last executing test programs: 21.03982255s ago: executing program 4 (id=2503): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x1040, 0x0, 0xfffffff8, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) syz_emit_ethernet(0x334, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0x8) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose}]}}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000002e80)=@filter={'filter\x00', 0xe, 0x4, 0x176, [0x0, 0x200027c0, 0x200029ec, 0x20002b82], 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"/374]}, 0x1ee) syz_usb_control_io$printer(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r7 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) 20.165318741s ago: executing program 2 (id=2506): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f00000000c0)={0x5, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x23, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="6c72bcf87e"]}, @typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x48000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r10, 0x8cee000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r11, 0x0, 0x0) sendmmsg$inet(r11, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) 18.916930834s ago: executing program 2 (id=2512): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x74}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x13d}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x144}], 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f00000010c0)) 16.985067219s ago: executing program 2 (id=2515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) userfaultfd(0x80801) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) io_uring_setup(0x115e, &(0x7f0000002380)={0x0, 0xea65, 0x8000}) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)) 15.526405399s ago: executing program 4 (id=2518): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f00000000c0)={0x5, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x23, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="6c72bcf87e"]}, @typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}}, 0x48000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r9, 0x8cee000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r10, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) 13.183953435s ago: executing program 2 (id=2524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = io_uring_setup(0x7f8b, &(0x7f0000000040)={0x0, 0xcd35, 0x0, 0x3, 0x0, 0x0, r2}) ioctl$FICLONE(r2, 0x40049409, r3) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x51) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) 13.11590323s ago: executing program 2 (id=2525): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x0, 0x100}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) mmap(&(0x7f000097a000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0xee2be000) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x200080c1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x404c2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x8000000, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) r5 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000060000000000000002000084ffffffff000000000300000000000000000000000200000000000000040000000000000eff000000000000000000000000000085020000000030613061"], 0x0, 0x5e}, 0x28) readv(r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x1, 0x4, [0x3]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, 0x0) 12.294005089s ago: executing program 4 (id=2527): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) shutdown(0xffffffffffffffff, 0x1) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) pipe2(0x0, 0x80000) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io$printer(r0, 0x0, 0x0) 9.809779666s ago: executing program 4 (id=2531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect(0x4, 0x212, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2f, 0xd, 0x56, 0x10, 0x1bc7, 0x1082, 0xa0a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x200, 0x1, 0x6, 0xf7, 0x80, 0x8, "", [{{0x9, 0x4, 0xa7, 0x5, 0xc, 0xff, 0x45, 0x46, 0x5, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x2, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xfff6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3f, 0x2}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3af, 0x39, 0x1, 0x68, [@generic={0x9e, 0x2, "e801075abda7c30faccd8461c001c2645df58592be3bca184ea8f43a96343bfa9d6133c33f1681081d71dba57e5129f345ebada5274a3ea899ce84bb0bf3d6e46135d720a66c61fd82ce650e989fd99276d626b93221032b185d6a6122d4dd9a0e24689710960d41ae5d548c5896504aa16550f70f8b9463bfc8979122dba3cfac4debe8c93067396a2296bcdf74863c36327c19fcb3256824093ab8"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x3, 0xfd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9b, 0x5}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x9, 0x37, 0x1, [@generic={0x37, 0xa, "77ff6e67a314dcf6c03d31b5c3ff9a0e403740be6f6af87e7c27c3d377d115ee687b9c12c441759fb5892196af539d22b19bf1b34d"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x4b4e7a0699c325b2, 0x8, 0x9, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x0, 0x10, 0x5}}, {{0x9, 0x5, 0xcc28ec21b3c86de1, 0x0, 0x8, 0xfc, 0xf2, 0xed, [@generic={0x36, 0x16, "8714fef153eb528642279db22d30233c714db82dad135cdaf5a60e751ffaf3ae16f5391265db463f00aed781013d07883376d080"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x9, 0x1, 0xa}}, {{0x9, 0x5, 0x2, 0x4, 0x5ef4f3ec6d2cbf0d, 0xdf, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1000}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x8, 0x5, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb0, 0x83e}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x4, 0x8b, 0x32, [@generic={0x46, 0x8, "35fb9631d510264ba48339160d17a93a8e7c6555d0ebd3d3218a44de5097bb19305e9193e0cac61b22e4a6b70322c40e29ed318836730f8ae583802373c6b853d5945c80"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mlockall(0x2) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 7.690550071s ago: executing program 0 (id=2536): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x10000, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x99}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 7.470221983s ago: executing program 3 (id=2537): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f00000000c0)={0x5, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x23, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="6c72bcf87e"]}, @typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}}, 0x48000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r9, 0x8cee000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r10, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) 7.115682202s ago: executing program 1 (id=2538): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xd, 0xc}, {0x700, 0xfff1}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4049080) r6 = mmap$IORING_OFF_CQ_RING(0x0, 0x3000, 0x2000003, 0x12, r1, 0x8000000) r7 = syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r7, 0x0, 0x0, r8, 0x0, 0x0) clock_gettime(0xfffffffffffffffe, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r6, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xc3c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x18}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, r9, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4, 0x1000000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x1000, 0x0, 0x6c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa0e7, 0x2, 0x1, 0x400001ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x8000001, 0xffffffff}}], 0x1, 0x0, 0x0) 6.990205971s ago: executing program 0 (id=2539): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f00000000c0)={0x5, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x23, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="6c72bcf87e"]}, @typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x48000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r10, 0x8cee000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r11, 0x0, 0x0, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) 5.300893626s ago: executing program 1 (id=2540): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, &(0x7f0000000200), 0x40000000, &(0x7f0000000380)={{0x0, 0x0}}) (async) socket$inet6(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYRES8=r2, @ANYRES32=r4, @ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x8010) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="730200000000000000f4500f4487249623607b7163228721c107f1b67c0dc143168f7e2d6471482ac566a14dc09006e1dead0a9de23b3e8a016943e7bdd18a4fd346cbec9b93830ef864bc86427b88d82f74bbdc04af0206d4c6743149a3990aae98e032167f48b99ad7c209cd9da5643b5cf142745a0c7dcaf76984ab01f96781e11b419cfc49602b6bbf6a7a69947a3d4a1358837ddb1c28c02199b5ffc1b071ddbe785764e845e70fae91df979b421a151b85218c79714657fcb7833299a73e5344b0bfa80e5bf3c7960b1b54f354b67a90c7dcff18aba5243f788d92a3df318f4e7b29540804f439", 0xea, 0x800, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000002c0)=0x3, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) landlock_create_ruleset(&(0x7f0000000340)={0x100, 0x8, 0x0, 0x28000, 0x0, 0x3}, 0x30, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r8 = socket$kcm(0x10, 0x2, 0x0) (async) ptrace$pokeuser(0x6, 0x0, 0xffffffff00000000, 0xfc) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000540)=""/102) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) (async) r10 = openat$sysfs(0xffffff9c, 0x0, 0x1c9a82, 0x38) sendfile(r10, r9, 0x0, 0x20000000008bc44) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000004000)=@o_path={&(0x7f0000000180)='./file0\x00', r10}, 0x18) socket$key(0xf, 0x3, 0x2) (async) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000002c0), 0x4) 5.129133472s ago: executing program 1 (id=2541): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x100000000, 0x8000320, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@getqdisc={0x48, 0x26, 0x300, 0x70bd2b, 0x25df9c00, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xc, 0xc}, {0x7, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a08000b0006000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r7, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000030801030000000000000000000000000000048008000640000000900800084000000005642230146d14a3b6fd29171aa75aba7c0800084000000b08000740000000050800094000008001050003002f0000000e4454a5b357bdbc62632d19119f160c1ef1bbd31bd93d0da876291719ef9dcb73d429b7b1accd856a733569cf7a074b65096d04bea6907f38a080cb7aeaac0b9c2c667570eec8268e6ee8a800233db4e38cdfc09d5f27cbb6feed17d456ebdf4d09aadd255ea32e3356e62a8d60d6edb0e228000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040884) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 5.127789421s ago: executing program 3 (id=2542): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f00000013c0)=0x9, 0x7fffffffffffffff) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000011c0)={@caif=@rfm={0x25, 0x10000, "35983b5f425ea8c3bd03768178c47f36"}, {&(0x7f0000000180)=""/4096, 0x1000}, &(0x7f0000001180), 0x2}, 0xa0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x883, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0xfc, 0x2, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a54640831002000000ef4e7cc3151d00"}}, 0x80}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 4.476023586s ago: executing program 2 (id=2543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect(0x4, 0x212, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2f, 0xd, 0x56, 0x10, 0x1bc7, 0x1082, 0xa0a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x200, 0x1, 0x6, 0xf7, 0x80, 0x8, "", [{{0x9, 0x4, 0xa7, 0x5, 0xc, 0xff, 0x45, 0x46, 0x5, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x2, 0x7f, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf, 0xfff6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3f, 0x2}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3af, 0x39, 0x1, 0x68, [@generic={0x9e, 0x2, "e801075abda7c30faccd8461c001c2645df58592be3bca184ea8f43a96343bfa9d6133c33f1681081d71dba57e5129f345ebada5274a3ea899ce84bb0bf3d6e46135d720a66c61fd82ce650e989fd99276d626b93221032b185d6a6122d4dd9a0e24689710960d41ae5d548c5896504aa16550f70f8b9463bfc8979122dba3cfac4debe8c93067396a2296bcdf74863c36327c19fcb3256824093ab8"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x3, 0xfd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9b, 0x5}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x9, 0x37, 0x1, [@generic={0x37, 0xa, "77ff6e67a314dcf6c03d31b5c3ff9a0e403740be6f6af87e7c27c3d377d115ee687b9c12c441759fb5892196af539d22b19bf1b34d"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x4b4e7a0699c325b2, 0x8, 0x9, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x0, 0x10, 0x5}}, {{0x9, 0x5, 0xcc28ec21b3c86de1, 0x0, 0x8, 0xfc, 0xf2, 0xed, [@generic={0x36, 0x16, "8714fef153eb528642279db22d30233c714db82dad135cdaf5a60e751ffaf3ae16f5391265db463f00aed781013d07883376d080"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x9, 0x1, 0xa}}, {{0x9, 0x5, 0x2, 0x4, 0x5ef4f3ec6d2cbf0d, 0xdf, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x1000}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x1, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x6}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x8, 0x5, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb0, 0x83e}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x4, 0x8b, 0x32, [@generic={0x46, 0x8, "35fb9631d510264ba48339160d17a93a8e7c6555d0ebd3d3218a44de5097bb19305e9193e0cac61b22e4a6b70322c40e29ed318836730f8ae583802373c6b853d5945c80"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201500200000008990425104000010203010902a60003010110020904000000010100000a2401040029000201020b240402062974f2ee440a092407030100742f590b240606010201000900030904010000010200000904010101010200000b240201d80109027960340924020101010dcbdc0a240201030407"], 0x0) syz_usb_ep_write(r1, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mlockall(0x2) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x1d02) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 4.121751284s ago: executing program 0 (id=2544): socket$alg(0x26, 0x5, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x3d, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1000000, 0x0, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x2d8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 4.063735462s ago: executing program 4 (id=2545): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x6, "", [{{0x9, 0x4, 0x0, 0x58, 0x9, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x10, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000500)={0x40, 0x12, 0x2c, {0x2c, 0x22, "e75bcf47a88a036245640634d2dd23ee24020010da0300000069cf2fa3d3d4832d0e95ce301f08dd21aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a030800030101072501"], 0x0) 3.9835145s ago: executing program 0 (id=2546): timer_create(0x0, 0x0, &(0x7f0000000300)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000300)=0x3ff, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e1d, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) io_setup(0x8, &(0x7f0000004200)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000040)='5\x00', 0x2) io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) socket(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r6, 0x0) listen(0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x8a800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 3.982052856s ago: executing program 3 (id=2547): socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) capget(&(0x7f0000000100)={0x20080522, r0}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='esdfs\x00', 0x3ea60bebe7f00e78, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) 2.763809405s ago: executing program 3 (id=2548): r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0xbc8c, 0x630003) (async) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x38413552, 0x3, [0x2], [0x80ffff, 0xc1], [], [0x400000000000001, 0xffffffff, 0x8]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000400)={r2}) (async) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000000)={0x21, 0x4, 0x2, 0xee5c, 0xfff}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000180)=0x5) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[], 0xffdd) 2.697444373s ago: executing program 0 (id=2549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r4 = openat(0xffffffffffffff9c, 0x0, 0x24000, 0x0) mkdirat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {&(0x7f0000000280)=""/172, 0xac}, 0x0, 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0xa3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_RESET(r8, 0xc00c5512) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2.646572479s ago: executing program 1 (id=2550): syz_open_dev$video(&(0x7f0000000000), 0x9, 0x46000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)="a0", 0x1}], 0x2be, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x2}, &(0x7f0000000100)=0x28) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffb}, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000004802000000000000d8"], 0x30, 