last executing test programs: 10.696081445s ago: executing program 0 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x20000014}) socket$kcm(0xa, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80800, 0x0) close(r3) socket(0x400000000010, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 9.730149141s ago: executing program 0 (id=1683): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x80, 0x1c, {0x8, 0x8000, 0xe4d, 0x80, 0x4009, 0xc2, 0x7, 0xce4, 0x8, 0x2, 0x9, 0x9}}, 0x0, 0x0, 0x0, 0x0}) epoll_create1(0x80000) syz_usb_control_io(r0, 0x0, 0x0) 9.729675807s ago: executing program 2 (id=1684): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e27, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7f, @mcast2, 0x7f}, 0x1c, 0x0}}], 0x1, 0x4041400) getrlimit(0xe, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103100, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 9.247369452s ago: executing program 2 (id=1687): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x13) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x1f}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_socket_connect_nvme_tcp() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) fstatfs(r4, &(0x7f00000003c0)=""/146) 7.694722942s ago: executing program 2 (id=1691): mprotect(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x1000012) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4001, @random="12d03715a316", 'batadv0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000300)=0x80000000) r2 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000bdd000/0x1000)=nil, 0x1000}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f0000000140)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000bdc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x14}], 0x1, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 6.278907795s ago: executing program 0 (id=1692): r0 = io_uring_setup(0x7a76, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x2, 0x503fa, 0x8100014e}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r6, 0x0, 0x0) close_range(r5, r6, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ba40)=[{&(0x7f000001aa40)}], 0x1, &(0x7f000001be40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x28, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r0]}}], 0xa8, 0x8000}}], 0x1, 0x4000000) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r7, 0x0) 6.158368019s ago: executing program 2 (id=1694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x5, 0x1, 0x1, 0x7fbf, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = msgget$private(0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x40080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x400000000000016, 0x101, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000380)=[{0x9, 0x5, 0x4, 0x9, @time={0x8, 0x1}, {0xf, 0x5}, {0x65, 0x2}, @raw8={"2ec62b0ace9dd743ab45eef9"}}, {0xff, 0x2, 0x8, 0x9, @tick=0x8, {0x80, 0x3}, {0x19, 0x3}, @raw32={[0x7f, 0x1, 0x5]}}, {0x4, 0x8, 0xb, 0x4, @tick=0x100, {0x5, 0x2}, {0xfe, 0x49}, @raw32={[0xfffffff0, 0x2, 0x7fff]}}], 0x54) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r11, &(0x7f0000000280)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) 5.814283279s ago: executing program 3 (id=1696): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1004000, 0x800, 0x3, 0x3}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0xa8ce47dccc464f71, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_getscheduler(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x894a, &(0x7f0000000380)={'sit0\x00', 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=r2) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r5, &(0x7f00000004c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x180) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000200)=0x7) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.719392217s ago: executing program 1 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x82}, @NFTA_INNER_NUM={0x8, 0x1, 0x1, 0x0, 0x1000000}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8894}, 0x24000000) 5.214552337s ago: executing program 1 (id=1698): ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000000000)=0x7ee7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x3, @multicast, 'macvlan1\x00'}}, 0x1e) sendmmsg$sock(r3, &(0x7f0000001dc0), 0x40000a6, 0x48850) 4.997273627s ago: executing program 0 (id=1699): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x8000, &(0x7f0000000040)="ac5f7b8726a35ff287cd251a0e77f5d6e3a9ea01d19635f4ee4e9d7d51fdfac340ed3c664ced6e55482e333153ac91a0b80793867a4ad70f8dbff541c84e20b13d3f4a7f3dbc4653a247db0b7d360627951c6c82e8e37a4648bb9dd4c1", 0x5d, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)="59b45f2b945443ce7f9281e61574cda0b9ef986319195bbe75f29866b2ba3b0097a769830405d6c3c37fbd234dcc9ed311903fcebc5c56aeedf2cf1f0f1e795da4be21a6599b3ca61b846ef8eeb5e701827e2fd89db1c9d772da58852edc607747ec8617ee75252cfc0d2863faa6e7de9c5c607b82ae5ddb7f8fb3d7060ea5f4a0544f1df848e1f035064df2c3c6576029532a9fec8ee88a6fadd3a4dd4d859a61c758fb47fdf91b89cdd656e03a8d91f1165e1a36299c4fb44911ee51141ec7") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_emit_ethernet(0x30, &(0x7f00000002c0)={@broadcast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x1}}, {@arp={0x806, @generic={0x200, 0x890d, 0x6, 0x4, 0x2, @remote, "5b5eb95c", @broadcast, 'Gp'}}}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000500)="0f20e035004000000f22e00f3566b89d080f00d8b805000000b9a0000066baf80cb840ec6484ef66bafc0cb808000000efe8d5491c071c07460b0f0130670f01c2f2360f217a0f07", 0x48}], 0x1, 0x11, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) read$FUSE(r3, 0x0, 0x0) 4.909625609s ago: executing program 2 (id=1700): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000004596e97800000000000000000a00000000000000"], 0x18}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x358, 0x4) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0xb1) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x7}, 0x2) r9 = fsmount(0xffffffffffffffff, 0x0, 0xc) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="2de77a1838849409fa470f58613f6c3d8e75b7b2d7e7636efab8c1825d728d220100005132a2852bf89906ce2f624b412e8422346f6e529166826e6bdcb89e6373213dde2e89539a8db845376f8cb55ca571ec32b98357eb72ab779511dd3755310f8c11e031fd61b801705d0e29531e21c0c855b08ea95680ac83a6e1e521d91d8c3c9f8bc1c177e241d292db6566dc6a602577271436ac6d47ddf0d8b093ba3f797d61b8e4a99fb2c1cff3d8e354438ded14358943dbf994"], 0x1f) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r12], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 4.626362799s ago: executing program 4 (id=1701): r0 = socket(0x2000000000000021, 0x2, 0x2) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async, rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x12) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) syz_open_dev$media(0x0, 0x2, 0xc8000) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) shutdown(r0, 0x2) (async) syz_usb_connect$midi(0x0, 0x0, 0x0, 0x0) (async) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full', 0x20, 0x0, 0x20, 0x5}, 0x2f) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r5) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) (async) timer_settime(r5, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, &(0x7f0000000080)) 4.619560118s ago: executing program 3 (id=1702): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0xc050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x19) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x80, 0x0, 0x7, 0xf7effffe}, {0x16, 0x0, 0x0, 0x1000}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r8, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r10, 0x0, 0x20000023896) 4.547974235s ago: executing program 1 (id=1703): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x210, 0x250, 0x250, 0x210, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0xf8, 0x120, 0x0, {0x0, 0x28e}, [@common=@ipv6header={{0x28}, {0x92, 0x10, 0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x800, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0xa39, 0x77, 'pptp\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x880018, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x35b66706, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 3.206122174s ago: executing program 4 (id=1704): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0xd, 0x8, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x4811) getdents(0xffffffffffffffff, &(0x7f00000003c0)=""/191, 0x76) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000002d00)={0x2, {{0xa, 0x4e22, 0x4001000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {{0xa, 0x4e20, 0x5, @loopback, 0xae41}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000180)={0x3ff, {{0xa, 0x4e20, 0x6f3, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffdff}}}, 0x108) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x0, &(0x7f0000000140)) sendfile(r2, r5, 0x0, 0x20000023896) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x10, 0x1, 0x9, 0x8, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 3.052027393s ago: executing program 2 (id=1705): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0x81, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 2.737357497s ago: executing program 1 (id=1706): socket$kcm(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000100)=0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x20000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7, 0x20000000, 0x7, 0x59c3}, @broadcast, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5, 0x4, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) 2.605472489s ago: executing program 3 (id=1707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r1, &(0x7f0000001600)="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", 0xfec) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0x54, r6, 0x1, 0x70bd2b, 0xfffffffe, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e, 0x1}, {0xc}, {0xc, 0x90, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4811}, 0x20044800) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000000)=0x8, 0x4) r7 = syz_clone(0x1000a000, &(0x7f00000000c0)="a3ac3b8a9bb4af2e800ef557d35e343e3e1a9be256ee13f2538fa072b61507db22092e2e35796ad94aaf53f0c93217ac8bf7e6714effe5cc49edd45e850155d8839405327012dbd56a4a43cb4be6d2d2bf86e87252cce9ed5718e69100d75751eb1f9e3e22274bce1c7825c05e096bf0bbbeea2a9748b9c9183e", 0x7a, &(0x7f0000000140), &(0x7f0000001280), &(0x7f0000002e80)="2060215d832fead31c3b0e6572fe28603080c5c338ff8026c26db9edbc6295c14debae506d4283a3d58ee5a16a3c552c3d6ba3364a81105a70ab1c62074230b51c224d518f49d1b96ebf9e2a2988b2a5933b5da4c897f55e0ff0") sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)={0x18c8, 0x3f, 0x100, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x10e, 0x154, 0x0, 0x1, [@nested={0xf2, 0x116, 0x0, 0x1, [@generic="2b88335303c5a7a26a0b3d3e15c4336791e45e6178638ce75daa3767d18378bbff1c8ff4f3c31c1103a305fa35efc76561f457b7429b94e58e081590fa3d14bad436165b9f21b98f793c7730a0a6058640e2af055b4daaca8955d25617b065a8ad1e98ca96c0e6b0371de83a054fa13e78bb9dd739c3105ee73ea90dccbf6fca2bf1ccb930ad9fdc2942ece9d2366d8c55691817f0743461663317493d6592aa7762acb2d4f8408769ae1586a3e0e6a928f525c28e83fe4886c43bd1c4bb564d6aa4b678b4330b4791992d712771717c91d0d984f8143e546fa57b1457e6", @nested={0x4, 0x3a}, @typed={0x8, 0x87, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x127}]}, @generic="a1676a5a14ba7de46e303f8138c5cec0c10ec1023b48"]}, @generic="d89f642e59812a2b6d477d60d308c381dca2974cef199ba7149af09f5aee48537bbb850e62e938eceb9a5f38f0078d78e16165ad3f730ec2856acb9046c470d343ea22a80419452dbac01a18d88cae4f3d6408be4d0972ed51dd0ffd9bada6b95ecd4bb9904a1de834018952f022b6de26685d116ce8dd700c0ef5b5f3d9f2fda9ae21d08182ef06ef2a72132927e7d710447bcd9d4919bff9023b689f262c49ad9c9dc1bee36c17740422c45934087d3b033a", @nested={0x100c, 0xc3, 0x0, 0x1, [@generic="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", @typed={0x8, 0x12c, 0x0, 0x0, @fd=r4}]}, @generic="ed7c381d0e4051122b5f0bcf75448a8ff92fe127b54c249e454a8fbc8b66fe5fbd2e064a53d7cdbfcb9881901cbfd51fc490d12d981d337a10615dff3bbeffe9dc3daee7c0cc686ab28e06f05d18070f8ee843bf51d80d76354762cfce501489ff0bfafe533936fbe5965e8461da19739b8cd6c9720ded28604213e48f38f07c96c6fc091b107efc0569d7a5b0b4186374fe473a6f2658c9b729c7248ca059df0700fc18503a8e193a76731046cf8f033a050ab436b7d0e06d78f916e845062f15c77d9d4bd059a34518441da33a6726e75f7fe07dc9f447786fd33d25cac5b7f1dc98dec529a197", @generic="74e5770fa6b1fd6498a88b20416ef97f4010678fa87bcde4da8164cb5e7e3167026ebeceb2f095498111e53008297a36f9a76e4b7d47d71ca2f770de6f72ba537f4440a4f252305e71f1599b3e708a2fd24bbbba00405bc661f2c706de761b1c34", @typed={0x8, 0x104, 0x0, 0x0, @u32=0x40}, @nested={0x4c0, 0x74, 0x0, 0x1, [@nested={0x16f, 0x4d, 0x0, 0x1, [@typed={0xd, 0xb7, 0x0, 0x0, @str='&@&]-]/#\x00'}, @generic="b2f51498190fd52ea4c99d014b289b4252b68f64f689c3de0e0d39df3a71ad4cfc88b0e2a94199f5eb901de7013771ad47c3a28182596c45c2fffd4801af90c9dedbb89f850e229c577b2a58afebf3d5cf144b060329cbbf6518e89c4c5cfc082802fc512294fd0fab71acdd7066fb3574d1624e08d9bba8d8c8ebe150c0ebc141fb7b9597f1d7bfd880a1019832c9ef8a0afc22a5c26309916a931e120bdc3c9d29eb01933e315cfe6798783c20a51e3be2442ac641e64fc0ebec34e04453ce7b21be818070dc5a37581c18aa4b47f2ccc8", @generic="bcbc810c87a719fa0327a2bccfbb3444929679e45f96c99d5edefe0a854bc446e0067506c32510181f23a08323f3067fe590950b36ddaf21554c37d9a2522c9f299dbd72641a750fc25ee2a5", @typed={0x6, 0xeb, 0x0, 0x0, @str='\xff\xff'}, @generic="5644aa80ea8afb1ddc25ccb5032bd52998b3c02b53da72fef03341cc1a0ec6fdb5faa0848c6db8e98321e392ea51b179a31c9df4a1"]}, @nested={0x341, 0x4, 0x0, 0x1, [@nested={0x4, 0x5a}, @nested={0x4, 0xd9}, @nested={0x4, 0x2a}, @generic="5e9fb5fdbd", @nested={0x4, 0xba}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@multicast1}, @generic="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", @typed={0xab, 0x4d, 0x0, 0x0, @binary="70d067efb51da57c8d1828ea809436794cbbf6d22d58987522c13ed9f55da294d7b293fb2c1bf20e7a1bba933846a89b1efe1a37d10d3c01c17db18223be156ccbbde5e0befe24c4205a31b16910ad56e8b57b4d0fcf34f0b31c1959890b7d19bbb11c239b6331f70e4a9b9f6d74808a94b30371ffcafb857516967b207dbd11eb000480b113276e27f238f245ba023412a2ffcc25e7151e10d396fe31cd9024d4a6130be03da7"}, @generic="ce8d100bfa0a4b730696486596e24e289c96316ac510617b3a78ead3b81c24bffb3b6113a6e20d9b55b03bac726184575835837f09ab41cea9ae494f3c43fca7957a5e647bc7d0bd74388bd3555936d8cfb2c761b4d3e05e102b351f5e66762dd3a75af4a7a90a42e1bcce194b8a8c05f6", @generic="2e6118560dd018fef19a4b3b6873d7eb1b5c13e6b61610ea9fe86f97631bd234d2be468aac7f3bf1f5be7e9c31851321c65e696d2bb60e47413dc39cbac127f904536feefa2e16217fd897c1ad36e3af2e2d566c674557c51165fa47d022d15d08e28f2ba7203374f83b0c90dcb8b118f00663206711e5475e31f1f0afb0e2e04a65c8fceccf72d25074052eee8d3a18f544251a444ee22b38557a3e94670aa0aa98863e1ec1050618cb7ebb799cd5f4eefb8ef1f78aab4b455cd48fc243eed6d4cfa77df7027a40401010036f509ff961fee754cb82e5"]}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x10000}]}, @nested={0xd3, 0xa5, 0x0, 0x1, [@generic="9e5b713a569e6ec1d1ad2316fbc9c6844e0ae74841d5820dc693779c0265283beef095378d0c069183f6635d52a7093fa12f22f03dc7f2d93b48963145e303a1d9f5e3", @nested={0x76, 0x137, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="96422a59715e75bf737fa59d41", @generic="cf783fb39c67a9e1b1267a5fcba548846efed1c461442b313f780f9b029e0598985b97749730dd828feca9fe11ac0749eb3418e0894c3b5c2dc6d7c2efbf1ffcbd", @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @typed={0x8, 0x10a, 0x0, 0x0, @fd=r0}]}, @typed={0x14, 0xe8, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x18c8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000000040)=@caif=@dbg, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/145, 0x91}], 0x4, &(0x7f0000000540)=""/160, 0xa0}, 0x2}, {{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000680)=""/154, 0x9a}, {&(0x7f0000000740)=""/91, 0x5b}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f00000008c0)=""/14, 0xe}, {&(0x7f0000000900)=""/61, 0x3d}, {&(0x7f0000000940)=""/75, 0x4b}, {&(0x7f00000009c0)=""/249, 0xf9}, {&(0x7f0000000ac0)=""/93, 0x5d}, {&(0x7f0000000b40)=""/239, 0xef}], 0x9, &(0x7f0000000d00)=""/89, 0x59}, 0xbe13}, {{&(0x7f0000000d80)=@tipc, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e00)=""/204, 0xcc}, {&(0x7f0000000f00)=""/184, 0xb8}, {&(0x7f0000000fc0)=""/11, 0xb}, {&(0x7f0000001000)=""/159, 0x9f}, {&(0x7f00000010c0)=""/8, 0x8}, {&(0x7f0000001100)=""/232, 0xe8}], 0x6, &(0x7f0000001340)=""/221, 0xdd}, 0x3}, {{&(0x7f0000001440)=@phonet, 0x80, &(0x7f0000001540)=[{&(0x7f00000014c0)=""/123, 0x7b}], 0x1, &(0x7f0000001580)=""/114, 0x72}, 0x6}, {{&(0x7f0000001600)=@nfc_llcp, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001680)=""/148, 0x94}, {&(0x7f0000001740)=""/88, 0x58}, {&(0x7f00000017c0)=""/179, 0xb3}, {&(0x7f0000001880)=""/27, 0x1b}, {&(0x7f00000018c0)=""/115, 0x73}, {&(0x7f0000001940)=""/103, 0x67}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/90, 0x5a}, {&(0x7f0000001ac0)=""/158, 0x9e}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0xa, &(0x7f0000002c40)=""/133, 0x85}, 0xb}], 0x5, 