last executing test programs: 16.486995796s ago: executing program 3 (id=796): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 15.058171298s ago: executing program 3 (id=798): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) stat(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b000600650040000000f2ce8ef250d24b"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13.730203854s ago: executing program 3 (id=803): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xfd, 0x5f, 0x76, 0x40, 0xbda, 0x5088, 0xd420, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x25, 0x160, 0x0, "", [{{0x9, 0x4, 0xaf, 0xff, 0x0, 0xff, 0xff, 0xff, 0xf}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000003a80)={0x24, 0x0, &(0x7f0000003940)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000001340)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x4, 0x9, 0x1, 0xff, 0x8}, 0x0, 0x0, 0x8, [{0xc3, &(0x7f0000000fc0)=@string={0xc3, 0x3, "b11ff61dcecab789b62f3e5a9b14f9b5b3464b0ef5833499dbf207275a6305f94dfe8e895f0b4a21fdb3cebb2b11cb7de9be1ee5a90ee2887a2844a06c7421fca5c90ae32ddd8cbe47842e70af04bbe1a29a11e8430494581375ba2e2f37b1348906f95cea9a72ad83fa28e15b4538224501c3928f0ad6bf5665b95b068c27092222cd02ce04931342f330883b7c04ca222cd0f8121a43d73ae98d7aa58a4aeee17ddeb37b7871a969959b91d830a12bfcdf6c9b2c0735d277d8303b6e9bacef7a"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x81d}}, {0x38, &(0x7f0000001140)=@string={0x38, 0x3, "83e9c87f72ebd21192e395167ea549a73203c4d6c82008e7dd180714036a4b4b7b421d2e6b1b3141c1f669f747be1dd5f45a629162dc"}}, {0x5f, &(0x7f00000011c0)=@string={0x5f, 0x3, "855c912da3e87738075f1c987f9d7ff37ea6c1500a181bc4bcabc1aef0c99669cc502c79377de3028b0443aaeccb9c2d66626229529e936514fb9bda5647822d7d9847c2a021860866ad25227e8aaf274a730bf240e0c7274bda2aa7fc"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x42000) syz_usb_disconnect(r0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) syz_usb_control_io(r3, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x20, 0x3, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000001c00)) 10.511171856s ago: executing program 4 (id=810): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)="404ddba919e2562b9fad63f6ac60ad0104a08aa51e9d956ba5cf1ac901444082e9d6cf554fa3be29c5462701637c9ceb4c9db3862b0b6f47e5cd355cf76dfbc462c39e736d0e70eb05f0a5f80f6d9b66cbfcaa9974bdb84bfc2c736f6f7a84dae4ad78bc2596"}}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 10.073675937s ago: executing program 2 (id=813): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x602, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r0) socket$kcm(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x3, 0x65, 0x0, 0x0, 0x4, 0x200, 0x0, 0x96e, 0x7fffffff, 0x0}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x32, 0x100) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 8.727028101s ago: executing program 4 (id=814): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f00000000c0)={[0xd]}) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8.540077813s ago: executing program 3 (id=815): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x7}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16, @ANYBLOB="01"], 0xb0}}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 7.916478173s ago: executing program 2 (id=818): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [], 0xa, "1cc0024e868c5e5976e645a73168e79cacc09ae543063b091a6a9490602e3069ade4f8af40d1d393192d0446ed9cd732748250e0d139a39ff488184b93a348fb63235a686c1cf2ecd88b1791781e5bb179582e4034261b1a7401f516e46a2951270b1045dcb3daf6dd25f875e6ea8865148c142ee039cbe7dbda353eacc4bfb6306e599bec6a67954a387f24d45e2d1c8085f69f8dfebe10ab0f9a638f62a3f97c5a407c5f591fcde02017f3f54e568b343851f2774f13ace647954708e69083d901bd220e4989526e754da03e8c91b1fb238c95ac78e507b9e95cd6165efa7ef25cd7854fc68f8e1adf918925ebe5abab0b376252ffedad6b81f4e921f4dc18e5f71b51a3eae386e4f89511ed298ee701732d91556feef809ae94c11b6c76f167d6e4d644d1742387018a522b23ed9dce56ebc57f5fb9c5cac8a7d6f6af9d2f2f1dcf8cae2bba7a25eb6162f7925c3b8cfe96cdcdc1fd69509a067207f6cb135a7e95ebda71b7005aa8363903ec18dac3f514a3c7240fb90845b4f801ce67c4c2ed6bae0555b3f1e4023e8f8d60c987904a4bba54c6c1e0deb9a49e995642d0270e97780346c466aca3d3c0bf1f547c8d7e92f4fac7cfde99ab7532ba0e5146eeef2cd39126f9556205c75f0acc8a5ea9d25fc0a4cb5605d6556c02159fd4ae07c9159a88493334f6a69e54f629f6ed92a8ea0c0e426001fa8cfa223e4d5341b8490e35a5df38166bd14e4168fb59a102e72cd82dc43de72353d7b708330728005ed8a150aa3d36ff497b40694769a1d06ba238b130ba100bf35321ac36f701a5d9c5baaf9d57508198e5f940ce102951e9cd17596cedb4cdf36960d54bd478fc8e4d1c592b1b744f954138daee9377d3f463d8f1157bd26bee3997683356c6bfbba554749bb729e60c8ca195d901dc4613"}, 0x29d) pwritev(r0, &(0x7f0000002740)=[{&(0x7f0000000180)="96ea020000000000", 0x8}], 0x1, 0x8002, 0x1) 7.792597486s ago: executing program 2 (id=819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x40c0080) 7.632084602s ago: executing program 2 (id=820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000480)='\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 7.623573789s ago: executing program 1 (id=821): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x190, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xdb, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x378}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.429261324s ago: executing program 4 (id=822): syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x44800, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) pread64(r4, 0x0, 0x0, 0x10000) 6.397668384s ago: executing program 2 (id=823): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000004000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb0024000) 6.393339724s ago: executing program 0 (id=824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x8001, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.120351741s ago: executing program 4 (id=825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fb57fc5d8f07f009b878da562f484471c0a2c7732a49057a6681d955b14182671e300e26541d29dfe0626a5db06ceaf43dc9ab69bee6c063108066d0601d63cc2ba5d753d8abbfdd8cd8a1eac3c4754d300a65cdd24221a8b408509fa566e826c0930cb0ef760feb811356f0369ad796078e3b8da2bfe4eb65f36c87f5433a5e562b8ef32810af03827050d5"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000015c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f00000009c0)={0xbb8, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x100}, 0x83, 0x5, 0x7, 0xfffc, 0x20, 'syz1\x00', "598c9957489f438b0f27200bbb455344ea6ba6bd213013943e7ac1a804928fcd", "c7f6367c7e281b29a620d58e7d1699846ec67e1414b28ccb67188702017f8931", [{0x1, 0xffff}, {0x5, 0x5, {0x3, 0x80}}, {0xb, 0xff9, {0x2, 0x401}}, {0x0, 0xe14, {0x2, 0x80000000}}, {0xfffe, 0x6, {0x0, 0x2}}, {0x8001, 0x4, {0x2, 0x7}}, {0x5, 0x0, {0x3, 0x7}}, {0x5, 0x3, {0x2, 0x7}}, {0x5, 0x1, {0x0, 0x4}}, {0x0, 0x8, {0x0, 0xfffffffc}}, {0x973b, 0x1, {0x1, 0x4}}, {0x5, 0xc49, {0x0, 0xfffffbff}}, {0x5, 0x94f, {0x3, 0x8}}, {0x3, 0xffff, {0x2}}, {0x5, 0x1, {0x0, 0x4}}, {0x5, 0x1, {0x1, 0x2bd5}}, {0xd, 0x1, {0x3, 0x6}}, {0x8, 0x3ad5, {0x3, 0x9}}, {0x7, 0x8, {0x0, 0x6}}, {0x7, 0x1ff}, {0x8, 0x101, {0x0, 0x7fff}}, {0xe49, 0x6, {0x2, 0x400}}, {0x8, 0x4, {0x0, 0x5}}, {0x5, 0x9, {0x3, 0x3}}, {0x1, 0xfff, {0x0, 0x10001}}, {0x800, 0x4, {0x1, 0x80000000}}, {0xfffe, 0x0, {0x1, 0xb40c}}, {0xfff7, 0x1, {0x0, 0xffffffc0}}, {0x81, 0x7fff, {0x3, 0x5}}, {0x9073, 0x6, {0x9bab4e7ce67e8be3, 0x3}}, {0x6fa, 0x6, {0x2, 0x7}}, {0x9, 0x7ff, {0x0, 0x5}}, {0xa2, 0x6, {0x0, 0x586}}, {0x1, 0x2, {0x0, 0xfffffff9}}, {0xbf, 0xff00, {0x0, 0x8000000}}, {0x55e9, 0x0, {0x0, 0x6}}, {0x3e, 0x2, {0x1, 0x9}}, {0xff, 0xd88, {0x1, 0x8}}, {0x9, 0xe9, {0x0, 0x6}}, {0x46, 0x8, {0x1, 0x80}}]}}}, {{0x254, 0x1, {{0x2, 0x10000}, 0x0, 0x5, 0x9, 0x9, 0x26, 'syz0\x00', "44e90ea850096f5ff9596c43f0ccf46effae131dac2758a7556f1c1dcef811fa", "dba0547968eea2cf9a45b1b529ec2bd163c8035b0530e043ccdddab7806e1e95", [{0x8, 0x1, {0x0, 0xc409}}, {0x1ff, 0x6, {0x0, 0x80}}, {0x8000, 0x5, {0x3, 0xfffffffa}}, {0x1000, 0x8, {0x1, 0x4}}, {0x91d1, 0x9, {0x1, 0x2}}, {0xfff8, 0x7, {0x2, 0x5}}, {0x0, 0x7f, {0x3, 0x7}}, {0x7fff, 0xf07a, {0x0, 0x81}}, {0x2, 0xd8, {0x0, 0x5}}, {0x8}, {0x0, 0x9, {0x3}}, {0x1, 0x8001, {0x3, 0x8000}}, {0x40, 0x7fff, {0x0, 0x2}}, {0x101, 0x7, {0x3, 0xc45}}, {0x9, 0x2d0, {0x3, 0x3}}, {0xcb, 0x5, {0x3, 0x100}}, {0xf53, 0x9474, {0x0, 0x1ff}}, {0xab9a, 0xa, {0x0, 0xfff}}, {0x8, 0x7, {0x1, 0x7}}, {0x3, 0x8, {0x2, 0x7f}}, {0x538e, 0x975f, {0x2, 0x80000000}}, {0x9, 0x6, {0x2, 0x1}}, {0x9, 0x2, {0x3, 0x2}}, {0x7, 0x6, {0x0, 0x2}}, {0x4, 0x9, {0x0, 0xa96}}, {0xfff8, 0x9, {0x2, 0x4}}, {0x3ff, 0x5, {0x7, 0x4}}, {0x6, 0x9, {0x2, 0x9}}, {0x3, 0x1, {0x2, 0xf01}}, {0x4, 0x0, {0x0, 0x6000}}, {0x4, 0x7, {0x1, 0x1}}, {0xae4, 0xe, {0x2, 0x2}}, {0x3, 0x2, {0x3, 0x2}}, {0x0, 0xff, {0x1}}, {0x1ff, 0x952, {0x2, 0xfffffffd}}, {0x1, 0xa000, {0x3, 0x1000}}, {0x7, 0x9, {0x1, 0x7}}, {0x3, 0x0, {0x3, 0x10001}}, {0x5, 0x0, {0x0, 0x9e4}}, {0x9, 0xf8c, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffffc}, 0xfd, 0x6, 0x200, 0x0, 0x5, 'syz1\x00', "4b84a55cf922a2e22131a67c48fa944d6e2df7693669659b6fb1db45b34ec58b", "b4eed0ded25ebe1f3b5c2f15627ac04631beac87510f6c9bddbc42851cc8f7cf", [{0x400, 0x4, {0x1, 0x10000}}, {0xb, 0x4, {0x3, 0x8014}}, {0x5, 0x4, {0xae16331a65d46564, 0x76c2}}, {0xf, 0x5, {0x1, 0xffffffff}}, {0x5, 0x6, {0x1, 0x3}}, {0xfbff, 0x1004, {0x1, 0xfffff947}}, {0x6, 0x9, {0x0, 0x4}}, {0x7f, 0x9, {0x3, 0x2}}, {0x7fff, 0x3, {0x0, 0x8}}, {0x6, 0x7, {0x2, 0x5}}, {0x2, 0xa7, {0x0, 0x100}}, {0xfffd, 0x2, {0x1, 0x5}}, {0x5, 0x80, {0x0, 0x4256}}, {0x8000, 0x0, {0x1, 0x1}}, {0x8001, 0x2, {0x3, 0x4}}, {0x8001, 0xfffe, {0x3, 0x10}}, {0x2, 0x3, {0x0, 0x454}}, {0x1, 0x40, {0x3, 0x27}}, {0x8, 0x4, {0x1, 0x8}}, {0x6, 0x3, {0x2, 0x8}}, {0x9, 0xd71, {0x2, 0x4}}, {0x4, 0x39, {0x1, 0x2}}, {0x6, 0x8000, {0x2, 0x4}}, {0xfff, 0x7, {0x3, 0x10}}, {0x5, 0xff00, {0x3, 0xfffffffd}}, {0xa6a, 0x7, {0x1, 0x200}}, {0x1ec4, 0x7, {0x2, 0x80000000}}, {0x10, 0x0, {0x0, 0x5}}, {0x7, 0x3ff, {0x1, 0x10000}}, {0x9, 0x4, {0x1, 0x8000}}, {0x4, 0x3, {0x3, 0x4}}, {0x5, 0x0, {0x3, 0x9}}, {0x8, 0x6, {0x1, 0x2}}, {0xfffa, 0x3, {0x1, 0x1000}}, {0xc, 0x4, {0x2}}, {0x0, 0x8, {0x1, 0xe}}, {0x6, 0x0, {0x3, 0xfffffff1}}, {0x4, 0x7, {0x1, 0x10000}}, {0x3, 0x5, {0x1, 0x5}}, {0x6, 0x6, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x5d35ac5d}, 0x2, 0x2, 0x4730, 0x2, 0x5, 'syz0\x00', "783d880535142730e8c21c22e09bdf61ed433581f56ec7f58734281e84253128", "848ffad5d18594d002a62f3e9149cbe319abbf9156df4f79c864ca3762a77546", [{0xc, 0xc, {0x0, 0x7fff}}, {0x3ff, 0x3, {0x0, 0x7fff}}, {0x6, 0x4f1, {0x1, 0x100}}, {0xfffb, 0xb99c, {0x2}}, {0x9, 0xffff, {0x3, 0x7ff800}}, {0x40, 0x1b23, {0x0, 0x9}}, {0xdc2, 0x4, {0x3, 0x4}}, {0x3889, 0x6, {0x0, 0x6}}, {0x3757, 0xfe3, {0x3}}, {0x401, 0xffff, {0x1}}, {0x3, 0x8, {0x0, 0x5}}, {0x2, 0x6, {0x2, 0x9}}, {0x8001, 0x83ae, {0x3}}, {0x2, 0x5, {0x2}}, {0x4, 0x9, {0x0, 0x7}}, {0x7, 0x2, {0x0, 0x1f1}}, {0x1, 0x7, {0x1, 0x1}}, {0xa0, 0x6, {0x2, 0x10}}, {0x7, 0x8, {0x1, 0x100}}, {0x3, 0x0, {0x3, 0x2}}, {0x1, 0x1, {0x2, 0xdc6}}, {0x6, 0xd9fc, {0x2, 0xffffff61}}, {0x13a, 0x5, {0x0, 0x401}}, {0x0, 0x3ff, {0x2, 0x9}}, {0x1ff, 0x4, {0x1, 0x9}}, {0x3, 0x1, {0x1, 0x2}}, {0x240, 0x2, {0x2}}, {0x3, 0x4, {0x0, 0x8000}}, {0x1, 0x3, {0x3}}, {0xd5f, 0x7, {0x0, 0xfffffffb}}, {0x35c5, 0xfffb, {0x2, 0x9}}, {0x2, 0x8, {0x0, 0x4}}, {0x7, 0x902b, {0x2, 0xffffff82}}, {0x5d0, 0x4a85, {0x1, 0x6}}, {0x0, 0x2, {0x0, 0x4}}, {0x5225, 0x6, {0x1, 0x5}}, {0x800, 0x6, {0x2, 0x4e}}, {0x0, 0x0, {0x0, 0x2}}, {0x6, 0x4647, {0x3, 0x6}}, {0x2, 0x1, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x9, 0x5, 0xd3a7, 0x9, 0x7, 'syz0\x00', "89df76972b84871257914494460bee05e06ff22303aede1d06bd24e96069bbce", "52d21f2100b8ab422c8906e54f9f507d613d802c2d1f6bf36ec8da09d9177423", [{0xc9, 0x0, {0x1, 0x2}}, {0xfff, 0x3, {0x3, 0x1}}, {0x8001, 0x6, {0x2, 0x4}}, {0x2, 0x3, {0x2, 0x6}}, {0x2, 0x1746, {0x2, 0x40000007}}, {0x75, 0x101, {0x2, 0x101}}, {0xfc01, 0x3, {0x0, 0x1}}, {0x1, 0x7, {0x0, 0x7}}, {0x6, 0xd0, {0x0, 0x30d}}, {0x0, 0x400, {0x2}}, {0x0, 0x3, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x356a}}, {0x6, 0x6}, {0x0, 0x8, {0x3, 0x8001}}, {0x6, 0x5, {0x0, 0x7fff}}, {0xb00, 0x36, {0x0, 0x1eb}}, {0x8, 0x7, {0x1, 0x4}}, {0xcbb0, 0x5}, {0x8, 0x400, {0x4, 0x5}}, {0x9, 0x7, {0x3, 0x2}}, {0xfffb, 0x4, {0x2, 0x4}}, {0x9, 0x400, {0x3, 0x365}}, {0xf801, 