last executing test programs: 13.366187425s ago: executing program 1 (id=984): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x90, 0xf2, 0xc3, 0x10, 0x13d8, 0x22, 0xebaa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x40, 0x8, "", [{{0x9, 0x4, 0x42, 0x4, 0x0, 0xf5, 0xbe, 0xf4, 0x10}}]}}]}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a82}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_0\x00'}]}, 0x3c}}, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0xb0f01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="041208cbaaaaaaaaaa12087ebc3ac3276a8b1f8c0779da1d44"], 0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000730123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x1) r6 = syz_io_uring_setup(0x6cf2, &(0x7f0000000280)={0x0, 0x10008ec5, 0x200, 0x2, 0x10b}, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000440)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdbA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd97r0, 0x2, 0x56, 0x5}) cachestat(r1, &(0x7f00000002c0)={0x5, 0x3}, &(0x7f0000000340), 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r2, 0xc0106440, &(0x7f0000000280)={0x3, 0x6, &(0x7f0000000240)}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) 10.266761231s ago: executing program 1 (id=992): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff00}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(r2, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r4 = syz_pidfd_open(r2, 0x0) setns(r4, 0x24020000) syz_clone(0x930e1100, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) 9.786411277s ago: executing program 3 (id=993): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000600)={0x4, &(0x7f0000000700)=[{0x2e, '\x00', @buffer={"456f0504a2db40ce2475004f6c7d78c877704d931d1edda3ad25e2caee52fc90", 0x20}, 0xbe}, {0x21, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000000}, {0x1, @uvalue=0x66}, {0x2, @svalue=0x7}, {0x3, @uvalue=0x3}]}, 0x4}, {0xb, '\x00', @data=0x2, 0x4}, {0x1b, '\x00', @st={0x4, [{0x0, @svalue=0xe682}, {0x1, @svalue=0x1}, {0x3, @uvalue=0x4}, {0x2, @svalue=0x9}]}, 0x401}]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x19) ioctl$TCFLSH(r4, 0x540b, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x70bd6c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0xeebf}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0xc, 0x1}, 0xd475, 0x45, &(0x7f0000000040), 0x0, 0x4, 0x1, 0x0, 0x4, 0x4, &(0x7f00000000c0)="5e9bf6a97f36e6a66bd5cfcda715bd94804bcb2391c6adb06c0567c1da3d48fa8fa6e14e83d48d503137e0fbd35e31b361d902a249eaa35494fa036cac5d9a6a32ca539b30274a71eb9fad1bb8d6b3afa1726562aa81dbe4e786e225ffa2a606af5f366141501b96c118c1220541755911ee46c206ee"}) preadv2(r6, &(0x7f00000015c0)=[{&(0x7f0000001640)=""/35, 0x23}], 0x1, 0x10000, 0x0, 0x8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002480)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x110, 0x7}, 0xfffffffe, 0x4, 0x3, 0xffffffffffff52e9, r0, r0, 0x7}) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r7, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xfffff) 9.549233791s ago: executing program 0 (id=994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000004c0)={0x1, 0x8ba, 0xdf8b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x3, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x7c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x13ea069ce176458f}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="000128bd7000fddbdf251700000040000180080003000100000008000100", @ANYRES32=r7, @ANYBLOB="080003000000000008000300020000001400020068737230000000000000000000000000080003000200000018000180140002007465616d3000000000000000000000004c0001c01400020069705f7674693000000000000000000008000300010000001400020064766d72703100000000000000000000080003000200000008000300020000000800030001000000"], 0xb8}}, 0x2000c080) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r8, @ANYBLOB="00003a0000000000b70800008cc3879e6a1467ee5b000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080011da254197cc360c316d0000b7040000000000008500000003000000d6529bbb00000000fbeb479504af2c9ed551d768772eaf2ab8abd2e0a9453020ea5f5e8ce5557e23583e35d660ef44c7916f268c75ef5cf68ae84bf79e77c23d6a6f11d08088377575c6c55ab7390d36ddf246e6dc9fba8e8314"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30005001) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001280)={0x0, "02566967f0e70c0f08e16ead42f13f06"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000002280)={r11, 0xfc, 0x0, [0x8, 0xffffffffffffffff, 0x6, 0x8, 0x7], [0x4f4f, 0x7, 0xea8, 0x1, 0x2, 0x3, 0x7, 0x1f00000000, 0x2, 0x0, 0x8, 0x7, 0x9, 0x22800000000, 0x7fff, 0xc000, 0xc, 0x7, 0x2, 0xa2dd, 0xe, 0x9, 0x7fffffff, 0xfec0, 0x8, 0xfffffffffffffffb, 0x4, 0x1, 0x2, 0x8, 0x9, 0x1f, 0x9, 0x105307f8, 0x7fff, 0x6, 0xffffffffffffffff, 0xdcc9, 0x73db6ddf, 0xc3, 0xc404, 0x0, 0x7ff, 0x8, 0x3, 0x8, 0x9, 0x0, 0x3, 0xc7, 0x8, 0x7, 0x4, 0x8390, 0xffff, 0xd65b, 0x3, 0x1, 0x4, 0x9, 0x3, 0x9, 0x100000000, 0x1, 0x7, 0x1, 0x1, 0x5, 0x5, 0xfff, 0x4, 0x1000, 0x4, 0xb8, 0x1, 0x1652bfbe, 0x1ff, 0x4, 0x4c32, 0x3, 0x8001, 0x3, 0xfffffffffffffffc, 0x0, 0x5, 0x3, 0x9ca2, 0x1, 0xfffffffffffffffc, 0x6, 0x80515, 0x467, 0x0, 0x2, 0x5, 0x6, 0x100, 0xffffffffffffe785, 0x3ff, 0x2, 0x0, 0x6, 0xfffffffffffff88a, 0x6, 0x6, 0x3, 0x9, 0x5e00000, 0xffffffffffff0000, 0xce0, 0x2, 0xa, 0x844, 0x8, 0x7, 0x7, 0x401, 0x6, 0x8000000000000001, 0x200, 0x8]}) ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f00000005c0)=@string={0x2}}, {0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0603af06000000a8ae3c5eb7a855065462796e702484c7d66a519d6fe07e56523ca62cd046544f1695e00864a8f13c8aa590d1f7adb065cdd9a1b9ea1e3c34eee7"]}, {0x0, 0x0}, {0x0, 0x0}]}) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) 8.820619681s ago: executing program 3 (id=996): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="400501fbf0004f0b1406b9c96133b2e20c85fa9ffe5abee279c31a053d7250db7b88a0550c381a8ef5a97fc8d3e539a6385f949569709bf001afa7187e87d3c10ead2500000000a09b2ae71d9c1ff7c76d3dedd4caad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x298}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x88d9, 0x0, 0x0, 0x0, 0x4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}], 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0xa802, 0x1, 0x8, 0x26c}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], &(0x7f00000005c0), 0x2}, 0x20) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) setreuid(0x0, 0x0) setreuid(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000f0ff7912c800009600003600000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000b76000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r3, 0x4771f000) bind$l2tp(r5, 0x0, 0x0) getsockname$l2tp(r5, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) 8.355951434s ago: executing program 1 (id=997): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x109040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = io_uring_setup(0x36b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e55"]) faccessat2(r3, &(0x7f0000000040)='.\x00', 0x4, 0x300) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="64e3b950b9e6fc7470", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9402000090f900330a010d00000002000000000000000200"], 0x4a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000005) socket$nl_netfilter(0x10, 0x3, 0xc) 7.901828442s ago: executing program 4 (id=998): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x109040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = io_uring_setup(0x36b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e55"]) faccessat2(r3, &(0x7f0000000040)='.\x00', 0x4, 0x300) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="64e3b950b9e6fc7470", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9402000090f900330a010d00000002000000000000000200"], 0x4a) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4000005) socket$nl_netfilter(0x10, 0x3, 0xc) 7.008122859s ago: executing program 1 (id=999): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) sched_setattr(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000002580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x88, 0x0, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}}, 0x20000064) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000025c0)={0x2020}, 0xffffff57) 6.318725321s ago: executing program 4 (id=1000): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB="38e63ebac1a70621331679a65a86567cb6abab28bc7de6049c96b0d19036226a4ffdfee632b8851ed837982e11cb9b7476c16e6aed29f0cc648a0ead6541b9f7736d6a4d5c19db86a1f9295d586c2175a4307645409cd7cd6fc32897546f9f6c832d351589052d740634364e3a1abe8c8f7f01954374ae003d0f3c9f0d", @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="20000000f30900000000000000000000000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x31, 0x0, &(0x7f00000001c0)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x3, 0x1, 0x7fff, 0x9}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019c80)=""/102400, 0x19000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x4, 0x0, @val=@netkit}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) 6.074776994s ago: executing program 1 (id=1001): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r3, 0x3000003, 0x110, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018", @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000160a32df00000000000000000a00000a080007400000000009000100020073797a32000000000c0005400000000000000001080007400000000014000000030a01021180fbf1966810e207800006140000001100010000000000000000000000000a00"/132], 0x84}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) 5.432025467s ago: executing program 1 (id=1002): r0 = syz_open_dev$dri(0x0, 0x1, 0x400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), 0x0}, 0x20) socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) write$P9_RVERSION(r5, &(0x7f0000000100)=ANY=[@ANYRES64], 0x13) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0xb5c, 0x1, 0x2, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000380)="07ebca5125e8d64898d36e53d83bd993ca447b4abb17dad167b3aa1bfdfffd991db83a52b5310756c2d1870092f0da62a4b037d9ce00f74ae1998e10a071422e7f685f7a52c3233a07fcdd52d4d27fa73029e630488aaf6b2a25a53b812af3d8f6516ea54fd8409825c133035561a3446c70a987633f57935f511c59b50438a28161ab47d1a8e70e3f0ceae239873e793f06c26012dcfa29aea4e117ac0d1410f2189f11ab31bfbfb1158b6c98a2e1141b4da2b4408bca45d515a4f6466622d534bcb37fe9b952c4517a5c276997ae631143ad996741db47077bba1741a235a2475271e3", &(0x7f0000000480)=@tcp6=r3}, 0x20) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f00000000c0), 0x0, 0x0, r6}) 5.426912209s ago: executing program 0 (id=1003): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, 0x0, 0x7}, 0xc) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) socketpair(0x1f, 0x2, 0x7fff, &(0x7f0000000280)) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r4, 0x3) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x5, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0) syz_usb_control_io$uac2(r7, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_control_io$uac2(r7, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 5.30447902s ago: executing program 3 (id=1004): r0 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x2, 0x56, 0x5}) cachestat(r1, &(0x7f00000002c0)={0x5, 0x3}, &(0x7f0000000340), 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r2, 0xc0106440, &(0x7f0000000280)={0x3, 0x6, &(0x7f0000000240)}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) 5.080891618s ago: executing program 2 (id=1005): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000001ffffffff00"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f000005001b0000000000"], 0x100}}, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181200, 0x0) (async, rerun: 64) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r3, 0xc040583f, &(0x7f0000000140)={{@align=0x7, {0x1000, 0x82, 0x3b000, 0xdd8}}, {{[0x1, 0x8001, 0x8, 0xade5]}, 0x0, 0x0, 0x8001, 0x0, &(0x7f0000000100)=[{{@_ha_fsid={[0xe1, 0x4]}, {0x0, 0x7, 0x1ff, 0x1}}, 0x7, 0x0, '%:8\x00'}]}}) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9, 0x20010, r3, 0x7cf9f000) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r6 = epoll_create1(0x80000) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wakeup_count', 0x8000, 0x14) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) (async, rerun: 32) read$char_usb(r7, &(0x7f0000000340)=""/170, 0xaa) (async, rerun: 32) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r8, 0x1, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) (async) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) (async) close_range(r3, r0, 0x0) (async, rerun: 64) syz_usb_connect(0x4, 0x36, 0x0, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) 4.81708697s ago: executing program 2 (id=1006): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="1400000016000b63d25a80f77311d12022508ec9", 0x14}], 0x1}, 0x20000080) socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00679a3601ff050000000000000066f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x4, 0x980900, 0x3}) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x4, 0x980900, 0x3}) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80400, 0x1) fspick(r5, &(0x7f0000000200)='./file0\x00', 0x1) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40800) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) 4.47586571s ago: executing program 4 (id=1007): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x20048801) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x22) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="0000070071acff7f8ef8fe6c2e42879ae664f5b010dbd390c27c2587a991835b10eaa358c9ec7087ba262141ff42caa45eb46e25bb6e7a5c3210a937f034ba4bcd97c6ad953a1faa590a39866589f95ee29dc2bb001ff56fd2e44677b33a70251f76a8aa674f172dc71be5859ac7e07a4d0007f99393c36c98ae542b7417af57ef9d1c709bb7ecfe18a714c59d28605341a7070ab5b8c52ad31298afa80119a615b6dcaf", @ANYRESHEX=r7, @ANYBLOB=',\x00']) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.742067776s ago: executing program 4 (id=1008): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000004c0)={0x0, 0x8, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x38303553}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000340)) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0xefe, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x29a}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000400)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x23) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'bridge0\x00', &(0x7f0000000300)=@ethtool_link_settings={0x33, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x4, [0x0, 0x4, 0x0, 0xffffffff, 0xfffffffe, 0x1]}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x907, &(0x7f0000000500)) 2.694782832s ago: executing program 3 (id=1009): creat(&(0x7f0000000100)='./file0\x00', 0x7a) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000007c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/rt6_stats\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) tee(r2, r5, 0x400, 0x2) msgsnd(0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2800) read$FUSE(r4, 0x0, 0x0) 2.323997863s ago: executing program 2 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0xbd) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x103) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) socket$netlink(0x10, 0x3, 0x8000000004) 1.780548551s ago: executing program 2 (id=1011): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) sched_setattr(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000002580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x88, 0x0, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x88}}, 0x20000064) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x4008, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000025c0)={0x2020}, 0xffffff57) 1.26762009s ago: executing program 3 (id=1012): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) 