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1271.404902][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.416642][ T10] usb 3-1: config 0 descriptor?? [ 1271.435197][ T10] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1271.457110][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1272.229253][T13354] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1272.550152][T13354] usb 5-1: Using ep0 maxpacket: 32 [ 1273.318092][T13354] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1273.339653][T13354] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1273.360201][T13354] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.372924][T13357] usb 3-1: USB disconnect, device number 69 [ 1273.381014][T29975] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7285'. [ 1273.385531][T13354] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1273.408410][T29975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7285'. [ 1273.436192][T13354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.450444][T13354] usb 5-1: Product: syz [ 1273.455784][T29975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7285'. [ 1273.467252][T13354] usb 5-1: Manufacturer: syz [ 1273.472937][T13354] usb 5-1: SerialNumber: syz [ 1274.196044][ T5611] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1276.198558][ T30] audit: type=1400 audit(1786318967.629:949): avc: denied { write } for pid=29992 comm="syz.2.7289" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1276.577565][ T30] audit: type=1400 audit(1786318967.649:950): avc: denied { write } for pid=29992 comm="syz.2.7289" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1276.852235][T29998] 9p: Bad value for 'rfdno' [ 1277.076687][T30002] tipc: Enabling of bearer rejected, failed to enable media [ 1277.102075][T13339] usb 5-1: USB disconnect, device number 61 [ 1277.183812][T30002] syzkaller0: entered promiscuous mode [ 1277.202599][T30002] syzkaller0: entered allmulticast mode [ 1278.368834][T13354] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1278.543038][T13354] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1278.607593][T13354] usb 2-1: config 0 has no interfaces? [ 1278.628505][T13354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.979339][T13354] usb 2-1: Product: syz [ 1278.985375][T13354] usb 2-1: Manufacturer: syz [ 1278.994903][T13354] usb 2-1: SerialNumber: syz [ 1279.034441][T13354] usb 2-1: config 0 descriptor?? [ 1279.280386][T30042] netlink: 1760 bytes leftover after parsing attributes in process `syz.3.7300'. [ 1279.311971][T30015] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7296'. [ 1279.336574][T13354] usb 2-1: USB disconnect, device number 53 [ 1281.972895][T30055] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1283.183887][T26681] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1283.191559][T13339] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1283.233952][T30093] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7311'. [ 1283.242932][T30093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7311'. [ 1283.252015][T30093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7311'. [ 1283.348860][T26681] usb 5-1: Using ep0 maxpacket: 16 [ 1283.354057][T13339] usb 1-1: Using ep0 maxpacket: 16 [ 1283.384274][T30096] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7312'. [ 1283.394493][T26681] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1283.404384][T13339] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1283.430059][T26681] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.443943][T13339] usb 1-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.983866][T26681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.334645][T26681] usb 5-1: Product: syz [ 1284.340669][T26681] usb 5-1: Manufacturer: syz [ 1284.346850][T13339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.354937][T26681] usb 5-1: SerialNumber: syz [ 1284.359902][T13339] usb 1-1: Product: syz [ 1284.365340][T13339] usb 1-1: Manufacturer: syz [ 1284.370317][T13339] usb 1-1: SerialNumber: syz [ 1284.436773][T30107] binder: 30106:30107 unknown command 0 [ 1284.453532][T30107] binder: 30106:30107 ioctl c0306201 2000000004c0 returned -22 [ 1284.477177][T30107] binder: 30106:30107 ioctl c0306201 0 returned -14 [ 1284.505807][T30115] netlink: 1760 bytes leftover after parsing attributes in process `syz.1.7315'. [ 1284.694755][T30122] tipc: Enabling of bearer rejected, failed to enable media [ 1284.755165][T30122] syzkaller0: entered promiscuous mode [ 1284.762264][T30122] syzkaller0: entered allmulticast mode [ 1285.632749][T13339] powermate 1-1:251.0: probe with driver powermate failed with error -22 [ 1285.658007][T13339] usb 1-1: USB disconnect, device number 70 [ 1285.693111][T25097] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 420 seconds [ 1285.774356][T26681] powermate 5-1:251.0: probe with driver powermate failed with error -22 [ 1285.801784][T26681] usb 5-1: USB disconnect, device number 62 [ 1286.636302][ T30] audit: type=1326 audit(1786318978.439:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30146 comm="syz.1.7321" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66bb79e0d9 code=0x0 [ 1286.697977][T30149] binder: 30146:30149 unknown command 0 [ 1286.703764][T30149] binder: 30146:30149 ioctl c0306201 2000000004c0 returned -22 [ 1288.662674][T30179] Cannot find add_set index 0 as target [ 1291.071164][T30212] syzkaller0: entered promiscuous mode [ 1291.091516][T30212] syzkaller0: entered allmulticast mode [ 1291.179568][T13357] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1291.339823][T13357] usb 4-1: Using ep0 maxpacket: 16 [ 1291.350678][T13357] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1291.363209][T13357] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.379973][T13357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.388075][T13357] usb 4-1: Product: syz [ 1291.393481][T13357] usb 4-1: Manufacturer: syz [ 1291.398279][T13357] usb 4-1: SerialNumber: syz [ 1291.448874][T26681] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1291.913123][T26681] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1291.947308][T26681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1291.957228][T26681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1291.971237][T26681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1291.991957][T26681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1292.008970][T26681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.017656][T30226] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1292.028097][T26681] usb 2-1: config 0 descriptor?? [ 1292.267388][T26681] hdpvr 2-1:0.0: firmware version 0x0 dated [ 1292.274002][T26681] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1292.367483][T30228] syzkaller0: entered promiscuous mode [ 1292.374170][T30228] syzkaller0: entered allmulticast mode [ 1292.403597][T30228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1292.696375][T26681] hdpvr 2-1:0.0: max device number reached, device register failed [ 1292.732471][T26681] usb 2-1: USB disconnect, device number 54 [ 1292.839629][T13354] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1292.878860][T13339] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1293.020832][T13354] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1293.029393][T13339] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1293.040310][T13354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.040489][T13339] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1293.061200][T13339] usb 1-1: config 0 has no interface number 0 [ 1293.065915][T13354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.067360][T13339] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1293.096561][T13339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.097132][T13354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.105145][T13339] usb 1-1: Product: syz [ 1293.122199][T13339] usb 1-1: Manufacturer: syz [ 1293.128117][T13339] usb 1-1: SerialNumber: syz [ 1293.183735][T13354] usb 3-1: config 0 descriptor?? [ 1293.489790][T13339] usb 1-1: config 0 descriptor?? [ 1293.514418][T13354] usbhid 3-1:0.0: can't add hid device: -71 [ 1293.528518][T13339] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1293.534690][T13354] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1293.547867][T13357] powermate 4-1:251.0: probe with driver powermate failed with error -22 [ 1293.571784][T13339] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1293.578257][T13354] usb 3-1: USB disconnect, device number 70 [ 1293.592795][T13357] usb 4-1: USB disconnect, device number 