0x0) 2.397395565s ago: executing program 3 (id=2551): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xb, 0x1ff001, 0x77, 0x7b, 0x1138, 0xffffffffffffffff, 0x23c}, 0x50) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000240)="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", 0x1c1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cgroup.clone_children\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) r3 = fsopen(&(0x7f0000000000)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0xf4240) syz_open_dev$I2C(&(0x7f0000000680), 0x5, 0x20140) ioctl(r8, 0x4048aecb, &(0x7f0000600000)="0000000000000000001000"/72) ioctl(r8, 0x4048aea0, &(0x7f0000000000)="000000000000000000000000010100"/72) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl(r8, 0x4048aecb, &(0x7f0000600100)="070000000000000101000000ffffffff0100"/72) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000400006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x27, 0xe, 0xfffffcd4, &(0x7f00000006c0)="3d6ee2e04b91ab10143d9abe86dd68f918aefbf31de2828b1070d89577a8f9fd05fd38511974c106d4423415c917d3bd90839c57fad1c4b7e9592ec7e6894b85474e520fe00b26d93b4e8499fadb728b15a1abdaaabdedd56d", 0x0, 0xfffb, 0x0, 0xfffffffffffffe64, 0x7, 0x0, 0x0, 0x2}, 0x50) r9 = dup(r4) write$FUSE_STATX(r9, &(0x7f0000003ac0)={0x16f, 0x0, 0x0, {0x2, 0x100, 0x0, '\x00', {0x1000, 0x6, 0x8, 0xffff, 0x0, 0x0, 0xa000, '\x00', 0xffffffff00000000, 0x2, 0x80000000, 0x1, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0xdc, 0xffffffff}, 0x3, 0x7fff, 0xc68}}}, 0x130) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r9, 0xc04064aa, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x0, 0x0, '\x00', 0x8, 0x5}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="e3ffffb9", @ANYRES16=r5, @ANYRESHEX], 0x6c}, 0x1, 0x0, 0x0, 0x8845}, 0x4000014) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) 1.80452023s ago: executing program 1 (id=2552): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x700) 1.76508772s ago: executing program 1 (id=2553): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x2, 0x0, 0x9, 0x3, 0x100000000, 0x8000320, 0xffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000080)=0x6, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@getqdisc={0x48, 0x26, 0x300, 0x70bd2b, 0x25df9c00, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xc, 0xc}, {0x7, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r7, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000030801030000000000000000000000000000048008000640000000900800084000000005642230146d14a3b6fd29171aa75aba7c0800084000000b08000740000000050800094000008001050003002f0000000e4454a5b357bdbc62632d19119f160c1ef1bbd31bd93d0da876291719ef9dcb73d429b7b1accd856a733569cf7a074b65096d04bea6907f38a080cb7aeaac0b9c2c667570eec8268e6ee8a800233db4e38cdfc09d5f27cbb6feed17d456ebdf4d09aadd255ea32e3356e62a8d60d6edb0e228000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040884) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1.717234449s ago: executing program 3 (id=2554): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc048aeca, &(0x7f00000000c0)={0x5, 0x0, [{0x9c7, 0x0, 0x4}, {0x2e8, 0x0, 0x40000005}, {0x8be, 0x0, 0x8001}, {0x8a1, 0x0, 0x200000000002}, {0x865, 0x0, 0x100000000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x23, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="6c72bcf87e"]}, @typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x48000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r10, 0x8cee000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r11, 0x0, 0x0, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x40) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r8, 0x5760, 0x1f) 1.613711925s ago: executing program 0 (id=2555): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_ublk_setup_io_uring(0x6593, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e05800720"], 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0xa, @pix_mp={0x2, 0xb2dd, 0x3631564e, 0x2, 0x8, [{0x2, 0x7fc}, {0x20000, 0x3550}, {0x5, 0x81}, {0x1, 0x3}, {0xd, 0x4}, {0x7df, 0x6314}, {0xffffffe7}, {0x3, 0x9}], 0x0, 0x7, 0x4, 0x0, 0x5}}) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xa4, 0xa}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {0x0, 0x0, 0x25}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2508000100000000000ae38f64b47de72b79a6c275b37d6fca3ee44d9eeaeac267fbeb811dfcf3843f6d53ac128a28"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 4 (id=2556): socket(0x2b, 0x4, 0x4000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) capget(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='esdfs\x00', 0x3ea60bebe7f00e78, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) creat(&(0x7f00000002c0)='./file0\x00', 0x104) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.0.2104'. [ 769.086184][ T5839] (null): failure reading functionality [ 769.092745][ T5839] i2c i2c-2: failure reading functionality [ 769.103744][ T5839] i2c i2c-2: connected i2c-tiny-usb device [ 769.131621][ T5839] usb 3-1: USB disconnect, device number 48 [ 769.171538][T13772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.480689][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 769.647217][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 769.685113][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.702416][ T9] usb 5-1: Product: syz [ 769.706933][ T9] usb 5-1: Manufacturer: syz [ 769.714179][ T9] usb 5-1: SerialNumber: syz [ 769.719422][T13790] FAULT_INJECTION: forcing a failure. [ 769.719422][T13790] name failslab, interval 1, probability 0, space 0, times 0 [ 769.739898][ T9] usb 5-1: config 0 descriptor?? [ 769.756532][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 056 [ 769.765011][T13790] CPU: 0 UID: 0 PID: 13790 Comm: syz.3.2109 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.765037][T13790] Tainted: [L]=SOFTLOCKUP [ 769.765043][T13790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 769.765054][T13790] Call Trace: [ 769.765060][T13790] [ 769.765066][T13790] dump_stack_lvl+0x100/0x190 [ 769.765092][T13790] should_fail_ex.cold+0x5/0xa [ 769.765115][T13790] should_failslab+0xc2/0x120 [ 769.765139][T13790] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 769.765160][T13790] ? __alloc_skb+0x5b7/0x710 [ 769.765181][T13790] ? __alloc_skb+0x140/0x710 [ 769.765202][T13790] __alloc_skb+0x140/0x710 [ 769.765220][T13790] ? __alloc_skb+0x5b7/0x710 [ 769.765237][T13790] ? __pfx___alloc_skb+0x10/0x10 [ 769.765262][T13790] alloc_skb_with_frags+0xdd/0x760 [ 769.765287][T13790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 769.765309][T13790] sock_alloc_send_pskb+0x801/0x980 [ 769.765330][T13790] ? ipv6_dev_get_saddr+0x34a/0xd20 [ 769.765359][T13790] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 769.765379][T13790] ? __lock_acquire+0x49f/0x1a40 [ 769.765404][T13790] ? __pfx_ipv6_dev_get_saddr+0x10/0x10 [ 769.765435][T13790] __ip6_append_data+0x272f/0x4bd0 [ 769.765462][T13790] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 769.765499][T13790] ? __pfx___ip6_append_data+0x10/0x10 [ 769.765521][T13790] ? __pfx_ip6_mtu+0x10/0x10 [ 769.765538][T13790] ? ip6_setup_cork+0x5be/0x14c0 [ 769.765562][T13790] ip6_make_skb+0x2a3/0x3b0 [ 769.765588][T13790] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 769.765607][T13790] ? __pfx_ip6_make_skb+0x10/0x10 [ 769.765628][T13790] ? ip6_dst_lookup_flow+0xcb/0x240 [ 769.765663][T13790] ? udpv6_sendmsg+0x2231/0x2c20 [ 769.765688][T13790] udpv6_sendmsg+0x2231/0x2c20 [ 769.765724][T13790] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 769.765749][T13790] ? do_raw_spin_lock+0x128/0x260 [ 769.765807][T13790] ? __local_bh_enable_ip+0x9e/0x120 [ 769.765831][T13790] ? lockdep_hardirqs_on+0x78/0x100 [ 769.765851][T13790] ? inet_autobind+0x145/0x1a0 [ 769.765868][T13790] ? __local_bh_enable_ip+0x9e/0x120 [ 769.765892][T13790] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 769.765919][T13790] ? inet6_sendmsg+0x105/0x140 [ 769.765933][T13790] inet6_sendmsg+0x105/0x140 [ 769.765951][T13790] ____sys_sendmsg+0x704/0xbe0 [ 769.765979][T13790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 769.766010][T13790] ? __pfx__kstrtoull+0x10/0x10 [ 769.766034][T13790] ___sys_sendmsg+0x190/0x1e0 [ 769.766063][T13790] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.766102][T13790] ? find_held_lock+0x2b/0x80 [ 769.766144][T13790] __sys_sendmmsg+0x20c/0x440 [ 769.766169][T13790] ? __pfx___sys_sendmmsg+0x10/0x10 [ 769.766190][T13790] ? ksys_write+0x190/0x250 [ 769.766235][T13790] ? fput+0x79/0x100 [ 769.766256][T13790] ? ksys_write+0x1ac/0x250 [ 769.766281][T13790] ? __pfx_ksys_write+0x10/0x10 [ 769.766312][T13790] __x64_sys_sendmmsg+0x9c/0x100 [ 769.766334][T13790] ? lockdep_hardirqs_on+0x78/0x100 [ 769.766353][T13790] do_syscall_64+0x115/0x870 [ 769.766372][T13790] ? clear_bhb_loop+0x40/0x90 [ 769.766393][T13790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.766412][T13790] RIP: 0033:0x7f792319de99 [ 769.766428][T13790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.766443][T13790] RSP: 002b:00007f7923fe1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 769.766461][T13790] RAX: ffffffffffffffda RBX: 00007f7923425fa0 RCX: 00007f792319de99 [ 769.766478][T13790] RDX: 0000000000000002 RSI: 0000200000000940 RDI: 0000000000000003 [ 769.766488][T13790] RBP: 00007f7923fe1090 R08: 0000000000000000 R09: 0000000000000000 [ 769.766498][T13790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 769.766508][T13790] R13: 00007f7923426038 R14: 00007f7923425fa0 R15: 00007fff46304bd8 [ 769.766531][T13790] [ 770.168388][T13792] No such timeout policy "syz1" [ 770.696045][ T9] (null): failure reading functionality [ 770.703045][ T9] i2c i2c-2: failure reading functionality [ 770.710582][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 770.724649][ T9] usb 5-1: USB disconnect, device number 56 [ 771.972608][T13807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2114'. [ 772.005708][T13807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.375376][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 772.478235][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 772.502379][T13814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2115'. [ 772.535195][T13814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.549379][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.578136][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 772.615196][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.718148][ T9] usb 3-1: config 0 descriptor?? [ 772.754170][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 773.252979][T13822] tmpfs: Too few inodes for current use [ 773.354375][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 773.550480][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 773.608933][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 773.617228][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 773.637660][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 773.638275][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.679732][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.776390][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 773.806996][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 773.827953][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 773.843959][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 774.078559][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 774.104052][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 774.125335][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 774.138633][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 774.156359][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 774.182710][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 774.236049][ T9] pwc: Registered as video103. [ 774.258506][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 774.322160][ T9] usb 3-1: USB disconnect, device number 49 [ 774.434863][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 774.441242][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 774.484163][T13845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2123'. [ 774.630764][T13845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=13845 comm=syz.4.2123 [ 775.125182][T13858] netlink: 432 bytes leftover after parsing attributes in process `syz.4.2127'. [ 775.238488][ T29] audit: type=1400 audit(1785669776.897:959): avc: denied { ioctl } for pid=13856 comm="syz.4.2127" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 775.253595][T13861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2122'. [ 775.587449][T13842] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.665380][T13871] openvswitch: netlink: IP tunnel dst address not specified [ 775.676241][T13871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.914931][ T5839] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 776.090046][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 776.105537][ T5839] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 777.107348][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.141564][ T5839] usb 1-1: config 0 descriptor?? [ 777.223893][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 777.468647][T13896] syzkaller1: entered promiscuous mode [ 777.475096][T13896] syzkaller1: entered allmulticast mode [ 777.704359][ T5839] pwc: recv_control_msg error -32 req 02 val 2b00 [ 777.722368][ T5839] pwc: recv_control_msg error -32 req 02 val 2700 [ 777.742001][ T5839] pwc: recv_control_msg error -32 req 02 val 2c00 [ 777.758783][ T5839] pwc: recv_control_msg error -32 req 04 val 1000 [ 777.855829][ T5839] pwc: recv_control_msg error -32 req 04 val 1300 [ 778.062470][ T5839] pwc: recv_control_msg error -32 req 04 val 1400 [ 778.152107][ T5839] pwc: recv_control_msg error -32 req 02 val 2000 [ 778.174135][ T5839] pwc: recv_control_msg error -32 req 02 val 2100 [ 778.191124][ T5839] pwc: recv_control_msg error -32 req 04 val 1500 [ 778.213326][ T5839] pwc: recv_control_msg error -32 req 02 val 2500 [ 778.227634][ T5839] pwc: recv_control_msg error -32 req 02 val 2400 [ 778.267365][ T5839] pwc: recv_control_msg error -32 req 02 val 2600 [ 778.295950][ T5839] pwc: recv_control_msg error -71 req 02 val 2900 [ 778.309525][ T5839] pwc: recv_control_msg error -71 req 02 val 2800 [ 778.327599][ T5839] pwc: recv_control_msg error -71 req 04 val 1100 [ 778.345631][ T5839] pwc: recv_control_msg error -71 req 04 val 1200 [ 778.363133][ T5839] pwc: Registered as video103. [ 778.373792][ T5839] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 778.392888][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 778.432675][ T5839] usb 1-1: USB disconnect, device number 52 [ 778.573410][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 778.598528][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 778.615951][ T9] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 778.631993][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.660082][ T9] usb 5-1: Product: syz [ 778.669058][ T9] usb 5-1: Manufacturer: syz [ 778.678814][ T9] usb 5-1: SerialNumber: syz [ 778.712510][ T9] usb 5-1: config 0 descriptor?? [ 778.734855][ T9] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 778.767430][ T9] usb 5-1: Detected FT232R [ 779.117459][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 779.134958][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 779.156604][ T9] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 779.178248][ T9] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 780.229635][ T9] usb 5-1: USB disconnect, device number 57 [ 780.260537][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 780.288049][ T9] ftdi_sio 5-1:0.0: device disconnected [ 780.654883][T13947] fuse: Unknown parameter 'group_i00000000000000000000' [ 780.940128][ T5728] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 781.066424][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 781.122862][ T5728] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.133240][ T5728] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 781.147297][ T5728] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 781.161514][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 781.185063][ T5728] usb 3-1: SerialNumber: syz [ 781.217752][ T24] usb 2-1: device descriptor read/64, error -71 [ 781.240697][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2151'. [ 781.348078][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 781.407729][T13957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 781.521243][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 781.534546][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 781.555350][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 781.657710][T13968] FAULT_INJECTION: forcing a failure. [ 781.657710][T13968] name failslab, interval 1, probability 0, space 0, times 0 [ 781.670507][T13968] CPU: 0 UID: 0 PID: 13968 Comm: syz.2.