last executing test programs: 13m20.464051741s ago: executing program 32 (id=2425): prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000280)={0x10, 0x1}) 12m30.069783948s ago: executing program 0 (id=2460): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) eventfd2(0x80000000, 0x80000) io_submit(r2, 0x0, &(0x7f00000013c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r7, r0, 0x0, 0x8ffb) 12m4.587345225s ago: executing program 0 (id=2468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x80}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x200448d1}, 0x400c0) 12m3.651077007s ago: executing program 0 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 12m3.410671913s ago: executing program 0 (id=2470): socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) r0 = gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r2 = msgget$private(0x0, 0x2) msgctl$IPC_RMID(r2, 0x0) 12m0.60866312s ago: executing program 0 (id=2471): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="01002abd6b00ffdbdf250b00"], 0x14}, 0x1, 0x0, 0x0, 0x24040084}, 0x84) 11m59.941516255s ago: executing program 0 (id=2472): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x30}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 11m41.301752346s ago: executing program 2 (id=2475): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$sock_SIOCINQ(r0, 0x5761, 0x0) 11m41.092544009s ago: executing program 2 (id=2476): openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x2d, 0x2, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x1, 0xba}) 11m40.860479085s ago: executing program 2 (id=2477): setrlimit(0x1, &(0x7f0000000000)={0x2, 0x3}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 11m40.651622699s ago: executing program 2 (id=2478): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="86d40000000000010000000000000084d7dc03980601dd30", 0x18, 0x0, &(0x7f0000000140)={0x11, 0xf6, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 11m40.48962373s ago: executing program 2 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 11m40.159414202s ago: executing program 2 (id=2480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 11m14.879514506s ago: executing program 33 (id=2472): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(0x0, &(0x7f0000000140)) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x30}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) 11m0.618530286s ago: executing program 3 (id=2481): r0 = socket(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/20, 0x14}], 0x1}, 0x1ff}], 0x1, 0x22, 0x0) 11m0.40019675s ago: executing program 3 (id=2482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xffffffffffffffff, 0x0) 10m54.321807225s ago: executing program 34 (id=2480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 10m41.171222771s ago: executing program 3 (id=2484): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 10m40.72893215s ago: executing program 3 (id=2485): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) memfd_create(0x0, 0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9m55.441822947s ago: executing program 35 (id=2485): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) memfd_create(0x0, 0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7m34.5112642s ago: executing program 4 (id=2576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 7m33.861389363s ago: executing program 4 (id=2577): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x1a8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba20baa8cc06a99aea4a4221e753e94bf215e02377273dfb5b0cd", 0x3d}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4", 0x31}, {&(0x7f0000000300)="e11b12d8e463a0b8dd59326154501ecf0819f23ca714d4a23e3be62be279e7e5959106799deb35c7f7fd59d5f8dc617c2a8fbccb4792bf67e3723aaf17f518045fa8f87f907a589f5bf63177c693d8c440d2fe9db6916a0a7ab91e693509f4e9440ad12f02126e866ae679f93d0acee16664dbbc4bb25f0d776e4096ee3ec57ee0cab99031c4783854663af5086b24f69721b8cf15c3c74b234038ed7db37582bd57a2b39b54d44f2f221b5685e5b1d2beb55a84c2a91abb2e23f9285b11edce581d97af66ba2b57c65defa06a", 0xcd}], 0x3}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000640)="46daf6dfa0fcabb990635232180cb28bc15167fe7fca2e7b023acc6def6992c5e3af7df84bb75b8cbeb4188c17a2b3b175d65c4b83ed20bbe4c43c0f8554eaeed8de48e062ad02a56840a46f15524fa387dd2a288a0e0d2a110ff5bc598e9b3dc58ed87f5884ebed5f5d7d80ebbcc33c2a59ce98edb0d70ac96d956c8254958f6e87f032578859d76d306003d84d37e34a6f89c5a45f626e68e3cbe3608529671ee9851a1113aa91612b7ac1ffc845ac6400b872b9471d7150a26b9c813b1a6cacf80126bae6a50e9c529235def3414640e177307076cb5250c653626c", 0xdd}, {&(0x7f0000000740)="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", 0xfb}, {&(0x7f0000000200)="0bb927cb6765e383ee796e0edc2c5b31583e39f1e0e9d1739afac441519fb775405d0887559b64b104bb10c5487456e21699a1e993211f843c5d154c2626bafc8fec3a168db78ce38080ffc5a102799414104ebd22a5e469446bfd6a36b68d1af7cea192e082a4748d7c80d57399462070", 0x71}, {&(0x7f0000000a40)="a2b3e3997e78105743a0748a83811f0fcf424e79ea7f9be3083679f57a7e4a65c0e264ee0b6b02732f85161c1d74522ad60c1c5580e79953cee5d253af5873c2242082d8823389fdfde0c83160d07a99ff948c1129c3afd00dc6db3406a92703ad4e8dd69f5220262e55b4ef4f263a77426b2ba68b8417ab7c01bf715430c822337ffa2266a4d0b7ab5a3c2e67591857", 0x90}, {&(0x7f0000000b00)="c35302f49463d5c67585411ae464da41157a419cb9d502a626ac46848fc28f0e9ac8a479c62d218eef4a2a1968013c71636b870483de3346d4", 0x39}, {0x0}], 0x6) 7m33.657480847s ago: executing program 4 (id=2578): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0x0, 0x0}, 0x10) 7m33.392217165s ago: executing program 4 (id=2579): setrlimit(0x1, &(0x7f0000000000)={0x2, 0x3}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) 7m33.252001734s ago: executing program 4 (id=2580): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) 7m32.940747355s ago: executing program 4 (id=2581): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f0000000200)=[{0xfff, 0x10, 0x0, 0x0}], 0x1}) 7m29.591003068s ago: executing program 5 (id=2584): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0x20000cc5, 0x5, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0x3, 0x1, 0x4000007, 0x101, 0x0, 0x1a449, 0x9, 0x7, 0xd, 0xcaa7, 0x0, 0x20001e58, 0x200007, 0x63e, 0x39, 0x8, 0x3, 0x0, 0x6]}) 7m29.162660026s ago: executing program 5 (id=2585): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r4, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r3, 0x7) 7m27.197423847s ago: executing program 5 (id=2586): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x16) r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x2, 0x20, 0x100002}, 0x2f) 7m27.01403725s ago: executing program 5 (id=2587): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 7m26.666769383s ago: executing program 5 (id=2588): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x1ff, 0x2, 0x2}, {0x2, 0x60, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x6}, {0x3, 0x6, 0x4}}}]}]}]}}]}, 0x64}}, 0x0) 7m26.169055736s ago: executing program 5 (id=2589): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000100)=[{0x19fe, 0x5411, 0x90, &(0x7f00000001c0)="70bad6d6134eb9c3fea3e1fdacfdddded02438edb6917ed837d79450af8618ef9949a85f1ef0e9ef94b3b9f6031edb897532fb8233e274df8bf706ad240402a166ec5c8045659c0377fce1d2f8daee9876a77928c19abfc9c93f1855b69870e8bfad51661c612c79b600ffea6e05b54ebb00153fc447b5403d43d145e1b51b4789910fe2eea45985fae0dffddaa102c2"}], 0x1}) 6m46.982202066s ago: executing program 36 (id=2581): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f0000000200)=[{0xfff, 0x10, 0x0, 0x0}], 0x1}) 6m40.891769431s ago: executing program 37 (id=2589): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f0000000100)=[{0x19fe, 0x5411, 0x90, &(0x7f00000001c0)="70bad6d6134eb9c3fea3e1fdacfdddded02438edb6917ed837d79450af8618ef9949a85f1ef0e9ef94b3b9f6031edb897532fb8233e274df8bf706ad240402a166ec5c8045659c0377fce1d2f8daee9876a77928c19abfc9c93f1855b69870e8bfad51661c612c79b600ffea6e05b54ebb00153fc447b5403d43d145e1b51b4789910fe2eea45985fae0dffddaa102c2"}], 0x1}) 6m35.700472727s ago: executing program 6 (id=2596): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 6m35.430828565s ago: executing program 6 (id=2597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x18b}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4d", 0x2c}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40810) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) 6m34.370918026s ago: executing program 6 (id=2598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc050}, 0x4000) 6m34.120902542s ago: executing program 6 (id=2599): capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x3, 0x7, 0x3}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f"], 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 6m33.878708738s ago: executing program 6 (id=2600): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 6m33.620723055s ago: executing program 6 (id=2601): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x4, 0xfffffffffffffd6f) bind$inet(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x1, 0x70, 0x6, &(0x7f0000000940)={0x1d, "79b8142115db2c05f171f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) 5m47.862255873s ago: executing program 38 (id=2601): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=0x4, 0xfffffffffffffd6f) bind$inet(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x1, 0x70, 0x6, &(0x7f0000000940)={0x1d, "79b8142115db2c05f171f5306c0c14f1e37ef9335b6e140c0afd2077a025abe98e"}}) 5m29.941698737s ago: executing program 8 (id=2618): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) 5m29.610284739s ago: executing program 8 (id=2623): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 5m29.271735951s ago: executing program 8 (id=2624): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$EVIOCGMASK(r1, 0x80045b10, 0x0) 5m28.878831807s ago: executing program 8 (id=2625): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 5m28.5503628s ago: executing program 8 (id=2626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lstat(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)) 5m7.882320716s ago: executing program 8 (id=2630): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000080)=[{0xf62d, 0x0, 0x0, 0x0}, {0x7, 0x10, 0x0, 0x0}, {0x4, 0x1000, 0x0, &(0x7f0000000280)}], 0x3}) 4m22.502867588s ago: executing program 39 (id=2630): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f0000000080)=[{0xf62d, 0x0, 0x0, 0x0}, {0x7, 0x10, 0x0, 0x0}, {0x4, 0x1000, 0x0, &(0x7f0000000280)}], 0x3}) 3m36.842597969s ago: executing program 7 (id=2651): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x9bf9a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 3m32.120759164s ago: executing program 7 (id=2652): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000200)="ff40fb0221bb7eb3bc6519cc88f5dd1f6ce5ba3e10c20ab2aba82c78a22be960e668cc8d48228961d51e89abfaa4340a6e877b88497630f6b0c884cc3545d3433df85254b340cc4eb8eb2cd9565e6dab1e4d008c5ef645a4743a1b870989fa0a09e0be8310ca989de7a4c8", 0x2000011f, 0x9000) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 3m29.201970418s ago: executing program 7 (id=2654): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x4, 0x9, 0xffff, 0x100, 0x16a2, 0x2a, "7fade098"}}, 0x11c) 3m29.030996209s ago: executing program 7 (id=2655): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m24.902505775s ago: executing program 7 (id=2656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000ac0)="9a", 0x1}], 0x1}}], 0x1, 0x90) 3m24.622846323s ago: executing program 7 (id=2657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x4f, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b420583e45f7afa4f265a9d9068b1568dedca7f43f25"}, {0x5, 0x1200, 0x0, 0x0}], 0x2}) 2m39.213722918s ago: executing program 40 (id=2657): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0000200"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x4f, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b420583e45f7afa4f265a9d9068b1568dedca7f43f25"}, {0x5, 0x1200, 0x0, 0x0}], 0x2}) 43.49218183s ago: executing program 1 (id=2723): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) 43.420299964s ago: executing program 1 (id=2724): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r2}, 0x18) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 32.701209339s ago: executing program 1 (id=2725): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 23.558006379s ago: executing program 9 (id=2735): mount(0x0, 0x0, 0x0, 0x2000000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0x84, 0x4, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xf000000}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa3ed}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$sock_buf(r4, 0x1, 0x49, 0x0, &(0x7f00000000c0)) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000340), &(0x7f00000003c0)='./file2\x00', 0x8, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff6, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) socket$alg(0x26, 0x5, 0x0) setitimer(0x1, &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000300)) mknod(0x0, 0x8000, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000440)={0xb001, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) 21.969783885s ago: executing program 9 (id=2736): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x6}}}}}, 0x0) 21.550806383s ago: executing program 9 (id=2737): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005f000100"], 0x1c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x8}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff2c, 0x8810, &(0x7f0000000000)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 21.002059329s ago: executing program 9 (id=2738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 20.423353258s ago: executing program 9 (id=2739): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000900)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, r6, 0x0, 0x0, 0x3caa}]) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) 19.841544427s ago: executing program 1 (id=2740): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x20, 0x0, 0x0, 0xfffffe00, 0x0}) 19.500548429s ago: executing program 1 (id=2741): socketpair$unix(0x1, 0x3, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 16.221742118s ago: executing program 1 (id=2742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tgkill(0x0, r1, 0x27) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x100) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) 0s ago: executing program 9 (id=2743): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) fsopen(0x0, 0x1) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x7, @remote, 0x8000004}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) kernel console output (not intermixed with test programs): duct=2120, bcdDevice= 2.a7 [ 1977.770685][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.770853][ T9] usb 2-1: Product: syz [ 1977.771015][ T9] usb 2-1: Manufacturer: syz [ 1977.771105][ T9] usb 2-1: SerialNumber: syz [ 1977.779715][ T9] usb 2-1: config 0 descriptor?? [ 1977.992442][T14172] usb 2-1: USB disconnect, device number 100 [ 1979.403291][ C0] vcan0: j1939_tp_rxtimer: 0x855ca200: rx timeout, send abort [ 1979.903412][ C0] vcan0: j1939_tp_rxtimer: 0x855ca700: rx timeout, send abort [ 1979.904358][ C0] vcan0: j1939_tp_rxtimer: 0x855ca200: abort rx timeout. Force session deactivation [ 1980.269833][ T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1980.404612][ C0] vcan0: j1939_tp_rxtimer: 0x855ca700: abort rx timeout. Force session deactivation [ 1980.439403][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1980.451661][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1980.451990][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1980.452613][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1980.452762][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1980.452814][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.465460][ T9] usb 2-1: config 0 descriptor?? [ 1980.968252][ T9] nzxt-smart2 0003:1E71:2009.003E: unknown main item tag 0x0 [ 1980.969980][ T9] nzxt-smart2 0003:1E71:2009.003E: unknown main item tag 0x0 [ 1980.970159][ T9] nzxt-smart2 0003:1E71:2009.003E: unknown main item tag 0x0 [ 1980.970276][ T9] nzxt-smart2 0003:1E71:2009.003E: unknown main item tag 0x0 [ 1980.970380][ T9] nzxt-smart2 0003:1E71:2009.003E: unknown main item tag 0x0 [ 1980.972983][ T9] nzxt-smart2 0003:1E71:2009.003E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1981.139540][ T9] usb 1-1: USB disconnect, device number 63 [ 1981.176228][ T3701] usb 2-1: USB disconnect, device number 101 [ 1981.859537][T11361] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1982.020059][T11361] usb 1-1: Using ep0 maxpacket: 32 [ 1982.041408][T11361] usb 1-1: config 0 has no interfaces? [ 1982.095000][T11361] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1982.095401][T11361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.095844][T11361] usb 1-1: Product: syz [ 1982.095903][T11361] usb 1-1: Manufacturer: syz [ 1982.095936][T11361] usb 1-1: SerialNumber: syz [ 1982.104004][T11361] usb 1-1: config 0 descriptor?? [ 1983.150693][T11361] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1983.317674][T11361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.318000][T11361] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.320092][T11361] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1983.320666][T11361] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1983.320714][T11361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.329953][T11361] usb 