61 [ 1293.785234][T13339] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 1293.909859][T13339] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 1294.034101][T13339] usb 1-1: USB disconnect, device number 71 [ 1294.318849][T13354] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1294.319139][ T30] audit: type=1326 audit(1786318986.129:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30261 comm="syz.1.7352" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66bb79e0d9 code=0x0 [ 1294.453907][T30269] binder: 30261:30269 unknown command 0 [ 1294.474235][T30269] binder: 30261:30269 ioctl c0306201 2000000004c0 returned -22 [ 1294.489903][T13354] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1294.515807][T13354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.528524][T13354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.542367][T13354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.839515][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.077979][T13354] usb 3-1: config 0 descriptor?? [ 1295.319545][T30277] syzkaller0: entered promiscuous mode [ 1295.361745][T30277] syzkaller0: entered allmulticast mode [ 1295.500066][T30277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7356'. [ 1296.740909][T13354] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1296.941860][T13354] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 1296.972060][T13354] input: failed to attach handler kbd to device input16, error: -5 [ 1297.185339][T30296] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7360'. [ 1297.213832][T13354] usb 3-1: USB disconnect, device number 71 [ 1297.224042][T30294] netlink: 'syz.3.7355': attribute type 4 has an invalid length. [ 1298.151225][T30317] overlayfs: missing 'lowerdir' [ 1298.269011][ T10] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 1298.459950][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1298.472805][ T10] usb 1-1: config 0 has no interfaces? [ 1298.480544][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.496221][ T10] usb 1-1: Product: syz [ 1298.502442][ T10] usb 1-1: Manufacturer: syz [ 1298.508601][ T10] usb 1-1: SerialNumber: syz [ 1298.532821][ T10] usb 1-1: config 0 descriptor?? [ 1298.658148][ T30] audit: type=1400 audit(1786318990.459:953): avc: denied { read } for pid=30323 comm="syz.1.7367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1298.849896][T30314] netlink: 'syz.0.7364': attribute type 2 has an invalid length. [ 1298.867540][T30314] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7364'. [ 1298.930436][ T10] usb 1-1: USB disconnect, device number 72 [ 1299.259244][T13354] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1299.468906][T13354] usb 4-1: Using ep0 maxpacket: 16 [ 1299.486992][T13354] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1299.507020][T13354] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.546651][T13354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.569855][T13354] usb 4-1: Product: syz [ 1299.576601][T13354] usb 4-1: Manufacturer: syz [ 1299.585876][T13354] usb 4-1: SerialNumber: syz [ 1300.554873][ T5611] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 1300.793997][T30357] netlink: 'syz.4.7374': attribute type 4 has an invalid length. [ 1301.045581][T13339] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1301.598855][T13339] usb 3-1: Using ep0 maxpacket: 32 [ 1301.607833][T13339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1301.619656][T13339] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1301.680695][T13339] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.709499][T13339] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1301.736934][T13339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.756680][T13339] usb 3-1: Product: syz [ 1301.766297][T13339] usb 3-1: Manufacturer: syz [ 1301.776157][T13339] usb 3-1: SerialNumber: syz [ 1301.795431][T13354] powermate 4-1:251.0: probe with driver powermate failed with error -22 [ 1301.827608][T13354] usb 4-1: USB disconnect, device number 62 [ 1302.152210][ T5611] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1302.625415][T13357] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1302.865005][T30383] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7385'. [ 1302.878882][T13354] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1303.532405][T13357] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1303.541691][T13354] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1303.561949][T13354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1303.572117][T13357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1303.586164][T13354] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1303.597277][T13357] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1303.607396][T13354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1303.617295][T13357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1303.627663][T13354] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1303.641237][T13357] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1303.658173][T13354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.666603][T13357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.684040][T13357] usb 1-1: config 0 descriptor?? [ 1303.690861][T13354] usb 4-1: config 0 descriptor?? [ 1303.901383][T13357] hdpvr 1-1:0.0: firmware version 0x0 dated [ 1303.913310][T13357] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 1303.921123][T13354] hdpvr 4-1:0.0: firmware version 0x0 dated [ 1303.940592][T13354] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1304.127640][T13354] hdpvr 4-1:0.0: device init failed [ 1304.157332][T13354] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1304.197594][T13354] usb 4-1: USB disconnect, device number 63 [ 1304.337790][T13357] hdpvr 1-1:0.0: max device number reached, device register failed [ 1304.387782][T13357] usb 1-1: USB disconnect, device number 73 [ 1304.574747][T13339] usb 3-1: USB disconnect, device number 72 [ 1304.669980][T30397] syzkaller0: entered promiscuous mode [ 1304.679803][T30397] syzkaller0: entered allmulticast mode [ 1305.505258][T30406] busy [ 1306.056257][ T30] audit: type=1326 audit(1786318997.859:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30418 comm="syz.2.7395" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc10579e0d9 code=0x0 [ 1306.110208][T30424] binder: 30418:30424 unknown command 0 [ 1306.141759][T30424] binder: 30418:30424 ioctl c0306201 2000000004c0 returned -22 [ 1307.322995][T30394] Set syz1 is full, maxelem 65536 reached [ 1307.548850][T13354] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1308.259430][T13354] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1308.278702][T13354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1308.369197][T13354] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1308.403262][T13354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1308.430627][T13354] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1308.456335][T13354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.487044][T13354] usb 1-1: config 0 descriptor?? [ 1308.723788][T13354] hdpvr 1-1:0.0: firmware version 0x0 dated [ 1308.731857][T13354] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 1309.295995][T13354] hdpvr 1-1:0.0: device init failed [ 1309.302218][T13354] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1309.335358][T13354] usb 1-1: USB disconnect, device number 74 [ 1309.913759][T13354] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1310.949397][ T30] audit: type=1400 audit(1786319001.879:955): avc: denied { write } for pid=30469 comm="syz.2.7408" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1311.157646][ T30] audit: type=1400 audit(1786319001.899:956): avc: denied { write } for pid=30469 comm="syz.2.7408" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1311.238872][T13354] usb 1-1: Using ep0 maxpacket: 32 [ 1311.252750][T13354] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1311.393593][T13354] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1311.403115][T13354] usb 1-1: config 0 has no interface number 0 [ 1311.409474][T13354] usb 1-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 1311.420602][T13354] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1311.433631][T30485] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1311.970248][T13354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.989548][T13354] usb 1-1: Product: syz [ 1312.007656][T13354] usb 1-1: Manufacturer: syz [ 1312.021589][T13354] usb 1-1: SerialNumber: syz [ 1312.044266][T13354] usb 1-1: config 0 descriptor?? [ 1312.112173][T13354] f81534 