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 781.670534][T13968] Tainted: [L]=SOFTLOCKUP [ 781.670540][T13968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 781.670550][T13968] Call Trace: [ 781.670556][T13968] [ 781.670562][T13968] dump_stack_lvl+0x100/0x190 [ 781.670589][T13968] should_fail_ex.cold+0x5/0xa [ 781.670612][T13968] should_failslab+0xc2/0x120 [ 781.670635][T13968] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 781.670657][T13968] ? __alloc_skb+0x5b7/0x710 [ 781.670676][T13968] ? __alloc_skb+0x140/0x710 [ 781.670700][T13968] __alloc_skb+0x140/0x710 [ 781.670718][T13968] ? __alloc_skb+0x5b7/0x710 [ 781.670736][T13968] ? __pfx___alloc_skb+0x10/0x10 [ 781.670754][T13968] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 781.670779][T13968] ? sock_has_perm+0x25a/0x2f0 [ 781.670802][T13968] ? __pfx_sock_has_perm+0x10/0x10 [ 781.670827][T13968] netlink_alloc_large_skb+0x69/0x150 [ 781.670847][T13968] netlink_sendmsg+0x680/0xda0 [ 781.670869][T13968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.670890][T13968] ? selinux_socket_sendmsg+0x198/0x2f0 [ 781.670918][T13968] ____sys_sendmsg+0xa4d/0xbe0 [ 781.670942][T13968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.670961][T13968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.670990][T13968] ? __pfx___schedule+0x10/0x10 [ 781.671014][T13968] ___sys_sendmsg+0x190/0x1e0 [ 781.671042][T13968] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.671066][T13968] ? __lock_acquire+0x49f/0x1a40 [ 781.671117][T13968] __sys_sendmsg+0x160/0x210 [ 781.671139][T13968] ? __pfx___sys_sendmsg+0x10/0x10 [ 781.671173][T13968] do_syscall_64+0x115/0x870 [ 781.671192][T13968] ? clear_bhb_loop+0x40/0x90 [ 781.671213][T13968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.671236][T13968] RIP: 0033:0x7f0ec2b9de99 [ 781.671252][T13968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.671269][T13968] RSP: 002b:00007f0ec39a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.671287][T13968] RAX: ffffffffffffffda RBX: 00007f0ec2e26180 RCX: 00007f0ec2b9de99 [ 781.671299][T13968] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 000000000000000b [ 781.671311][T13968] RBP: 00007f0ec39a0090 R08: 0000000000000000 R09: 0000000000000000 [ 781.671322][T13968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.671333][T13968] R13: 00007f0ec2e26218 R14: 00007f0ec2e26180 R15: 00007ffc4688ff38 [ 781.671356][T13968] [ 781.850615][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 781.910517][T13968] 9p: Bad value for 'rfdno' [ 781.916722][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 781.980635][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 781.990126][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.009548][ T24] usb 2-1: device descriptor read/64, error -71 [ 782.009580][ T9] usb 5-1: Product: syz [ 782.009598][ T9] usb 5-1: Manufacturer: syz [ 782.009612][ T9] usb 5-1: SerialNumber: syz [ 782.037559][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 782.161136][ T24] usb usb2-port1: attempt power cycle [ 782.258535][ T29] audit: type=1400 audit(1785669783.365:960): avc: denied { write } for pid=13959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.337479][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 782.418771][ T29] audit: type=1400 audit(1785669783.522:961): avc: denied { write } for pid=13976 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.451795][T13970] netlink: 'syz.3.2152': attribute type 2 has an invalid length. [ 782.492578][ T9] usb 5-1: USB disconnect, device number 58 [ 782.535532][T13970] geneve3: entered promiscuous mode [ 782.551042][ T24] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 782.559586][T13970] geneve3: entered allmulticast mode [ 782.595301][ T5922] udevd[5922]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 782.615014][ T5274] veth0_vlan: left promiscuous mode [ 782.616720][ T24] usb 2-1: device descriptor read/8, error -71 [ 782.658923][ T5737] veth0_vlan: entered promiscuous mode [ 782.919738][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 782.956985][ T24] usb 2-1: device descriptor read/8, error -71 [ 783.116823][ T24] usb usb2-port1: unable to enumerate USB device [ 783.277251][T11662] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 783.613489][T11662] usb 5-1: Using ep0 maxpacket: 16 [ 783.618747][ T29] audit: type=1400 audit(1785669784.620:962): avc: denied { write } for pid=13980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 783.644061][T11662] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 783.662162][T11662] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 783.677931][T11662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.689140][T11662] usb 5-1: Product: syz [ 783.697066][T11662] usb 5-1: Manufacturer: syz [ 783.709518][T11662] usb 5-1: SerialNumber: syz [ 783.727179][T11662] usb 5-1: config 0 descriptor?? [ 783.741751][T11662] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 783.815483][T11662] usb 5-1: Detected FT232R [ 783.916685][ T5728] usb 3-1: 0:2 : does not exist [ 783.977925][ T29] audit: type=1400 audit(1785669784.915:963): avc: denied { write } for pid=14003 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.063075][T11662] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 784.073494][ T5728] usb 3-1: USB disconnect, device number 50 [ 784.106016][T11662] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 784.137535][T11662] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 784.176143][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 784.195453][T14015] overlayfs: invalid origin (0000007900726f632f73656c66000000000000000000) [ 784.199906][T11662] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 784.251951][T11662] usb 5-1: USB disconnect, device number 59 [ 784.271051][T11662] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 784.286222][T11662] ftdi_sio 5-1:0.0: device disconnected [ 784.303054][T14017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.577788][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 784.751931][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 784.765861][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 784.785110][ T9] usb 2-1: config 186 has an invalid interface number: 3 but max is 0 [ 784.818206][ T9] usb 2-1: config 186 has no interface number 0 [ 784.832343][ T9] usb 2-1: config 186 interface 3 has no altsetting 0 [ 784.848280][ T9] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=d8.8f [ 784.859271][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.884623][ T9] usb 2-1: Product: syz [ 784.890008][ T9] usb 2-1: Manufacturer: syz [ 784.896736][ T9] usb 2-1: SerialNumber: syz [ 785.132580][T14033] netlink: 'syz.3.2163': attribute type 2 has an invalid length. [ 785.202625][T14033] geneve3: entered promiscuous mode [ 785.241464][T14033] geneve3: entered allmulticast mode [ 785.494189][ T9] usb-storage 2-1:186.3: USB Mass Storage device detected [ 785.528609][ T9] usb-storage 2-1:186.3: device ignored [ 785.596451][ T9] usb 2-1: USB disconnect, device number 58 [ 785.768084][ T29] audit: type=1400 audit(1785669786.603:964): avc: denied { ioctl } for pid=14042 comm="syz.0.2165" path="socket:[57385]" dev="sockfs" ino=57385 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 786.567802][ T29] audit: type=1400 audit(1785669787.000:965): avc: denied { read } for pid=14042 comm="syz.0.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 786.826250][T14063] xt_hashlimit: size too large, truncated to 1048576 [ 786.992549][ T29] audit: type=1400 audit(1785669787.738:966): avc: denied { shutdown } for pid=14062 comm="syz.0.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 787.021929][T14067] netlink: 'syz.0.2169': attribute type 27 has an invalid length. [ 787.957413][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 788.292943][T14097] syzkaller1: entered promiscuous mode [ 788.308430][T14097] syzkaller1: entered allmulticast mode [ 788.318320][T14083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2174'. [ 788.332498][T14097] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 788.348689][T14083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.365996][T14097] syzkaller0: entered promiscuous mode [ 788.381689][T14097] syzkaller0: entered allmulticast mode [ 789.591938][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2184'. [ 789.704368][ T29] audit: type=1400 audit(1785669790.239:967): avc: denied { listen } for pid=14120 comm="syz.3.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 789.746911][ T29] audit: type=1400 audit(1785669790.266:968): avc: denied { accept } for pid=14120 comm="syz.3.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 789.793574][ T29] audit: type=1400 audit(1785669790.322:969): avc: denied { shutdown } for pid=14120 comm="syz.3.2187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 790.141216][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 790.170185][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 791.300056][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 791.427072][T11662] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 791.665585][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 791.679303][T11662] usb 5-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config [ 791.679906][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.726214][T11662] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 62272, setting to 1024 [ 791.730802][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.765436][T11662] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 791.777352][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 791.790673][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.799062][T11662] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.836242][ T9] usb 4-1: config 0 descriptor?? [ 791.849597][T11662] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 791.878610][T11662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 791.900432][T11662] usb 5-1: Product: syz [ 791.910061][T11662] usb 5-1: Manufacturer: syz [ 791.931823][T14149] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 791.948794][T11662] usb_debug 5-1:1.0: debug converter detected [ 791.970378][T11662] usb 5-1: debug converter now attached to ttyUSB0 [ 791.991620][ T9016] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 792.076303][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2194'. [ 792.117030][T14155] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 792.157302][ T9016] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 792.166723][ T9016] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.180311][ T9016] usb 3-1: Product: syz [ 792.187695][ T9826] usb 5-1: USB disconnect, device number 60 [ 792.203633][ T9016] usb 3-1: Manufacturer: syz [ 792.363061][ T9826] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 792.388548][ T9826] usb_debug 5-1:1.0: device disconnected [ 792.401981][ T9] ft260 0003:0403:6030.000D: item fetching failed at offset 0/2 [ 792.412488][ T9016] usb 3-1: SerialNumber: syz [ 792.448587][ T9016] usb 3-1: config 0 descriptor?? [ 792.455905][ T9] ft260 0003:0403:6030.000D: failed to parse HID [ 792.476926][ T9016] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 051 [ 792.489439][ T9] ft260 0003:0403:6030.000D: probe with driver ft260 failed with error -22 [ 792.640847][ T9] usb 4-1: USB disconnect, device number 66 [ 793.321060][ T9826] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 793.512281][ T9826] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 793.534267][ T9826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.567030][ T9826] usb 1-1: Product: syz [ 793.575412][ T9826] usb 1-1: Manufacturer: syz [ 793.590367][ T9826] usb 1-1: SerialNumber: syz [ 793.600198][ T9016] (null): failure reading functionality [ 793.622500][ T9016] i2c i2c-2: failure reading functionality [ 793.624800][ T9826] usb 1-1: config 0 descriptor?? [ 793.667956][ T9016] i2c i2c-2: connected i2c-tiny-usb device [ 793.680736][ T9826] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 053 [ 793.725870][ T9016] usb 3-1: USB disconnect, device number 51 [ 793.857028][T14175] netlink: 'syz.3.2202': attribute type 2 has an invalid length. [ 793.997713][ T29] audit: type=1400 audit(1785669794.151:970): avc: denied { accept } for pid=14172 comm="syz.3.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 794.831073][ T9826] (null): failure reading functionality [ 794.847776][ T9826] i2c i2c-2: failure reading functionality [ 794.866665][ T9826] i2c i2c-2: connected i2c-tiny-usb device [ 794.901282][ T9826] usb 1-1: USB disconnect, device number 53 [ 795.012277][ T9016] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 795.040028][ T29] audit: type=1400 audit(1785669795.166:971): avc: denied { ioctl } for pid=14188 comm="syz.3.2206" path="/dev/uhid" dev="devtmpfs" ino=1272 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 795.086952][ T9016] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 796.821567][ T29] audit: type=1400 audit(1785669796.808:972): avc: denied { transfer } for pid=14218 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 796.987769][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 797.631532][ T29] audit: type=1400 audit(1785669797.556:973): avc: denied { write } for pid=14202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.640971][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'. [ 797.713424][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 797.735313][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 797.753323][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.782974][T14212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2201'. [ 797.819715][ T24] usb 2-1: Product: syz [ 797.840412][ T29] audit: type=1400 audit(1785669797.750:974): avc: denied { map } for pid=14228 comm="syz.2.2214" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 797.874776][ T24] usb 2-1: Manufacturer: syz [ 797.892613][ T24] usb 2-1: SerialNumber: syz [ 797.920467][ T24] usb 2-1: config 0 descriptor?? [ 797.933545][ T24] gspca_main: spca508-2.14.0 probing 041e:4018 [ 797.942066][ T29] audit: type=1400 audit(1785669797.814:975): avc: denied { write } for pid=14227 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.118883][T14181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 798.150073][ T24] gspca_spca508: reg_read err -32 [ 798.184849][ T29] audit: type=1804 audit(1785669798.063:976): pid=14217 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2213" name="/newroot/399/file0" dev="tmpfs" ino=2176 res=1 errno=0 [ 798.209573][T14217] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 798.228582][T14217] ref_ctr increment failed for inode: 0x880 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888037cc8000 [ 798.446158][ T5839] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 798.447881][ T29] audit: type=1400 audit(1785669798.239:977): avc: denied { ioctl } for pid=14211 comm="syz.3.2211" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 798.622305][T14217] uprobe: syz.1.2213:14217 failed to unregister, leaking uprobe [ 798.637103][ T29] audit: type=1400 audit(1785669798.488:978): avc: denied { search } for pid=14237 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.699385][ T24] gspca_spca508: reg_read err -110 [ 798.710212][ T24] gspca_spca508: reg_read err -32 [ 798.716146][ T29] audit: type=1400 audit(1785669798.488:979): avc: denied { search } for pid=14237 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.744203][ T24] gspca_spca508: reg_read err -32 [ 798.756085][ T24] gspca_spca508: reg_read err -32 [ 798.764428][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 798.766263][ T24] gspca_spca508: reg write: error -32 [ 798.786941][ T24] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 798.788126][ T5839] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.795625][ T29] audit: type=1400 audit(1785669798.488:980): avc: denied { search } for pid=14237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 798.904545][ T5839] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 798.938967][ T9826] usb 2-1: USB disconnect, device number 59 [ 798.968259][ T29] audit: type=1400 audit(1785669798.488:981): avc: denied { search } for pid=14237 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.011583][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.080494][ T5839] usb 4-1: Product: syz [ 799.096160][ T5839] usb 4-1: Manufacturer: syz [ 799.112302][ T5839] usb 4-1: SerialNumber: syz [ 800.090426][ T5839] usb 4-1: config 0 descriptor?? [ 800.114579][ T5839] usb 4-1: can't set config #0, error -71 [ 800.174699][ T5839] usb 4-1: USB disconnect, device number 67 [ 800.899489][ T9826] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 801.625251][ T9826] usb 4-1: Using ep0 maxpacket: 16 [ 801.666290][ T9826] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 801.691945][ T9826] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 801.726867][ T9826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.755581][ T9826] usb 4-1: Product: syz [ 801.770057][ T9826] usb 4-1: Manufacturer: syz [ 801.779547][ T9826] usb 4-1: SerialNumber: syz [ 801.793642][ T9826] usb 4-1: config 0 descriptor?? [ 801.821452][ T9826] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 801.839296][ T9826] usb 4-1: Detected FT232R [ 802.135979][ T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 802.207411][ T9826] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 802.305093][ T5728] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 802.318613][ T9826] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 802.338919][ T9826] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 802.351193][ T9826] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 802.368139][ T9826] usb 4-1: USB disconnect, device number 68 [ 802.404298][ T24] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 802.421508][ T9826] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 802.446012][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.464540][ T9826] ftdi_sio 4-1:0.0: device disconnected [ 802.484894][ T24] usb 1-1: Product: syz [ 802.496054][ T24] usb 1-1: Manufacturer: syz [ 802.513608][ T24] usb 1-1: SerialNumber: syz [ 802.535633][ T5728] usb 2-1: device descriptor read/64, error -71 [ 802.542599][ T24] usb 1-1: config 0 descriptor?? [ 802.568840][ T24] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 054 [ 802.805588][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 802.805600][ T29] audit: type=1400 audit(1785669802.326:1043): avc: denied { create } for pid=14285 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 802.846787][ T5728] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 802.850833][ T9016] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 803.181433][ T29] audit: type=1400 audit(1785669802.465:1044): avc: denied { setopt } for pid=14285 comm="syz.0.2224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 803.245722][ T29] audit: type=1400 audit(1785669802.741:1045): avc: denied { write } for pid=14303 comm="syz.3.