2-1: config 0 descriptor?? [ 1983.555325][T14635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.557012][T14635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.856168][T14635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1983.863142][T14635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1983.917176][T11361] usbhid 2-1:0.0: can't add hid device: -71 [ 1983.918196][T11361] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1983.939894][T11361] usb 2-1: USB disconnect, device number 102 [ 1985.129167][ T4040] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1985.285484][ T4040] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1985.285852][ T4040] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1985.287635][ T4040] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1985.287817][ T4040] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1985.291704][ T4040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.297429][ T4040] usb 2-1: config 0 descriptor?? [ 1985.749728][ T4040] usbhid 2-1:0.0: can't add hid device: -71 [ 1985.750160][ T4040] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1985.764459][ T4040] usb 2-1: USB disconnect, device number 103 [ 1986.211478][T14684] FAULT_INJECTION: forcing a failure. [ 1986.211478][T14684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1986.212068][T14684] CPU: 1 UID: 0 PID: 14684 Comm: syz.1.1971 Tainted: G L syzkaller #0 PREEMPT [ 1986.212169][T14684] Tainted: [L]=SOFTLOCKUP [ 1986.212191][T14684] Hardware name: ARM-Versatile Express [ 1986.212220][T14684] Call trace: [ 1986.212364][T14684] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 1986.212494][T14684] r7:00000000 r6:00000000 r5:60000013 r4:8229592c [ 1986.212517][T14684] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 1986.212599][T14684] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 1986.212668][T14684] r5:8455ec00 r4:8294fc90 [ 1986.212715][T14684] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 1986.212790][T14684] [<80999528>] (should_fail_ex) from [<80999764>] (should_fail+0x14/0x18) [ 1986.212865][T14684] r8:76f74f30 r7:00000000 r6:00000000 r5:ecd41f68 r4:00000002 [ 1986.212884][T14684] [<80999750>] (should_fail) from [<80999784>] (should_fail_usercopy+0x1c/0x20) [ 1986.213000][T14684] [<80999768>] (should_fail_usercopy) from [<805a6d60>] (simple_read_from_buffer+0x80/0x13c) [ 1986.213095][T14684] [<805a6ce0>] (simple_read_from_buffer) from [<80624a54>] (proc_fail_nth_read+0xb8/0x108) [ 1986.213177][T14684] r10:00000001 r9:8062499c r8:00000002 r7:ecd41f68 r6:0000000f r5:76f74f30 [ 1986.213225][T14684] r4:8455ec00 r3:ecd41e9f [ 1986.213248][T14684] [<8062499c>] (proc_fail_nth_read) from [<8056a53c>] (vfs_read+0x98/0x324) [ 1986.213324][T14684] r8:76f74f30 r7:ecd41f68 r6:8455ec00 r5:0000000f r4:8b292540 [ 1986.213346][T14684] [<8056a4a4>] (vfs_read) from [<8056b24c>] (ksys_read+0x74/0xe8) [ 1986.213437][T14684] r10:00000003 r9:8455ec00 r8:8020029c r7:00000000 r6:00000000 r5:8b292540 [ 1986.213462][T14684] r4:8b292543 [ 1986.213479][T14684] [<8056b1d8>] (ksys_read) from [<8056b2d0>] (sys_read+0x10/0x14) [ 1986.213573][T14684] r7:00000003 r6:00000004 r5:76f74f30 r4:0000000f [ 1986.213597][T14684] [<8056b2c0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 1986.213647][T14684] Exception stack(0xecd41fa8 to 0xecd41ff0) [ 1986.213695][T14684] 1fa0: 0000000f 76f74f30 00000004 76f74f30 0000000f 00000000 [ 1986.213764][T14684] 1fc0: 0000000f 76f74f30 00000004 00000003 00300000 00000000 00006364 76f750bc [ 1986.213823][T14684] 1fe0: 00000158 76f74ed0 000d7fdc 001301ec [ 1986.949544][ T3701] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1987.126359][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.127023][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.127075][ T3701] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1987.127138][ T3701] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1987.127234][ T3701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.132625][ T3701] usb 2-1: config 0 descriptor?? [ 1987.622322][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.622902][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.623056][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.623173][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.623293][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.623450][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.623574][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.623736][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.623938][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.624111][ T3701] plantronics 0003:047F:FFFF.003F: unknown main item tag 0x0 [ 1987.641946][ T3701] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1987.897426][T11361] usb 2-1: USB disconnect, device number 104 [ 1991.504277][ T29] audit: type=1400 audit(1991.420:597): avc: denied { module_load } for pid=14735 comm="syz.1.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1991.505596][T14736] Invalid ELF header type: 2 != 1 [ 1992.371359][ T4040] usb 1-1: USB disconnect, device number 64 [ 1993.286791][ T29] audit: type=1400 audit(1993.200:598): avc: denied { ioctl } for pid=14758 comm="syz.0.1987" path="socket:[21459]" dev="sockfs" ino=21459 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1995.619089][ T3701] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1995.770304][ T3701] usb 2-1: Using ep0 maxpacket: 32 [ 1995.786805][ T3701] usb 2-1: config 0 has no interfaces? [ 1995.809099][ T3701] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1995.809666][ T3701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.809734][ T3701] usb 2-1: Product: syz [ 1995.809771][ T3701] usb 2-1: Manufacturer: syz [ 1995.809854][ T3701] usb 2-1: SerialNumber: syz [ 1995.814170][ T3701] usb 2-1: config 0 descriptor?? [ 1996.034929][ T3701] usb 2-1: USB disconnect, device number 105 [ 1997.071006][ T29] audit: type=1400 audit(1996.990:599): avc: denied { accept } for pid=14794 comm="syz.1.1995" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1997.266099][ T29] audit: type=1400 audit(1997.180:600): avc: denied { setattr } for pid=14798 comm="syz.0.1996" name="NETLINK" dev="sockfs" ino=21637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1998.069638][ T3701] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1998.239777][ T3701] usb 1-1: Using ep0 maxpacket: 16 [ 1998.257617][ T3701] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1998.257931][ T3701] usb 1-1: config 0 has no interfaces? [ 1998.258126][ T3701] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1998.258820][ T3701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.269182][ T3701] usb 1-1: config 0 descriptor?? [ 1998.485077][T14805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.487945][T14805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.549233][T14172] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 2001.679739][T14172] usb 2-1: device descriptor read/64, error -71 [ 2001.919394][T14172] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 2002.049325][T14172] usb 2-1: device descriptor read/64, error -71 [ 2002.172020][T14172] usb usb2-port1: attempt power cycle [ 2002.510327][T14172] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 2002.532277][T14172] usb 2-1: device descriptor read/8, error -71 [ 2002.769561][T14172] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 2002.797476][T14172] usb 2-1: device descriptor read/8, error -71 [ 2002.899872][T14172] usb usb2-port1: unable to enumerate USB device [ 2012.049267][T14172] usb 1-1: USB disconnect, device number 65 [ 2012.273708][ T29] audit: type=1400 audit(2012.190:601): avc: denied { create } for pid=14842 comm="syz.0.2006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2013.198967][ T3701] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2013.329718][ T3701] usb 1-1: device descriptor read/64, error -71 [ 2013.568996][ T3701] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2013.709442][ T3701] usb 1-1: device descriptor read/64, error -71 [ 2013.820850][ T3701] usb usb1-port1: attempt power cycle [ 2014.190169][ T3701] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2014.214095][ T3701] usb 1-1: device descriptor read/8, error -71 [ 2014.449778][ T3701] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 2014.492149][ T3701] usb 1-1: device descriptor read/8, error -71 [ 2014.601241][ T3701] usb usb1-port1: unable to enumerate USB device [ 2017.875811][T14866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14866 comm=syz.1.2012 [ 2022.769438][T11361] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2022.899874][T11361] usb 2-1: device descriptor read/64, error -71 [ 2023.139452][T11361] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2023.278751][T11361] usb 2-1: device descriptor read/64, error -71 [ 2023.392602][T11361] usb usb2-port1: attempt power cycle [ 2023.539530][T11590] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 2023.689832][T11590] usb 1-1: Using ep0 maxpacket: 32 [ 2023.706837][T11590] usb 1-1: config 0 has no interfaces? [ 2023.724623][T11590] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2023.724925][T11590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.725302][T11590] usb 1-1: Product: syz [ 2023.725363][T11590] usb 1-1: Manufacturer: syz [ 2023.725425][T11590] usb 1-1: SerialNumber: syz [ 2023.731299][T11361] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2023.733848][T11590] usb 1-1: config 0 descriptor?? [ 2023.755297][T11361] usb 2-1: device descriptor read/8, error -71 [ 2023.965278][T11590] usb 1-1: USB disconnect, device number 70 [ 2024.000014][T11361] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2024.021755][T11361] usb 2-1: device descriptor read/8, error -71 [ 2024.129928][T11361] usb usb2-port1: unable to enumerate USB device [ 2026.814675][T14925] misc userio: Begin command sent, but we're already running [ 2028.417177][T14933] fuse: Bad value for 'fd' [ 2029.320011][ T29] audit: type=1400 audit(2029.240:602): avc: denied { append } for pid=14944 comm="syz.0.2034" name="nbd0" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2038.251559][T15026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15026 comm=syz.0.2062 [ 2039.656306][T15038] FAULT_INJECTION: forcing a failure. [ 2039.656306][T15038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2039.656915][T15038] CPU: 1 UID: 0 PID: 15038 Comm: syz.0.2067 Tainted: G L syzkaller #0 PREEMPT [ 2039.657038][T15038] Tainted: [L]=SOFTLOCKUP [ 2039.657101][T15038] Hardware name: ARM-Versatile Express [ 2039.657137][T15038] Call trace: [ 2039.657241][T15038] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 2039.658672][T15038] r7:ed69de20 r6:00000000 r5:60000013 r4:8229592c [ 2039.658734][T15038] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 2039.658802][T15038] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 2039.658859][T15038] r5:83826c00 r4:8294fc90 [ 2039.658879][T15038] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 2039.658957][T15038] [<80999528>] (should_fail_ex) from [<80999764>] (should_fail+0x14/0x18) [ 2039.659034][T15038] r8:00000080 r7:ed69de20 r6:20000700 r5:00000000 r4:ed69df20 [ 2039.659167][T15038] [<80999750>] (should_fail) from [<80999784>] (should_fail_usercopy+0x1c/0x20) [ 2039.659236][T15038] [<80999768>] (should_fail_usercopy) from [<8159962c>] (copy_msghdr_from_user+0x50/0x130) [ 2039.659313][T15038] [<815995dc>] (copy_msghdr_from_user) from [<81599784>] (___sys_sendmsg+0x78/0xd0) [ 2039.659396][T15038] r8:00000080 r7:00000000 r6:858ce280 r5:ed69df20 r4:ed69de64 [ 2039.659419][T15038] [<8159970c>] (___sys_sendmsg) from [<81599c40>] (__sys_sendmsg+0x8c/0xe0) [ 2039.659500][T15038] r10:00000128 r9:83826c00 r8:8ae1e300 r7:00000080 r6:20000700 r5:8ae1e301 [ 2039.659534][T15038] r4:00000003 [ 2039.659556][T15038] [<81599bb4>] (__sys_sendmsg) from [<81599ca8>] (sys_sendmsg+0x14/0x18) [ 2039.659630][T15038] r8:8020029c r7:00000128 r6:001302c8 r5:00000000 r4:00000000 [ 2039.659652][T15038] [<81599c94>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2039.659730][T15038] Exception stack(0xed69dfa8 to 0xed69dff0) [ 2039.659779][T15038] dfa0: 00000000 00000000 00000003 20000700 00000080 00000000 [ 2039.659820][T15038] dfc0: 00000000 00000000 001302c8 00000128 00300000 00000000 00006364 76f440bc [ 2039.659850][T15038] dfe0: 76f43ec0 76f43eb0 0001929c 00132320 [ 2039.796506][ T29] audit: type=1400 audit(2039.710:603): avc: denied { create } for pid=15039 comm="syz.0.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 2040.199692][T11590] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 2040.331781][T11590] usb 1-1: device descriptor read/64, error -71 [ 2040.569717][T11590] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 2040.699841][T11590] usb 1-1: device descriptor read/64, error -71 [ 2040.814328][T11590] usb usb1-port1: attempt power cycle [ 2041.148811][T11590] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 2041.171604][T11590] usb 1-1: device descriptor read/8, error -71 [ 2041.432972][T11590] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 2041.463318][T11590] usb 1-1: device descriptor read/8, error -71 [ 2041.571076][T11590] usb usb1-port1: unable to enumerate USB device [ 2045.966867][T15066] FAULT_INJECTION: forcing a failure. [ 2045.966867][T15066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2045.969800][T15066] CPU: 0 UID: 0 PID: 15066 Comm: syz.1.2077 Tainted: G L syzkaller #0 PREEMPT [ 2045.969948][T15066] Tainted: [L]=SOFTLOCKUP [ 2045.969971][T15066] Hardware name: ARM-Versatile Express [ 2045.969997][T15066] Call trace: [ 2045.970369][T15066] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 2045.970558][T15066] r7:00000000 r6:00000000 r5:60000013 r4:8229592c [ 2045.970625][T15066] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 2045.970815][T15066] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 2045.970919][T15066] r5:83ed6000 r4:8294fc90 [ 2045.970938][T15066] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 2045.971007][T15066] [<80999528>] (should_fail_ex) from [<80999764>] (should_fail+0x14/0x18) [ 2045.971085][T15066] r8:20000740 r7:00000000 r6:85892a00 r5:00000004 r4:0000006b [ 2045.971173][T15066] [<80999750>] (should_fail) from [<80999784>] (should_fail_usercopy+0x1c/0x20) [ 2045.971248][T15066] [<80999768>] (should_fail_usercopy) from [<8159752c>] (do_sock_getsockopt+0x12c/0x1ec) [ 2045.971316][T15066] [<81597400>] (do_sock_getsockopt) from [<8159936c>] (__sys_getsockopt+0x94/0xdc) [ 2045.971416][T15066] r8:854d1900 r7:edc7df50 r6:00000004 r5:edc7df58 r4:854d1901 [ 2045.971636][T15066] [<815992d8>] (__sys_getsockopt) from [<815993d0>] (sys_getsockopt+0x1c/0x24) [ 2045.971984][T15066] r8:8020029c r7:00000127 r6:001302c8 r5:00000000 r4:20000740 [ 2045.972151][T15066] [<815993b4>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2045.972310][T15066] Exception stack(0xedc7dfa8 to 0xedc7dff0) [ 2045.972424][T15066] dfa0: 20000740 00000000 00000004 0000006b 00000004 20000700 [ 2045.972572][T15066] dfc0: 20000740 00000000 001302c8 00000127 00300000 00000000 00006364 76f750bc [ 2045.972803][T15066] dfe0: 76f74ec0 76f74eb0 0001929c 00132320 [ 2046.299413][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2046.449746][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2046.457444][ T9] usb 2-1: config 0 has no interfaces? [ 2046.482221][ T9] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2046.483438][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.483793][ T9] usb 2-1: Product: syz [ 2046.483992][ T9] usb 2-1: Manufacturer: syz [ 2046.484156][ T9] usb 2-1: SerialNumber: syz [ 2046.489784][ T9] usb 2-1: config 0 descriptor?? [ 2046.714587][ T9] usb 2-1: USB disconnect, device number 114 [ 2047.025955][T15080] misc userio: Begin command sent, but we're already running [ 2047.569268][ T4040] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2047.719581][ T4040] usb 2-1: Using ep0 maxpacket: 16 [ 2047.742625][ T4040] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2047.742951][ T4040] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2047.749869][ T4040] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2047.750477][ T4040] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2047.750546][ T4040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.755182][ T4040] usb 2-1: config 0 descriptor?? [ 2048.202113][ T4040] hid_parser_main: 5 callbacks suppressed [ 2048.202540][ T4040] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2048.202902][ T4040] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2048.203036][ T4040] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2048.203134][ T4040] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2048.203233][ T4040] nzxt-smart2 0003:1E71:2009.0040: unknown main item tag 0x0 [ 2048.206496][ T4040] nzxt-smart2 0003:1E71:2009.0040: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2049.429579][ T4040] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 2054.609190][ T4040] usb 2-1: device descriptor read/64, error -110 [ 2054.850994][ T4040] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 2054.989517][ T4040] usb 2-1: device descriptor read/64, error -32 [ 2055.239455][ T4040] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 2055.261734][ T4040] usb 2-1: device descriptor read/8, error -32 [ 2055.519902][ T4040] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 2055.540350][ T4040] usb 2-1: device descriptor read/8, error -32 [ 2055.659207][ T4040] raw-gadget.1 gadget.1: failed to queue suspend event [ 2055.662310][T11361] usb 2-1: USB disconnect, device number 115 [ 2055.686711][T11361] raw-gadget.1 gadget.1: failed to queue reset event [ 2055.692052][T15083] raw-gadget.1 gadget.1: failed to queue disconnect event [ 2055.710686][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 2055.889972][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 2055.926150][ T9] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2055.928799][ T9] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2055.930158][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2055.952056][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2055.953303][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.954529][ T9] usb 1-1: Product: ﯟ海䗄譔á뿹℘᎜∓뙞⹌஫ⴺ窵估é‚㧧㟅媛ëªå±™á­½ï¯‡â ©ãŽ£ê°¼ä½¸å‘œå¤œã‚è‚ﮣã¦ê—ŸÐ¬æ¬Œë’旧㥙劖쳫༖á¸ê®§ì¿®áŒ®å³­ïŽ½å• è¸„è²ç¯¼ê¸°ä‡«ï†¿íˆ„á¯æ‰˜ä§ˆä³¨ê­·âˆ§ë©¢ìž¡ï¾†é³°ç«îš¢æŒ™è ¾ [ 2055.956822][ T9] usb 1-1: Manufacturer: 膚⇋濗蘛虥탤襖ꟅK뇰焃蒔䚢Ƙ畯ῄ㇟ꬑ쾶壘æ€ä™ë‚©í•¶áªºè¹•ïžæ»²ã«à¹ºç†¡ïº¶é¹ì¹ŒäŽ¸ïŸ‘㡠໑᭹ã‰Ì♔컰檨铎껬檰ç耎ļ㎤뼢䆄ëŽâ§´ç™”⦴￢ฆ壣躠࢖韯î©í”¬ì¸Ÿã‰¬â²´ç¥‰î¤‚ꋞ撗ᰴ㤕㳂è•åµ²î‰Šãƒ©ä·¹ä¨žã¢±ä¬çŠƒî‡¬ç¢£Ü£ìž¹æžë£ƒî¯ˆå¼’愶최å‰ê½¼éµ„ä·èžä¦¡ç‰»áˆ†ïº°çŠë° æ“ª [ 2055.961438][ T9] usb 1-1: SerialNumber: ꈖî¢ã‹®ä¡‡è¡¢ë¥¯/âŸŽâŸ”î¡¢í„¡ç‘¾ë…²â‘†èµ´ç¢¢ë‰“è†“æ§œí’ [ 2055.977697][T15131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2055.984375][T15131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2056.430243][ T29] audit: type=1400 audit(2056.350:604): avc: denied { connect } for pid=15130 comm="syz.0.