1-1:0.12: required endpoints missing [ 1312.901631][T13354] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1313.138904][T13354] usb 3-1: Using ep0 maxpacket: 32 [ 1313.384985][T13354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1313.393226][T13354] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1313.407336][T13354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.452812][T13354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1313.468666][T13357] usb 1-1: USB disconnect, device number 75 [ 1313.501082][T13354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.514173][T13354] usb 3-1: Product: syz [ 1313.524194][T13354] usb 3-1: Manufacturer: syz [ 1313.530197][T30485] nvme nvme0: failed to connect socket: -512 [ 1313.536266][T13354] usb 3-1: SerialNumber: syz [ 1313.554785][T13354] usb 3-1: interface 1 not found [ 1313.787602][ T5611] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1314.227334][ T5964] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1314.842052][ T30] audit: type=1400 audit(1786319006.649:957): avc: denied { write } for pid=30512 comm="syz.0.7417" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1314.894115][ T30] audit: type=1400 audit(1786319006.679:958): avc: denied { write } for pid=30512 comm="syz.0.7417" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1315.199970][T13354] usb 3-1: USB disconnect, device number 73 [ 1315.749143][T25097] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 450 seconds [ 1316.927686][T30551] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7428'. [ 1317.068688][T30515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1317.400126][ T5611] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 1318.603755][T30578] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1318.635220][T30578] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1319.327132][T30589] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1319.390095][ T5611] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 1319.701470][T30597] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1320.487626][T30603] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1320.513358][T30603] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1320.543376][T30603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1320.726723][ T5958] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1320.815391][T30541] Set syz1 is full, maxelem 65536 reached [ 1320.840792][T30614] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1323.018979][T13339] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1323.180593][T13339] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1323.190724][T13339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1323.200440][T13339] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1323.210140][T13339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1323.220109][T13339] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1323.230070][T13339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.239693][T13339] usb 4-1: config 0 descriptor?? [ 1323.448429][T13339] hdpvr 4-1:0.0: firmware version 0x0 dated [ 1323.454553][T13339] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1323.512658][T30605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1323.655083][T13339] hdpvr 4-1:0.0: device init failed [ 1323.667684][T13339] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1323.685775][T13339] usb 4-1: USB disconnect, device number 64 [ 1323.745910][T30659] Cannot find del_set index 4 as target [ 1323.869131][T26681] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1323.888880][ T10] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1323.954777][T30670] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1324.030341][T26681] usb 5-1: Using ep0 maxpacket: 32 [ 1324.043972][T26681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1324.053024][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1324.066621][T26681] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1324.078900][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.094148][T26681] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.104593][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1324.123976][T26681] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1324.138463][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.152113][T26681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.163869][ T10] usb 3-1: config 0 descriptor?? [ 1324.171697][T26681] usb 5-1: Product: syz [ 1324.184019][T26681] usb 5-1: Manufacturer: syz [ 1324.194692][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1324.202383][T26681] usb 5-1: SerialNumber: syz [ 1324.691875][ T5611] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1325.495782][T30670] nvme nvme0: failed to connect socket: -512 [ 1326.820121][T13353] usb 5-1: USB disconnect, device number 63 [ 1327.132722][ T5964] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1327.348899][T13357] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1327.508823][T13357] usb 4-1: Using ep0 maxpacket: 32 [ 1327.515450][T13357] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1327.523318][T13357] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1327.533220][T13357] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.543496][T13357] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1327.556235][T13357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.564745][T13357] usb 4-1: Product: syz [ 1327.569028][T13357] usb 4-1: Manufacturer: syz [ 1327.573642][T13357] usb 4-1: SerialNumber: syz [ 1327.588287][T13357] usb 4-1: interface 1 not found [ 1327.622351][T30725] Cannot find add_set index 0 as target [ 1327.817156][ T5611] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1327.827796][T26681] usb 3-1: USB disconnect, device number 74 [ 1328.999025][T26681] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1329.150248][T26681] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1329.160261][T26681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.170429][T26681] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1329.181669][T26681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.189729][T26681] usb 3-1: Product: syz [ 1329.194497][T26681] usb 3-1: Manufacturer: syz [ 1329.199143][T26681] usb 3-1: SerialNumber: syz [ 1329.211272][T26681] usb 3-1: 0:2 : does not exist [ 1329.216175][T26681] usb 3-1: unit 4 not found! [ 1329.411916][T13357] usb 3-1: USB disconnect, device number 75 [ 1329.549613][T13353] usb 4-1: USB disconnect, device number 65 [ 1330.055480][T30703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1330.145245][T30736] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1332.828934][T13357] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1333.041074][T13357] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1333.106397][T13357] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.130591][T13357] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1333.149672][T13357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.162523][T13357] usb 5-1: Product: syz [ 1333.169719][T13357] usb 5-1: Manufacturer: syz [ 1333.174395][T13357] usb 5-1: SerialNumber: syz [ 1333.210762][T13357] usb 5-1: 0:2 : does not exist [ 1333.220753][T13357] usb 5-1: unit 4 not found! [ 1333.437313][T13357] usb 5-1: USB disconnect, device number 64 [ 1333.540988][T30792] Cannot find del_set index 4 as target [ 1334.089229][T26681] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1334.290863][T26681] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1334.405471][T26681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1334.506998][T26681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.552609][T26681] usb 1-1: config 0 descriptor?? [ 1334.654949][T30799] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1334.800738][T13354] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1334.959013][T13357] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1334.998947][T13354] usb 5-1: Using ep0 maxpacket: 32 [ 1335.061608][T13354] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1335.104971][T13354] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1335.158990][T13357] usb 3-1: Using ep0 maxpacket: 32 [ 1335.182075][T13354] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.223614][T13357] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1335.253646][T13354] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1335.272763][T13357] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1335.321237][T13354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.347375][T13357] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.374596][T13354] usb 