0x8, {0x0, 0x6}}, {0x4, 0x7, {0x3, 0x2}}, {0x8, 0x4, {0x3, 0x4}}, {0x7, 0x1, {0x2, 0x80000001}}, {0x2dc, 0x1ff, {0x3, 0x5}}, {0x2, 0x80, {0x2, 0x1}}, {0x2, 0x4000, {0x1, 0x4}}, {0x2, 0x6, {0x1, 0x3ff}}, {0x2, 0x9, {0x3, 0x8b6e}}, {0x9, 0x401, {0x2, 0x5}}, {0x1, 0x8000, {0x2}}, {0x6, 0x9387, {0x2, 0x3}}, {0x8, 0x2, {0x2, 0x1}}, {0x9f7, 0x2, {0x2, 0x400}}, {0x55, 0x7, {0x1, 0x1}}, {0x2d2, 0xfcac, {0x3, 0xfa}}, {0x7, 0x4}, {0xa, 0x2, {0x0, 0x9}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x60000880}, 0x80) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x68, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x401, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4090}, 0x4040080) r3 = openat$null(0xffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x0, 0x1, 0xc00}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100013f00000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x6c, r6, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1b0}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 6.038524324s ago: executing program 1 (id=826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) 5.946539855s ago: executing program 0 (id=827): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x18}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x8, 0x50, 0x0, 0x1, 0x2, 0x4, 0x6, 0x99, 0xb, 0x4, 0x7, 0x3, 0xd1, 0x5, 0x8, 0x5}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.572198231s ago: executing program 4 (id=828): r0 = syz_open_dev$hidraw(0x0, 0x9, 0x240c0) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1123, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x60}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) write$char_usb(r2, &(0x7f0000000280)='L', 0x1) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001640)=ANY=[], 0x0) syz_usb_disconnect(r1) 5.397767654s ago: executing program 2 (id=829): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.269998351s ago: executing program 3 (id=830): r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_connect(0x2, 0x396, &(0x7f0000000040)=ANY=[@ANYBLOB="120100023ee6f410b40402101b60010203010902840301090130"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000005c0)=0xfffffff1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x2, &(0x7f0000000040)="51b9") syz_usb_connect$midi(0x92fe5f96430ae822, 0x43, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x33, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x1, 0x37, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x7, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x3, 0x1, [{0x5, 0x10}], 0x7}], [{{0x9, 0x5, 0x3, 0x0, 0x40, 0x25, 0x5, 0x10, {0xd, 0x25, 0x1, 0x9, "8dc0e2b14516eb00cb"}}}]}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x10, 0x0, 0x4, 0xf, 0x40, 0xff}, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x70, 0xff, 0x0, 0x7d}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1009}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 5.129699629s ago: executing program 0 (id=831): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f00000012c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @pad1, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}, @ra={0x5, 0x2, 0x6}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x6, 0x4, 0x1, 0x9, 0x0, [@empty, @private0]}}}, @hopopts={{0x138, 0x29, 0x36, {0x5e, 0x23, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1, 0x4, "2bdb86d1"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @dstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x74}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x330}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.942199675s ago: executing program 0 (id=832): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8ce, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_open_dev$sndmidi(0x0, 0xffffffff, 0x161902) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4008840) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0x200c}) 4.531655487s ago: executing program 1 (id=833): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x1) 3.664115135s ago: executing program 0 (id=834): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x940, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0xffffffffffffffe0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000001e00)={0x1, [{0x3, 0x0, 0xffffffff, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x8b26, 0x0}, {0x0, 0x0, 0x80000001, 0x0}, {0x3, 0x8, 0x68f86531, &(0x7f0000000880)=':'}, {0x1, 0x0, 0x4b2636e8, 0x0}, {0x3, 0x0, 0x4246, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x5, 0x0, 0x8000, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x80000000, 0x0}, {0x0, 0x0, 0x80000000, 0x0}, {0x0, 0x0, 0xf, 0x0}, {0x0, 0x0, 0x2f25, 0x0}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.618074477s ago: executing program 1 (id=835): syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x44800, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) pread64(r4, 0x0, 0x0, 0x10000) 1.31479076s ago: executing program 4 (id=836): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.31291729s ago: executing program 3 (id=837): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)='1', 0x1}, {0x0}], 0x2, 0x8, 0xb) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 1.078468063s ago: executing program 1 (id=838): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = io_uring_setup(0x47a7, &(0x7f0000000240)={0x0, 0x9b6d, 0x0, 0x3, 0x377}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) close_range(r4, 0xffffffffffffffff, 0x0) 817.514664ms ago: executing program 0 (id=839): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4084) 0s ago: executing program 1 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) kernel console output (not intermixed with test programs): wn color mode 3; guessing buffer size. [ 111.398279][ T29] audit: type=1400 audit(1778939156.026:306): avc: denied { read } for pid=6431 comm="syz.3.204" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.431002][ T803] usbhid 3-1:0.0: can't add hid device: -71 [ 111.431041][ T5799] usb 2-1: device descriptor read/64, error -71 [ 111.440501][ T29] audit: type=1400 audit(1778939156.026:307): avc: denied { open } for pid=6431 comm="syz.3.204" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.474751][ T803] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 111.484918][ T5808] usb 5-1: Using ep0 maxpacket: 32 [ 111.491987][ T29] audit: type=1400 audit(1778939156.026:308): avc: denied { ioctl } for pid=6431 comm="syz.3.204" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.498758][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.517497][ T29] audit: type=1400 audit(1778939156.026:309): avc: denied { write } for pid=6431 comm="syz.3.204" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 111.530651][ T803] usb 3-1: USB disconnect, device number 11 [ 111.565523][ T5708] usbhid 1-1:0.0: can't add hid device: -71 [ 111.572983][ T5708] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 111.577074][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.591978][ T5799] usb usb2-port1: attempt power cycle [ 111.600802][ T5708] usb 1-1: USB disconnect, device number 14 [ 111.610651][ T5808] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 111.627344][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.658710][ T5808] usb 5-1: config 0 descriptor?? [ 111.676867][ T5808] hub 5-1:0.0: USB hub found [ 111.826505][ T6444] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 111.846687][ T6444] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 111.867899][ T6444] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 111.881822][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.890839][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.904344][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 111.922312][ T6444] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.940504][ T5799] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 111.971937][ T6446] netlink: 48 bytes leftover after parsing attributes in process `syz.3.208'. [ 111.984756][ T5799] usb 2-1: device descriptor read/8, error -71 [ 112.006347][ T29] audit: type=1400 audit(1778939156.636:310): avc: denied { write } for pid=6438 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.134369][ T5808] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 112.163965][ T5808] usbhid 5-1:0.0: can't add hid device: -71 [ 112.178895][ T5808] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 112.225579][ T5808] usb 5-1: USB disconnect, device number 15 [ 112.241297][ T5799] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 112.291097][ T5799] usb 2-1: device descriptor read/8, error -71 [ 112.422255][ T5799] usb usb2-port1: unable to enumerate USB device [ 112.485428][ T29] audit: type=1400 audit(1778939157.106:311): avc: denied { read } for pid=6460 comm="syz.0.211" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 112.802143][ T29] audit: type=1400 audit(1778939157.106:312): avc: denied { open } for pid=6460 comm="syz.0.211" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.465607][ T6466] netlink: 'syz.4.215': attribute type 1 has an invalid length. [ 114.244144][ T6484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6484 comm=syz.4.220 [ 114.322911][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 114.322973][ T29] audit: type=1800 audit(1778939158.956:318): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.220" name="file1" dev="overlay" ino=243 res=0 errno=0 [ 114.510713][ T3104] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 114.661987][ T3104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.683754][ T3104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 114.694968][ T3104] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 114.704066][ T3104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.732542][ T3104] usb 1-1: config 0 descriptor?? [ 114.746368][ T6480] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.761121][ T803] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 114.870590][ T5708] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 114.928586][ T803] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.938937][ T803] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.954901][ T803] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.964478][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.994249][ T5808] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 115.178111][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.188897][ T5808] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 115.199916][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.253528][ T803] usb 3-1: usb_control_msg returned -32 [ 115.296278][ T803] usbtmc 3-1:16.0: can't read capabilities [ 115.305757][ T5808] usb 4-1: config 0 descriptor?? [ 115.365689][ T5808] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 115.678299][ T3104] usbhid 1-1:0.0: can't add hid device: -71 [ 115.728521][ T3104] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 115.739834][ T3104] usb 1-1: USB disconnect, device number 15 [ 115.850506][ T5708] usb 5-1: device descriptor read/64, error -71 [ 116.015567][ T6516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.040758][ T5808] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 116.090527][ T5708] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 116.192498][ T5808] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 116.202988][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.212221][ T5808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.221337][ T5708] usb 5-1: device descriptor read/64, error -71 [ 116.223612][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.239247][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.252590][ T5808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.263749][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.271611][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.280737][ T5808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.292148][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.299862][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.309576][ T5808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.320853][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.328471][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.338979][ T5808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.352743][ T5708] usb usb5-port1: attempt power cycle [ 116.352806][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.366206][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.375261][ T5808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.387021][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.395455][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.404875][ T5808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.415996][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.423692][ T5808] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 116.432865][ T5808] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 116.444879][ T5808] usb 2-1: config 0 interface 0 has no altsetting 0 [ 116.454432][ T5808] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 116.464388][ T5808] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 116.472789][ T5808] usb 2-1: Product: syz [ 116.477044][ T5808] usb 2-1: Manufacturer: syz [ 116.481708][ T5808] usb 2-1: SerialNumber: syz [ 116.488986][ T5808] usb 2-1: config 0 descriptor?? [ 116.502914][ T5808] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 116.709643][ T5808] usb 2-1: USB disconnect, device number 13 [ 116.710574][ T5708] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 116.723327][ T5808] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 116.741315][ T5708] usb 5-1: device descriptor read/8, error -71 [ 116.962404][ T29] audit: type=1800 audit(1778939161.596:319): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.237" name="file1" dev="overlay" ino=307 res=0 errno=0 [ 117.035127][ T5708] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 117.101916][ T5708] usb 5-1: device descriptor read/8, error -71 [ 117.224772][ T5708] usb usb5-port1: unable to enumerate USB device [ 117.273405][ T29] audit: type=1400 audit(1778939161.906:320): avc: denied { read write } for pid=6540 comm="syz.0.238" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.297092][ T29] audit: type=1400 audit(1778939161.906:321): avc: denied { open } for pid=6540 comm="syz.0.238" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.321786][ T29] audit: type=1400 audit(1778939161.926:322): avc: denied { map } for pid=6540 comm="syz.0.238" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.397358][ T29] audit: type=1400 audit(1778939162.026:323): avc: denied { ioctl } for pid=6540 comm="syz.0.238" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xaec1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 117.534268][ T803] usb 3-1: USB disconnect, device number 12 [ 117.692639][ T29] audit: type=1400 audit(1778939162.326:324): avc: denied { create } for pid=6548 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.717521][ T29] audit: type=1400 audit(1778939162.336:325): avc: denied { setopt } for pid=6548 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.737759][ T29] audit: type=1400 audit(1778939162.336:326): avc: denied { write } for pid=6548 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.826783][ T6552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.853494][ T6552] binder: 6549:6552 ioctl c0285840 200000000000 returned -22 [ 117.866216][ T5708] usb 4-1: USB disconnect, device number 8 [ 117.930504][ T803] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 118.555482][ T6555] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 118.580543][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 118.886388][ T803] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.894800][ T803] usb 3-1: config 0 has no interface number 0 [ 118.901138][ T803] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 118.912815][ T803] usb 3-1: config 0 interface 1 has no altsetting 0 [ 118.921758][ T803] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 118.930898][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.938898][ T803] usb 3-1: Product: syz [ 118.943475][ T803] usb 3-1: Manufacturer: syz [ 118.948081][ T803] usb 3-1: SerialNumber: syz [ 119.025010][ T803] usb 3-1: config 0 descriptor?? [ 119.168850][ T6566] kvm: pic: level sensitive irq not supported [ 119.169208][ T6566] kvm: pic: non byte write [ 119.264984][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.3.247'. [ 119.277152][ T803] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 119.297174][ T803] cx231xx 3-1:0.1: Failed to read PCB config [ 119.305014][ T803] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 119.371556][ T29] audit: type=1400 audit(1778939163.996:327): avc: denied { setopt } for pid=6573 comm="syz.3.247" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.374651][ T803] usb 3-1: USB disconnect, device number 13 [ 119.883194][ T42] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 119.928516][ T29] audit: type=1400 audit(1778939164.546:328): avc: denied { execute_no_trans } for pid=6583 comm="syz.4.251" path="/44/file0" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.966515][ T803] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 120.092644][ T29] audit: type=1400 audit(1778939164.716:329): avc: denied { ioctl } for pid=6583 comm="syz.4.251" path="socket:[13083]" dev="sockfs" ino=13083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.094194][ T42] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 120.150973][ T803] usb 3-1: Using ep0 maxpacket: 32 [ 120.166050][ T803] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 120.184633][ T803] usb 3-1: config 0 has no interface number 0 [ 120.293549][ T803] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 120.331509][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.366256][ T803] usb 3-1: config 0 interface 1 has no altsetting 0 [ 120.374826][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.419805][ T803] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 120.463468][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.480178][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.532996][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.549129][ T803] usb 3-1: Product: syz [ 120.589554][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.604019][ T803] usb 3-1: Manufacturer: syz [ 120.634501][ T803] usb 3-1: SerialNumber: syz [ 120.705912][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.745036][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.800002][ T803] usb 3-1: config 0 descriptor?? [ 120.826136][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.844790][ T803] usb 3-1: can't set config #0, error -71 [ 120.894239][ T803] usb 3-1: USB disconnect, device number 14 [ 120.909068][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.951117][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.965168][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.990167][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.017040][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.026313][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.056393][ T29] audit: type=1400 audit(1778939165.686:330): avc: denied { write } for pid=6594 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.083342][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.103320][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.113465][ T29] audit: type=1400 audit(1778939165.686:331): avc: denied { create } for pid=6594 comm="syz.3.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 121.139743][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.155625][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.166040][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.175282][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.187184][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.195446][ T42] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 121.204557][ T42] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 121.215667][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 121.224820][ T42] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 121.234668][ T42] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 121.243055][ T803] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 121.250979][ T42] usb 1-1: Product: syz [ 121.255482][ T42] usb 1-1: Manufacturer: syz [ 121.262494][ T42] usb 1-1: SerialNumber: syz [ 121.278687][ T42] usb 1-1: config 0 descriptor?? [ 121.295766][ T42] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 121.391262][ T803] usb 3-1: device descriptor read/64, error -71 [ 121.495429][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.508154][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.541995][ T42] usb 1-1: USB disconnect, device number 16 [ 121.551794][ T42] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 121.630478][ T803] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 121.771615][ T803] usb 3-1: device descriptor read/64, error -71 [ 121.891155][ T803] usb usb3-port1: attempt power cycle [ 122.094466][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.260'. [ 122.260836][ T803] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 122.390972][ T803] usb 3-1: device descriptor read/8, error -71 [ 122.546019][ T29] audit: type=1400 audit(1778939167.176:332): avc: denied { connect } for pid=6621 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.609095][ T29] audit: type=1400 audit(1778939167.176:333): avc: denied { name_connect } for pid=6621 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 122.651772][ T803] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 122.663851][ T29] audit: type=1400 audit(1778939167.296:334): avc: denied { shutdown } for pid=6621 comm="syz.0.265" lport=38405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.702982][ T803] usb 3-1: device descriptor read/8, error -71 [ 122.814088][ T803] usb usb3-port1: unable to enumerate USB device [ 122.970536][ T42] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 123.130531][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 123.137197][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.145322][ T42] usb 2-1: config 0 has no interface number 0 [ 123.151645][ T42] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 123.162361][ T42] usb 2-1: config 0 interface 1 has no altsetting 0 [ 123.170790][ T42] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 123.179831][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.187839][ T42] usb 2-1: Product: syz [ 123.192024][ T42] usb 2-1: Manufacturer: syz [ 123.196592][ T42] usb 2-1: SerialNumber: syz [ 123.202572][ T42] usb 2-1: config 0 descriptor?? [ 123.421813][ T42] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 123.432445][ T42] cx231xx 2-1:0.1: Failed to read PCB config [ 123.438506][ T42] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 123.450788][ T42] usb 2-1: USB disconnect, device number 14 [ 123.749585][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 123.940571][ T5708] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 124.000572][ T29] audit: type=1400 audit(1778939168.606:335): avc: denied { write } for pid=6651 comm="syz.4.274" path="socket:[13376]" dev="sockfs" ino=13376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 124.002692][ T42] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 124.085985][ T29] audit: type=1400 audit(1778939168.706:336): avc: denied { write } for pid=6651 comm="syz.4.274" path="socket:[13378]" dev="sockfs" ino=13378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 124.205242][ T5708] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 124.274177][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.305960][ T5708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.368067][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.442651][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.482159][ T5708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.557660][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.615624][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 124.625578][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.662466][ T5708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.737927][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.806550][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.866094][ T5708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.934095][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.954777][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.962976][ T42] usb 2-1: config 0 has no interface number 0 [ 124.969083][ T42] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.991293][ T42] usb 2-1: config 0 interface 1 has no altsetting 0 [ 124.999710][ T42] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 125.003010][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.020087][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.029720][ T42] usb 2-1: Product: syz [ 125.033911][ T42] usb 2-1: Manufacturer: syz [ 125.036734][ T5708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.038494][ T42] usb 2-1: SerialNumber: syz [ 125.048423][ T42] usb 2-1: config 0 descriptor?? [ 125.069860][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.094845][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.105597][ T5708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.131794][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.161952][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.191158][ T5708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.227438][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.246918][ T5708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.256635][ T5708] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.268112][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.278593][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.285174][ T5708] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 125.303469][ T5708] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 125.306783][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.320015][ T5708] usb 4-1: Product: syz [ 125.332088][ T5708] usb 4-1: Manufacturer: syz [ 125.358724][ T5708] usb 4-1: SerialNumber: syz [ 125.368956][ T5708] usb 4-1: config 0 descriptor?? [ 125.369010][ T42] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 125.385736][ T42] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 125.396382][ T5708] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.530661][ T42] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 125.538947][ T42] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 125.547853][ T42] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 125.557132][ T42] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 125.567003][ T42] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 125.575025][ T42] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -32 [ 125.614520][ T6648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.623021][ T42] i2c i2c-2: Added multiplexed i2c bus 4 [ 125.627359][ T42] i2c i2c-2: Added multiplexed i2c bus 5 [ 125.631793][ T3104] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 125.652729][ T6632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.653025][ T6648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.664087][ T6632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.675769][ T5709] usb 4-1: USB disconnect, device number 9 [ 125.685679][ T5709] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 125.688275][ T42] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 125.702282][ T42] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 125.727496][ T42] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 125.738075][ T42] usb 2-1: USB disconnect, device number 15 [ 125.740679][ T5708] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 125.791909][ T3104] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.800007][ T3104] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.810337][ T3104] usb 5-1: config 0 has no interface number 0 [ 125.816752][ T3104] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.826463][ T3104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.835956][ T3104] usb 5-1: config 0 descriptor?? [ 125.844734][ T3104] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 125.901090][ T5708] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 125.909569][ T5708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.918753][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.929647][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.937008][ T5708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.946025][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.957146][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.964662][ T5708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.974143][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.985027][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.992506][ T5708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.001461][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.012341][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.019679][ T5708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.028621][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.039540][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.048856][ T5708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.058109][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.065524][ T42] usb 5-1: USB disconnect, device number 20 [ 126.069026][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.087318][ T5708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.096283][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.107397][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.114998][ T5708] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.126349][ T5708] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.137273][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.150914][ T5708] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.164001][ T5708] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.173078][ T5708] usb 1-1: Product: syz [ 126.177884][ T5708] usb 1-1: Manufacturer: syz [ 126.182540][ T5708] usb 1-1: SerialNumber: syz [ 126.188559][ T5708] usb 1-1: config 0 descriptor?? [ 126.196305][ T5708] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 126.275752][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 126.406759][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.415583][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.427769][ T29] audit: type=1400 audit(1778939171.056:337): avc: denied { checkpoint_restore } for pid=6679 comm="syz.1.285" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.430181][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.460272][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.490265][ T5708] usb 1-1: USB disconnect, device number 17 [ 126.515114][ T5708] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 126.584426][ T6685] syzkaller0: entered promiscuous mode [ 126.596463][ T6685] syzkaller0: entered allmulticast mode [ 126.781654][ T6696] siw: device registration error -23 [ 126.792906][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 126.802659][ T6696] netlink: 44 bytes leftover after parsing attributes in process `syz.1.290'. [ 126.896610][ T6704] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.293'. [ 127.234572][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.241793][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.314666][ T42] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 127.501895][ T42] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 127.523637][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 127.554875][ T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 64 [ 127.592157][ T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.619667][ T6727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.638076][ T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.647985][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.846543][ T6732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6732 comm=syz.1.301 [ 127.886922][ T42] usb 4-1: GET_CAPABILITIES returned 0 [ 127.904890][ T42] usbtmc 4-1:16.0: can't read capabilities [ 127.984940][ T29] audit: type=1800 audit(1778939172.606:338): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.301" name="file1" dev="overlay" ino=394 res=0 errno=0 [ 128.350551][ T5709] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 128.503671][ T5709] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.513259][ T5709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.530649][ T5709] usb 1-1: config 0 has no interface number 0 [ 128.538130][ T5709] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.556078][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.574954][ T5709] usb 1-1: config 0 descriptor?? [ 128.587377][ T5709] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 128.594084][ T3104] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 128.638629][ T6749] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 128.702678][ T6749] PKCS7: Only support pkcs7_signedData type [ 128.753356][ T3104] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 128.770485][ T3104] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 128.780391][ T3104] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.793765][ T3104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.809908][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 128.820186][ T6735] usbtmc 4-1:16.0: Unable to send data, error -71 [ 128.829061][ T5709] usb 1-1: USB disconnect, device number 18 [ 128.846737][ T6743] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 128.868501][ T3104] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.103851][ T803] usb 2-1: USB disconnect, device number 16 [ 129.596933][ T29] audit: type=1800 audit(1778939174.226:339): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.310" name="file1" dev="overlay" ino=359 res=0 errno=0 [ 129.630722][ T5709] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 129.880999][ T5709] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 129.919255][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.949888][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.964780][ T10] usb 4-1: USB disconnect, device number 10 [ 129.984950][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.015568][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.040380][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.055406][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.067729][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.077818][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.088924][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.097877][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.110116][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.121036][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.121900][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.136997][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.147919][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.155338][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.164262][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.175633][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.183110][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.192348][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.203906][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.214701][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 130.224457][ T5709] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 130.235734][ T5709] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.248381][ T5709] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 130.258168][ T5709] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 130.266725][ T5709] usb 1-1: Product: syz [ 130.271534][ T5709] usb 1-1: Manufacturer: syz [ 130.277037][ T5709] usb 1-1: SerialNumber: syz [ 130.296354][ T5709] usb 1-1: config 0 descriptor?? [ 130.310317][ T5709] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 130.380492][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.510931][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.519558][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.529856][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.530468][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 130.539146][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.548575][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.561922][ T10] usb 4-1: config 0 has