0x10000, &(0x7f0000002e40)={0x77359400}) 2.423612885s ago: executing program 1 (id=1708): socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e27, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7f, @mcast2, 0x7f}, 0x1c, 0x0}}], 0x1, 0x4041400) getrlimit(0xe, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 1.830425826s ago: executing program 4 (id=1709): syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x1ca5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000001c0)={0x1, 0x8000000, 0x4, r2, 0x9}) bpf$TOKEN_CREATE(0x24, 0x0, 0xffffffffffffffb3) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001000000060011000080000008000b0001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000000008006001600060000000500120001000000060011000900000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600080000000500120001000000060011000500000008000b00080000000e0001006e6574646576"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) arch_prctl$ARCH_SHSTK_ENABLE(0x1003, 0xf0ff1f00000000) 1.518416817s ago: executing program 3 (id=1710): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000500)="0f20e035004000000f22e00f3566b89d080f00d8b805000000b9a0000066baf80cb840ec6484ef66bafc0cb808000000efe8d5491c071c07460b0f0130670f01c2f2360f217a0f07", 0x48}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) 1.429298527s ago: executing program 4 (id=1711): mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x10) 1.390327239s ago: executing program 0 (id=1712): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1f00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 698.077503ms ago: executing program 3 (id=1713): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x158, 0x158, 0x5, [@union={0x3, 0x9, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x3, 0xff}, {0x0, 0x4, 0x4}, {0x9, 0x5, 0x9}, {0x9, 0x2, 0x9415}, {0x4, 0x4, 0x3}, {0xb, 0x5, 0x3}, {0x9, 0x1, 0x10f0}, {}, {0x5, 0x1, 0x40}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x1}, @enum64={0xe, 0x2, 0x0, 0x13, 0x1, 0x9, [{0xf, 0x200, 0x1}, {0x10, 0x0, 0x8729}]}, @const={0xa}, @struct={0x7, 0x6, 0x0, 0x4, 0x1, 0x7, [{0x2, 0x4, 0xb}, {0xb, 0x0, 0x10}, {0x0, 0x5, 0x8}, {0xd, 0x4, 0x4}, {0xf, 0x2, 0xfffffe01}, {0x5, 0x3, 0xb20a}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x45, 0x0, 0x0, 0x3}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0x9}, @const={0x10, 0x0, 0x0, 0xa, 0x4}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @enum64={0x1, 0x1, 0x0, 0x13, 0x1, 0xa, [{0x10, 0xd76, 0x2}]}]}, {0x0, [0x2e, 0x5f, 0x0]}}, &(0x7f00000004c0)=""/83, 0x175, 0x53, 0x0, 0x5}, 0x28) close_range(r0, r0, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r1, &(0x7f00000059c0)={0x2020}, 0x2020) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3b25fe800000000080fedc8b850f238466ccfe807a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a40)=@bloom_filter={0x1e, 0xf3a8, 0xc4a, 0x6, 0x2c, r1, 0x8000, '\x00', 0x0, r0, 0x5, 0x3, 0x1, 0x2}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161002, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) fanotify_init(0x81, 0x40000) fanotify_init(0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x5}, 0x50) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a3318000048110020010000000000000000000000000002ff020000ff7f000000000000000000014e194e20004890780300000000b3000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e5ca540e4ba089c856bd94fa3fc1c8a5"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000480)={0x6, 0x4}, 0xfe46) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) read(0xffffffffffffffff, &(0x7f0000000100)=""/47, 0x2f) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000700000000000100030080000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000000000000100"/28], 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') 629.086853ms ago: executing program 0 (id=1714): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x210, 0x250, 0x250, 0x210, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0xf8, 0x120, 0x0, {0x0, 0x28e}, [@common=@ipv6header={{0x28}, {0x92, 0x10, 0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x800, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0xa39, 0x77, 'pptp\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x880018, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x35b66706, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 538.136221ms ago: executing program 3 (id=1715): socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0xd7cc3e07d1e190d, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x3, 0xca0, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) sendto$inet6(r3, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000580)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}], [{@fowner_lt}]}) open(&(0x7f0000000040)='./bus\x00', 0x8c242, 0x1df2a23c5997fad6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000080)=0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01fe28bd7000fcdbdf250100000002000000021b00"/30], 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000f00f88)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x5, 0xffffffffe95bf9a6, 0xffffffffff, 0x3, 0xfffffffffffffffc, 0x2, 0x9, 0x100}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x8000004, 0x1, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0x9, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) 389.087935ms ago: executing program 4 (id=1716): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="0815000000051104000300000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x40000d0}, 0x10) 53.833866ms ago: executing program 4 (id=1717): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0xffffffff) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x80800) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000440)={0x1, 0xfd, 0x205, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r3 = syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x3) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000a00)={'xfrm0\x00', &(0x7f0000000080)=@ethtool_dump={0x40, 0x13, 0x200}}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r9, 0xaece) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r10, &(0x7f0000001c00), 0x400000000000159, 0x40840) preadv(r10, &(0x7f0000000000), 0x0, 0x6, 0x9) 0s ago: executing program 1 (id=1718): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1f00}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x800}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xff09}, {0x0, 0x800}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xffbffffd}, {}, {0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x78}, {}, {0x0, 0x0, 0x6, 0xd0}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4fc}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0xffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x8, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x98}, {}, {}, {0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x400000}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @local}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r6, 0x9dff7ffc}}, 0x48) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0xc9100120, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1, 0x4, 0x3) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) kernel console output (not intermixed with test programs): B disconnect, device number 38 [ 375.865162][T10168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10168 comm=syz.4.1137 [ 375.885740][ T5739] usbhid 4-1:0.0: can't add hid device: -71 [ 375.901894][ T5739] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 375.924924][T10167] netlink: 'syz.4.1137': attribute type 1 has an invalid length. [ 375.949057][ T5739] usb 4-1: USB disconnect, device number 35 [ 376.115386][ T9403] usb 3-1: USB disconnect, device number 32 [ 376.127574][ T9403] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 376.137313][ T9403] cp210x 3-1:0.0: device disconnected [ 376.300763][ T5725] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 376.386124][ T5801] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 376.455251][ T30] audit: type=1400 audit(1777700727.990:1164): avc: denied { bind } for pid=10173 comm="syz.3.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 376.477745][ T5725] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 376.489977][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.501294][ T5725] usb 1-1: config 0 descriptor?? [ 376.531757][ T5725] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 376.585493][ T5801] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 376.604071][ T5801] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 376.616339][ T5801] usb 5-1: Product: syz [ 376.620542][ T5801] usb 5-1: Manufacturer: syz [ 376.625380][ T5801] usb 5-1: SerialNumber: syz [ 376.638969][ T5801] usb 5-1: config 0 descriptor?? [ 376.651127][ T5801] ch341 5-1:0.0: ch341-uart converter detected [ 376.725007][ T30] audit: type=1400 audit(1777700728.242:1165): avc: denied { read } for pid=10176 comm="syz.1.1141" path="socket:[28031]" dev="sockfs" ino=28031 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.775912][T10182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.789475][T10182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.798406][ T5725] gspca_cpia1: usb_control_msg 05, error -71 [ 377.012454][ T5725] gspca_cpia1: usb_control_msg 01, error -71 [ 377.029196][ T5725] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 377.055185][ T5725] usb 1-1: USB disconnect, device number 39 [ 377.076347][ T5801] usb 5-1: failed to receive control message: -32 [ 377.097168][ T5801] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 377.829431][ T9403] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 378.124961][ T9403] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 378.145242][ T9403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.189733][ T9403] usb 3-1: Product: syz [ 378.200787][ T9403] usb 3-1: Manufacturer: syz [ 378.213069][ T9403] usb 3-1: SerialNumber: syz [ 378.250775][ T9403] usb 3-1: config 0 descriptor?? [ 378.525147][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.548248][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.620885][T10201] random: crng reseeded on system resumption [ 378.790937][ T30] audit: type=1400 audit(1777700730.020:1166): avc: denied { write } for pid=10198 comm="syz.0.1146" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 379.312172][ T9403] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 379.337492][ T9403] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 379.355475][ T5801] usb 5-1: USB disconnect, device number 28 [ 379.383545][ T5801] ch341 5-1:0.0: device disconnected [ 379.394174][ T9403] usb 3-1: USB disconnect, device number 33 [ 382.643509][ T9403] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 382.984004][ T9403] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 383.002030][ T9403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.012597][ T9403] usb 4-1: Product: syz [ 383.016914][ T9403] usb 4-1: Manufacturer: syz [ 383.021771][ T9403] usb 4-1: SerialNumber: syz [ 383.279022][ T5725] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 384.272924][ T5725] usb 3-1: Using ep0 maxpacket: 16 [ 384.282468][ T5725] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 53, using maximum allowed: 30 [ 384.302236][ T5725] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.344623][ T5725] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 53 [ 384.456421][ T5725] usb 3-1: config 0 interface 0 has no altsetting 0 [ 384.475779][ T5725] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 384.505249][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.533719][ T5725] usb 3-1: config 0 descriptor?? [ 384.601307][T10258] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (288 ns) > initial count (256 ns). Using initial count to start timer. [ 384.623038][ T5801] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 384.686344][T10231] kvm: pic: non byte write [ 384.768607][ T9403] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 384.789379][ T5801] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.805399][ T9403] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 384.807408][ T5801] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 384.840644][ T9403] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 384.858744][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.874100][ T9403] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 384.889932][ T5801] usb 2-1: config 0 descriptor?? [ 384.898252][ T9403] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 384.912748][ T5801] pwc: Askey VC010 type 2 USB webcam detected. [ 384.930490][ T9403] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 384.962189][ T9403] usb 4-1: USB disconnect, device number 36 [ 385.204185][T10270] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1163'. [ 385.216236][T10270] comedi comedi3: fl512: I/O base address not correctly aligned [ 385.341015][ T5801] pwc: recv_control_msg error -32 req 02 val 2b00 [ 385.355611][ T5801] pwc: recv_control_msg error -32 req 02 val 2700 [ 385.512322][ T5717] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 385.589904][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.598731][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.608919][ T5801] pwc: recv_control_msg error -71 req 04 val 1000 [ 385.616812][ T5801] pwc: recv_control_msg error -71 req 04 val 1300 [ 385.624085][ T5801] pwc: recv_control_msg error -71 req 04 val 1400 [ 385.631151][ T5801] pwc: recv_control_msg error -71 req 02 val 2000 [ 385.637895][ T5801] pwc: recv_control_msg error -71 req 02 val 2100 [ 385.644956][ T5801] pwc: recv_control_msg error -71 req 04 val 1500 [ 385.651712][ T5717] usb 5-1: device descriptor read/64, error -71 [ 385.658480][ T5801] pwc: recv_control_msg error -71 req 02 val 2500 [ 385.665259][ T5801] pwc: recv_control_msg error -71 req 02 val 2400 [ 385.671950][ T5801] pwc: recv_control_msg error -71 req 02 val 2600 [ 385.672283][ T9403] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 385.678746][ T5801] pwc: recv_control_msg error -71 req 02 val 2900 [ 385.692878][ T5801] pwc: recv_control_msg error -71 req 02 val 2800 [ 385.699942][ T5801] pwc: recv_control_msg error -71 req 04 val 1100 [ 385.706897][ T5801] pwc: recv_control_msg error -71 req 04 val 1200 [ 385.718314][ T5801] pwc: Registered as video103. [ 385.724794][ T5801] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 385.764879][ T5801] usb 2-1: USB disconnect, device number 36 [ 385.846029][ T9403] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 385.856988][ T9403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.868369][ T9403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.878536][ T9403] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 385.892676][ T9403] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 385.901860][ T9403] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 385.910239][ T9403] usb 4-1: Manufacturer: syz [ 385.916514][ T9403] usb 4-1: config 0 descriptor?? [ 385.918143][ T5717] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 386.070195][ T5717] usb 5-1: device descriptor read/64, error -71 [ 386.185490][ T5717] usb usb5-port1: attempt power cycle [ 386.221462][T10281] openvswitch: netlink: Flow actions attr not present in new flow. [ 386.559711][ T5717] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 386.617260][ T5717] usb 5-1: device descriptor read/8, error -71 [ 386.845660][ T5801] usb 3-1: USB disconnect, device number 34 [ 386.891301][ T5717] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 386.925206][ T9403] usbhid 4-1:0.0: can't add hid device: -71 [ 386.946833][ T5717] usb 5-1: device descriptor read/8, error -71 [ 387.116945][ T5717] usb usb5-port1: unable to enumerate USB device [ 388.049423][ T9403] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 388.528232][ T9403] usb 4-1: USB disconnect, device number 37 [ 388.686131][ T5717] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 388.706807][ T30] audit: type=1400 audit(1777700739.453:1167): avc: denied { create } for pid=10296 comm="syz.4.