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 803.302670][ T24] (null): error -EIO: failure setting delay to 10us [ 803.310091][ T24] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 803.321795][ T24] usb 1-1: USB disconnect, device number 54 [ 803.338738][ T9016] usb 3-1: not running at top speed; connect to a high speed hub [ 803.349353][ T5728] usb 2-1: device descriptor read/64, error -71 [ 803.369335][ T9016] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 803.406013][ T9016] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 803.434210][ T9016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.461197][ T9016] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 803.467872][ T5728] usb usb2-port1: attempt power cycle [ 803.486151][ T9016] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 803.685464][ T29] audit: type=1400 audit(1785669803.147:1046): avc: denied { mount } for pid=14299 comm="syz.2.2227" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 803.712482][ T9016] usb 3-1: USB disconnect, device number 52 [ 803.723681][ T9016] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 803.733663][ T9016] garmin_gps 3-1:1.0: device disconnected [ 803.749470][T11662] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 803.847267][ T5728] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 803.890904][ T5728] usb 2-1: device descriptor read/8, error -71 [ 803.906827][ T29] audit: type=1400 audit(1785669803.350:1047): avc: denied { create } for pid=14313 comm="syz.0.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 803.933758][T11662] usb 4-1: Using ep0 maxpacket: 32 [ 803.942713][ T29] audit: type=1400 audit(1785669803.378:1048): avc: denied { connect } for pid=14313 comm="syz.0.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 803.942833][T11662] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 804.006609][T11662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.033293][T11662] usb 4-1: Product: syz [ 804.040615][T11662] usb 4-1: Manufacturer: syz [ 804.054655][T11662] usb 4-1: SerialNumber: syz [ 804.066950][T11662] usb 4-1: config 0 descriptor?? [ 804.172353][ T5728] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 804.205074][ T5728] usb 2-1: device descriptor read/8, error -71 [ 804.286793][ T29] audit: type=1400 audit(1785669803.701:1049): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 804.310758][T11662] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 804.333745][T11662] 00 00 00 00 00 00 00 00 [ 804.341745][ T5728] usb usb2-port1: unable to enumerate USB device [ 804.349894][T11662] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 804.554579][ T29] audit: type=1400 audit(1785669803.950:1050): avc: denied { read } for pid=14307 comm="syz.3.2229" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 804.620852][ T29] audit: type=1400 audit(1785669803.969:1051): avc: denied { open } for pid=14307 comm="syz.3.2229" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 804.708881][ T29] audit: type=1400 audit(1785669804.052:1052): avc: denied { write } for pid=14307 comm="syz.3.2229" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 804.741928][ T5839] usb 4-1: USB disconnect, device number 69 [ 804.879365][T14321] netlink: 'syz.2.2232': attribute type 2 has an invalid length. [ 806.123874][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2236'. [ 807.343112][T14348] 9p: Bad value for 'rfdno' [ 807.375335][T14347] syzkaller0: entered promiscuous mode [ 807.394104][T14347] syzkaller0: entered allmulticast mode [ 807.442790][ T5728] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 807.629335][ T5728] usb 2-1: Using ep0 maxpacket: 8 [ 807.650380][ T5728] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 807.742128][T14365] fuse: Bad value for 'rootmode' [ 807.748128][ T5728] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 807.783524][ T5728] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 807.793381][ T5728] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 807.803341][ T5728] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.816396][ T5728] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 807.825463][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.161920][ T5728] usb 2-1: usb_control_msg returned -32 [ 808.180791][ T5728] usbtmc 2-1:16.0: can't read capabilities [ 808.292307][T14376] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2246'. [ 808.305695][ T9016] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 808.348983][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 808.349003][ T29] audit: type=1400 audit(1785669807.447:1081): avc: denied { create } for pid=14374 comm="syz.4.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 808.496437][ T9016] usb 4-1: Using ep0 maxpacket: 8 [ 808.532078][ T9016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.550507][ T9016] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 808.617832][ T9016] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 808.655672][ T9016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.752138][ T9016] usb 4-1: config 0 descriptor?? [ 808.852928][T14373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2245'. [ 808.957363][T14373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.994940][ T29] audit: type=1400 audit(1785669808.019:1082): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 809.107251][ T29] audit: type=1400 audit(1785669808.130:1083): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 809.444881][ T9016] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x2 [ 809.525427][ T9016] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 809.610607][ T9016] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 809.664426][ T9016] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 809.685924][ T9016] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 809.702316][ T9016] hid-picolcd 0003:04D8:C002.000F: unknown main item tag 0x0 [ 809.716868][ T29] audit: type=1400 audit(1785669808.711:1084): avc: denied { write } for pid=14342 comm="syz.1.2239" name="usbtmc0" dev="devtmpfs" ino=3957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 809.761429][T14378] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 809.793970][ T9016] hid-picolcd 0003:04D8:C002.000F: No report with id 0x11 found [ 809.837575][ T9016] usb 4-1: USB disconnect, device number 70 [ 810.087562][ T5728] usb 2-1: USB disconnect, device number 64 [ 810.112140][ T29] audit: type=1400 audit(1785669809.080:1085): avc: denied { getopt } for pid=14385 comm="syz.4.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 810.142773][ T29] audit: type=1400 audit(1785669809.099:1086): avc: denied { write } for pid=14385 comm="syz.4.2248" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 810.188542][ T29] audit: type=1400 audit(1785669809.099:1087): avc: denied { open } for pid=14385 comm="syz.4.2248" path="/dev/input/event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 810.325467][T14384] netlink: 'syz.0.2247': attribute type 2 has an invalid length. [ 810.334126][T14390] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 811.286965][ T29] audit: type=1400 audit(1785669810.160:1088): avc: denied { read write } for pid=14396 comm="syz.3.2250" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.310580][ T29] audit: type=1400 audit(1785669810.160:1089): avc: denied { open } for pid=14396 comm="syz.3.2250" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.333911][ T29] audit: type=1400 audit(1785669810.160:1090): avc: denied { map } for pid=14396 comm="syz.3.2250" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 811.631862][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 812.847163][T14412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.566992][T14421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2255'. [ 813.684340][T14421] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 813.778367][T14419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 814.029304][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 814.029322][ T29] audit: type=1400 audit(1785669812.688:1093): avc: denied { mmap_zero } for pid=14431 comm="syz.2.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 815.066417][ T29] audit: type=1400 audit(1785669812.716:1094): avc: denied { mount } for pid=14431 comm="syz.2.2258" name="/" dev="gadgetfs" ino=6836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 815.169092][ T29] audit: type=1400 audit(1785669813.740:1095): avc: denied { create } for pid=14433 comm="syz.3.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 815.311094][T14437] infiniband syz2: set active [ 815.316041][T14437] infiniband syz2: added team_slave_1 [ 815.350870][ T29] audit: type=1400 audit(1785669813.740:1096): avc: denied { write } for pid=14433 comm="syz.3.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 815.375728][T14437] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 815.391311][T14437] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 815.408481][T14437] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 815.452500][T14437] RDS/IB: syz2: added [ 815.456786][T14437] smc: adding ib device syz2 with port count 1 [ 815.463020][T14437] smc: ib device syz2 port 1 has no pnetid [ 816.054507][ T29] audit: type=1400 audit(1785669814.552:1097): avc: denied { read write } for pid=14442 comm="syz.4.2262" name="btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 816.140335][ T29] audit: type=1400 audit(1785669814.552:1098): avc: denied { ioctl open } for pid=14442 comm="syz.4.2262" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 816.224961][T14447] can0: slcan on ttyS3. [ 816.314086][ T29] audit: type=1400 audit(1785669814.709:1099): avc: denied { read } for pid=5274 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 816.401883][T14447] can0 (unregistered): slcan off ttyS3. [ 817.486466][ T29] audit: type=1400 audit(1785669815.881:1100): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 818.120739][T14465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2261'. [ 818.206251][T14465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.261388][ T29] audit: type=1400 audit(1785669816.591:1101): avc: denied { create } for pid=14470 comm="syz.4.2268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 818.368713][T14473] netlink: 'syz.1.2265': attribute type 2 has an invalid length. [ 819.172133][ T29] audit: type=1400 audit(1785669817.440:1102): avc: denied { read } for pid=14475 comm="syz.2.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 820.366516][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 820.366529][ T29] audit: type=1400 audit(1785669818.427:1105): avc: denied { bind } for pid=14491 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.401607][ T29] audit: type=1400 audit(1785669818.427:1106): avc: denied { setopt } for pid=14491 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.450300][ T29] audit: type=1400 audit(1785669818.427:1107): avc: denied { accept } for pid=14491 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.581112][ T29] audit: type=1400 audit(1785669818.427:1108): avc: denied { write } for pid=14491 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.864078][ T29] audit: type=1400 audit(1785669818.427:1109): avc: denied { read } for pid=14491 comm="syz.0.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 820.927434][ T29] audit: type=1400 audit(1785669818.640:1110): avc: denied { mount } for pid=14495 comm="syz.1.2274" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 820.989931][ T29] audit: type=1400 audit(1785669818.649:1111): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 821.013260][T14501] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 821.029848][T14501] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 821.055718][ T29] audit: type=1400 audit(1785669818.695:1112): avc: denied { mount } for pid=14489 comm="syz.2.2272" name="/" dev="ramfs" ino=59718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 821.154673][ T29] audit: type=1400 audit(1785669818.759:1113): avc: denied { read write } for pid=14491 comm="syz.0.2273" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 821.275253][ T29] audit: type=1400 audit(1785669818.769:1114): avc: denied { open } for pid=14491 comm="syz.0.2273" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 823.149163][T11662] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 823.369603][T11662] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 823.393282][T11662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.497176][T11662] usb 5-1: Product: syz [ 823.501667][T11662] usb 5-1: Manufacturer: syz [ 823.506292][T11662] usb 5-1: SerialNumber: syz [ 823.527997][T11662] usb 5-1: config 0 descriptor?? [ 823.544231][T11662] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 061 [ 824.625144][T11662] (null): failure reading functionality [ 824.651543][T11662] i2c i2c-2: failure reading functionality [ 824.678170][T11662] i2c i2c-2: connected i2c-tiny-usb device [ 824.704452][T11662] usb 5-1: USB disconnect, device number 61 [ 825.229971][T11662] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 825.397198][T11662] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 825.414123][T11662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.428004][T11662] usb 3-1: Product: syz [ 825.436235][T11662] usb 3-1: Manufacturer: syz [ 825.443978][T11662] usb 3-1: SerialNumber: syz [ 825.456947][T11662] usb 3-1: config 0 descriptor?? [ 825.629722][T11662] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 053 [ 825.798584][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2292'. [ 826.902403][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 826.902421][ T29] audit: type=1400 audit(1785669824.563:1144): avc: denied { bind } for pid=14573 comm="syz.1.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 826.981593][ T29] audit: type=1400 audit(1785669824.563:1145): avc: denied { name_bind } for pid=14573 comm="syz.1.2298" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 827.024022][T11662] (null): failure reading functionality [ 827.037765][T11662] i2c i2c-2: failure reading functionality [ 827.048901][ T29] audit: type=1400 audit(1785669824.563:1146): avc: denied { node_bind } for pid=14573 comm="syz.1.2298" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 827.075704][T11662] i2c i2c-2: connected i2c-tiny-usb device [ 827.092079][T11662] usb 3-1: USB disconnect, device number 53 [ 827.099133][ T29] audit: type=1400 audit(1785669824.563:1147): avc: denied { write } for pid=14573 comm="syz.1.2298" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 827.242699][T14557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.310179][T14577] netlink: 'syz.0.2297': attribute type 2 has an invalid length. [ 827.540282][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 827.816235][T11662] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 827.989957][T11662] usb 2-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 828.091074][T11662] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 828.161295][T11662] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 828.301481][T11662] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.329440][T11662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.348442][T11662] usb 2-1: Product: syz [ 828.352972][T11662] usb 2-1: Manufacturer: syz [ 828.360770][T11662] usb 2-1: SerialNumber: syz [ 828.377610][T11662] cdc_ncm 2-1:1.0: skipping garbage [ 828.394117][T11662] usb 2-1: selecting invalid altsetting 1 [ 828.409459][ T29] audit: type=1400 audit(1785669825.957:1148): avc: denied { append } for pid=14590 comm="syz.0.2302" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 828.625577][ T29] audit: type=1400 audit(1785669826.160:1149): avc: denied { setopt } for pid=14580 comm="syz.1.