no interfaces? [ 130.572451][ T5701] usb 1-1: USB disconnect, device number 19 [ 130.576949][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.588382][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.588634][ T5701] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 130.598763][ T10] usb 4-1: Product: syz [ 130.607245][ T10] usb 4-1: Manufacturer: syz [ 130.619984][ T10] usb 4-1: SerialNumber: syz [ 130.646312][ T10] usb 4-1: config 0 descriptor?? [ 130.874334][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.906661][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.944266][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.956131][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.970796][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.983716][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.201574][ T10] usb 4-1: USB disconnect, device number 11 [ 131.267436][ T6789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.350255][ T29] audit: type=1400 audit(1778939175.976:340): avc: denied { write } for pid=6792 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 131.550608][ T5709] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 131.758130][ T29] audit: type=1800 audit(1778939176.386:341): pid=6799 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.324" name="file1" dev="overlay" ino=381 res=0 errno=0 [ 131.874005][ T5709] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.903019][ T5709] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.933337][ T5709] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.955119][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.988899][ T5709] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.018285][ T5709] usb 2-1: invalid MIDI out EP 0 [ 132.084588][ T29] audit: type=1400 audit(1778939176.716:342): avc: denied { ioctl } for pid=6806 comm="syz.0.329" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14593 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.159579][ T29] audit: type=1400 audit(1778939176.746:343): avc: denied { unmount } for pid=5616 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.238956][ T5709] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 132.264028][ T5709] usb 2-1: USB disconnect, device number 17 [ 132.334238][ T29] audit: type=1400 audit(1778939176.956:344): avc: denied { create } for pid=6816 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.369023][ T29] audit: type=1400 audit(1778939176.956:345): avc: denied { connect } for pid=6816 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.408434][ T29] audit: type=1400 audit(1778939176.956:346): avc: denied { setopt } for pid=6816 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.442210][ T29] audit: type=1400 audit(1778939176.956:347): avc: denied { bind } for pid=6816 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.463230][ T29] audit: type=1400 audit(1778939176.956:348): avc: denied { write } for pid=6816 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.508745][ T29] audit: type=1400 audit(1778939177.136:349): avc: denied { prog_run } for pid=6812 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 132.810818][ T5701] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 132.820509][ T803] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 132.962698][ T5701] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.980677][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.991993][ T803] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.012029][ T5701] usb 5-1: config 0 descriptor?? [ 133.018501][ T803] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.038723][ T5701] cp210x 5-1:0.0: cp210x converter detected [ 133.063499][ T803] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.082544][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.110188][ T6823] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 133.125453][ T6830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 133.136034][ T803] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 133.237998][ T5701] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 133.266342][ T5701] cp210x 5-1:0.0: querying part number failed [ 133.303580][ T5701] usb 5-1: cp210x converter now attached to ttyUSB0 [ 133.786535][ T29] audit: type=1800 audit(1778939178.416:350): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.340" name="file1" dev="overlay" ino=458 res=0 errno=0 [ 133.839099][ T803] usb 3-1: USB disconnect, device number 19 [ 134.184157][ T6847] syzkaller0: entered promiscuous mode [ 134.189763][ T6847] syzkaller0: entered allmulticast mode [ 134.399961][ T6855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.434664][ T6855] binder: 6849:6855 ioctl c0285840 200000000000 returned -22 [ 136.028449][ T10] usb 5-1: USB disconnect, device number 21 [ 136.059986][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.072481][ T10] cp210x 5-1:0.0: device disconnected [ 136.570677][ T5701] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 136.590608][ T803] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 136.830277][ T29] audit: type=1800 audit(1778939181.456:351): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.351" name="file1" dev="overlay" ino=454 res=0 errno=0 [ 136.950695][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 136.960708][ T803] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.976861][ T803] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.995411][ T5701] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 137.006084][ T5701] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 137.017526][ T803] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 137.033824][ T5701] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.045351][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.053575][ T5701] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 137.065991][ T5701] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 137.107010][ T5701] usb 5-1: config 168 interface 0 has no altsetting 0 [ 137.115407][ T5701] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 137.123555][ T5701] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 137.145991][ T5701] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.156327][ T29] audit: type=1400 audit(1778939181.786:352): avc: denied { create } for pid=6884 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.159797][ T5701] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 137.189070][ T6881] syzkaller0: entered promiscuous mode [ 137.194873][ T6881] syzkaller0: entered allmulticast mode [ 137.203374][ T5701] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 137.207278][ T29] audit: type=1400 audit(1778939181.806:353): avc: denied { setopt } for pid=6884 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 137.219781][ T5701] usb 5-1: config 168 interface 0 has no altsetting 0 [ 137.273068][ T5701] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 137.288474][ T803] usb 1-1: usb_control_msg returned -32 [ 137.294663][ T803] usbtmc 1-1:16.0: can't read capabilities [ 137.305282][ T5701] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 137.335430][ T5701] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 137.370473][ T5701] usb 5-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 137.410488][ T5701] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 137.424417][ T5701] usb 5-1: config 168 interface 0 has no altsetting 0 [ 137.433878][ T5701] usb 5-1: string descriptor 0 read error: -22 [ 137.440297][ T5701] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 137.456576][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.478750][ T5701] adutux 5-1:168.0: interrupt endpoints not found [ 137.739749][ T6866] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 137.895770][ T803] usb 1-1: USB disconnect, device number 20 [ 137.978534][ T6866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.997671][ T6866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.018404][ T10] usb 5-1: USB disconnect, device number 22 [ 138.030747][ T5701] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 138.200913][ T5701] usb 3-1: Using ep0 maxpacket: 8 [ 138.213974][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.238449][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 138.265327][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 138.289007][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 138.312518][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.343827][ T5701] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 138.365234][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.385880][ T5701] usb 3-1: Product: syz [ 138.396550][ T5701] usb 3-1: Manufacturer: syz [ 138.401235][ T5701] usb 3-1: SerialNumber: syz [ 138.416443][ T5701] usb 3-1: config 0 descriptor?? [ 138.433196][ T6899] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 138.455264][ T5701] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 138.963493][ T6899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.997411][ T6899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.029664][ T10] usb 3-1: USB disconnect, device number 20 [ 139.157188][ T6908] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 139.190601][ T6908] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 139.798887][ T6935] syzkaller0: entered promiscuous mode [ 139.808109][ T6935] syzkaller0: entered allmulticast mode [ 140.321291][ T803] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 140.491519][ T803] usb 1-1: Using ep0 maxpacket: 8 [ 140.505665][ T803] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 140.526514][ T803] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 140.558878][ T803] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.588688][ T803] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 140.619428][ T803] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 140.654372][ T803] usb 1-1: config 168 interface 0 has no altsetting 0 [ 140.677134][ T803] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 140.693716][ T803] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 140.724425][ T803] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.760629][ T803] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 140.797845][ T803] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 140.846180][ T803] usb 1-1: config 168 interface 0 has no altsetting 0 [ 140.873270][ T803] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 140.893304][ T803] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 140.938666][ T803] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 140.977887][ T803] usb 1-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 141.034579][ T803] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 141.053626][ T6957] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.092284][ T803] usb 1-1: config 168 interface 0 has no altsetting 0 [ 141.114250][ T803] usb 1-1: string descriptor 0 read error: -22 [ 141.121277][ T803] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 141.150529][ T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.181669][ T803] adutux 1-1:168.0: interrupt endpoints not found [ 141.622657][ T6942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.631865][ T6955] blktrace: Concurrent blktraces are not allowed on loop4 [ 141.648913][ T6942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.677236][ T803] usb 1-1: USB disconnect, device number 21 [ 142.044556][ T6966] kvm: pic: non byte write [ 142.342406][ T3104] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 142.511628][ T3104] usb 3-1: Using ep0 maxpacket: 8 [ 142.524502][ T3104] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.545567][ T3104] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 142.580439][ T3104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 142.602200][ T3104] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 142.616948][ T3104] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.635589][ T3104] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.672462][ T3104] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 142.720556][ T3104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.756271][ T3104] usb 3-1: Product: syz [ 142.774787][ T3104] usb 3-1: Manufacturer: syz [ 142.792657][ T3104] usb 3-1: SerialNumber: syz [ 142.820045][ T3104] usb 3-1: config 0 descriptor?? [ 142.847734][ T6969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.876673][ T3104] ati_remote 3-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 143.092986][ T6969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.149353][ T6969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.192670][ T803] usb 3-1: USB disconnect, device number 21 [ 143.868530][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 143.975013][ T6991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.953467][ T6991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.389'. [ 145.059418][ T6994] bond1: (slave veth3): Enslaving as an active interface with an up link [ 145.205262][ T6991] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 145.445595][ T29] audit: type=1400 audit(1778939190.026:354): avc: denied { bind } for pid=7013 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.222910][ T29] audit: type=1400 audit(1778939190.036:355): avc: denied { node_bind } for pid=7013 comm="syz.3.395" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 146.424959][ T29] audit: type=1400 audit(1778939190.036:356): avc: denied { write } for pid=7013 comm="syz.3.395" laddr=224.0.0.1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 146.567285][ T29] audit: type=1400 audit(1778939190.946:357): avc: denied { read write } for pid=7016 comm="syz.1.397" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 146.668312][ T29] audit: type=1400 audit(1778939190.946:358): avc: denied { open } for pid=7016 comm="syz.1.397" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 146.736213][ T29] audit: type=1400 audit(1778939190.966:359): avc: denied { read write } for pid=5622 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 146.766102][ T29] audit: type=1400 audit(1778939190.966:360): avc: denied { open } for pid=5622 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.047240][ T29] audit: type=1400 audit(1778939190.966:361): avc: denied { ioctl } for pid=5622 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 147.113716][ T29] audit: type=1400 audit(1778939191.086:362): avc: denied { mount } for pid=7020 comm="syz.0.398" name="/" dev="hugetlbfs" ino=14316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 147.617457][ T29] audit: type=1400 audit(1778939192.246:363): avc: denied { connect } for pid=7029 comm="syz.3.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.294680][ T7049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7049 comm=syz.2.407 [ 148.659500][ T7060] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.037845][ T7049] syz.2.407 (7049) used greatest stack depth: 19720 bytes left [ 150.020437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 151.146615][ T7083] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 151.153286][ T7083] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 151.295944][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 151.296080][ T29] audit: type=1400 audit(1778939195.746:373): avc: denied { name_bind } for pid=7080 comm="syz.1.420" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 152.723948][ T7083] vhci_hcd vhci_hcd.0: Device attached [ 153.190602][ T3104] usb 42-1: SetAddress Request (2) to port 0 [ 153.229669][ T7084] vhci_hcd: connection closed [ 153.257584][ T3104] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 153.271774][ T35] vhci_hcd vhci_hcd.4: stop threads [ 153.298599][ T35] vhci_hcd vhci_hcd.4: release socket [ 153.322214][ T35] vhci_hcd vhci_hcd.4: disconnect device [ 153.495651][ T7101] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 154.590431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 154.650431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 154.710434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.358918][ T29] audit: type=1400 audit(1778939200.226:374): avc: denied { mount } for pid=7124 comm="syz.2.419" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 156.590430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 156.945286][ T29] audit: type=1400 audit(1778939200.226:375): avc: denied { search } for pid=7124 comm="syz.2.419" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.967519][ T29] audit: type=1400 audit(1778939200.226:376): avc: denied { search } for pid=7124 comm="syz.2.419" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 156.989371][ T29] audit: type=1400 audit(1778939200.226:377): avc: denied { read } for pid=7124 comm="syz.2.419" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 157.470434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.530434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.590434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 157.710434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 158.004089][ T29] audit: type=1400 audit(1778939200.226:378): avc: denied { read open } for pid=7124 comm="syz.2.419" path="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.026609][ T29] audit: type=1400 audit(1778939200.226:379): avc: denied { search } for pid=7124 comm="syz.2.419" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.100565][ T7139] misc userio: The device must be registered before sending interrupts [ 158.154991][ T29] audit: type=1400 audit(1778939200.226:380): avc: denied { read } for pid=7124 comm="syz.2.419" name="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.215453][ T29] audit: type=1400 audit(1778939200.226:381): avc: denied { watch } for pid=7124 comm="syz.2.419" path="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.300572][ T29] audit: type=1400 audit(1778939201.606:382): avc: denied { listen } for pid=7133 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 158.353134][ T3104] usb 42-1: device descriptor read/8, error -110 [ 158.483610][ T29] audit: type=1400 audit(1778939203.116:383): avc: denied { accept } for pid=7143 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.542467][ T7149] netlink: 'syz.2.437': attribute type 2 has an invalid length. [ 158.551582][ T7149] netlink: 'syz.2.437': attribute type 1 has an invalid length. [ 158.742276][ T3104] usb usb42-port1: attempt power cycle [ 160.921866][ T3104] usb usb42-port1: unable to enumerate USB device [ 161.380572][ T29] audit: type=1400 audit(1778939205.796:384): avc: denied { name_connect } for pid=7162 comm="syz.2.441" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 162.307404][ T29] audit: type=1400 audit(1778939205.826:385): avc: denied { read } for pid=7162 comm="syz.2.441" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 162.329811][ T29] audit: type=1400 audit(1778939206.066:386): avc: denied { bind } for pid=7160 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.352453][ T29] audit: type=1400 audit(1778939206.586:387): avc: denied { bind } for pid=7160 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.433166][ T29] audit: type=1400 audit(1778939207.066:388): avc: denied { append } for pid=7169 comm="syz.0.432" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.706226][ T7166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.786649][ T29] audit: type=1400 audit(1778939207.416:389): avc: denied { ioctl } for pid=7175 comm="syz.3.435" path="socket:[16795]" dev="sockfs" ino=16795 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.874957][ T29] audit: type=1400 audit(1778939207.496:390): avc: denied { bind } for pid=7175 comm="syz.3.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 162.993232][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 164.003943][ T7166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.116545][ T7166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.150553][ T803] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 165.353334][ T7166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.730472][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 165.742907][ T803] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba [ 165.757414][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.776484][ T803] usb 4-1: Product: syz [ 165.781003][ T803] usb 4-1: Manufacturer: syz [ 165.785611][ T803] usb 4-1: SerialNumber: syz [ 165.794297][ T803] usb 4-1: config 0 descriptor?? [ 165.931069][ T29] audit: type=1400 audit(1778939210.556:391): avc: denied { setopt } for pid=7206 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.060062][ T803] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 166.080996][ T7207] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 166.108931][ T7207] team0 (unregistering): Port device team_slave_0 removed [ 166.133455][ T7207] team0 (unregistering): Failed to send options change via netlink (err -105) [ 166.149403][ T7207] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 166.163637][ T7207] team0 (unregistering): Port device team_slave_1 removed [ 166.175494][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.184296][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.310537][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.327274][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.356388][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.374164][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.422701][ T803] usb 4-1: USB disconnect, device number 12 [ 166.508189][ T7215] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 166.544553][ T29] audit: type=1400 audit(1778939211.126:392): avc: denied { mount } for pid=7213 comm="syz.4.453" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 166.679040][ T7215] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 166.689511][ T7215] overlayfs: failed to look up (tracing) for ino (-66) [ 167.457111][ T5708] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 168.997489][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 169.026034][ T5708] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 169.036928][ T5708] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 169.048324][ T5708] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.057948][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.593066][ T7226] bond1: option lacp_rate: invalid value (4) [ 169.619633][ T7226] bond1 (unregistering): Released all slaves [ 170.075473][ T5701] usb 3-1: USB disconnect, device number 22 [ 170.308680][ T29] audit: type=1400 audit(1778939214.926:393): avc: denied { append } for pid=7234 comm="syz.1.459" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 170.530722][ T29] audit: type=1400 audit(1778939215.156:394): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 174.648300][ T29] audit: type=1400 audit(1778939219.276:395): avc: denied { write } for pid=7262 comm="syz.1.464" name="ptype" dev="proc" ino=4026532815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 174.655250][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 174.806999][ T29] audit: type=1400 audit(1778939219.326:396): avc: denied { bind } for pid=7262 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.445802][ T29] audit: type=1400 audit(1778939219.996:397): avc: denied { ioctl } for pid=7274 comm="syz.3.474" path="socket:[17347]" dev="sockfs" ino=17347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.547050][ T29] audit: type=1400 audit(1778939224.166:398): avc: denied { read } for pid=7335 comm="syz.1.488" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.652579][ T29] audit: type=1400 audit(1778939224.166:399): avc: denied { open } for pid=7335 comm="syz.1.488" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.708171][ T29] audit: type=1400 audit(1778939224.226:400): avc: denied { ioctl } for pid=7335 comm="syz.1.488" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.749492][ T29] audit: type=1400 audit(1778939224.266:401): avc: denied { write } for pid=7335 comm="syz.1.488" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.025588][ T7365] futex_wake_op: syz.4.496 tries to shift op by 36; fix this program [ 183.414050][ T7375] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.500'. [ 183.520510][ T7377] netlink: 160 bytes leftover after parsing attributes in process `syz.1.499'. [ 184.388966][ T29] audit: type=1400 audit(1778939229.016:402): avc: denied { listen } for pid=7385 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 184.540057][ T29] audit: type=1400 audit(1778939229.166:403): avc: denied { append } for pid=7380 comm="syz.4.502" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.662095][ T29] audit: type=1400 audit(1778939229.276:404): avc: denied { mount } for pid=7383 comm="syz.2.503" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 184.966184][ T7395] overlay: Unknown parameter '/' [ 184.983805][ T7397] overlayfs: missing 'lowerdir' [ 185.361204][ T7401] netlink: 'syz.3.505': attribute type 4 has an invalid length. [ 185.391685][ T29] audit: type=1400 audit(1778939229.356:405): avc: denied { bind } for pid=7379 comm="syz.0.