last executing test programs: 2m24.34151034s ago: executing program 0 (id=845): r0 = open(0x0, 0x143bc2, 0x1c0) fcntl$setlease(r0, 0x400, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, 0x0, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) 2m22.71262707s ago: executing program 0 (id=847): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003240)="63c761f36b", 0x5}], 0x1}}], 0x1, 0x4000000) 2m20.339320364s ago: executing program 0 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = timerfd_create(0x8, 0x0) semop(0xffffffffffffffff, &(0x7f0000000080)=[{0x2, 0x25, 0x3800}, {0x7, 0x0, 0x800}], 0x2) timerfd_gettime(r3, 0x0) semctl$GETNCNT(0x0, 0x2, 0xe, 0x0) 2m16.194367771s ago: executing program 0 (id=862): openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) close(r0) 2m14.809064452s ago: executing program 0 (id=864): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x7c}}, 0x20040004) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) 2m14.018369005s ago: executing program 0 (id=866): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r3, 0x0, 0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) clock_getres(0xeaffffff, 0x0) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 1m58.927385849s ago: executing program 32 (id=866): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000380)="e7add1e9c2625c10032c3d89ff01ada0d70932b46a842ed277fac258083ca490d31f341236eccf4507576c4d033dfc3e4f695143a1ad", 0x36) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000240)=0x8, r3, 0x0, 0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) clock_getres(0xeaffffff, 0x0) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) 16.107013251s ago: executing program 3 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}}, 0xf0}}, 0x0) 15.921445889s ago: executing program 3 (id=1113): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000080000000000000001"], 0x0, 0x42, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d000100040000000100040000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.669291397s ago: executing program 3 (id=1114): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.47359792s ago: executing program 4 (id=1119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000840e0ffff0fce"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000030000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 11.892888233s ago: executing program 3 (id=1120): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0xc2982) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 11.597517319s ago: executing program 5 (id=1122): r0 = socket$inet(0xa, 0x1, 0x84) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) listen(r4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 11.457632787s ago: executing program 5 (id=1123): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000}) mount$9p_rdma(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[]) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x9) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffffd, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) 9.86404193s ago: executing program 3 (id=1124): ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000600)={0x28a, 0x68, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 9.834239727s ago: executing program 5 (id=1125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 9.694886789s ago: executing program 4 (id=1126): socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x15fc, 0x7721, 0x1a, 0x0, 0x0) 9.093359249s ago: executing program 4 (id=1128): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{0x1}, &(0x7f00000018c0), &(0x7f0000001900)=r3}, 0x20) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a000701fcffffff00000000057c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4) 8.954933308s ago: executing program 2 (id=1129): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], "1b8d2069162baf34"}}}}}}}, 0x0) 8.016908788s ago: executing program 4 (id=1130): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7", 0x9}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x4, 0x19, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7a, 0x8001, [0x9, 0x4, 0x6, 0x4]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x120, 0x29, 0x36, {0x5e, 0x20, '\x00', [@generic={0xff, 0x34, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec42"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0x55, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab09"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x2a0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.512673226s ago: executing program 2 (id=1132): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x9, 0x4, 0x6, 0x7ff, {0x1, 0x8010001, 0xfffffffffffffff7, 0x40d, 0x0, 0x104, 0xed1, 0x6, 0x5, 0xc000, 0xfffffffc, r2, r3, 0x100007, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6100083a, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa0, 0x0, 0x0, {{0x1, 0x4000000000000002, 0xffffffffffffffff, 0x5, 0x0, 0x3, {0x0, 0x1, 0xa, 0x2000000000000008, 0x6, 0x5, 0xffffffff, 0x101fc, 0x6, 0x8000, 0xa, r2, 0x0, 0x58000100, 0x82}}}}, 0x0, 0x0}) 7.379065354s ago: executing program 2 (id=1133): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)={0x20, 0xd, 0x1, "fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000540)={0x3337b8f6c3c129e1, 0x11}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x724}, 0x0, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "111bf175b7ce14a647946655408b71d7328abdab9093f0deb9973fd4112d484d70bf12546fe4b08344d43636ec1ba0"}}) 7.267684917s ago: executing program 4 (id=1135): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) capset(0x0, &(0x7f00000000c0)={0x200000, 0x200000}) mount$9p_rdma(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[]) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x9) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0xfffffffffffffffd, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) 5.921439468s ago: executing program 4 (id=1137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x70bd25, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x5b24, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x24, r7, 0x5, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x100000a}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x20044000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRESDEC=r7, @ANYRES32=0x0, @ANYRES8=r5, @ANYRESOCT=r7, @ANYRES8=r5], 0x3c}}, 0x24008040) 5.920505134s ago: executing program 5 (id=1138): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4000080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x61, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.45245702s ago: executing program 5 (id=1140): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="800000737c2e661ca656ea40446cf5dab835000e04000000a5b75535"]) lseek(0xffffffffffffffff, 0x100040001, 0x3) fsetxattr$security_capability(r4, &(0x7f0000000840), &(0x7f0000000880)=@v2={0x2000000, [{0x5, 0x6}, {0xf2}]}, 0x14, 0x1) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000180)={0x0, "94c3796d19dcf8fbe9a0d1297e0f9338d00e6c9474344169758a105b8dc81d15"}) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffd5f, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3f, 0x107, 0xfffffffe, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@generic="f9"]}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c011}, 0xc000) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) preadv(r5, &(0x7f0000000b80)=[{&(0x7f0000000440)=""/150, 0x96}, {&(0x7f0000000740)=""/244, 0xf4}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000240)=""/41, 0x29}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000940)=""/156, 0x9c}, {&(0x7f0000000a00)=""/167, 0xa7}, {&(0x7f0000000640)=""/106, 0x6a}, {&(0x7f0000000ac0)=""/164, 0xa4}], 0xa, 0x8, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000ac0)=@getlink={0x20, 0x12, 0x9, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4340, 0x90}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) 4.340865354s ago: executing program 2 (id=1142): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 3.36183192s ago: executing program 3 (id=1144): openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) close(r0) 2.801969473s ago: executing program 1 (id=1145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x800, 0x2000000}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000040)=r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(0x0, &(0x7f00000003c0)=[{}], 0x1) semop(0x0, &(0x7f0000000380)=[{0x2, 0xf4, 0x800}, {0x0, 0x0, 0x1000}], 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0xfeffffff, r3, 0x21, {0x3b4, 0x6cf}, 0x6}, 0x1) 1.477240224s ago: executing program 1 (id=1146): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xfffffffa}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3e, 0x0, 0x9b, 0x4, 0xc52, 0x6}, {0x13, 0x0, 0x1ff, 0x7f, 0x4, 0x1}, 0x0, 0x1368, 0x200}}, @TCA_TBF_PBURST={0x8, 0x7, 0x16f2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb77c8e9a34a5a04f}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) 1.233752931s ago: executing program 1 (id=1147): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x14) 1.148103411s ago: executing program 1 (id=1148): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x81, 0x1001, 0x3cf, 0x80000004, 0x24, 0x7ff, 0x2}, 0x9c) 1.036406924s ago: executing program 1 (id=1149): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xd000]}, 0x8) 653.394477ms ago: executing program 2 (id=1150): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 61.846932ms ago: executing program 1 (id=1151): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x122) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) shutdown(r1, 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x100000000}) 52.67492ms ago: executing program 2 (id=1152): pselect6(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 5 (id=1153): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_open_dev$sndpcmp(0x0, 0x6, 0x50100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) kernel console output (not intermixed with test programs): eturned -22 [ 141.566276][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.766895][ T30] audit: type=1400 audit(1765969299.275:273): avc: denied { read write } for pid=6728 comm="syz.3.221" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.058006][ T30] audit: type=1400 audit(1765969299.295:274): avc: denied { open } for pid=6728 comm="syz.3.221" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 142.202172][ T30] audit: type=1400 audit(1765969299.335:275): avc: denied { read write } for pid=6728 comm="syz.3.221" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 142.311682][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 142.316151][ T5832] usb 5-1: USB disconnect, device number 9 [ 142.447097][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.455470][ T24] usb 1-1: config 0 has no interface number 0 [ 142.463444][ T24] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 142.472968][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.481858][ T24] usb 1-1: Product: syz [ 142.485466][ T30] audit: type=1400 audit(1765969299.335:276): avc: denied { open } for pid=6728 comm="syz.3.221" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 142.486117][ T24] usb 1-1: Manufacturer: syz [ 142.513819][ T24] usb 1-1: SerialNumber: syz [ 142.539158][ T24] usb 1-1: config 0 descriptor?? [ 142.546712][ T24] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 142.555695][ T24] usb 1-1: selecting invalid altsetting 1 [ 142.561449][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 142.589654][ T24] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.600878][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 142.620802][ T24] usb 1-1: media controller created [ 142.650537][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.955986][ T24] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 143.093594][ T24] usb 1-1: USB disconnect, device number 3 [ 145.849932][ T30] audit: type=1400 audit(1765969303.395:277): avc: denied { mount } for pid=6779 comm="syz.1.236" name="/" dev="ramfs" ino=11934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 145.968009][ T6780] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 146.006438][ T89] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.095382][ T6780] overlayfs: failed to set xattr on upper [ 146.153291][ T6780] overlayfs: ...falling back to redirect_dir=nofollow. [ 146.229944][ T6780] overlayfs: ...falling back to index=off. [ 146.282893][ T6780] overlayfs: ...falling back to uuid=null. [ 146.283421][ T30] audit: type=1400 audit(1765969303.395:278): avc: denied { mounton } for pid=6779 comm="syz.1.236" path="/bus" dev="ramfs" ino=11937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 146.323525][ T89] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 146.347629][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.355641][ T89] usb 5-1: Product: syz [ 146.375937][ T89] usb 5-1: Manufacturer: syz [ 146.398280][ T89] usb 5-1: SerialNumber: syz [ 146.407357][ T89] usb 5-1: config 0 descriptor?? [ 146.442196][ T89] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 146.651591][ T89] gspca_sunplus: reg_r err -32 [ 146.659103][ T89] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 149.091488][ T5832] usb 5-1: USB disconnect, device number 10 [ 149.279618][ T30] audit: type=1400 audit(1765969306.825:279): avc: denied { map } for pid=6834 comm="syz.1.253" path="/dev/usbmon6" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.419480][ T6841] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.495122][ T6840] xt_socket: unknown flags 0x50 [ 149.546321][ T30] audit: type=1400 audit(1765969307.085:280): avc: denied { write } for pid=6835 comm="syz.0.252" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 149.598234][ T30] audit: type=1400 audit(1765969307.085:281): avc: denied { open } for pid=6835 comm="syz.0.252" path="/52/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 151.322705][ T6774] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.276106][ T6884] binder: 6883:6884 ioctl 4058534c 2000000004c0 returned -22 [ 152.283209][ T6881] netlink: 64 bytes leftover after parsing attributes in process `syz.0.264'. [ 152.695211][ T6774] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 152.704474][ T6774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.713417][ T6774] usb 3-1: Product: syz [ 152.717638][ T6774] usb 3-1: Manufacturer: syz [ 152.722281][ T6774] usb 3-1: SerialNumber: syz [ 152.731478][ T6774] usb 3-1: config 0 descriptor?? [ 152.740058][ T6774] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 153.465859][ T6774] gspca_sunplus: reg_r err -110 [ 153.470990][ T6774] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 154.486533][ T30] audit: type=1400 audit(1765969312.025:282): avc: denied { bind } for pid=6908 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.488855][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'. [ 154.546111][ T5875] usb 3-1: USB disconnect, device number 3 [ 154.700456][ T30] audit: type=1400 audit(1765969312.025:283): avc: denied { setopt } for pid=6908 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.729242][ T30] audit: type=1400 audit(1765969312.025:284): avc: denied { write } for pid=6908 comm="syz.3.