5-1: Product: syz [ 1335.393679][T13354] usb 5-1: Manufacturer: syz [ 1335.393706][T13357] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1335.444458][T13357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.475234][T13357] usb 3-1: Product: syz [ 1335.488386][T13354] usb 5-1: SerialNumber: syz [ 1335.512480][T13357] usb 3-1: Manufacturer: syz [ 1335.561663][T13357] usb 3-1: SerialNumber: syz [ 1335.603880][T26681] hid_parser_main: 354 callbacks suppressed [ 1335.603900][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.619340][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.632581][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.641005][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.657135][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.669299][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.678656][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.689603][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.697748][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.706151][T26681] logitech-djreceiver 0003:046D:C71F.0014: unknown main item tag 0x0 [ 1335.728351][T26681] logitech-djreceiver 0003:046D:C71F.0014: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 1335.828162][T26681] usb 1-1: USB disconnect, device number 76 [ 1335.972755][ T5611] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1336.549120][ T5611] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1337.810372][T13357] usb 5-1: USB disconnect, device number 65 [ 1337.867176][T13353] usb 3-1: USB disconnect, device number 76 [ 1337.910497][T30826] misc userio: The device must be registered before sending interrupts [ 1337.958218][T30826] misc userio: The device must be registered before sending interrupts [ 1337.963827][T30828] syzkaller0: entered promiscuous mode [ 1337.996392][T30828] syzkaller0: entered allmulticast mode [ 1338.010394][T30826] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7497'. [ 1338.139984][T30836] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1338.149055][T30836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1338.173433][T30836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7501'. [ 1338.985505][T30860] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1339.583487][T30860] nvme nvme0: failed to connect socket: -512 [ 1339.593730][T26681] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1339.769203][T26681] usb 5-1: Using ep0 maxpacket: 32 [ 1339.785275][T26681] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1339.802141][T26681] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1339.828384][T26681] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.874842][T26681] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1339.917934][T26681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.936569][T26681] usb 5-1: Product: syz [ 1339.948187][T26681] usb 5-1: Manufacturer: syz [ 1339.960776][T26681] usb 5-1: SerialNumber: syz [ 1339.999763][T26681] usb 5-1: interface 1 not found [ 1340.313403][ T5611] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1340.753939][T30888] syzkaller0: entered promiscuous mode [ 1340.783022][T30888] syzkaller0: entered allmulticast mode [ 1341.131146][T30894] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7515'. [ 1341.141806][T30894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7515'. [ 1341.151216][T30894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7515'. [ 1341.256828][T30899] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1342.163130][T13354] usb 5-1: USB disconnect, device number 66 [ 1343.130489][T30927] syzkaller0: entered promiscuous mode [ 1343.136280][T30927] syzkaller0: entered allmulticast mode [ 1343.438479][T30937] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1343.461095][T30937] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1345.187448][T30957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7535'. [ 1345.287239][T30960] syzkaller0: entered promiscuous mode [ 1345.301274][T30960] syzkaller0: entered allmulticast mode [ 1345.821896][T30680] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 480 seconds [ 1346.644049][T30991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1347.629431][T30996] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1349.262779][T26681] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1349.493038][T31018] syzkaller0: entered promiscuous mode [ 1349.576049][T31018] syzkaller0: entered allmulticast mode [ 1349.678034][T26681] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1349.699541][T26681] usb 3-1: config 0 has no interfaces? [ 1349.707043][T26681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.715280][T26681] usb 3-1: Product: syz [ 1349.720898][T26681] usb 3-1: Manufacturer: syz [ 1350.225729][T26681] usb 3-1: SerialNumber: syz [ 1350.250791][T26681] usb 3-1: config 0 descriptor?? [ 1350.339541][T31001] Cannot find add_set index 0 as target [ 1350.436315][T31025] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7554'. [ 1350.486830][T31011] netlink: 'syz.2.7549': attribute type 2 has an invalid length. [ 1350.503558][T31011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7549'. [ 1350.528551][ T10] usb 3-1: USB disconnect, device number 77 [ 1350.557346][T30952] Set syz1 is full, maxelem 65536 reached [ 1350.688878][T26681] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1351.246534][T31044] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7559'. [ 1351.256353][T31044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7559'. [ 1351.265532][T31044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7559'. [ 1351.300154][T26681] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1351.322371][T26681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1351.345318][T26681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.356858][T26681] usb 2-1: config 0 descriptor?? [ 1351.364412][T31023] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1351.970771][T26681] hid_parser_main: 457 callbacks suppressed [ 1351.970793][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.026380][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.070537][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.079481][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.089467][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.100874][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.128914][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.138844][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.148677][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.456317][T26681] logitech-djreceiver 0003:046D:C71F.0015: unknown main item tag 0x0 [ 1352.501371][T26681] logitech-djreceiver 0003:046D:C71F.0015: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 1352.628090][ T30] audit: type=1400 audit(1786319044.419:959): avc: denied { write } for pid=31058 comm="syz.2.7564" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1352.752610][T31065] Cannot find add_set index 0 as target [ 1352.934904][ T30] audit: type=1400 audit(1786319044.429:960): avc: denied { ioctl } for pid=31058 comm="syz.2.7564" path="/307/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1353.008843][T26681] usb 2-1: USB disconnect, device number 55 [ 1353.066956][T31062] fido_id[31062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1353.445952][T31086] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7571'. [ 1353.577309][T31086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7571'. [ 1353.894592][T31086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7571'. [ 1355.773826][T31116] syzkaller0: entered promiscuous mode [ 1355.780060][T31116] syzkaller0: entered allmulticast mode [ 1355.802309][T31124] Cannot find add_set index 0 as target [ 1356.064757][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.925994][T31173] Cannot find del_set index 4 as target [ 1361.699960][T31161] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1361.845950][T31180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7596'. [ 1362.826361][T31199] overlayfs: missing 'workdir' [ 1364.598297][T31223] Cannot find add_set index 0 as target [ 1365.276071][T31228] overlayfs: missing 'workdir' [ 1365.445249][T31237] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1365.678482][T31235] syzkaller0: entered promiscuous mode [ 1365.690479][T31235] syzkaller0: entered allmulticast mode [ 1366.116492][ T10] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1366.198177][T31261] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7612'. [ 