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 828.989505][ T29] audit: type=1400 audit(1785669826.492:1150): avc: denied { create } for pid=14598 comm="syz.0.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.009693][ T29] audit: type=1400 audit(1785669826.510:1151): avc: denied { connect } for pid=14598 comm="syz.0.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.041557][T14589] netlink: 'syz.4.2301': attribute type 2 has an invalid length. [ 829.155639][T11662] usb 2-1: selecting invalid altsetting 1 [ 829.162581][T11662] cdc_ncm 2-1:1.0: bind() failure [ 829.272336][ T5728] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 829.317998][ T9] usb 2-1: USB disconnect, device number 65 [ 829.437159][ T5728] usb 3-1: config 9 has an invalid interface number: 245 but max is 0 [ 829.471817][ T5728] usb 3-1: config 9 has no interface number 0 [ 830.344761][ T5613] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 830.364166][ T5728] usb 3-1: New USB device found, idVendor=8086, idProduct=1155, bcdDevice=a0.72 [ 830.374685][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.383477][ T5728] usb 3-1: Product: syz [ 830.388994][ T5728] usb 3-1: Manufacturer: syz [ 830.394015][ T5728] usb 3-1: SerialNumber: syz [ 831.010308][T14599] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 831.036885][ T5728] uvcvideo 3-1:9.245: Found UVC 0.06 device syz (8086:1155) [ 831.063050][ T5728] uvcvideo 3-1:9.245: No valid video chain found. [ 831.074561][ T5728] usb 3-1: USB disconnect, device number 54 [ 831.212926][ T9016] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 831.265697][ T29] audit: type=1400 audit(1785669828.586:1152): avc: denied { wake_alarm } for pid=14622 comm="syz.3.2312" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 831.309933][ T29] audit: type=1400 audit(1785669828.614:1153): avc: denied { ioctl } for pid=14622 comm="syz.3.2312" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 831.411478][ T9016] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 831.433259][ T9016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.457151][ T9016] usb 1-1: Product: syz [ 831.475251][ T9016] usb 1-1: Manufacturer: syz [ 831.490221][ T9016] usb 1-1: SerialNumber: syz [ 831.521862][ T9016] usb 1-1: config 0 descriptor?? [ 831.533532][ T9016] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 055 [ 831.721898][ T5728] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 832.285337][ T5728] usb 4-1: Using ep0 maxpacket: 8 [ 832.451308][ T5728] usb 4-1: config 6 has an invalid interface number: 150 but max is 0 [ 832.459682][ T5728] usb 4-1: config 6 has no interface number 0 [ 832.465884][ T5728] usb 4-1: config 6 interface 150 has no altsetting 0 [ 832.475264][ T5728] usb 4-1: New USB device found, idVendor=0421, idProduct=0099, bcdDevice=ce.f2 [ 832.484563][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.546649][ T5728] usb 4-1: Product: syz [ 832.550897][ T5728] usb 4-1: Manufacturer: syz [ 832.555497][ T5728] usb 4-1: SerialNumber: syz [ 832.985739][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2315'. [ 833.047099][ T9016] (null): failure reading functionality [ 833.065858][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 833.065872][ T29] audit: type=1400 audit(1785669830.229:1162): avc: denied { setopt } for pid=14632 comm="syz.3.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 833.066188][ T9016] i2c i2c-2: failure reading functionality [ 833.109601][ T29] audit: type=1400 audit(1785669830.229:1163): avc: denied { write } for pid=14632 comm="syz.3.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 833.198127][ T9016] i2c i2c-2: connected i2c-tiny-usb device [ 833.220471][ T5728] rndis_host 4-1:6.150: skipping garbage [ 833.230042][ T5728] rndis_host 4-1:6.150: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 833.253395][ T5728] cdc_acm 4-1:6.150: skipping garbage [ 833.287976][ T5728] usb 4-1: USB disconnect, device number 71 [ 833.294063][T14659] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 833.294063][T14659] The task syz.2.2319 (14659) triggered the difference, watch for misbehavior. [ 833.318112][T14659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 833.324637][T14659] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 833.332823][T14659] vhci_hcd vhci_hcd.0: Device attached [ 833.350018][ T29] audit: type=1400 audit(1785669830.515:1164): avc: denied { ioctl } for pid=14655 comm="syz.2.2319" path="socket:[60999]" dev="sockfs" ino=60999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 833.384411][ T9016] usb 1-1: USB disconnect, device number 55 [ 833.404661][T14659] netlink: 'syz.2.2319': attribute type 3 has an invalid length. [ 833.412587][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 834.381205][T14660] vhci_hcd: connection closed [ 834.383416][ T1158] vhci_hcd vhci_hcd.2: stop threads [ 834.409697][ T1158] vhci_hcd vhci_hcd.2: release socket [ 834.427278][ T1158] vhci_hcd vhci_hcd.2: disconnect device [ 834.442026][ T9826] usb 38-1: SetAddress Request (2) to port 0 [ 834.450694][ T9826] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 834.497151][ T9826] usb 38-1: enqueue for inactive port 0 [ 834.608747][T14648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.011916][ T9826] usb usb38-port1: attempt power cycle [ 835.341989][ T9016] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 835.668088][ T9016] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 835.689027][ T9016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.714481][ T9016] usb 4-1: Product: syz [ 835.726862][ T9016] usb 4-1: Manufacturer: syz [ 835.739778][ T9016] usb 4-1: SerialNumber: syz [ 835.756741][ T9826] usb usb38-port1: unable to enumerate USB device [ 835.779250][ T9016] usb 4-1: config 0 descriptor?? [ 835.833297][ T9016] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 072 [ 835.912496][T14678] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 836.652847][ T9826] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 837.130829][ T9826] usb 2-1: Using ep0 maxpacket: 8 [ 837.145221][ T9016] (null): failure reading functionality [ 837.146577][ T9826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.152042][ T9016] i2c i2c-2: failure reading functionality [ 837.183254][ T9826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.203321][ T9016] i2c i2c-2: connected i2c-tiny-usb device [ 837.211840][ T9826] usb 2-1: config 1 has no interface number 0 [ 837.221536][ T9826] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 837.255395][ T9016] usb 4-1: USB disconnect, device number 72 [ 837.280335][ T9826] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 837.345438][ T9826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.370119][ T9826] usb 2-1: Product: syz [ 837.389600][ T9826] usb 2-1: Manufacturer: syz [ 837.411828][ T9826] usb 2-1: SerialNumber: syz [ 837.726128][ T5728] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 838.542354][ T5728] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.573444][ T29] audit: type=1400 audit(1785669835.340:1165): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 838.593952][ T5728] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 838.692557][ T5728] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 838.725982][ T5728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.015537][ T5728] usb 5-1: Product: syz [ 840.023041][ T5728] usb 5-1: Manufacturer: syz [ 840.032951][ T5728] usb 5-1: SerialNumber: syz [ 840.045826][ T5728] usb 5-1: config 0 descriptor?? [ 840.062043][ T5728] adutux 5-1:0.0: interrupt endpoints not found [ 840.154591][ T9826] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 840.194364][ T9826] usb 2-1: USB disconnect, device number 66 [ 840.223006][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 840.604053][T14710] netlink: 'syz.0.2330': attribute type 2 has an invalid length. [ 840.697047][T14695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.793076][ T5728] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 840.968638][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.993763][ T5728] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 841.017720][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.033495][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 841.041087][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.043455][ T5728] usb 2-1: config 0 descriptor?? [ 841.303932][ T5728] usbhid 2-1:0.0: can't add hid device: -71 [ 841.314469][ T5728] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 841.339684][ T5728] usb 2-1: USB disconnect, device number 67 [ 841.414548][ T5737] usb 5-1: USB disconnect, device number 62 [ 841.497512][ T9826] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 841.688635][ T9826] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 841.697680][ T29] audit: type=1400 audit(1785669838.210:1166): avc: denied { create } for pid=14729 comm="syz.4.2337" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 841.742244][ T9826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.750642][ T9826] usb 1-1: Product: syz [ 841.750663][ T9826] usb 1-1: Manufacturer: syz [ 841.750678][ T9826] usb 1-1: SerialNumber: syz [ 841.753299][ T9826] usb 1-1: config 0 descriptor?? [ 841.759393][ T9826] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 056 [ 841.823903][ T5728] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 841.916833][T14732] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 841.951462][ T29] audit: type=1400 audit(1785669838.450:1167): avc: denied { block_suspend } for pid=14729 comm="syz.4.2337" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 841.978425][ T29] audit: type=1400 audit(1785669838.459:1168): avc: denied { ioctl } for pid=14733 comm="syz.3.2338" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=61210 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 842.020761][ T5728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.044708][ T5728] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 842.066444][ T5728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.099503][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2338'. [ 842.184790][ T5728] usb 2-1: config 0 descriptor?? [ 842.455485][ T9826] (null): failure reading functionality [ 842.460594][ T9826] i2c i2c-2: failure reading functionality [ 842.474597][ T9826] i2c i2c-2: connected i2c-tiny-usb device [ 842.480580][ T9826] usb 1-1: USB disconnect, device number 56 [ 842.598206][ T29] audit: type=1400 audit(1785669839.050:1169): avc: denied { unlink } for pid=5607 comm="syz-executor" name="file0" dev="tmpfs" ino=2587 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 843.101927][ T5728] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 843.106733][T14708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.118611][T14708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.636761][ T5728] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38 [ 843.661155][ T29] audit: type=1400 audit(1785669840.028:1170): avc: denied { read } for pid=4964 comm="acpid" name="mouse1" dev="devtmpfs" ino=3998 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 843.805572][ T29] audit: type=1400 audit(1785669840.028:1171): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3998 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 843.949199][ T29] audit: type=1400 audit(1785669840.028:1172): avc: denied { ioctl } for pid=4964 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3998 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 843.977298][ T29] audit: type=1400 audit(1785669840.166:1173): avc: denied { bind } for pid=14753 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 844.037276][ T29] audit: type=1400 audit(1785669840.166:1174): avc: denied { ioctl } for pid=14753 comm="syz.4.2341" path="socket:[61255]" dev="sockfs" ino=61255 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 844.110889][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 844.114093][ T29] audit: type=1400 audit(1785669840.166:1175): avc: denied { read } for pid=14753 comm="syz.4.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 844.431415][ T29] audit: type=1400 audit(1785669840.231:1176): avc: denied { write } for pid=14753 comm="syz.4.2341" path="socket:[61255]" dev="sockfs" ino=61255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 844.606866][ T29] audit: type=1400 audit(1785669840.775:1177): avc: denied { bind } for pid=14761 comm="syz.2.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 844.660991][ T29] audit: type=1400 audit(1785669840.784:1178): avc: denied { write } for pid=14761 comm="syz.2.2344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 844.707495][T14762] binder: 14761:14762 ioctl 89f0 200000000580 returned -22 [ 844.714767][ T29] audit: type=1400 audit(1785669840.978:1179): avc: denied { mount } for pid=14707 comm="syz.1.2332" name="/" dev="hugetlbfs" ino=61652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 844.762437][ T9016] usb 2-1: USB disconnect, device number 68 [ 844.762552][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 844.779425][T14759] netlink: 'syz.3.2343': attribute type 2 has an invalid length. [ 845.627741][T14788] PKCS7: Unknown OID: [4] 0.0 [ 845.634510][T14788] PKCS7: Only support pkcs7_signedData type [ 845.647592][ T29] audit: type=1400 audit(1785669841.855:1180): avc: denied { execute } for pid=14784 comm="syz.0.2349" path="/434/file1" dev="tmpfs" ino=2359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 846.494662][ T29] audit: type=1400 audit(1785669842.547:1181): avc: denied { connect } for pid=14786 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 846.652710][ T29] audit: type=1400 audit(1785669842.547:1182): avc: denied { bind } for pid=14786 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 846.775132][ T29] audit: type=1400 audit(1785669842.556:1183): avc: denied { write } for pid=14786 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 846.851193][ T5728] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 846.872569][T14805] loop9: detected capacity change from 0 to 255852544 [ 847.074945][ T5728] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 847.157288][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.179513][ T5728] usb 3-1: Product: syz [ 847.197038][ T5728] usb 3-1: Manufacturer: syz [ 847.217944][ T5728] usb 3-1: SerialNumber: syz [ 847.246496][ T5728] usb 3-1: config 0 descriptor?? [ 847.268132][ T5728] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 055 [ 847.320303][T14799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.707759][ T9826] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 847.816158][ T5728] (null): failure reading functionality [ 847.830532][ T5728] i2c i2c-2: failure reading functionality [ 847.852377][ T5728] i2c i2c-2: connected i2c-tiny-usb device [ 847.884480][ T5728] usb 3-1: USB disconnect, device number 55 [ 847.939920][ T9826] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 847.950483][ T9826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.971770][ T9826] usb 4-1: Product: syz [ 847.980888][ T9826] usb 4-1: Manufacturer: syz [ 847.991172][ T9826] usb 4-1: SerialNumber: syz [ 848.005286][ T9826] usb 4-1: config 0 descriptor?? [ 848.024492][ T9826] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 073 [ 848.220437][ T5737] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 848.468224][ T5737] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 848.622128][ T5737] usb 2-1: config 0 has no interface number 0 [ 848.643836][ T5737] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 848.679377][ T5737] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 848.703068][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.714928][ T5737] usb 2-1: Product: syz [ 848.724947][ T5737] usb 2-1: Manufacturer: syz [ 848.735311][ T5737] usb 2-1: SerialNumber: syz [ 848.752882][T14823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.761579][T14823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.785347][ T5737] usb 2-1: config 0 descriptor?? [ 848.829135][ T5737] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 848.858250][ T9826] (null): failure reading functionality [ 848.918753][ T9826] i2c i2c-2: failure reading functionality [ 848.958662][ T9826] i2c i2c-2: connected i2c-tiny-usb device [ 848.988130][ T9826] usb 4-1: USB disconnect, device number 73 [ 849.106527][T14833] netlink: 'syz.0.2360': attribute type 2 has an invalid length. [ 849.732278][ T30] usb 2-1: USB disconnect, device number 69 [ 849.747350][ T30] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 852.346155][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 852.346175][ T29] audit: type=1400 audit(1785669848.037:1190): avc: denied { create } for pid=14849 comm="syz.2.