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.788528][ T6914] netlink: 6912 bytes leftover after parsing attributes in process `syz.2.273'. [ 154.799645][ T6914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.042802][ T30] audit: type=1400 audit(1765969313.585:285): avc: denied { create } for pid=6925 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.142418][ T30] audit: type=1400 audit(1765969313.605:286): avc: denied { write } for pid=6925 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 156.325719][ T30] audit: type=1400 audit(1765969313.635:287): avc: denied { ioctl } for pid=6925 comm="syz.2.277" path="socket:[12610]" dev="sockfs" ino=12610 ioctlcmd=0x5516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.120097][ T6942] binder: 6935:6942 ioctl 4058534c 2000000004c0 returned -22 [ 159.294473][ T6971] netlink: 6912 bytes leftover after parsing attributes in process `syz.4.288'. [ 159.305218][ T6971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.624376][ T30] audit: type=1400 audit(1765969318.165:288): avc: denied { shutdown } for pid=6972 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 161.030882][ T30] audit: type=1400 audit(1765969318.575:289): avc: denied { getopt } for pid=6985 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 161.288523][ T6989] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 161.306882][ T30] audit: type=1400 audit(1765969318.835:290): avc: denied { ioctl } for pid=6988 comm="syz.1.298" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 162.059178][ T7007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'. [ 162.578031][ T7026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.307'. [ 163.623017][ T30] audit: type=1400 audit(1765969321.035:291): avc: denied { create } for pid=7036 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 163.890516][ T30] audit: type=1400 audit(1765969321.045:292): avc: denied { bind } for pid=7036 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.432248][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 165.757609][ T7070] vivid-007: disconnect [ 166.751991][ T7062] vivid-007: reconnect [ 167.716849][ T30] audit: type=1400 audit(1765969324.785:293): avc: denied { append } for pid=7075 comm="syz.0.322" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 168.631607][ T7095] program syz.3.327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.640930][ T30] audit: type=1400 audit(1765969326.175:294): avc: denied { read } for pid=7089 comm="syz.3.327" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 168.749195][ T7095] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 168.952527][ T30] audit: type=1400 audit(1765969326.175:295): avc: denied { open } for pid=7089 comm="syz.3.327" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 169.273856][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 169.954264][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.330'. [ 172.193210][ T7129] vivid-007: disconnect [ 172.257905][ T30] audit: type=1400 audit(1765969329.805:296): avc: denied { watch } for pid=7130 comm="syz.2.336" path="/65" dev="tmpfs" ino=361 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 172.337013][ T30] audit: type=1400 audit(1765969329.885:297): avc: denied { create } for pid=7130 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.377171][ T30] audit: type=1400 audit(1765969329.905:298): avc: denied { connect } for pid=7130 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.440691][ T30] audit: type=1400 audit(1765969329.915:299): avc: denied { create } for pid=7130 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 172.513662][ T30] audit: type=1400 audit(1765969329.915:300): avc: denied { connect } for pid=7130 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 172.585981][ T7138] binder: 7135:7138 ioctl 4058534c 2000000004c0 returned -22 [ 173.205421][ T7127] vivid-007: reconnect [ 173.558636][ T7152] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 173.586871][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 173.691119][ T7152] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 173.778727][ T7158] ubi: mtd0 is already attached to ubi31 [ 174.186338][ T7152] kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 174.199066][ T7152] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 174.221764][ T7152] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 174.229951][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 174.234382][ T7152] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 174.244249][ T7152] kvm: requested 61180 ns i8254 timer period limited to 200000 ns [ 174.252417][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 174.271508][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.271559][ T7152] kvm: requested 99733 ns i8254 timer period limited to 200000 ns [ 174.299280][ T7152] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 174.299595][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.307633][ T7152] kvm: requested 175162 ns i8254 timer period limited to 200000 ns [ 174.907093][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.974869][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.006875][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.016287][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.802114][ T7184] usbtmc 2-1:16.0: simple control status returned 67 [ 176.010209][ T5817] usb 2-1: USB disconnect, device number 9 [ 176.099506][ T7188] binder: 7187:7188 ioctl 4058534c 2000000004c0 returned -22 [ 177.009716][ T30] audit: type=1400 audit(1765969334.525:301): avc: denied { bind } for pid=7195 comm="syz.0.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 178.153689][ T30] audit: type=1400 audit(1765969335.425:302): avc: denied { map } for pid=7199 comm="syz.3.356" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 178.185214][ T30] audit: type=1400 audit(1765969335.435:303): avc: denied { execute } for pid=7199 comm="syz.3.356" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 179.755168][ T30] audit: type=1400 audit(1765969337.295:304): avc: denied { ioctl } for pid=7222 comm="syz.0.359" path="socket:[13211]" dev="sockfs" ino=13211 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 179.883932][ T5978] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.910898][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.366'. [ 180.087516][ T5978] usb 2-1: Using ep0 maxpacket: 8 [ 180.097733][ T5978] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 180.192434][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.206248][ T5978] usb 2-1: Product: syz [ 180.210471][ T5978] usb 2-1: Manufacturer: syz [ 180.215053][ T5978] usb 2-1: SerialNumber: syz [ 180.221414][ T5978] usb 2-1: config 0 descriptor?? [ 180.228320][ T5978] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 180.285077][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 180.411696][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 181.278286][ T5978] gspca_sonixj: reg_w1 err -110 [ 181.283228][ T5978] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 181.337575][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 181.474969][ T9] usb 4-1: config 2 has an invalid interface number: 88 but max is 0 [ 181.639960][ T9] usb 4-1: config 2 has no interface number 0 [ 181.673336][ T9] usb 4-1: config 2 interface 88 has no altsetting 0 [ 181.698921][ T9] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 181.726861][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.744451][ T9] usb 4-1: Product: syz [ 181.751520][ T9] usb 4-1: Manufacturer: syz [ 181.766311][ T9] usb 4-1: SerialNumber: syz [ 181.849435][ T7250] binder: 7249:7250 ioctl c0306201 200000004a40 returned -14 [ 182.515671][ T30] audit: type=1400 audit(1765969340.055:305): avc: denied { open } for pid=7259 comm="syz.0.376" path="/dev/ttyq4" dev="devtmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 184.488018][ T5924] usb 2-1: USB disconnect, device number 10 [ 184.527444][ T9] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 184.568683][ T9] asix 4-1:2.88: probe with driver asix failed with error -71 [ 184.632593][ T9] usb 4-1: USB disconnect, device number 3 [ 185.878574][ T7285] : renamed from bridge_slave_0 (while UP) [ 185.947870][ T30] audit: type=1400 audit(1765969343.425:306): avc: denied { ioctl } for pid=7277 comm="syz.1.380" path="socket:[15365]" dev="sockfs" ino=15365 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 186.394370][ T7292] ubi: mtd0 is already attached to ubi31 [ 186.400715][ T7291] binder: 7287:7291 ioctl c0306201 200000004a40 returned -14 [ 186.471392][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 186.471413][ T5136] Bluetooth: hci3: command 0x0406 tx timeout [ 186.477426][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 186.477462][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 186.518173][ T5924] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 186.728346][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 187.230558][ T5924] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.241767][ T5924] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 187.277641][ T5924] usb 4-1: can't read configurations, error -71 [ 190.935082][ T7326] binder: 7325:7326 ioctl c0306201 200000004a40 returned -14 [ 191.027464][ T7329] ubi: mtd0 is already attached to ubi31 [ 192.945439][ T30] audit: type=1400 audit(1765969350.485:307): avc: denied { search } for pid=7364 comm="syz.1.408" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.467647][ T5924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 193.475483][ T30] audit: type=1400 audit(1765969350.485:308): avc: denied { search } for pid=7364 comm="syz.1.408" name="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.507007][ T30] audit: type=1400 audit(1765969350.485:309): avc: denied { read open } for pid=7364 comm="syz.1.408" path="/" dev="configfs" ino=1123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 193.627322][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 193.655567][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 193.811930][ T7370] ubi: mtd0 is already attached to ubi31 [ 193.892781][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.899339][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.908581][ T5924] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 193.916154][ T5924] usb 1-1: can't read configurations, error -71 [ 193.946952][ T24] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 194.195502][ T30] audit: type=1400 audit(1765969351.645:310): avc: denied { watch_sb watch_reads } for pid=7375 comm="syz.3.405" path="/79/file0" dev="tmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.273667][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 194.365515][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 194.405131][ T24] usb 2-1: config 8 has an invalid interface number: 138 but max is 1 [ 194.461237][ T24] usb 2-1: config 8 has an invalid interface number: 136 but max is 1 [ 194.508090][ T24] usb 2-1: config 8 has no interface number 0 [ 194.546253][ T24] usb 2-1: config 8 has no interface number 1 [ 194.580543][ T24] usb 2-1: config 8 interface 136 has no altsetting 0 [ 194.627685][ T24] usb 2-1: New USB device found, idVendor=0b62, idProduct=0059, bcdDevice=c1.2e [ 194.669610][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.718962][ T24] usb 2-1: Product: syz [ 194.746853][ T24] usb 2-1: Manufacturer: syz [ 194.773908][ T24] usb 2-1: SerialNumber: syz [ 196.043143][ T24] usb 2-1: USB disconnect, device number 11 [ 196.510156][ T7396] fuse: Bad value for 'group_id' [ 196.534653][ T7396] fuse: Bad value for 'group_id' [ 196.930599][ T30] audit: type=1400 audit(1765969354.445:311): avc: denied { view } for pid=7399 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 197.446162][ T7410] binder: 7409:7410 ioctl 4058534c 2000000004c0 returned -22 [ 198.767195][ T30] audit: type=1400 audit(1765969355.885:312): avc: denied { read write } for pid=7414 comm="syz.1.423" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.862412][ T30] audit: type=1400 audit(1765969355.885:313): avc: denied { open } for pid=7414 comm="syz.1.423" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 198.887017][ T5875] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 199.007221][ T30] audit: type=1400 audit(1765969355.885:314): avc: denied { ioctl } for pid=7414 comm="syz.1.423" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 199.033968][ T30] audit: type=1400 audit(1765969356.365:315): avc: denied { read } for pid=7421 comm="syz.3.424" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 199.058133][ T30] audit: type=1400 audit(1765969356.365:316): avc: denied { open } for pid=7421 comm="syz.3.424" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 199.436884][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 200.658866][ T30] audit: type=1400 audit(1765969356.365:317): avc: denied { ioctl } for pid=7421 comm="syz.3.424" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 200.706125][ T30] audit: type=1400 audit(1765969356.395:318): avc: denied { write } for pid=7421 comm="syz.3.424" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.206042][ T30] audit: type=1400 audit(1765969358.715:319): avc: denied { create } for pid=7440 comm="syz.0.428" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 201.626892][ T30] audit: type=1400 audit(1765969358.715:320): avc: denied { link } for pid=7440 comm="syz.0.428" name="#b" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 201.756821][ T30] audit: type=1400 audit(1765969358.725:321): avc: denied { rename } for pid=7440 comm="syz.0.428" name="#c" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 201.872119][ T7449] fuse: Bad value for 'group_id' [ 201.911923][ T7449] fuse: Bad value for 'group_id' [ 202.093399][ T5875] usb 5-1: device descriptor read/all, error -71 [ 207.149190][ T30] audit: type=1400 audit(1765969364.695:322): avc: denied { mounton } for pid=7496 comm="syz.4.443" path="/78/file0" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 207.208313][ T30] audit: type=1400 audit(1765969364.725:323): avc: denied { mounton } for pid=7496 comm="syz.4.443" path="/78/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 207.239989][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.437147][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 207.464429][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 207.483656][ T24] usb 2-1: config 0 has no interface number 0 [ 207.490029][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 207.499635][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 207.539795][ T7502] fuse: Bad value for 'group_id' [ 207.556196][ T7502] fuse: Bad value for 'group_id' [ 207.566868][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.574928][ T24] usb 2-1: Product: syz [ 207.579201][ T24] usb 2-1: Manufacturer: syz [ 207.583793][ T24] usb 2-1: SerialNumber: syz [ 207.590530][ T24] usb 2-1: config 0 descriptor?? [ 207.597678][ T24] smsc75xx v1.0.0 [ 210.137648][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 210.155678][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 210.165390][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 210.177029][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 210.189143][ T24] usb 2-1: USB disconnect, device number 12 [ 210.397270][ T5896] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 210.499488][ T7531] binder: 7530:7531 unknown command 53670 [ 210.506911][ T7531] binder: 7530:7531 ioctl c0306201 200000000300 returned -22 [ 210.536822][ T5896] usb 5-1: device descriptor read/64, error -71 [ 210.663615][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 210.836814][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 210.844400][ T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 210.846824][ T5896] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 210.863914][ T24] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 210.876407][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 210.885713][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.893796][ T24] usb 2-1: Product: syz [ 210.898097][ T24] usb 2-1: Manufacturer: syz [ 210.902735][ T24] usb 2-1: SerialNumber: syz [ 211.010715][ T5896] usb 5-1: device descriptor read/64, error -71 [ 211.140136][ T5896] usb usb5-port1: attempt power cycle [ 211.556875][ T5896] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 211.661266][ T5896] usb 5-1: device descriptor read/8, error -71 [ 212.372648][ T7554] netlink: 6912 bytes leftover after parsing attributes in process `syz.3.465'. [ 212.563573][ T7554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.199993][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 213.526549][ T5923] usb 2-1: USB disconnect, device number 13 [ 213.580011][ T7569] binder: 7568:7569 ioctl 4018620d 0 returned -22 [ 213.756852][ T5832] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 213.971650][ T7577] netlink: 'syz.1.471': attribute type 4 has an invalid length. [ 214.476849][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 214.487433][ T5832] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 214.497988][ T5832] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.516378][ T5832] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.525788][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.534082][ T5832] usb 1-1: Product: syz [ 214.539220][ T5832] usb 1-1: Manufacturer: syz [ 214.544341][ T5832] usb 1-1: SerialNumber: syz [ 214.703141][ T7582] fuse: Bad value for 'fd' [ 214.760945][ T5832] usb 1-1: 0:2 : does not exist [ 214.809062][ T5832] usb 1-1: USB disconnect, device number 6 [ 219.149976][ T7646] netlink: 80 bytes leftover after parsing attributes in process `syz.1.491'. [ 219.279876][ T30] audit: type=1400 audit(1765969376.705:324): avc: denied { create } for pid=7638 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.349341][ T30] audit: type=1400 audit(1765969376.705:325): avc: denied { setopt } for pid=7638 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.413169][ T7648] netlink: 64 bytes leftover after parsing attributes in process `syz.0.480'. [ 219.716828][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 220.367850][ T5923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 220.398236][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 220.408910][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.422571][ T10] usb 5-1: config 0 descriptor?? [ 220.431610][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 220.548237][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 220.566208][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.626793][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.653360][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.667001][ T5923] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.676077][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.697437][ T5923] usb 3-1: config 0 descriptor?? [ 220.830266][ T7677] : renamed from bridge_slave_0 (while UP) [ 221.050586][ T10] gspca_sunplus: reg_w_riv err -71 [ 221.055816][ T10] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 221.089237][ T10] usb 5-1: USB disconnect, device number 17 [ 221.140459][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.148808][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.163093][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.174870][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.204301][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.224231][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.236678][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.250658][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.267259][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.280762][ T5923] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 221.364731][ T5923] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input5 [ 221.423605][ T5923] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 221.527049][ T5923] usb 3-1: USB disconnect, device number 4 [ 221.557501][ T7679] fido_id[7679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 222.866908][ T30] audit: type=1400 audit(1765969379.745:326): avc: denied { bind } for pid=7692 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.963691][ T30] audit: type=1400 audit(1765969379.755:327): avc: denied { connect } for pid=7692 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 222.983752][ T30] audit: type=1400 audit(1765969379.755:328): avc: denied { write } for pid=7692 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 223.047081][ T30] audit: type=1400 audit(1765969380.595:329): avc: denied { ioctl } for pid=7693 comm="syz.2.507" path="socket:[17186]" dev="sockfs" ino=17186 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.147190][ T7703] Bluetooth: MGMT ver 1.23 [ 223.152632][ T7698] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 224.840606][ T48] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 225.079303][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 225.090669][ T48] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 225.114991][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 225.115291][ T48] usb 4-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 225.132836][ T5813] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 225.149329][ T48] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 225.169421][ T48] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 225.189093][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.385336][ T48] usb 4-1: Product: syz [ 225.402623][ T48] usb 4-1: Manufacturer: syz [ 225.413352][ T48] usb 4-1: SerialNumber: syz [ 225.446117][ T48] hso 4-1:6.0: Can't find BULK IN endpoint [ 225.476206][ T7743] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.655643][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.697201][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.176872][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 227.476648][ T7462] usb 4-1: USB disconnect, device number 6 [ 228.786414][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 229.196867][ T5817] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 229.286829][ T7699] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 229.436806][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 229.445503][ T5817] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 229.459813][ T5817] usb 1-1: config 0 has no interface number 0 [ 229.474482][ T5817] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.487859][ T5817] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 229.501306][ T5817] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 229.510508][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 229.518670][ T5817] usb 1-1: Product: syz [ 229.523680][ T5817] usb 1-1: SerialNumber: syz [ 229.537795][ T5817] usb 1-1: config 0 descriptor?? [ 229.552763][ T5817] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 229.564573][ T5817] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 229.583467][ T7699] usb 5-1: Using ep0 maxpacket: 8 [ 229.596292][ T7699] usb 5-1: config 0 has an invalid interface number: 101 but max is 12 [ 229.613852][ T7699] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 229.630278][ T7699] usb 5-1: config 0 has no interface number 0 [ 229.642674][ T7699] usb 5-1: too many endpoints for config 0 interface 101 altsetting 115: 51, using maximum allowed: 30 [ 229.664975][ T7699] usb 5-1: config 0 interface 101 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 229.689091][ T7699] usb 5-1: config 0 interface 101 has no altsetting 0 [ 229.698314][ T7699] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 229.707717][ T7699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.715780][ T7699] usb 5-1: Product: syz [ 229.720523][ T7699] usb 5-1: Manufacturer: syz [ 229.725186][ T7699] usb 5-1: SerialNumber: syz [ 229.733187][ T7699] usb 5-1: config 0 descriptor?? [ 229.765006][ T30] audit: type=1400 audit(1765969387.305:330): avc: denied { ioctl } for pid=7810 comm="syz.0.541" path="/dev/input/event4" dev="devtmpfs" ino=2870 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 229.791106][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 229.792736][ T5896] usb 1-1: USB disconnect, device number 7 [ 229.798318][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 229.826372][ T5896] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 229.947337][ T7699] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 230.066868][ T5817] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 230.206870][ T5817] usb 3-1: device descriptor read/64, error -71 [ 230.374093][ T30] audit: type=1400 audit(1765969387.915:331): avc: denied { ioctl } for pid=7835 comm="syz.0.551" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17867 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 230.453682][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 230.496823][ T5817] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 230.611478][ T7699] gspca_zc3xx: reg_w_i err -71 [ 230.623047][ T7843] binder: 7842:7843 ioctl 4058534c 2000000004c0 returned -22 [ 230.631622][ T5817] usb 3-1: device descriptor read/64, error -71 [ 230.747041][ T5817] usb usb3-port1: attempt power cycle [ 231.087178][ T5817] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 231.127540][ T5817] usb 3-1: device descriptor read/8, error -71 [ 231.198599][ T7699] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 231.213361][ T7699] gspca_zc3xx 5-1:0.101: probe with driver gspca_zc3xx failed with error -71 [ 231.235375][ T7699] usb 5-1: USB disconnect, device number 18 [ 231.321835][ T7853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.376847][ T5817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.417369][ T5817] usb 3-1: device descriptor read/8, error -71 [ 231.528733][ T5817] usb usb3-port1: unable to enumerate USB device [ 231.572159][ T7860] xt_socket: unknown flags 0x50 [ 232.217081][ T7872] capability: warning: `syz.0.564' uses deprecated v2 capabilities in a way that may be insecure [ 232.672292][ T30] audit: type=1400 audit(1765969390.205:332): avc: denied { write } for pid=7874 comm="syz.0.565" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 233.245741][ T7885] ubi: mtd0 is already attached to ubi31 [ 235.224042][ T7902] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.082656][ T7913] xt_socket: unknown flags 0x50 [ 236.473467][ T7922] ubi: mtd0 is already attached to ubi31 [ 237.246786][ T30] audit: type=1400 audit(1765969394.785:333): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.718861][ T6124] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 238.877520][ T6124] usb 4-1: Using ep0 maxpacket: 16 [ 238.885558][ T6124] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.902060][ T6124] usb 4-1: config 8 has an invalid interface number: 34 but max is 0 [ 238.911581][ T6124] usb 4-1: config 8 has no interface number 0 [ 238.928152][ T6124] usb 4-1: config 8 interface 34 has no altsetting 0 [ 238.965365][ T6124] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 238.974543][ T5896] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.987029][ T6124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.995037][ T6124] usb 4-1: Product: syz [ 239.028394][ T6124] usb 4-1: Manufacturer: syz [ 239.059411][ T6124] usb 4-1: SerialNumber: syz [ 239.076935][ T7699] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 239.160153][ T7977] Invalid option length (1040122) for dns_resolver key [ 239.221708][ T7699] usb 2-1: device descriptor read/64, error -71 [ 239.236876][ T5896] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.249548][ T5896] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.259670][ T5896] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.268834][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.578986][ T7967] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 239.588913][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 239.599844][ T7983] xt_socket: unknown flags 0x50 [ 239.626837][ T7699] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 240.046560][ T7699] usb 2-1: device descriptor read/64, error -71 [ 240.586837][ T30] audit: type=1400 audit(1765969397.695:334): avc: denied { connect } for pid=7962 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 240.747715][ T7699] usb usb2-port1: attempt power cycle [ 240.877829][ T5896] usb 5-1: USB disconnect, device number 19 [ 240.903641][ T30] audit: type=1400 audit(1765969398.445:335): avc: denied { setopt } for pid=7989 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 241.156920][ T7699] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 241.189502][ T7699] usb 2-1: device descriptor read/8, error -71 [ 241.666841][ T7699] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.697298][ T7699] usb 2-1: device descriptor read/8, error -71 [ 241.849033][ T7699] usb usb2-port1: unable to enumerate USB device [ 242.031723][ T30] audit: type=1400 audit(1765969399.575:336): avc: denied { append } for pid=7996 comm="syz.2.603" name="001" dev="devtmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 242.056541][ T6124] usb 4-1: USB disconnect, device number 7 [ 242.071842][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 244.281966][ T8032] xt_socket: unknown flags 0x50 [ 244.480938][ T8024] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 244.558699][ T8037] 9pnet_fd: Insufficient options for proto=fd [ 245.226235][ T30] audit: type=1400 audit(1765969402.715:337): avc: denied { create } for pid=8041 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 245.231822][ T8045] tmpfs: Unknown parameter 'nr_inndes' [ 245.302191][ T30] audit: type=1400 audit(1765969402.775:338): avc: denied { remount } for pid=8041 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 245.336565][ T8045] netlink: 'syz.0.616': attribute type 1 has an invalid length. [ 245.358001][ T30] audit: type=1400 audit(1765969402.875:339): avc: denied { write } for pid=8041 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 245.422570][ T6124] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 245.566804][ T7462] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 245.659024][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 245.669930][ T6124] usb 2-1: device descriptor read/64, error -71 [ 245.726840][ T7462] usb 4-1: Using ep0 maxpacket: 32 [ 245.742454][ T7462] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.750745][ T7462] usb 4-1: config 0 has no interface number 0 [ 245.762809][ T7462] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 245.784055][ T7462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.792576][ T7462] usb 4-1: Product: syz [ 245.796970][ T7462] usb 4-1: Manufacturer: syz [ 245.806936][ T8054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.621'. [ 245.851317][ T5978] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 245.864696][ T7462] usb 4-1: SerialNumber: syz [ 245.993441][ T7462] usb 4-1: config 0 descriptor?? [ 246.043618][ T7462] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 246.059233][ T7462] usb 4-1: selecting invalid altsetting 1 [ 246.065069][ T7462] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 246.079729][ T7462] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 246.090889][ T7462] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 246.100747][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 246.111981][ T7462] usb 4-1: media controller created [ 246.118178][ T5978] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 246.134303][ T7462] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.143436][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.042772][ T6124] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 247.098408][ T5978] usb 1-1: config 0 descriptor?? [ 247.115412][ T8045] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 247.185646][ T7462] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 247.392510][ T7462] zl10353_read_register: readreg error (reg=127, ret==-32) [ 247.432063][ T7462] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 247.457544][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 247.586308][ T7462] usb 4-1: USB disconnect, device number 8 [ 247.709059][ T5978] elan 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 247.899902][ T30] audit: type=1400 audit(1765969405.445:340): avc: denied { create } for pid=8064 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 247.921661][ T8065] netlink: 72 bytes leftover after parsing attributes in process `syz.3.624'. [ 247.941045][ T5978] usb 1-1: USB disconnect, device number 8 [ 247.955844][ T6124] usb 2-1: device descriptor read/64, error -71 [ 247.957921][ T30] audit: type=1400 audit(1765969405.465:341): avc: denied { write } for pid=8064 comm="syz.3.624" path="socket:[19409]" dev="sockfs" ino=19409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 248.096663][ T24] usb 3-1: device descriptor read/64, error -71 [ 248.107121][ T6124] usb usb2-port1: attempt power cycle [ 248.362041][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 248.897147][ T24] usb 3-1: device descriptor read/64, error -71 [ 249.049627][ T24] usb usb3-port1: attempt power cycle [ 249.087846][ T8069] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 249.172547][ T8078] input: syz0 as /devices/virtual/input/input7 [ 249.261934][ T8075] netlink: 6912 bytes leftover after parsing attributes in process `syz.0.629'. [ 249.271890][ T8075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.447682][ T30] audit: type=1326 audit(1765969406.995:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad218f749 code=0x7ffc0000 [ 249.527613][ T8089] fuse: Unknown parameter 'group_i00000000000000000000' [ 249.537206][ T30] audit: type=1326 audit(1765969407.015:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad218f749 code=0x7ffc0000 [ 249.542575][ T8090] xt_socket: unknown flags 0x50 [ 249.594028][ T30] audit: type=1326 audit(1765969407.015:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad218f749 code=0x7ffc0000 [ 249.659365][ T30] audit: type=1326 audit(1765969407.015:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fcad218f749 code=0x7ffc0000 [ 249.692822][ T30] audit: type=1326 audit(1765969407.015:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.4.634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad218f749 code=0x7ffc0000 [ 249.967248][ T5817] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 250.127069][ T5817] usb 4-1: device descriptor read/64, error -71 [ 250.296932][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 250.386818][ T5817] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 251.361053][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 251.361070][ T30] audit: type=1400 audit(1765969408.875:355): avc: denied { bind } for pid=8099 comm="syz.2.