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2058.635055][T15163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15163 comm=syz.1.2094 [ 2058.730397][T15165] FAULT_INJECTION: forcing a failure. [ 2058.730397][T15165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2058.733187][T15165] CPU: 0 UID: 0 PID: 15165 Comm: syz.1.2095 Tainted: G L syzkaller #0 PREEMPT [ 2058.733338][T15165] Tainted: [L]=SOFTLOCKUP [ 2058.733359][T15165] Hardware name: ARM-Versatile Express [ 2058.733422][T15165] Call trace: [ 2058.733468][T15165] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 2058.733581][T15165] r7:8b2ad000 r6:00000000 r5:60000013 r4:8229592c [ 2058.733600][T15165] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 2058.733654][T15165] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 2058.733710][T15165] r5:83ed4800 r4:8294fc90 [ 2058.733727][T15165] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 2058.733800][T15165] [<80999528>] (should_fail_ex) from [<80999764>] (should_fail+0x14/0x18) [ 2058.733866][T15165] r8:83ed4800 r7:8b2ad000 r6:00000004 r5:20000280 r4:00000000 [ 2058.733884][T15165] [<80999750>] (should_fail) from [<80999784>] (should_fail_usercopy+0x1c/0x20) [ 2058.733937][T15165] [<80999768>] (should_fail_usercopy) from [<815a2824>] (sk_getsockopt+0xbd4/0xe98) [ 2058.733997][T15165] [<815a1c54>] (sk_getsockopt) from [<81597508>] (do_sock_getsockopt+0x108/0x1ec) [ 2058.734068][T15165] r10:00000127 r9:83ed4800 r8:20000280 r7:b5403587 r6:858cef00 r5:0000001e [ 2058.734092][T15165] r4:00000001 [ 2058.734109][T15165] [<81597400>] (do_sock_getsockopt) from [<8159936c>] (__sys_getsockopt+0x94/0xdc) [ 2058.734171][T15165] r8:8ae1e300 r7:edd25f50 r6:0000001e r5:edd25f58 r4:8ae1e301 [ 2058.734187][T15165] [<815992d8>] (__sys_getsockopt) from [<815993d0>] (sys_getsockopt+0x1c/0x24) [ 2058.734246][T15165] r8:8020029c r7:00000127 r6:001302c8 r5:00000000 r4:20000280 [ 2058.734263][T15165] [<815993b4>] (sys_getsockopt) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2058.734313][T15165] Exception stack(0xedd25fa8 to 0xedd25ff0) [ 2058.734353][T15165] 5fa0: 20000280 00000000 00000003 00000001 0000001e 00000000 [ 2058.734386][T15165] 5fc0: 20000280 00000000 001302c8 00000127 00300000 00000000 00006364 76f750bc [ 2058.734412][T15165] 5fe0: 76f74ec0 76f74eb0 0001929c 00132320 [ 2060.526340][T15173] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15173 comm=syz.0.2090 [ 2060.534593][ T29] audit: type=1400 audit(2060.450:605): avc: denied { read } for pid=15130 comm="syz.0.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2060.549183][ T29] audit: type=1400 audit(2060.460:606): avc: denied { listen } for pid=15130 comm="syz.0.2090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2061.752378][T15175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2099'. [ 2070.448820][ T3701] usb 1-1: USB disconnect, device number 75 [ 2071.400305][T15211] misc userio: Begin command sent, but we're already running [ 2073.499340][ T3701] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2073.579293][T11361] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 2073.650629][ T3701] usb 2-1: Using ep0 maxpacket: 16 [ 2073.660872][ T3701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.662694][ T3701] usb 2-1: config 0 has no interfaces? [ 2073.663260][ T3701] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2073.663976][ T3701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.669453][ T3701] usb 2-1: config 0 descriptor?? [ 2073.739504][T11361] usb 1-1: Using ep0 maxpacket: 16 [ 2073.746760][T11361] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.749063][T11361] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2073.749483][T11361] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2073.749684][T11361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.754029][T11361] usb 1-1: config 0 descriptor?? [ 2078.115435][T11361] usbhid 1-1:0.0: can't add hid device: -71 [ 2078.115679][T11361] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2078.124794][T11361] usb 1-1: USB disconnect, device number 76 [ 2079.588060][T15260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15260 comm=syz.0.2116 [ 2088.135631][T14817] usb 2-1: USB disconnect, device number 117 [ 2088.275452][ T29] audit: type=1400 audit(2088.190:607): avc: denied { create } for pid=15296 comm="syz.1.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2088.699277][T14817] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2088.857174][T14817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2088.859770][T14817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2088.861166][T14817] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2088.863512][T14817] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2088.864592][T14817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2088.872631][T14817] usb 2-1: config 0 descriptor?? [ 2089.257007][ T29] audit: type=1400 audit(2089.170:608): avc: denied { getattr } for pid=15308 comm="syz.0.2125" path="net:[4026532736]" dev="nsfs" ino=4026532736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2089.306563][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.328999][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.329527][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.329712][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.329885][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.330060][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.330224][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.330388][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.330550][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.330717][T14817] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2089.337632][T14817] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2089.547919][T15322] FAULT_INJECTION: forcing a failure. [ 2089.547919][T15322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2089.551446][T15322] CPU: 1 UID: 0 PID: 15322 Comm: syz.0.2127 Tainted: G L syzkaller #0 PREEMPT [ 2089.551720][T15322] Tainted: [L]=SOFTLOCKUP [ 2089.551795][T15322] Hardware name: ARM-Versatile Express [ 2089.551823][T15322] Call trace: [ 2089.551866][T15322] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 2089.551986][T15322] r7:ee645e20 r6:00000000 r5:60000013 r4:8229592c [ 2089.552007][T15322] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 2089.552067][T15322] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 2089.552120][T15322] r5:84634800 r4:8294fc90 [ 2089.552137][T15322] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 2089.552202][T15322] [<80999528>] (should_fail_ex) from [<80999764>] (should_fail+0x14/0x18) [ 2089.552270][T15322] r8:00004034 r7:ee645e20 r6:20000c80 r5:00000000 r4:ee645f20 [ 2089.552287][T15322] [<80999750>] (should_fail) from [<80999784>] (should_fail_usercopy+0x1c/0x20) [ 2089.552424][T15322] [<80999768>] (should_fail_usercopy) from [<8159962c>] (copy_msghdr_from_user+0x50/0x130) [ 2089.552542][T15322] [<815995dc>] (copy_msghdr_from_user) from [<81599784>] (___sys_sendmsg+0x78/0xd0) [ 2089.552625][T15322] r8:00004034 r7:00000000 r6:85893180 r5:ee645f20 r4:ee645e64 [ 2089.552645][T15322] [<8159970c>] (___sys_sendmsg) from [<81599c40>] (__sys_sendmsg+0x8c/0xe0) [ 2089.552721][T15322] r10:00000128 r9:84634800 r8:85100e40 r7:00004034 r6:20000c80 r5:85100e41 [ 2089.552745][T15322] r4:00000003 [ 2089.552764][T15322] [<81599bb4>] (__sys_sendmsg) from [<81599ca8>] (sys_sendmsg+0x14/0x18) [ 2089.552855][T15322] r8:8020029c r7:00000128 r6:001302c8 r5:00000000 r4:00000000 [ 2089.552921][T15322] [<81599c94>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2089.552988][T15322] Exception stack(0xee645fa8 to 0xee645ff0) [ 2089.553032][T15322] 5fa0: 00000000 00000000 00000003 20000c80 00004034 00000000 [ 2089.553074][T15322] 5fc0: 00000000 00000000 001302c8 00000128 00300000 00000000 00006364 76f440bc [ 2089.553143][T15322] 5fe0: 76f43ec0 76f43eb0 0001929c 00132320 [ 2089.616400][T14172] usb 2-1: USB disconnect, device number 118 [ 2090.339126][T14172] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 2090.489247][T14172] usb 1-1: Using ep0 maxpacket: 16 [ 2090.496949][T14172] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2090.499323][T14172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2090.499614][T14172] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2090.499873][T14172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.505830][T14172] usb 1-1: config 0 descriptor?? [ 2090.943087][T14172] nzxt-smart2 0003:1E71:2009.0042: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 2091.146346][T15346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15346 comm=syz.0.2132 [ 2093.549746][ T4040] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2093.741133][ T4040] usb 2-1: Using ep0 maxpacket: 32 [ 2093.780719][ T4040] usb 2-1: config 0 has no interfaces? [ 2093.816339][ T4040] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2093.817076][ T4040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.828540][ T4040] usb 2-1: Product: syz [ 2093.829255][ T4040] usb 2-1: Manufacturer: syz [ 2093.829646][ T4040] usb 2-1: SerialNumber: syz [ 2093.860455][ T4040] usb 2-1: config 0 descriptor?? [ 2094.097620][ T4040] usb 2-1: USB disconnect, device number 119 [ 2094.765363][T15386] fuse: Bad value for 'fd' [ 2101.695080][ T4040] usb 1-1: USB disconnect, device number 77 [ 2102.764207][T15423] fuse: Bad value for 'fd' [ 2103.159399][ T8142] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 2103.319021][ T8142] usb 1-1: Using ep0 maxpacket: 32 [ 2103.326654][ T8142] usb 1-1: config 0 has no interfaces? [ 2103.336557][ T8142] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2103.336916][ T8142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.337272][ T8142] usb 1-1: Product: syz [ 2103.337485][ T8142] usb 1-1: Manufacturer: syz [ 2103.337641][ T8142] usb 1-1: SerialNumber: syz [ 2103.345424][ T8142] usb 1-1: config 0 descriptor?? [ 2103.584121][ T8142] usb 1-1: USB disconnect, device number 78 [ 2104.039944][T14172] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 2104.198667][T14172] usb 1-1: Using ep0 maxpacket: 32 [ 2104.203422][T14172] usb 1-1: config 0 has no interfaces? [ 2104.214709][T14172] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2104.216147][T14172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.218470][T14172] usb 1-1: Product: syz [ 2104.218962][T14172] usb 1-1: Manufacturer: syz [ 2104.219486][T14172] usb 1-1: SerialNumber: syz [ 2104.221871][T14172] usb 1-1: config 0 descriptor?? [ 2105.779732][T15450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=15450 comm=syz.1.2154 [ 2105.923173][T15452] fuse: Bad value for 'fd' [ 2106.952693][T15463] fuse: Bad value for 'fd' [ 2109.860336][T15479] FAULT_INJECTION: forcing a failure. [ 2109.860336][T15479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2109.860773][T15479] CPU: 0 UID: 0 PID: 15479 Comm: syz.1.2164 Tainted: G L syzkaller #0 PREEMPT [ 2109.860890][T15479] Tainted: [L]=SOFTLOCKUP [ 2109.860914][T15479] Hardware name: ARM-Versatile Express [ 2109.860945][T15479] Call trace: [ 2109.861331][T15479] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 2109.861515][T15479] r7:00000000 r6:00000000 r5:60000013 r4:8229592c [ 2109.861612][T15479] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 2109.861861][T15479] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 2109.862003][T15479] r5:84e7bc00 r4:8294fc90 [ 2109.862159][T15479] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 2109.862243][T15479] [<80999528>] (should_fail_ex) from [<80999764>] (should_fail+0x14/0x18) [ 2109.862421][T15479] r8:dfc25eb8 r7:00000000 r6:00000001 r5:76f74f30 r4:00000001 [ 2109.862475][T15479] [<80999750>] (should_fail) from [<80999784>] (should_fail_usercopy+0x1c/0x20) [ 2109.862569][T15479] [<80999768>] (should_fail_usercopy) from [<808e140c>] (kstrtouint_from_user+0x54/0x13c) [ 2109.862774][T15479] [<808e13b8>] (kstrtouint_from_user) from [<80625e04>] (proc_fail_nth_write+0x40/0xf0) [ 2109.862934][T15479] r8:dfc25f68 r7:84e7bc00 r6:00000001 r5:85cc7840 r4:00000001 [ 2109.863032][T15479] [<80625dc4>] (proc_fail_nth_write) from [<8056ae38>] (vfs_write+0xac/0x44c) [ 2109.863168][T15479] r5:85cc7840 r4:80625dc4 [ 2109.863249][T15479] [<8056ad8c>] (vfs_write) from [<8056b348>] (ksys_write+0x74/0xe8) [ 2109.863324][T15479] r10:00000004 r9:84e7bc00 r8:8020029c r7:00000000 r6:00000002 r5:85cc7840 [ 2109.863353][T15479] r4:85cc7843 [ 2109.863440][T15479] [<8056b2d4>] (ksys_write) from [<8056b3cc>] (sys_write+0x10/0x14) [ 2109.863705][T15479] r7:00000004 r6:00000005 r5:76f74f30 r4:00000001 [ 2109.863758][T15479] [<8056b3bc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2109.863876][T15479] Exception stack(0xdfc25fa8 to 0xdfc25ff0) [ 2109.864006][T15479] 5fa0: 00000001 76f74f30 00000005 76f74f30 00000001 00000000 [ 2109.864064][T15479] 5fc0: 00000001 76f74f30 00000005 00000004 00300000 00000000 00006364 76f750bc [ 2109.864118][T15479] 5fe0: 00000158 76f74ed0 000d7fdc 001302b4 [ 2113.109113][ T41] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2113.269047][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2113.269580][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2113.272415][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2113.272706][ T41] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2113.272913][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.282312][ T41] usb 2-1: config 0 descriptor?? [ 2113.734342][ T41] hid_parser_main: 5 callbacks suppressed [ 2113.736453][ T41] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x6 [ 2113.744297][ T41] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2115.224038][ T29] audit: type=1400 audit(2115.140:609): avc: denied { map } for pid=15503 comm="syz.1.2169" path="/proc/1085/net/pfkey" dev="proc" ino=4026532909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 2115.819083][ T8142] usb 2-1: USB disconnect, device number 120 [ 2117.904983][ T8142] usb 1-1: USB disconnect, device number 79 [ 2117.971909][ T29] audit: type=1400 audit(2117.890:610): avc: denied { create } for pid=15520 comm="syz.1.