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 388.826809][T10299] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 388.841850][T10299] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 388.880885][ T5717] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 388.911172][T10293] netlink: 'syz.0.1169': attribute type 39 has an invalid length. [ 388.919054][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.933069][ T5717] usb 2-1: Product: syz [ 388.944804][ T5717] usb 2-1: Manufacturer: syz [ 388.956373][ T5717] usb 2-1: SerialNumber: syz [ 389.524613][ T30] audit: type=1400 audit(1777700740.211:1168): avc: denied { create } for pid=10307 comm="syz.2.1173" name="#19" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 389.583408][ T30] audit: type=1400 audit(1777700740.220:1169): avc: denied { link } for pid=10307 comm="syz.2.1173" name="#19" dev="tmpfs" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 389.646595][ T30] audit: type=1400 audit(1777700740.220:1170): avc: denied { rename } for pid=10307 comm="syz.2.1173" name="#1a" dev="tmpfs" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 389.936203][T10324] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (288 ns) > initial count (256 ns). Using initial count to start timer. [ 390.658731][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 390.691442][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 390.710521][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 390.733367][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 390.772082][ T5717] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 390.806818][ T5717] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 390.826922][ T5717] usb 2-1: USB disconnect, device number 37 [ 391.138914][ T9403] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 391.381791][ T9403] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 391.394035][ T9403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.448918][ T9403] usb 3-1: Product: syz [ 391.501042][ T9403] usb 3-1: Manufacturer: syz [ 391.528772][ T9403] usb 3-1: SerialNumber: syz [ 392.417072][T10359] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (288 ns) > initial count (256 ns). Using initial count to start timer. [ 392.766355][ T9403] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 392.793447][ T9403] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 392.822715][ T9403] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 392.846370][ T9403] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 392.889715][ T9403] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 392.903291][ T9403] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 392.949761][ T9403] usb 3-1: USB disconnect, device number 35 [ 393.347185][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.353546][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.919310][T10394] vlan1: entered allmulticast mode [ 393.924978][T10394] veth0_vlan: entered allmulticast mode [ 393.935431][T10394] vlan1: left allmulticast mode [ 393.943578][ T9403] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 393.945961][T10394] veth0_vlan: left allmulticast mode [ 394.355281][ T30] audit: type=1400 audit(1777700744.525:1171): avc: denied { setattr } for pid=10396 comm="syz.0.1196" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 394.404251][ T9403] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.415456][ T9403] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 394.427603][ T9403] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.437627][ T9403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.446751][ T9403] usb 5-1: Product: syz [ 394.451436][ T9403] usb 5-1: Manufacturer: syz [ 394.473449][ T9403] usb 5-1: SerialNumber: syz [ 394.526975][ T9403] cdc_mbim 5-1:1.0: skipping garbage [ 394.627003][ T30] audit: type=1800 audit(1777700744.993:1172): pid=10408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1201" name="file1" dev="tmpfs" ino=1214 res=0 errno=0 [ 394.726696][T10387] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 394.737411][ T30] audit: type=1400 audit(1777700745.096:1173): avc: denied { shutdown } for pid=10411 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 394.914761][ T5717] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 394.990619][ T5718] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 395.108146][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1204'. [ 395.120575][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'. [ 395.136233][T10421] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 395.152341][ T5717] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 395.163867][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.174855][ T5718] usb 3-1: Using ep0 maxpacket: 32 [ 395.180061][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.192747][ T5718] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 395.201875][ T5717] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 395.217899][ T5718] usb 3-1: config 0 has no interface number 0 [ 395.225916][ T5717] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 395.235021][ T5717] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 395.243245][ T5718] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 395.252349][ T5717] usb 1-1: Manufacturer: syz [ 395.259245][ T5717] usb 1-1: config 0 descriptor?? [ 395.264607][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.273111][ T5718] usb 3-1: Product: syz [ 395.277330][ T5718] usb 3-1: Manufacturer: syz [ 395.284043][ T5718] usb 3-1: SerialNumber: syz [ 395.290896][ T5718] usb 3-1: config 0 descriptor?? [ 395.311215][ T5732] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 395.379091][ T9403] cdc_mbim 5-1:1.0: bind() failure [ 395.392172][ T9403] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 395.399266][ T9403] cdc_ncm 5-1:1.1: bind() failure [ 395.408881][ T9403] usb 5-1: USB disconnect, device number 33 [ 395.476029][ T5732] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 395.484757][ T5732] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 395.494368][ T5732] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 395.505157][ T5732] usb 4-1: config 220 has no interface number 2 [ 395.518225][ T5732] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 395.531439][ T5732] usb 4-1: config 220 interface 0 has no altsetting 0 [ 395.538403][ T5732] usb 4-1: config 220 interface 76 has no altsetting 0 [ 395.545273][ T5732] usb 4-1: config 220 interface 1 has no altsetting 0 [ 395.555479][ T5732] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 395.564837][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.572893][ T5732] usb 4-1: Product: syz [ 395.577190][ T5732] usb 4-1: Manufacturer: syz [ 395.582143][ T5732] usb 4-1: SerialNumber: syz [ 395.804320][T10418] syz.3.1205 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 395.809020][T10420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.816250][ T30] audit: type=1400 audit(1777700746.097:1174): avc: denied { read } for pid=10417 comm="syz.3.1205" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 395.825372][T10420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.847211][ T30] audit: type=1400 audit(1777700746.097:1175): avc: denied { open } for pid=10417 comm="syz.3.1205" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 395.912130][ T5732] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 395.925549][ T5732] uvcvideo 4-1:220.0: No valid video chain found. [ 395.945670][ T5732] usb 4-1: selecting invalid altsetting 0 [ 395.994856][ T5732] usb 4-1: selecting invalid altsetting 0 [ 396.011053][ T5732] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 396.028894][ T5732] usb 4-1: USB disconnect, device number 38 [ 396.315714][ T5717] usbhid 1-1:0.0: can't add hid device: -71 [ 396.361081][ T5717] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 396.511579][ T5717] usb 1-1: USB disconnect, device number 40 [ 397.242413][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 397.347769][T10435] IPv6: sit1: Disabled Multicast RS [ 398.191781][ T5718] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 398.211896][ T5718] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 398.307306][ T5718] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 398.328021][ T5718] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 398.352612][ T5718] usb 3-1: USB disconnect, device number 36 [ 398.970251][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 399.342595][ T30] audit: type=1400 audit(1777700749.410:1176): avc: denied { ioctl } for pid=10464 comm="syz.1.1216" path="socket:[28819]" dev="sockfs" ino=28819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.466498][T10468] random: crng reseeded on system resumption [ 400.111472][T10474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1217'. [ 400.130235][T10474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10474 comm=syz.4.1217 [ 400.494795][ T30] audit: type=1400 audit(1777700750.486:1177): avc: denied { setopt } for pid=10483 comm="syz.1.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 401.104280][ T5717] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 401.427083][ T5717] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 401.444853][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.458157][ T5717] usb 1-1: Product: syz [ 401.462707][ T5717] usb 1-1: Manufacturer: syz [ 401.471651][ T5717] usb 1-1: SerialNumber: syz [ 401.787827][ T5718] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 401.893260][T10508] random: crng reseeded on system resumption [ 401.981141][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.994530][ T5718] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.196502][ T5718] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 402.206368][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.233546][T10513] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'. [ 402.264963][ T5718] usb 5-1: config 0 descriptor?? [ 402.282777][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1232'. [ 402.301755][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1232'. [ 403.578926][ T5717] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 403.620358][ T5717] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 403.653864][ T5717] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 403.685551][ T5717] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 403.715951][ T5717] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 403.762880][ T30] audit: type=1400 audit(1777700753.518:1178): avc: denied { map } for pid=10518 comm="syz.2.1233" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 403.809424][ T5717] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 403.829637][ T5718] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 403.855065][ T5717] usb 1-1: USB disconnect, device number 41 [ 403.870321][ T5718] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 404.023052][ T5718] cp2112 0003:10C4:EA90.0008: error requesting version [ 404.069537][ T5718] cp2112 0003:10C4:EA90.0008: probe with driver cp2112 failed with error -32 [ 404.321062][ T30] audit: type=1400 audit(1777700754.061:1179): avc: denied { write } for pid=10530 comm="syz.0.1237" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 405.260263][T10537] ieee802154 phy0 wpan0: encryption failed: -90 [ 405.459609][ T5718] usb 5-1: USB disconnect, device number 34 [ 405.546362][T10545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1241'. [ 405.582261][T10545] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1241'. [ 405.619793][T10549] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1241'. [ 405.638179][T10547] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 405.653032][T10548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1241'. [ 405.685707][ T30] audit: type=1400 audit(1777700755.343:1180): avc: denied { remount } for pid=10546 comm="syz.2.1242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 405.834332][T10555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1246'. [ 405.914157][ T5717] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 405.990617][T10553] netlink: 'syz.4.1245': attribute type 39 has an invalid length. [ 406.165268][ T5717] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 406.174405][ T5717] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 406.183027][ T5717] usb 1-1: Product: syz [ 406.187238][ T5717] usb 1-1: Manufacturer: syz [ 406.191913][ T5717] usb 1-1: SerialNumber: syz [ 406.200314][ T5717] usb 1-1: config 0 descriptor?? [ 406.213248][ T5717] ch341 1-1:0.0: ch341-uart converter detected [ 406.969527][ T5717] usb 1-1: failed to receive control message: -32 [ 406.976485][ T5717] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 407.288122][ T5717] usb 1-1: USB disconnect, device number 42 [ 407.325527][ T5717] ch341 1-1:0.0: device disconnected [ 409.113349][T10610] binder: 10608:10610 ioctl c018620c 200000000240 returned -22 [ 409.850852][T10620] batadv_slave_0: entered promiscuous mode [ 410.166090][ T30] audit: type=1400 audit(1777700759.535:1181): avc: denied { setopt } for pid=10629 comm="syz.4.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 410.166287][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 410.219172][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1264'. [ 410.258191][ T30] audit: type=1400 audit(1777700759.620:1182): avc: denied { accept } for pid=10629 comm="syz.4.1264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 410.485441][ T5717] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 410.731416][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 410.738847][ T5717] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.772696][ T5717] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 410.787253][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.795660][ T5717] usb 2-1: Product: syz [ 410.802158][ T5717] usb 2-1: Manufacturer: syz [ 410.813495][ T5717] usb 2-1: SerialNumber: syz [ 411.030412][ T5732] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 411.264478][ T5717] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.340393][ T5732] usb 4-1: Using ep0 maxpacket: 8 [ 411.350415][ T5717] usb 2-1: USB disconnect, device number 38 [ 411.363410][ T5732] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 411.410104][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.486493][ T5732] pvrusb2: Hardware description: Terratec Grabster AV400 [ 411.512381][T10650] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 411.540239][ T5732] pvrusb2: ********** [ 411.556398][ T5732] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 411.605113][ T5732] pvrusb2: Important functionality might not be entirely working. [ 411.640841][ T5732] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 411.672826][ T5732] pvrusb2: ********** [ 411.680188][ T30] audit: type=1400 audit(1777700760.948:1183): avc: denied { write } for pid=10641 comm="syz.3.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 411.726478][ T30] audit: type=1400 audit(1777700760.967:1184): avc: denied { accept } for pid=10641 comm="syz.3.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 411.761501][ T2352] pvrusb2: Invalid write control endpoint [ 411.775547][ T5732] usb 4-1: USB disconnect, device number 39 [ 411.793177][ T30] audit: type=1400 audit(1777700760.967:1185): avc: denied { ioctl } for pid=10641 comm="syz.3.1270" path="socket:[29369]" dev="sockfs" ino=29369 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 411.855575][ T2352] pvrusb2: Invalid write control endpoint [ 411.873482][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 411.895338][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 411.914296][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 411.935367][ T2352] pvrusb2: Device being rendered inoperable [ 411.961875][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 411.985505][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 412.044672][ T2352] pvrusb2: Attached sub-driver cx25840 [ 412.050734][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 412.061651][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 413.203101][T10673] FAULT_INJECTION: forcing a failure. [ 413.203101][T10673] name failslab, interval 1, probability 0, space 0, times 0 [ 413.216472][T10673] CPU: 0 UID: 0 PID: 10673 Comm: syz.1.1275 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.216500][T10673] Tainted: [L]=SOFTLOCKUP [ 413.216506][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.216515][T10673] Call Trace: [ 413.216521][T10673] [ 413.216527][T10673] dump_stack_lvl+0x100/0x190 [ 413.216545][T10673] should_fail_ex.cold+0x5/0xa [ 413.216562][T10673] should_failslab+0xc2/0x120 [ 413.216574][T10673] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 413.216590][T10673] ? __d_alloc+0x34/0xa40 [ 413.216609][T10673] __d_alloc+0x34/0xa40 [ 413.216634][T10673] d_alloc_parallel+0x111/0x14e0 [ 413.216653][T10673] ? preempt_schedule_irq+0x7b/0x90 [ 413.216673][T10673] ? look_up_lock_class+0x55/0x120 [ 413.216690][T10673] ? register_lock_class+0x40/0x560 [ 413.216704][T10673] ? lockdep_hardirqs_on+0x78/0x100 [ 413.216717][T10673] ? __pfx_d_alloc_parallel+0x10/0x10 [ 413.216730][T10673] ? lockdep_init_map_type+0x5c/0x250 [ 413.216744][T10673] ? lockdep_init_map_type+0x5c/0x250 [ 413.216761][T10673] __lookup_slow+0x193/0x460 [ 413.216778][T10673] ? __pfx___lookup_slow+0x10/0x10 [ 413.216806][T10673] lookup_slow+0x50/0x70 [ 413.216822][T10673] path_lookupat+0x5e8/0xc40 [ 413.216836][T10673] filename_lookup+0x202/0x590 [ 413.216850][T10673] ? __pfx_filename_lookup+0x10/0x10 [ 413.216874][T10673] ? __asan_memcpy+0x3c/0x60 [ 413.216892][T10673] kern_path+0x37/0x50 [ 413.216903][T10673] unix_find_other+0x120/0xb10 [ 413.216918][T10673] ? __alloc_skb+0x4e9/0x710 [ 413.216934][T10673] ? __pfx_unix_find_other+0x10/0x10 [ 413.216954][T10673] unix_stream_connect+0x43a/0x1b10 [ 