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.367636][ T5817] usb 4-1: device descriptor read/64, error -71 [ 251.557093][ T5817] usb usb4-port1: attempt power cycle [ 252.023259][ T8121] netlink: 6912 bytes leftover after parsing attributes in process `syz.0.643'. [ 252.032444][ T8121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.087753][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 252.117260][ T5817] usb 4-1: device descriptor read/8, error -71 [ 252.836842][ T5817] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 253.553811][ T5817] usb 4-1: device not accepting address 12, error -71 [ 253.559557][ T5923] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 253.579346][ T5817] usb usb4-port1: unable to enumerate USB device [ 253.682553][ T8138] fuse: Unknown parameter 'group_i00000000000000000000' [ 253.745170][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 253.787543][ T5923] usb 2-1: config 0 has an invalid interface number: 101 but max is 12 [ 253.802525][ T5923] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 253.834115][ T5923] usb 2-1: config 0 has no interface number 0 [ 253.861981][ T5923] usb 2-1: too many endpoints for config 0 interface 101 altsetting 115: 51, using maximum allowed: 30 [ 255.030435][ T5923] usb 2-1: config 0 interface 101 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 51 [ 255.044431][ T5923] usb 2-1: config 0 interface 101 has no altsetting 0 [ 255.073052][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 255.104232][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.128704][ T5923] usb 2-1: Product: syz [ 255.132890][ T5923] usb 2-1: Manufacturer: syz [ 255.146789][ T5923] usb 2-1: SerialNumber: syz [ 255.167798][ T5923] usb 2-1: config 0 descriptor?? [ 255.280659][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.298374][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.407573][ T5923] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 255.454922][ T8156] xt_socket: unknown flags 0x50 [ 255.585964][ T5923] gspca_zc3xx: reg_w_i err -71 [ 256.008379][ T6244] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 256.316947][ T5923] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 256.430168][ T6244] usb 3-1: device descriptor read/64, error -71 [ 256.448006][ T5923] gspca_zc3xx 2-1:0.101: probe with driver gspca_zc3xx failed with error -71 [ 256.500085][ T5923] usb 2-1: USB disconnect, device number 21 [ 257.036843][ T6244] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 257.186812][ T6244] usb 3-1: device descriptor read/64, error -71 [ 257.303993][ T8184] netlink: 6912 bytes leftover after parsing attributes in process `syz.4.663'. [ 257.313898][ T8184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.339586][ T6244] usb usb3-port1: attempt power cycle [ 257.756818][ T6244] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 257.787708][ T6244] usb 3-1: device descriptor read/8, error -71 [ 257.821993][ T8191] fuse: Unknown parameter 'group_id00000000000000000000' [ 258.036849][ T6244] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 258.084108][ T6244] usb 3-1: device descriptor read/8, error -71 [ 258.207721][ T6244] usb usb3-port1: unable to enumerate USB device [ 258.358990][ T8197] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8197 comm=syz.3.668 [ 259.506340][ T30] audit: type=1400 audit(1765969417.045:356): avc: denied { ioctl } for pid=8203 comm="syz.2.671" path="/dev/sg0" dev="devtmpfs" ino=738 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 261.246951][ T8211] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 261.297110][ T7699] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 261.447784][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 261.466955][ T7699] usb 5-1: Using ep0 maxpacket: 16 [ 261.492253][ T7699] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 261.757003][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 261.929585][ T7699] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 261.949779][ T7699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.975267][ T7699] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 261.994391][ T7699] usb 5-1: config 0 has no interface number 0 [ 261.996828][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 262.001464][ T7699] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 262.022546][ T7699] usb 5-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.036119][ T7699] usb 5-1: config 0 interface 125 has no altsetting 0 [ 262.049702][ T7699] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 262.060583][ T7699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.069510][ T7699] usb 5-1: Product: syz [ 262.073834][ T7699] usb 5-1: Manufacturer: syz [ 262.078530][ T5923] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 262.086614][ T7699] usb 5-1: SerialNumber: syz [ 262.095915][ T7699] usb 5-1: config 0 descriptor?? [ 262.108746][ T24] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 262.136849][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 262.176651][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 262.248584][ T5923] usb 4-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.259737][ T5923] usb 4-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.277544][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.310818][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.343785][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.346861][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 262.372984][ T24] usbtmc 1-1:16.0: bulk endpoints not found [ 262.381659][ T5923] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 262.415338][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.460007][ T5923] usb 4-1: config 0 descriptor?? [ 262.883697][ T5923] usbhid 4-1:0.0: can't add hid device: -71 [ 262.890273][ T5923] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 262.912552][ T5923] usb 4-1: USB disconnect, device number 13 [ 262.970985][ T8251] binder: 8250:8251 ioctl 4058534c 2000000004c0 returned -22 [ 263.354478][ T48] usb 5-1: USB disconnect, device number 20 [ 264.146814][ T5923] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 264.291014][ T6124] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 264.302892][ T5923] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 264.313447][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.321621][ T5923] usb 3-1: Product: syz [ 264.326122][ T5923] usb 3-1: Manufacturer: syz [ 264.330991][ T5923] usb 3-1: SerialNumber: syz [ 264.338956][ T5923] usb 3-1: config 0 descriptor?? [ 264.362802][ T5923] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 264.762490][ T7699] usb 1-1: USB disconnect, device number 9 [ 264.769450][ T6124] usb 2-1: Using ep0 maxpacket: 16 [ 265.560368][ T6124] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.573429][ T6124] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.584198][ T6124] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 265.641086][ T6124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.655592][ T6124] usb 2-1: config 0 descriptor?? [ 266.930744][ T5923] gspca_sunplus: reg_r err -110 [ 266.937915][ T5923] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 266.963287][ T24] usb 3-1: USB disconnect, device number 16 [ 267.087975][ T6244] usb 2-1: USB disconnect, device number 22 [ 268.571710][ T5923] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 269.337117][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 269.343495][ T5923] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 269.373683][ T5923] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.396817][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.406719][ T5923] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.429946][ T5923] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.456808][ T5923] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.476856][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.173020][ T6244] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 270.271988][ T8318] usbtmc 3-1:16.0: simple control status returned 67 [ 270.407620][ T6244] usb 2-1: Using ep0 maxpacket: 32 [ 270.430553][ T6244] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 270.930336][ T6244] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 270.948373][ T24] usb 3-1: USB disconnect, device number 17 [ 270.962347][ T6244] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 270.971755][ T6244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.042277][ T6244] usb 2-1: Product: syz [ 271.046470][ T6244] usb 2-1: Manufacturer: syz [ 271.113084][ T6244] usb 2-1: SerialNumber: syz [ 271.371233][ T48] usb 2-1: USB disconnect, device number 23 [ 271.527839][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 272.499316][ T48] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 272.542484][ T24] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 272.561817][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.614984][ T24] usb 3-1: Product: syz [ 272.636902][ T24] usb 3-1: Manufacturer: syz [ 272.641524][ T24] usb 3-1: SerialNumber: syz [ 272.660205][ T24] usb 3-1: config 0 descriptor?? [ 272.678701][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 272.686785][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 272.698152][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.717699][ T48] usb 5-1: config 8 has an invalid interface number: 34 but max is 0 [ 272.725844][ T48] usb 5-1: config 8 has no interface number 0 [ 272.754988][ T48] usb 5-1: config 8 interface 34 has no altsetting 0 [ 272.806554][ T48] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 272.836009][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.306868][ T48] usb 5-1: Product: syz [ 273.311074][ T48] usb 5-1: Manufacturer: syz [ 273.315664][ T48] usb 5-1: SerialNumber: syz [ 273.742303][ T24] gspca_sunplus: reg_r err -32 [ 273.747633][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 274.382641][ T8354] overlayfs: failed to resolve './file1/file0': -2 [ 274.611278][ T30] audit: type=1400 audit(1765969432.155:357): avc: denied { write } for pid=8356 comm="syz.0.721" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 274.637798][ T8358] random: crng reseeded on system resumption [ 274.836485][ T30] audit: type=1400 audit(1765969432.185:358): avc: denied { open } for pid=8356 comm="syz.0.721" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 275.453584][ T5923] usb 3-1: USB disconnect, device number 18 [ 275.584735][ T48] usb 5-1: USB disconnect, device number 21 [ 279.148537][ T8392] overlayfs: failed to resolve './file1/file0': -2 [ 280.706811][ T48] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 280.959884][ T48] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 280.969907][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.006101][ T48] usb 1-1: Product: syz [ 281.025444][ T48] usb 1-1: Manufacturer: syz [ 281.038256][ T48] usb 1-1: SerialNumber: syz [ 281.119916][ T48] usb 1-1: config 0 descriptor?? [ 281.616671][ T48] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 281.684743][ T8415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.737'. [ 281.959716][ T8419] fuse: Bad value for 'fd' [ 283.197168][ T48] gspca_sunplus: reg_r err -110 [ 283.202063][ T48] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 283.605347][ T7462] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 283.990301][ T7462] usb 4-1: Using ep0 maxpacket: 8 [ 284.116835][ T7462] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 284.209302][ T7462] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 284.330493][ T7462] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.467683][ T7462] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 284.584924][ T7462] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.675689][ T7462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.819635][ T7160] usb 1-1: USB disconnect, device number 10 [ 286.014496][ T7462] usb 4-1: can't set config #16, error -71 [ 286.031382][ T7462] usb 4-1: USB disconnect, device number 14 [ 286.099890][ T30] audit: type=1400 audit(1765969443.645:359): avc: denied { name_connect } for pid=8440 comm="syz.1.744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 286.128356][ T8441] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8441 comm=syz.1.744 [ 287.017365][ T7462] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 287.739498][ T7462] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.841529][ T7462] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 287.855082][ T7462] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 287.864320][ T7462] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 287.873373][ T7462] usb 4-1: SerialNumber: syz [ 287.895971][ T8462] binder: 8461:8462 ioctl c0306201 200000004a40 returned -14 [ 288.109145][ T7462] usb 4-1: 0:2 : does not exist [ 288.128467][ T7462] usb 4-1: unit 5 not found! [ 288.171125][ T7462] usb 4-1: USB disconnect, device number 15 [ 288.301713][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.346818][ T6124] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 288.356974][ T7699] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 288.521641][ T6124] usb 1-1: config 0 interface 0 altsetting 34 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.558695][ T7699] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 288.573376][ T6124] usb 1-1: config 0 interface 0 altsetting 34 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.583475][ T7699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.592241][ T6124] usb 1-1: config 0 interface 0 has no altsetting 0 [ 288.599434][ T7699] usb 3-1: Product: syz [ 288.603588][ T7699] usb 3-1: Manufacturer: syz [ 288.608956][ T6124] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 288.618563][ T7699] usb 3-1: SerialNumber: syz [ 288.625831][ T7699] usb 3-1: config 0 descriptor?? [ 288.630909][ T6124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.641874][ T7699] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 288.662088][ T6124] usb 1-1: config 0 descriptor?? [ 288.807176][ T7462] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 288.969857][ T7462] usb 2-1: Using ep0 maxpacket: 16 [ 289.002493][ T7462] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.068754][ T7462] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 289.180143][ T7462] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 289.233162][ T7462] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.289208][ T6124] usbhid 1-1:0.0: can't add hid device: -71 [ 289.295201][ T6124] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 289.301357][ T7462] usb 2-1: config 0 descriptor?? [ 289.318419][ T6124] usb 1-1: USB disconnect, device number 11 [ 289.575672][ T7462] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 289.613885][ T7699] gspca_sunplus: reg_r err -32 [ 289.620079][ T7699] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 289.675784][ T8483] kernel profiling enabled (shift: 5) [ 289.713881][ T30] audit: type=1400 audit(1765969447.255:360): avc: denied { ioctl } for pid=8484 comm="syz.0.759" path="socket:[21178]" dev="sockfs" ino=21178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.021102][ T8494] fuse: Bad value for 'fd' [ 291.156637][ T7462] usb 3-1: USB disconnect, device number 19 [ 291.263236][ T8508] binder: 8507:8508 ioctl 4058534c 2000000004c0 returned -22 [ 292.184862][ T6774] usb 2-1: USB disconnect, device number 24 [ 292.287084][ T24] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 292.371587][ T30] audit: type=1400 audit(1765969449.915:361): avc: denied { read } for pid=8518 comm="syz.4.