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2118.429105][ T8142] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2118.578897][ T8142] usb 2-1: Using ep0 maxpacket: 16 [ 2118.587017][ T8142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.587397][ T8142] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2118.587636][ T8142] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2118.587762][ T8142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.601039][ T8142] usb 2-1: config 0 descriptor?? [ 2118.679050][ T41] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 2118.829036][ T41] usb 1-1: Using ep0 maxpacket: 32 [ 2118.848696][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.849267][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.849531][ T41] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2118.849692][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.858085][ T41] usb 1-1: config 0 descriptor?? [ 2119.286512][ T41] savu 0003:1E7D:2D5A.0044: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 2119.565014][T14172] usb 1-1: USB disconnect, device number 80 [ 2120.939553][ T8142] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 2121.099587][ T8142] usb 1-1: Using ep0 maxpacket: 32 [ 2121.129297][ T8142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2121.129755][ T8142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2121.131958][ T8142] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2121.132294][ T8142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.140089][ T8142] usb 1-1: config 0 descriptor?? [ 2121.574698][ T8142] savu 0003:1E7D:2D5A.0045: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 2121.843697][ T8142] usb 1-1: USB disconnect, device number 81 [ 2126.219112][T14172] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 2126.369122][T14172] usb 1-1: Using ep0 maxpacket: 16 [ 2126.384376][T14172] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.385582][T14172] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2126.385996][T14172] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2126.386064][T14172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.393540][T14172] usb 1-1: config 0 descriptor?? [ 2126.817066][T14172] nzxt-smart2 0003:1E71:2009.0046: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 2127.226391][ T8142] usb 1-1: USB disconnect, device number 82 [ 2129.539082][ T8142] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 2129.699208][ T8142] usb 1-1: Using ep0 maxpacket: 32 [ 2129.711620][ T8142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2129.711935][ T8142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2129.712322][ T8142] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2129.712385][ T8142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2129.721182][ T8142] usb 1-1: config 0 descriptor?? [ 2130.172580][ T8142] savu 0003:1E7D:2D5A.0047: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 2130.437052][ T8142] usb 1-1: USB disconnect, device number 83 [ 2130.566647][T15694] fuse: Bad value for 'group_id' [ 2130.567064][T15694] fuse: Bad value for 'group_id' [ 2131.437756][T15706] fuse: Bad value for 'group_id' [ 2131.440484][T15706] fuse: Bad value for 'group_id' [ 2132.294327][T15718] fuse: Bad value for 'group_id' [ 2132.294715][T15718] fuse: Bad value for 'group_id' [ 2132.411594][T15720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15720 comm=syz.0.2213 [ 2132.769215][ T3701] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 2132.936965][ T3701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.937297][ T3701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2132.940751][ T3701] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2132.941126][ T3701] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2132.941319][ T3701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.949628][ T3701] usb 1-1: config 0 descriptor?? [ 2133.212256][ T8142] usb 2-1: USB disconnect, device number 121 [ 2133.372584][ T3701] usbhid 1-1:0.0: can't add hid device: -71 [ 2133.373017][ T3701] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2133.381961][ T3701] usb 1-1: USB disconnect, device number 84 [ 2134.229694][ T8142] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2134.379366][ T8142] usb 1-1: Using ep0 maxpacket: 16 [ 2134.397654][ T8142] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.398009][ T8142] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2134.402645][ T8142] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2134.402879][ T8142] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2134.402931][ T8142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.413441][ T8142] usb 1-1: config 0 descriptor?? [ 2134.430018][ T8142] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2136.119782][ T3701] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 2136.276019][ T3701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2136.276444][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2136.285669][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2136.288092][ T3701] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2136.302246][ T3701] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2136.302593][ T3701] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2136.302874][ T3701] usb 2-1: Manufacturer: syz [ 2136.313754][ T3701] usb 2-1: config 0 descriptor?? [ 2141.489154][ T3701] rc_core: IR keymap rc-hauppauge not found [ 2141.489497][ T3701] Registered IR keymap rc-empty [ 2141.490374][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.509665][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.531516][ T3701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2141.534463][ T3701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 2141.541936][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.559325][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.590319][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.609398][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.639421][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.659485][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.679891][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.710097][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.729469][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.749719][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2141.770101][ T3701] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2141.770438][ T3701] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2141.779951][ T3701] usb 2-1: USB disconnect, device number 122 [ 2144.319582][T14172] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2144.474242][T14172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2144.474586][T14172] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2144.476868][T14172] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2144.477090][T14172] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2144.477135][T14172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.484282][T14172] usb 2-1: config 0 descriptor?? [ 2144.912508][T14172] plantronics 0003:047F:FFFF.0048: unknown main item tag 0x6 [ 2144.918918][T14172] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2145.195574][T15801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15801 comm=syz.1.2223 [ 2146.993242][ T8142] usb 2-1: USB disconnect, device number 123 [ 2148.958694][ T8142] usb 1-1: USB disconnect, device number 85 [ 2152.079714][ T8142] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2152.246366][ T8142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2152.247110][ T8142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2152.250002][ T8142] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2152.250141][ T8142] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2152.250182][ T8142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.260254][ T8142] usb 1-1: config 0 descriptor?? [ 2152.713275][ T8142] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2154.793780][ T8142] usb 1-1: USB disconnect, device number 86 [ 2157.199104][ T41] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 2157.329231][ T41] usb 2-1: device descriptor read/64, error -71 [ 2157.569017][ T41] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 2157.699300][ T41] usb 2-1: device descriptor read/64, error -71 [ 2157.811250][ T41] usb usb2-port1: attempt power cycle [ 2158.149045][ T41] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 2158.172570][ T41] usb 2-1: device descriptor read/8, error -71 [ 2158.409171][ T41] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 2158.432648][ T41] usb 2-1: device descriptor read/8, error -71 [ 2158.539819][ T41] usb usb2-port1: unable to enumerate USB device [ 2161.024866][T15934] fuse: Unknown parameter 'grou00000000000000000000' [ 2161.381090][T15403] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2161.539583][T15403] usb 1-1: Using ep0 maxpacket: 32 [ 2161.545300][T15403] usb 1-1: config 0 has no interfaces? [ 2161.556844][T15403] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2161.557141][T15403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.559874][T15403] usb 1-1: Product: syz [ 2161.560269][T15403] usb 1-1: Manufacturer: syz [ 2161.560447][T15403] usb 1-1: SerialNumber: syz [ 2161.571603][T15403] usb 1-1: config 0 descriptor?? [ 2170.369783][T15958] fuse: Unknown parameter 'grou00000000000000000000' [ 2170.808915][ T41] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2170.966753][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2170.967259][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2170.967337][ T41] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2170.967486][ T41] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2170.967533][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.976940][ T41] usb 2-1: config 0 descriptor?? [ 2171.492675][ T41] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x6 [ 2171.501919][ T41] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2172.645805][T14172] usb 1-1: USB disconnect, device number 87 [ 2172.935746][T15989] FAULT_INJECTION: forcing a failure. [ 2172.935746][T15989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2172.936252][T15989] CPU: 1 UID: 0 PID: 15989 Comm: syz.0.2258 Tainted: G L syzkaller #0 PREEMPT [ 2172.936373][T15989] Tainted: [L]=SOFTLOCKUP [ 2172.936427][T15989] Hardware name: ARM-Versatile Express [ 2172.936462][T15989] Call trace: [ 2172.936527][T15989] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 2172.936661][T15989] r7:00000000 r6:00000000 r5:60000013 r4:8229592c [ 2172.936685][T15989] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 2172.936758][T15989] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 2172.936822][T15989] r5:838fec00 r4:8294fc90 [ 2172.936841][T15989] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 2172.936911][T15989] [<80999528>] (should_fail_ex) from [<80999764>] (should_fail+0x14/0x18) [ 2172.936984][T15989] r8:76f43f30 r7:00000000 r6:00000000 r5:eba89f68 r4:00000002 [ 2172.937089][T15989] [<80999750>] (should_fail) from [<80999784>] (should_fail_usercopy+0x1c/0x20) [ 2172.937303][T15989] [<80999768>] (should_fail_usercopy) from [<805a6d60>] (simple_read_from_buffer+0x80/0x13c) [ 2172.937557][T15989] [<805a6ce0>] (simple_read_from_buffer) from [<80624a54>] (proc_fail_nth_read+0xb8/0x108) [ 2172.937767][T15989] r10:00000001 r9:8062499c r8:00000002 r7:eba89f68 r6:0000000f r5:76f43f30 [ 2172.937944][T15989] r4:838fec00 r3:eba89e9f [ 2172.938193][T15989] [<8062499c>] (proc_fail_nth_read) from [<8056a53c>] (vfs_read+0x98/0x324) [ 2172.938368][T15989] r8:76f43f30 r7:eba89f68 r6:838fec00 r5:0000000f r4:8ae1e600 [ 2172.938415][T15989] [<8056a4a4>] (vfs_read) from [<8056b24c>] (ksys_read+0x74/0xe8) [ 2172.938494][T15989] r10:00000003 r9:838fec00 r8:8020029c r7:00000000 r6:00000000 r5:8ae1e600 [ 2172.938519][T15989] r4:8ae1e603 [ 2172.938538][T15989] [<8056b1d8>] (ksys_read) from [<8056b2d0>] (sys_read+0x10/0x14) [ 2172.938599][T15989] r7:00000003 r6:00000004 r5:76f43f30 r4:0000000f [ 2172.938619][T15989] [<8056b2c0>] (sys_read) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2172.938675][T15989] Exception stack(0xeba89fa8 to 0xeba89ff0) [ 2172.938719][T15989] 9fa0: 0000000f 76f43f30 00000004 76f43f30 0000000f 00000000 [ 2172.938771][T15989] 9fc0: 0000000f 76f43f30 00000004 00000003 00300000 00000000 00006364 76f440bc [ 2172.938805][T15989] 9fe0: 00000158 76f43ed0 000d7fdc 001301ec [ 2172.962974][T15990] fuse: Unknown parameter 'grou00000000000000000000' [ 2173.609733][ T41] usb 2-1: USB disconnect, device number 2 [ 2175.845466][T16017] fuse: Unknown parameter 'group_i00000000000000000000' [ 2176.255697][T16028] FAULT_INJECTION: forcing a failure. [ 2176.255697][T16028] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.256153][T16028] CPU: 1 UID: 0 PID: 16028 Comm: syz.1.2269 Tainted: G L syzkaller #0 PREEMPT [ 2176.256246][T16028] Tainted: [L]=SOFTLOCKUP [ 2176.256274][T16028] Hardware name: ARM-Versatile Express [ 2176.256297][T16028] Call trace: [ 2176.256343][T16028] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 2176.256456][T16028] r7:00000c40 r6:00000000 r5:60000013 r4:8229592c [ 2176.256478][T16028] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 2176.256545][T16028] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 2176.256605][T16028] r5:83843000 r4:82918c48 [ 2176.256623][T16028] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 2176.256791][T16028] [<80999528>] (should_fail_ex) from [<8053a368>] (should_failslab+0x6c/0x94) [ 2176.256938][T16028] r8:00000000 r7:00000c40 r6:00001000 r5:00001000 r4:830016c0 [ 2176.257024][T16028] [<8053a2fc>] (should_failslab) from [<80514f74>] (__kmalloc_noprof+0x9c/0x568) [ 2176.257141][T16028] [<80514ed8>] (__kmalloc_noprof) from [<807e3d40>] (tomoyo_realpath_from_path+0x3c/0x17c) [ 2176.257438][T16028] r10:83843000 r9:830a6000 r8:00000000 r7:834ef990 r6:8ae1e1a8 r5:00001000 [ 2176.257606][T16028] r4:00000000 [ 2176.257631][T16028] [<807e3d04>] (tomoyo_realpath_from_path) from [<807dfe84>] (tomoyo_path_number_perm+0xcc/0x22c) [ 2176.257733][T16028] r10:83843000 r9:00000000 r8:8ae1e180 r7:50009401 r6:00000004 r5:81cd6ac0 [ 2176.257953][T16028] r4:8ae1e1a8 r3:826c2240 [ 2176.258163][T16028] [<807dfdb8>] (tomoyo_path_number_perm) from [<807e4764>] (tomoyo_file_ioctl+0x1c/0x20) [ 2176.258384][T16028] r9:00000003 r8:8ae1e180 r7:20000440 r6:20000440 r5:50009401 r4:8ae1e180 [ 2176.258488][T16028] [<807e4748>] (tomoyo_file_ioctl) from [<807909d0>] (security_file_ioctl+0x64/0x1e4) [ 2176.258690][T16028] [<8079096c>] (security_file_ioctl) from [<80585410>] (sys_ioctl+0x4c/0xba0) [ 2176.258775][T16028] r7:20000440 r6:8ae1e181 r5:00000000 r4:50009401 [ 2176.258799][T16028] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2176.258860][T16028] Exception stack(0xebc59fa8 to 0xebc59ff0) [ 2176.258903][T16028] 9fa0: 00000000 00000000 00000003 50009401 20000440 00000000 [ 2176.258943][T16028] 9fc0: 00000000 00000000 001302c8 00000036 00300000 00000000 00006364 76f750bc [ 2176.259056][T16028] 9fe0: 76f74ec0 76f74eb0 0001929c 00132320 [ 2176.259107][T16028] r10:00000036 r9:83843000 r8:8020029c r7:00000036 r6:001302c8 r5:00000000 [ 2176.259135][T16028] r4:00000000 [ 2176.265964][T16028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2176.284196][T15403] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2176.439180][T15403] usb 1-1: Using ep0 maxpacket: 16 [ 2176.444652][T15403] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2176.445819][T15403] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2176.446712][T15403] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2176.447707][T15403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.452359][T15403] usb 1-1: config 0 descriptor?? [ 2179.841451][T15403] usbhid 1-1:0.0: can't add hid device: -71 [ 2179.842931][T15403] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2179.849249][T15403] usb 1-1: USB disconnect, device number 88 [ 2181.179525][T11361] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2181.336192][T11361] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2181.336518][T11361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2181.336887][T11361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2181.336969][T11361] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2181.337081][T11361] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2181.337124][T11361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.345729][T11361] usb 1-1: config 0 descriptor?? [ 2181.782447][T11361] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 2181.970336][T16088] FAULT_INJECTION: forcing a failure. [ 2181.970336][T16088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2181.971541][T16088] CPU: 0 UID: 0 PID: 16088 Comm: syz.1.2284 Tainted: G L syzkaller #0 PREEMPT [ 2181.971630][T16088] Tainted: [L]=SOFTLOCKUP [ 2181.971650][T16088] Hardware name: ARM-Versatile Express [ 2181.971677][T16088] Call trace: [ 2181.971721][T16088] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 2181.972022][T16088] r7:200017c0 r6:00000000 r5:60000013 r4:8229592c [ 2181.972099][T16088] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 2181.972225][T16088] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 2181.972319][T16088] r5:851c6c00 r4:8294fc90 [ 2181.972345][T16088] [<8021ee40>] (dump_stack) from [<809996ec>] (should_fail_ex+0x1c4/0x228) [ 2181.972448][T16088] [<80999528>] (should_fail_ex) from [<80999764>] (should_fail+0x14/0x18) [ 2181.972557][T16088] r8:0002bb00 r7:200017c0 r6:85d4f000 r5:00000000 r4:00001000 [ 2181.972585][T16088] [<80999750>] (should_fail) from [<80999784>] (should_fail_usercopy+0x1c/0x20) [ 2181.972678][T16088] [<80999768>] (should_fail_usercopy) from [<808d868c>] (_copy_from_iter+0x6c/0x7d8) [ 2181.972785][T16088] [<808d8620>] (_copy_from_iter) from [<808d8f00>] (copy_page_from_iter+0x108/0x144) [ 2181.972908][T16088] r10:85d4f000 r9:82a7b528 r8:00007000 r7:ddecaf1c r6:00001000 r5:00000000 [ 2181.972942][T16088] r4:00001000 [ 2181.972962][T16088] [<808d8df8>] (copy_page_from_iter) from [<815b39cc>] (skb_copy_datagram_from_iter+0xc4/0x28c) [ 2181.973088][T16088] r10:00000f00 r9:00000000 r8:00000f00 r7:00008000 r6:8456bf00 r5:00008f00 [ 2181.973121][T16088] r4:00008000 [ 2181.973147][T16088] [<815b3908>] (skb_copy_datagram_from_iter) from [<8187e3f0>] (unix_stream_sendmsg+0x1dc/0x6d0) [ 2181.973264][T16088] r10:00000000 r9:ebf95f30 r8:ebf95f20 r7:00008000 r6:00008f00 r5:8b172080 [ 2181.973297][T16088] r4:83f6dcc0 [ 2181.973324][T16088] [<8187e214>] (unix_stream_sendmsg) from [<8159693c>] (__sock_sendmsg+0x44/0x78) [ 2181.973737][T16088] r10:00000000 r9:ebf95dc4 r8:ebf95dc4 r7:00000000 r6:8347a780 r5:ebf95f20 [ 2181.973820][T16088] r4:00000000 [ 2181.973844][T16088] [<815968f8>] (__sock_sendmsg) from [<81597884>] (____sys_sendmsg+0x298/0x2cc) [ 2181.973955][T16088] r7:00000000 r6:8347a780 r5:00000000 r4:ebf95f20 [ 2181.974104][T16088] [<815975ec>] (____sys_sendmsg) from [<815997a8>] (___sys_sendmsg+0x9c/0xd0) [ 2181.974196][T16088] r10:ebf95e24 r9:20001940 r8:00000000 r7:00000000 r6:8347a780 r5:ebf95f20 [ 2181.974222][T16088] r4:00000000 [ 2181.974243][T16088] [<8159970c>] (___sys_sendmsg) from [<81599c40>] (__sys_sendmsg+0x8c/0xe0) [ 2181.974337][T16088] r10:00000128 r9:851c6c00 r8:8af17780 r7:00000000 r6:20001940 r5:8af17781 [ 2181.974364][T16088] r4:00000004 [ 2181.974385][T16088] [<81599bb4>] (__sys_sendmsg) from [<81599ca8>] (sys_sendmsg+0x14/0x18) [ 2181.974474][T16088] r8:8020029c r7:00000128 r6:001302c8 r5:00000000 r4:00000000 [ 2181.974498][T16088] [<81599c94>] (sys_sendmsg) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 2181.974564][T16088] Exception stack(0xebf95fa8 to 0xebf95ff0) [ 2181.974614][T16088] 5fa0: 00000000 00000000 00000004 20001940 00000000 00000000 [ 2181.974660][T16088] 5fc0: 00000000 00000000 001302c8 00000128 00300000 00000000 00006364 76f750bc [ 2181.974702][T16088] 5fe0: 76f74ec0 76f74eb0 0001929c 00132320 [ 2182.719767][T15403] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2182.879707][T15403] usb 2-1: Using ep0 maxpacket: 16 [ 2182.892479][T15403] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2182.894691][T15403] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2182.895283][T15403] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2182.895814][T15403] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2182.896260][T15403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.921407][T15403] usb 2-1: config 0 descriptor?? [ 2183.155676][T16095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.170515][T16095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.385236][T15403] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 2183.385637][T15403] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 2183.399050][T15403] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 2183.400997][T15403] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 2183.402209][T15403] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 2183.408817][T15403] nzxt-smart2 0003:1E71:2009.004C: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 2183.842837][T11361] usb 1-1: USB disconnect, device number 89 [ 2183.877052][ T4040] usb 2-1: USB disconnect, device number 3 [ 2185.509292][ T4040] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2185.666919][ T4040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.667246][ T4040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2185.667542][ T4040] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2185.667759][ T4040] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2185.667935][ T4040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.678985][ T4040] usb 1-1: config 0 descriptor?? [ 2186.138964][ T4040] usbhid 1-1:0.0: can't add hid device: -71 [ 2186.140039][ T4040] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2186.143617][ T4040] usb 1-1: USB disconnect, device number 90 [ 2186.425429][T16176] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16176 comm=syz.0.2297 [ 2187.087940][T16188] fuse: Unknown parameter 'group_i00000000000000000000' [ 2187.586045][ T4921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.656321][ T4921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.720012][ T4921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2187.791006][ T4921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2188.121514][ T4921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2188.132306][ T4921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2188.146711][ T4921] bond0 (unregistering): Released all slaves [ 2188.238864][ T4921] hsr_slave_0: left promiscuous mode [ 2188.252141][ T4921] hsr_slave_1: left promiscuous mode [ 2188.291583][ T4921] veth1_macvtap: left promiscuous mode [ 2188.292048][ T4921] veth0_macvtap: left promiscuous mode [ 2188.299718][ T4921] veth1_vlan: left promiscuous mode [ 2188.300358][ T4921] veth0_vlan: left promiscuous mode [ 2190.477681][T16199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2190.492545][T16199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2191.764221][T16199] hsr_slave_0: entered promiscuous mode [ 2191.766270][T16199] hsr_slave_1: entered promiscuous mode [ 2191.770907][T16199] debugfs: 'hsr0' already exists in 'hsr' [ 2191.771296][T16199] Cannot create hsr debugfs directory [ 2192.611152][T16199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2192.627109][T16199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2192.646221][T16199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2192.655520][T16199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2193.631362][T16199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2194.777911][T16537] fuse: Unknown parameter 'group_id00000000000000000000' [ 2197.969184][T16199] veth0_vlan: entered promiscuous mode [ 2197.989164][T16199] veth1_vlan: entered promiscuous mode [ 2198.089948][T16199] veth0_macvtap: entered promiscuous mode [ 2198.095711][T16199] veth1_macvtap: entered promiscuous mode [ 2198.212105][ T1191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2198.213579][ T1191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2198.214854][ T1191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2198.215930][ T1191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2198.755216][T16592] fuse: Unknown parameter 'group_id00000000000000000000' [ 2200.069319][ T3701] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2200.226729][ T3701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2200.226960][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2200.228286][ T3701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2200.228357][ T3701] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2200.244946][ T3701] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2200.245342][ T3701] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2200.248019][ T3701] usb 2-1: Manufacturer: syz [ 2200.252774][ T3701] usb 2-1: config 0 descriptor?? [ 2201.899863][T15403] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2202.059787][T15403] usb 1-1: Using ep0 maxpacket: 32 [ 2202.073793][T15403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2202.074432][T15403] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2202.075704][T15403] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2202.076520][T15403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.095165][T15403] usb 1-1: config 0 descriptor?? [ 2202.529333][T15403] usbhid 1-1:0.0: can't add hid device: -71 [ 2202.530632][T15403] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2202.602127][T15403] usb 1-1: USB disconnect, device number 91 [ 2202.950107][T15403] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 2203.116355][T15403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.117014][T15403] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2203.126991][T15403] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2203.127629][T15403] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2203.127940][T15403] usb 1-1: Manufacturer: syz [ 2203.149263][T15403] usb 1-1: config 0 descriptor?? [ 2203.377233][T15403] usb 1-1: USB disconnect, device number 92 [ 2203.859494][T15403] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2204.015487][T15403] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.016263][T15403] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2204.016565][T15403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.034238][T15403] usb 1-1: config 0 descriptor?? [ 2205.399606][ T3701] rc_core: IR keymap rc-hauppauge not found [ 2205.400896][ T3701] Registered IR keymap rc-empty [ 2205.402702][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.429580][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.451447][ T3701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2205.454870][ T3701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 2205.461960][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.501728][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.519467][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.540600][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.559710][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.589720][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.609930][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.629239][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.649696][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.669198][ T3701] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2205.690824][ T3701] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2205.691027][ T3701] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2205.700137][ T3701] usb 2-1: USB disconnect, device number 4 [ 2214.264072][ T4040] usb 1-1: USB disconnect, device number 93 [ 2218.253126][ T29] audit: type=1400 audit(2218.170:611): avc: denied { read } for pid=16688 comm="syz.1.2323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2234.783911][ T29] audit: type=1400 audit(2234.700:612): avc: denied { read write } for pid=16701 comm="syz.0.2328" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2234.789029][ T29] audit: type=1400 audit(2234.700:613): avc: denied { open } for pid=16701 comm="syz.0.2328" path="/9/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2235.399193][ T8142] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2235.549600][ T8142] usb 1-1: Using ep0 maxpacket: 32 [ 2235.572127][ T8142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2235.572454][ T8142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2235.572932][ T8142] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2235.573033][ T8142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2235.584395][ T8142] usb 1-1: config 0 descriptor?? [ 2236.044930][ T8142] ft260 0003:0403:6030.004D: unknown main item tag 0x7 [ 2236.256598][ T8142] ft260 0003:0403:6030.004D: chip code: 6424 8183 [ 2236.475825][ T8142] ft260 0003:0403:6030.004D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 2236.684012][ T8142] ft260 0003:0403:6030.004D: failed to retrieve status: -32, no wakeup [ 2237.089347][T15403] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2237.189566][ T8142] usb 1-1: reset high-speed USB device number 94 using dummy_hcd [ 2237.272974][T15403] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2237.277081][T15403] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2237.278002][T15403] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2237.281578][T15403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2237.343173][T16722] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2237.385038][T15403] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2238.808231][T14172] usb 2-1: USB disconnect, device number 5 [ 2239.742518][ T3701] usb 1-1: USB disconnect, device number 94 [ 2260.697101][T16800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1027 sclass=netlink_route_socket pid=16800 comm=syz.1.2340 [ 2267.689291][T15403] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2267.853556][T15403] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2267.855095][T15403] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2267.862330][T15403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.873447][T15403] usb 2-1: config 0 descriptor?? [ 2268.979299][ T42] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2269.141194][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2269.141590][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2269.143525][ T42] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 2269.143621][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.150473][ T42] usb 1-1: config 0 descriptor?? [ 2269.583334][ T42] stadia 0003:18D1:9400.004E: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 2269.583872][ T42] stadia 0003:18D1:9400.004E: no inputs found [ 2269.583951][ T42] stadia 0003:18D1:9400.004E: force feedback init failed [ 2269.779306][ T42] usb 1-1: USB disconnect, device number 95 [ 2272.292628][T16846] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2347'. [ 2278.127042][ T3701] usb 2-1: USB disconnect, device number 6 [ 2287.912218][T16876] syzkaller0: entered promiscuous mode [ 2287.912570][T16876] syzkaller0: entered allmulticast mode [ 2298.832452][ T42] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2299.019658][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 2299.043420][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2299.043761][ T42] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2299.044070][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2299.044114][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2299.073764][ T42] usb 1-1: config 0 descriptor?? [ 2299.125043][ T42] hub 1-1:0.0: bad descriptor, ignoring hub [ 2299.125298][ T42] hub 1-1:0.0: probe with driver hub failed with error -5 [ 2299.130937][ T42] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2309.276095][ T29] audit: type=1400 audit(2309.190:614): avc: denied { getattr } for pid=16909 comm="syz.1.2359" name="/" dev="iomem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2313.591538][ T8142] usb 1-1: USB disconnect, device number 96 [ 2316.510831][ T8142] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2316.739406][ T8142] usb 1-1: Using ep0 maxpacket: 8 [ 2316.782449][ T8142] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2316.783925][ T8142] usb 1-1: config 0 has no interface number 0 [ 2316.789188][ T8142] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2316.789817][ T8142] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2316.790035][ T8142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.799186][ T8142] usb 1-1: config 0 descriptor?? [ 2316.835793][ T8142] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2317.042620][T16782] usb 1-1: USB disconnect, device number 97 [ 2318.253620][T11361] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2318.492319][T11361] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 2318.492640][T11361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2318.516232][T11361] usb 2-1: config 0 descriptor?? [ 2328.768072][ T8142] usb 2-1: USB disconnect, device number 7 [ 2330.129901][ T3701] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2330.333795][ T3701] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2330.335399][ T3701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2330.340602][ T3701] usb 2-1: Product: syz [ 2330.343381][ T3701] usb 2-1: Manufacturer: syz [ 2330.346740][ T3701] usb 2-1: SerialNumber: syz [ 2330.354536][ T3701] usb 2-1: config 0 descriptor?? [ 2340.119772][T17047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2387'. [ 2340.600745][ T3701] usb 2-1: USB disconnect, device number 8 [ 2355.190424][ T8142] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2355.360281][ T8142] usb 2-1: Using ep0 maxpacket: 8 [ 2355.383099][ T8142] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 2355.383552][ T8142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.385329][ T8142] usb 2-1: config 0 has no interface number 0 [ 2355.387324][ T8142] usb 2-1: config 0 interface 109 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 2355.434343][ T8142] usb 2-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=7e.b6 [ 2355.435894][ T8142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.439778][ T8142] usb 2-1: Product: syz [ 2355.441682][ T8142] usb 2-1: Manufacturer: syz [ 2355.442743][ T8142] usb 2-1: SerialNumber: syz [ 2355.449960][ T8142] usb 2-1: config 0 descriptor?? [ 2355.673467][ T8142] usb 2-1: USB disconnect, device number 9 [ 2356.909129][T16933] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 2357.067238][T16933] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2357.067481][T16933] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2357.067639][T16933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2360.806657][ T29] audit: type=1400 audit(2360.720:615): avc: granted { setsecparam } for pid=17096 comm="syz.1.2395" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 2369.617413][ T29] audit: type=1400 audit(2369.530:616): avc: denied { transfer } for pid=17114 comm="syz.0.