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 852.399966][T14879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 852.579107][ T29] audit: type=1400 audit(1785669848.037:1191): avc: denied { write } for pid=14849 comm="syz.2.2365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 852.849576][ T29] audit: type=1800 audit(1785669848.507:1192): pid=14876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2369" name="bus" dev="ramfs" ino=62038 res=0 errno=0 [ 853.638336][ T29] audit: type=1400 audit(1785669849.227:1193): avc: denied { read } for pid=14886 comm="syz.0.2374" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 853.638381][ T29] audit: type=1400 audit(1785669849.227:1194): avc: denied { open } for pid=14886 comm="syz.0.2374" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 853.638404][ T29] audit: type=1400 audit(1785669849.227:1195): avc: denied { ioctl } for pid=14886 comm="syz.0.2374" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 853.799052][ T29] audit: type=1400 audit(1785669849.310:1196): avc: denied { audit_write } for pid=14886 comm="syz.0.2374" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 853.887072][ T29] audit: type=1400 audit(1785669849.310:1197): avc: denied { watch } for pid=14886 comm="syz.0.2374" path="/441/file0" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 853.970416][ T29] audit: type=1400 audit(1785669849.310:1198): avc: denied { watch_sb watch_reads } for pid=14886 comm="syz.0.2374" path="/441/file0" dev="tmpfs" ino=2397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 854.172450][ T5737] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 854.831789][ T5737] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 854.848762][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.882604][ T5737] usb 1-1: Product: syz [ 854.886908][ T5737] usb 1-1: Manufacturer: syz [ 854.891530][ T5737] usb 1-1: SerialNumber: syz [ 854.907230][ T5737] usb 1-1: config 0 descriptor?? [ 855.139225][ T5737] usb 1-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 855.156034][ T5737] f81604 1-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 855.170527][ T5737] f81604 1-1:0.0: probe with driver f81604 failed with error -121 [ 856.529440][ T5737] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 856.703878][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 856.722058][ T5737] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 856.739449][ T5737] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 856.762910][ T5737] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 856.784619][ T5737] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 856.798473][ T5737] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.821573][ T5737] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 856.837363][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.980898][ T29] audit: type=1400 audit(1785669852.318:1199): avc: denied { write } for pid=14913 comm="syz.2.2381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 857.034294][T14925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2382'. [ 857.077246][ T5737] usb 5-1: usb_control_msg returned -32 [ 857.086154][ T5737] usbtmc 5-1:16.0: can't read capabilities [ 857.107337][T14928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.122805][T14928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.297969][ T5728] usb 1-1: USB disconnect, device number 57 [ 857.334170][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2384'. [ 857.352989][ T30] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 857.404938][T14930] TCP: TCP_TX_DELAY enabled [ 857.558990][T14935] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 857.582429][ T30] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 857.592434][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.602244][ T30] usb 4-1: Product: syz [ 857.606419][ T30] usb 4-1: Manufacturer: syz [ 857.610992][ T30] usb 4-1: SerialNumber: syz [ 857.617733][ T30] usb 4-1: config 0 descriptor?? [ 857.691427][ T5737] usb 5-1: USB disconnect, device number 63 [ 857.842534][ T30] usb 4-1: Firmware version (0.0) predates our first public release. [ 857.851031][ T30] usb 4-1: Please update to version 0.2 or newer [ 857.887811][ T30] usb 4-1: USB disconnect, device number 74 [ 858.655182][ T5737] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 858.827044][ T5737] usb 1-1: Using ep0 maxpacket: 8 [ 858.832766][T14953] syzkaller0: entered promiscuous mode [ 858.843195][T14953] syzkaller0: entered allmulticast mode [ 858.859614][ T5737] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.875697][ T5737] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.906154][ T5737] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 858.924462][ T5737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.936915][ T5737] usb 1-1: Product: syz [ 858.941437][ T5737] usb 1-1: Manufacturer: syz [ 858.946428][ T5737] usb 1-1: SerialNumber: syz [ 858.960004][ T5737] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 858.971442][ T5737] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 858.977680][ T5737] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 859.547551][ T5737] usb 1-1: USB disconnect, device number 58 [ 860.029877][ T5737] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 860.214128][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 860.227492][ T5737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.252246][ T5737] usb 4-1: config 0 has no interfaces? [ 860.269164][ T5737] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 860.295206][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.323228][ T5737] usb 4-1: config 0 descriptor?? [ 860.436329][ T5737] IPVS: starting estimator thread 0... [ 860.539322][T14984] IPVS: using max 45 ests per chain, 108000 per kthread [ 861.096023][T11662] usb 4-1: USB disconnect, device number 75 [ 861.193655][T14994] Cache volume key already in use (9p,(null),) [ 862.002380][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 862.168006][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 862.177302][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.185389][ T9] usb 5-1: Product: syz [ 862.190244][ T9] usb 5-1: Manufacturer: syz [ 862.194841][ T9] usb 5-1: SerialNumber: syz [ 862.200855][ T9] usb 5-1: config 0 descriptor?? [ 862.210001][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 064 [ 863.756953][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 863.756974][ T29] audit: type=1400 audit(1785669858.066:1205): avc: denied { read write } for pid=15017 comm="syz.2.2406" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 863.821784][ T29] audit: type=1400 audit(1785669858.066:1206): avc: denied { open } for pid=15017 comm="syz.2.2406" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 863.870758][T14997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.941212][T14997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.001977][ T9] (null): failure reading functionality [ 864.009832][ T9] i2c i2c-2: failure reading functionality [ 864.020629][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 864.037026][ T9] usb 5-1: USB disconnect, device number 64 [ 864.267452][ T5728] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 864.297064][ T29] audit: type=1400 audit(1785669859.063:1207): avc: denied { read write } for pid=15034 comm="syz.0.2410" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 864.331865][ T29] audit: type=1400 audit(1785669859.063:1208): avc: denied { open } for pid=15034 comm="syz.0.2410" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 864.333893][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 864.388883][ T29] audit: type=1400 audit(1785669859.155:1209): avc: denied { read append } for pid=15034 comm="syz.0.2410" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 864.414191][ T29] audit: type=1400 audit(1785669859.174:1210): avc: denied { open } for pid=15034 comm="syz.0.2410" path="/dev/ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 864.454799][ T5728] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 864.464429][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.472814][ T29] audit: type=1400 audit(1785669859.174:1211): avc: denied { ioctl } for pid=15034 comm="syz.0.2410" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 864.505541][ T5728] usb 3-1: Product: syz [ 864.507891][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 864.514905][ T5728] usb 3-1: Manufacturer: syz [ 864.519445][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2411'. [ 864.539268][ T5728] usb 3-1: SerialNumber: syz [ 864.546637][ T29] audit: type=1400 audit(1785669859.201:1212): avc: denied { write } for pid=15034 comm="syz.0.2410" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 864.574626][ T5728] usb 3-1: config 0 descriptor?? [ 864.582739][ T5728] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 056 [ 864.603063][ T29] audit: type=1400 audit(1785669859.201:1213): avc: denied { open } for pid=15034 comm="syz.0.2410" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 864.654624][ T29] audit: type=1400 audit(1785669859.201:1214): avc: denied { ioctl } for pid=15034 comm="syz.0.2410" path="/dev/mtd0" dev="devtmpfs" ino=704 ioctlcmd=0x4d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 865.557307][ T30] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 865.774182][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 865.811186][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 865.836630][ T30] usb 5-1: config 1 has an invalid interface number: 232 but max is 0 [ 865.875772][ T30] usb 5-1: config 1 has no interface number 0 [ 865.901701][ T5728] (null): failure reading functionality [ 865.906559][T15033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 865.945004][ T30] usb 5-1: config 1 interface 232 has no altsetting 0 [ 865.954996][ T5728] i2c i2c-2: failure reading functionality [ 865.974952][ T30] usb 5-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 865.987839][ T5728] i2c i2c-2: connected i2c-tiny-usb device [ 866.001240][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.013601][ T5728] usb 3-1: USB disconnect, device number 56 [ 866.030989][ T30] usb 5-1: Product: syz [ 866.045982][ T30] usb 5-1: Manufacturer: syz [ 866.066232][ T30] usb 5-1: SerialNumber: syz [ 866.395239][T15058] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 866.421498][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2412'. [ 866.523581][ T30] hub 5-1:1.232: bad descriptor, ignoring hub [ 866.533371][ T30] hub 5-1:1.232: probe with driver hub failed with error -5 [ 866.549991][ T30] option 5-1:1.232: GSM modem (1-port) converter detected [ 866.609550][ T30] usb 5-1: USB disconnect, device number 65 [ 866.634857][ T30] option 5-1:1.232: device disconnected [ 866.760116][ T5737] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 866.934770][ T5737] usb 2-1: Using ep0 maxpacket: 8 [ 866.944013][ T5737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.958899][ T5737] usb 2-1: config 0 has no interfaces? [ 866.964705][ T5737] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 866.977624][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.989387][ T5737] usb 2-1: config 0 descriptor?? [ 867.132221][T15076] loop5: detected capacity change from 0 to 7 [ 867.171346][T15076] Dev loop5: unable to read RDB block 7 [ 867.191651][T15076] loop5: unable to read partition table [ 867.204182][T15076] loop5: partition table beyond EOD, truncated [ 867.227630][T15076] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 867.659847][ T30] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 867.836651][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 867.858043][ T30] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 867.867385][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.910642][ T30] usb 3-1: config 0 descriptor?? [ 867.932459][ T30] smsusb:smsusb_probe: board id=8, interface number 0 [ 867.953588][ T30] smsusb:smsusb_probe: Device initialized with return code -19 [ 868.076676][T15088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.088832][ T30] usb 2-1: USB disconnect, device number 70 [ 868.253062][ T9826] usb 3-1: USB disconnect, device number 57 [ 868.743024][T15102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.039355][T15111] openvswitch: netlink: IP tunnel TTL not specified. [ 871.090144][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2438'. [ 871.253452][T15135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.290077][T15140] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 871.322347][T15122] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 872.005592][ T30] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 872.189463][T15152] geneve2: left promiscuous mode [ 872.252056][ T30] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 872.611194][T15152] bond1: left promiscuous mode [ 872.619850][T15152] bond2: left promiscuous mode [ 872.633582][ T1007] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 872.650642][ T30] usb 4-1: config 1 has no interface number 0 [ 872.666941][ T1007] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 872.682695][ T30] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 872.687232][ T1007] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 872.805441][ T1007] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 872.813507][ T30] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 872.836908][ T30] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.370747][ T30] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 873.383281][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.412422][ T30] usb 4-1: Product: syz [ 873.431323][ T30] usb 4-1: Manufacturer: syz [ 873.440461][ T30] usb 4-1: SerialNumber: syz [ 873.469709][T15145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 873.702102][T15145] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 873.948216][ T30] usb 4-1: Incompatible driver and firmware versions [ 874.014114][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 874.014130][ T29] audit: type=1400 audit(1785669868.041:1223): avc: denied { listen } for pid=15172 comm="syz.1.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 874.071448][ T29] audit: type=1400 audit(1785669868.041:1224): avc: denied { shutdown } for pid=15172 comm="syz.1.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 874.276179][T15170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 874.304215][ T30] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 874.467261][ T30] usb 2-1: config 1 has an invalid interface descriptor of length 3, skipping [ 874.478235][ T30] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.492079][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 874.507312][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 874.516732][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 874.525113][ T30] usb 2-1: SerialNumber: syz [ 874.533448][ T30] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 874.563311][ T9826] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 874.725922][ T9826] usb 5-1: Using ep0 maxpacket: 8 [ 874.737875][ T9826] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.758493][ T9826] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 874.792465][ T9826] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 874.802982][ T29] audit: type=1400 audit(1785669868.770:1225): avc: denied { name_bind } for pid=15172 comm="syz.1.2450" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 874.824589][T15173] netlink: 5180 bytes leftover after parsing attributes in process `syz.1.2450'. [ 874.834270][ T9826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.843141][ T9826] usb 5-1: Product: syz [ 874.847598][ T9826] usb 5-1: Manufacturer: syz [ 874.853170][ T29] audit: type=1400 audit(1785669868.807:1226): avc: denied { create } for pid=15172 comm="syz.1.