1366.318366][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1366.338900][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1366.384817][T31237] nvme nvme0: failed to connect socket: -512 [ 1366.391496][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.418598][ T10] usb 5-1: config 0 descriptor?? [ 1366.435338][T31246] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1366.888900][T13354] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1367.052668][T13354] usb 3-1: Using ep0 maxpacket: 32 [ 1367.054270][ T10] hid (null): report_id 0 is invalid [ 1367.084997][T13354] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1367.085845][ T10] hid_parser_main: 453 callbacks suppressed [ 1367.085860][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.098144][T13354] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1367.108808][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.146432][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.152118][T13354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.155064][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.165117][T13354] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1367.174544][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.194273][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.202757][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.211179][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.213321][T13354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.219798][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.237712][T13354] usb 3-1: Product: syz [ 1367.237983][ T10] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 1367.241996][T13354] usb 3-1: Manufacturer: syz [ 1367.251780][ T10] logitech-djreceiver 0003:046D:C71F.0016: report_id 0 is invalid [ 1367.254828][T13354] usb 3-1: SerialNumber: syz [ 1367.264430][ T10] logitech-djreceiver 0003:046D:C71F.0016: item 0 4 1 8 parsing failed [ 1367.277058][ T10] logitech-djreceiver 0003:046D:C71F.0016: logi_dj_probe: parse failed [ 1367.287854][ T10] logitech-djreceiver 0003:046D:C71F.0016: probe with driver logitech-djreceiver failed with error -22 [ 1367.321665][ T10] usb 5-1: USB disconnect, device number 67 [ 1367.705651][ T5611] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1369.721980][T26722] usb 3-1: USB disconnect, device number 78 [ 1370.391432][T26722] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1370.528901][T26722] usb 3-1: device descriptor read/64, error -71 [ 1370.768879][T26722] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1371.378872][T26722] usb 3-1: device descriptor read/64, error -71 [ 1371.492661][T26722] usb usb3-port1: attempt power cycle [ 1371.635969][T31289] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1372.256790][T26722] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1372.700661][T26722] usb 3-1: device descriptor read/8, error -71 [ 1372.938808][T26722] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1372.969721][T26722] usb 3-1: device descriptor read/8, error -71 [ 1373.017018][T31314] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1373.089246][T26722] usb usb3-port1: unable to enumerate USB device [ 1373.169116][T31318] busy [ 1373.798254][T31334] syzkaller0: entered promiscuous mode [ 1373.810868][T31334] syzkaller0: entered allmulticast mode [ 1373.843096][T31314] nvme nvme0: failed to connect socket: -512 [ 1375.327338][T31360] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7634'. [ 1375.909297][T30680] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 510 seconds [ 1376.708876][T26722] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1376.868871][T26722] usb 2-1: device descriptor read/64, error -71 [ 1377.108970][T26722] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1377.248861][T26722] usb 2-1: device descriptor read/64, error -71 [ 1377.375063][T26722] usb usb2-port1: attempt power cycle [ 1377.915844][ T5611] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 1377.923153][T26722] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1378.089292][T26722] usb 2-1: device descriptor read/8, error -71 [ 1378.568954][T26722] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1378.639613][T26722] usb 2-1: device descriptor read/8, error -71 [ 1378.850990][T26722] usb usb2-port1: unable to enumerate USB device [ 1381.172364][T26722] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1381.296280][ T30] audit: type=1400 audit(1786319073.099:961): avc: denied { write } for pid=31411 comm="syz.0.7651" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1381.482904][ T30] audit: type=1400 audit(1786319073.099:962): avc: denied { write } for pid=31411 comm="syz.0.7651" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1381.505694][T26722] usb 2-1: Using ep0 maxpacket: 32 [ 1381.513609][T26722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1381.573684][T26722] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1381.617127][T26722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.646085][T26722] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1381.693659][T26722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.707686][T31425] syzkaller0: entered promiscuous mode [ 1381.711224][T26722] usb 2-1: Product: syz [ 1381.714220][T31425] syzkaller0: entered allmulticast mode [ 1381.723839][T26722] usb 2-1: Manufacturer: syz [ 1381.738709][T26722] usb 2-1: SerialNumber: syz [ 1381.838822][T13357] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1381.989659][T13357] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1382.057022][ T5611] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1383.150700][T13357] usb 3-1: config 0 has no interfaces? [ 1383.166817][T13357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.175181][T13357] usb 3-1: Product: syz [ 1383.181392][T13357] usb 3-1: Manufacturer: syz [ 1383.188401][T13357] usb 3-1: SerialNumber: syz [ 1383.196682][T13357] usb 3-1: config 0 descriptor?? [ 1383.198057][ T10] usb 2-1: USB disconnect, device number 60 [ 1383.452723][T31426] netlink: 'syz.2.7652': attribute type 2 has an invalid length. [ 1383.460903][T31426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7652'. [ 1385.133749][T13357] usb 3-1: USB disconnect, device number 83 [ 1386.225096][ T5611] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 1387.263336][ T5867] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1387.278837][T26685] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1387.449449][T26685] usb 4-1: Using ep0 maxpacket: 32 [ 1387.553063][ T5611] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1388.386038][T31516] netlink: 'syz.2.7672': attribute type 4 has an invalid length. [ 1389.110512][T26685] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1389.118309][T26685] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1389.128070][T26685] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1389.135706][T26685] usb 4-1: can't read configurations, error -71 [ 1390.187264][T31493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1390.446773][T31536] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1392.033973][ T30] audit: type=1400 audit(1786319083.709:963): avc: denied { write } for pid=31546 comm="syz.3.7681" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1392.103446][T26685] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1392.169348][ T30] audit: type=1400 audit(1786319083.729:964): avc: denied { write } for pid=31546 comm="syz.3.7681" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1392.259096][T13357] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1392.309523][T26685] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1392.319404][T26685] usb 3-1: config 0 has no interfaces? [ 1392.326848][T26685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.335174][T26685] usb 3-1: Product: syz [ 1392.341624][T26685] usb 3-1: Manufacturer: syz [ 1392.348873][T26685] usb 3-1: SerialNumber: syz [ 1392.359493][T26685] usb 3-1: config 0 descriptor?? [ 1392.409286][T13357] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1392.427961][T13357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.436465][T13357] usb 1-1: Product: syz [ 1392.441774][T13357] usb 1-1: Manufacturer: syz [ 1392.446923][T13357] usb 1-1: SerialNumber: syz [ 1392.606444][T31551] netlink: 'syz.2.7682': attribute type 2 has an invalid length. [ 1392.617203][T31551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7682'. [ 1392.668107][T26685] usb 3-1: USB disconnect, device number 84 [ 1392.860284][T31560] netlink: 'syz.1.7683': attribute type 4 has an invalid length. [ 