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2371.113238][T16782] usb 2-1: USB disconnect, device number 10 [ 2371.919305][T16782] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2372.218804][T16782] usb 2-1: Using ep0 maxpacket: 16 [ 2372.330455][T16782] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2372.330996][T16782] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 2372.331376][T16782] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2372.343802][T16782] usb 2-1: config 0 descriptor?? [ 2372.882724][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2402'. [ 2377.683582][T16782] usbhid 2-1:0.0: can't add hid device: -32 [ 2377.684112][T16782] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 2383.214858][ T41] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2383.449149][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 2383.573362][ T41] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2383.576406][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2383.576508][ T41] usb 1-1: Product: syz [ 2383.576546][ T41] usb 1-1: Manufacturer: syz [ 2383.576578][ T41] usb 1-1: SerialNumber: syz [ 2383.609576][ T41] usb 1-1: config 0 descriptor?? [ 2389.852721][ T41] usb 2-1: USB disconnect, device number 11 [ 2393.942224][T15403] usb 1-1: USB disconnect, device number 98 [ 2394.600225][T16933] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2394.749192][T16933] usb 1-1: Using ep0 maxpacket: 32 [ 2394.760601][T16933] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 2394.760950][T16933] usb 1-1: config 0 has no interface number 0 [ 2394.831131][T16933] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=f0.e3 [ 2394.831532][T16933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.831840][T16933] usb 1-1: Product: syz [ 2394.832003][T16933] usb 1-1: Manufacturer: syz [ 2394.832066][T16933] usb 1-1: SerialNumber: syz [ 2394.874061][T16933] usb 1-1: config 0 descriptor?? [ 2395.127341][T16933] cdc_subset 1-1:0.3: probe with driver cdc_subset failed with error -71 [ 2395.157884][T16933] usb 1-1: USB disconnect, device number 99 [ 2396.076727][ T29] audit: type=1400 audit(2395.990:617): avc: denied { ioctl } for pid=17189 comm="syz.0.2409" path="/50/file0/file0" dev="fuse" ino=64 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2407.334768][T17207] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2413'. [ 2407.669246][T11361] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2407.823541][T11361] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2407.843684][T11361] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2407.844109][T11361] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2407.846110][T11361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2407.882214][T11361] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2407.882597][T11361] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2407.884246][T11361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2407.914317][T11361] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2407.914699][T11361] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2407.915013][T11361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2407.935987][T11361] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2407.936426][T11361] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2407.936627][T11361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2407.954847][T11361] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2407.955165][T11361] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2407.955363][T11361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2407.963956][T11361] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2407.964342][T11361] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2407.964555][T11361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2407.991603][T11361] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2407.991943][T11361] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2407.995612][T11361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2408.009754][T11361] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2408.010505][T11361] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2408.011144][T11361] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2408.021984][T11361] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2408.022327][T11361] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2408.022571][T11361] usb 2-1: Product: syz [ 2408.022734][T11361] usb 2-1: Manufacturer: syz [ 2408.022912][T11361] usb 2-1: SerialNumber: syz [ 2408.041701][T11361] usb 2-1: config 0 descriptor?? [ 2408.073955][T11361] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 2408.264528][T11361] usb 2-1: USB disconnect, device number 12 [ 2408.277994][T11361] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 2408.782987][T17229] netlink: 4376 bytes leftover after parsing attributes in process `syz.1.2416'. [ 2409.793846][ T29] audit: type=1400 audit(2409.710:618): avc: denied { mounton } for pid=17239 comm="syz.1.2421" path="/563/file0" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2410.869324][ T4040] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2411.028709][ T4040] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2411.029090][ T4040] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 2411.029425][ T4040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2411.035244][ T4040] usb 1-1: config 0 descriptor?? [ 2424.862615][ T9] usb 1-1: USB disconnect, device number 100 [ 2452.659451][ T29] audit: type=1400 audit(2452.560:619): avc: denied { read } for pid=17289 comm="syz.0.2432" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2452.681345][ T29] audit: type=1400 audit(2452.600:620): avc: denied { open } for pid=17289 comm="syz.0.2432" path="/65/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2452.712371][T17292] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2452.714054][T17292] block device autoloading is deprecated and will be removed. [ 2452.732033][ T29] audit: type=1400 audit(2452.650:621): avc: denied { ioctl } for pid=17289 comm="syz.0.2432" path="/65/file0/file0" dev="fuse" ino=64 ioctlcmd=0x912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2452.962325][T17297] comedi: valid board names for 8255 driver are: [ 2452.963984][T17297] 8255 [ 2452.964907][T17297] comedi: valid board names for vmk80xx driver are: [ 2452.965961][T17297] vmk80xx [ 2452.966656][T17297] comedi: valid board names for usbduxsigma driver are: [ 2452.969962][T17297] usbduxsigma [ 2452.972366][T17297] comedi: valid board names for usbduxfast driver are: [ 2452.975683][T17297] usbduxfast [ 2452.977726][T17297] comedi: valid board names for usbdux driver are: [ 2452.980517][T17297] usbdux [ 2452.981478][T17297] comedi: valid board names for ni6501 driver are: [ 2452.982923][T17297] ni6501 [ 2452.984357][T17297] comedi: valid board names for dt9812 driver are: [ 2452.985462][T17297] dt9812 [ 2452.986151][T17297] comedi: valid board names for ni_labpc_cs driver are: [ 2452.987050][T17297] ni_labpc_cs [ 2452.989680][T17297] comedi: valid board names for ni_daq_700 driver are: [ 2452.990687][T17297] ni_daq_700 [ 2452.999407][T17297] comedi: valid board names for labpc_pci driver are: [ 2453.001139][T17297] labpc_pci [ 2453.002323][T17297] comedi: valid board names for adl_pci9118 driver are: [ 2453.003394][T17297] pci9118dg [ 2453.004295][T17297] pci9118hg [ 2453.005270][T17297] pci9118hr [ 2453.006103][T17297] comedi: valid board names for 8255_pci driver are: [ 2453.007037][T17297] 8255_pci [ 2453.007713][T17297] comedi: valid board names for comedi_parport driver are: [ 2453.010944][T17297] comedi_parport [ 2453.011950][T17297] comedi: valid board names for comedi_test driver are: [ 2453.012836][T17297] comedi_test [ 2453.013536][T17297] comedi: valid board names for comedi_bond driver are: [ 2453.014456][T17297] comedi_bond [ 2454.269312][ T8142] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2454.419287][ T8142] usb 1-1: Using ep0 maxpacket: 16 [ 2454.433002][ T8142] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 2454.434290][ T8142] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.435267][ T8142] usb 1-1: config 0 has no interface number 0 [ 2454.457429][ T8142] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 2454.459406][ T8142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.460405][ T8142] usb 1-1: Product: syz [ 2454.461134][ T8142] usb 1-1: Manufacturer: syz [ 2454.461888][ T8142] usb 1-1: SerialNumber: syz [ 2454.482386][ T8142] usb 1-1: config 0 descriptor?? [ 2454.710602][ T4040] usb 1-1: USB disconnect, device number 101 [ 2464.494131][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2464.539536][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2467.523012][T17323] hsr_slave_0: entered promiscuous mode [ 2467.531727][T17323] hsr_slave_1: entered promiscuous mode [ 2467.543019][T17323] debugfs: 'hsr0' already exists in 'hsr' [ 2467.545336][T17323] Cannot create hsr debugfs directory [ 2468.961607][T17323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2468.991637][T17323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2469.022609][T17323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2469.036839][T17323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2471.042901][T17323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2479.251587][T17323] veth0_vlan: entered promiscuous mode [ 2479.283722][T17323] veth1_vlan: entered promiscuous mode [ 2479.447800][T17323] veth0_macvtap: entered promiscuous mode [ 2479.495961][T17323] veth1_macvtap: entered promiscuous mode [ 2479.632088][ T1191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2479.632379][ T1191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2479.633899][ T1191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2479.634211][ T1191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2492.150093][ T29] audit: type=1400 audit(2492.050:622): avc: denied { create } for pid=17669 comm="syz.0.2452" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2505.863853][ T29] audit: type=1400 audit(2505.780:623): avc: denied { unlink } for pid=16199 comm="syz-executor" name="file0" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2508.735629][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 2536.602700][ T4921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2536.706467][ T4921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2536.862054][ T4921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2537.014222][ T4921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2537.792474][ T4921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2537.816123][ T4921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2537.826737][ T4921] bond0 (unregistering): Released all slaves [ 2537.976080][ T4921] hsr_slave_0: left promiscuous mode [ 2537.992259][ T4921] hsr_slave_1: left promiscuous mode [ 2538.061413][ T4921] veth1_macvtap: left promiscuous mode [ 2538.071585][ T4921] veth0_macvtap: left promiscuous mode [ 2538.073476][ T4921] veth1_vlan: left promiscuous mode [ 2538.079442][ T4921] veth0_vlan: left promiscuous mode [ 2556.561952][T17797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.564430][T17797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2557.372261][ T29] audit: type=1400 audit(2557.290:624): avc: denied { create } for pid=17805 comm="syz.2.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2557.392984][ T29] audit: type=1400 audit(2557.310:625): avc: denied { bind } for pid=17805 comm="syz.2.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2587.995698][T17852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2588.012736][T17852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2589.687452][T17852] hsr_slave_0: entered promiscuous mode [ 2589.704296][T17852] hsr_slave_1: entered promiscuous mode [ 2590.454566][T17852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2590.473256][T17852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2590.492855][T17852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2590.512998][T17852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2591.725479][T17852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2597.340795][T17852] veth0_vlan: entered promiscuous mode [ 2597.360899][T17852] veth1_vlan: entered promiscuous mode [ 2597.440567][T17852] veth0_macvtap: entered promiscuous mode [ 2597.453695][T17852] veth1_macvtap: entered promiscuous mode [ 2597.535311][ T1994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.536494][ T1994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.541474][ T1994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2597.543227][ T1994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.883270][T18165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2611.907215][ T1994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2611.923968][T18165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2612.052917][ T1994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.142488][ T1994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.212322][ T1994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.662712][ T1994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2612.671903][ T1994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2612.692649][ T1994] bond0 (unregistering): Released all slaves [ 2612.762558][ T1994] hsr_slave_0: left promiscuous mode [ 2612.771041][ T1994] hsr_slave_1: left promiscuous mode [ 2612.780974][ T1994] veth1_macvtap: left promiscuous mode [ 2612.789287][ T1994] veth0_macvtap: left promiscuous mode [ 2612.789885][ T1994] veth1_vlan: left promiscuous mode [ 2612.790061][ T1994] veth0_vlan: left promiscuous mode [ 2614.505511][T18165] hsr_slave_0: entered promiscuous mode [ 2614.507221][T18165] hsr_slave_1: entered promiscuous mode [ 2614.519664][T18165] debugfs: 'hsr0' already exists in 'hsr' [ 2614.520447][T18165] Cannot create hsr debugfs directory [ 2615.168080][T18165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2615.185285][T18165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2615.205208][T18165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2615.241753][T18165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2616.881788][T18165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2626.420469][T18165] veth0_vlan: entered promiscuous mode [ 2626.487514][T18165] veth1_vlan: entered promiscuous mode [ 2626.715071][T18165] veth0_macvtap: entered promiscuous mode [ 2626.726932][T18165] veth1_macvtap: entered promiscuous mode [ 2626.942493][ T1994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2626.950042][ T1994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2626.950457][ T1994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2626.950561][ T1994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2632.189251][T18550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2632.192065][T18550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.162618][T18585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.170432][T18585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2648.975062][T18616] pimreg: entered allmulticast mode [ 2653.026432][ T1191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.097873][ T1191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.205705][ T1191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.292998][ T1191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2653.923172][ T1191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2653.942496][ T1191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2653.955917][ T1191] bond0 (unregistering): Released all slaves [ 2654.113566][ T1191] hsr_slave_0: left promiscuous mode [ 2654.148955][ T1191] hsr_slave_1: left promiscuous mode [ 2654.160118][ T1191] veth1_macvtap: left promiscuous mode [ 2654.168925][ T1191] veth0_macvtap: left promiscuous mode [ 2654.170293][ T1191] veth1_vlan: left promiscuous mode [ 2654.171258][ T1191] veth0_vlan: left promiscuous mode [ 2667.051560][T18658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2667.090716][T18658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2670.253565][T18658] hsr_slave_0: entered promiscuous mode [ 2670.259642][T18658] hsr_slave_1: entered promiscuous mode [ 2670.261215][T18658] debugfs: 'hsr0' already exists in 'hsr' [ 2670.261704][T18658] Cannot create hsr debugfs directory [ 2671.216485][T18658] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2671.233588][T18658] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2671.238745][T18658] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2671.244893][T18658] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2674.357049][T18658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2680.077868][T18658] veth0_vlan: entered promiscuous mode [ 2680.097476][T18658] veth1_vlan: entered promiscuous mode [ 2680.138142][T18658] veth0_macvtap: entered promiscuous mode [ 2680.146659][T18658] veth1_macvtap: entered promiscuous mode [ 2680.212616][ T7667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2680.213290][ T7667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2680.213905][ T7667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2680.214477][ T7667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2683.229512][T17448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.306458][T17448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.467402][T17448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2683.541570][T17448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2684.087245][T17448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2684.096132][T17448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2684.107504][T17448] bond0 (unregistering): Released all slaves [ 2684.247364][T17448] hsr_slave_0: left promiscuous mode [ 2684.250912][T17448] hsr_slave_1: left promiscuous mode [ 2684.260555][T17448] veth1_macvtap: left promiscuous mode [ 2684.261680][T17448] veth0_macvtap: left promiscuous mode [ 2684.262875][T17448] veth1_vlan: left promiscuous mode [ 2684.263763][T17448] veth0_vlan: left promiscuous mode [ 2687.057801][T19050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2687.061903][T19050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2688.105287][T19057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19057 comm=syz.4.2515 [ 2689.370878][ T29] audit: type=1400 audit(2689.290:626): avc: denied { sqpoll } for pid=19063 comm="syz.4.2516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2701.691982][T19141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2701.701476][T19141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2708.085126][T19159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2708.091298][T19159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2710.259326][T19188] comedi: valid board names for 8255 driver are: [ 2710.259563][T19188] 8255 [ 2710.259737][T19188] comedi: valid board names for vmk80xx driver are: [ 2710.259812][T19188] vmk80xx [ 2710.259878][T19188] comedi: valid board names for usbduxsigma driver are: [ 2710.259945][T19188] usbduxsigma [ 2710.260014][T19188] comedi: valid board names for usbduxfast driver are: [ 2710.260079][T19188] usbduxfast [ 2710.260143][T19188] comedi: valid board names for usbdux driver are: [ 2710.260209][T19188] usbdux [ 2710.260274][T19188] comedi: valid board names for ni6501 driver are: [ 2710.260342][T19188] ni6501 [ 2710.260408][T19188] comedi: valid board names for dt9812 driver are: [ 2710.260473][T19188] dt9812 [ 2710.260540][T19188] comedi: valid board names for ni_labpc_cs driver are: [ 2710.260606][T19188] ni_labpc_cs [ 2710.260737][T19188] comedi: valid board names for ni_daq_700 driver are: [ 2710.260816][T19188] ni_daq_700 [ 2710.260886][T19188] comedi: valid board names for labpc_pci driver are: [ 2710.260952][T19188] labpc_pci [ 2710.261024][T19188] comedi: valid board names for adl_pci9118 driver are: [ 2710.261094][T19188] pci9118dg [ 2710.261157][T19188] pci9118hg [ 2710.261220][T19188] pci9118hr [ 2710.261286][T19188] comedi: valid board names for 8255_pci driver are: [ 2710.261351][T19188] 8255_pci [ 2710.261484][T19188] comedi: valid board names for comedi_parport driver are: [ 2710.261563][T19188] comedi_parport [ 2710.261638][T19188] comedi: valid board names for comedi_test driver are: [ 2710.261704][T19188] comedi_test [ 2710.261780][T19188] comedi: valid board names for comedi_bond driver are: [ 2710.261844][T19188] comedi_bond [ 2723.917276][T19207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2723.920862][T19207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2723.939235][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2531'. [ 2723.940496][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2531'. [ 2735.673699][T19215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2735.680369][T19215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2736.418218][ T29] audit: type=1400 audit(2736.320:627): avc: denied { mounton } for pid=19220 comm="syz.4.2536" path="/39/file0" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 2738.059713][T19229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2738.061342][T19229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2743.384485][T19236] nbd: must specify a device to reconfigure [ 2753.118935][T19241] [U] á [ 2764.830007][T19272] input: syz1 as /devices/virtual/input/input31 [ 2772.603655][T19281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2772.604575][T19281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2785.482051][T19322] netlink: 'syz.4.2566': attribute type 1 has an invalid length. [ 2785.616122][T19322] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 2785.654646][T19072] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2785.661858][T19322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2785.769803][T19072] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 2804.026908][T19388] syzkaller0: entered promiscuous mode [ 2804.034409][T19388] syzkaller0: entered allmulticast mode [ 2805.544290][T19402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2805.549306][T19402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2809.051042][T19415] comedi: valid board names for 8255 driver are: [ 2809.053521][T19415] 8255 [ 2809.067843][T19415] comedi: valid board names for vmk80xx driver are: [ 2809.070800][T19415] vmk80xx [ 2809.071949][T19415] comedi: valid board names for usbduxsigma driver are: [ 2809.073776][T19415] usbduxsigma [ 2809.077026][T19415] comedi: valid board names for usbduxfast driver are: [ 2809.090663][T19415] usbduxfast [ 2809.092157][T19415] comedi: valid board names for usbdux driver are: [ 2809.093791][T19415] usbdux [ 2809.094737][T19415] comedi: valid board names for ni6501 driver are: [ 2809.096384][T19415] ni6501 [ 2809.097452][T19415] comedi: valid board names for dt9812 driver are: [ 2809.097726][T19415] dt9812 [ 2809.097910][T19415] comedi: valid board names for ni_labpc_cs driver are: [ 2809.098092][T19415] ni_labpc_cs [ 2809.112265][T19415] comedi: valid board names for ni_daq_700 driver are: [ 2809.112621][T19415] ni_daq_700 [ 2809.112799][T19415] comedi: valid board names for labpc_pci driver are: [ 2809.112844][T19415] labpc_pci [ 2809.112860][T19415] comedi: valid board names for adl_pci9118 driver are: [ 2809.112880][T19415] pci9118dg [ 2809.112893][T19415] pci9118hg [ 2809.112946][T19415] pci9118hr [ 2809.112998][T19415] comedi: valid board names for 8255_pci driver are: [ 2809.113021][T19415] 8255_pci [ 2809.113035][T19415] comedi: valid board names for comedi_parport driver are: [ 2809.113051][T19415] comedi_parport [ 2809.113066][T19415] comedi: valid board names for comedi_test driver are: [ 2809.113082][T19415] comedi_test [ 2809.113097][T19415] comedi: valid board names for comedi_bond driver are: [ 2809.113118][T19415] comedi_bond [ 2812.338231][T19433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2812.351773][T19433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2853.232149][T19437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2853.242485][T19437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2854.194379][T19437] hsr_slave_0: entered promiscuous mode [ 2854.196303][T19437] hsr_slave_1: entered promiscuous mode [ 2854.622862][T19437] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2854.633743][T19437] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2854.645479][T19437] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2854.657956][T19437] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2855.583781][T19437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2860.862737][T19729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2860.882988][T19729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2861.106001][T19437] veth0_vlan: entered promiscuous mode [ 2861.177288][T19437] veth1_vlan: entered promiscuous mode [ 2861.302284][T19437] veth0_macvtap: entered promiscuous mode [ 2861.325136][T19437] veth1_macvtap: entered promiscuous mode [ 2861.442069][ T1191] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.456638][ T1191] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.457913][ T1191] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2861.471962][ T1191] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2862.433899][T19729] hsr_slave_0: entered promiscuous mode [ 2862.435818][T19729] hsr_slave_1: entered promiscuous mode [ 2862.447700][T19729] debugfs: 'hsr0' already exists in 'hsr' [ 2862.450233][T19729] Cannot create hsr debugfs directory [ 2863.060455][T19729] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2863.081810][T19729] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2863.086889][T19729] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2863.101743][T19729] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2864.364945][T19729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2864.839392][T20055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2864.842031][T20055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2868.850567][T19729] veth0_vlan: entered promiscuous mode [ 2868.882790][T19729] veth1_vlan: entered promiscuous mode [ 2868.990461][T19729] veth0_macvtap: entered promiscuous mode [ 2869.011622][T19729] veth1_macvtap: entered promiscuous mode [ 2869.054759][T17448] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.055973][T17448] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.086393][T17448] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2869.086817][T17448] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2870.441976][T20101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2870.442646][T20101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2873.150441][T20114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=20114 comm=syz.7.2608 [ 2874.900023][T20124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2874.901611][T20124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2898.252700][T20139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2898.255087][T20139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2913.645046][T20147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2913.654763][T20147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2915.154254][T20147] hsr_slave_0: entered promiscuous mode [ 2915.157520][T20147] hsr_slave_1: entered promiscuous mode [ 2915.171280][T20147] debugfs: 'hsr0' already exists in 'hsr' [ 2915.172916][T20147] Cannot create hsr debugfs directory [ 2915.751873][T20147] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2915.765051][T20147] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2915.792030][T20147] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2915.821486][T20147] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2916.981146][T20147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2918.536789][T20432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2918.539993][T20432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2918.700129][T20432] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2620'. [ 2919.151154][T20439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2919.161500][T20439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2927.232601][T20147] veth0_vlan: entered promiscuous mode [ 2927.303036][T20147] veth1_vlan: entered promiscuous mode [ 2927.552363][T20147] veth0_macvtap: entered promiscuous mode [ 2927.595481][T20147] veth1_macvtap: entered promiscuous mode [ 2927.892793][ T7667] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2927.897350][T19131] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2927.897814][T19131] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2927.900438][T19072] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2928.894949][T20474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2928.900891][T20474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2929.350308][T20478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2929.352018][T20478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2933.530581][T20488] comedi: valid board names for 8255 driver are: [ 2933.531168][T20488] 8255 [ 2933.532271][T20488] comedi: valid board names for vmk80xx driver are: [ 2933.532734][T20488] vmk80xx [ 2933.533023][T20488] comedi: valid board names for usbduxsigma driver are: [ 2933.533216][T20488] usbduxsigma [ 2933.533353][T20488] comedi: valid board names for usbduxfast driver are: [ 2933.533422][T20488] usbduxfast [ 2933.533436][T20488] comedi: valid board names for usbdux driver are: [ 2933.533450][T20488] usbdux [ 2933.533493][T20488] comedi: valid board names for ni6501 driver are: [ 2933.533516][T20488] ni6501 [ 2933.533532][T20488] comedi: valid board names for dt9812 driver are: [ 2933.533546][T20488] dt9812 [ 2933.533834][T20488] comedi: valid board names for ni_labpc_cs driver are: [ 2933.533862][T20488] ni_labpc_cs [ 2933.533950][T20488] comedi: valid board names for ni_daq_700 driver are: [ 2933.533973][T20488] ni_daq_700 [ 2933.533988][T20488] comedi: valid board names for labpc_pci driver are: [ 2933.534021][T20488] labpc_pci [ 2933.534038][T20488] comedi: valid board names for adl_pci9118 driver are: [ 2933.534061][T20488] pci9118dg [ 2933.534106][T20488] pci9118hg [ 2933.534163][T20488] pci9118hr [ 2933.534189][T20488] comedi: valid board names for 8255_pci driver are: [ 2933.534207][T20488] 8255_pci [ 2933.534220][T20488] comedi: valid board names for comedi_parport driver are: [ 2933.534235][T20488] comedi_parport [ 2933.534251][T20488] comedi: valid board names for comedi_test driver are: [ 2933.534267][T20488] comedi_test [ 2933.534281][T20488] comedi: valid board names for comedi_bond driver are: [ 2933.534296][T20488] comedi_bond [ 2950.588937][T20499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2950.602759][T20499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2998.544489][T20538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2998.559878][T20538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2999.551155][T20538] hsr_slave_0: entered promiscuous mode [ 2999.556417][T20538] hsr_slave_1: entered promiscuous mode [ 2999.557974][T20538] debugfs: 'hsr0' already exists in 'hsr' [ 2999.559745][T20538] Cannot create hsr debugfs directory [ 2999.783214][T20538] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2999.790545][T20538] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2999.804130][T20538] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2999.812890][T20538] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3001.220425][T20538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3005.234086][ T29] audit: type=1400 audit(3005.150:628): avc: denied { setcheckreqprot } for pid=20819 comm="syz.7.2644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 3005.690007][T20538] veth0_vlan: entered promiscuous mode [ 3005.705836][T20538] veth1_vlan: entered promiscuous mode [ 3005.758024][T20538] veth0_macvtap: entered promiscuous mode [ 3005.765293][T20538] veth1_macvtap: entered promiscuous mode [ 3005.811069][T16219] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3005.812183][T16219] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3005.814692][T16219] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3005.816220][T16219] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3018.077726][T20865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3018.079565][T20865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3019.011638][T20868] ptrace attach of "/syz-executor exec"[19729] was attempted by " [ 3041.039882][T20878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3041.041435][T20878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3049.260303][T19094] hid-generic 0009:FFFF:0100.004F: item fetching failed at offset 0/4 [ 3049.261110][T19094] hid-generic 0009:FFFF:0100.004F: probe with driver hid-generic failed with error -22 [ 3053.869982][T20907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3053.871609][T20907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3054.682031][T20912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3054.689675][T20912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3065.602596][ T29] audit: type=1400 audit(3065.520:629): avc: denied { accept } for pid=20937 comm="syz.9.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3102.044239][T20966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3102.053534][T20966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3103.332161][T20966] hsr_slave_0: entered promiscuous mode [ 3103.336148][T20966] hsr_slave_1: entered promiscuous mode [ 3103.344604][T20966] debugfs: 'hsr0' already exists in 'hsr' [ 3103.352595][T20966] Cannot create hsr debugfs directory [ 3104.227795][T20966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3104.237666][T20966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3104.253560][T20966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3104.265613][T20966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3105.503240][T21261] comedi comedi0: Minor 3 could not be opened [ 3105.636304][T20966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3109.246319][T20966] veth0_vlan: entered promiscuous mode [ 3109.304637][T20966] veth1_vlan: entered promiscuous mode [ 3109.443824][T20966] veth0_macvtap: entered promiscuous mode [ 3109.465332][T20966] veth1_macvtap: entered promiscuous mode [ 3109.630912][T19073] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3109.636856][T19073] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3109.640106][T19073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3109.640533][T19073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3110.409154][T19119] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 3110.569204][T19119] usb 2-1: Using ep0 maxpacket: 32 [ 3110.590686][T19119] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 3110.591446][T19119] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 3110.592069][T19119] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 3110.592834][T19119] usb 2-1: config 1 has no interface number 0 [ 3110.593326][T19119] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3110.593991][T19119] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 3110.594647][T19119] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 3110.595399][T19119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3110.607297][T19119] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 3110.819225][T19119] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 3111.341520][T19119] usb 2-1: USB disconnect, device number 13 [ 3111.347090][T19119] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 3124.026361][ T29] audit: type=1400 audit(3123.940:630): avc: denied { mount } for pid=21360 comm="syz.9.2689" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 3124.051232][ T29] audit: type=1400 audit(3123.970:631): avc: denied { search } for pid=21360 comm="syz.9.2689" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3124.054903][ T29] audit: type=1400 audit(3123.970:632): avc: denied { search } for pid=21360 comm="syz.9.2689" name="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3124.055050][ T29] audit: type=1400 audit(3123.970:633): avc: denied { read open } for pid=21360 comm="syz.9.2689" path="/" dev="configfs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 