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 874.876734][ T9826] usb 5-1: SerialNumber: syz [ 874.894397][ T9826] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 874.911802][ T9826] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 874.928299][ T9826] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 876.184216][ T9826] usb 5-1: USB disconnect, device number 66 [ 876.262145][ T30] usb 4-1: USB disconnect, device number 76 [ 876.592437][ T30] usb 2-1: USB disconnect, device number 71 [ 877.702582][T15210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.880395][ T5737] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 878.065577][ T5737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.090850][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 878.125950][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 878.227303][ T5737] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.427057][ T9016] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 878.447630][ T5737] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 878.468751][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.477307][ T5737] usb 2-1: Product: syz [ 878.481501][ T5737] usb 2-1: Manufacturer: syz [ 878.486169][ T5737] usb 2-1: SerialNumber: syz [ 878.495427][ T5737] usb 2-1: config 0 descriptor?? [ 878.527031][ T5737] adutux 2-1:0.0: interrupt endpoints not found [ 878.609894][ T9016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 878.632685][ T9016] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 878.759786][ T9016] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.796059][ T9016] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 878.814724][ T9016] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.833841][ T9016] usb 1-1: Product: syz [ 878.842833][ T9016] usb 1-1: Manufacturer: syz [ 878.849921][ T9016] usb 1-1: SerialNumber: syz [ 878.859852][ T9016] usb 1-1: config 0 descriptor?? [ 878.871160][ T9016] adutux 1-1:0.0: interrupt endpoints not found [ 879.082658][ T9826] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 879.175071][T15232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2462'. [ 879.190490][T15232] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2462'. [ 879.257501][ T9826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.282215][ T9826] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 879.298203][ T9826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.365753][T15239] /dev/sg0: Can't lookup blockdev [ 879.545281][T15232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.589452][ T9826] usb 3-1: config 0 descriptor?? [ 879.774698][T15244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.870215][ T9826] usbhid 3-1:0.0: can't add hid device: -71 [ 879.878786][ T9826] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 879.899745][ T9826] usb 3-1: USB disconnect, device number 58 [ 880.350705][ T9826] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 880.515324][ T9826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.527506][ T9826] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 880.537028][ T9826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.621082][ T9826] usb 3-1: config 0 descriptor?? [ 880.896639][ T30] usb 2-1: USB disconnect, device number 72 [ 881.308525][ T9016] usb 1-1: USB disconnect, device number 59 [ 881.871768][T15266] netlink: 'syz.1.2469': attribute type 2 has an invalid length. [ 881.900967][ T9826] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 881.908929][T15231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.917858][T15231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.932069][T15266] geneve3: entered promiscuous mode [ 881.936250][ T9826] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 881.950499][T15266] geneve3: entered allmulticast mode [ 881.992237][ T1140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.015682][ T1140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.108724][ T1140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.141590][ T1140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.411819][ T9016] usb 3-1: USB disconnect, device number 59 [ 883.411868][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 885.347000][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 885.477782][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2476'. [ 885.494122][T15295] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2476'. [ 885.521941][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.526535][ T30] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 885.546657][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 885.557999][T15295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.564020][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 885.580657][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.619866][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 885.636733][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.651477][ T9] usb 4-1: Product: syz [ 885.660951][ T9] usb 4-1: Manufacturer: syz [ 885.667252][ T9] usb 4-1: SerialNumber: syz [ 885.679929][ T9] usb 4-1: config 0 descriptor?? [ 885.690417][ T9] adutux 4-1:0.0: interrupt endpoints not found [ 885.742119][ T30] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 885.761986][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.769667][ T5737] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 885.791749][ T30] usb 1-1: Product: syz [ 885.801091][ T30] usb 1-1: Manufacturer: syz [ 885.817636][ T30] usb 1-1: SerialNumber: syz [ 885.835815][ T30] usb 1-1: config 0 descriptor?? [ 885.850102][ T30] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 060 [ 885.948275][ T5737] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 885.978653][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.997154][ T5737] usb 3-1: Product: syz [ 886.001436][ T5737] usb 3-1: Manufacturer: syz [ 886.006538][ T5737] usb 3-1: SerialNumber: syz [ 886.022973][ T5737] usb 3-1: config 0 descriptor?? [ 886.032061][ T5737] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 060 [ 887.151969][ T30] (null): failure reading functionality [ 887.164260][ T30] i2c i2c-2: failure reading functionality [ 887.173601][T15332] FAULT_INJECTION: forcing a failure. [ 887.173601][T15332] name failslab, interval 1, probability 0, space 0, times 0 [ 887.187285][ T30] i2c i2c-2: connected i2c-tiny-usb device [ 887.195406][ T30] usb 1-1: USB disconnect, device number 60 [ 887.207158][T15332] CPU: 1 UID: 0 PID: 15332 Comm: syz.4.2488 Tainted: G L syzkaller #0 PREEMPT(full) [ 887.207194][T15332] Tainted: [L]=SOFTLOCKUP [ 887.207201][T15332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 887.207211][T15332] Call Trace: [ 887.207218][T15332] [ 887.207225][T15332] dump_stack_lvl+0x100/0x190 [ 887.207251][T15332] should_fail_ex.cold+0x5/0xa [ 887.207269][T15332] should_failslab+0xc2/0x120 [ 887.207285][T15332] __kmalloc_noprof+0xfc/0x820 [ 887.207300][T15332] ? rcu_is_watching+0x12/0xc0 [ 887.207325][T15332] ? tomoyo_realpath_from_path+0xb6/0x690 [ 887.207349][T15332] tomoyo_realpath_from_path+0xb6/0x690 [ 887.207371][T15332] tomoyo_path_number_perm+0x23c/0x580 [ 887.207391][T15332] ? tomoyo_path_number_perm+0x22e/0x580 [ 887.207408][T15332] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 887.207440][T15332] ? find_held_lock+0x2b/0x80 [ 887.207463][T15332] ? __fget_files+0x215/0x3d0 [ 887.207480][T15332] ? hook_file_ioctl_common+0x140/0x440 [ 887.207499][T15332] ? __fget_files+0x215/0x3d0 [ 887.207519][T15332] ? __fget_files+0x21f/0x3d0 [ 887.207537][T15332] security_file_ioctl+0xd3/0x230 [ 887.207557][T15332] __x64_sys_ioctl+0xb7/0x210 [ 887.207575][T15332] do_syscall_64+0x115/0x870 [ 887.207589][T15332] ? clear_bhb_loop+0x40/0x90 [ 887.207611][T15332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.207629][T15332] RIP: 0033:0x7f89afd9de99 [ 887.207644][T15332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.207660][T15332] RSP: 002b:00007f89b0d31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 887.207677][T15332] RAX: ffffffffffffffda RBX: 00007f89b0025fa0 RCX: 00007f89afd9de99 [ 887.207684][T15332] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 887.207691][T15332] RBP: 00007f89b0d31090 R08: 0000000000000000 R09: 0000000000000000 [ 887.207698][T15332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.207704][T15332] R13: 00007f89b0026038 R14: 00007f89b0025fa0 R15: 00007ffe7e109018 [ 887.207719][T15332] [ 887.208145][ T5737] (null): failure reading functionality [ 887.208213][T15332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 887.464689][ T5737] i2c i2c-3: failure reading functionality [ 887.475322][ T5737] i2c i2c-3: connected i2c-tiny-usb device [ 887.488414][ T5737] usb 3-1: USB disconnect, device number 60 [ 887.778218][T15338] netlink: 'syz.4.2489': attribute type 2 has an invalid length. [ 887.790325][T15338] geneve4: entered promiscuous mode [ 887.795555][T15338] geneve4: entered allmulticast mode [ 887.801943][ T13] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 6081 - 0 [ 887.812886][ T13] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 6081 - 0 [ 887.822163][ T13] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 6081 - 0 [ 887.831414][ T13] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 6081 - 0 [ 888.420390][ T5737] usb 4-1: USB disconnect, device number 77 [ 888.793371][ T5728] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 889.000772][ T5728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.011048][ T5728] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 889.025076][ T5728] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 889.037668][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.121836][ T5728] usb 3-1: config 0 descriptor?? [ 889.251874][T15359] xt_policy: neither incoming nor outgoing policy selected [ 889.253061][ T5728] smsusb:smsusb_probe: board id=8, interface number 0 [ 889.326781][ T9] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 889.344732][ T5728] smsusb:smsusb_probe: Device initialized with return code -19 [ 889.469552][ T29] audit: type=1400 audit(1785669882.297:1227): avc: denied { setopt } for pid=15363 comm="syz.1.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 889.553453][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.575001][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 889.596663][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.617730][ T9] usb 5-1: config 0 descriptor?? [ 889.632208][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 890.544680][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2495'. [ 890.952492][ T29] audit: type=1400 audit(1785669883.201:1228): avc: denied { shutdown } for pid=15355 comm="syz.4.2495" lport=34440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 891.254169][ T29] audit: type=1400 audit(1785669883.358:1229): avc: denied { setopt } for pid=15355 comm="syz.4.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 891.845121][T11662] usb 3-1: USB disconnect, device number 61 [ 892.234002][T15386] netlink: 'syz.1.2501': attribute type 2 has an invalid length. [ 892.570696][ T9] pwc: recv_control_msg error -71 req 02 val 2b00 [ 892.577719][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 892.584599][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 892.596339][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 892.605902][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 892.612870][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 892.619723][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 892.671700][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 892.678934][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 892.686069][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 892.692897][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 892.700314][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 892.709332][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 892.716116][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 892.724230][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 892.816035][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 892.832169][ T9] pwc: Registered as video103. [ 893.054662][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 893.371838][ T9] usb 5-1: USB disconnect, device number 67 [ 893.517225][T15402] netlink: 'syz.3.2505': attribute type 23 has an invalid length. [ 893.944204][T15405] netlink: 4664 bytes leftover after parsing attributes in process `syz.0.2508'. [ 894.154331][T15401] netlink: 'syz.2.2506': attribute type 2 has an invalid length. [ 894.158263][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 894.305356][ T29] audit: type=1400 audit(1785669886.753:1230): avc: denied { read } for pid=15414 comm="syz.0.2511" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 894.362634][ T9] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 894.375373][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.383695][ T9] usb 5-1: Product: syz [ 894.395754][ T9] usb 5-1: Manufacturer: syz [ 894.412260][ T9] usb 5-1: SerialNumber: syz [ 894.433780][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2510'. [ 894.485086][ T9] usb 5-1: config 0 descriptor?? [ 894.506123][ T9] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 068 [ 894.523405][T15420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.213567][T15391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.222187][T15391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.231076][ T30] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 896.287046][ T9] (null): failure reading functionality [ 896.302682][ T9] i2c i2c-2: failure reading functionality [ 896.325282][ T9] i2c i2c-2: connected i2c-tiny-usb device [ 896.357863][ T9] usb 5-1: USB disconnect, device number 68 [ 896.440502][ T30] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 896.459432][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.494801][ T30] usb 2-1: Product: syz [ 896.523243][ T30] usb 2-1: Manufacturer: syz [ 896.544057][ T30] usb 2-1: SerialNumber: syz [ 896.565570][ T30] usb 2-1: config 0 descriptor?? [ 896.590788][ T30] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 073 [ 896.899691][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 897.086268][T15437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2516'. [ 897.892968][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.928337][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.983996][ T29] audit: type=1400 audit(1785669890.149:1231): avc: denied { execute_no_trans } for pid=15441 comm="syz.3.2517" path="/535/file2" dev="tmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 898.009779][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 898.054170][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 898.100047][ T9] usb 3-1: SerialNumber: syz [ 898.147928][ T30] (null): failure reading functionality [ 898.158558][ T30] i2c i2c-2: failure reading functionality [ 898.170426][ T30] i2c i2c-2: connected i2c-tiny-usb device [ 898.190716][ T30] usb 2-1: USB disconnect, device number 73 [ 898.713021][T15451] 9p: Bad value for 'rfdno' [ 898.898847][T15448] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 898.912812][ T29] audit: type=1400 audit(1785669890.832:1232): avc: denied { read write } for pid=15432 comm="syz.2.2515" name="usbmon9" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 899.003005][ T29] audit: type=1400 audit(1785669890.832:1233): avc: denied { open } for pid=15432 comm="syz.2.2515" path="/dev/usbmon9" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 899.076751][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 899.085904][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 900.057336][T15457] netlink: 'syz.4.2518': attribute type 2 has an invalid length. [ 900.220945][ T9] usb 3-1: 0:2 : does not exist [ 900.259115][ T5737] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 900.310030][ T29] audit: type=1400 audit(1785669892.299:1234): avc: denied { mount } for pid=15466 comm="syz.2.2524" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 900.337769][ T9] usb 3-1: USB disconnect, device number 62 [ 900.426605][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.440338][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.459001][ T5737] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 900.475377][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.477731][T15468] netlink: 'syz.3.2522': attribute type 2 has an invalid length. [ 901.471706][ T5737] usb 2-1: config 0 descriptor?? [ 901.477008][ T29] audit: type=1400 audit(1785669893.369:1235): avc: denied { mount } for pid=15474 comm="syz.0.2526" name="/" dev="rpc_pipefs" ino=65479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 901.680733][ T29] audit: type=1400 audit(1785669893.572:1236): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 901.722783][ T9016] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 901.737043][ T5737] usbhid 2-1:0.0: can't add hid device: -71 [ 901.744668][ T5737] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 901.842380][ T5737] usb 2-1: USB disconnect, device number 74 [ 901.917791][ T30] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 901.921820][ T9016] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 901.980475][ T9016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.050775][ T9016] usb 5-1: Product: syz [ 902.087808][ T9016] usb 5-1: Manufacturer: syz [ 902.130013][ T9016] usb 5-1: SerialNumber: syz [ 902.310322][ T9016] usb 5-1: config 0 descriptor?? [ 902.340655][ T5737] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 902.386547][ T9016] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 069 [ 902.560769][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.771719][ T5737] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 902.916349][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.932970][ T30] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 902.955184][ T9016] (null): failure reading functionality [ 902.971026][ T5737] usb 2-1: config 0 descriptor?? [ 902.980849][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.980901][ T9016] i2c i2c-2: failure reading functionality [ 903.012071][ T30] usb 4-1: Product: syz [ 903.021712][ T9016] i2c i2c-2: connected i2c-tiny-usb device [ 903.023087][ T30] usb 4-1: Manufacturer: syz [ 903.047584][ T30] usb 4-1: SerialNumber: syz [ 903.050209][ T9016] usb 5-1: USB disconnect, device number 69 [ 903.103025][ T30] usb 4-1: config 0 descriptor?? [ 903.152559][ T30] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 078 [ 903.213535][ T5737] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 903.224612][ T5737] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input41 [ 903.748480][ T5737] usb 2-1: USB disconnect, device number 75 [ 903.754705][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 904.102081][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.110923][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.122548][ T30] (null): failure reading functionality [ 904.153339][ T30] i2c i2c-2: failure reading functionality [ 904.213066][ T30] i2c i2c-2: connected i2c-tiny-usb device [ 904.274374][ T30] usb 4-1: USB disconnect, device number 78 [ 904.529710][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 904.573051][ T5737] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 904.651852][T15499] kvm: user requested TSC rate below hardware speed [ 904.683720][ T29] audit: type=1400 audit(1785669896.340:1237): avc: denied { bind } for pid=15498 comm="syz.0.