1.183041688s ago: executing program 0 (id=1013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x20040804) recvmmsg(r2, &(0x7f0000000080), 0x0, 0x4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000381ceb62c88dd7a59d89df17e0beec48d15b64043a460329c99c2495600ad670add29f954b941861b3fb172d984c27326ca9fb82ca0327e7b34e84a47", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') syz_open_dev$usbfs(0x0, 0x76, 0x342) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f000001e800)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4b}}}}, 0x108) epoll_create1(0x0) 1.028493798s ago: executing program 4 (id=1014): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_vs_stats\x00') pread64(r0, &(0x7f00000005c0)=""/4109, 0x100d, 0x17) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x7f, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000004297e2d90a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000010900010073797a30000000000900030073797a320000000054000000060a010400000000000000000100000008000b400000000038000480340001800b000100657874686472000024000280080001400000000c0800034000020000080004400000002205"], 0xc8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000680"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 781.3168ms ago: executing program 2 (id=1015): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 473.281128ms ago: executing program 0 (id=1016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (fail_nth: 1) 394.718758ms ago: executing program 2 (id=1017): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0xb, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x2, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04d, 0xffff, 0x80000000, 0xbb2, 0xffffffffffffffff, 0x4000000006, 0x0, 0x100, 0x4, 0x2, 0x80005, 0x3, 0xc, 0xb}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0x6, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000780)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x4, 0xfffffffffffffffe, 0x40000000000, 0xffffffffffffffff, 0xffffffeffffffffe, 0x0, 0x6, 0x8, 0x0, 0x7, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x2000000000000003, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x8000000000000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x4, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x9, 0x1000000000, 0x0, 0x80000000000000, 0x8, 0xfffffffffffffffe, 0x200000000, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x4, 0x81, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c020900f0011200070100a0000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="2031060000001ea74a6e402c"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000040)=""/34, &(0x7f0000000080)=0x22) 0s ago: executing program 0 (id=1018): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000080)={0x2, 0x0, @c}, 0x29, r0) r1 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd, 0x401}, 0x10}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0xffffc, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x11f}, 0x2}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x80d1}, 0x0) r7 = syz_open_dev$dvb_demux(0x0, 0x3, 0x88100) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = dup(r8) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x0) ioctl$DVB_DEMUX_DMX_QBUF(r7, 0xc0186f3f, &(0x7f00000002c0)={0x2, 0x5, 0x60b4, 0x2, 0x1c, 0x8d}) fsopen(&(0x7f0000000100)='erofs\x00', 0x1) kernel console output (not intermixed with test programs): ummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 249.200247][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input27 [ 249.225641][ T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:33> initialized [ 249.267523][ T8274] vhci_hcd: connection closed [ 249.268596][ T8268] vhci_hcd: connection reset by peer [ 249.280944][ T137] vhci_hcd vhci_hcd.1: stop threads [ 249.296995][ T137] vhci_hcd vhci_hcd.1: release socket [ 249.304754][ T137] vhci_hcd vhci_hcd.1: disconnect device [ 249.313398][ T137] vhci_hcd vhci_hcd.1: stop threads [ 249.318741][ T137] vhci_hcd vhci_hcd.1: release socket [ 249.326860][ T137] vhci_hcd vhci_hcd.1: disconnect device [ 249.371589][ T8258] imon:vfd_write: invalid payload size [ 250.125667][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.132273][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.688795][ T8295] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.735682][ T24] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 250.808683][ T24] usb 3-1: USB disconnect, device number 33 [ 250.867879][ T30] audit: type=1400 audit(1781126048.415:1213): avc: denied { create } for pid=8302 comm="syz.2.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 250.917226][ T8303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.651'. [ 250.982523][ T8303] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.651'. [ 251.008749][ T30] audit: type=1400 audit(1781126048.445:1214): avc: denied { ioctl } for pid=8302 comm="syz.2.651" path="socket:[20458]" dev="sockfs" ino=20458 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 251.055967][ T804] usb 5-1: USB disconnect, device number 33 [ 251.060448][ T8303] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 251.176006][ T8295] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.313307][ T8295] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.404824][ T8295] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.429390][ T30] audit: type=1400 audit(1781126048.975:1215): avc: denied { name_connect } for pid=8307 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 251.507735][ T5851] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.530629][ T24] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 251.550765][ T5851] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.600250][ T5851] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.641821][ T5851] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.660603][ T24] usb 4-1: device descriptor read/64, error -71 [ 251.901310][ T24] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 252.041694][ T24] usb 4-1: device descriptor read/64, error -71 [ 252.165187][ T24] usb usb4-port1: attempt power cycle [ 252.951231][ T24] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 253.005261][ T24] usb 4-1: device descriptor read/8, error -71 [ 253.250676][ T24] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 253.331324][ T24] usb 4-1: device descriptor read/8, error -71 [ 253.440931][ T24] usb usb4-port1: unable to enumerate USB device [ 253.470582][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 253.640612][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 253.661122][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.697503][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 253.724568][ T30] audit: type=1400 audit(1781126051.275:1216): avc: denied { lock } for pid=8340 comm="syz.3.662" path="socket:[21777]" dev="sockfs" ino=21777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 253.750561][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.770881][ T10] usb 1-1: Product: syz [ 253.775118][ T10] usb 1-1: Manufacturer: syz [ 253.784549][ T10] usb 1-1: SerialNumber: syz [ 253.802889][ T10] usb 1-1: config 0 descriptor?? [ 253.880883][ T5706] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 254.537157][ T8355] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 254.543674][ T8355] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 254.551833][ T8355] vhci_hcd vhci_hcd.0: Device attached [ 254.568550][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.578677][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.693019][ T24] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 254.747530][ T8358] vhci_hcd: connection closed [ 254.747736][ T137] vhci_hcd vhci_hcd.1: stop threads [ 254.758374][ T8362] netlink: 'syz.2.666': attribute type 8 has an invalid length. [ 254.760813][ T10] kernel read not supported for file /504/net/fib_triestat (pid: 10 comm: kworker/0:1) [ 254.766657][ T137] vhci_hcd vhci_hcd.1: release socket [ 254.782189][ T137] vhci_hcd vhci_hcd.1: disconnect device [ 254.810063][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 254.842363][ T24] usb 5-1: device descriptor read/64, error -71 [ 254.853181][ T8362] binder_alloc: 8361: binder_alloc_buf, no vma [ 254.861737][ T8362] netlink: 'syz.2.666': attribute type 1 has an invalid length. [ 255.511066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 255.908616][ T30] audit: type=1400 audit(1781126053.455:1217): avc: denied { ioctl } for pid=8370 comm="syz.3.670" path="socket:[21351]" dev="sockfs" ino=21351 ioctlcmd=0x5871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 255.952399][ T24] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 256.090936][ T24] usb 5-1: device descriptor read/64, error -71 [ 256.224812][ T24] usb usb5-port1: attempt power cycle [ 256.364150][ T5348] usb usb36-port1: attempt power cycle [ 256.602021][ T5735] usb 1-1: USB disconnect, device number 27 [ 256.640899][ T24] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 256.671292][ T24] usb 5-1: device descriptor read/8, error -71 [ 256.689509][ T30] audit: type=1400 audit(1781126054.235:1218): avc: denied { create } for pid=8382 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 256.969668][ T5348] usb usb36-port1: unable to enumerate USB device [ 258.829038][ T30] audit: type=1400 audit(1781126055.725:1219): avc: denied { bind } for pid=8403 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 258.851798][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 258.945396][ T8411] netlink: 56 bytes leftover after parsing attributes in process `syz.1.681'. [ 259.270653][ T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 259.430651][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 259.456987][ T24] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 259.473970][ T24] usb 2-1: config 0 has no interface number 0 [ 259.500632][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 259.916000][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 259.932695][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 259.943433][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.971531][ T24] usb 2-1: Product: syz [ 259.978423][ T24] usb 2-1: Manufacturer: syz [ 259.994152][ T24] usb 2-1: SerialNumber: syz [ 260.029144][ T24] usb 2-1: config 0 descriptor?? [ 260.053115][ T8418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.062423][ T8418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.332636][ T8418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.340660][ T5706] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 260.375122][ T8418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.821942][ T5706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.834068][ T5706] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 260.887496][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.927814][ T5706] usb 1-1: Product: syz [ 260.939319][ T5706] usb 1-1: Manufacturer: syz [ 260.948317][ T5706] usb 1-1: SerialNumber: syz [ 260.959695][ T5706] usb 1-1: config 0 descriptor?? [ 261.192284][ T5706] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 261.216242][ T5706] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 261.231237][ T5706] usb 1-1: USB disconnect, device number 28 [ 261.581622][ T30] audit: type=1400 audit(1781126059.135:1220): avc: denied { shutdown } for pid=8449 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.894945][ T30] audit: type=1400 audit(1781126059.445:1221): avc: denied { read } for pid=8464 comm="syz.4.698" path="socket:[22632]" dev="sockfs" ino=22632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 262.000623][ T804] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 262.134067][ T8471] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 262.214574][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.700'. [ 262.251668][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 262.259489][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.280742][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.296957][ T8471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.403568][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.417989][ T804] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 262.427153][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.437685][ T804] usb 4-1: config 0 descriptor?? [ 262.716761][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 262.744905][ T24] asix 2-1:0.34: probe with driver asix failed with error -71 [ 262.777119][ T24] usb 2-1: USB disconnect, device number 37 [ 262.937670][ T804] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000C/input/input28 [ 264.144459][ T804] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000C/input/input29 [ 264.728174][ T8505] gfs2: error -5 reading superblock [ 265.358858][ T804] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 265.410083][ T30] audit: type=1400 audit(1781126062.955:1222): avc: denied { write } for pid=8509 comm="syz.3.708" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 265.446621][ T804] usb 4-1: USB disconnect, device number 35 [ 265.509850][ T30] audit: type=1400 audit(1781126062.955:1223): avc: denied { open } for pid=8509 comm="syz.3.708" path="/162/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 265.536106][ T8513] fido_id[8513]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 265.600163][ T30] audit: type=1400 audit(1781126062.965:1224): avc: denied { ioctl } for pid=8509 comm="syz.3.708" path="/162/file0/file0" dev="fuse" ino=64 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 265.684422][ T30] audit: type=1400 audit(1781126063.145:1225): avc: denied { connect } for pid=8515 comm="syz.1.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.749277][ T30] audit: type=1400 audit(1781126063.155:1226): avc: denied { write } for pid=8515 comm="syz.1.709" path="socket:[22203]" dev="sockfs" ino=22203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.019419][ T8535] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 266.020311][ T30] audit: type=1400 audit(1781126063.565:1227): avc: denied { getopt } for pid=8524 comm="syz.4.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.072879][ T8536] IPVS: stopping master sync thread 8535 ... [ 266.995517][ T30] audit: type=1400 audit(1781126064.545:1228): avc: denied { getopt } for pid=8556 comm="syz.0.