1393.363815][T13357] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1393.458273][T13357] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1395.010079][T13357] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 1395.031140][T13357] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1395.071983][T13357] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1395.104384][T13357] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1396.303848][ T10] usb 1-1: USB disconnect, device number 77 [ 1396.395135][T31602] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1397.403027][T31615] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1398.834273][T31615] nvme nvme0: failed to connect socket: -512 [ 1398.886090][T31636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7703'. [ 1400.111687][T31656] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7706'. [ 1400.435408][ T30] audit: type=1400 audit(1786319092.239:965): avc: denied { write } for pid=31659 comm="syz.4.7707" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1400.483963][ T30] audit: type=1400 audit(1786319092.239:966): avc: denied { write } for pid=31659 comm="syz.4.7707" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1402.438927][T13354] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1402.661778][T13354] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1402.771791][T13354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1402.888906][T13354] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1402.904023][T13354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1402.934359][T13354] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1402.953224][T13354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.975319][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7716'. [ 1403.243924][T13354] usb 3-1: config 0 descriptor?? [ 1403.568626][T13354] hdpvr 3-1:0.0: firmware version 0x0 dated [ 1403.586363][T13354] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 1404.322091][T13354] hdpvr 3-1:0.0: max device number reached, device register failed [ 1404.407799][T13354] usb 3-1: USB disconnect, device number 85 [ 1405.248818][T13357] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1405.409395][T13357] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1405.487204][T13357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.511187][T13357] usb 4-1: Product: syz [ 1405.522657][T13357] usb 4-1: Manufacturer: syz [ 1405.534868][T13357] usb 4-1: SerialNumber: syz [ 1405.558346][T13357] usb 4-1: config 0 descriptor?? [ 1405.795974][T13357] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1405.979084][T30680] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 540 seconds [ 1406.445816][ T30] audit: type=1400 audit(1786319098.139:967): avc: denied { write } for pid=31745 comm="syz.4.7730" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.504018][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1406.604389][ T30] audit: type=1400 audit(1786319098.159:968): avc: denied { write } for pid=31745 comm="syz.4.7730" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1406.741071][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1407.342589][ T5611] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1407.509032][T13357] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1407.588147][T13357] usb 4-1: USB disconnect, device number 68 [ 1409.374400][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1409.393697][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1409.414442][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1409.429425][ T10] usb 3-1: can't read configurations, error -71 [ 1410.468930][T13339] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1410.668845][T13339] usb 4-1: Using ep0 maxpacket: 32 [ 1410.679882][T13339] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1410.707949][T13339] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1410.796370][T13339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.841444][T13339] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1410.906264][T13339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.941044][T13339] usb 4-1: Product: syz [ 1410.965832][T13339] usb 4-1: Manufacturer: syz [ 1411.000782][T13339] usb 4-1: SerialNumber: syz [ 1411.588533][T31804] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1411.946534][ T5611] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1413.154022][T31814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7748'. [ 1413.256121][T13339] usb 4-1: USB disconnect, device number 69 [ 1413.558862][ T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1413.641707][T26685] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1414.188815][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1414.195813][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1414.212920][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1414.231082][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.252270][T26685] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1414.278359][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1414.307004][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.317181][ T10] usb 2-1: Product: syz [ 1414.323564][T26685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1414.350436][ T10] usb 2-1: Manufacturer: syz [ 1414.355310][ T10] usb 2-1: SerialNumber: syz [ 1414.373818][T26685] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1414.391584][T26685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1414.433089][ T10] usb 2-1: interface 1 not found [ 1414.456197][T26685] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1414.494290][T26685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.514097][T26685] usb 3-1: config 0 descriptor?? [ 1414.653164][T31779] Set syz1 is full, maxelem 65536 reached [ 1414.674972][ T5611] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1414.679771][ T10] usb 2-1: USB disconnect, device number 61 [ 1414.713579][T31830] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1414.735461][T26685] hdpvr 3-1:0.0: firmware version 0x0 dated [ 1414.735949][T31830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1414.766642][T26685] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 1414.772693][T31830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7754'. [ 1414.996580][T31840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7757'. [ 1415.530839][T26685] hdpvr 3-1:0.0: max device number reached, device register failed [ 1415.580461][T26685] usb 3-1: USB disconnect, device number 88 [ 1417.239440][T31864] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 1417.266994][T31865] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7764'. [ 1417.510006][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.703840][T31872] Set syz1 is full, maxelem 65536 reached [ 1418.017751][T31864] nvme nvme0: failed to connect socket: -512 [ 1418.228849][T26681] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1418.399503][T26681] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1418.432722][T26681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1418.482361][T26681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1418.503316][T26681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1418.520274][T26681] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1419.055049][T26681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.069877][T26681] usb 2-1: config 0 descriptor?? [ 1419.728845][T26681] hdpvr 2-1:0.0: firmware version 0x0 dated [ 1419.735051][T26681] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1420.388600][T31902] busy [ 1420.475168][T26681] hdpvr 2-1:0.0: max device number reached, device register failed [ 1420.490091][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1420.542278][T26681] usb 2-1: USB disconnect, device number 62 [ 1420.690421][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1420.704925][ T10] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1420.722954][ T10] usb 3-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.743099][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.759493][ T10] usb 3-1: Product: syz [ 1420.763906][ T10] usb 3-1: Manufacturer: syz [ 1420.768584][ T10] usb 3-1: SerialNumber: syz [ 1421.025160][T31917] Set syz1 is full, maxelem 65536 reached [ 1421.036474][ T5611] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 1421.176970][ T5611] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 1421.281070][T31927] Cannot find del_set index 4 as target [ 1421.361614][T26685] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1421.971570][T26685] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1421.988322][T26685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.017442][T26685] usb 