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 904.705831][ T29] audit: type=1400 audit(1785669896.340:1238): avc: denied { listen } for pid=15498 comm="syz.0.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 904.726082][ T29] audit: type=1400 audit(1785669896.359:1239): avc: denied { connect } for pid=15498 comm="syz.0.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 904.727458][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.760776][ T29] audit: type=1400 audit(1785669896.377:1240): avc: denied { read } for pid=15498 comm="syz.0.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 904.781882][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 904.797711][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.813518][ T5737] usb 2-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 904.816730][ T24] usb 5-1: config 0 descriptor?? [ 904.869411][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.983024][ T5737] usb 2-1: Product: syz [ 905.001989][ T5737] usb 2-1: Manufacturer: ᰁ [ 905.012923][ T5737] usb 2-1: SerialNumber: syz [ 905.438975][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 905.463455][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 905.491123][ T24] usb 5-1: USB disconnect, device number 70 [ 905.783303][ T5737] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 905.801925][ T5737] usb 2-1: 1:1 : sample bitwidth 244 in over sample bytes 4 [ 905.809878][ T5737] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 905.816368][ T5737] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 905.828491][ T5737] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 905.903904][ T5737] usb 2-1: USB disconnect, device number 76 [ 905.950319][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.971117][ T5832] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 906.167957][ T5832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.200824][ T5832] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 906.220638][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.242495][ T5832] usb 5-1: config 0 descriptor?? [ 906.347882][T15515] netlink: 'syz.3.2537': attribute type 2 has an invalid length. [ 906.393196][T15515] geneve3: entered promiscuous mode [ 906.412390][T15515] geneve3: entered allmulticast mode [ 906.606545][ T29] audit: type=1400 audit(1785669898.093:1241): avc: denied { map } for pid=15516 comm="syz.1.2538" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 907.608804][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 907.680569][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.763453][T15494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.772068][T15494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.789623][ T5832] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 908.018396][ T5832] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input42 [ 908.293313][T15525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15525 comm=syz.1.2540 [ 908.869624][T15523] netlink: 'syz.0.2539': attribute type 2 has an invalid length. [ 908.897175][ T5737] usb 5-1: USB disconnect, device number 71 [ 908.897290][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 908.916706][T15523] geneve3: entered promiscuous mode [ 908.922999][T15523] geneve3: entered allmulticast mode [ 908.942274][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 908.957573][ T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 908.988806][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 909.014411][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 909.461031][ T5832] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 909.668390][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.684026][ T5832] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 909.695602][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.710608][ T5832] usb 3-1: config 0 descriptor?? [ 909.786528][ T5737] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 910.138570][ T5832] usbhid 3-1:0.0: can't add hid device: -71 [ 910.145506][ T5832] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 910.161998][ T5832] usb 3-1: USB disconnect, device number 63 [ 910.197332][T15535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.307708][ T5737] usb 5-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 910.334930][ T5737] usb 5-1: config 0 interface 0 has no altsetting 0 [ 910.344922][ T5737] usb 5-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00 [ 910.365079][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.399578][ T5737] usb 5-1: config 0 descriptor?? [ 910.722301][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 910.859729][ T5737] wacom 0003:056A:00CE.0010: unknown main item tag 0x2 [ 910.866861][ T5737] wacom 0003:056A:00CE.0010: unknown main item tag 0x6 [ 910.914743][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.944003][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 910.965736][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.003142][ T5737] wacom 0003:056A:00CE.0010: unknown main item tag 0x0 [ 911.010884][ T5737] wacom 0003:056A:00CE.0010: unknown main item tag 0x1 [ 911.017813][ T5737] wacom 0003:056A:00CE.0010: unknown main item tag 0x0 [ 911.025205][ T5737] wacom 0003:056A:00CE.0010: unknown main item tag 0x0 [ 911.032111][ T5737] wacom 0003:056A:00CE.0010: unknown main item tag 0x3 [ 911.039939][ T24] usb 3-1: config 0 descriptor?? [ 911.087684][T15543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.515763][T15543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.525675][T11662] usb 5-1: USB disconnect, device number 72 [ 911.643201][T15571] kvm: user requested TSC rate below hardware speed [ 912.175974][ T29] audit: type=1400 audit(1785669903.205:1242): avc: denied { bind } for pid=15580 comm="syz.0.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 913.090575][ T24] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 913.099300][ T24] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 913.426237][T15584] smc: removing ib device syz2 [ 913.471160][T15584] smbdirect: ib_dev[syz2] removed [ 914.162550][T15584] ------------[ cut here ]------------ [ 914.169563][T15584] !xa_empty(&pool->xa) [ 914.169577][T15584] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.0.2555/15584 [ 914.185295][T15584] Modules linked in: [ 914.189574][T15584] CPU: 0 UID: 0 PID: 15584 Comm: syz.0.2555 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.200535][T15584] Tainted: [L]=SOFTLOCKUP [ 914.204860][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 914.215210][T15584] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 914.220719][T15584] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 86 f6 25 f9 5b c3 cc cc cc cc e8 7b f6 25 f9 90 <0f> 0b 90 e8 72 f6 25 f9 5b e9 8c e7 d9 02 e8 67 7d 96 f9 eb d0 0f [ 914.240604][T15584] RSP: 0018:ffffc90006fb7180 EFLAGS: 00010246 [ 914.246677][T15584] RAX: 0000000000080000 RBX: ffff888047a8d398 RCX: ffffc9000fb09000 [ 914.254675][T15584] RDX: 0000000000080000 RSI: ffffffff88e469c5 RDI: ffff888047a8d418 [ 914.262684][T15584] RBP: ffffffff88e2c3f0 R08: 0000000000000005 R09: 0000000000000001 [ 914.270656][T15584] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888047a8c698 [ 914.278874][T15584] R13: ffff888047a8bfe0 R14: ffff888047a8bfe0 R15: ffff888047a8d0f8 [ 914.286938][T15584] FS: 00007f9f447f66c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 914.295909][T15584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 914.302506][T15584] CR2: 00007f7923fbfff8 CR3: 0000000082500000 CR4: 00000000003526f0 [ 914.310763][T15584] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 914.318746][T15584] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 914.326727][T15584] Call Trace: [ 914.330012][T15584] [ 914.332941][T15584] rxe_dealloc+0x25/0xc0 [ 914.337191][T15584] ib_dealloc_device+0x49/0x230 [ 914.342310][T15584] __ib_unregister_device+0x396/0x480 [ 914.347680][T15584] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 914.353544][T15584] ib_unregister_device_and_put+0x5a/0x80 [ 914.359301][T15584] nldev_dellink+0x308/0x430 [ 914.363965][T15584] ? __pfx_nldev_dellink+0x10/0x10 [ 914.369092][T15584] ? trace_sched_exit_tp+0x120/0x160 [ 914.374699][T15584] ? rcu_is_watching+0x12/0xc0 [ 914.379452][T15584] ? cap_capable+0x107/0x430 [ 914.384055][T15584] ? bpf_lsm_capable+0x9/0x10 [ 914.388714][T15584] ? security_capable+0x80/0x260 [ 914.393722][T15584] ? ns_capable+0xd2/0xf0 [ 914.398066][T15584] ? __pfx_nldev_dellink+0x10/0x10 [ 914.403452][T15584] rdma_nl_rcv_msg+0x392/0x6f0 [ 914.408215][T15584] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 914.413509][T15584] ? __lock_acquire+0x49f/0x1a40 [ 914.418465][T15584] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 914.424901][T15584] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 914.431843][T15584] ? netlink_deliver_tap+0x1ae/0xcc0 [ 914.437391][T15584] ? __rcu_read_unlock+0x27f/0x5e0 [ 914.442505][T15584] netlink_unicast+0x585/0x850 [ 914.447306][T15584] ? __pfx_netlink_unicast+0x10/0x10 [ 914.452582][T15584] netlink_sendmsg+0x8b0/0xda0 [ 914.457380][T15584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.462663][T15584] ? selinux_socket_sendmsg+0x198/0x2f0 [ 914.468455][T15584] ____sys_sendmsg+0xa4d/0xbe0 [ 914.473216][T15584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.478507][T15584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.483822][T15584] ___sys_sendmsg+0x190/0x1e0 [ 914.488511][T15584] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.493738][T15584] ? find_held_lock+0x2b/0x80 [ 914.498401][T15584] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 914.505262][T15584] ? __rcu_read_unlock+0x26a/0x5e0 [ 914.510390][T15584] __sys_sendmsg+0x160/0x210 [ 914.515018][T15584] ? __pfx___sys_sendmsg+0x10/0x10 [ 914.520126][T15584] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 914.526168][T15584] do_syscall_64+0x115/0x870 [ 914.530763][T15584] ? clear_bhb_loop+0x40/0x90 [ 914.535710][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.541618][T15584] RIP: 0033:0x7f9f4659de99 [ 914.546169][T15584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.566058][T15584] RSP: 002b:00007f9f447f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.574477][T15584] RAX: ffffffffffffffda RBX: 00007f9f46826180 RCX: 00007f9f4659de99 [ 914.582504][T15584] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 914.590478][T15584] RBP: 00007f9f46633eaf R08: 0000000000000000 R09: 0000000000000000 [ 914.598707][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.606688][T15584] R13: 00007f9f46826218 R14: 00007f9f46826180 R15: 00007ffd462b81a8 [ 914.614697][T15584] [ 914.617707][T15584] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 914.624979][T15584] CPU: 0 UID: 0 PID: 15584 Comm: syz.0.2555 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.635892][T15584] Tainted: [L]=SOFTLOCKUP [ 914.640197][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 914.650236][T15584] Call Trace: [ 914.653498][T15584] [ 914.656410][T15584] dump_stack_lvl+0x100/0x190 [ 914.661077][T15584] vpanic+0x552/0x970 [ 914.665042][T15584] ? __pfx_vpanic+0x10/0x10 [ 914.669555][T15584] panic+0xd1/0xe0 [ 914.673256][T15584] ? __pfx_panic+0x10/0x10 [ 914.677674][T15584] check_panic_on_warn.cold+0x19/0x34 [ 914.683037][T15584] ? rxe_pool_cleanup+0x46/0x60 [ 914.687872][T15584] __warn.cold+0x191/0x318 [ 914.692282][T15584] __report_bug+0x30f/0x440 [ 914.696771][T15584] ? rxe_pool_cleanup+0x46/0x60 [ 914.701623][T15584] ? __pfx___report_bug+0x10/0x10 [ 914.706647][T15584] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 914.712438][T15584] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 914.718236][T15584] ? __flush_workqueue+0x426/0x1200 [ 914.723423][T15584] ? rxe_pool_cleanup+0x46/0x60 [ 914.728259][T15584] report_bug+0xb2/0x220 [ 914.732500][T15584] ? rxe_pool_cleanup+0x46/0x60 [ 914.737353][T15584] handle_bug+0x16a/0x2a0 [ 914.741675][T15584] exc_invalid_op+0x17/0x50 [ 914.746177][T15584] asm_exc_invalid_op+0x1a/0x20 [ 914.751022][T15584] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 914.756454][T15584] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 86 f6 25 f9 5b c3 cc cc cc cc e8 7b f6 25 f9 90 <0f> 0b 90 e8 72 f6 25 f9 5b e9 8c e7 d9 02 e8 67 7d 96 f9 eb d0 0f [ 914.776050][T15584] RSP: 0018:ffffc90006fb7180 EFLAGS: 00010246 [ 914.782109][T15584] RAX: 0000000000080000 RBX: ffff888047a8d398 RCX: ffffc9000fb09000 [ 914.790070][T15584] RDX: 0000000000080000 RSI: ffffffff88e469c5 RDI: ffff888047a8d418 [ 914.798020][T15584] RBP: ffffffff88e2c3f0 R08: 0000000000000005 R09: 0000000000000001 [ 914.806065][T15584] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888047a8c698 [ 914.814098][T15584] R13: ffff888047a8bfe0 R14: ffff888047a8bfe0 R15: ffff888047a8d0f8 [ 914.822075][T15584] ? __pfx_rxe_dealloc+0x10/0x10 [ 914.827004][T15584] ? rxe_pool_cleanup+0x45/0x60 [ 914.831848][T15584] rxe_dealloc+0x25/0xc0 [ 914.836078][T15584] ib_dealloc_device+0x49/0x230 [ 914.840919][T15584] __ib_unregister_device+0x396/0x480 [ 914.846298][T15584] ? __pfx_rxe_ns_pernet_set_sk6+0x10/0x10 [ 914.852100][T15584] ib_unregister_device_and_put+0x5a/0x80 [ 914.857805][T15584] nldev_dellink+0x308/0x430 [ 914.862393][T15584] ? __pfx_nldev_dellink+0x10/0x10 [ 914.867493][T15584] ? trace_sched_exit_tp+0x120/0x160 [ 914.872841][T15584] ? rcu_is_watching+0x12/0xc0 [ 914.877598][T15584] ? cap_capable+0x107/0x430 [ 914.882188][T15584] ? bpf_lsm_capable+0x9/0x10 [ 914.886850][T15584] ? security_capable+0x80/0x260 [ 914.891791][T15584] ? ns_capable+0xd2/0xf0 [ 914.896118][T15584] ? __pfx_nldev_dellink+0x10/0x10 [ 914.901218][T15584] rdma_nl_rcv_msg+0x392/0x6f0 [ 914.905964][T15584] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 914.911233][T15584] ? __lock_acquire+0x49f/0x1a40 [ 914.916150][T15584] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 914.922581][T15584] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 914.929499][T15584] ? netlink_deliver_tap+0x1ae/0xcc0 [ 914.934782][T15584] ? __rcu_read_unlock+0x27f/0x5e0 [ 914.939902][T15584] netlink_unicast+0x585/0x850 [ 914.944652][T15584] ? __pfx_netlink_unicast+0x10/0x10 [ 914.949948][T15584] netlink_sendmsg+0x8b0/0xda0 [ 914.954695][T15584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.959978][T15584] ? selinux_socket_sendmsg+0x198/0x2f0 [ 914.965533][T15584] ____sys_sendmsg+0xa4d/0xbe0 [ 914.970376][T15584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.975657][T15584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.981040][T15584] ___sys_sendmsg+0x190/0x1e0 [ 914.985713][T15584] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.990903][T15584] ? find_held_lock+0x2b/0x80 [ 914.995567][T15584] ? rcu_preempt_deferred_qs_irqrestore+0x4fd/0xb90 [ 915.002163][T15584] ? __rcu_read_unlock+0x26a/0x5e0 [ 915.007279][T15584] __sys_sendmsg+0x160/0x210 [ 915.011879][T15584] ? __pfx___sys_sendmsg+0x10/0x10 [ 915.016987][T15584] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 915.022960][T15584] do_syscall_64+0x115/0x870 [ 915.027547][T15584] ? clear_bhb_loop+0x40/0x90 [ 915.032232][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.038103][T15584] RIP: 0033:0x7f9f4659de99 [ 915.042502][T15584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.062103][T15584] RSP: 002b:00007f9f447f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 915.070518][T15584] RAX: ffffffffffffffda RBX: 00007f9f46826180 RCX: 00007f9f4659de99 [ 915.078476][T15584] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 915.086433][T15584] RBP: 00007f9f46633eaf R08: 0000000000000000 R09: 0000000000000000 [ 915.094386][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.102352][T15584] R13: 00007f9f46826218 R14: 00007f9f46826180 R15: 00007ffd462b81a8 [ 915.110331][T15584] [ 915.113602][T15584] Kernel Offset: disabled [ 915.117909][T15584] Rebooting in 86400 seconds..