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 267.140997][ T5714] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 267.206175][ T804] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 267.340817][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 267.355170][ T5714] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 267.382006][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.413114][ T5714] usb 2-1: config 0 descriptor?? [ 267.472053][ T804] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 267.497930][ T804] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 267.512270][ T804] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.521333][ T804] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.532893][ T804] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 267.568162][ T804] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 267.606669][ T804] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.625823][ T804] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.650899][ T804] usb 5-1: Product: syz [ 267.658299][ T8553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.659882][ T804] usb 5-1: Manufacturer: syz [ 267.687669][ T8555] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 267.692023][ T8553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.716900][ T804] cdc_wdm 5-1:1.0: skipping garbage [ 267.731215][ T804] cdc_wdm 5-1:1.0: skipping garbage [ 267.754314][ T5706] usb 2-1: USB disconnect, device number 38 [ 267.760318][ T30] audit: type=1400 audit(1781126065.305:1229): avc: denied { ioctl } for pid=8574 comm="syz.3.729" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x7504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 267.787660][ T804] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 267.802754][ T804] cdc_wdm 5-1:1.0: Unknown control protocol [ 267.808858][ T30] audit: type=1400 audit(1781126065.305:1230): avc: denied { map } for pid=8574 comm="syz.3.729" path="socket:[22321]" dev="sockfs" ino=22321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.860241][ T30] audit: type=1400 audit(1781126065.305:1231): avc: denied { read } for pid=8574 comm="syz.3.729" path="socket:[22321]" dev="sockfs" ino=22321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 267.924800][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 267.931510][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 267.938307][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 267.944910][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 267.951230][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 267.957832][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 267.964272][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 267.970864][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 267.977163][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 267.983746][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 267.990001][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 267.996594][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 267.999437][ T5714] usb 5-1: USB disconnect, device number 38 [ 268.002653][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 270.145128][ T8604] tipc: Trying to set illegal importance in message [ 271.285662][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 271.285673][ T30] audit: type=1400 audit(1781126068.835:1235): avc: denied { mount } for pid=8618 comm="syz.3.740" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 271.323490][ T8623] xt_connbytes: Forcing CT accounting to be enabled [ 271.340025][ T8623] set match dimension is over the limit! [ 271.470716][ T5714] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 271.834040][ T5714] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 177, changing to 7 [ 271.846248][ T5714] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 271.859936][ T5714] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.40 [ 271.871202][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.941386][ T8629] NILFS (nullb0): couldn't find nilfs on the device [ 272.267150][ T5714] usb 1-1: Product: syz [ 272.274464][ T5714] usb 1-1: Manufacturer: Ж [ 272.286874][ T5714] usb 1-1: SerialNumber: syz [ 272.924351][ T5714] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.953466][ T5714] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 272.973948][ T5714] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 272.981529][ T5714] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 272.997252][ T5714] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.096984][ T5714] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 273.126676][ T5714] usb 1-1: USB disconnect, device number 29 [ 273.179964][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.540937][ T30] audit: type=1400 audit(1781126071.085:1236): avc: denied { read } for pid=8649 comm="syz.0.750" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 273.613699][ T30] audit: type=1400 audit(1781126071.095:1237): avc: denied { open } for pid=8649 comm="syz.0.750" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 273.696136][ T30] audit: type=1400 audit(1781126071.095:1238): avc: denied { ioctl } for pid=8649 comm="syz.0.750" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 273.728065][ T30] audit: type=1400 audit(1781126071.185:1239): avc: denied { mount } for pid=8645 comm="syz.1.748" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 273.787829][ T30] audit: type=1400 audit(1781126071.235:1240): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 273.811697][ T30] audit: type=1400 audit(1781126071.235:1241): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 273.977908][ T8659] qnx6: unable to read the first superblock [ 274.004204][ T8660] tipc: Trying to set illegal importance in message [ 274.763215][ T30] audit: type=1400 audit(1781126071.495:1242): avc: denied { write } for pid=8653 comm="syz.0.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 275.971287][ T8678] hfs: can't find a HFS filesystem on dev nullb0 [ 277.445831][ T8685] random: crng reseeded on system resumption [ 277.455764][ T30] audit: type=1400 audit(1781126074.995:1243): avc: denied { read write } for pid=8683 comm="syz.2.758" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.530132][ T30] audit: type=1400 audit(1781126074.995:1244): avc: denied { ioctl open } for pid=8683 comm="syz.2.758" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 277.783336][ T8692] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 277.789956][ T8692] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 277.804163][ T8692] vhci_hcd vhci_hcd.0: Device attached [ 277.946369][ T30] audit: type=1400 audit(1781126075.045:1245): avc: denied { write } for pid=8683 comm="syz.2.758" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.232384][ T5734] usb 42-1: SetAddress Request (2) to port 0 [ 278.369614][ T5734] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 278.454427][ T8693] vhci_hcd: connection closed [ 278.484587][ T5851] vhci_hcd vhci_hcd.4: stop threads [ 278.510367][ T8698] comedi comedi0: aio_aio12_8: I/O base address or length out of range [ 278.611906][ T5851] vhci_hcd vhci_hcd.4: release socket [ 278.684534][ T5851] vhci_hcd vhci_hcd.4: disconnect device [ 278.965742][ T30] audit: type=1400 audit(1781126075.045:1246): avc: denied { remove_name } for pid=8683 comm="syz.2.758" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.988927][ T30] audit: type=1400 audit(1781126075.045:1247): avc: denied { unlink } for pid=8683 comm="syz.2.758" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 279.011904][ T30] audit: type=1400 audit(1781126075.325:1248): avc: denied { read } for pid=8683 comm="syz.2.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 279.089713][ T30] audit: type=1400 audit(1781126076.635:1249): avc: denied { mounton } for pid=8705 comm="syz.1.766" path="/147/file0" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 279.172266][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.766'. [ 279.261328][ T8713] trusted_key: encrypted_key: insufficient parameters specified [ 279.272694][ T8713] PKCS8: Unsupported PKCS#8 version [ 279.283940][ T8711] tipc: Trying to set illegal importance in message [ 279.883457][ T8716] trusted_key: encrypted_key: insufficient parameters specified [ 281.553472][ T8742] FAULT_INJECTION: forcing a failure. [ 281.553472][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.590633][ T8742] CPU: 1 UID: 0 PID: 8742 Comm: syz.0.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.590654][ T8742] Tainted: [L]=SOFTLOCKUP [ 281.590658][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 281.590664][ T8742] Call Trace: [ 281.590668][ T8742] [ 281.590673][ T8742] dump_stack_lvl+0x100/0x190 [ 281.590689][ T8742] should_fail_ex.cold+0x5/0xa [ 281.590705][ T8742] _copy_to_user+0x32/0xd0 [ 281.590720][ T8742] simple_read_from_buffer+0xcb/0x170 [ 281.590736][ T8742] proc_fail_nth_read+0x1af/0x230 [ 281.590748][ T8742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.590761][ T8742] ? rw_verify_area+0xce/0x6d0 [ 281.590772][ T8742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 281.590783][ T8742] vfs_read+0x1e4/0xb30 [ 281.590797][ T8742] ? __pfx_vfs_read+0x10/0x10 [ 281.590809][ T8742] ? __fget_files+0x215/0x3d0 [ 281.590826][ T8742] ? __fget_files+0x21f/0x3d0 [ 281.590844][ T8742] ksys_read+0x12a/0x250 [ 281.590856][ T8742] ? __pfx_ksys_read+0x10/0x10 [ 281.590869][ T8742] ? rcu_is_watching+0x12/0xc0 [ 281.590888][ T8742] do_syscall_64+0x115/0x870 [ 281.590903][ T8742] ? clear_bhb_loop+0x40/0x90 [ 281.590916][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.590927][ T8742] RIP: 0033:0x7f1c73b5d68e [ 281.590937][ T8742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 281.590947][ T8742] RSP: 002b:00007f1c74b2cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 281.590958][ T8742] RAX: ffffffffffffffda RBX: 00007f1c74b2d6c0 RCX: 00007f1c73b5d68e [ 281.590966][ T8742] RDX: 000000000000000f RSI: 00007f1c74b2d0a0 RDI: 0000000000000005 [ 281.590972][ T8742] RBP: 00007f1c74b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 281.590980][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.590987][ T8742] R13: 00007f1c73e16038 R14: 00007f1c73e15fa0 R15: 00007ffcb1d46e18 [ 281.591001][ T8742] [ 281.794916][ T804] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 281.992151][ T804] usb 3-1: Using ep0 maxpacket: 8 [ 282.084484][ T804] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 282.093040][ T804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.103601][ T804] usb 3-1: config 0 has no interfaces? [ 282.114478][ T804] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 282.123804][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.133869][ T804] usb 3-1: Product: syz [ 282.140729][ T804] usb 3-1: Manufacturer: syz [ 282.552418][ T804] usb 3-1: SerialNumber: syz [ 282.567754][ T804] usb 3-1: config 0 descriptor?? [ 282.962975][ T8754] tipc: Trying to set illegal importance in message [ 283.560781][ T5734] usb 42-1: device descriptor read/8, error -110 [ 283.667110][ T30] audit: type=1326 audit(1781126081.215:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c73b9ce59 code=0x7ffc0000 [ 283.759666][ T30] audit: type=1326 audit(1781126081.215:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c73b9ce59 code=0x7ffc0000 [ 283.816475][ T30] audit: type=1326 audit(1781126081.265:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1c73b9ce59 code=0x7ffc0000 [ 283.862525][ T30] audit: type=1326 audit(1781126081.305:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c73b9ce59 code=0x7ffc0000 [ 283.903629][ T30] audit: type=1326 audit(1781126081.305:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c73b9ce59 code=0x7ffc0000 [ 283.967259][ T30] audit: type=1326 audit(1781126081.405:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f1c73b9ce59 code=0x7ffc0000 [ 283.975378][ T5734] usb usb42-port1: attempt power cycle [ 284.048751][ T30] audit: type=1326 audit(1781126081.405:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c73b9ce59 code=0x7ffc0000 [ 284.159490][ T30] audit: type=1326 audit(1781126081.405:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1c73b5d68e code=0x7ffc0000 [ 284.249558][ T30] audit: type=1326 audit(1781126081.405:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c73b5d68e code=0x7ffc0000 [ 284.341121][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 284.447060][ T804] usb 3-1: USB disconnect, device number 34 [ 284.458795][ T30] audit: type=1326 audit(1781126081.635:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8756 comm="syz.0.779" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c73b9ce59 code=0x7ffc0000 [ 284.641392][ T5734] usb usb42-port1: unable to enumerate USB device [ 285.984099][ T10] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 286.349609][ T8785] vcan0: tx drop: invalid sa for name 0x0000000000000010 [ 286.972454][ T10] usb 1-1: unable to read config index 3 descriptor/all [ 286.982755][ T10] usb 1-1: can't read configurations, error -71 [ 287.138181][ T8793] evm: overlay not supported [ 287.170759][ T5623] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 287.184694][ T8795] netlink: 112 bytes leftover after parsing attributes in process `syz.0.791'. [ 287.228407][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 287.262363][ T8795] netlink: 'syz.0.791': attribute type 30 has an invalid length. [ 287.276058][ T8797] CIFS: VFS: UNC: path must begin with // or \\ [ 287.291401][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 287.310383][ T8797] Malformed UNC in devname [ 287.310383][ T8797] [ 287.317206][ T8798] netlink: 'syz.0.791': attribute type 30 has an invalid length. [ 287.336578][ T8797] CIFS: VFS: Malformed UNC in devname [ 287.347195][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.363223][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.402257][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.431449][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.446147][ T8795] Sensor A: ================= START STATUS ================= [ 287.460948][ T8795] Sensor A: Test Pattern: 75% Colorbar [ 287.495786][ T8795] Sensor A: Show Information: All [ 287.515280][ T8795] Sensor A: Vertical Flip: false [ 287.532384][ T8795] Sensor A: Horizontal Flip: false [ 287.546204][ T8795] Sensor A: Brightness: 128 [ 287.561539][ T8795] Sensor A: Contrast: 128 [ 287.579720][ T8795] Sensor A: Hue: 0 [ 287.591914][ T8795] Sensor A: Saturation: 128 [ 287.604290][ T8795] Sensor A: Pixel Rate: 160000000 [ 287.621194][ T8795] Sensor A: Horizontal Blanking: 800 [ 287.641690][ T8795] Sensor A: Vertical Blanking: 3223 [ 287.651207][ T5734] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 287.666213][ T8795] Sensor A: ================== END STATUS ================== [ 288.372624][ T5734] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 289.578428][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 289.668561][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.749353][ T5734] usb 4-1: Product: syz [ 289.753694][ T5734] usb 4-1: Manufacturer: syz [ 289.758775][ T5734] usb 4-1: SerialNumber: syz [ 289.765868][ T5734] usb 4-1: config 0 descriptor?? [ 289.801005][ T5734] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 289.852128][ T5734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.275389][ T8819] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 290.282016][ T8819] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 290.292772][ T8819] vhci_hcd vhci_hcd.0: Device attached [ 290.379590][ T5734] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 290.782275][ T8820] vhci_hcd: connection closed [ 291.289781][ T5734] usb 4-1: media controller created [ 291.300137][ T5851] vhci_hcd vhci_hcd.0: stop threads [ 291.329458][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.363623][ T5851] vhci_hcd vhci_hcd.0: release socket [ 291.433150][ T5851] vhci_hcd vhci_hcd.0: disconnect device [ 291.565760][ T10] usb 34-1: SetAddress Request (2) to port 0 [ 292.587877][ T10] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 293.032512][ T8833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.800'. [ 293.130916][ T5734] DVB: Unable to find symbol mt352_attach() [ 293.910198][ T5734] DVB: Unable to find symbol nxt6000_attach() [ 293.917410][ T5734] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 293.929438][ T5734] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 293.946351][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 293.946366][ T30] audit: type=1326 audit(1781126091.485:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8830 comm="syz.2.800" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11be59ce59 code=0x7fc00000 [ 293.980112][ T5734] dvb-usb: schedule remote query interval to 1000 msecs. [ 293.987280][ T5734] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 293.997503][ T5734] dvb-usb: bulk message failed: -22 (7/0) [ 294.003410][ T5734] dvb-usb: bulk message failed: -22 (7/0) [ 294.014593][ T5734] usb 4-1: USB disconnect, device number 36 [ 294.252905][ T8852] syzkaller0: entered promiscuous mode [ 294.289084][ T8852] syzkaller0: entered allmulticast mode [ 294.360719][ T5714] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 294.612041][ T5734] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 294.678559][ T8865] netlink: 120 bytes leftover after parsing attributes in process `syz.1.806'. [ 294.736461][ T8865] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 294.762407][ T8865] netlink: 64 bytes leftover after parsing attributes in process `syz.1.806'. [ 294.787782][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.902411][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.912449][ T5714] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 294.922395][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.933913][ T5714] usb 3-1: config 0 descriptor?? [ 295.920539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 296.020541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 296.160534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 296.170527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 296.250534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 296.397844][ T30] audit: type=1400 audit(1781126093.755:1291): avc: denied { egress } for pid=0 comm="swapper/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 296.397909][ T30] audit: type=1400 audit(1781126093.755:1292): avc: denied { sendto } for pid=0 comm="swapper/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 296.430268][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 296.832445][ T5714] usb 3-1: string descriptor 0 read error: -22 [ 296.950582][ T5706] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 297.030660][ T5714] uclogic 0003:256C:006D.000D: interface is invalid, ignoring [ 297.062911][ T5714] usb 3-1: USB disconnect, device number 35 [ 297.180357][ T30] audit: type=1400 audit(1781126094.725:1293): avc: denied { ioctl } for pid=8888 comm="syz.3.814" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.192366][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 297.239165][ T5706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.254143][ T5706] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 297.283787][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.334596][ T5706] usb 2-1: config 0 descriptor?? [ 297.354811][ T5706] hso 2-1:0.0: Not our interface [ 297.822226][ T10] usb 34-1: device descriptor read/8, error -110 [ 298.325626][ T10] usb usb34-port1: attempt power cycle [ 298.469185][ T8882] trusted_key: encrypted_key: insufficient parameters specified [ 298.486096][ T5706] usb 2-1: USB disconnect, device number 39 [ 298.606242][ T30] audit: type=1400 audit(1781126096.145:1294): avc: denied { open } for pid=8908 comm="syz.2.819" path="/dev/ptyq8" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 298.760785][ T5714] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 298.901957][ T10] usb usb34-port1: unable to enumerate USB device [ 298.930127][ T5714] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 298.950621][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.978395][ T5714] usb 1-1: Product: syz [ 298.994617][ T5714] usb 1-1: Manufacturer: syz [ 299.016218][ T5714] usb 1-1: SerialNumber: syz [ 299.053916][ T5714] usb 1-1: config 0 descriptor?? [ 299.519317][ T8918] overlayfs: failed lookup in lower (newroot/159, name='file0', err=-40): overlapping layers [ 300.455327][ T5714] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 300.767502][ T5714] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 300.836548][ T5714] usb 1-1: USB disconnect, device number 32 [ 300.928630][ T30] audit: type=1400 audit(1781126098.475:1295): avc: denied { read } for pid=5277 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 300.950673][ T5714] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 301.066277][ T5277] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 301.120237][ T5714] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 301.584267][ T8930] team0 (unregistering): Port device team_slave_0 removed [ 301.679777][ T8930] team0 (unregistering): Port device team_slave_1 removed [ 301.892247][ T5714] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 302.060880][ T5714] usb 1-1: Using ep0 maxpacket: 8 [ 302.092495][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.129097][ T5714] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 302.165128][ T5714] usb 1-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 302.183903][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.203457][ T5714] usb 1-1: Product: syz [ 302.216634][ T5714] usb 1-1: Manufacturer: syz [ 302.236065][ T5714] usb 1-1: SerialNumber: syz [ 302.433479][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 302.505330][ T5714] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 302.533531][ T5714] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 302.638641][ T5714] usb 1-1: USB disconnect, device number 33 [ 302.679434][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.791923][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 303.194995][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 303.207448][ T10] usb 5-1: config 0 has no interfaces? [ 303.224024][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 303.249325][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.324341][ T8965] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 303.330960][ T8965] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 303.339258][ T8965] vhci_hcd vhci_hcd.0: Device attached [ 303.620726][ T24] usb 40-1: SetAddress Request (6) to port 0 [ 303.632649][ T24] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 303.838897][ T8966] vhci_hcd: connection reset by peer [ 303.847560][ T5851] vhci_hcd vhci_hcd.3: stop threads [ 303.862995][ T5851] vhci_hcd vhci_hcd.3: release socket [ 303.877356][ T5851] vhci_hcd vhci_hcd.3: disconnect device [ 304.570701][ T10] usb 5-1: Product: syz [ 304.582519][ T10] usb 5-1: Manufacturer: syz [ 304.587411][ T10] usb 5-1: SerialNumber: syz [ 304.594788][ T10] usb 5-1: config 0 descriptor?? [ 304.658576][ T8973] PKCS8: Unsupported PKCS#8 version [ 304.697821][ T8973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.767354][ T8977] kvm: emulating exchange as write [ 304.793296][ T8972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.165754][ T5706] usb 5-1: USB disconnect, device number 39 [ 305.760720][ T5735] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 305.926834][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.941190][ T5734] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 305.982248][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.170265][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.216359][ T10] Process accounting resumed [ 306.305895][ T5735] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 306.319892][ T5734] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.329983][ T5734] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 306.339119][ T5735] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 306.350471][ T5734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.362656][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.382515][ T5735] usb 2-1: config 0 descriptor?? [ 306.387572][ T5734] usb 1-1: config 0 descriptor?? [ 306.896115][ T5735] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 307.156393][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.166896][ T9012] Process accounting resumed [ 307.179953][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.610673][ T5706] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 307.705713][ T9024] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 307.991362][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 308.013146][ T5706] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 308.046338][ T5734] usbhid 1-1:0.0: can't add hid device: -71 [ 308.056654][ T5734] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 308.057344][ T5706] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.109090][ T5734] usb 1-1: USB disconnect, device number 34 [ 308.118758][ T5706] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.123793][ T30] audit: type=1400 audit(1781126105.665:1296): avc: denied { bind } for pid=8987 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 308.196092][ T5706] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.214109][ T5706] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.248689][ T30] audit: type=1400 audit(1781126105.795:1297): avc: denied { search } for pid=5277 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.251154][ T5706] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.282535][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.319411][ T10] usb 2-1: USB disconnect, device number 40 [ 308.322748][ T30] audit: type=1400 audit(1781126105.795:1298): avc: denied { search } for pid=5277 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.426182][ T30] audit: type=1400 audit(1781126105.795:1299): avc: denied { search } for pid=5277 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.505738][ T30] audit: type=1400 audit(1781126105.795:1300): avc: denied { read } for pid=5277 comm="dhcpcd" name="n33" dev="tmpfs" ino=5099 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.573097][ T5706] usb 3-1: GET_CAPABILITIES returned 0 [ 308.593067][ T5706] usbtmc 3-1:16.0: can't read capabilities [ 308.636264][ T30] audit: type=1400 audit(1781126105.825:1301): avc: denied { open } for pid=5277 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=5099 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.699436][ T24] usb 40-1: device descriptor read/8, error -110 [ 308.727525][ T30] audit: type=1400 audit(1781126105.825:1302): avc: denied { getattr } for pid=5277 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=5099 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 308.827684][ T30] audit: type=1400 audit(1781126106.065:1303): avc: denied { read } for pid=9036 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.883563][ T30] audit: type=1400 audit(1781126106.065:1304): avc: denied { read open } for pid=9036 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.166372][ T30] audit: type=1400 audit(1781126106.065:1305): avc: denied { getattr } for pid=9036 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.371629][ T24] usb usb40-port1: attempt power cycle [ 310.078666][ T5799] usb 3-1: USB disconnect, device number 36 [ 310.174725][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.863'. [ 310.191456][ T24] usb usb40-port1: unable to enumerate USB device [ 310.230169][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.862'. [ 310.511381][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 311.253116][ T5799] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 311.445377][ T5803] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 311.472894][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 311.563941][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.569889][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 311.570392][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.582384][ T10] usb 1-1: config 0 has no interface number 0 [ 311.603188][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.820632][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 311.835146][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.850197][ T5799] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 311.865934][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 311.884122][ T5799] usb 3-1: config 0 has no interface number 0 [ 311.893071][ T5803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.903343][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.913769][ T5799] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.924362][ T10] usb 1-1: Product: syz [ 311.928715][ T5803] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 311.939102][ T10] usb 1-1: Manufacturer: syz [ 311.944998][ T10] usb 1-1: SerialNumber: syz [ 311.950235][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.960825][ T5799] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 311.971241][ T10] usb 1-1: config 0 descriptor?? [ 311.978097][ T5803] usb 2-1: config 0 descriptor?? [ 311.986742][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 311.996943][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.017197][ T5799] usb 3-1: Product: syz [ 312.022141][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 312.030725][ T5799] usb 3-1: Manufacturer: syz [ 312.039006][ T5799] usb 3-1: SerialNumber: syz [ 312.063418][ T5799] usb 3-1: config 0 descriptor?? [ 312.115785][ T5799] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 312.126967][ T5799] em28xx 3-1:0.132: Video interface 132 found: [ 312.395049][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 312.432387][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.443249][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.178087][ T5799] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 313.542651][ T9091] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 313.565623][ T5803] usbhid 2-1:0.0: can't add hid device: -71 [ 313.594126][ T5803] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 313.615491][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 313.634895][ T5803] usb 2-1: USB disconnect, device number 41 [ 313.660685][ T10] em28xx 1-1:0.132: board has no eeprom [ 313.719837][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 313.719852][ T30] audit: type=1400 audit(1781126111.265:1318): avc: denied { append } for pid=9120 comm="syz.3.870" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 313.720937][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 313.785246][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 313.792620][ T5706] em28xx 1-1:0.132: Registering V4L2 extension [ 313.833447][ T10] usb 1-1: USB disconnect, device number 35 [ 313.879875][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 313.919666][ T5799] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 313.940097][ T9080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.960583][ T5799] em28xx 3-1:0.132: board has no eeprom [ 313.969089][ T9080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.176617][ T9080] trusted_key: encrypted_key: insufficient parameters specified [ 314.189470][ T9132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.873'. [ 314.231742][ T30] audit: type=1400 audit(1781126111.775:1319): avc: denied { ioctl } for pid=9131 comm="syz.0.873" path="socket:[25811]" dev="sockfs" ino=25811 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.281633][ T5799] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 314.307871][ T5799] em28xx 3-1:0.132: analog set to bulk mode. [ 314.347749][ T5799] usb 3-1: USB disconnect, device number 37 [ 314.387045][ T5799] em28xx 3-1:0.132: Disconnecting em28xx [ 314.403395][ T5706] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 314.428945][ T5706] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 314.452649][ T5706] em28xx 1-1:0.132: No AC97 audio processor [ 314.477771][ T5706] usb 1-1: Decoder not found [ 314.484110][ T5706] em28xx 1-1:0.132: failed to create media graph [ 314.491446][ T5706] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 314.506409][ T5706] em28xx 1-1:0.132: Remote control support is not available for this card. [ 314.522444][ T5803] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 314.533779][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 315.478027][ T5803] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.491270][ T5803] usb 5-1: config 0 has no interfaces? [ 315.499946][ T5803] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 315.519044][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.537250][ T9143] netlink: 76 bytes leftover after parsing attributes in process `syz.1.876'. [ 315.585138][ T5803] usb 5-1: Product: syz [ 315.605877][ T5803] usb 5-1: Manufacturer: syz [ 315.635864][ T5803] usb 5-1: SerialNumber: syz [ 315.665372][ T5803] usb 5-1: config 0 descriptor?? [ 315.754112][ T9148] netlink: 'syz.0.877': attribute type 10 has an invalid length. [ 315.763593][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 315.785752][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 