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 292.448511][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.466996][ T24] usb 4-1: config 0 has no interfaces? [ 292.479142][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 292.506865][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.516865][ T24] usb 4-1: Product: syz [ 292.521036][ T24] usb 4-1: Manufacturer: syz [ 292.537585][ T24] usb 4-1: SerialNumber: syz [ 292.557249][ T24] usb 4-1: config 0 descriptor?? [ 292.690056][ T8525] netlink: 260 bytes leftover after parsing attributes in process `syz.4.773'. [ 292.821699][ T6774] usb 4-1: USB disconnect, device number 16 [ 297.672898][ T5817] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 297.822292][ T5817] usb 3-1: device descriptor read/64, error -71 [ 298.076850][ T7699] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 298.192874][ T5817] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 298.241618][ T7699] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 298.251021][ T7699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.259162][ T7699] usb 2-1: Product: syz [ 298.264029][ T7699] usb 2-1: Manufacturer: syz [ 298.270412][ T7699] usb 2-1: SerialNumber: syz [ 298.301918][ T7699] usb 2-1: config 0 descriptor?? [ 298.311819][ T7699] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 298.336810][ T5817] usb 3-1: device descriptor read/64, error -71 [ 298.447753][ T5817] usb usb3-port1: attempt power cycle [ 298.787142][ T5817] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 298.818216][ T5817] usb 3-1: device descriptor read/8, error -71 [ 299.477360][ T7699] gspca_sunplus: reg_r err -32 [ 299.486255][ T7699] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 299.908501][ T8596] binder: 8594:8596 ioctl 4058534c 2000000004c0 returned -22 [ 300.698227][ T8604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8604 comm=syz.0.796 [ 301.664911][ T6124] usb 2-1: USB disconnect, device number 25 [ 301.912817][ T8621] overlayfs: failed to resolve './file1/file0': -2 [ 303.551366][ T8630] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 303.907900][ T8635] binder: BINDER_SET_CONTEXT_MGR already set [ 303.978519][ T8636] binder: 8634:8636 ioctl c0306201 0 returned -14 [ 304.057853][ T8635] binder: 8634:8635 ioctl 4018620d 200000004a80 returned -16 [ 305.259178][ T8646] binder: 8645:8646 ioctl 4058534c 2000000004c0 returned -22 [ 305.898398][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 307.320397][ T30] audit: type=1400 audit(1765969464.865:362): avc: denied { append } for pid=8670 comm="syz.0.805" name="sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.346300][ T30] audit: type=1400 audit(1765969464.895:363): avc: denied { map } for pid=8670 comm="syz.0.805" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.471162][ T30] audit: type=1400 audit(1765969464.895:364): avc: denied { write execute } for pid=8670 comm="syz.0.805" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.639683][ T8677] program syz.3.815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.665137][ T8677] blktrace: Concurrent blktraces are not allowed on loop3 [ 307.758833][ T8679] netlink: 6912 bytes leftover after parsing attributes in process `syz.0.817'. [ 307.768080][ T8679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.971338][ T30] audit: type=1400 audit(1765969467.105:365): avc: denied { bind } for pid=8685 comm="syz.4.819" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.218312][ T30] audit: type=1400 audit(1765969467.105:366): avc: denied { node_bind } for pid=8685 comm="syz.4.819" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 310.961290][ T8708] overlayfs: failed to resolve './file1/file0': -2 [ 311.110952][ T30] audit: type=1400 audit(1765969468.615:367): avc: denied { create } for pid=8704 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.337000][ T30] audit: type=1400 audit(1765969468.625:368): avc: denied { connect } for pid=8704 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 311.556316][ T8715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=8715 comm=syz.1.828 [ 311.601580][ T30] audit: type=1400 audit(1765969469.045:369): avc: denied { connect } for pid=8704 comm="syz.0.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 316.690835][ T10] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 316.705649][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.705739][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.128456][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.156893][ T10] usb 5-1: config 1 has no interface number 0 [ 317.181577][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.287076][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 317.315926][ T10] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 317.400034][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 317.436428][ T10] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 317.466790][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x88 has invalid wMaxPacketSize 0 [ 317.502612][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.512355][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.523327][ T10] usb 5-1: Product: syz [ 317.540065][ T10] usb 5-1: Manufacturer: syz [ 317.559476][ T10] usb 5-1: SerialNumber: syz [ 317.636126][ T8744] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 317.859624][ T8744] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 318.417984][ T8770] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 318.427090][ T30] audit: type=1400 audit(1765969475.925:370): avc: denied { ioctl } for pid=8742 comm="syz.4.836" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 320.228155][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 320.237011][ T5828] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 322.086453][ T10] cdc_ncm 5-1:1.1: bind() failure [ 322.144138][ T10] usb 5-1: USB disconnect, device number 22 [ 325.857917][ T8104] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 326.034906][ T8104] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.078991][ T8104] usb 5-1: config 1 has no interface number 0 [ 326.091595][ T8104] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.126809][ T8104] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 326.157293][ T8104] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 326.208246][ T8104] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 326.276778][ T8104] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 326.316795][ T8104] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x88 has invalid wMaxPacketSize 0 [ 326.326398][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.861'. [ 326.369155][ T8104] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.390747][ T8104] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.506842][ T8104] usb 5-1: Product: syz [ 326.511028][ T8104] usb 5-1: Manufacturer: syz [ 326.549997][ T8104] usb 5-1: SerialNumber: syz [ 327.539599][ T8807] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 327.669159][ T8813] netlink: 6912 bytes leftover after parsing attributes in process `syz.2.854'. [ 327.678823][ T8813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.802762][ T8807] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 329.637203][ T8831] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 330.606861][ T5817] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 330.679853][ T8104] cdc_ncm 5-1:1.1: bind() failure [ 330.712566][ T8104] usb 5-1: USB disconnect, device number 23 [ 330.897875][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 330.904782][ T5817] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 330.907806][ T5923] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 330.914799][ T5817] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 330.931312][ T5817] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 330.951618][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.968469][ T5817] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 331.988543][ T5817] usb 4-1: config 0 has no interface number 0 [ 332.015057][ T5817] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 332.016778][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 332.036583][ T5817] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 332.046812][ T5817] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 332.061584][ T5817] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.075145][ T5817] usb 4-1: config 0 interface 125 has no altsetting 0 [ 332.091214][ T5817] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 332.100586][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.108670][ T5817] usb 4-1: Product: syz [ 332.113372][ T5817] usb 4-1: Manufacturer: syz [ 332.118203][ T5817] usb 4-1: SerialNumber: syz [ 332.211696][ T5923] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 332.222187][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.222663][ T5817] usb 4-1: config 0 descriptor?? [ 332.246837][ T5923] usb 3-1: config 0 has no interface number 0 [ 332.253089][ T5923] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 332.263291][ T5923] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 333.219097][ T5923] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 59391, setting to 1024 [ 333.246106][ T5923] usb 3-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.417317][ T5923] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 333.436893][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.444916][ T5923] usb 3-1: Product: syz [ 333.450447][ T5923] usb 3-1: Manufacturer: syz [ 333.459075][ T5923] usb 3-1: SerialNumber: syz [ 333.482837][ T5923] usb 3-1: config 0 descriptor?? [ 333.491617][ T8842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 333.500800][ T8842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 333.654751][ T5923] usb 3-1: probing VID:PID(0424:012C) [ 333.666747][ T5923] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 333.680581][ T5923] usb 3-1: vub300 testing UNKNOWN EndPoint(1) 0F [ 333.687757][ T5923] usb 3-1: vub300 ignoring EndPoint(1) 0F [ 333.693462][ T5923] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 333.712404][ T10] usb 4-1: USB disconnect, device number 17 [ 333.719499][ T8864] program syz.4.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.730213][ T8864] netlink: 'syz.4.875': attribute type 1 has an invalid length. [ 333.740876][ T8864] blktrace: Concurrent blktraces are not allowed on loop3 [ 333.760242][ T5923] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 333.833502][ T5923] usb 3-1: USB disconnect, device number 24 [ 334.051879][ T30] audit: type=1400 audit(1765969491.595:371): avc: denied { bind } for pid=8872 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.194568][ T30] audit: type=1400 audit(1765969491.645:372): avc: denied { ioctl } for pid=8872 comm="syz.1.879" path="socket:[22799]" dev="sockfs" ino=22799 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 335.696252][ T8886] netlink: 64 bytes leftover after parsing attributes in process `syz.3.882'. [ 337.397807][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 338.488123][ T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 338.513945][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.569865][ T10] usb 3-1: config 0 descriptor?? [ 339.823997][ T10] usb 3-1: Cannot set autoneg [ 339.853954][ T10] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 340.872921][ T10] usb 3-1: USB disconnect, device number 25 [ 341.227040][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 341.326815][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 341.396948][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 341.644166][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.077065][ T30] audit: type=1400 audit(1765969499.055:373): avc: denied { ioctl } for pid=8914 comm="syz.4.892" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 342.096376][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 342.116681][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 342.125785][ T10] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 342.147037][ T9] usb 2-1: config 0 has no interface number 0 [ 342.156781][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.179205][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 342.200627][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 342.221119][ T10] usb 3-1: config 0 descriptor?? [ 342.256794][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.264801][ T9] usb 2-1: Product: syz [ 342.286803][ T9] usb 2-1: Manufacturer: syz [ 342.301486][ T9] usb 2-1: SerialNumber: syz [ 342.318008][ T9] usb 2-1: config 0 descriptor?? [ 342.339127][ T9] smsc75xx v1.0.0 [ 342.841677][ T8921] No control pipe specified [ 343.447501][ T5978] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 343.499581][ T10] Bluetooth: Can't get state to change to load ram patch err [ 343.518287][ T10] Bluetooth: Loading patch file failed [ 343.536900][ T10] ath3k 3-1:0.0: probe with driver ath3k failed with error -32 [ 343.639981][ T5978] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 343.680119][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.706543][ T5978] usb 5-1: Product: syz [ 343.714967][ T5978] usb 5-1: Manufacturer: syz [ 343.716334][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 343.722913][ T5978] usb 5-1: SerialNumber: syz [ 343.774298][ T5978] usb 5-1: config 0 descriptor?? [ 343.788292][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 343.798463][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.816092][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 343.831677][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.847117][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 343.853501][ T5978] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 343.861731][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.875383][ T9] usb 2-1: USB disconnect, device number 26 [ 343.875414][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.891343][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.290596][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 344.504055][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.511279][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.518728][ T8924] bridge_slave_0: entered allmulticast mode [ 344.525789][ T8924] bridge_slave_0: entered promiscuous mode [ 344.574943][ T6124] usb 3-1: USB disconnect, device number 26 [ 344.701389][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.719268][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.726494][ T8924] bridge_slave_1: entered allmulticast mode [ 344.742452][ T8924] bridge_slave_1: entered promiscuous mode [ 344.881589][ T5978] gspca_sunplus: reg_r err -32 [ 344.893936][ T5978] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 345.108698][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.261237][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.337006][ T8935] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 345.455432][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.541062][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.663663][ T8924] team0: Port device team_slave_0 added [ 345.707967][ T8924] team0: Port device team_slave_1 added [ 345.814282][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.976791][ T5813] Bluetooth: hci5: command tx timeout [ 345.996871][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.289981][ T5817] usb 5-1: USB disconnect, device number 24 [ 346.546999][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 346.946814][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.140390][ T5813] Bluetooth: hci5: command tx timeout [ 348.140580][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.201873][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.333119][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.343338][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.399868][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.777832][ T8924] hsr_slave_0: entered