1-1: Product: syz [ 1422.030244][T26685] usb 1-1: Manufacturer: syz [ 1422.044303][T26685] usb 1-1: SerialNumber: syz [ 1422.214136][T26685] usb 1-1: config 0 descriptor?? [ 1422.279313][T26681] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1423.086121][T26685] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1423.096784][ T10] powermate 3-1:251.0: probe with driver powermate failed with error -22 [ 1423.108951][ T10] usb 3-1: USB disconnect, device number 89 [ 1423.270311][T26681] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1423.280909][T26681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1423.291104][T26681] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1423.301331][T26681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1423.312724][T26681] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1423.322755][T26681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.335095][T26681] usb 5-1: config 0 descriptor?? [ 1423.553063][T26681] hdpvr 5-1:0.0: firmware version 0x0 dated [ 1423.559200][T26681] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1423.974548][T26681] hdpvr 5-1:0.0: max device number reached, device register failed [ 1423.999455][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1424.038105][T26681] usb 5-1: USB disconnect, device number 68 [ 1424.168238][T31972] Cannot find del_set index 4 as target [ 1424.179637][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1424.191730][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.208831][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.230387][ T10] usb 2-1: config 0 descriptor?? [ 1424.332051][T26685] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1424.362476][T26685] usb 1-1: USB disconnect, device number 78 [ 1424.453596][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1424.460068][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1424.473166][ T10] usb 2-1: USB disconnect, device number 63 [ 1425.071579][T26722] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1425.414331][T26722] usb 5-1: Using ep0 maxpacket: 16 [ 1425.428792][T26722] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=66.f9 [ 1425.438797][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1425.459272][T26722] usb 5-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.493535][T26722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.504687][T26722] usb 5-1: Product: syz [ 1425.513281][T26722] usb 5-1: Manufacturer: syz [ 1425.523010][T26722] usb 5-1: SerialNumber: syz [ 1425.604023][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1425.631158][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.664154][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.689585][T26681] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1425.698293][ T10] usb 2-1: config 0 descriptor?? [ 1425.873164][T26681] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1425.887340][T26681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1425.905503][T26681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.041385][T26681] usb 1-1: config 0 descriptor?? [ 1426.064195][T31985] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1426.725790][T26681] hid_parser_main: 237 callbacks suppressed [ 1426.725809][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.757534][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.772654][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.790528][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.807987][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.825774][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.843242][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.869285][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.897693][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.911755][T26681] logitech-djreceiver 0003:046D:C71F.0017: unknown main item tag 0x0 [ 1426.947363][T26681] logitech-djreceiver 0003:046D:C71F.0017: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 1427.023294][T26681] usb 1-1: USB disconnect, device number 79 [ 1427.328005][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1427.348005][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1427.392217][ T10] usb 2-1: USB disconnect, device number 64 [ 1427.616128][T26722] powermate 5-1:251.0: probe with driver powermate failed with error -22 [ 1427.673802][T26722] usb 5-1: USB disconnect, device number 69 [ 1428.705523][T32025] 9pnet_fd: Insufficient options for proto=fd [ 1428.848882][ T10] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1429.016440][ C0] [ 1429.018796][ C0] ============================= [ 1429.023626][ C0] [ BUG: Invalid wait context ] [ 1429.028457][ C0] syzkaller #0 Tainted: G L [ 1429.034419][ C0] ----------------------------- [ 1429.039249][ C0] syz.1.7812/32023 is trying to lock: [ 1429.044603][ C0] ffff888056549be8 (&hdev->ll_open_lock){+.+.}-{4:4}, at: tcp_tsq_handler+0x1d/0x200 [ 1429.054084][ C0] other info that might help us debug this: [ 1429.059955][ C0] context-{3:3} [ 1429.063417][ C0] 3 locks held by syz.1.7812/32023: [ 1429.068596][ C0] #0: ffff88802acaf550 (&u->lock){+.+.}-{3:3}, at: unix_dgram_sendmsg+0x653/0x1810 [ 1429.077998][ C0] #1: ffff88801bc09540 ((wq_completion)events_bh){+.-.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1429.088694][ C0] #2: ffffc90000007d60 ((work_completion)(&tsq->work)){+.-.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1429.099739][ C0] stack backtrace: [ 1429.103445][ C0] CPU: 0 UID: 0 PID: 32023 Comm: syz.1.7812 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.103471][ C0] Tainted: [L]=SOFTLOCKUP [ 1429.103478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1429.103489][ C0] Call Trace: [ 1429.103497][ C0] [ 1429.103505][ C0] dump_stack_lvl+0x100/0x190 [ 1429.103528][ C0] __lock_acquire+0xf75/0x1a40 [ 1429.103552][ C0] ? ip_local_deliver_finish+0x419/0x6e0 [ 1429.103571][ C0] ? look_up_lock_class+0x64/0x120 [ 1429.103597][ C0] lock_acquire+0x1b9/0x370 [ 1429.103618][ C0] ? tcp_tsq_handler+0x1d/0x200 [ 1429.103637][ C0] ? __lock_acquire+0x49f/0x1a40 [ 1429.103661][ C0] _raw_spin_lock+0x2e/0x40 [ 1429.103679][ C0] ? tcp_tsq_handler+0x1d/0x200 [ 1429.103696][ C0] tcp_tsq_handler+0x1d/0x200 [ 1429.103715][ C0] tcp_tsq_workfn+0x2b2/0x560 [ 1429.103733][ C0] ? lock_acquire+0x1b9/0x370 [ 1429.103754][ C0] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 1429.103773][ C0] ? mark_held_locks+0x40/0x70 [ 1429.103795][ C0] process_one_work+0xa23/0x1940 [ 1429.103820][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1429.103841][ C0] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 1429.103861][ C0] bh_worker+0x646/0x890 [ 1429.103882][ C0] ? __pfx_bh_worker+0x10/0x10 [ 1429.103903][ C0] workqueue_softirq_action+0x142/0x1a0 [ 1429.103929][ C0] tasklet_action+0x14/0x70 [ 1429.103953][ C0] handle_softirqs+0x1ea/0x9b0 [ 1429.103978][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1429.104000][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1429.104019][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1429.104040][ C0] __irq_exit_rcu+0x162/0x210 [ 1429.104062][ C0] irq_exit_rcu+0x9/0x30 [ 1429.104080][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1429.104098][ C0] [ 1429.104104][ C0] [ 1429.104110][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1429.104128][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 1429.104148][ C0] Code: ff 65 0f c1 05 a3 7b 7d 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 34 7d 12 0f 85 4d 01 00 00 48 83 c4 [ 1429.104166][ C0] RSP: 0018:ffffc900057df600 EFLAGS: 00000206 [ 1429.104180][ C0] RAX: 0000000000000046 RBX: ffffffff8ebe8200 RCX: ffffc900057df60c [ 1429.104191][ C0] RDX: 0000000000000001 RSI: ffffffff8e183208 RDI: ffffffff8c400380 [ 1429.104189][ T30] audit: type=1400 audit(1786319120.739:969): avc: denied { write } for pid=32022 comm="syz.1.7812" name="0x409" dev="configfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1429.104204][ C0] RBP: ffffffff84d309fe R08: 0000000000000001 R09: 0000000000000000 [ 1429.104216][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802bca8000 [ 1429.104227][ C0] R13: 0000000000000093 R14: 0000000000000202 R15: 0000000000000002 [ 1429.104236][ C0] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1429.104261][ C0] avc_has_perm_noaudit+0x123/0x3b0 [ 1429.104279][ C0] avc_has_perm+0xbd/0x1e0 [ 1429.104296][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 1429.104312][ C0] ? schedule_timeout+0x161/0x280 [ 1429.104332][ C0] selinux_socket_unix_may_send+0x1e6/0x2b0 [ 1429.104356][ C0] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1429.104374][ C0] ? __pfx_selinux_socket_unix_may_send+0x10/0x10 [ 1429.104395][ C0] ? __pfx_hook_unix_may_send+0x10/0x10 [ 1429.104415][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1429.104438][ C0] security_unix_may_send+0xc4/0x210 [ 1429.104463][ C0] unix_dgram_sendmsg+0xb38/0x1810 [ 1429.104488][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1429.104510][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1429.104533][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 1429.104557][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1429.104578][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1429.104602][ C0] ? rcu_is_watching+0x12/0xc0 [ 1429.104624][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 1429.104638][ C0] ? kfree+0x1e5/0x6c0 [ 1429.104653][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1429.104669][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1429.104684][ C0] ? futex_hash+0x311/0x400 [ 1429.104712][ C0] ? __pfx___might_resched+0x10/0x10 [ 1429.104733][ C0] __sys_sendmmsg+0x20c/0x440 [ 1429.104753][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1429.104775][ C0] ? __pfx_do_futex+0x10/0x10 [ 1429.104801][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 1429.104826][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1429.104845][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1429.104864][ C0] do_syscall_64+0x115/0x870 [ 1429.104884][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1429.104901][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.104917][ C0] RIP: 0033:0x7f66bb79e0d9 [ 1429.104930][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.104944][ C0] RSP: 002b:00007f66bc613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1429.104959][ C0] RAX: ffffffffffffffda RBX: 00007f66bba25fa0 RCX: 00007f66bb79e0d9 [ 1429.104970][ C0] RDX: 025042f2ad3610f7 RSI: 0000200000000000 RDI: 0000000000000006 [ 1429.104980][ C0] RBP: 00007f66bb835024 R08: 0000000000000000 R09: 0000000000000000 [ 1429.104990][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.104999][ C0] R13: 00007f66bba26038 R14: 00007f66bba25fa0 R15: 00007ffc409d5968 [ 1429.105015][ C0] [ 1429.105167][ C0] BUG: workqueue leaked atomic, lock or RCU: syz.1.7812[32023] [ 1429.105167][ C0] preempt=0x00000101 lock=1->0 RCU=1->1 workfn=tcp_tsq_workfn [ 1429.137927][ T30] audit: type=1400 audit(1786319120.759:970): avc: denied { write } for pid=32022 comm="syz.1.7812" name="720p" dev="configfs" ino=20703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1429.140303][ C0] INFO: lockdep is turned off. [ 1429.140317][ C0] CPU: 0 UID: 0 PID: 32023 Comm: syz.1.7812 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.140347][ C0] Tainted: [L]=SOFTLOCKUP [ 1429.140353][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1429.140362][ C0] Call Trace: [ 1429.140368][ C0] [ 1429.140375][ C0] dump_stack_lvl+0x100/0x190 [ 1429.140398][ C0] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 1429.140415][ C0] process_one_work.cold+0x128/0x2fe [ 1429.140435][ C0] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 1429.140455][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1429.140476][ C0] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 1429.140493][ C0] bh_worker+0x646/0x890 [ 1429.140512][ C0] ? __pfx_bh_worker+0x10/0x10 [ 1429.140531][ C0] workqueue_softirq_action+0x142/0x1a0 [ 1429.140553][ C0] tasklet_action+0x14/0x70 [ 1429.140574][ C0] handle_softirqs+0x1ea/0x9b0 [ 1429.140596][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1429.140616][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1429.140634][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1429.140651][ C0] __irq_exit_rcu+0x162/0x210 [ 1429.140670][ C0] irq_exit_rcu+0x9/0x30 [ 1429.140689][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1429.140710][ C0] [ 1429.140716][ C0] [ 1429.140722][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1429.140739][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 1429.140760][ C0] Code: ff 65 0f c1 05 a3 7b 7d 12 83 f8 01 0f 85 27 01 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c6 00 02 00 00 0f 85 c8 00 00 00 <48> 8b 44 24 10 65 48 2b 05 ad 34 7d 12 0f 85 4d 01 00 00 48 83 c4 [ 1429.140775][ C0] RSP: 0018:ffffc900057df600 EFLAGS: 00000206 [ 1429.140790][ C0] RAX: 0000000000000046 RBX: ffffffff8ebe8200 RCX: ffffc900057df60c [ 1429.140801][ C0] RDX: 0000000000000001 RSI: ffffffff8e183208 RDI: ffffffff8c400380 [ 1429.140811][ C0] RBP: ffffffff84d309fe R08: 0000000000000001 R09: 0000000000000000 [ 1429.140821][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802bca8000 [ 1429.140831][ C0] R13: 0000000000000093 R14: 0000000000000202 R15: 0000000000000002 [ 1429.140843][ C0] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1429.140867][ C0] avc_has_perm_noaudit+0x123/0x3b0 [ 1429.140886][ C0] avc_has_perm+0xbd/0x1e0 [ 1429.140903][ C0] ? __pfx_avc_has_perm+0x10/0x10 [ 1429.140919][ C0] ? schedule_timeout+0x161/0x280 [ 1429.140938][ C0] selinux_socket_unix_may_send+0x1e6/0x2b0 [ 1429.140958][ C0] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 1429.140975][ C0] ? __pfx_selinux_socket_unix_may_send+0x10/0x10 [ 1429.140996][ C0] ? __pfx_hook_unix_may_send+0x10/0x10 [ 1429.141015][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1429.141038][ C0] security_unix_may_send+0xc4/0x210 [ 1429.141062][ C0] unix_dgram_sendmsg+0xb38/0x1810 [ 1429.141086][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1429.141108][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1429.141131][ C0] ____sys_sendmsg+0xa4d/0xbe0 [ 1429.141154][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1429.141175][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1429.141199][ C0] ? rcu_is_watching+0x12/0xc0 [ 1429.141221][ C0] ? ___sys_sendmsg+0x19d/0x1e0 [ 1429.141235][ C0] ? kfree+0x1e5/0x6c0 [ 1429.141251][ C0] ___sys_sendmsg+0x190/0x1e0 [ 1429.141267][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1429.141282][ C0] ? futex_hash+0x311/0x400 [ 1429.141310][ C0] ? __pfx___might_resched+0x10/0x10 [ 1429.141331][ C0] __sys_sendmmsg+0x20c/0x440 [ 1429.141356][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1429.141378][ C0] ? __pfx_do_futex+0x10/0x10 [ 1429.141404][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 1429.141429][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 1429.141448][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1429.141467][ C0] do_syscall_64+0x115/0x870 [ 1429.141486][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1429.141503][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.141520][ C0] RIP: 0033:0x7f66bb79e0d9 [ 1429.141532][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.141547][ C0] RSP: 002b:00007f66bc613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1429.141561][ C0] RAX: ffffffffffffffda RBX: 00007f66bba25fa0 RCX: 00007f66bb79e0d9 [ 1429.141572][ C0] RDX: 025042f2ad3610f7 RSI: 0000200000000000 RDI: 0000000000000006 [ 1429.141582][ C0] RBP: 00007f66bb835024 R08: 0000000000000000 R09: 0000000000000000 [ 1429.141592][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.141601][ C0] R13: 00007f66bba26038 R14: 00007f66bba25fa0 R15: 00007ffc409d5968 [ 1429.141616][ C0] [ 1429.174715][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1430.153182][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1430.167535][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1430.179176][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1430.190176][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1430.201591][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1430.216575][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1430.224874][ T10] usb 1-1: Product: syz [ 1430.229132][ T10] usb 1-1: Manufacturer: syz [ 1430.233743][ T10] usb 1-1: SerialNumber: syz [ 1430.239532][ T10] usb 1-1: config 0 descriptor?? [ 1430.450041][ T10] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1430.456819][ T10] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1430.650611][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1430.659046][ T10] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1430.667670][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 1430.904708][ T10] usb 1-1: USB disconnect, device number 80 [ 1433.916186][ T4964] udevd[4964]: worker [8161] /devices/virtual/block/nbd0 timeout; kill it [ 1433.925094][ T4964] udevd[4964]: seq 24064 '/devices/virtual/block/nbd0' killed [ 1436.058965][T30680] block nbd0: Possible stuck request ffff888038d5e000: control (read@0,1024B). Runtime 570 seconds