315.789104][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.817795][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 315.847591][ T9] usb 3-1: Decoder not found [ 315.865441][ T9] em28xx 3-1:0.132: failed to create media graph [ 315.880131][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 315.892078][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.899446][ T9148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.917970][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 315.930304][ T9134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.949325][ T10] em28xx 1-1:0.132: Closing input extension [ 315.955995][ T9134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.969297][ T9148] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 315.971714][ T5799] em28xx 3-1:0.132: Closing input extension [ 316.002836][ T5623] Bluetooth: hci2: Unknown advertising packet type: 0x53 [ 316.002864][ T5623] Bluetooth: hci2: adv larger than maximum supported [ 316.002911][ T10] em28xx 1-1:0.132: Freeing device [ 316.012772][ T5623] Bluetooth: hci2: Malformed LE Event: 0x0d [ 316.020118][ T9134] syz.4.874: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 316.038956][ T30] audit: type=1400 audit(1781126113.575:1320): avc: denied { append } for pid=9133 comm="syz.4.874" name="demux0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 316.103130][ T9134] ,cpuset=/,mems_allowed=0-1 [ 316.109930][ T5799] em28xx 3-1:0.132: Freeing device [ 316.119291][ T9134] CPU: 0 UID: 0 PID: 9134 Comm: syz.4.874 Tainted: G L syzkaller #0 PREEMPT(full) [ 316.119322][ T9134] Tainted: [L]=SOFTLOCKUP [ 316.119329][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.119341][ T9134] Call Trace: [ 316.119348][ T9134] [ 316.119355][ T9134] dump_stack_lvl+0x100/0x190 [ 316.119383][ T9134] warn_alloc.cold+0x95/0x1c1 [ 316.119405][ T9134] ? __pfx_warn_alloc+0x10/0x10 [ 316.119432][ T9134] ? do_syscall_64+0x115/0x870 [ 316.119456][ T9134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.119481][ T9134] ? __lock_acquire+0x4a5/0x2630 [ 316.119505][ T9134] ? find_held_lock+0x2b/0x80 [ 316.119521][ T9134] ? avc_has_extended_perms+0x33a/0x1080 [ 316.119542][ T9134] ? avc_has_extended_perms+0x33a/0x1080 [ 316.119570][ T9134] __vmalloc_node_range_noprof+0x136c/0x1630 [ 316.119600][ T9134] ? rcu_is_watching+0x12/0xc0 [ 316.119627][ T9134] ? trace_contention_end+0x122/0x170 [ 316.119651][ T9134] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 316.119682][ T9134] ? dvb_demux_do_ioctl+0x929/0x1200 [ 316.119713][ T9134] ? find_held_lock+0x2b/0x80 [ 316.119731][ T9134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.119754][ T9134] ? __pfx___mutex_lock+0x10/0x10 [ 316.119784][ T9134] ? tomoyo_path_number_perm+0x188/0x580 [ 316.119815][ T9134] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 316.119843][ T9134] __vmalloc_node_noprof+0xad/0xf0 [ 316.119867][ T9134] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 316.119899][ T9134] dvb_demux_do_ioctl+0x9e0/0x1200 [ 316.119931][ T9134] ? do_vfs_ioctl+0x226/0x13e0 [ 316.119954][ T9134] dvb_usercopy+0x167/0x340 [ 316.119980][ T9134] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 316.120011][ T9134] ? __pfx_dvb_usercopy+0x10/0x10 [ 316.120048][ T9134] ? selinux_file_ioctl+0x13b/0x290 [ 316.120076][ T9134] ? selinux_file_ioctl+0xb6/0x290 [ 316.120106][ T9134] dvb_demux_ioctl+0x29/0x40 [ 316.120132][ T9134] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 316.120159][ T9134] __x64_sys_ioctl+0x18e/0x210 [ 316.120180][ T9134] do_syscall_64+0x115/0x870 [ 316.120203][ T9134] ? clear_bhb_loop+0x40/0x90 [ 316.120226][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.120246][ T9134] RIP: 0033:0x7fbc8c79ce59 [ 316.120262][ T9134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.120286][ T9134] RSP: 002b:00007fbc8d6d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 316.120305][ T9134] RAX: ffffffffffffffda RBX: 00007fbc8ca15fa0 RCX: 00007fbc8c79ce59 [ 316.120318][ T9134] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000007 [ 316.120330][ T9134] RBP: 00007fbc8c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 316.120341][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.120353][ T9134] R13: 00007fbc8ca16038 R14: 00007fbc8ca15fa0 R15: 00007ffdb38bd408 [ 316.120381][ T9134] [ 316.120494][ T9134] Mem-Info: [ 316.550632][ T9134] active_anon:18057 inactive_anon:0 isolated_anon:0 [ 316.550632][ T9134] active_file:21167 inactive_file:40785 isolated_file:0 [ 316.550632][ T9134] unevictable:768 dirty:325 writeback:0 [ 316.550632][ T9134] slab_reclaimable:11756 slab_unreclaimable:102056 [ 316.550632][ T9134] mapped:34190 shmem:7022 pagetables:1460 [ 316.550632][ T9134] sec_pagetables:0 bounce:0 [ 316.550632][ T9134] kernel_misc_reclaimable:0 [ 316.550632][ T9134] free:1279529 free_pcp:9814 free_cma:0 [ 316.836612][ T9134] Node 0 active_anon:74528kB inactive_anon:0kB active_file:84632kB inactive_file:162940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138328kB dirty:1300kB writeback:0kB shmem:26552kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13016kB pagetables:5600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 316.974900][ T9134] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 317.054276][ T9134] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.151498][ T9134] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 317.190726][ T9134] Node 0 DMA32 free:1162460kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:79180kB inactive_anon:0kB active_file:84632kB inactive_file:162916kB unevictable:1536kB writepending:1404kB zspages:0kB present:3129332kB managed:2537288kB mlocked:0kB bounce:0kB free_pcp:33740kB local_pcp:16536kB free_cma:0kB [ 317.283791][ T9134] lowmem_reserve[]: 0 0 1 1 1 [ 317.313271][ T9134] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.422539][ T9134] lowmem_reserve[]: 0 0 0 0 0 [ 317.446846][ T9134] Node 1 Normal free:3938476kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.560716][ T9134] lowmem_reserve[]: 0 0 0 0 0 [ 317.567724][ T9134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.659984][ T9134] Node 0 DMA32: 1301*4kB (UME) 1542*8kB (U) 536*16kB (UM) 222*32kB (UE) 211*64kB (UME) 196*128kB (UME) 93*256kB (UME) 40*512kB (UM) 6*1024kB (UM) 4*2048kB (UME) 249*4096kB (M) = 1150340kB [ 317.686786][ T9134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 317.701503][ T9134] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 10*16kB (UM) 5*32kB (U) 11*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938476kB [ 317.727482][ T9134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.749044][ T9134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.761141][ T9134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.773527][ T9134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.785153][ T9134] 71827 total pagecache pages [ 317.790957][ T9134] 0 pages in swap cache [ 317.796882][ T9134] Free swap = 122400kB [ 317.802152][ T9134] Total swap = 124996kB [ 317.807201][ T9134] 2097051 pages RAM [ 317.819330][ T9134] 0 pages HighMem/MovableOnly [ 317.825099][ T9134] 430839 pages reserved [ 317.829948][ T9134] 0 pages cma reserved [ 317.890373][ T5799] usb 5-1: USB disconnect, device number 40 [ 318.845335][ T9183] netlink: 'syz.1.884': attribute type 2 has an invalid length. [ 319.732243][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.886'. [ 319.745923][ T9192] vlan2: entered promiscuous mode [ 319.751006][ T9192] gretap0: entered promiscuous mode [ 322.180688][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 322.351420][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 322.463976][ T5803] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 322.477157][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 322.495637][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.506845][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.516736][ T10] usb 3-1: Product: syz [ 322.522068][ T10] usb 3-1: Manufacturer: syz [ 322.527249][ T10] usb 3-1: SerialNumber: syz [ 322.612548][ T10] usb 3-1: config 0 descriptor?? [ 322.631064][ T5803] usb 4-1: Using ep0 maxpacket: 16 [ 322.638541][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 322.657380][ T5803] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.669167][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 322.679127][ T5803] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.696478][ T5803] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 322.939787][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.266547][ T9223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.426197][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 324.005341][ T30] audit: type=1400 audit(1781126121.555:1321): avc: denied { ioctl } for pid=9232 comm="syz.4.898" path="socket:[26123]" dev="sockfs" ino=26123 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.065792][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.898'. [ 324.146405][ T5803] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 324.226820][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 324.273382][ T10] em28xx 3-1:0.0: board has no eeprom [ 324.290597][ T5714] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 324.440565][ T5714] usb 1-1: device descriptor read/64, error -71 [ 324.455333][ T30] audit: type=1400 audit(1781126122.005:1322): avc: denied { write } for pid=9226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.540765][ T9214] em28xx 3-1:0.0: write to i2c device at 0x0 failed with unknown error (status=24) [ 324.583677][ T5803] usb 4-1: USB disconnect, device number 37 [ 324.639334][ T30] audit: type=1400 audit(1781126122.185:1323): avc: denied { write } for pid=9251 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 324.730846][ T5714] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 325.020289][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.900'. [ 325.034264][ T9252] vlan2: entered promiscuous mode [ 325.040730][ T5714] usb 1-1: device descriptor read/64, error -71 [ 325.041257][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 325.065218][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 325.072782][ T804] em28xx 3-1:0.0: Binding DVB extension [ 325.137289][ T10] usb 3-1: USB disconnect, device number 38 [ 325.155297][ T5714] usb usb1-port1: attempt power cycle [ 325.155470][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 325.275657][ T804] em28xx 3-1:0.0: Registering input extension [ 325.310752][ T10] em28xx 3-1:0.0: Closing input extension [ 325.324995][ T10] em28xx 3-1:0.0: Freeing device [ 325.532154][ T5714] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 325.553630][ T30] audit: type=1400 audit(1781126123.085:1324): avc: denied { write } for pid=9257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.604967][ T5714] usb 1-1: device descriptor read/8, error -71 [ 325.890734][ T5714] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 325.954228][ T5714] usb 1-1: device descriptor read/8, error -71 [ 326.132500][ T5714] usb usb1-port1: unable to enumerate USB device [ 326.150295][ T30] audit: type=1400 audit(1781126123.695:1325): avc: denied { write } for pid=9284 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.988377][ T1176] Bluetooth: hci5: Frame reassembly failed (-84) [ 330.025094][ T1176] Bluetooth: hci5: Frame reassembly failed (-84) [ 330.293921][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.914'. [ 330.479884][ T30] audit: type=1400 audit(1781126127.985:1326): avc: denied { write } for pid=9288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.985718][ T30] audit: type=1400 audit(1781126128.535:1327): avc: denied { write } for pid=9336 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.786859][ T30] audit: type=1400 audit(1781126129.325:1328): avc: denied { create } for pid=9345 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 332.062276][ T5625] Bluetooth: hci5: command 0x1003 tx timeout [ 332.069082][ T5623] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 332.308109][ T5734] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 332.501723][ T5734] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.670563][ T5734] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 332.684814][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.701656][ T5734] usb 5-1: Product: syz [ 333.077185][ T5734] usb 5-1: Manufacturer: syz [ 333.082360][ T5734] usb 5-1: SerialNumber: syz [ 333.099080][ T9356] tipc: Trying to set illegal importance in message [ 333.680067][ T5734] usb 5-1: config 0 descriptor?? [ 334.306898][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'. [ 334.315693][ T9346] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 334.392290][ T30] audit: type=1400 audit(1781126131.855:1329): avc: denied { write } for pid=9345 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 335.150978][ T5734] keyspan 5-1:0.0: Keyspan 1 port adapter converter detected [ 335.158545][ T5734] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 335.169082][ T5734] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 335.176881][ T5734] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 335.186672][ T5734] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 335.196163][ T5734] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 335.212377][ T5734] usb 5-1: USB disconnect, device number 41 [ 335.223789][ T5734] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 335.233690][ T5734] keyspan 5-1:0.0: device disconnected [ 335.886749][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.926'. [ 335.913217][ T9383] vlan2: entered promiscuous mode [ 335.945535][ T30] audit: type=1400 audit(1781126133.495:1330): avc: denied { listen } for pid=9385 comm="syz.4.927" lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 336.091608][ T9395] pim6reg: entered allmulticast mode [ 336.940831][ T5734] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 337.012784][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 337.023230][ T804] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 337.907790][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 337.923827][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 337.932731][ T804] usb 3-1: not running at top speed; connect to a high speed hub [ 337.941967][ T5734] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 337.945717][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 337.970659][ T804] usb 3-1: config 45 has an invalid interface number: 2 but max is 0 [ 337.981461][ T804] usb 3-1: config 45 has no interface number 0 [ 337.983573][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.988087][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.004992][ T804] usb 3-1: config 45 interface 2 has no altsetting 0 [ 338.011517][ T5734] usb 5-1: Product: syz [ 338.015439][ T10] usb 4-1: Product: syz [ 338.023809][ T10] usb 4-1: Manufacturer: syz [ 338.029514][ T10] usb 4-1: SerialNumber: syz [ 338.035071][ T804] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 338.047043][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.057225][ T804] usb 3-1: Product: syz [ 338.061128][ T5734] usb 5-1: Manufacturer: syz [ 338.062507][ T804] usb 3-1: Manufacturer: syz [ 338.072016][ T804] usb 3-1: SerialNumber: syz [ 338.080652][ T5734] usb 5-1: SerialNumber: syz [ 338.136925][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.934'. [ 338.315744][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.325315][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.354968][ T804] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 338.376491][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 338.388715][ T804] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 338.506960][ T804] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 338.516260][ T804] usb 3-1: media controller created [ 338.521560][ T804] dvb-usb: bulk message failed: -22 (5/0) [ 338.527316][ T804] dvb-usb: MAC address reading failed. [ 