promiscuous mode [ 349.792616][ T8924] hsr_slave_1: entered promiscuous mode [ 349.807496][ T8924] debugfs: 'hsr0' already exists in 'hsr' [ 349.826356][ T8924] Cannot create hsr debugfs directory [ 350.179228][ T36] bridge_slave_1: left allmulticast mode [ 350.198476][ T36] bridge_slave_1: left promiscuous mode [ 350.214625][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.222819][ T5813] Bluetooth: hci5: command tx timeout [ 350.240762][ T36] : left allmulticast mode [ 350.262148][ T36] : left promiscuous mode [ 350.279770][ T36] bridge0: port 1() entered disabled state [ 350.305250][ T30] audit: type=1400 audit(1765969507.845:374): avc: denied { read open } for pid=8988 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.353214][ T30] audit: type=1400 audit(1765969507.875:375): avc: denied { getattr } for pid=8988 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.685330][ T30] audit: type=1400 audit(1765969508.225:376): avc: denied { add_name } for pid=8987 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.791962][ T30] audit: type=1400 audit(1765969508.295:377): avc: denied { create } for pid=8987 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.594244][ T30] audit: type=1400 audit(1765969508.295:378): avc: denied { write } for pid=8987 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=5139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.726772][ T30] audit: type=1400 audit(1765969508.295:379): avc: denied { append } for pid=8987 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=5139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 351.826964][ T30] audit: type=1400 audit(1765969509.185:380): avc: denied { remove_name } for pid=9003 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.966827][ T30] audit: type=1400 audit(1765969509.185:381): avc: denied { unlink } for pid=9003 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 352.306815][ T5813] Bluetooth: hci5: command tx timeout [ 352.347908][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.359618][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.370566][ T36] bond0 (unregistering): Released all slaves [ 352.829143][ T9008] cgroup: none used incorrectly [ 354.496062][ T8924] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.714635][ T8924] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.927954][ T30] audit: type=1400 audit(1765969512.465:382): avc: denied { connect } for pid=9020 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 355.172375][ T8924] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 355.214885][ T48] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 355.321981][ T9024] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.329476][ T9024] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.347103][ T9024] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.354263][ T9024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.362436][ T9024] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.369611][ T9024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.390479][ T9024] team0: Port device bridge0 added [ 355.564687][ T9024] syz.2.917 (9024) used greatest stack depth: 20048 bytes left [ 356.267958][ T48] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 356.387211][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.416818][ T48] usb 2-1: Product: syz [ 356.425724][ T48] usb 2-1: Manufacturer: syz [ 356.440644][ T48] usb 2-1: SerialNumber: syz [ 356.459190][ T48] usb 2-1: config 0 descriptor?? [ 356.472336][ T48] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 356.593956][ T8924] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 356.836383][ T36] hsr_slave_0: left promiscuous mode [ 358.705913][ T36] hsr_slave_1: left promiscuous mode [ 358.758459][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.765877][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.805513][ T48] gspca_sunplus: reg_r err -71 [ 358.812820][ T48] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 358.885166][ T48] usb 2-1: USB disconnect, device number 27 [ 359.904971][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.912533][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.276727][ T36] veth1_macvtap: left promiscuous mode [ 360.282965][ T36] veth0_macvtap: left promiscuous mode [ 360.288824][ T36] veth1_vlan: left promiscuous mode [ 360.297918][ T36] veth0_vlan: left promiscuous mode [ 365.868873][ T5817] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 366.017084][ T48] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 366.105880][ T36] team0 (unregistering): Port device team_slave_1 removed [ 366.132109][ T5817] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 366.152449][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.167937][ T5817] usb 5-1: Product: syz [ 366.172662][ T36] team0 (unregistering): Port device team_slave_0 removed [ 366.179962][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 366.186068][ T5817] usb 5-1: Manufacturer: syz [ 366.192296][ T48] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 366.210883][ T48] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 366.222254][ T5817] usb 5-1: SerialNumber: syz [ 366.227765][ T48] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 366.241504][ T5817] usb 5-1: config 0 descriptor?? [ 366.248297][ T48] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.265700][ T5817] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 366.280348][ T48] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.294978][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.339416][ T48] usbtmc 2-1:16.0: bulk endpoints not found [ 366.813953][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.856206][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.895789][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.902885][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.041043][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.048187][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.145856][ T30] audit: type=1400 audit(1765969525.685:383): avc: denied { module_request } for pid=8924 comm="syz-executor" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 368.241039][ T5817] gspca_sunplus: reg_r err -32 [ 368.245869][ T5817] sunplus 5-1:0.0: probe with driver sunplus failed with error -32 [ 368.576283][ T9137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9137 comm=syz.2.940 [ 368.708212][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.288760][ T6244] usb 5-1: USB disconnect, device number 25 [ 370.373584][ T9165] program syz.2.941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.383726][ T9165] netlink: 'syz.2.941': attribute type 1 has an invalid length. [ 370.394301][ T9165] blktrace: Concurrent blktraces are not allowed on loop3 [ 370.619404][ T8924] veth0_vlan: entered promiscuous mode [ 370.664283][ T8924] veth1_vlan: entered promiscuous mode [ 370.850896][ T8924] veth0_macvtap: entered promiscuous mode [ 370.903854][ T8924] veth1_macvtap: entered promiscuous mode [ 371.122196][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.183818][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.233737][ T4168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.265084][ T4168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.305122][ T4168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.340828][ T4168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.566050][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.598756][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.654073][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.681628][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.719930][ T30] audit: type=1400 audit(1765969529.265:384): avc: denied { mounton } for pid=8924 comm="syz-executor" path="/root/syzkaller.eBvxz5/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 371.876761][ T30] audit: type=1400 audit(1765969529.295:385): avc: denied { mounton } for pid=8924 comm="syz-executor" path="/root/syzkaller.eBvxz5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 372.058980][ T30] audit: type=1400 audit(1765969529.295:386): avc: denied { mounton } for pid=8924 comm="syz-executor" path="/root/syzkaller.eBvxz5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 373.246777][ T30] audit: type=1400 audit(1765969529.305:387): avc: denied { mounton } for pid=8924 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 373.335793][ T9204] netlink: 64 bytes leftover after parsing attributes in process `syz.5.895'. [ 374.880583][ T9208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9208 comm=syz.5.950 [ 374.948447][ T10] usb 2-1: USB disconnect, device number 28 [ 377.177842][ T8104] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 378.147440][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.153804][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.285304][ T8104] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.494687][ T8104] usb 6-1: config 0 has no interface number 0 [ 378.504102][ T8104] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 378.535831][ T8104] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 379.155175][ T8104] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 379.185479][ T8104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.251327][ T8104] usb 6-1: config 0 descriptor?? [ 380.258045][ T9230] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 380.306881][ T8104] usb 6-1: can't set config #0, error -71 [ 380.314879][ T8104] usb 6-1: USB disconnect, device number 2 [ 381.387862][ T5978] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 381.842249][ T30] audit: type=1400 audit(1765969539.315:388): avc: denied { mounton } for pid=9266 comm="syz.2.967" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 382.517254][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 382.527433][ T5978] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 382.536582][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.607615][ T5978] usb 4-1: Product: syz [ 382.643774][ T5978] usb 4-1: Manufacturer: syz [ 382.687036][ T5978] usb 4-1: SerialNumber: syz [ 382.777495][ T5978] usb 4-1: config 0 descriptor?? [ 382.799492][ T5978] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 382.832002][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 382.838059][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.866868][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.879624][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 382.906573][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.915208][ T9] usb 2-1: SerialNumber: syz [ 383.095623][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 383.128874][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.164203][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 383.170814][ T9] usb 2-1: 0:2 : does not exist [ 383.201650][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.220458][ T9] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 383.346797][ T24] usb 3-1: Product: syz [ 383.350996][ T24] usb 3-1: Manufacturer: syz [ 383.363128][ T24] usb 3-1: SerialNumber: syz [ 383.374090][ T9] usb 2-1: 5:0: failed to get current value for ch 11 (-22) [ 383.872865][ T24] usb 3-1: config 0 descriptor?? [ 383.946404][ T9] usb 2-1: 5:0: failed to get current value for ch 12 (-22) [ 383.998055][ T9] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 384.028493][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 384.110341][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 384.248594][ T5978] gspca_sunplus: reg_r err -32 [ 384.265510][ T5978] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 385.250714][ T24] usb 3-1: probing VID:PID(0424:012C) [ 385.444959][ T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 385.566685][ T24] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 385.771620][ T24] vub300 3-1:0.0: probe with driver vub300 failed with error -22 [ 386.191206][ T24] usb 3-1: USB disconnect, device number 27 [ 386.656349][ T9] usb 2-1: USB disconnect, device number 29 [ 386.727072][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.753599][ T6244] usb 4-1: USB disconnect, device number 18 [ 387.146805][ T6244] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 387.309496][ T6244] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 387.350825][ T6244] usb 4-1: config 0 has no interface number 0 [ 387.437053][ T6244] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 387.473182][ T6244] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 387.498174][ T6244] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 387.517376][ T6244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.571751][ T6244] usb 4-1: config 0 descriptor?? [ 387.598297][ T9305] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 387.609157][ T9303] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 387.653413][ T6244] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 387.840075][ T6244] usb 4-1: USB disconnect, device number 19 [ 387.840094][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 388.396906][ T6244] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 388.558447][ T6244] usb 6-1: device descriptor read/64, error -71 [ 388.716253][ T9328] netlink: 64 bytes leftover after parsing attributes in process `syz.4.976'. [ 388.936834][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 389.716795][ T6244] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 389.857155][ T6244] usb 6-1: device descriptor read/64, error -71 [ 389.977156][ T6244] usb usb6-port1: attempt power cycle [ 390.387071][ T6244] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 391.252900][ T6244] usb 6-1: device descriptor read/8, error -71 [ 391.287301][ T30] audit: type=1400 audit(1765969548.835:389): avc: denied { setopt } for pid=9341 comm="syz.1.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 391.317581][ T9344] block nbd4: NBD_DISCONNECT [ 391.576787][ T6244] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 393.075745][ T6244] usb 6-1: device descriptor read/8, error -71 [ 393.267189][ T6244] usb usb6-port1: unable to enumerate USB device [ 393.586857][ T5875] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 393.756162][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.801406][ T5875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 393.833227][ T5875] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 393.863212][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.895743][ T5875] usb 5-1: config 0 descriptor?? [ 394.170467][ T5875] Bluetooth: Can't get state to change to load ram patch err [ 394.183408][ T5875] Bluetooth: Loading patch file failed [ 394.203557][ T5875] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 394.584279][ T9389] netlink: 64 bytes leftover after parsing attributes in process `syz.5.988'. [ 396.125481][ T6774] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 396.296795][ T6774] usb 3-1: Using ep0 maxpacket: 8 [ 396.312247][ T6774] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 396.357384][ T6774] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 396.374601][ T5875] usb 5-1: USB disconnect, device number 26 [ 396.417684][ T6774] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 396.436341][ T6774] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 396.486959][ T6774] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.496123][ T6774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.540877][ T6774] usbtmc 3-1:16.0: bulk endpoints not found [ 397.743027][ T5813] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 400.345787][ T30] audit: type=1400 audit(1765969557.825:390): avc: denied { create } for pid=9460 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 400.731948][ T30] audit: type=1400 audit(1765969557.825:391): avc: denied { bind } for pid=9460 comm="syz.3.