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.523221][ T29] audit: type=1400 audit(1778939230.156:406): avc: denied { watch } for pid=7403 comm="syz.1.507" path="/112" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.560517][ T5619] Bluetooth: hci3: command 0x0406 tx timeout [ 185.566570][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 185.566658][ T4930] Bluetooth: hci1: command 0x0406 tx timeout [ 185.573427][ T5619] Bluetooth: hci4: command 0x0406 tx timeout [ 187.161019][ T7425] futex_wake_op: syz.1.512 tries to shift op by 144; fix this program [ 188.630769][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.637126][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.723711][ T29] audit: type=1400 audit(1778939233.346:407): avc: denied { write } for pid=7430 comm="syz.4.514" path="socket:[18069]" dev="sockfs" ino=18069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.838561][ T29] audit: type=1400 audit(1778939233.446:408): avc: denied { read } for pid=7432 comm="syz.1.516" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 189.501267][ T7453] syzkaller0: entered promiscuous mode [ 189.516143][ T7453] syzkaller0: entered allmulticast mode [ 190.994037][ T7505] netlink: 'syz.0.527': attribute type 29 has an invalid length. [ 191.053191][ T7510] netlink: 'syz.0.527': attribute type 29 has an invalid length. [ 191.691322][ T7529] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 191.796128][ T7529] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 191.806442][ T7529] overlayfs: failed to look up (tracing) for ino (-66) [ 192.566412][ T7537] capability: warning: `syz.4.539' uses 32-bit capabilities (legacy support in use) [ 193.018620][ T7550] 9p: Bad value for 'rfdno' [ 194.408198][ T803] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 194.410525][ T5799] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 194.654727][ T5799] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 194.772078][ T5799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.840532][ T803] usb 2-1: Using ep0 maxpacket: 8 [ 194.855111][ T29] audit: type=1400 audit(1778939239.486:409): avc: denied { bind } for pid=7572 comm="syz.3.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.855600][ T803] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 194.875639][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.894956][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 194.902379][ T803] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 194.909622][ T5799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.914437][ T803] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 194.936827][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 194.948828][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 194.953362][ T803] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 194.957836][ T5799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 194.967226][ T803] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 194.993243][ T803] usb 2-1: config 168 interface 0 has no altsetting 0 [ 194.997605][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.001562][ T803] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 195.011969][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.019083][ T803] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 195.027505][ T5799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.037447][ T803] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.060698][ T803] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 195.064226][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.072382][ T803] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 195.097645][ T803] usb 2-1: config 168 interface 0 has no altsetting 0 [ 195.106153][ T803] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 195.114145][ T803] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 195.123446][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.125923][ T803] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.136515][ T5799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.143766][ T803] usb 2-1: config 168 interface 0 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 195.143788][ T803] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 195.143819][ T803] usb 2-1: config 168 interface 0 has no altsetting 0 [ 195.146137][ T803] usb 2-1: string descriptor 0 read error: -22 [ 195.161025][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.167316][ T803] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 195.245476][ T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.278552][ T803] adutux 2-1:168.0: interrupt endpoints not found [ 195.306536][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.322355][ T5799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.336447][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.348246][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.357131][ T5799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.369947][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.383683][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.393011][ T5799] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.410531][ T5799] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.440485][ T5799] usb 1-1: config 0 interface 0 has no altsetting 0 [ 195.454706][ T5799] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 195.470112][ T5799] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 195.490505][ T5799] usb 1-1: Product: syz [ 195.495481][ T5799] usb 1-1: Manufacturer: syz [ 195.509432][ T5799] usb 1-1: SerialNumber: syz [ 195.587686][ T5799] usb 1-1: config 0 descriptor?? [ 195.611746][ T5799] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 195.707312][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.726732][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.751539][ T5799] usb 2-1: USB disconnect, device number 18 [ 196.802075][ T5716] usb 1-1: USB disconnect, device number 22 [ 196.995319][ T5716] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 197.845499][ T7604] overlayfs: failed to clone upperpath [ 200.840599][ T7640] futex_wake_op: syz.3.575 tries to shift op by 36; fix this program [ 201.338454][ T5701] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 201.500459][ T5701] usb 1-1: device descriptor read/64, error -71 [ 201.750474][ T5701] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 201.991466][ T5701] usb 1-1: device descriptor read/64, error -71 [ 202.107056][ T5701] usb usb1-port1: attempt power cycle [ 202.461209][ T5701] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 202.542109][ T5701] usb 1-1: device descriptor read/8, error -71 [ 202.983829][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 203.572478][ T29] audit: type=1800 audit(1778939248.206:410): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.580" name="file1" dev="overlay" ino=697 res=0 errno=0 [ 203.862782][ T7672] 9p: Bad value for 'rfdno' [ 203.880568][ T803] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 203.901042][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 203.950137][ T7673] bond1: Unable to set down delay as MII monitoring is disabled [ 203.972014][ T7673] bond1 (unregistering): Released all slaves [ 203.995462][ T29] audit: type=1400 audit(1778939248.626:411): avc: denied { ioctl } for pid=7671 comm="syz.4.584" path="socket:[16330]" dev="sockfs" ino=16330 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.041843][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 204.061810][ T803] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.096638][ T29] audit: type=1400 audit(1778939248.626:412): avc: denied { connect } for pid=7671 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.096805][ T803] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 204.610599][ T7679] futex_wake_op: syz.0.586 tries to shift op by 36; fix this program [ 205.141904][ T803] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.180294][ T803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.221442][ T803] usb 4-1: config 0 descriptor?? [ 205.245721][ T803] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 206.187774][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.219740][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.252722][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.291426][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.326566][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.362706][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.542294][ T5808] usb 4-1: USB disconnect, device number 13 [ 208.351330][ T7720] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 208.705158][ T29] audit: type=1400 audit(1778939253.266:413): avc: denied { create } for pid=7718 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 208.751303][ T7721] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.764065][ T29] audit: type=1400 audit(1778939253.296:414): avc: denied { write } for pid=7718 comm="syz.0.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 208.789592][ T7721] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 209.230686][ T7715] futex_wake_op: syz.3.599 tries to shift op by 36; fix this program [ 209.866049][ T7723] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 209.928005][ T7726] bond1: (slave gretap1): making interface the new active one [ 209.960930][ T7726] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 210.430103][ T7743] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 210.782869][ T7755] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 210.865805][ T7755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.210645][ T7760] futex_wake_op: syz.2.613 tries to shift op by 36; fix this program [ 211.828354][ T7764] netlink: 14 bytes leftover after parsing attributes in process `syz.3.610'. [ 211.828586][ T7755] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 211.880315][ T29] audit: type=1400 audit(1778939256.506:415): avc: denied { append } for pid=7754 comm="syz.3.610" name="sg0" dev="devtmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.931287][ T3104] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 212.005291][ T7764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.044770][ T7764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.081697][ T7764] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 212.121255][ T3104] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.161264][ T3104] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.191012][ T7764] bond0 (unregistering): Released all slaves [ 212.208749][ T3104] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.229716][ T3104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.245751][ T5799] syz1: Port: 1 Link DOWN [ 212.481347][ T3104] usb 2-1: usb_control_msg returned -32 [ 212.499597][ T3104] usbtmc 2-1:16.0: can't read capabilities [ 212.627704][ T29] audit: type=1400 audit(1778939257.256:416): avc: denied { nlmsg_read } for pid=7754 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.724821][ T7776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.619'. [ 213.048602][ T5808] usb 2-1: USB disconnect, device number 19 [ 213.952325][ T5808] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 214.120489][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 214.128942][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.158052][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.180914][ T5808] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.214977][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.247470][ T5808] usb 2-1: config 0 descriptor?? [ 214.267215][ T5808] hub 2-1:0.0: USB hub found [ 214.378821][ T5614] Bluetooth: hci4: unexpected event for opcode 0x2024 [ 