338.534769][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.540672][ T5735] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 338.553728][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 338.559699][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 338.565458][ T804] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 338.701631][ T5735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.712158][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 338.723080][ T804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input32 [ 338.725145][ T5735] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 338.746043][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 338.747154][ T804] dvb-usb: schedule remote query interval to 100 msecs. [ 338.757064][ T5735] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 338.763996][ T804] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 338.770730][ T804] usb 3-1: USB disconnect, device number 39 [ 338.774523][ T5735] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 338.801759][ T5735] usb 1-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 338.811063][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.821621][ T5735] usb 1-1: config 0 descriptor?? [ 338.827916][ T10] usb 4-1: clock source 0 is not valid, cannot use [ 338.847385][ T5735] appledisplay 1-1:0.0: Submitting URB failed [ 338.852102][ T804] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 338.855995][ T5735] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5 [ 339.132249][ T9412] syzkaller0: entered promiscuous mode [ 339.137743][ T9412] syzkaller0: entered allmulticast mode [ 339.636651][ T9423] 9pnet_virtio: no channels available for device syz [ 339.964718][ T10] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 339.964852][ T5735] usb 1-1: USB disconnect, device number 40 [ 339.974076][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 339.989152][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 340.001945][ T10] usb 4-1: clock source 0 is not valid, cannot use [ 340.010135][ T10] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 340.018391][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 340.169757][ T9426] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 340.176379][ T9426] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 340.185457][ T9426] vhci_hcd vhci_hcd.0: Device attached [ 340.194990][ T10] usb 4-1: USB disconnect, device number 38 [ 340.762754][ T5706] usb 36-1: SetAddress Request (14) to port 0 [ 340.946048][ T5706] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd [ 341.464943][ T9427] vhci_hcd: connection reset by peer [ 341.608539][ T48] vhci_hcd vhci_hcd.1: stop threads [ 341.658162][ T48] vhci_hcd vhci_hcd.1: release socket [ 341.747264][ T48] vhci_hcd vhci_hcd.1: disconnect device [ 341.809572][ T5734] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 341.818403][ T5734] usb 5-1: clock source 0 is not valid, cannot use [ 341.825320][ T5734] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 341.835945][ T5734] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 341.847551][ T5734] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 341.856675][ T5734] usb 5-1: clock source 0 is not valid, cannot use [ 341.865574][ T5734] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 341.872765][ T5734] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 341.914063][ T5734] usb 5-1: USB disconnect, device number 42 [ 341.956412][ T30] audit: type=1326 audit(1781126139.475:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 341.996236][ T30] audit: type=1326 audit(1781126139.475:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 342.082801][ T30] audit: type=1326 audit(1781126139.485:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 343.126860][ T30] audit: type=1326 audit(1781126139.485:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 344.154019][ T30] audit: type=1326 audit(1781126139.485:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 344.188278][ T30] audit: type=1326 audit(1781126139.485:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 344.216096][ T30] audit: type=1326 audit(1781126139.485:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 344.244400][ T30] audit: type=1326 audit(1781126139.485:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 344.311943][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 344.385868][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'. [ 344.481147][ T9447] udevd[9447]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.547345][ T30] audit: type=1326 audit(1781126139.485:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 344.595199][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 344.645112][ T30] audit: type=1326 audit(1781126139.485:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9429 comm="syz.3.939" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec7fd9ce59 code=0x7ffc0000 [ 344.942164][ T10] usb 4-1: device descriptor read/all, error -71 [ 345.071698][ T9454] CIFS: VFS: UNC: path must begin with // or \\ [ 345.078512][ T9454] Malformed UNC in devname [ 345.078512][ T9454] [ 345.086706][ T9454] CIFS: VFS: Malformed UNC in devname [ 345.521517][ T804] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 345.695449][ T9457] syzkaller0: entered promiscuous mode [ 345.700982][ T9457] syzkaller0: entered allmulticast mode [ 346.050614][ T804] usb 5-1: Using ep0 maxpacket: 16 [ 346.061642][ T804] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 346.071699][ T804] usb 5-1: config 0 has no interface number 0 [ 346.078311][ T804] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.715488][ T5706] usb 36-1: device descriptor read/8, error -110 [ 346.723329][ T804] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.769189][ T804] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 346.779645][ T804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.871785][ T804] usb 5-1: config 0 descriptor?? [ 347.011264][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 347.011280][ T30] audit: type=1326 audit(1781126144.565:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.092914][ T30] audit: type=1326 audit(1781126144.635:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.122037][ T5706] usb usb36-port1: attempt power cycle [ 347.140734][ T5735] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 347.160769][ T5625] Bluetooth: hci4: command 0x0406 tx timeout [ 347.192182][ T30] audit: type=1326 audit(1781126144.725:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.310622][ T5735] usb 2-1: device descriptor read/64, error -71 [ 347.328031][ T30] audit: type=1326 audit(1781126144.725:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.419400][ T804] hid (null): global environment stack overflow [ 347.426234][ T30] audit: type=1326 audit(1781126144.725:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.474390][ T30] audit: type=1326 audit(1781126144.805:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.525604][ T30] audit: type=1326 audit(1781126144.975:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.550632][ T5735] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 347.570062][ T30] audit: type=1326 audit(1781126144.975:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.611842][ T5799] usb 5-1: USB disconnect, device number 43 [ 347.628705][ T30] audit: type=1326 audit(1781126145.045:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.686078][ T30] audit: type=1326 audit(1781126145.235:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9469 comm="syz.1.949" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcea39caeb code=0x7ffc0000 [ 347.731329][ T5706] usb usb36-port1: unable to enumerate USB device [ 347.832016][ T5735] usb 2-1: device descriptor read/64, error -71 [ 347.850635][ T804] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 347.942323][ T5735] usb usb2-port1: attempt power cycle [ 348.010589][ T804] usb 3-1: Using ep0 maxpacket: 8 [ 348.034788][ T804] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 348.050621][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.059932][ T804] usb 3-1: Product: syz [ 348.065740][ T804] usb 3-1: Manufacturer: syz [ 348.070738][ T804] usb 3-1: SerialNumber: syz [ 348.390587][ T5735] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 348.422278][ T5735] usb 2-1: device descriptor read/8, error -71 [ 348.487252][ T9485] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 348.790626][ T5735] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 348.840608][ T5735] usb 2-1: device descriptor read/8, error -71 [ 348.978492][ T5735] usb usb2-port1: unable to enumerate USB device [ 349.372621][ T804] usb 3-1: clock source 0 is not valid, cannot use [ 349.431606][ T5735] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 349.577200][ T804] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 349.693047][ T804] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 349.747385][ T9493] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=35538 sclass=netlink_xfrm_socket pid=9493 comm=syz.4.956 [ 349.771844][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 349.778383][ T5735] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 349.788250][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.800855][ T804] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 349.809427][ T5735] pvrusb2: Hardware description: Terratec Grabster AV400 [ 349.810776][ T804] usb 3-1: clock source 0 is not valid, cannot use [ 350.662036][ T5735] pvrusb2: ********** [ 350.676071][ T5735] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 350.686566][ T5735] pvrusb2: Important functionality might not be entirely working. [ 350.694480][ T5735] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 350.943698][ T804] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 350.953172][ T804] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 350.984438][ T5735] pvrusb2: ********** [ 351.001899][ T2362] pvrusb2: Invalid write control endpoint [ 351.030401][ T804] usb 3-1: USB disconnect, device number 40 [ 351.173163][ T9503] netlink: 9060 bytes leftover after parsing attributes in process `syz.3.953'. [ 351.370788][ T5734] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 351.474915][ T5604] udevd[5604]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 351.487000][ T2362] pvrusb2: Invalid write control endpoint [ 351.522534][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 351.532976][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 351.541308][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 351.552485][ T2362] pvrusb2: Device being rendered inoperable [ 351.561490][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 351.570705][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 351.578940][ T2362] pvrusb2: Attached sub-driver cx25840 [ 351.584392][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 351.594436][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 351.701018][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 351.707680][ T5734] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 351.716253][ T5734] usb 5-1: config 0 has no interface number 0 [ 351.724413][ T5734] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 351.760664][ T5734] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 351.778316][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.796476][ T5734] usb 5-1: Product: syz [ 351.830830][ T5734] usb 5-1: Manufacturer: syz [ 351.850879][ T5734] usb 5-1: SerialNumber: syz [ 352.193939][ T5734] usb 5-1: config 0 descriptor?? [ 352.213705][ T5734] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 352.232135][ T5734] em28xx 5-1:0.132: Video interface 132 found: [ 352.253063][ T9512] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' already exists in 'ieee80211' [ 352.308001][ T5735] usb 4-1: USB disconnect, device number 41 [ 352.608857][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 352.608871][ T30] audit: type=1400 audit(1781126150.155:1413): avc: denied { append } for pid=9517 comm="syz.0.962" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 352.660645][ T5734] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 352.951599][ T804] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 353.158339][ T5734] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 353.223134][ T5734] em28xx 5-1:0.132: board has no eeprom [ 353.315283][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.345638][ T804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.380568][ T804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.433222][ T804] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.459678][ T804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.505216][ T804] usb 2-1: config 0 descriptor?? [ 353.597698][ T5734] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 353.606328][ T5734] em28xx 5-1:0.132: analog set to bulk mode. [ 353.613050][ T24] em28xx 5-1:0.132: Registering V4L2 extension [ 353.621448][ T9501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.647946][ T9501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.758893][ T9537] trusted_key: encrypted_key: keylen parameter is missing [ 353.778714][ T9537] netlink: 'syz.2.966': attribute type 40 has an invalid length. [ 354.058064][ T9501] trusted_key: encrypted_key: insufficient parameters specified [ 354.068881][ T10] usb 5-1: USB disconnect, device number 44 [ 354.073413][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 354.075861][ T10] em28xx 5-1:0.132: Disconnecting em28xx [ 354.146328][ T24] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 354.153597][ T24] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 354.161883][ T24] em28xx 5-1:0.132: No AC97 audio processor [ 354.172574][ T24] usb 5-1: Decoder not found [ 354.177179][ T24] em28xx 5-1:0.132: failed to create media graph [ 354.183644][ T24] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 354.191834][ T24] em28xx 5-1:0.132: Remote control support is not available for this card. [ 354.201007][ T10] em28xx 5-1:0.132: Closing input extension [ 354.213155][ T804] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 354.226954][ T804] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 354.235787][ T10] em28xx 5-1:0.132: Freeing device [ 354.242395][ T804] plantronics 0003:047F:FFFF.0011: item fetching failed at offset 13/15 [ 354.251243][ T804] plantronics 0003:047F:FFFF.0011: parse failed [ 354.257540][ T804] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 354.550659][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 354.700706][ T5734] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 354.708371][ T24] usb 4-1: device descriptor read/64, error -71 [ 354.871249][ T5734] usb 3-1: Using ep0 maxpacket: 32 [ 354.893419][ T5734] usb 3-1: unable to get BOS descriptor or descriptor too short [ 354.915648][ T5734] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.935146][ T5734] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.947796][ T5734] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 354.958354][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.966554][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 354.979142][ T5734] usb 3-1: Product: syz [ 354.985325][ T30] audit: type=1400 audit(1781126152.535:1414): avc: denied { module_load } for pid=9550 comm="syz.0.