3125.212690][T21373] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.2694' sets config #-1 [ 3214.705917][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 3227.892411][T21494] netlink: 'syz.9.2728': attribute type 1 has an invalid length. [ 3227.981945][T21494] bond1: entered promiscuous mode [ 3227.982804][T21494] bond1: entered allmulticast mode [ 3227.984085][T21494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 3228.007737][T21494] erspan1: entered allmulticast mode [ 3228.015645][T21494] bond1: (slave erspan1): making interface the new active one [ 3228.017549][T21494] erspan1: entered promiscuous mode [ 3228.024897][T21494] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 3228.066711][T21494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3228.067315][T21494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3228.111735][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.112057][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.115105][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.116350][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.117732][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.120973][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.122231][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.126239][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.127592][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.127890][T19118] hid-generic 0004:0003:0001.0050: unknown main item tag 0x0 [ 3228.183269][T19118] hid-generic 0004:0003:0001.0050: hidraw0: HID v0.05 Device [syz0] on syz1 [ 3229.985153][T21543] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2730'. [ 3234.666518][T21558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.692455][T21558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3236.681951][T21569] syz_tun: entered allmulticast mode [ 3236.725369][T21568] syz_tun: left allmulticast mode [ 3262.640316][ T30] INFO: task syz.5.2589:19433 blocked for more than 430 seconds. [ 3262.641597][ T30] Tainted: G L syzkaller #0 [ 3262.650795][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc [ 3262.652816][ T30] task:syz.5.2589 state:D stack:0 pid:19433 tgid:19432 ppid:18658 task_flags:0x400040 flags:0x00000001 [ 3262.653059][ T30] Call trace: [ 3262.653100][ T30] [<81ab1e1c>] (__schedule) from [<80298848>] (rt_mutex_schedule+0x20/0x38) [ 3262.653248][ T30] r10:8ac00000 r9:00000002 r8:00000000 r7:dfcc5dd8 r6:dfcc5de0 r5:8ac03c00 [ 3262.653309][ T30] r4:8ac03c00 [ 3262.653339][ T30] [<80298828>] (rt_mutex_schedule) from [<81ab9924>] (rt_mutex_slowlock_block.constprop.0+0x40/0x1d4) [ 3262.653435][ T30] r5:8ac03c00 r4:83330854 [ 3262.653451][ T30] [<81ab98e4>] (rt_mutex_slowlock_block.constprop.0) from [<81abac7c>] (rt_mutex_slowlock.constprop.0+0xd4/0x364) [ 3262.653513][ T30] r10:60000013 r9:dfcc5de0 r8:00000002 r7:dfcc5dd8 r6:83330854 r5:00000000 [ 3262.653531][ T30] r4:8ac03c00 [ 3262.653545][ T30] [<81ababa8>] (rt_mutex_slowlock.constprop.0) from [<81abaff0>] (rt_mutex_lock+0x44/0x48) [ 3262.653605][ T30] r10:84da2080 r9:00000001 r8:84df2400 r7:84da2100 r6:84da2100 r5:00000001 [ 3262.653623][ T30] r4:83330840 [ 3262.653637][ T30] [<81abafac>] (rt_mutex_lock) from [<81118f98>] (i2c_adapter_lock_bus+0x14/0x18) [ 3262.653695][ T30] [<81118f84>] (i2c_adapter_lock_bus) from [<8111ae8c>] (i2c_transfer+0x9c/0x110) [ 3262.653742][ T30] [<8111adf0>] (i2c_transfer) from [<81120314>] (i2cdev_ioctl_rdwr+0x228/0x258) [ 3262.653795][ T30] r6:84da2100 r5:00000001 r4:84da210c [ 3262.653812][ T30] [<811200ec>] (i2cdev_ioctl_rdwr) from [<81120e90>] (i2cdev_ioctl+0x354/0x418) [ 3262.653872][ T30] r10:8ac03c00 r9:00000004 r8:8aab16c0 r7:00000707 r6:84da2100 r5:84df2400 [ 3262.653890][ T30] r4:20000080 [ 3262.653904][ T30] [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 3262.653965][ T30] r7:20000080 r6:8aab16c1 r5:00000000 r4:00000707 [ 3262.653980][ T30] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3262.654032][ T30] Exception stack(0xdfcc5fa8 to 0xdfcc5ff0) [ 3262.654072][ T30] 5fa0: 00000000 00000000 00000004 00000707 20000080 00000000 [ 3262.654103][ T30] 5fc0: 00000000 00000000 00316310 00000036 00300000 00000000 00006364 76f840bc [ 3262.654129][ T30] 5fe0: 76f83ec0 76f83eb0 0001929c 00132320 [ 3262.654164][ T30] r10:00000036 r9:8ac03c00 r8:8020029c r7:00000036 r6:00316310 r5:00000000 [ 3262.654181][ T30] r4:00000000 [ 3262.654903][ T30] NMI backtrace for cpu 0 [ 3262.654999][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 3262.655097][ T30] Tainted: [L]=SOFTLOCKUP [ 3262.655111][ T30] Hardware name: ARM-Versatile Express [ 3262.655128][ T30] Call trace: [ 3262.655152][ T30] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 3262.655214][ T30] r7:00000000 r6:00010013 r5:60010093 r4:8229592c [ 3262.655228][ T30] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 3262.655273][ T30] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 3262.655323][ T30] r5:00000000 r4:00000001 [ 3262.655337][ T30] [<8021ee40>] (dump_stack) from [<81a9b900>] (nmi_cpu_backtrace+0x160/0x17c) [ 3262.655386][ T30] [<81a9b7a0>] (nmi_cpu_backtrace) from [<81a9ba4c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 3262.655445][ T30] r7:00000000 r6:8280c710 r5:8281af5c r4:ffffffff [ 3262.655459][ T30] [<81a9b91c>] (nmi_trigger_cpumask_backtrace) from [<8022f818>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 3262.655528][ T30] r9:00007ef3 r8:8280c890 r7:00048540 r6:00007ef3 r5:82ac27e4 r4:00000048 [ 3262.655543][ T30] [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa355c>] (sys_info+0x68/0xa8) [ 3262.655588][ T30] [<81aa34f4>] (sys_info) from [<80383748>] (watchdog+0x464/0x8a0) [ 3262.655636][ T30] r5:82ac27e4 r4:8325480c [ 3262.655650][ T30] [<803832e4>] (watchdog) from [<8027f6fc>] (kthread+0x12c/0x280) [ 3262.655705][ T30] r10:00000000 r9:00000000 r8:803832e4 r7:8335af80 r6:8335af80 r5:8321d400 [ 3262.655723][ T30] r4:00000001 [ 3262.655736][ T30] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3262.655776][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 3262.655803][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 3262.655832][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3262.655857][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3262.655890][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 3262.655907][ T30] r4:832c0e40 [ 3262.656065][ T30] Sending NMI from CPU 0 to CPUs 1: [ 3262.656534][ C1] NMI backtrace for cpu 1 [ 3262.656782][ C1] CPU: 1 UID: 0 PID: 3092 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT [ 3262.656862][ C1] Tainted: [L]=SOFTLOCKUP [ 3262.656881][ C1] Hardware name: ARM-Versatile Express [ 3262.656929][ C1] PC is at rw_verify_area+0x50/0x1a8 [ 3262.657035][ C1] LR is at vfs_write+0x6c/0x44c [ 3262.657088][ C1] pc : [<80568010>] lr : [<8056adf8>] psr: 60000013 [ 3262.657132][ C1] sp : df95dea0 ip : df95ded8 fp : df95ded4 [ 3262.657168][ C1] r10: 00000004 r9 : 7e97c67c r8 : 00000000 [ 3262.657216][ C1] r7 : 00000002 r6 : 84c126c0 r5 : 00000000 r4 : 00000020 [ 3262.657261][ C1] r3 : 00000020 r2 : 00000000 r1 : 84c126c0 r0 : 00000001 [ 3262.657427][ C1] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 3262.657504][ C1] Control: 30c5387d Table: 84d87040 DAC: 00000000 [ 3262.657570][ C1] Call trace: [ 3262.657614][ C1] [<80567fc0>] (rw_verify_area) from [<8056adf8>] (vfs_write+0x6c/0x44c) [ 3262.657698][ C1] r9:7e97c67c r8:00000000 r7:83840000 r6:00000020 r5:84c126c0 r4:84c126c0 [ 3262.657719][ C1] [<8056ad8c>] (vfs_write) from [<8056b39c>] (ksys_write+0xc8/0xe8) [ 3262.657784][ C1] r10:00000004 r9:83840000 r8:8020029c r7:00000020 r6:7e97c67c r5:84c126c0 [ 3262.657806][ C1] r4:84c126c0 [ 3262.657825][ C1] [<8056b2d4>] (ksys_write) from [<8056b3cc>] (sys_write+0x10/0x14) [ 3262.657880][ C1] r7:00000004 r6:002eec68 r5:7e97c67c r4:00000020 [ 3262.657911][ C1] [<8056b3bc>] (sys_write) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3262.657964][ C1] Exception stack(0xdf95dfa8 to 0xdf95dff0) [ 3262.658015][ C1] dfa0: 00000020 7e97c67c 00000002 7e97c67c 00000020 00000001 [ 3262.658050][ C1] dfc0: 00000020 7e97c67c 002eec68 00000004 00000020 002efa6c 02775000 7e97e760 [ 3262.658079][ C1] dfe0: 00000158 7e97c540 00104208 00130278 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3264.693148][T19125] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3264.792604][T19125] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3264.857255][T19125] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3264.927134][T19125] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3265.384739][T19125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3265.412536][T19125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3265.431293][T19125] bond0 (unregistering): Released all slaves [ 3265.520613][T19125] hsr_slave_0: left promiscuous mode [ 3265.522119][T19125] hsr_slave_1: left promiscuous mode [ 3265.542194][T19125] veth1_macvtap: left promiscuous mode [ 3265.542473][T19125] veth0_macvtap: left promiscuous mode [ 3265.543552][T19125] veth1_vlan: left promiscuous mode [ 3265.543825][T19125] veth0_vlan: left promiscuous mode [ 3268.695735][T19132] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3268.757116][T19132] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3268.824869][T19132] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3268.891959][T19132] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3269.117993][T19132] bond1 (unregistering): (slave erspan1): Releasing active interface [ 3269.118570][T19132] erspan1 (unregistering): left promiscuous mode [ 3269.147689][T19132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3269.163479][T19132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3269.167261][T19132] bond0 (unregistering): Released all slaves [ 3269.176542][T19132] bond1 (unregistering): Released all slaves [ 3269.246342][T19132] hsr_slave_0: left promiscuous mode [ 3269.249612][T19132] hsr_slave_1: left promiscuous mode [ 3269.257754][T19132] veth1_macvtap: left promiscuous mode [ 3269.258041][T19132] veth0_macvtap: left promiscuous mode [ 3269.267695][T19132] veth1_vlan: left promiscuous mode [ 3269.268141][T19132] veth0_vlan: left promiscuous mode [ 3283.120095][ T30] INFO: task syz.5.2589:19433 blocked for more than 450 seconds. [ 3283.121917][ T30] Tainted: G L syzkaller #0 [ 3283.122902][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3283.123851][ T30] task:syz.5.2589 state:D stack:0 pid:19433 tgid:19432 ppid:18658 task_flags:0x400040 flags:0x00000001 [ 3283.125433][ T30] Call trace: [ 3283.126434][ T30] [<81ab1e1c>] (__schedule) from [<80298848>] (rt_mutex_schedule+0x20/0x38) [ 3283.127688][ T30] r10:8ac00000 r9:00000002 r8:00000000 r7:dfcc5dd8 r6:dfcc5de0 r5:8ac03c00 [ 3283.128884][ T30] r4:8ac03c00 [ 3283.129445][ T30] [<80298828>] (rt_mutex_schedule) from [<81ab9924>] (rt_mutex_slowlock_block.constprop.0+0x40/0x1d4) [ 3283.130533][ T30] r5:8ac03c00 r4:83330854 [ 3283.131145][ T30] [<81ab98e4>] (rt_mutex_slowlock_block.constprop.0) from [<81abac7c>] (rt_mutex_slowlock.constprop.0+0xd4/0x364) [ 3283.132308][ T30] r10:60000013 r9:dfcc5de0 r8:00000002 r7:dfcc5dd8 r6:83330854 r5:00000000 [ 3283.133717][ T30] r4:8ac03c00 [ 3283.134668][ T30] [<81ababa8>] (rt_mutex_slowlock.constprop.0) from [<81abaff0>] (rt_mutex_lock+0x44/0x48) [ 3283.135786][ T30] r10:84da2080 r9:00000001 r8:84df2400 r7:84da2100 r6:84da2100 r5:00000001 [ 3283.136738][ T30] r4:83330840 [ 3283.137316][ T30] [<81abafac>] (rt_mutex_lock) from [<81118f98>] (i2c_adapter_lock_bus+0x14/0x18) [ 3283.138792][ T30] [<81118f84>] (i2c_adapter_lock_bus) from [<8111ae8c>] (i2c_transfer+0x9c/0x110) [ 3283.140015][ T30] [<8111adf0>] (i2c_transfer) from [<81120314>] (i2cdev_ioctl_rdwr+0x228/0x258) [ 3283.141397][ T30] r6:84da2100 r5:00000001 r4:84da210c [ 3283.142425][ T30] [<811200ec>] (i2cdev_ioctl_rdwr) from [<81120e90>] (i2cdev_ioctl+0x354/0x418) [ 3283.144013][ T30] r10:8ac03c00 r9:00000004 r8:8aab16c0 r7:00000707 r6:84da2100 r5:84df2400 [ 3283.145429][ T30] r4:20000080 [ 3283.146244][ T30] [<81120b3c>] (i2cdev_ioctl) from [<805854f4>] (sys_ioctl+0x130/0xba0) [ 3283.147674][ T30] r7:20000080 r6:8aab16c1 r5:00000000 r4:00000707 [ 3283.151828][ T30] [<805853c4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3283.152842][ T30] Exception stack(0xdfcc5fa8 to 0xdfcc5ff0) [ 3283.153575][ T30] 5fa0: 00000000 00000000 00000004 00000707 20000080 00000000 [ 3283.154430][ T30] 5fc0: 00000000 00000000 00316310 00000036 00300000 00000000 00006364 76f840bc [ 3283.155332][ T30] 5fe0: 76f83ec0 76f83eb0 0001929c 00132320 [ 3283.156052][ T30] r10:00000036 r9:8ac03c00 r8:8020029c r7:00000036 r6:00316310 r5:00000000 [ 3283.156903][ T30] r4:00000000 [ 3283.157910][ T30] NMI backtrace for cpu 1 [ 3283.157988][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 3283.158046][ T30] Tainted: [L]=SOFTLOCKUP [ 3283.158062][ T30] Hardware name: ARM-Versatile Express [ 3283.158083][ T30] Call trace: [ 3283.158119][ T30] [<80201a74>] (dump_backtrace) from [<80201b70>] (show_stack+0x18/0x1c) [ 3283.158279][ T30] r7:00000000 r6:00000113 r5:60000193 r4:8229592c [ 3283.158325][ T30] [<80201b58>] (show_stack) from [<8021ee34>] (dump_stack_lvl+0x70/0x7c) [ 3283.158374][ T30] [<8021edc4>] (dump_stack_lvl) from [<8021ee58>] (dump_stack+0x18/0x1c) [ 3283.158425][ T30] r5:00000001 r4:00000001 [ 3283.158439][ T30] [<8021ee40>] (dump_stack) from [<81a9b900>] (nmi_cpu_backtrace+0x160/0x17c) [ 3283.158491][ T30] [<81a9b7a0>] (nmi_cpu_backtrace) from [<81a9ba4c>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 3283.158550][ T30] r7:00000001 r6:8280c710 r5:8281af5c r4:ffffffff [ 3283.158649][ T30] [<81a9b91c>] (nmi_trigger_cpumask_backtrace) from [<8022f818>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 3283.158732][ T30] r9:00007f14 r8:8280c890 r7:00048d40 r6:00007f14 r5:82ac27e4 r4:00000048 [ 3283.158749][ T30] [<8022f800>] (arch_trigger_cpumask_backtrace) from [<81aa355c>] (sys_info+0x68/0xa8) [ 3283.158796][ T30] [<81aa34f4>] (sys_info) from [<80383748>] (watchdog+0x464/0x8a0) [ 3283.158864][ T30] r5:82ac27e4 r4:8323ff0c [ 3283.158880][ T30] [<803832e4>] (watchdog) from [<8027f6fc>] (kthread+0x12c/0x280) [ 3283.158937][ T30] r10:00000000 r9:00000000 r8:803832e4 r7:8335af80 r6:8335af80 r5:8321d400 [ 3283.158954][ T30] r4:00000001 [ 3283.158969][ T30] [<8027f5d0>] (kthread) from [<80200114>] (ret_from_fork+0x14/0x20) [ 3283.159010][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 3283.159038][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 3283.159068][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 3283.159094][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 3283.159126][ T30] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8027f5d0 [ 3283.159144][ T30] r4:832c0e40 [ 3283.159502][ T30] Sending NMI from CPU 1 to CPUs 0: [ 3283.160391][ C0] NMI backtrace for cpu 0 [ 3283.160827][ C0] CPU: 0 UID: 0 PID: 2908 Comm: klogd Tainted: G L syzkaller #0 PREEMPT [ 3283.160933][ C0] Tainted: [L]=SOFTLOCKUP [ 3283.160971][ C0] Hardware name: ARM-Versatile Express [ 3283.161043][ C0] PC is at __kmalloc_node_track_caller_noprof+0x0/0x574 [ 3283.161164][ C0] LR is at kmalloc_reserve+0x68/0xfc [ 3283.161254][ C0] pc : [<8051c050>] lr : [<815a3374>] psr: 200e0013 [ 3283.161312][ C0] sp : ebad1d10 ip : ebad1d10 fp : ebad1d3c [ 3283.161366][ C0] r10: 00482cc0 r9 : 00000200 r8 : 815a49f8 [ 3283.161459][ C0] r7 : ffffffff r6 : ebad1d4b r5 : ebad1d44 r4 : 00400cc0 [ 3283.161506][ C0] r3 : 815a49f8 r2 : ffffffff r1 : 00482cc0 r0 : 00000200 [ 3283.161675][ C0] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 3283.161765][ C0] Control: 30c5387d Table: 84bc4b40 DAC: fffffffd [ 3283.161850][ C0] Call trace: [ 3283.161979][ C0] [<815a330c>] (kmalloc_reserve) from [<815a49f8>] (__alloc_skb+0xb0/0x198) [ 3283.162107][ C0] r10:ebad1e20 r9:00000000 r8:00400cc0 r7:830b0c00 r6:00000000 r5:ffffffff [ 3283.162147][ C0] r4:8adb70c0 r3:ebad1d4b [ 3283.162167][ C0] [<815a4948>] (__alloc_skb) from [<815ad4ec>] (alloc_skb_with_frags+0x44/0x1ec) [ 3283.162253][ C0] r8:802c0eb0 r7:ebad1dcc r6:00000000 r5:00001000 r4:00000003 [ 3283.162277][ C0] [<815ad4a8>] (alloc_skb_with_frags) from [<8159d4e8>] (sock_alloc_send_pskb+0x1f4/0x228) [ 3283.162354][ C0] r10:ebad1e20 r9:00000000 r8:802c0eb0 r7:ebad1dcc r6:83846000 r5:7fffffff [ 3283.162378][ C0] r4:84dfc340 [ 3283.162394][ C0] [<8159d2f4>] (sock_alloc_send_pskb) from [<8187f8a0>] (unix_dgram_sendmsg+0x128/0x708) [ 3283.162482][ C0] r10:0000005b r9:84bc5c00 r8:83846000 r7:84dfc340 r6:00000000 r5:0000005b [ 3283.162509][ C0] r4:ebad1e98 [ 3283.162527][ C0] [<8187f778>] (unix_dgram_sendmsg) from [<8159693c>] (__sock_sendmsg+0x44/0x78) [ 3283.162616][ C0] r10:00000121 r9:84bc5c00 r8:84bc5c00 r7:00000000 r6:83461180 r5:ebad1e98 [ 3283.162644][ C0] r4:00000000 [ 3283.162663][ C0] [<815968f8>] (__sock_sendmsg) from [<81598f9c>] (__sys_sendto+0x110/0x160) [ 3283.162735][ C0] r7:00000000 r6:83461180 r5:00004000 r4:00000000 [ 3283.162754][ C0] [<81598e8c>] (__sys_sendto) from [<81599030>] (sys_send+0x20/0x28) [ 3283.162837][ C0] r9:83846000 r8:8020029c r7:00000121 r6:7e9e0858 r5:00000000 r4:00000000 [ 3283.162871][ C0] [<81599010>] (sys_send) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 3283.162928][ C0] Exception stack(0xebad1fa8 to 0xebad1ff0) [ 3283.162967][ C0] 1fa0: 00000000 00000000 00000003 7e9e0858 0000005b 00004000 [ 3283.163013][ C0] 1fc0: 00000000 00000000 7e9e0858 00000121 7e9e0858 00000040 0000005b 00000000 [ 3283.163052][ C0] 1fe0: 00000001 7e9e0770 00000000 76db0590