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 402.279380][ T5813] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 404.885230][ T9489] netlink: 6912 bytes leftover after parsing attributes in process `syz.5.1010'. [ 404.894473][ T9489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.907835][ T9] usb 3-1: USB disconnect, device number 28 [ 405.958548][ T9493] trusted_key: encrypted_key: insufficient parameters specified [ 406.390074][ T9501] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1016'. [ 408.809902][ T5813] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 410.760954][ T9535] netlink: 6912 bytes leftover after parsing attributes in process `syz.1.1023'. [ 410.770224][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.031572][ T9575] binder: BINDER_SET_CONTEXT_MGR already set [ 415.052182][ T9575] binder: 9574:9575 ioctl 4018620d 200000004a80 returned -16 [ 417.066788][ T5978] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 417.248172][ T5978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.276891][ T5978] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 417.285982][ T5978] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 417.286793][ T6124] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 417.295693][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.887545][ T5978] usb 5-1: config 0 descriptor?? [ 417.968265][ T6124] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 417.980008][ T6124] usb 4-1: config 0 has no interface number 0 [ 417.986220][ T6124] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 417.997412][ T6124] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 418.008272][ T6124] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.017344][ T6124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.045998][ T6124] usb 4-1: config 0 descriptor?? [ 418.066335][ T9604] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 418.140548][ T6124] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 418.384878][ T5978] Bluetooth: Can't get state to change to load configuration err [ 418.503661][ T7160] usb 4-1: USB disconnect, device number 20 [ 418.503659][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 418.520893][ T5978] Bluetooth: Loading sysconfig file failed [ 418.526945][ T5978] ath3k 5-1:0.0: probe with driver ath3k failed with error -16 [ 418.544581][ T5978] usb 5-1: USB disconnect, device number 27 [ 420.931934][ T6124] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 420.980602][ T30] audit: type=1400 audit(1765969578.525:392): avc: denied { read } for pid=9630 comm="syz.3.1054" lport=62 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 421.086940][ T6124] usb 3-1: device descriptor read/64, error -71 [ 422.217128][ T6124] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 422.346803][ T6124] usb 3-1: device descriptor read/64, error -71 [ 422.434051][ T9358] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 422.469473][ T6124] usb usb3-port1: attempt power cycle [ 422.887054][ T6124] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 422.999399][ T6124] usb 3-1: device descriptor read/8, error -71 [ 423.481362][ T9358] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 423.490606][ T9358] usb 5-1: config 1 has no interface number 0 [ 423.498411][ T9358] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.511176][ T9358] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 423.523316][ T9358] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 423.534326][ T9358] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 423.555278][ T9358] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 423.574537][ T9358] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x88 has invalid wMaxPacketSize 0 [ 423.589717][ T9358] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.600017][ T9358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.611262][ T9358] usb 5-1: Product: syz [ 423.616524][ T9358] usb 5-1: Manufacturer: syz [ 423.622085][ T9358] usb 5-1: SerialNumber: syz [ 423.659418][ T9639] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 423.676892][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 423.858438][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.880919][ T9639] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 423.889207][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 423.917301][ T9] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 423.926411][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.949307][ T9] usb 4-1: config 0 descriptor?? [ 425.797148][ T9660] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 426.115020][ T9] Bluetooth: Can't get state to change to load configuration err [ 426.656990][ T9660] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 426.851514][ T9358] cdc_ncm 5-1:1.1: bind() failure [ 427.077371][ T9] Bluetooth: Loading sysconfig file failed [ 427.083240][ T9] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 427.131112][ T9] usb 4-1: USB disconnect, device number 21 [ 427.218166][ T9358] usb 5-1: USB disconnect, device number 28 [ 427.459882][ T6124] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 428.221241][ T9681] netlink: 6912 bytes leftover after parsing attributes in process `syz.4.1069'. [ 428.230967][ T9681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.356720][ T30] audit: type=1400 audit(1765969585.035:393): avc: denied { mount } for pid=9669 comm="syz.5.1067" name="/" dev="rpc_pipefs" ino=25379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 428.652834][ T6124] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 428.665915][ T6124] usb 3-1: config 0 has no interface number 0 [ 428.682912][ T6124] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 428.704965][ T6124] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 428.894768][ T6124] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.904956][ T6124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.916058][ T6124] usb 3-1: config 0 descriptor?? [ 428.934871][ T9666] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 428.975876][ T6124] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 429.326348][ T9358] usb 3-1: USB disconnect, device number 33 [ 429.332338][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 432.626974][ T6124] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 432.829245][ T6124] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.887308][ T6124] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 432.896453][ T6124] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 432.967073][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 432.981507][ T6124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.013911][ T6124] usb 2-1: config 0 descriptor?? [ 433.160389][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 433.197873][ T9] usb 3-1: config 1 has no interface number 0 [ 433.214219][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.252901][ T9] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 433.430981][ T9] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 433.489610][ T6124] Bluetooth: Can't get state to change to load configuration err [ 433.579654][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 433.791350][ T6124] Bluetooth: Loading sysconfig file failed [ 433.976152][ T6124] ath3k 2-1:0.0: probe with driver ath3k failed with error -16 [ 433.990808][ T9] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xA8, changing to 0x88 [ 434.014453][ T6124] usb 2-1: USB disconnect, device number 30 [ 434.036743][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x88 has invalid wMaxPacketSize 0 [ 434.113211][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.143105][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.629564][ T9736] fuse: Unknown parameter 'group_i00000000000000000000' [ 435.154553][ T9] usb 3-1: Product: syz [ 435.218357][ T9] usb 3-1: Manufacturer: syz [ 436.174663][ T9] usb 3-1: SerialNumber: syz [ 436.183302][ T9] usb 3-1: can't set config #1, error -71 [ 436.190519][ T9] usb 3-1: USB disconnect, device number 34 [ 436.954272][ T9755] random: crng reseeded on system resumption [ 438.093598][ T30] audit: type=1400 audit(1765969595.635:394): avc: denied { write } for pid=9761 comm="syz.3.1087" lport=51282 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 438.146188][ T30] audit: type=1400 audit(1765969595.665:395): avc: denied { setopt } for pid=9761 comm="syz.3.1087" lport=51282 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 438.406792][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 438.632875][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 438.676466][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.802857][ T9] usb 4-1: config 0 descriptor?? [ 438.926988][ T9] cp210x 4-1:0.0: cp210x converter detected [ 439.590526][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.598160][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.157208][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 440.196336][ T9] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 440.230816][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 440.280894][ T9] usb 4-1: USB disconnect, device number 22 [ 440.374349][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 441.308022][ T9] cp210x 4-1:0.0: device disconnected [ 443.028285][ T5924] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 443.196862][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 443.214784][ T5924] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 444.176736][ T5924] usb 5-1: config 0 has no interface number 0 [ 444.192370][ T5924] usb 5-1: config 0 interface 184 has no altsetting 0 [ 444.205293][ T5924] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 444.216484][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.226587][ T5924] usb 5-1: Product: syz [ 444.272655][ T5924] usb 5-1: Manufacturer: syz [ 444.277348][ T5924] usb 5-1: SerialNumber: syz [ 444.294365][ T5924] usb 5-1: config 0 descriptor?? [ 444.315325][ T5924] smsc75xx v1.0.0 [ 445.488373][ T9816] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.495671][ T9816] bridge0: port 1() entered disabled state [ 445.601910][ T9816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.614399][ T9816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.069230][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.079650][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.116843][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.165314][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.480985][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 446.532786][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 446.562773][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 446.601490][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 446.679786][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 446.715876][ T5924] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 446.756128][ T5924] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 446.821519][ T5924] usb 5-1: USB disconnect, device number 29 [ 453.354605][ T30] audit: type=1400 audit(1765969610.895:396): avc: denied { mount } for pid=9867 comm="syz.1.1127" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 453.355591][ T9870] overlayfs: missing 'lowerdir' [ 453.383802][ T30] audit: type=1400 audit(1765969610.895:397): avc: denied { mounton } for pid=9867 comm="syz.1.1127" path="/247/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 454.572940][ T30] audit: type=1400 audit(1765969612.115:398): avc: denied { append } for pid=9867 comm="syz.1.1127" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.816139][ T30] audit: type=1400 audit(1765969612.355:399): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 454.929671][ T9881] fuse: Unknown parameter 'user_i00000000000000000000' [ 454.956759][ T30] audit: type=1400 audit(1765969612.495:400): avc: denied { name_bind } for pid=9882 comm="syz.1.1131" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 456.387175][ T5924] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 456.559323][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'. [ 456.590151][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.604079][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 456.639913][ T5924] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 456.657630][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.674280][ T9902] binder: 9901:9902 ioctl 4018620d 0 returned -22 [ 456.685255][ T5924] usb 3-1: config 0 descriptor?? [ 456.703753][ T9902] binder: 9901:9902 ioctl 4058534c 2000000004c0 returned -22 [ 457.721391][ T5924] Bluetooth: Can't get state to change to load configuration err [ 457.740940][ T5924] Bluetooth: Loading sysconfig file failed [ 457.747207][ T5924] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 457.760165][ T5924] usb 3-1: USB disconnect, device number 35 [ 457.896935][ T9911] program syz.5.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.929712][ T9911] netlink: 'syz.5.1140': attribute type 1 has an invalid length. [ 457.943717][ T9911] blktrace: Concurrent blktraces are not allowed on loop3 [ 458.868241][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 459.059799][ T9] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 459.069168][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.203846][ T9] usb 3-1: Product: syz [ 459.216233][ T9] usb 3-1: Manufacturer: syz [ 459.230334][ T9] usb 3-1: SerialNumber: syz [ 459.414103][ T9] usb 3-1: config 0 descriptor?? [ 459.435649][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 459.446762][ T5924] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 459.474732][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 459.616923][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 459.628428][ T5924] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 459.638750][ T5924] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 459.677380][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 459.680310][ T5924] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 459.748637][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.751072][ T5924] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 459.847616][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 459.867369][ T9] usb 3-1: media controller created [ 459.887865][ T5924] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.915497][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.919422][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.988686][ T5924] usbtmc 5-1:16.0: bulk endpoints not found [ 460.649354][ T9] DVB: Unable to find symbol dib7000p_attach() [ 460.713393][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 460.828840][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 460.837856][ T9] Registered IR keymap rc-empty [ 460.842904][ T9] dvb-usb: could not initialize remote control. [ 461.005021][ T9939] sch_tbf: burst 5874 is lower than device lo mtu (65550) ! [ 461.016830][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 461.108066][ T9] usb 3-1: USB disconnect, device number 36 [ 461.207338][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 463.519977][ T30] audit: type=1400 audit(1765969620.435:401): avc: denied { read } for pid=9953 comm="syz.1.