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 355.005824][ T5734] usb 3-1: Manufacturer: syz [ 355.011820][ T5714] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 355.025138][ T5734] usb 3-1: SerialNumber: syz [ 355.110563][ T24] usb 4-1: device descriptor read/64, error -71 [ 355.180554][ T5714] usb 5-1: Using ep0 maxpacket: 8 [ 355.189109][ T5714] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 355.198313][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.206366][ T5714] usb 5-1: Product: syz [ 355.211148][ T5714] usb 5-1: Manufacturer: syz [ 355.215806][ T5714] usb 5-1: SerialNumber: syz [ 355.221677][ T24] usb usb4-port1: attempt power cycle [ 355.255673][ T5734] usb 3-1: unit 4 not found! [ 355.260358][ T5734] usb 3-1: unit 0 not found! [ 355.270640][ T5735] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 355.422412][ T5735] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.434139][ T5735] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.446290][ T5735] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 355.460311][ T5735] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 355.469555][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.492621][ T9551] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 355.570593][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 355.592899][ T24] usb 4-1: device descriptor read/8, error -71 [ 355.713438][ T5735] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 355.722742][ T5735] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input33 [ 355.803249][ T5735] usb 1-1: USB disconnect, device number 41 [ 355.809232][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 355.832235][ T24] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 355.846643][ T5714] usb 5-1: clock source 0 is not valid, cannot use [ 355.852683][ T804] usb 3-1: USB disconnect, device number 41 [ 355.864932][ T24] usb 4-1: device descriptor read/8, error -71 [ 355.980735][ T24] usb usb4-port1: unable to enumerate USB device [ 356.026212][ T10] usb 2-1: USB disconnect, device number 46 [ 356.059306][ T5714] usb 5-1: 1:1: cannot get freq (v2/v3): err -71 [ 356.080400][ T5714] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 356.091147][ T5714] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 356.099866][ T5714] usb 5-1: clock source 0 is not valid, cannot use [ 356.108008][ T5714] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 356.114990][ T5714] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 356.176090][ T5714] usb 5-1: USB disconnect, device number 45 [ 357.554007][ T30] audit: type=1400 audit(1781126155.095:1415): avc: denied { recv } for pid=5613 comm="syz-executor" saddr=10.128.0.169 src=39098 daddr=10.128.0.215 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 358.210853][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 358.630580][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 358.639761][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 358.663250][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.700315][ T10] usb 5-1: config 0 descriptor?? [ 358.718074][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 359.382578][ T9594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.490623][ T5734] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 359.682273][ T5734] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.703467][ T5734] usb 1-1: config 0 has no interface number 0 [ 359.727636][ T30] audit: type=1400 audit(1781126157.275:1416): avc: denied { write } for pid=9599 comm="syz.1.982" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 359.729657][ T5734] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 359.778842][ T30] audit: type=1400 audit(1781126157.315:1417): avc: denied { ioctl } for pid=9599 comm="syz.1.982" path="socket:[27783]" dev="sockfs" ino=27783 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 359.807980][ T5734] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.828042][ T5734] usb 1-1: Product: syz [ 359.839548][ T5734] usb 1-1: Manufacturer: syz [ 359.848903][ T5734] usb 1-1: SerialNumber: syz [ 359.872613][ T5734] usb 1-1: config 0 descriptor?? [ 360.010639][ T5714] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 360.087103][ T5734] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 360.104646][ T5734] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.130812][ T5734] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 360.143345][ T5714] usb 3-1: device descriptor read/64, error -71 [ 360.160672][ T5734] usb 1-1: media controller created [ 360.186194][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.330476][ T10] gspca_vc032x: reg_w err -71 [ 360.345359][ T30] audit: type=1400 audit(1781126157.885:1418): avc: denied { listen } for pid=9595 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.370290][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.376258][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.381544][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.386835][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.392123][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.397399][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.400589][ T5714] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 360.402672][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.402683][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.402691][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.402699][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.402707][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.402715][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.442558][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.447842][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.453121][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.458394][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.498861][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.504167][ T10] gspca_vc032x: I2c Bus Busy Wait 00 [ 360.509449][ T10] gspca_vc032x: Unknown sensor... [ 360.514516][ T10] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 360.541883][ T10] usb 5-1: USB disconnect, device number 46 [ 360.560573][ T5714] usb 3-1: device descriptor read/64, error -71 [ 360.670762][ T5714] usb usb3-port1: attempt power cycle [ 360.850777][ T5706] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 360.860575][ T5799] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 361.100597][ T5714] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 361.121542][ T5714] usb 3-1: device descriptor read/8, error -71 [ 361.190819][ T9616] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 361.201060][ T9616] CPU: 1 UID: 0 PID: 9616 Comm: syz.4.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 361.201090][ T9616] Tainted: [L]=SOFTLOCKUP [ 361.201097][ T9616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.201109][ T9616] Call Trace: [ 361.201115][ T9616] [ 361.201123][ T9616] dump_stack_lvl+0x100/0x190 [ 361.201154][ T9616] sysfs_warn_dup.cold+0x1c/0x28 [ 361.201180][ T9616] sysfs_do_create_link_sd+0x113/0x140 [ 361.201206][ T9616] sysfs_create_link+0x61/0xc0 [ 361.201230][ T9616] device_add+0x675/0x1950 [ 361.201261][ T9616] ? __pfx_device_add+0x10/0x10 [ 361.201289][ T9616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.201313][ T9616] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 361.201347][ T9616] wiphy_register+0x1edd/0x2d90 [ 361.201366][ T9616] ? __rtnl_unlock+0xb9/0xf0 [ 361.201393][ T9616] ? __pfx_wiphy_register+0x10/0x10 [ 361.201414][ T9616] ? __asan_memset+0x23/0x50 [ 361.201440][ T9616] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 361.201476][ T9616] ieee80211_register_hw+0x3055/0x4570 [ 361.201515][ T9616] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 361.201540][ T9616] ? __pfx___debug_object_init+0x10/0x10 [ 361.201566][ T9616] ? find_held_lock+0x2b/0x80 [ 361.201584][ T9616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 361.201606][ T9616] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 361.201630][ T9616] ? __hrtimer_setup+0x208/0x330 [ 361.201658][ T9616] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 361.201696][ T9616] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 361.201719][ T9616] ? __asan_memcpy+0x3c/0x60 [ 361.201748][ T9616] hwsim_new_radio_nl+0xc5f/0x1370 [ 361.201775][ T9616] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 361.201803][ T9616] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 361.201829][ T9616] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 361.201861][ T9616] genl_family_rcv_msg_doit+0x214/0x300 [ 361.201889][ T9616] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 361.201924][ T9616] ? bpf_lsm_capable+0x9/0x10 [ 361.201944][ T9616] ? security_capable+0x80/0x260 [ 361.201969][ T9616] ? ns_capable+0xd2/0xf0 [ 361.201996][ T9616] genl_rcv_msg+0x560/0x800 [ 361.202023][ T9616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.202049][ T9616] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 361.202078][ T9616] netlink_rcv_skb+0x159/0x420 [ 361.202100][ T9616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.202126][ T9616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.202157][ T9616] ? rcu_is_watching+0x12/0xc0 [ 361.202189][ T9616] genl_rcv+0x28/0x40 [ 361.202211][ T9616] netlink_unicast+0x585/0x850 [ 361.202237][ T9616] ? __pfx_netlink_unicast+0x10/0x10 [ 361.202266][ T9616] netlink_sendmsg+0x8b0/0xda0 [ 361.202293][ T9616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.202314][ T9616] ? __might_fault+0xa0/0x140 [ 361.202350][ T9616] ____sys_sendmsg+0x9e1/0xb70 [ 361.202370][ T9616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.202394][ T9616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.202421][ T9616] ? __pfx_futex_wake_mark+0x10/0x10 [ 361.202444][ T9616] ___sys_sendmsg+0x190/0x1e0 [ 361.202469][ T9616] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.202488][ T9616] ? find_held_lock+0x2b/0x80 [ 361.202503][ T9616] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 361.202558][ T9616] __sys_sendmsg+0x170/0x220 [ 361.202586][ T9616] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.202612][ T9616] ? __x64_sys_futex+0x34f/0x4d0 [ 361.202648][ T9616] ? rcu_is_watching+0x12/0xc0 [ 361.202677][ T9616] do_syscall_64+0x115/0x870 [ 361.202701][ T9616] ? clear_bhb_loop+0x40/0x90 [ 361.202724][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.202742][ T9616] RIP: 0033:0x7fbc8c79ce59 [ 361.202780][ T9616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.202798][ T9616] RSP: 002b:00007fbc8d694028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.202817][ T9616] RAX: ffffffffffffffda RBX: 00007fbc8ca16180 RCX: 00007fbc8c79ce59 [ 361.202829][ T9616] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000009 [ 361.202841][ T9616] RBP: 00007fbc8c832d6f R08: 0000000000000000 R09: 0000000000000000 [ 361.202852][ T9616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.202863][ T9616] R13: 00007fbc8ca16218 R14: 00007fbc8ca16180 R15: 00007ffdb38bd408 [ 361.202891][ T9616] [ 361.456647][ T30] audit: type=1400 audit(1781126158.725:1419): avc: denied { write } for pid=9613 comm="syz.4.986" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 361.505507][ T5734] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 361.603952][ T5706] usb 2-1: device descriptor read/64, error -71 [ 361.640549][ T5799] usb 4-1: Using ep0 maxpacket: 8 [ 361.693914][ T5734] usb 1-1: USB disconnect, device number 42 [ 361.752593][ T5799] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 361.762260][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.800622][ T5714] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 361.814572][ T5799] usb 4-1: Product: syz [ 361.819874][ T5799] usb 4-1: Manufacturer: syz [ 361.823996][ T5714] usb 3-1: device descriptor read/8, error -71 [ 361.824473][ T5799] usb 4-1: SerialNumber: syz [ 361.950770][ T5714] usb usb3-port1: unable to enumerate USB device [ 362.934839][ T30] audit: type=1400 audit(1781126160.195:1420): avc: denied { watch } for pid=9622 comm="syz.0.988" path="/203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 362.978997][ T5706] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 363.003468][ T5799] usb 4-1: clock source 0 is not valid, cannot use [ 363.071887][ T30] audit: type=1400 audit(1781126160.195:1421): avc: denied { watch_sb watch_reads } for pid=9622 comm="syz.0.988" path="/203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 363.291362][ T5706] usb 2-1: device descriptor read/64, error -71 [ 363.297756][ T5799] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 363.373567][ T5799] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 363.384577][ T5799] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 363.394879][ T5799] usb 4-1: clock source 0 is not valid, cannot use [ 363.404177][ T5799] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 363.412358][ T5706] usb usb2-port1: attempt power cycle [ 363.418361][ T5799] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 363.465294][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 363.481122][ T5799] usb 4-1: USB disconnect, device number 46 [ 363.481352][ T9636] openvswitch: netlink: Missing key (keys=440, expected=2000) [ 363.510575][ T804] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 363.649715][ T30] audit: type=1400 audit(1781126161.195:1422): avc: denied { ioctl } for pid=9633 comm="syz.2.991" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 363.651862][ T9639] batadv_slave_0: entered promiscuous mode [ 363.711846][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 363.719503][ T804] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 363.729182][ T804] usb 5-1: config 0 has no interface number 0 [ 363.736063][ T804] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 363.753661][ T804] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 13576, setting to 1024 [ 363.777647][ T804] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 364.106486][ T804] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 364.174242][ T9633] batadv_slave_0: left promiscuous mode [ 364.294334][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.334952][ T804] usb 5-1: Product: syz [ 364.626317][ T30] audit: type=1400 audit(1781126161.995:1423): avc: denied { connect } for pid=9644 comm="syz.3.