413.216971][T10673] ? selinux_netlbl_socket_connect+0x30/0x40 [ 413.216988][T10673] ? __pfx_unix_stream_connect+0x10/0x10 [ 413.217002][T10673] __sys_connect_file+0x141/0x1a0 [ 413.217019][T10673] __sys_connect+0x141/0x170 [ 413.217033][T10673] ? __pfx___sys_connect+0x10/0x10 [ 413.217054][T10673] ? __x64_sys_connect+0x11/0xb0 [ 413.217070][T10673] __x64_sys_connect+0x72/0xb0 [ 413.217084][T10673] ? lockdep_hardirqs_on+0x78/0x100 [ 413.217096][T10673] do_syscall_64+0x10b/0xf80 [ 413.217108][T10673] ? clear_bhb_loop+0x40/0x90 [ 413.217121][T10673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.217131][T10673] RIP: 0033:0x7f518539cdd9 [ 413.217141][T10673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.217151][T10673] RSP: 002b:00007f51862ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 413.217162][T10673] RAX: ffffffffffffffda RBX: 00007f5185616090 RCX: 00007f518539cdd9 [ 413.217168][T10673] RDX: 000000000000006e RSI: 0000200000000640 RDI: 0000000000000006 [ 413.217174][T10673] RBP: 00007f51862ef090 R08: 0000000000000000 R09: 0000000000000000 [ 413.217180][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.217185][T10673] R13: 00007f5185616128 R14: 00007f5185616090 R15: 00007ffc48f2da08 [ 413.217200][T10673] [ 413.633859][T10673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1275'. [ 413.862347][ T5717] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 414.042608][ T5717] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 414.054220][ T5717] usb 5-1: config 0 has no interface number 0 [ 414.066035][ T5717] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 414.115539][ T5717] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 414.147853][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.184510][ T5717] usb 5-1: config 0 descriptor?? [ 414.200611][T10684] loop7: detected capacity change from 0 to 16384 [ 414.471795][ T5732] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 414.771547][ T5718] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 415.009473][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 415.021734][ T5732] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 415.035075][T10688] loop7: detected capacity change from 16384 to 0 [ 415.041626][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.052380][ T5732] usb 2-1: Product: syz [ 415.053588][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 415.056587][ T5732] usb 2-1: Manufacturer: syz [ 415.069756][ T5732] usb 2-1: SerialNumber: syz [ 415.577041][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 415.584859][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 417.377279][T10701] FAULT_INJECTION: forcing a failure. [ 417.377279][T10701] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.550508][T10701] CPU: 0 UID: 0 PID: 10701 Comm: syz.2.1285 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.550545][T10701] Tainted: [L]=SOFTLOCKUP [ 417.550555][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.550566][T10701] Call Trace: [ 417.550573][T10701] [ 417.550580][T10701] dump_stack_lvl+0x100/0x190 [ 417.550608][T10701] should_fail_ex.cold+0x5/0xa [ 417.550630][T10701] ? prepare_alloc_pages+0x16d/0x5f0 [ 417.550654][T10701] should_fail_alloc_page+0xeb/0x140 [ 417.550676][T10701] prepare_alloc_pages+0x1f0/0x5f0 [ 417.550699][T10701] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 417.550725][T10701] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 417.550757][T10701] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 417.550787][T10701] ? hrtimer_reprogram+0x165/0x6c0 [ 417.550814][T10701] ? trace_hrtimer_start+0x79/0x230 [ 417.550843][T10701] ? hrtimer_start_range_ns+0x860/0x1a50 [ 417.550872][T10701] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.550900][T10701] ? find_held_lock+0x2b/0x80 [ 417.550917][T10701] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 417.550938][T10701] ? mark_held_locks+0x40/0x70 [ 417.550960][T10701] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 417.550984][T10701] ? rcu_is_watching+0x12/0xc0 [ 417.551012][T10701] ? trace_sched_exit_tp+0x11c/0x160 [ 417.551035][T10701] ? __schedule+0x10fb/0x6820 [ 417.551055][T10701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 417.551078][T10701] ? policy_nodemask+0xed/0x4f0 [ 417.551100][T10701] alloc_pages_mpol+0x1fb/0x540 [ 417.551122][T10701] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 417.551145][T10701] ? __pfx___schedule+0x10/0x10 [ 417.551168][T10701] folio_alloc_mpol_noprof+0x36/0x260 [ 417.551194][T10701] vma_alloc_folio_noprof+0xed/0x1d0 [ 417.551217][T10701] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 417.551238][T10701] ? mark_held_locks+0x40/0x70 [ 417.551261][T10701] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 417.551281][T10701] ? lockdep_hardirqs_on+0x78/0x100 [ 417.551306][T10701] do_anonymous_page+0xb46/0x2050 [ 417.551343][T10701] __handle_mm_fault+0x1d2c/0x2a00 [ 417.551371][T10701] ? mt_find+0x45e/0x8e0 [ 417.551396][T10701] ? __pfx___handle_mm_fault+0x10/0x10 [ 417.551419][T10701] ? __pfx_mt_find+0x10/0x10 [ 417.551457][T10701] ? find_vma+0xbf/0x140 [ 417.551476][T10701] ? __pfx_find_vma+0x10/0x10 [ 417.551498][T10701] handle_mm_fault+0x36d/0xa20 [ 417.551528][T10701] do_user_addr_fault+0x74c/0x12f0 [ 417.551564][T10701] ? trace_page_fault_kernel+0x7a/0x200 [ 417.551591][T10701] exc_page_fault+0x6f/0xd0 [ 417.551613][T10701] asm_exc_page_fault+0x26/0x30 [ 417.551631][T10701] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 417.551658][T10701] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 417.551675][T10701] RSP: 0018:ffffc900068ef9f8 EFLAGS: 00050206 [ 417.551690][T10701] RAX: 660a30093a736f70 RBX: 0000000000000029 RCX: 0000000000000029 [ 417.551702][T10701] RDX: 0000000000000001 RSI: ffff888055660000 RDI: 0000200000004500 [ 417.551714][T10701] RBP: ffffc900068efc08 R08: 0000000000000000 R09: ffffed100aacc005 [ 417.551725][T10701] R10: ffff888055660028 R11: 0000000000000000 R12: ffff888055660000 [ 417.551736][T10701] R13: 0000000000000000 R14: 0000200000004500 R15: 0000000000000029 [ 417.551762][T10701] _copy_to_iter+0x4c5/0x1720 [ 417.551794][T10701] ? __pfx__copy_to_iter+0x10/0x10 [ 417.551819][T10701] ? __pfx_fuse_dev_show_fdinfo+0x10/0x10 [ 417.551840][T10701] ? fput+0x79/0x100 [ 417.551862][T10701] ? __pfx_fuse_dev_show_fdinfo+0x10/0x10 [ 417.551880][T10701] ? seq_show+0x590/0x870 [ 417.551904][T10701] seq_read_iter+0xdab/0x1270 [ 417.551937][T10701] seq_read+0x33b/0x4c0 [ 417.551958][T10701] ? __pfx_seq_read+0x10/0x10 [ 417.551979][T10701] ? preempt_schedule_thunk+0x16/0x30 [ 417.552002][T10701] ? avc_policy_seqno+0x9/0x20 [ 417.552028][T10701] ? selinux_file_permission+0x8f/0x6d0 [ 417.552059][T10701] ? rw_verify_area+0xce/0x6d0 [ 417.552076][T10701] ? __pfx_seq_read+0x10/0x10 [ 417.552097][T10701] vfs_read+0x1e4/0xb30 [ 417.552119][T10701] ? __pfx_vfs_read+0x10/0x10 [ 417.552138][T10701] ? __fget_files+0x215/0x3d0 [ 417.552168][T10701] ? __fget_files+0x21f/0x3d0 [ 417.552199][T10701] ksys_read+0x12a/0x250 [ 417.552219][T10701] ? __pfx_ksys_read+0x10/0x10 [ 417.552240][T10701] ? rcu_is_watching+0x12/0xc0 [ 417.552269][T10701] do_syscall_64+0x10b/0xf80 [ 417.552290][T10701] ? clear_bhb_loop+0x40/0x90 [ 417.552313][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.552332][T10701] RIP: 0033:0x7f51ad79cdd9 [ 417.552348][T10701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.552365][T10701] RSP: 002b:00007f51ab9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 417.552381][T10701] RAX: ffffffffffffffda RBX: 00007f51ada15fa0 RCX: 00007f51ad79cdd9 [ 417.552392][T10701] RDX: 0000000000002020 RSI: 0000200000004500 RDI: 0000000000000008 [ 417.552403][T10701] RBP: 00007f51ab9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 417.552413][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.552424][T10701] R13: 00007f51ada16038 R14: 00007f51ada15fa0 R15: 00007ffda6b12c38 [ 417.552450][T10701] [ 417.744717][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 418.336286][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 418.367636][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 418.485000][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 418.492711][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 418.501172][ T5718] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 418.508764][ T5718] usb 4-1: can't read configurations, error -71 [ 418.516785][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 418.524446][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 418.531388][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 418.531723][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 418.550914][ T5717] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 418.576556][ T5717] prodikeys 0003:041E:2801.0009: hidraw0: USB HID v7f.fd Device [HID 041e:2801] on usb-dummy_hcd.4-1/input32 [ 418.597965][ T5717] usb 5-1: USB disconnect, device number 35 [ 418.613976][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 418.690709][ T5732] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 418.721369][T10716] sock: sock_timestamping_bind_phc: sock not bind to device [ 418.733907][ T5732] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 418.800175][ T5732] usb 2-1: USB disconnect, device number 39 [ 418.834701][T10714] fido_id[10714]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 419.119896][ T5717] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 419.201534][T10719] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1289'. [ 419.324489][ T5717] usb 5-1: not running at top speed; connect to a high speed hub [ 419.345669][ T5717] usb 5-1: config 9 has an invalid interface number: 200 but max is 2 [ 419.380172][ T5717] usb 5-1: config 9 has an invalid interface number: 102 but max is 2 [ 419.396023][ T5717] usb 5-1: config 9 has an invalid interface number: 8 but max is 2 [ 419.410190][ T5717] usb 5-1: config 9 has no interface number 0 [ 419.515538][ T5717] usb 5-1: config 9 has no interface number 1 [ 419.522469][ T5717] usb 5-1: config 9 has no interface number 2 [ 419.529061][ T5801] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 419.531972][ T5717] usb 5-1: config 9 interface 200 altsetting 1 endpoint 0xA has an invalid bInterval 54, changing to 4 [ 419.551964][ T5717] usb 5-1: config 9 interface 102 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 419.565284][ T5717] usb 5-1: config 9 interface 8 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 419.578482][ T5717] usb 5-1: config 9 interface 200 has no altsetting 0 [ 419.587775][ T5717] usb 5-1: config 9 interface 102 has no altsetting 0 [ 419.599944][ T5717] usb 5-1: config 9 interface 8 has no altsetting 0 [ 419.625034][ T5717] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=63.09 [ 419.636745][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.648090][ T5717] usb 5-1: Product: ⠁ [ 419.652543][ T5717] usb 5-1: Manufacturer: 묳遐虍蔸偌菬綇ᶃ霮渍ꅭ鹬⋅軄᯼耸ᛃ傊液诶甇烋蔋켜ꑑ齮옹﷊쐫௬坱嬘諃뇀ᓅ臛஼튆⭤࠮曃纓꒎戂᥵ᚁ동饜ᦖ幤瑒鵌魏෪꠨㮔靀馓놳仳抄誮呃鐚閿颶怽뺜૩躴⡹䥺᭨䱍懑祕폝ꬍ䬂掸‶끋쯓ퟢ롊కẴꠅ릩㜔 [ 419.694430][ T5717] usb 5-1: SerialNumber: syz [ 419.723089][ T5801] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 419.736764][ T5801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.796803][ T5801] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 419.847995][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.868657][ T5801] usb 1-1: config 0 descriptor?? [ 419.988557][T10716] cgroup: none used incorrectly [ 420.108280][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.141770][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.176999][ T5801] usb 1-1: USB disconnect, device number 43 [ 420.569344][ T5717] asix 5-1:9.200: probe with driver asix failed with error -22 [ 420.610798][ T5717] asix 5-1:9.102: probe with driver asix failed with error -22 [ 420.633871][ T5717] asix 5-1:9.8: probe with driver asix failed with error -22 [ 420.676907][ T5717] usb 5-1: USB disconnect, device number 36 [ 421.438682][ T5717] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 421.781790][ T5717] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 421.805444][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.886059][ T5717] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.920445][ T5717] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 421.986178][ T5717] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 422.008092][ T5717] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 422.057151][ T5717] usb 5-1: Manufacturer: syz [ 422.093832][ T5717] usb 5-1: config 0 descriptor?? [ 422.600285][ T5717] hid_parser_main: 460 callbacks suppressed [ 422.600302][ T5717] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 422.676377][ T5717] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 423.151637][ T9403] usb 5-1: USB disconnect, device number 37 [ 424.074142][T10766] overlayfs: missing 'lowerdir' [ 426.043074][T10782] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 426.078773][T10782] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 426.087789][T10782] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 427.038464][ T5732] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 427.199340][ T5732] usb 3-1: Using ep0 maxpacket: 8 [ 427.205852][ T5732] usb 3-1: config 1 has an invalid interface number: 163 but max is 0 [ 427.214933][ T5732] usb 3-1: config 1 has no interface number 0 [ 427.226319][ T5732] usb 3-1: config 1 interface 163 altsetting 248 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 427.251341][ T5732] usb 3-1: config 1 interface 163 has no altsetting 0 [ 427.270019][ T5732] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=2f.87 [ 427.279581][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.288121][ T5732] usb 3-1: Product: syz [ 427.292556][ T5732] usb 3-1: Manufacturer: syz [ 427.297872][ T5732] usb 3-1: SerialNumber: syz [ 427.928869][T10790] Device name cannot be null; rc = [-22] [ 428.003905][T10790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.068955][ T5732] usb 3-1: Firmware version (0.0) predates our first public release. [ 428.082343][ T5732] usb 3-1: Please update to version 0.2 or newer [ 428.166164][ T5732] usb 3-1: USB disconnect, device number 37 [ 428.416837][ T5801] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 428.590414][ T5801] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 428.602296][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.613600][ T5801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.627395][ T5801] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 428.649894][ T5801] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 428.662666][ T5801] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 428.677735][ T5801] usb 2-1: Manufacturer: syz [ 428.690273][ T5801] usb 2-1: config 0 descriptor?? [ 428.935469][T10830] netlink: 'syz.2.1320': attribute type 27 has an invalid length. [ 428.950821][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 429.143777][ T5801] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 429.262053][ T5801] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 429.407152][T10845] netlink: 'syz.3.1324': attribute type 1 has an invalid length. [ 429.415507][T10845] netlink: 280 bytes leftover after parsing attributes in process `syz.3.1324'. [ 430.289149][ T30] audit: type=1400 audit(1777700777.868:1186): avc: denied { read write } for pid=10840 comm="syz.3.1324" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 430.331053][ T30] audit: type=1400 audit(1777700777.868:1187): avc: denied { open } for pid=10840 comm="syz.3.1324" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 430.954586][T10856] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1325'. [ 432.137155][ T5717] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 432.370414][ T5717] usb 3-1: Using ep0 maxpacket: 32 [ 432.392159][ T5717] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 432.583384][ T5717] usb 3-1: config 0 has no interface number 0 [ 432.602776][ T5717] usb 3-1: config 0 interface 184 has no altsetting 0 [ 432.627431][ T5717] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 432.647013][ T5718] usb 2-1: USB disconnect, device number 40 [ 432.656855][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.680061][ T5717] usb 3-1: Product: syz [ 432.697152][ T5717] usb 3-1: Manufacturer: syz [ 432.703751][ T5717] usb 3-1: SerialNumber: syz [ 432.772138][ T5717] usb 3-1: config 0 descriptor?? [ 433.070133][T10877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2561 sclass=netlink_tcpdiag_socket pid=10877 comm=syz.1.1332 [ 433.235947][ T5717] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 433.259904][ T5717] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 433.270616][ T5717] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 433.284741][ T5717] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 433.853373][T10884] block nbd1: shutting down sockets [ 434.763931][ T5717] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 434.935635][ T5718] usb 3-1: USB disconnect, device number 38 [ 435.004995][ T5717] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 435.023376][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.035987][ T5717] usb 5-1: Product: syz [ 435.040208][ T5717] usb 5-1: Manufacturer: syz [ 435.050400][ T5717] usb 5-1: SerialNumber: syz [ 435.176631][T10899] 9p: Bad value for 'wfdno' [ 435.196232][ T30] audit: type=1326 audit(1777700782.958:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f518539cdd9 code=0x0 [ 435.362564][ T9390] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 435.536822][ T9390] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 435.536885][ T9390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.536908][ T9390] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.536927][ T9390] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 435.537976][ T9390] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 435.591704][ T9390] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 435.605117][ T9390] usb 4-1: Manufacturer: syz [ 435.681600][ T9390] usb 4-1: config 0 descriptor?? [ 435.804009][ T5717] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 435.804146][ T5717] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 435.804943][ T5717] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 435.804997][ T5717] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 435.809894][ T5717] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 435.813457][ T5717] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 435.824561][ T5717] usb 5-1: USB disconnect, device number 38 [ 436.134636][ T9390] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 436.162806][ T9390] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 436.327244][T10916] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5607] was attempted by ""[10916] [ 436.635359][ T5739] usb 4-1: USB disconnect, device number 42 [ 437.856416][ T30] audit: type=1400 audit(1777700785.448:1189): avc: denied { append } for pid=10922 comm="syz.1.1346" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 438.067981][ T5732] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 438.645034][ T5732] usb 5-1: unable to get BOS descriptor or descriptor too short [ 438.657325][ T5732] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 438.666027][ T5732] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 438.676534][ T5732] usb 5-1: config 63 has no interface number 0 [ 438.682716][ T5732] usb 5-1: config 63 interface 66 has no altsetting 0 [ 438.691445][ T5732] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 438.701266][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.711103][ T5732] usb 5-1: Product: syz [ 438.715273][ T5732] usb 5-1: Manufacturer: syz [ 438.719891][ T5732] usb 5-1: SerialNumber: syz [ 438.760765][ T9403] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 438.768436][ T5739] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 438.933374][ T9403] usb 2-1: device descriptor read/64, error -71 [ 438.953203][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 438.973743][ T5739] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 438.982549][ T5732] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 438.992280][ T5739] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 439.005154][ T5732] usb 5-1: USB disconnect, device number 39 [ 439.025390][ T5739] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 439.043502][ T5739] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 439.055046][ T5739] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 439.068635][ T5739] usb 1-1: config 0 interface 0 has no altsetting 0 [ 439.077502][ T5739] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 439.106250][ T5739] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 439.130481][ T5739] usb 1-1: Product: syz [ 439.137313][ T5739] usb 1-1: Manufacturer: syz [ 439.155258][ T5739] usb 1-1: SerialNumber: syz [ 439.166588][ T5739] usb 1-1: config 0 descriptor?? [ 439.177375][T10928] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 439.187005][ T5739] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 439.200880][ T5739] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 439.220346][ T9403] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 439.812731][T10945] team0: entered allmulticast mode [ 439.817910][T10945] team_slave_0: entered allmulticast mode [ 439.823784][T10945] team_slave_1: entered allmulticast mode [ 439.830380][T10945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1354'. [ 439.839349][T10945] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 439.857173][ T9403] usb 2-1: device descriptor read/64, error -71 [ 439.983148][ T9403] usb usb2-port1: attempt power cycle [ 440.161623][ T5739] usb 1-1: USB disconnect, device number 44 [ 440.196555][ T5739] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 440.273512][ T30] audit: type=1400 audit(1777700787.712:1190): avc: denied { setattr } for pid=10954 comm="syz.3.1356" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 440.374124][ T9403] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 440.379173][ T5717] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 440.400383][ T9403] usb 2-1: device descriptor read/8, error -71 [ 440.566740][ T5717] usb 3-1: Using ep0 maxpacket: 8 [ 440.576147][ T5717] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.587170][ T5717] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.597491][ T5717] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.662672][ T9403] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 440.776054][ T5717] usb 3-1: config 0 interface 0 has no altsetting 0 [ 440.813566][ T5717] usb 3-1: New USB device found, idVendor=046d, idProduct=822d, bcdDevice= 0.00 [ 440.822645][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.842663][ T5717] usb 3-1: config 0 descriptor?? [ 440.854631][ T9403] usb 2-1: device descriptor read/8, error -71 [ 440.983552][ T9403] usb usb2-port1: unable to enumerate USB device [ 441.411113][ T9403] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 441.508711][ T5717] usb 3-1: string descriptor 0 read error: -71 [ 441.540150][ T5717] usbhid 3-1:0.0: can't add hid device: -71 [ 441.546714][ T5717] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 441.578288][ T9403] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 441.601003][ T9403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.622510][ T5717] usb 3-1: USB disconnect, device number 39 [ 441.633395][ T9403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.664241][ T9403] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 441.682558][ T9403] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 441.699576][ T9403] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 441.714778][ T9403] usb 5-1: Manufacturer: syz [ 441.733880][ T9403] usb 5-1: config 0 descriptor?? [ 442.451048][ T9403] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 442.887073][T10978] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEO' [ 442.894055][ T9403] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 443.785975][ T9403] usb 5-1: USB disconnect, device number 40 [ 444.254506][ T5739] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 444.574108][ T9403] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 444.588839][ T5739] usb 2-1: unable to get BOS descriptor or descriptor too short [ 444.609801][ T5739] usb 2-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 444.638228][ T5739] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.696931][ T5739] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 444.717351][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.734299][ T9403] usb 1-1: device descriptor read/64, error -71 [ 444.754159][T11005] random: crng reseeded on system resumption [ 444.760426][ T5739] usb 2-1: Product: syz [ 444.760446][ T5739] usb 2-1: Manufacturer: syz [ 444.760461][ T5739] usb 2-1: SerialNumber: syz [ 444.773750][ T5739] usb 2-1: selecting invalid altsetting 1 [ 444.808557][ T5739] usb 2-1: unit 6 not found! [ 445.001437][ T9403] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 445.225969][ T5739] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 445.279954][ T9403] usb 1-1: device descriptor read/64, error -71 [ 445.396935][ T9403] usb usb1-port1: attempt power cycle [ 445.424568][ T5739] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 445.444634][ T5739] usb 2-1: USB disconnect, device number 45 [ 445.491969][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.902387][ T5739] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 445.910514][ T9403] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 445.957080][ T9403] usb 1-1: device descriptor read/8, error -71 [ 446.305195][ T9403] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 446.434859][ T9403] usb 1-1: device descriptor read/8, error -71 [ 446.673237][ T9403] usb usb1-port1: unable to enumerate USB device [ 447.203597][ T9390] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 447.386775][ T9390] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 447.399707][T11045] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1384'. [ 447.411008][ T9390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.433149][ T9390] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.458852][ T9390] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 447.500750][ T9390] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 447.512263][ T9390] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 447.521352][ T9390] usb 5-1: Manufacturer: syz [ 447.538002][ T9390] usb 5-1: config 0 descriptor?? [ 448.079398][ T9403] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 448.092652][ T9390] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 448.109307][ T5739] usb 2-1: unable to get BOS descriptor or descriptor too short [ 448.127167][ T5739] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 448.140680][ T9390] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 448.167902][ T5739] usb 2-1: can't read configurations, error -71 [ 448.366826][ T9403] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 448.377486][ T9403] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 448.408881][ T9403] usb 3-1: Product: syz [ 448.413431][ T9403] usb 3-1: Manufacturer: syz [ 448.418074][ T9403] usb 3-1: SerialNumber: syz [ 448.504486][ T9403] usb 3-1: config 0 descriptor?? [ 448.626893][ T9403] ch341 3-1:0.0: ch341-uart converter detected [ 448.812927][ T5717] usb 5-1: USB disconnect, device number 41 [ 449.172111][ T9403] usb 3-1: failed to receive control message: -32 [ 449.424442][ T9403] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 451.248698][T11101] xt_hashlimit: size too large, truncated to 1048576 [ 451.305394][T11102] tipc: Enabling of bearer rejected, failed to enable media [ 451.389591][ T5717] usb 3-1: USB disconnect, device number 40 [ 451.478758][ T5717] ch341 3-1:0.0: device disconnected [ 451.712118][ T9403] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 451.786277][ T30] audit: type=1400 audit(1777700798.483:1191): avc: denied { create } for pid=11113 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 452.007219][T11123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.082438][ T5717] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 452.226852][T11127] Invalid source name [ 452.507966][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.517015][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.536030][ T30] audit: type=1400 audit(1777700798.886:1192): avc: denied { accept } for pid=11104 comm="syz.4.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 452.558045][ T30] audit: type=1400 audit(1777700798.923:1193): avc: denied { ioctl } for pid=11104 comm="syz.4.1404" path="socket:[32780]" dev="sockfs" ino=32780 ioctlcmd=0x5612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 452.654413][ T5717] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 452.699493][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.732521][ T5717] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.759122][ T5717] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 452.779980][ T5717] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 452.791007][ T5717] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 452.801522][ T5717] usb 2-1: Manufacturer: syz [ 452.956449][ T5725] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 452.965287][ T5717] usb 2-1: config 0 descriptor?? [ 453.136335][ T5725] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 453.145937][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.153943][ T5725] usb 4-1: Product: syz [ 453.158481][ T5725] usb 4-1: Manufacturer: syz [ 453.163114][ T5725] usb 4-1: SerialNumber: syz [ 453.304567][ T9390] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 453.368357][ T5801] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 453.418843][ T5717] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 453.434292][ T5717] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 453.464636][ T9390] usb 1-1: Using ep0 maxpacket: 16 [ 453.478723][ T9390] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 453.497907][ T9390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.518971][ T9390] usb 1-1: Product: syz [ 453.525483][ T9390] usb 1-1: Manufacturer: syz [ 453.530308][ T9390] usb 1-1: SerialNumber: syz [ 453.545393][ T9390] usb 1-1: config 0 descriptor?? [ 453.552726][ T5801] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 453.561570][ T5801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.572108][ T5801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 453.582297][ T5801] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.595407][ T5801] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 453.604969][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.613039][ T5801] usb 3-1: Product: syz [ 453.617279][ T5801] usb 3-1: Manufacturer: syz [ 453.627357][ T5801] cdc_wdm 3-1:1.0: skipping garbage [ 453.632662][ T5801] cdc_wdm 3-1:1.0: skipping garbage [ 453.700105][ T5801] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 453.707614][ T5801] cdc_wdm 3-1:1.0: Unknown control protocol [ 453.819015][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 453.837915][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 453.859008][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 453.879836][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 453.904959][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 453.921674][ T5725] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 453.975055][ T5725] usb 4-1: USB disconnect, device number 43 [ 454.076107][ T9390] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 454.095272][ T5739] usb 2-1: USB disconnect, device number 48 [ 454.095697][ T9390] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 454.121928][ T9390] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 454.130295][ T9390] usb 1-1: media controller created [ 454.154012][ T9390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.300746][ T30] audit: type=1400 audit(1777700800.842:1194): avc: denied { getopt } for pid=11141 comm="syz.0.