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 571.966645][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 571.973636][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9965/1:b..l P5963/1:b..l P12/1:b..l P50/1:b..l [ 571.985003][ C1] rcu: (detected by 1, t=10502 jiffies, g=33773, q=268 ncpus=2) [ 571.992708][ C1] task:kworker/u8:3 state:R running task stack:23248 pid:50 tgid:50 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 572.006889][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 572.014704][ C1] Call Trace: [ 572.017971][ C1] [ 572.020896][ C1] ? __schedule+0x10b9/0x6150 [ 572.025562][ C1] __schedule+0x1139/0x6150 [ 572.030056][ C1] ? bpf_trace_run2+0x3f9/0x5c0 [ 572.034903][ C1] ? bpf_trace_run2+0x26b/0x5c0 [ 572.039752][ C1] ? __pfx___schedule+0x10/0x10 [ 572.044602][ C1] ? mark_held_locks+0x49/0x80 [ 572.049358][ C1] preempt_schedule_irq+0x51/0x90 [ 572.054373][ C1] irqentry_exit+0x1d8/0x8c0 [ 572.058961][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 572.064930][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 572.070117][ C1] Code: a4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 72 b4 ee 0e 0f 82 74 02 00 00 8b 35 0a e5 ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 89 a4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 572.089712][ C1] RSP: 0018:ffffc90000bb79c8 EFLAGS: 00000206 [ 572.095780][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c9620 RCX: 00000000e7dc67b2 [ 572.103737][ C1] RDX: 0000000000000000 RSI: ffffffff8daa7b4b RDI: ffffffff8bf2b380 [ 572.111699][ C1] RBP: 0000000000000002 R08: 00000000d5697092 R09: 000000002d569709 [ 572.119659][ C1] R10: 0000000000000002 R11: ffff888021e90b30 R12: 0000000000000000 [ 572.127617][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.135589][ C1] ? batadv_iv_ogm_schedule_buff+0x780/0x14c0 [ 572.141651][ C1] batadv_iv_ogm_schedule_buff+0x5d0/0x14c0 [ 572.147534][ C1] ? batadv_iv_ogm_schedule_buff+0x5bf/0x14c0 [ 572.153591][ C1] ? ww_mutex_lock+0x81/0x160 [ 572.158268][ C1] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 572.164589][ C1] ? batadv_send_skb_packet+0x597/0x6f0 [ 572.170130][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 572.177152][ C1] process_one_work+0x9ba/0x1b20 [ 572.182089][ C1] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 572.189625][ C1] ? __pfx_process_one_work+0x10/0x10 [ 572.195005][ C1] ? assign_work+0x1a0/0x250 [ 572.199587][ C1] worker_thread+0x6c8/0xf10 [ 572.204179][ C1] ? __pfx_worker_thread+0x10/0x10 [ 572.209283][ C1] kthread+0x3c5/0x780 [ 572.213344][ C1] ? __pfx_kthread+0x10/0x10 [ 572.217926][ C1] ? rcu_is_watching+0x12/0xc0 [ 572.222681][ C1] ? __pfx_kthread+0x10/0x10 [ 572.227279][ C1] ret_from_fork+0x983/0xb10 [ 572.231864][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 572.236968][ C1] ? __switch_to+0x7af/0x10d0 [ 572.241651][ C1] ? __pfx_kthread+0x10/0x10 [ 572.246232][ C1] ret_from_fork_asm+0x1a/0x30 [ 572.251004][ C1] [ 572.254012][ C1] task:kworker/u8:0 state:R running task stack:23544 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 572.267572][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 572.273807][ C1] Call Trace: [ 572.277075][ C1] [ 572.279996][ C1] ? __schedule+0x10b9/0x6150 [ 572.284659][ C1] __schedule+0x1139/0x6150 [ 572.289165][ C1] ? __pfx___schedule+0x10/0x10 [ 572.294010][ C1] ? mark_held_locks+0x49/0x80 [ 572.298776][ C1] preempt_schedule_irq+0x51/0x90 [ 572.303794][ C1] irqentry_exit+0x1d8/0x8c0 [ 572.308382][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 572.314349][ C1] RIP: 0010:lock_release+0x183/0x2d0 [ 572.319626][ C1] Code: 0f c1 05 48 f1 18 12 83 f8 01 0f 85 03 01 00 00 9c 58 f6 c4 02 0f 85 ee 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 dd a9 18 12 0f 85 32 01 00 00 48 83 c4 18 5b 41 5c 41 [ 572.339225][ C1] RSP: 0018:ffffc90000117598 EFLAGS: 00000206 [ 572.345277][ C1] RAX: acdaf29bb1413700 RBX: ffffffff8e3c9620 RCX: ffffc900001175a4 [ 572.353233][ C1] RDX: 0000000000000003 RSI: ffffffff8daa7b4b RDI: ffffffff8bf2b380 [ 572.361194][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 00000000ccd1ae9b [ 572.369151][ C1] R10: 0000000000000002 R11: 0000000000011d85 R12: ffffffff816cb9a4 [ 572.377111][ C1] R13: 0000000000000206 R14: ffff88801d6c4980 R15: 0000000000000004 [ 572.385071][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 572.390280][ C1] unwind_next_frame+0x3f9/0x20b0 [ 572.395297][ C1] ? kmem_cache_free+0x2d8/0x770 [ 572.400230][ C1] ? kfree+0x2f8/0x6e0 [ 572.404285][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 572.410429][ C1] arch_stack_walk+0x94/0x100 [ 572.415102][ C1] ? skb_free_head+0x1b7/0x210 [ 572.419863][ C1] stack_trace_save+0x8e/0xc0 [ 572.424529][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 572.429892][ C1] ? __lock_acquire+0x436/0x2890 [ 572.434825][ C1] kasan_save_stack+0x33/0x60 [ 572.439492][ C1] ? kasan_save_stack+0x33/0x60 [ 572.444332][ C1] ? kasan_save_track+0x14/0x30 [ 572.449176][ C1] ? kasan_save_free_info+0x3b/0x60 [ 572.454367][ C1] ? __kasan_slab_free+0x5f/0x80 [ 572.459294][ C1] ? kmem_cache_free+0x2d8/0x770 [ 572.464260][ C1] kasan_save_track+0x14/0x30 [ 572.468931][ C1] kasan_save_free_info+0x3b/0x60 [ 572.473949][ C1] __kasan_slab_free+0x5f/0x80 [ 572.478702][ C1] kmem_cache_free+0x2d8/0x770 [ 572.483460][ C1] ? skb_free_head+0x1b7/0x210 [ 572.488225][ C1] ? skb_free_head+0x1b7/0x210 [ 572.492982][ C1] skb_free_head+0x1b7/0x210 [ 572.497569][ C1] skb_release_data+0x795/0x9e0 [ 572.502410][ C1] ? rcu_is_watching+0x12/0xc0 [ 572.507166][ C1] sk_skb_reason_drop+0x129/0x1a0 [ 572.512180][ C1] ieee80211_iface_work+0x42f/0x1350 [ 572.517459][ C1] ? rcu_is_watching+0x12/0xc0 [ 572.522211][ C1] cfg80211_wiphy_work+0x3fb/0x560 [ 572.527322][ C1] process_one_work+0x9ba/0x1b20 [ 572.532261][ C1] ? __pfx_process_one_work+0x10/0x10 [ 572.537630][ C1] ? assign_work+0x1a0/0x250 [ 572.542213][ C1] worker_thread+0x6c8/0xf10 [ 572.546806][ C1] ? __pfx_worker_thread+0x10/0x10 [ 572.551907][ C1] kthread+0x3c5/0x780 [ 572.555972][ C1] ? __pfx_kthread+0x10/0x10 [ 572.560555][ C1] ? rcu_is_watching+0x12/0xc0 [ 572.565305][ C1] ? __pfx_kthread+0x10/0x10 [ 572.569909][ C1] ret_from_fork+0x983/0xb10 [ 572.574492][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 572.579593][ C1] ? __switch_to+0x7af/0x10d0 [ 572.584265][ C1] ? __pfx_kthread+0x10/0x10 [ 572.588846][ C1] ret_from_fork_asm+0x1a/0x30 [ 572.593616][ C1] [ 572.596637][ C1] task:kworker/u8:16 state:R running task stack:23800 pid:5963 tgid:5963 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 572.610205][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 572.616444][ C1] Call Trace: [ 572.619710][ C1] [ 572.622631][ C1] ? __schedule+0x10b9/0x6150 [ 572.627299][ C1] __schedule+0x1139/0x6150 [ 572.631809][ C1] ? __pfx___schedule+0x10/0x10 [ 572.636650][ C1] ? mark_held_locks+0x49/0x80 [ 572.641410][ C1] preempt_schedule_irq+0x51/0x90 [ 572.646427][ C1] irqentry_exit+0x1d8/0x8c0 [ 572.651015][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 572.656983][ C1] RIP: 0010:lock_release+0x45/0x2d0 [ 572.662170][ C1] Code: 49 ab 18 12 48 89 44 24 10 31 c0 0f 1f 44 00 00 65 8b 05 62 ab 18 12 83 f8 07 0f 87 1e 02 00 00 89 c0 48 0f a3 05 eb ba ee 0e <0f> 82 b1 01 00 00 8b 3d 83 eb ee 0e 85 ff 0f 84 25 01 00 00 65 8b [ 572.681769][ C1] RSP: 0018:ffffc900047bf408 EFLAGS: 00000297 [ 572.687822][ C1] RAX: 0000000000000000 RBX: ffffffff8e3c9620 RCX: ffffffff912fb701 [ 572.695782][ C1] RDX: 0000000000000000 RSI: ffffffff816cb9a4 RDI: ffffffff8e3c9620 [ 572.703742][ C1] RBP: 0000000000000001 R08: ffffffff912fb76e R09: 00000000ccd1ae9b [ 572.711706][ C1] R10: 0000000000000002 R11: 000000000001288a R12: ffffffff816cb9a4 [ 572.719666][ C1] R13: ffffc900047bf4c0 R14: ffffc900047bf820 R15: ffffc900047bf4f4 [ 572.727626][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 572.732832][ C1] ? unwind_next_frame+0x3f4/0x20b0 [ 572.738037][ C1] unwind_next_frame+0x3f9/0x20b0 [ 572.743057][ C1] ? kasan_save_track+0x14/0x30 [ 572.747901][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 572.754046][ C1] arch_stack_walk+0x94/0x100 [ 572.758722][ C1] ? kasan_save_free_info+0x3b/0x60 [ 572.763938][ C1] stack_trace_save+0x8e/0xc0 [ 572.768608][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 572.773973][ C1] ? __lock_acquire+0x436/0x2890 [ 572.778905][ C1] kasan_save_stack+0x33/0x60 [ 572.783569][ C1] ? kasan_save_stack+0x33/0x60 [ 572.788405][ C1] ? kasan_save_track+0x14/0x30 [ 572.793281][ C1] kasan_save_track+0x14/0x30 [ 572.797962][ C1] kasan_save_free_info+0x3b/0x60 [ 572.802981][ C1] __kasan_slab_free+0x5f/0x80 [ 572.807738][ C1] kfree+0x2f8/0x6e0 [ 572.811622][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 572.816811][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1ab4/0x2fc0 [ 572.823139][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1ab4/0x2fc0 [ 572.829461][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ab4/0x2fc0 [ 572.835620][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 572.842139][ C1] ? kcov_remote_start+0x399/0x680 [ 572.847246][ C1] ieee80211_iface_work+0xe28/0x1350 [ 572.852521][ C1] ? rcu_is_watching+0x12/0xc0 [ 572.857273][ C1] cfg80211_wiphy_work+0x3fb/0x560 [ 572.862387][ C1] process_one_work+0x9ba/0x1b20 [ 572.867323][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 572.873208][ C1] ? __pfx_process_one_work+0x10/0x10 [ 572.878579][ C1] ? assign_work+0x1a0/0x250 [ 572.883165][ C1] worker_thread+0x6c8/0xf10 [ 572.887764][ C1] ? __pfx_worker_thread+0x10/0x10 [ 572.892865][ C1] kthread+0x3c5/0x780 [ 572.896927][ C1] ? __pfx_kthread+0x10/0x10 [ 572.901508][ C1] ? rcu_is_watching+0x12/0xc0 [ 572.906259][ C1] ? __pfx_kthread+0x10/0x10 [ 572.910841][ C1] ret_from_fork+0x983/0xb10 [ 572.915425][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 572.920524][ C1] ? __switch_to+0x7af/0x10d0 [ 572.925193][ C1] ? __pfx_kthread+0x10/0x10 [ 572.929779][ C1] ret_from_fork_asm+0x1a/0x30 [ 572.934557][ C1] [ 572.937599][ C1] task:syz.2.1152 state:R running task stack:25728 pid:9965 tgid:9955 ppid:5814 task_flags:0x400040 flags:0x00080000 [ 572.951075][ C1] Call Trace: [ 572.954338][ C1] [ 572.957260][ C1] ? __schedule+0x10b9/0x6150 [ 572.961933][ C1] __schedule+0x1139/0x6150 [ 572.966424][ C1] ? __pfx___page_table_check_zero+0x10/0x10 [ 572.972402][ C1] ? post_alloc_hook+0x19e/0x220 [ 572.977339][ C1] ? __pfx___schedule+0x10/0x10 [ 572.982180][ C1] ? mark_held_locks+0x49/0x80 [ 572.986949][ C1] preempt_schedule_irq+0x51/0x90 [ 572.991967][ C1] irqentry_exit+0x1d8/0x8c0 [ 572.996551][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 573.002522][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 573.008667][ C1] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 6c 16 00 00 85 c0 74 2b 8b 82 48 16 00 00 <83> f8 02 75 20 48 8b 8a 50 16 00 00 8b 92 4c 16 00 00 48 8b 01 48 [ 573.028264][ C1] RSP: 0000:ffffc9000f5d7630 EFLAGS: 00000246 [ 573.034321][ C1] RAX: 0000000000000002 RBX: 000020000008b000 RCX: ffffffff82135820 [ 573.042277][ C1] RDX: ffff888026068000 RSI: ffffffff82135a0c RDI: 0000000000000005 [ 573.050234][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 573.058191][ C1] R10: 0000000000000001 R11: ffff888026068b30 R12: ffffc9000f5d7690 [ 573.066155][ C1] R13: ffff888053ddd000 R14: ffffc9000f5d78d0 R15: 0000000000000067 [ 573.074122][ C1] ? ___pte_offset_map+0x50/0x380 [ 573.079144][ C1] ? ___pte_offset_map+0x23c/0x380 [ 573.084247][ C1] ___pte_offset_map+0x23c/0x380 [ 573.089178][ C1] __pte_offset_map_lock+0x8d/0x310 [ 573.094367][ C1] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 573.100171][ C1] do_anonymous_page+0x241/0x2190 [ 573.105216][ C1] __handle_mm_fault+0x1ecf/0x2bb0 [ 573.110331][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 573.115801][ C1] ? find_vma+0xbf/0x140 [ 573.120038][ C1] ? __pfx_find_vma+0x10/0x10 [ 573.124708][ C1] handle_mm_fault+0x3fe/0xad0 [ 573.129478][ C1] do_user_addr_fault+0x7a6/0x1370 [ 573.134586][ C1] ? rcu_is_watching+0x12/0xc0 [ 573.139353][ C1] exc_page_fault+0x64/0xc0 [ 573.143849][ C1] asm_exc_page_fault+0x26/0x30 [ 573.148690][ C1] RIP: 0010:fault_in_readable+0x135/0x1d0 [ 573.154400][ C1] Code: a1 0e b5 ff 48 85 db 0f 84 9c 00 00 00 e8 c3 13 b5 ff 48 89 de 48 89 ef e8 c8 0d b5 ff 48 39 eb 73 1d e8 ae 13 b5 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 3b 0e b5 ff 45 85 ff 74 a8 e8 [ 573.173993][ C1] RSP: 0000:ffffc9000f5d7b08 EFLAGS: 00050287 [ 573.180051][ C1] RAX: 0000000000035565 RBX: 000020000008b000 RCX: ffffc9000c759000 [ 573.188010][ C1] RDX: 0000000000080000 RSI: ffffffff8209d2e2 RDI: 0000000000000006 [ 573.195966][ C1] RBP: 000020000008c000 R08: 0000000000000006 R09: 000020000008b000 [ 573.203925][ C1] R10: 000020000008c000 R11: 0000000000000000 R12: 000020000008b000 [ 573.211882][ C1] R13: 0000000000001000 R14: 0000000000000000 R15: 0000000000000000 [ 573.219848][ C1] ? fault_in_readable+0x132/0x1d0 [ 573.224953][ C1] ? fault_in_readable+0x132/0x1d0 [ 573.230053][ C1] ? __pfx_fault_in_readable+0x10/0x10 [ 573.235506][ C1] fault_in_iov_iter_readable+0x101/0x2c0 [ 573.241221][ C1] generic_perform_write+0x7ad/0x900 [ 573.246512][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 573.252316][ C1] ? file_update_time_flags+0x35c/0x520 [ 573.257855][ C1] shmem_file_write_iter+0x10e/0x140 [ 573.263131][ C1] vfs_write+0x7d3/0x11d0 [ 573.267453][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 573.273251][ C1] ? __pfx_vfs_write+0x10/0x10 [ 573.278021][ C1] ksys_write+0x12a/0x250 [ 573.282341][ C1] ? __pfx_ksys_write+0x10/0x10 [ 573.287190][ C1] do_syscall_64+0xcd/0xf80 [ 573.291685][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.297565][ C1] RIP: 0033:0x7f7a5a58f749 [ 573.301966][ C1] RSP: 002b:00007f7a5b49f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 573.310373][ C1] RAX: ffffffffffffffda RBX: 00007f7a5a7e6090 RCX: 00007f7a5a58f749 [ 573.318339][ C1] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 573.326297][ C1] RBP: 00007f7a5a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 573.334253][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.342208][ C1] R13: 00007f7a5a7e6128 R14: 00007f7a5a7e6090 R15: 00007fff260aaec8 [ 573.350178][ C1] [ 573.353186][ C1] rcu: rcu_preempt kthread starved for 10636 jiffies! g33773 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 573.364370][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 573.374320][ C1] rcu: RCU grace-period kthread stack dump: [ 573.380189][ C1] task:rcu_preempt state:R running task stack:27936 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 573.393665][ C1] Call Trace: [ 573.396928][ C1] [ 573.399846][ C1] ? __schedule+0x10b9/0x6150 [ 573.404512][ C1] __schedule+0x1139/0x6150 [ 573.409018][ C1] ? __pfx___schedule+0x10/0x10 [ 573.413856][ C1] ? find_held_lock+0x2b/0x80 [ 573.418531][ C1] ? schedule+0x2d7/0x3a0 [ 573.422854][ C1] schedule+0xe7/0x3a0 [ 573.426917][ C1] schedule_timeout+0x123/0x290 [ 573.431760][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 573.437119][ C1] ? __pfx_process_timeout+0x10/0x10 [ 573.442397][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 573.448194][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 573.453644][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 573.458400][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 573.463679][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 573.468610][ C1] ? rcu_is_watching+0x12/0xc0 [ 573.473359][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 573.479159][ C1] rcu_gp_kthread+0x26d/0x380 [ 573.483829][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 573.489016][ C1] ? rcu_is_watching+0x12/0xc0 [ 573.493769][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 573.498961][ C1] ? __kthread_parkme+0x19e/0x250 [ 573.503972][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 573.509160][ C1] kthread+0x3c5/0x780 [ 573.513222][ C1] ? __pfx_kthread+0x10/0x10 [ 573.517804][ C1] ? rcu_is_watching+0x12/0xc0 [ 573.522553][ C1] ? __pfx_kthread+0x10/0x10 [ 573.527135][ C1] ret_from_fork+0x983/0xb10 [ 573.531716][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 573.536825][ C1] ? __switch_to+0x7af/0x10d0 [ 573.541492][ C1] ? __pfx_kthread+0x10/0x10 [ 573.546071][ C1] ret_from_fork_asm+0x1a/0x30 [ 573.550842][ C1] [ 573.553845][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 573.560151][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 573.569073][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 573.579112][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 573.584740][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 59 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 573.604332][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 573.610385][ C1] RAX: 000000000157ad8d RBX: 0000000000000001 RCX: ffffffff8b7806d9 [ 573.618342][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdbe3 RDI: ffffffff8bf2b380 [ 573.626301][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 573.634259][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 573.642213][ C1] R13: ffff88801dab24c0 R14: ffffffff9088afd0 R15: 0000000000000000 [ 573.650170][ C1] FS: 0000000000000000(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 573.659090][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.665661][ C1] CR2: 00007f7e2af086c8 CR3: 000000002ad97000 CR4: 00000000003526f0 [ 573.673619][ C1] Call Trace: [ 573.676884][ C1] [ 573.679800][ C1] default_idle+0x13/0x20 [ 573.684122][ C1] default_idle_call+0x6c/0xb0 [ 573.688876][ C1] do_idle+0x38d/0x510 [ 573.692945][ C1] ? __pfx_do_idle+0x10/0x10 [ 573.697534][ C1] cpu_startup_entry+0x4f/0x60 [ 573.702291][ C1] start_secondary+0x21d/0x2d0 [ 573.707042][ C1] ? __pfx_start_secondary+0x10/0x10 [ 573.712318][ C1] common_startup_64+0x13e/0x148 [ 573.717258][ C1] [ 574.427130][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.433491][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.442516][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.448851][ T1294] ieee802154 phy1 wpan1: encryption failed: -22