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 364.660899][ T804] usb 5-1: Manufacturer: syz [ 364.677025][ T804] usb 5-1: SerialNumber: syz [ 364.699459][ T804] usb 5-1: config 0 descriptor?? [ 364.707327][ T30] audit: type=1400 audit(1781126162.055:1424): avc: denied { write } for pid=9644 comm="syz.3.993" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.708631][ T9628] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 364.733536][ T30] audit: type=1400 audit(1781126162.065:1425): avc: denied { ioctl } for pid=9644 comm="syz.3.993" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 364.790609][ T9628] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 364.865825][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 364.906434][ T804] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 364.929628][ T9656] adf_ctl_ioctl: 15 callbacks suppressed [ 364.929642][ T9656] QAT: Invalid ioctl -805268450 [ 364.944160][ T9656] QAT: failed to copy from user. [ 365.101248][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 365.147006][ T5799] usb 5-1: USB disconnect, device number 47 [ 365.191204][ T24] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 365.352140][ T24] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 365.360422][ T24] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 365.368566][ T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 365.370569][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 365.378537][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 365.394607][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 365.394762][ T804] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 365.404593][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 365.404618][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 365.405256][ T24] usb 1-1: language id specifier not provided by device, defaulting to English [ 365.448050][ T10] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 365.451897][ T24] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 365.466057][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.475742][ T24] usb 1-1: Manufacturer: Ú¯ [ 365.477210][ T10] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 365.494862][ T24] usb 1-1: config 0 descriptor?? [ 365.509868][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.518683][ T10] usb 3-1: Product: syz [ 365.519746][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 365.522851][ T10] usb 3-1: Manufacturer: syz [ 365.522871][ T10] usb 3-1: SerialNumber: syz [ 365.524876][ T10] usb 3-1: config 0 descriptor?? [ 365.543115][ T24] hub 1-1:0.0: probe with driver hub failed with error -5 [ 365.554580][ T24] input: Ú¯ as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input34 [ 365.869928][ T804] usb 4-1: Using ep0 maxpacket: 32 [ 365.917005][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 365.926145][ T10] usb 3-1: setting power ON [ 365.930757][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 365.973049][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.102435][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 366.174139][ T804] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 366.421050][ T10] usb 3-1: media controller created [ 366.508506][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 366.537910][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.548938][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 366.590099][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 366.607537][ T10] usb 3-1: selecting invalid altsetting 6 [ 366.620222][ T10] usb 3-1: digital interface selection failed (-22) [ 366.627489][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 366.639657][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 366.657773][ T804] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 366.670650][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.679632][ T10] usb 3-1: setting power OFF [ 366.685041][ T804] usb 4-1: Product: syz [ 366.691123][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 366.698036][ T804] usb 4-1: Manufacturer: syz [ 366.704731][ T804] usb 4-1: SerialNumber: syz [ 366.709550][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 366.761582][ T804] usb 4-1: config 0 descriptor?? [ 366.766821][ T10] (NULL device *): no alternate interface [ 366.785406][ T9668] dvb-usb: bulk message failed: -22 (3/0) [ 366.797500][ T9668] cxusb: i2c wr: len=163 is too big! [ 366.797500][ T9668] [ 367.277109][ T804] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 367.411454][ T804] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 367.495450][ T30] audit: type=1400 audit(1781126165.045:1426): avc: denied { bind } for pid=9657 comm="syz.3.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 367.517864][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.528159][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.545262][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.553341][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.586062][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.608896][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.621338][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.628613][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.744609][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.853275][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 367.906394][ T5735] usb 1-1: USB disconnect, device number 43 [ 367.964512][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 368.116647][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 368.314073][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 368.330629][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 368.351339][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 368.359134][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 368.366480][ T804] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 368.374647][ T804] input input35: Timeout waiting for response from device. [ 368.437976][ T804] usb 4-1: USB disconnect, device number 47 [ 368.446565][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 368.600453][ T30] audit: type=1400 audit(1781126166.145:1427): avc: denied { read } for pid=9673 comm="syz.4.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 368.627838][ T10] usb 3-1: USB disconnect, device number 46 [ 368.881032][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 368.920652][ T5735] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 369.000201][ T30] audit: type=1400 audit(1781126166.545:1428): avc: denied { map } for pid=9688 comm="syz.2.1005" path="pipe:[5146]" dev="pipefs" ino=5146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 369.080609][ T5735] usb 1-1: Using ep0 maxpacket: 8 [ 369.096764][ T5735] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 369.126423][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.150367][ T5735] usb 1-1: Product: syz [ 369.163785][ T5735] usb 1-1: Manufacturer: syz [ 369.178888][ T5735] usb 1-1: SerialNumber: syz [ 369.184466][ T9696] bridge_slave_0: left allmulticast mode [ 369.198677][ T9696] bridge_slave_0: left promiscuous mode [ 369.210278][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.259538][ T9696] bridge_slave_1: left allmulticast mode [ 369.271491][ T9696] bridge_slave_1: left promiscuous mode [ 369.280405][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.328111][ T9696] bond0: (slave bond_slave_0): Releasing backup interface [ 369.384771][ T9696] bond0: (slave bond_slave_1): Releasing backup interface [ 369.921771][ T9702] 9p: Bad value for 'rfdno' [ 370.603750][ T9696] team0: Port device team_slave_0 removed [ 371.110703][ T5735] usb 1-1: clock source 0 is not valid, cannot use [ 371.140472][ T9696] team0: Port device team_slave_1 removed [ 371.158732][ T9696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.177304][ T9696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.254812][ T9696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.366615][ T9696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.422413][ T9696] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.466113][ T5735] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 371.489187][ T5735] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 371.520133][ T5735] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 371.549087][ T5735] usb 1-1: clock source 0 is not valid, cannot use [ 371.569513][ T5735] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 371.993151][ T30] audit: type=1400 audit(1781126169.485:1429): avc: denied { execute } for pid=9710 comm="syz.2.1010" name="file2" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.016772][ T30] audit: type=1400 audit(1781126169.485:1430): avc: denied { execute_no_trans } for pid=9710 comm="syz.2.1010" path="/185/file2" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.056529][ T30] audit: type=1400 audit(1781126169.565:1431): avc: denied { ioctl } for pid=9712 comm="syz.4.1008" path="socket:[28958]" dev="sockfs" ino=28958 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.123300][ T5735] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 372.712605][ T5735] usb 1-1: USB disconnect, device number 44 [ 372.990413][ T804] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 373.007779][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.016596][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.148795][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.188412][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.237586][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.286910][ T804] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 373.296908][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.396542][ T804] usb 4-1: config 0 descriptor?? [ 373.487383][ T9732] FAULT_INJECTION: forcing a failure. [ 373.487383][ T9732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.512057][ T9732] CPU: 1 UID: 0 PID: 9732 Comm: syz.0.1016 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.512085][ T9732] Tainted: [L]=SOFTLOCKUP [ 373.512090][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.512106][ T9732] Call Trace: [ 373.512111][ T9732] [ 373.512118][ T9732] dump_stack_lvl+0x100/0x190 [ 373.512145][ T9732] should_fail_ex.cold+0x5/0xa [ 373.512168][ T9732] _copy_from_user+0x2e/0xd0 [ 373.512189][ T9732] __sys_bpf+0x243/0x4b90 [ 373.512219][ T9732] ? __pfx___sys_bpf+0x10/0x10 [ 373.512242][ T9732] ? proc_fail_nth_write+0x9f/0x220 [ 373.512262][ T9732] ? find_held_lock+0x2b/0x80 [ 373.512280][ T9732] ? find_held_lock+0x2b/0x80 [ 373.512294][ T9732] ? ksys_write+0x190/0x250 [ 373.512311][ T9732] ? ksys_write+0x190/0x250 [ 373.512331][ T9732] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 373.512352][ T9732] ? kernel_write+0x6b3/0x6c0 [ 373.512367][ T9732] ? __fget_files+0x215/0x3d0 [ 373.512399][ T9732] ? fput+0x79/0x100 [ 373.512420][ T9732] ? ksys_write+0x1ac/0x250 [ 373.512437][ T9732] ? __pfx_ksys_write+0x10/0x10 [ 373.512458][ T9732] __x64_sys_bpf+0x7b/0xc0 [ 373.512472][ T9732] ? lockdep_hardirqs_on+0x78/0x100 [ 373.512493][ T9732] do_syscall_64+0x115/0x870 [ 373.512518][ T9732] ? clear_bhb_loop+0x40/0x90 [ 373.512538][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.512555][ T9732] RIP: 0033:0x7f1c73b9ce59 [ 373.512569][ T9732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.512584][ T9732] RSP: 002b:00007f1c74b2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.512600][ T9732] RAX: ffffffffffffffda RBX: 00007f1c73e15fa0 RCX: 00007f1c73b9ce59 [ 373.512609][ T9732] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 373.512618][ T9732] RBP: 00007f1c74b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 373.512627][ T9732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.512635][ T9732] R13: 00007f1c73e16038 R14: 00007f1c73e15fa0 R15: 00007ffcb1d46e18 [ 373.512656][ T9732] [ 374.020997][ T9727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.860471][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 478.867446][ C1] rcu: (detected by 1, t=10502 jiffies, g=44869, q=321 ncpus=2) [ 478.875150][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294985050-4294974548), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 478.888495][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g44869 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 478.899673][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 478.909623][ C1] rcu: RCU grace-period kthread stack dump: [ 478.915492][ C1] task:rcu_preempt state:R running task stack:28904 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 478.928985][ C1] Call Trace: [ 478.932252][ C1] [ 478.935176][ C1] __schedule+0x1295/0x67a0 [ 478.939700][ C1] ? __pfx___schedule+0x10/0x10 [ 478.944540][ C1] ? find_held_lock+0x2b/0x80 [ 478.949209][ C1] ? schedule+0x2bf/0x390 [ 478.953532][ C1] schedule+0xdd/0x390 [ 478.957595][ C1] schedule_timeout+0x127/0x280 [ 478.962436][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 478.967798][ C1] ? __pfx_process_timeout+0x10/0x10 [ 478.973074][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 478.978871][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 478.984329][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 478.989084][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 478.994361][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 478.999289][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 479.004485][ C1] rcu_gp_kthread+0x179/0x230 [ 479.009152][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 479.014338][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 479.020137][ C1] ? __kthread_parkme+0x18c/0x230 [ 479.025159][ C1] ? kthread+0x13a/0x450 [ 479.029392][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 479.034584][ C1] kthread+0x370/0x450 [ 479.038643][ C1] ? __pfx_kthread+0x10/0x10 [ 479.043225][ C1] ret_from_fork+0x72b/0xd50 [ 479.047808][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 479.052912][ C1] ? __switch_to+0x800/0x1100 [ 479.057587][ C1] ? __pfx_kthread+0x10/0x10 [ 479.062166][ C1] ret_from_fork_asm+0x1a/0x30 [ 479.066935][ C1] [ 479.069941][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 479.076247][ C1] Sending NMI from CPU 1 to CPUs 0: [ 479.081526][ C0] NMI backtrace for cpu 0 [ 479.081540][ C0] CPU: 0 UID: 0 PID: 9736 Comm: syz.2.1017 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.081558][ C0] Tainted: [L]=SOFTLOCKUP [ 479.081563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.081570][ C0] RIP: 0010:check_preemption_disabled+0x2/0xe0 [ 479.081590][ C0] Code: 0f 65 8b 05 ac 3a 80 08 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 <55> 53 48 83 ec 08 65 8b 1d 85 f6 7f 08 65 f7 05 76 f6 7f 08 ff ff [ 479.081602][ C0] RSP: 0018:ffffc90000007d88 EFLAGS: 00000046 [ 479.081613][ C0] RAX: 0000000000000001 RBX: ffff88805386d2c0 RCX: 0000000000000001 [ 479.081622][ C0] RDX: 0000000000000000 RSI: ffffffff8deea6e6 RDI: ffffffff8c1c4780 [ 479.081630][ C0] RBP: ffff8880284e4a80 R08: 0000000000000005 R09: 0000000000000000 [ 479.081638][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 00000000ffffffff [ 479.081646][ C0] R13: 0000000000000046 R14: ffff8880284e5610 R15: 0000000000000000 [ 479.081656][ C0] FS: 00007f11bf3c56c0(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 479.081669][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.081678][ C0] CR2: 00007f11be64f156 CR3: 000000007f0ed000 CR4: 00000000003526f0 [ 479.081686][ C0] Call Trace: [ 479.081691][ C0] [ 479.081696][ C0] lock_is_held_type+0xca/0x140 [ 479.081713][ C0] advance_sched+0x8c6/0xd20 [ 479.081742][ C0] ? find_held_lock+0x2b/0x80 [ 479.081753][ C0] ? __hrtimer_run_queues+0x383/0xa00 [ 479.081772][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 479.081788][ C0] ? __pfx_advance_sched+0x10/0x10 [ 479.081806][ C0] __hrtimer_run_queues+0x470/0xa00 [ 479.081827][ C0] hrtimer_interrupt+0x3e5/0x940 [ 479.081850][ C0] __sysvec_apic_timer_interrupt+0x10b/0x460 [ 479.081868][ C0] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 479.081885][ C0] [ 479.081889][ C0] [ 479.081893][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 479.081908][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 479.081924][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 d6 1e 58 f6 48 89 df e8 ae 6e 58 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 b5 3a 48 f6 65 8b 05 6e 1d 7d 08 85 c0 74 16 5b [ 479.081936][ C0] RSP: 0018:ffffc900035e7d78 EFLAGS: 00000246 [ 479.081946][ C0] RAX: 0000000000000002 RBX: ffffffff9b194118 RCX: 0000000000000000 [ 479.081954][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fc2f RDI: ffffffff8c1c4780 [ 479.081962][ C0] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 479.081970][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff920006bcfb6 [ 479.081978][ C0] R13: 000000000d0bbfe4 R14: 000000000d0bbfe4 R15: 0000000000000000 [ 479.081992][ C0] do_settimeofday64+0x326/0x4d0 [ 479.082007][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 479.082021][ C0] ? security_capable+0x80/0x260 [ 479.082037][ C0] ? hidraw_read+0x145/0xae0 [ 479.082055][ C0] ? capable+0xd3/0xf0 [ 479.082074][ C0] do_sys_settimeofday64+0x1dc/0x260 [ 479.082094][ C0] __x64_sys_clock_settime+0x1c1/0x2a0 [ 479.082114][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 479.082135][ C0] ? rcu_is_watching+0x12/0xc0 [ 479.082154][ C0] do_syscall_64+0x115/0x870 [ 479.082170][ C0] ? clear_bhb_loop+0x40/0x90 [ 479.082185][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.082197][ C0] RIP: 0033:0x7f11be59ce59 [ 479.082208][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.082220][ C0] RSP: 002b:00007f11bf3c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 479.082232][ C0] RAX: ffffffffffffffda RBX: 00007f11be815fa0 RCX: 00007f11be59ce59 [ 479.082240][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 479.082248][ C0] RBP: 00007f11be632d6f R08: 0000000000000000 R09: 0000000000000000 [ 479.082256][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.082264][ C0] R13: 00007f11be816038 R14: 00007f11be815fa0 R15: 00007ffe5188f698 [ 479.082278][ C0]