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 454.301246][ T9390] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 454.328867][ T9390] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 454.583522][ T9403] usb 5-1: unable to get BOS descriptor or descriptor too short [ 454.599631][ T9403] usb 5-1: no configurations [ 454.713438][ T9403] usb 5-1: can't read configurations, error -22 [ 454.943889][ T9390] usb 1-1: USB disconnect, device number 49 [ 455.026934][ T9390] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 455.154632][T11159] block nbd3: shutting down sockets [ 455.621871][ T9390] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 455.762306][ T9390] usb 4-1: device descriptor read/64, error -71 [ 455.769992][ T30] audit: type=1400 audit(1777700802.208:1195): avc: denied { ioctl } for pid=11179 comm="syz.1.1429" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 456.082697][ T5739] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 456.110417][ T5801] usb 3-1: USB disconnect, device number 41 [ 456.139491][ T9390] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 456.354557][ T9390] usb 4-1: device descriptor read/64, error -71 [ 456.924754][ T5739] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 456.934176][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.949150][ T5739] usb 1-1: Product: syz [ 456.953345][ T5739] usb 1-1: Manufacturer: syz [ 456.957941][ T5739] usb 1-1: SerialNumber: syz [ 457.055483][ T9390] usb usb4-port1: attempt power cycle [ 457.390093][T11196] hfs: unable to load iocharset "io#harset" [ 457.429409][ T9390] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 457.450965][ T9390] usb 4-1: device descriptor read/8, error -71 [ 457.514551][ T5801] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 457.631750][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 457.644731][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 457.657557][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 457.670323][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 457.676277][ T5801] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 457.680885][ T5739] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 457.699475][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.710934][ T9390] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 457.718762][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.728906][ T5801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 457.729023][ T5739] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 457.751106][ T9390] usb 4-1: device descriptor read/8, error -71 [ 457.756263][ T5739] usb 1-1: USB disconnect, device number 50 [ 457.759473][ T5801] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 457.776999][ T5801] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 457.790199][ T5801] usb 3-1: Manufacturer: syz [ 457.800571][ T5801] usb 3-1: config 0 descriptor?? [ 457.888758][ T9390] usb usb4-port1: unable to enumerate USB device [ 458.077913][T11209] 9pnet_virtio: no channels available for device 127.0.0.1 [ 458.245739][ T5801] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 458.271896][ T5801] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 458.993997][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.005950][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.089280][T11216] could not allocate digest TFM handle blake2s-160-generic [ 459.459870][ T5739] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 459.468642][ T5801] usb 3-1: USB disconnect, device number 42 [ 459.944019][ T5739] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.956352][ T5739] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 460.267949][ T5739] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.287974][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.334523][ T5739] usb 2-1: Product: syz [ 460.344341][ T5739] usb 2-1: Manufacturer: syz [ 460.359354][ T5739] usb 2-1: SerialNumber: syz [ 461.481713][ T5739] cdc_mbim 2-1:1.0: skipping garbage [ 461.715176][T11220] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 461.761699][ T5732] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 461.853599][ T5717] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 461.917604][ T5732] usb 1-1: device descriptor read/64, error -71 [ 462.031782][ T5717] usb 3-1: Using ep0 maxpacket: 8 [ 462.065070][ T5717] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 462.083878][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.183453][ T5739] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 462.192770][ T5739] cdc_mbim 2-1:1.0: bind() failure [ 462.694873][ T5717] pvrusb2: Hardware description: Terratec Grabster AV400 [ 462.701266][ T5732] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 462.709794][ T5717] pvrusb2: ********** [ 462.709808][ T5717] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 462.709819][ T5717] pvrusb2: Important functionality might not be entirely working. [ 462.709827][ T5717] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 462.709838][ T5717] pvrusb2: ********** [ 462.762681][ T5739] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 462.769514][ T5739] cdc_ncm 2-1:1.1: bind() failure [ 462.833351][ T5739] usb 2-1: USB disconnect, device number 49 [ 462.940228][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.973747][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.000530][ T2352] pvrusb2: Invalid write control endpoint [ 463.001999][ T5717] usb 3-1: USB disconnect, device number 43 [ 463.032066][ T5732] usb 1-1: device descriptor read/64, error -71 [ 463.153155][ T2352] pvrusb2: Invalid write control endpoint [ 463.185885][ T5732] usb usb1-port1: attempt power cycle [ 463.195579][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 463.206757][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 463.226924][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 463.259539][ T2352] pvrusb2: Device being rendered inoperable [ 463.283763][ T2352] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 463.323725][ T2352] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 463.626103][ T2352] pvrusb2: Attached sub-driver cx25840 [ 463.633085][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 463.643636][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 463.902945][ T5732] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 464.018658][ T5732] usb 1-1: device descriptor read/8, error -71 [ 464.166018][T11287] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 464.184234][T11287] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1458'. [ 464.278805][ T5732] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 464.311588][ T5732] usb 1-1: device descriptor read/8, error -71 [ 464.397581][ T5717] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 464.431320][ T5732] usb usb1-port1: unable to enumerate USB device [ 464.583957][ T5717] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 464.619442][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.632596][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.646945][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 464.648258][ T30] audit: type=1400 audit(1777700810.518:1196): avc: denied { setopt } for pid=11294 comm="syz.3.1456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 464.667006][ T5717] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 464.713803][ T5717] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 464.738725][ T5739] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 464.827341][ T5717] usb 3-1: Manufacturer: syz [ 464.914611][ T5739] usb 2-1: config 0 interface 0 has no altsetting 0 [ 464.914929][ T5717] usb 3-1: config 0 descriptor?? [ 464.949105][ T5739] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 464.980638][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.003083][ T5739] usb 2-1: config 0 descriptor?? [ 465.205025][ T30] audit: type=1400 audit(1777700811.023:1197): avc: denied { read } for pid=11303 comm="syz.4.1463" path="socket:[33801]" dev="sockfs" ino=33801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 465.381036][ T5717] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 465.394809][ T5717] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 467.743598][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.754017][ T5739] video4linux radio48: keene_cmd_main failed (-110) [ 467.875482][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.883608][ T5739] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 467.908118][ T5739] usb 2-1: USB disconnect, device number 50 [ 468.154583][ T5717] usb 3-1: USB disconnect, device number 44 [ 468.441260][T11330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1469'. [ 468.920626][ T30] audit: type=1400 audit(1777700814.514:1198): avc: denied { write } for pid=11336 comm="syz.4.1471" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 469.601807][T11357] FAULT_INJECTION: forcing a failure. [ 469.601807][T11357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.615259][T11357] CPU: 1 UID: 0 PID: 11357 Comm: syz.3.1465 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.615294][T11357] Tainted: [L]=SOFTLOCKUP [ 469.615300][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.615311][T11357] Call Trace: [ 469.615318][T11357] [ 469.615326][T11357] dump_stack_lvl+0x100/0x190 [ 469.615353][T11357] should_fail_ex.cold+0x5/0xa [ 469.615379][T11357] _copy_to_user+0x32/0xd0 [ 469.615407][T11357] environ_read+0x2b6/0x420 [ 469.615437][T11357] ? __pfx_environ_read+0x10/0x10 [ 469.615464][T11357] vfs_read+0x1e4/0xb30 [ 469.615488][T11357] ? __pfx_vfs_read+0x10/0x10 [ 469.615506][T11357] ? __fget_files+0x215/0x3d0 [ 469.615534][T11357] ? __fget_files+0x21f/0x3d0 [ 469.615563][T11357] ksys_read+0x12a/0x250 [ 469.615581][T11357] ? __pfx_ksys_read+0x10/0x10 [ 469.615598][T11357] ? rcu_is_watching+0x12/0xc0 [ 469.615624][T11357] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 469.615648][T11357] ? rcu_is_watching+0x12/0xc0 [ 469.615677][T11357] do_syscall_64+0x10b/0xf80 [ 469.615698][T11357] ? clear_bhb_loop+0x40/0x90 [ 469.615720][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.615738][T11357] RIP: 0033:0x7f3d7bb9cdd9 [ 469.615753][T11357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.615769][T11357] RSP: 002b:00007f3d79db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.615786][T11357] RAX: ffffffffffffffda RBX: 00007f3d7be16180 RCX: 00007f3d7bb9cdd9 [ 469.615797][T11357] RDX: 00000000ffffffb2 RSI: 0000200000000a40 RDI: 0000000000000005 [ 469.615808][T11357] RBP: 00007f3d79db4090 R08: 0000000000000000 R09: 0000000000000000 [ 469.615818][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.615828][T11357] R13: 00007f3d7be16218 R14: 00007f3d7be16180 R15: 00007ffe2c94d028 [ 469.615853][T11357] [ 472.077683][ T30] audit: type=1400 audit(1777700817.471:1199): avc: denied { map } for pid=11384 comm="syz.2.1485" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.180921][ T30] audit: type=1400 audit(1777700817.471:1200): avc: denied { execute } for pid=11384 comm="syz.2.1485" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.261545][ T5725] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 472.659884][T11388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.721490][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 472.910788][ T5725] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 472.941970][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.963523][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.995160][ T5725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 473.038318][ T5725] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 473.069484][ T5725] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 473.095148][ T5725] usb 5-1: Manufacturer: syz [ 473.120424][ T5725] usb 5-1: config 0 descriptor?? [ 473.144994][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 473.184029][T11397] netlink: 'syz.3.1487': attribute type 13 has an invalid length. [ 473.199377][T11397] netlink: 'syz.3.1487': attribute type 17 has an invalid length. [ 473.212643][T11397] netlink: 'syz.3.1487': attribute type 5 has an invalid length. [ 473.260844][ T30] audit: type=1400 audit(1777700818.575:1201): avc: denied { read } for pid=11395 comm="syz.3.1487" path="socket:[33984]" dev="sockfs" ino=33984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 473.739482][ T5725] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 473.753408][ T5725] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 474.318344][ T5725] usb 5-1: USB disconnect, device number 44 [ 475.645542][T11440] unsupported nlmsg_type 40 [ 477.101608][ T5801] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 477.318985][ T5801] usb 1-1: config 251 has an invalid interface number: 26 but max is 0 [ 477.404701][ T5801] usb 1-1: config 251 has no interface number 0 [ 477.411069][ T5801] usb 1-1: config 251 interface 26 has no altsetting 0 [ 477.420088][ T5801] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice= 3.9a [ 477.429709][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.444873][ T5801] usb 1-1: Product: syz [ 477.453745][ T5801] usb 1-1: Manufacturer: syz [ 477.460642][ T5801] usb 1-1: SerialNumber: syz [ 477.811098][T11452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1503'. [ 477.861111][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 478.102288][ T5801] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 478.124506][ T5801] dw2102: su3000_power_ctrl: 1, initialized 0 [ 478.177400][ T5801] dvb-usb: bulk message failed: -22 (2/0) [ 478.206148][ T5801] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 478.252832][ T5801] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 error while loading driver (-19) [ 478.288723][ T5801] usb 1-1: USB disconnect, device number 55 [ 479.085268][ T5801] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 479.290798][ T5801] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 479.567972][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.629539][ T5801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.682517][ T5801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 479.746271][ T5801] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 479.762152][ T5801] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 479.782009][ T5801] usb 3-1: Manufacturer: syz [ 479.812072][ T5801] usb 3-1: config 0 descriptor?? [ 480.279926][ T5801] appleir 0003:05AC:8243.0013: unknown main item tag 0x0 [ 480.328087][ T5801] appleir 0003:05AC:8243.0013: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 480.904834][ T5801] usb 3-1: USB disconnect, device number 45 [ 481.096183][T11503] fido_id[11503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 481.887812][ T30] audit: type=1400 audit(1777700826.520:1202): avc: denied { kexec_image_load } for pid=11511 comm="syz.4.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 482.118293][ T30] audit: type=1400 audit(1777700826.857:1203): avc: denied { getopt } for pid=11505 comm="syz.0.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 483.310001][ T30] audit: type=1400 audit(1777700827.278:1204): avc: denied { ioctl } for pid=11521 comm="syz.3.1524" path="socket:[34370]" dev="sockfs" ino=34370 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 483.438678][ T30] audit: type=1400 audit(1777700827.287:1205): avc: denied { write } for pid=11521 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 484.894303][ T30] audit: type=1400 audit(1777700829.468:1206): avc: denied { ioctl } for pid=11531 comm="syz.4.1525" path="socket:[34453]" dev="sockfs" ino=34453 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 485.041003][T11522] syzkaller0: entered promiscuous mode [ 485.060712][T11522] syzkaller0: entered allmulticast mode [ 486.345594][ T5725] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 486.537868][ T5725] usb 4-1: device descriptor read/64, error -71 [ 487.600469][ T30] audit: type=1400 audit(1777700831.985:1207): avc: denied { bind } for pid=11554 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 487.628681][ T5725] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 487.628894][ T30] audit: type=1400 audit(1777700831.985:1208): avc: denied { listen } for pid=11554 comm="syz.0.1533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 487.842038][ T5725] usb 4-1: device descriptor read/64, error -71 [ 487.985514][ T5725] usb usb4-port1: attempt power cycle [ 488.376449][ T5725] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 488.392248][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1534'. [ 488.415519][ T5725] usb 4-1: device descriptor read/8, error -71 [ 488.684699][ T5725] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 488.745837][ T5725] usb 4-1: device descriptor read/8, error -71 [ 488.869827][ T5725] usb usb4-port1: unable to enumerate USB device [ 489.463885][ T30] audit: type=1400 audit(1777700833.735:1209): avc: denied { write } for pid=11563 comm="syz.3.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 489.588206][T11567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1535'. [ 489.603253][T11567] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1535'. [ 492.810677][ T9403] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 492.992330][ T9403] usb 3-1: device descriptor read/64, error -71 [ 493.034041][ T30] audit: type=1400 audit(1777700837.076:1210): avc: denied { getopt } for pid=11607 comm="syz.0.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 493.293302][ T9403] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 493.389623][T11613] syzkaller0: entered promiscuous mode [ 493.416669][T11613] syzkaller0: entered allmulticast mode [ 493.458503][ T9403] usb 3-1: device descriptor read/64, error -71 [ 493.592971][ T9403] usb usb3-port1: attempt power cycle [ 493.902861][ T5801] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 493.975874][ T9403] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 494.299070][ T5801] usb 2-1: unable to get BOS descriptor or descriptor too short [ 494.337501][ T9403] usb 3-1: device descriptor read/8, error -71 [ 494.369554][ T5801] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 494.410986][ T5801] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 494.426164][ T5801] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.438839][ T5801] usb 2-1: Product: syz [ 494.443048][ T5801] usb 2-1: Manufacturer: syz [ 494.645802][ T5801] usb 2-1: SerialNumber: syz [ 494.703651][ T9403] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 494.738701][ T9403] usb 3-1: device descriptor read/8, error -71 [ 495.317402][ T5801] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 495.354635][ T9403] usb usb3-port1: unable to enumerate USB device [ 495.709919][ T5801] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 495.719521][ T5801] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 496.206651][ T30] audit: type=1400 audit(1777700840.052:1211): avc: denied { mount } for pid=11620 comm="syz.1.1551" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 496.242395][ T5801] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 496.253060][ T5801] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 496.370279][ T30] audit: type=1400 audit(1777700840.201:1212): avc: denied { ioctl } for pid=11653 comm="syz.0.1560" path="socket:[35031]" dev="sockfs" ino=35031 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 496.465295][ T5725] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 496.477400][T11621] tipc: Started in network mode [ 496.484929][T11621] tipc: Node identity 7f000001, cluster identity 4711 [ 496.505265][T11621] tipc: Enabled bearer , priority 10 [ 496.560440][ T5801] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 496.617931][ T5725] usb 4-1: device descriptor read/64, error -71 [ 496.628333][ T5801] usb 2-1: USB disconnect, device number 51 [ 496.679966][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.882083][ T5725] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 497.058046][ T5725] usb 4-1: device descriptor read/64, error -71 [ 497.182782][ T5725] usb usb4-port1: attempt power cycle [ 497.193819][ T30] audit: type=1400 audit(1777700840.969:1213): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 497.352690][T11670] random: crng reseeded on system resumption [ 497.621204][ T5801] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 497.636288][T11675] lo speed is unknown, defaulting to 1000 [ 497.642210][T11675] lo speed is unknown, defaulting to 1000 [ 497.655575][T11675] lo speed is unknown, defaulting to 1000 [ 497.667197][T11675] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 497.681480][T11675] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 497.698723][T11675] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 497.736941][T11675] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 498.534732][T11675] lo speed is unknown, defaulting to 1000 [ 498.544763][T11675] lo speed is unknown, defaulting to 1000 [ 498.545010][ T5739] tipc: Node number set to 2130706433 [ 498.558137][ T5725] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 498.582803][ T5725] usb 4-1: device descriptor read/8, error -71 [ 498.614509][ T5801] usb 3-1: Using ep0 maxpacket: 16 [ 498.623453][ T5801] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.661841][T11675] lo speed is unknown, defaulting to 1000 [ 498.669230][T11675] lo speed is unknown, defaulting to 1000 [ 498.676360][T11675] lo speed is unknown, defaulting to 1000 [ 498.793725][ T5801] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 498.802850][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.813240][ T5801] usb 3-1: config 0 descriptor?? [ 499.029925][ T5725] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 499.062609][ T5725] usb 4-1: device descriptor read/8, error -71 [ 499.191191][ T5725] usb usb4-port1: unable to enumerate USB device [ 499.434320][ T5801] logitech 0003:046D:C20E.0014: rdesc size test failed for formula gp [ 499.490026][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.505365][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.845262][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.854661][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.861956][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.869550][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.877618][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.884813][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.893289][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.900950][ T5801] logitech 0003:046D:C20E.0014: unknown main item tag 0x0 [ 499.949986][ T5801] logitech 0003:046D:C20E.0014: hidraw0: USB HID v0.0a Device [HID 046d:c20e] on usb-dummy_hcd.2-1/input0 [ 499.993236][ T5801] usb 3-1: USB disconnect, device number 50 [ 500.091813][T11690] fido_id[11690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 500.130562][ T9403] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 500.207025][ T5739] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 500.301971][ T9403] usb 1-1: Using ep0 maxpacket: 32 [ 500.310547][ T9403] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 500.319551][ T9403] usb 1-1: config 0 has no interface number 0 [ 500.329588][ T9403] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 500.339728][ T9403] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.348738][ T9403] usb 1-1: Product: syz [ 500.353326][ T9403] usb 1-1: Manufacturer: syz [ 500.358373][ T9403] usb 1-1: SerialNumber: syz [ 500.363388][ T5739] usb 4-1: device descriptor read/64, error -71 [ 500.377601][ T9403] usb 1-1: config 0 descriptor?? [ 500.394441][ T9403] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 500.622554][ T5739] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 500.651237][ T9403] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 500.692186][ T9403] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 500.804598][ T5739] usb 4-1: device descriptor read/64, error -71 [ 500.932662][ T5739] usb usb4-port1: attempt power cycle [ 501.306074][ T5739] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 501.338779][ T5739] usb 4-1: device descriptor read/8, error -71 [ 501.353389][ T30] audit: type=1400 audit(1777700844.862:1214): avc: denied { read } for pid=11706 comm="syz.1.1575" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 501.357903][ T5801] kernel read not supported for file /file0 (pid: 5801 comm: kworker/1:7) [ 501.413030][ T30] audit: type=1400 audit(1777700844.908:1215): avc: denied { write } for pid=11706 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 501.676350][ T5739] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 501.830697][ T5739] usb 4-1: device descriptor read/8, error -71 [ 501.990493][ T5739] usb usb4-port1: unable to enumerate USB device [ 502.370834][T11715] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 502.405513][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 502.420342][ T5717] usb 1-1: USB disconnect, device number 56 [ 502.519732][ T5717] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 502.634314][ T5717] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 502.659785][ T5717] quatech2 1-1:0.51: device disconnected [ 503.038447][ T30] audit: type=1400 audit(1777700846.453:1216): avc: denied { name_bind } for pid=11719 comm="syz.2.1579" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 503.144218][ T9390] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 503.357999][ T9390] usb 1-1: Using ep0 maxpacket: 16 [ 503.372163][ T9390] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.395849][ T9390] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 503.412833][ T9390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.424477][ T9390] usb 1-1: Product: syz [ 503.425128][T11730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.434265][ T9390] usb 1-1: Manufacturer: syz [ 503.441966][ T9390] usb 1-1: SerialNumber: syz [ 503.450930][T11730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.457134][ T9390] usb 1-1: config 0 descriptor?? [ 503.647072][ T5739] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 503.992492][ T30] audit: type=1400 audit(1777700847.342:1217): avc: denied { watch } for pid=11745 comm="syz.2.1586" path="/295/file1" dev="tmpfs" ino=1591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 504.173348][T11748] overlayfs: missing 'lowerdir' [ 504.186901][ T5725] usb 1-1: USB disconnect, device number 57 [ 504.263462][T11749] netlink: 'syz.2.1586': attribute type 32 has an invalid length. [ 504.985453][ T30] audit: type=1400 audit(1777700848.006:1218): avc: denied { setopt } for pid=11745 comm="syz.2.1586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 505.744891][ T30] audit: type=1400 audit(1777700848.979:1219): avc: denied { map } for pid=11757 comm="syz.0.1590" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.853686][T11783] random: crng reseeded on system resumption [ 509.103045][ T30] audit: type=1400 audit(1777700852.086:1220): avc: denied { setattr } for pid=11791 comm="syz.2.1600" path="/dev/mixer" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 509.570131][ T30] audit: type=1400 audit(1777700852.563:1221): avc: denied { mounton } for pid=11802 comm="syz.2.1602" path="/299/file0" dev="tmpfs" ino=1613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 509.855364][ T5801] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 510.026268][ T5801] usb 4-1: Using ep0 maxpacket: 8 [ 510.046194][ T5801] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 510.072905][ T5801] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 510.104523][ T5801] usb 4-1: config 0 has no interface number 0 [ 510.130687][ T5801] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.177366][ T5801] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 510.232311][ T5801] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 510.288038][ T5801] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 510.324414][ T5801] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 510.360420][ T5801] usb 4-1: Product: syz [ 510.377019][ T5801] usb 4-1: Manufacturer: syz [ 510.402988][ T5801] usb 4-1: config 0 descriptor?? [ 510.427411][T11807] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 511.115733][ T5801] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input29 [ 511.468569][ T5739] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 511.470656][ T9390] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 511.650427][ T9390] usb 3-1: Using ep0 maxpacket: 16 [ 511.847534][ T9390] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1023 [ 511.876862][ T5739] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 511.893121][ T9390] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 16 [ 511.906999][ T9390] usb 3-1: config 1 interface 0 has no altsetting 0 [ 511.912297][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.915866][ T9390] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.931379][ T9390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.939851][ T9390] usb 3-1: Product: Є [ 511.944138][ T9390] usb 3-1: Manufacturer: 䀊 [ 511.948898][ T9390] usb 3-1: SerialNumber: ঔ緅킂犰懁錭㵷〩‥嵹龂닶抎嗐埻鈑䆃﨎崏ᄹ䊂鲻ὂ雌婭릨豈왞儶苲ﳓ䚎㾮讃풌㣊לᜎᢶ뼜蜝ᒋ㟓盨퓫㥊㭇鯯퇬ꚽ什ᗃ奭ჵ鬍꣏쭀뒆鋩ᥬ㌤杽鞦ᶕ㬮眸৩퓠Ⅺ썸乫뼭ుꞤ砇虿䑲䝝葨랊聟 [ 511.952631][ T5739] usb 1-1: config 0 descriptor?? [ 512.006234][T11819] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 512.046521][ T5739] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 512.053092][T11819] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 512.866010][ T9390] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 513.092221][ T9390] usb 3-1: USB disconnect, device number 51 [ 513.646068][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 513.655653][ T5717] usb 4-1: USB disconnect, device number 61 [ 513.984272][ T5739] gp8psk: usb in 128 operation failed. [ 514.014230][ T5739] gp8psk: usb in 137 operation failed. [ 514.036187][ T5739] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 514.066168][ T5739] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 514.097829][ T5739] usb 1-1: USB disconnect, device number 58 [ 514.218903][ T9390] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 514.409810][ T9403] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 514.448912][ T9390] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.493574][ T9390] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 514.664160][ T9403] usb 4-1: Using ep0 maxpacket: 32 [ 514.690095][ T9390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.746089][ T9403] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 514.771092][ T9403] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 514.781078][ T9403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.781181][ T9390] usb 2-1: config 0 descriptor?? [ 514.789679][ T9403] usb 4-1: Product: syz [ 514.838336][ T9403] usb 4-1: Manufacturer: syz [ 514.850747][ T9403] usb 4-1: SerialNumber: syz [ 514.870627][ T9390] pwc: Askey VC010 type 2 USB webcam detected. [ 515.358111][ T9390] pwc: recv_control_msg error -32 req 02 val 2b00 [ 515.432139][ T9390] pwc: recv_control_msg error -32 req 02 val 2700 [ 515.466233][ T9390] pwc: recv_control_msg error -32 req 02 val 2c00 [ 515.497937][ T9390] pwc: recv_control_msg error -32 req 04 val 1000 [ 515.537611][ T9390] pwc: recv_control_msg error -32 req 04 val 1300 [ 515.576495][ T9390] pwc: recv_control_msg error -32 req 04 val 1400 [ 515.620470][ T9390] pwc: recv_control_msg error -32 req 02 val 2000 [ 515.656110][ T9390] pwc: recv_control_msg error -32 req 02 val 2100 [ 515.695651][ T9390] pwc: recv_control_msg error -32 req 04 val 1500 [ 515.708562][T11842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.738235][ T9390] pwc: recv_control_msg error -32 req 02 val 2500 [ 516.004093][ T9390] pwc: recv_control_msg error -71 req 02 val 2600 [ 516.034823][ T9390] pwc: recv_control_msg error -71 req 02 val 2900 [ 516.062467][ T9390] pwc: recv_control_msg error -71 req 02 val 2800 [ 516.092279][ T9390] pwc: recv_control_msg error -71 req 04 val 1100 [ 516.127000][ T9390] pwc: recv_control_msg error -71 req 04 val 1200 [ 516.164493][ T9390] pwc: Registered as video103. [ 516.168911][ T9403] usb 4-1: BAAD HEADPHONE p_chmask mismatch [ 516.171326][ T9390] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 516.236829][ T9390] usb 2-1: USB disconnect, device number 52 [ 516.435319][ T9403] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 516.486621][ T9403] usb 4-1: USB disconnect, device number 62 [ 516.562575][ T5869] udevd[5869]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.760707][ T3288] Bluetooth: (null): Invalid header checksum [ 516.875823][ T9931] Bluetooth: (null): Invalid header checksum [ 516.887798][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 516.925316][T11879] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1625'. [ 517.006383][ T9931] Bluetooth: (null): Invalid header checksum [ 517.324772][ T5717] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 517.495625][ T5717] usb 5-1: device descriptor read/64, error -71 [ 517.810388][T11890] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1629'. [ 518.072321][ T5717] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 518.564350][ T5717] usb 5-1: device descriptor read/64, error -71 [ 518.693058][ T5717] usb usb5-port1: attempt power cycle [ 519.105362][T11908] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 519.111924][T11908] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 519.141146][ T9390] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 519.148799][ T5717] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 519.176484][T11908] vhci_hcd vhci_hcd.0: Device attached [ 519.185472][ T5717] usb 5-1: device descriptor read/8, error -71 [ 519.333454][ T9390] usb 4-1: Using ep0 maxpacket: 8 [ 519.346880][ T9390] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 519.366112][ T5739] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 519.376003][ T9390] usb 4-1: config 179 has no interface number 0 [ 519.386326][ T9390] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 519.411701][ T9390] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 519.429899][ T5801] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 519.452658][ T9390] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 134, changing to 11 [ 519.464594][ T5717] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 519.476595][ T30] audit: type=1400 audit(1777700861.828:1222): avc: denied { append } for pid=11916 comm="syz.1.1638" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 519.500373][ T9390] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 33543, setting to 1024 [ 519.513442][ T9390] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 519.527634][ T9390] usb 4-1: config 179 interface 65 has no altsetting 0 [ 519.534656][ T5717] usb 5-1: device descriptor read/8, error -71 [ 519.548670][ T9390] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 519.562845][ T5739] usb 3-1: config 0 has no interfaces? [ 519.568333][ T9390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.582587][ T5739] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.620964][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.650486][ T5739] usb 3-1: config 0 descriptor?? [ 519.665153][ T5717] usb usb5-port1: unable to enumerate USB device [ 519.677334][ T9390] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input31 [ 519.750988][ T4961] input input31: unable to receive magic message: -110 [ 519.796049][ T4961] input input31: unable to receive magic message: -32 [ 519.845897][ T4961] input input31: unable to receive magic message: -32 [ 519.887093][ T4961] input input31: unable to receive magic message: -32 [ 519.912829][ T9399] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 519.913081][ T5739] usb 3-1: USB disconnect, device number 52 [ 519.932383][T11909] usb 37-1: recv xbuf, 0 [ 519.951928][ T4961] input input31: unable to receive magic message: -32 [ 519.956571][ T3288] vhci_hcd vhci_hcd.2: stop threads [ 519.967589][ T4961] input input31: unable to receive magic message: -32 [ 519.977863][ T3288] vhci_hcd vhci_hcd.2: release socket [ 519.992985][ T3288] vhci_hcd vhci_hcd.2: disconnect device [ 520.004260][ T4961] input input31: unable to receive magic message: -32 [ 520.010800][ T5732] usb 4-1: USB disconnect, device number 63 [ 520.011386][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 520.025636][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 520.034268][ T5801] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 520.124044][ T9399] usb 1-1: Using ep0 maxpacket: 16 [ 520.133451][ T9399] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 520.145615][ T9399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.153745][ T9399] usb 1-1: Product: syz [ 520.158855][ T9399] usb 1-1: Manufacturer: syz [ 520.163556][ T9399] usb 1-1: SerialNumber: syz [ 520.172054][ T9399] usb 1-1: config 0 descriptor?? [ 520.407714][ T9399] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 520.465785][ T9399] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 520.545802][ T9399] usb 1-1: USB disconnect, device number 59 [ 523.097640][ T9399] libceph: connect (1)[c::]:6789 error -101 [ 523.134491][ T9399] libceph: mon0 (1)[c::]:6789 connect error [ 523.182383][T11941] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1644'. [ 523.291490][T11958] xfrm0: entered allmulticast mode [ 523.317575][ T9399] libceph: connect (1)[c::]:6789 error -101 [ 523.350769][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'. [ 523.363469][ T9399] libceph: mon0 (1)[c::]:6789 connect error [ 523.380901][T11936] ceph: No mds server is up or the cluster is laggy [ 523.555399][ T9399] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 523.775812][ T9399] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 523.817375][ T9399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.916089][ T9399] usb 3-1: config 0 descriptor?? [ 523.949431][ T9399] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 524.122731][T11970] random: crng reseeded on system resumption [ 524.354402][ T9399] gspca_sunplus: reg_w_riv err -71 [ 524.373356][ T9399] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 524.446011][ T9399] usb 3-1: USB disconnect, device number 53 [ 524.645594][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 524.949812][T11979] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 525.414596][ T9399] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 525.890296][ T9399] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.931239][ T9399] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 525.955912][ T9399] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.005658][ T9399] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.036034][ T9399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.070160][ T9399] usb 4-1: Product: syz [ 526.085637][ T9399] usb 4-1: Manufacturer: syz [ 526.105831][ T9399] usb 4-1: SerialNumber: syz [ 526.151468][ T9399] cdc_mbim 4-1:1.0: skipping garbage [ 526.178264][ T9399] cdc_mbim 4-1:1.0: skipping garbage [ 526.198427][ T9399] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 526.221878][ T9399] cdc_mbim 4-1:1.0: bind() failure [ 527.331636][T12003] FAULT_INJECTION: forcing a failure. [ 527.331636][T12003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.377020][T12003] CPU: 1 UID: 0 PID: 12003 Comm: syz.2.1662 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.377048][T12003] Tainted: [L]=SOFTLOCKUP [ 527.377055][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.377064][T12003] Call Trace: [ 527.377069][T12003] [ 527.377075][T12003] dump_stack_lvl+0x100/0x190 [ 527.377102][T12003] should_fail_ex.cold+0x5/0xa [ 527.377125][T12003] _copy_from_user+0x2e/0xd0 [ 527.377151][T12003] kstrtouint_from_user+0xd6/0x1d0 [ 527.377170][T12003] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 527.377186][T12003] ? __lock_acquire+0x4a5/0x2630 [ 527.377212][T12003] ? lock_acquire+0x1b1/0x370 [ 527.377237][T12003] proc_fail_nth_write+0x83/0x220 [ 527.377255][T12003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 527.377280][T12003] vfs_write+0x2aa/0x1070 [ 527.377299][T12003] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 527.377319][T12003] ? __pfx_vfs_write+0x10/0x10 [ 527.377336][T12003] ? __fget_files+0x215/0x3d0 [ 527.377362][T12003] ? __fget_files+0x21f/0x3d0 [ 527.377395][T12003] ksys_write+0x12a/0x250 [ 527.377412][T12003] ? __pfx_ksys_write+0x10/0x10 [ 527.377432][T12003] ? rcu_is_watching+0x12/0xc0 [ 527.377460][T12003] do_syscall_64+0x10b/0xf80 [ 527.377479][T12003] ? clear_bhb_loop+0x40/0x90 [ 527.377500][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.377517][T12003] RIP: 0033:0x7f51ad75d60e [ 527.377530][T12003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 527.377546][T12003] RSP: 002b:00007f51ab9ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 527.377562][T12003] RAX: ffffffffffffffda RBX: 00007f51ab9cd6c0 RCX: 00007f51ad75d60e [ 527.377572][T12003] RDX: 0000000000000001 RSI: 00007f51ab9cd0a0 RDI: 0000000000000006 [ 527.377581][T12003] RBP: 00007f51ab9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 527.377591][T12003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.377600][T12003] R13: 00007f51ada16128 R14: 00007f51ada16090 R15: 00007ffda6b12c38 [ 527.377623][T12003] [ 527.682304][T12007] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1663'. [ 527.806721][T12016] random: crng reseeded on system resumption [ 528.830588][ T5725] usb 4-1: USB disconnect, device number 64 [ 529.863317][T12051] random: crng reseeded on system resumption [ 530.864660][ T30] audit: type=1400 audit(1777700872.468:1223): avc: denied { relabelfrom } for pid=12062 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 530.969693][ T30] audit: type=1400 audit(1777700872.505:1224): avc: denied { relabelto } for pid=12062 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 531.291853][ T9399] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 531.496042][ T9399] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 531.516261][T12071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1682'. [ 531.534231][ T9399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.573336][ T9399] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.612036][ T9399] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 531.671388][ T9399] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 531.922002][ T5725] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 531.939853][ T9399] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 531.948605][ T9399] usb 2-1: Manufacturer: syz [ 531.962480][ T9399] usb 2-1: config 0 descriptor?? [ 532.182950][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.214996][ T5725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 532.252736][ T5725] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.287754][ T5725] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.319231][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.368972][ T5725] usb 1-1: Product: syz [ 532.382657][ T5725] usb 1-1: Manufacturer: syz [ 532.603387][ T9399] hid_parser_main: 28 callbacks suppressed [ 532.603574][ T9399] appleir 0003:05AC:8243.0015: unknown main item tag 0x0 [ 532.605358][ T5725] usb 1-1: SerialNumber: syz [ 532.757084][ T5725] cdc_mbim 1-1:1.0: skipping garbage [ 532.771256][ T9399] appleir 0003:05AC:8243.0015: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 532.787876][ T5725] cdc_mbim 1-1:1.0: skipping garbage [ 532.793595][ T5725] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 532.806813][ T5725] cdc_mbim 1-1:1.0: bind() failure [ 534.355407][T12102] Invalid logical block size (69376) [ 535.022445][ T5739] usb 1-1: USB disconnect, device number 60 [ 535.050260][T12101] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1691'. [ 535.077770][ T5725] usb 2-1: USB disconnect, device number 53 [ 535.525894][T12120] netlink: 'syz.2.1694': attribute type 2 has an invalid length. [ 536.524861][T12137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38469 sclass=netlink_route_socket pid=12137 comm=syz.2.1700 [ 537.052013][ T5725] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 537.542433][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 538.015286][ T5725] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 538.046839][ T5725] usb 1-1: config 179 has no interface number 0 [ 538.081258][ T5725] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 538.131904][ T5725] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 538.185398][ T5725] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 134, changing to 11 [ 538.237611][ T5725] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 33543, setting to 1024 [ 538.260809][ T5725] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 538.341399][ T5725] usb 1-1: config 179 interface 65 has no altsetting 0 [ 538.369279][ T5725] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 538.395188][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.414135][T12154] hub 9-0:1.0: USB hub found [ 538.575875][T12154] hub 9-0:1.0: 1 port detected [ 538.661591][ T5725] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input32 [ 538.771298][ T4961] input input32: unable to receive magic message: -110 [ 538.828514][ T4961] input input32: unable to receive magic message: -32 [ 538.917810][ T4961] input input32: unable to receive magic message: -32 [ 539.022702][ T5739] usb 1-1: USB disconnect, device number 61 [ 539.028884][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 539.028914][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 539.145795][ T30] audit: type=1400 audit(1777700880.226:1225): avc: denied { setopt } for pid=12163 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.099273][T12189] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1716'. [ 541.567316][ T30] audit: type=1400 audit(1777700882.500:1226): avc: denied { getopt } for pid=12194 comm="syz.1.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 541.755729][T12200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1715'. [ 654.073468][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 654.080443][ C1] rcu: (detected by 1, t=10502 jiffies, g=67285, q=190 ncpus=2) [ 654.088146][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294998864-4294988362), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 654.101493][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g67285 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 654.112671][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 654.122625][ C1] rcu: RCU grace-period kthread stack dump: [ 654.128495][ C1] task:rcu_preempt state:R running task stack:27848 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 654.141978][ C1] Call Trace: [ 654.145244][ C1] [ 654.148169][ C1] __schedule+0x10e9/0x6820 [ 654.152684][ C1] ? __pfx___schedule+0x10/0x10 [ 654.157526][ C1] ? find_held_lock+0x2b/0x80 [ 654.162192][ C1] ? schedule+0x2bf/0x390 [ 654.166519][ C1] schedule+0xdd/0x390 [ 654.170579][ C1] schedule_timeout+0x127/0x280 [ 654.175428][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 654.180798][ C1] ? __pfx_process_timeout+0x10/0x10 [ 654.186079][ C1] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 654.191875][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 654.197337][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 654.202095][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 654.207377][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 654.212832][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 654.217767][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 654.222960][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 654.228765][ C1] rcu_gp_kthread+0x179/0x230 [ 654.233435][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 654.238624][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 654.244426][ C1] ? __kthread_parkme+0x18c/0x230 [ 654.249444][ C1] ? kthread+0x13a/0x450 [ 654.253677][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 654.258868][ C1] kthread+0x370/0x450 [ 654.262929][ C1] ? __pfx_kthread+0x10/0x10 [ 654.267515][ C1] ret_from_fork+0x72b/0xd50 [ 654.272104][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 654.277209][ C1] ? __switch_to+0x800/0x1100 [ 654.281884][ C1] ? __pfx_kthread+0x10/0x10 [ 654.286468][ C1] ret_from_fork_asm+0x1a/0x30 [ 654.291245][ C1] [ 654.294250][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 654.300557][ C1] Sending NMI from CPU 1 to CPUs 0: [ 654.305749][ C0] NMI backtrace for cpu 0 [ 654.305763][ C0] CPU: 0 UID: 0 PID: 12199 Comm: syz.1.1718 Tainted: G L syzkaller #0 PREEMPT(full) [ 654.305782][ C0] Tainted: [L]=SOFTLOCKUP [ 654.305786][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 654.305794][ C0] RIP: 0010:trace_hrtimer_start+0x79/0x230 [ 654.305823][ C0] Code: 50 99 d7 90 e8 c8 04 82 00 48 0f a3 1d 60 56 e3 0e 0f 92 c3 31 ff 89 de e8 74 41 14 00 84 db 0f 85 42 01 00 00 e8 17 47 14 00 <5b> 5d 41 5c 41 5d 41 5e 41 5f e9 08 f8 98 09 e8 03 47 14 00 65 8b [ 654.305836][ C0] RSP: 0018:ffffc90000007e20 EFLAGS: 00000046 [ 654.305847][ C0] RAX: 0000000080010002 RBX: 0000000000000001 RCX: ffffffff81f4445b [ 654.305856][ C0] RDX: ffff888038ecca00 RSI: ffffffff81f44309 RDI: ffff888038ecca00 [ 654.305864][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 654.305872][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802a768300 [ 654.305880][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880b8428650 [ 654.305889][ C0] FS: 00007f51862ef6c0(0000) GS:ffff888124376000(0000) knlGS:0000000000000000 [ 654.305903][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.305912][ C0] CR2: 00007f78fbc4da10 CR3: 000000008237b000 CR4: 00000000003526f0 [ 654.305921][ C0] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 654.305928][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 654.305937][ C0] Call Trace: [ 654.305942][ C0] [ 654.305948][ C0] enqueue_hrtimer+0x84/0x2f0 [ 654.305968][ C0] __hrtimer_run_queues+0x73d/0xa00 [ 654.305991][ C0] hrtimer_interrupt+0x3e5/0x940 [ 654.306007][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 654.306027][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 654.306043][ C0] [ 654.306047][ C0] [ 654.306052][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.306067][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 654.306083][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 84 57 f6 48 89 df e8 be d4 57 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 a8 47 f6 65 8b 05 fe ae 7d 08 85 c0 74 16 5b [ 654.306095][ C0] RSP: 0018:ffffc9000e69f838 EFLAGS: 00000246 [ 654.306105][ C0] RAX: 0000000000000006 RBX: ffff88807781a080 RCX: 0000000000000040 [ 654.306113][ C0] RDX: 0000000000000000 RSI: ffffffff8df1fe73 RDI: ffffffff8c1c3600 [ 654.306122][ C0] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 654.306130][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888077819f10 [ 654.306138][ C0] R13: ffff88807781a0c0 R14: ffff888077819a68 R15: ffff88808239fa00 [ 654.306154][ C0] __unix_dgram_recvmsg+0x31a/0xc30 [ 654.306175][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 654.306193][ C0] ? __lock_acquire+0x4a5/0x2630 [ 654.306209][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 654.306232][ C0] ? iovec_from_user+0xda/0x140 [ 654.306253][ C0] unix_dgram_recvmsg+0xcd/0x100 [ 654.306272][ C0] ____sys_recvmsg+0x5b3/0x640 [ 654.306287][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 654.306306][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 654.306324][ C0] ? rcu_is_watching+0x12/0xc0 [ 654.306343][ C0] ? ___sys_recvmsg+0x177/0x1a0 [ 654.306357][ C0] ? kfree+0x1dd/0x6c0 [ 654.306373][ C0] ? irqentry_exit+0x246/0x790 [ 654.306389][ C0] ___sys_recvmsg+0x16a/0x1a0 [ 654.306406][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 654.306426][ C0] ? __pfx___might_resched+0x10/0x10 [ 654.306449][ C0] do_recvmmsg+0x301/0x760 [ 654.306466][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 654.306481][ C0] ? __sched_setaffinity+0x17c/0x280 [ 654.306497][ C0] ? do_futex+0x192/0x350 [ 654.306520][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 654.306539][ C0] __x64_sys_recvmmsg+0x22a/0x280 [ 654.306553][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 654.306567][ C0] ? rcu_is_watching+0x12/0xc0 [ 654.306587][ C0] do_syscall_64+0x10b/0xf80 [ 654.306603][ C0] ? clear_bhb_loop+0x40/0x90 [ 654.306618][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.306631][ C0] RIP: 0033:0x7f518539cdd9 [ 654.306643][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.306655][ C0] RSP: 002b:00007f51862ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 654.306667][ C0] RAX: ffffffffffffffda RBX: 00007f5185616090 RCX: 00007f518539cdd9 [ 654.306676][ C0] RDX: 00000000080002c1 RSI: 0000200000000040 RDI: 0000000000000009 [ 654.306684][ C0] RBP: 00007f5185432d69 R08: 0000000000000000 R09: 0000000000000000 [ 654.306692][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 654.306700][ C0] R13: 00007f5185616128 R14: 00007f5185616090 R15: 00007ffc48f2da08 [ 654.306714][ C0]