214.478748][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.508256][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.532018][ T5808] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 214.941696][ T5808] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 214.981305][ T5808] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 216.217690][ T7827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 216.441650][ T7798] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 216.809306][ T7798] usbhid 2-1:0.0: reset_resume error -1 [ 217.059314][ T5808] usb 2-1: USB disconnect, device number 20 [ 218.110801][ T7852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.644'. [ 219.950066][ T5614] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 220.390450][ T5808] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 220.541304][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 220.561787][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.602042][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.622042][ T5808] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.642662][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.666042][ T5808] usb 4-1: config 0 descriptor?? [ 220.685409][ T5808] hub 4-1:0.0: USB hub found [ 220.904123][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.937292][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.968727][ T5808] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 220.977163][ T7893] netlink: 'syz.2.660': attribute type 1 has an invalid length. [ 221.375749][ T5808] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 221.427708][ T5808] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 221.450510][ T3104] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 221.972038][ T5701] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 222.147891][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 222.168104][ T5701] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.198070][ T5701] usb 2-1: config 0 has no interface number 0 [ 222.209122][ T3104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.212632][ T5701] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 222.261980][ T7877] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 222.280255][ T5701] usb 2-1: config 0 interface 1 has no altsetting 0 [ 222.305068][ T5701] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 222.307187][ T3104] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 222.335939][ T3104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.339132][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.377061][ T3104] usb 1-1: config 0 descriptor?? [ 222.383654][ T5701] usb 2-1: Product: syz [ 222.405807][ T5701] usb 2-1: Manufacturer: syz [ 222.406815][ T3104] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 222.427133][ T5701] usb 2-1: SerialNumber: syz [ 222.457455][ T5701] usb 2-1: config 0 descriptor?? [ 222.677126][ T7877] usbhid 4-1:0.0: reset_resume error -1 [ 222.716495][ T5701] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 222.745380][ T5701] cx231xx 2-1:0.1: Failed to read PCB config [ 222.761213][ T5701] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 222.782727][ T5701] usb 2-1: USB disconnect, device number 21 [ 222.901039][ T5808] usb 4-1: USB disconnect, device number 14 [ 223.260447][ T5701] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 223.365246][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.668'. [ 224.205498][ T5799] usb 1-1: USB disconnect, device number 27 [ 224.230430][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 224.256356][ T5701] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.294472][ T5701] usb 2-1: config 0 has no interface number 0 [ 224.345798][ T5701] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 224.382017][ T5701] usb 2-1: config 0 interface 1 has no altsetting 0 [ 225.752864][ T5701] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 225.797495][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.811571][ T7933] netlink: 'syz.0.671': attribute type 1 has an invalid length. [ 225.840016][ T5701] usb 2-1: Product: syz [ 225.877769][ T5701] usb 2-1: config 0 descriptor?? [ 225.901617][ T5701] usb 2-1: can't set config #0, error -71 [ 225.919076][ T5701] usb 2-1: USB disconnect, device number 22 [ 226.357862][ T7958] siw: device registration error -23 [ 226.369137][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 226.470469][ T5701] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 226.611993][ T5808] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 226.621186][ T7966] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 226.643034][ T5701] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.659739][ T5701] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.679974][ T5701] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.689114][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.704938][ T7956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 226.721903][ T7966] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 226.725692][ T5701] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 226.753192][ T7966] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 226.771529][ T5808] usb 4-1: Using ep0 maxpacket: 32 [ 226.786031][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.798603][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.809272][ T5808] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.818528][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.846538][ T5808] usb 4-1: config 0 descriptor?? [ 226.884849][ T5808] hub 4-1:0.0: USB hub found [ 227.027808][ T5701] usb 2-1: USB disconnect, device number 23 [ 227.073097][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.127184][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.173166][ T7968] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 227.202457][ T5808] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 227.310269][ T7969] bond3: (slave gretap1): making interface the new active one [ 227.328356][ T7969] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 227.617895][ T5808] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 227.656671][ T5808] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 228.243929][ T7961] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 228.668987][ T7961] usbhid 4-1:0.0: reset_resume error -1 [ 228.902050][ T5708] usb 4-1: USB disconnect, device number 15 [ 229.291621][ T8009] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.756879][ T8007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8007 comm=syz.1.695 [ 229.784912][ T29] audit: type=1800 audit(1778939274.416:417): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.695" name="file1" dev="overlay" ino=824 res=0 errno=0 [ 229.966240][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.016646][ T8014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.031993][ T29] audit: type=1400 audit(1778939274.656:418): avc: denied { map } for pid=8016 comm="syz.4.697" path="socket:[20945]" dev="sockfs" ino=20945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.279958][ T8022] futex_wake_op: syz.0.699 tries to shift op by 36; fix this program [ 230.410645][ T29] audit: type=1400 audit(1778939274.656:419): avc: denied { read } for pid=8016 comm="syz.4.697" path="socket:[20945]" dev="sockfs" ino=20945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.699733][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 230.742482][ T8015] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 230.782461][ T8015] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 230.875202][ T5799] syz1: Port: 1 Link ACTIVE [ 231.247746][ T5620] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 231.516071][ T5799] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 231.720666][ T5799] usb 2-1: Using ep0 maxpacket: 8 [ 231.736857][ T5799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.748895][ T5799] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 231.763368][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 231.775702][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 231.788028][ T5799] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 231.801254][ T5808] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 231.828876][ T5799] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.851442][ T5799] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 231.861744][ T5799] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.870915][ T5799] usb 2-1: Product: syz [ 231.884838][ T5799] usb 2-1: Manufacturer: syz [ 231.894377][ T5799] usb 2-1: SerialNumber: syz [ 231.941234][ T5799] usb 2-1: config 0 descriptor?? [ 231.950521][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 231.955981][ T8047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.970497][ T5808] usb 4-1: config index 0 descriptor too short (expected 67, got 36) [ 232.030837][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.041952][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.052251][ T5808] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 232.062385][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.077345][ T5808] usb 4-1: config 0 descriptor?? [ 232.240363][ T8047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.272301][ T8047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.339970][ T8054] input: syz0 as /devices/virtual/input/input15 [ 232.363539][ T29] audit: type=1400 audit(1778939276.986:420): avc: denied { read } for pid=4963 comm="acpid" name="event4" dev="devtmpfs" ino=3171 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.415935][ T29] audit: type=1400 audit(1778939277.046:421): avc: denied { open } for pid=4963 comm="acpid" path=2F6465762F696E7075742F6576656E7434202864656C6574656429 dev="devtmpfs" ino=3171 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 232.465081][ T5808] usbhid 4-1:0.0: can't add hid device: -71 [ 232.627289][ T5808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 232.652889][ T8062] futex_wake_op: syz.0.711 tries to shift op by 36; fix this program [ 232.981756][ T29] audit: type=1400 audit(1778939277.046:422): avc: denied { ioctl } for pid=4963 comm="acpid" path=2F6465762F696E7075742F6576656E7434202864656C6574656429 dev="devtmpfs" ino=3171 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 233.060185][ T5808] usb 4-1: USB disconnect, device number 16 [ 233.138762][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 233.460538][ T5799] rc_core: IR keymap rc-snapstream-firefly not found [ 233.471775][ T5799] Registered IR keymap rc-empty [ 233.485284][ T5799] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 233.501957][ T5799] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 233.546786][ T5799] input: syz syz mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 233.616216][ T5799] usb 2-1: USB disconnect, device number 24 [ 233.622562][ C0] ati_remote 2-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 234.010514][ T5799] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 234.172474][ T5799] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 234.192378][ T5799] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.225371][ T5799] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 234.236218][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.259484][ T5799] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.383421][ T5799] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 234.557750][ T8069] fuse: Unknown parameter 'fo [ 375.495527][ C1] __schedule+0x1295/0x67a0 [ 375.500042][ C1] ? __pfx___schedule+0x10/0x10 [ 375.504886][ C1] ? mark_held_locks+0x40/0x70 [ 375.509648][ C1] preempt_schedule_irq+0x50/0x90 [ 375.514664][ C1] irqentry_exit+0x205/0x7e0 [ 375.519251][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 375.525223][ C1] RIP: 0010:__update_page_owner_handle+0x111/0x550 [ 375.531711][ C1] Code: 74 24 0a bf 1f 00 00 00 e8 7c d0 87 ff 66 83 fb 1f 0f 87 31 0d a4 fe 41 bf 01 00 00 00 44 89 e1 48 c7 c0 a0 e3 1d 9b 45 31 f6 <41> d3 e7 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 48 89 44 24 30 [ 375.551308][ C1] RSP: 0018:ffffc90005086e88 EFLAGS: 00000246 [ 375.557361][ C1] RAX: ffffffff9b1de3a0 RBX: 0000000000000000 RCX: 0000000000000000 [ 375.565317][ C1] RDX: 0000000000000000 RSI: 000000000000001f RDI: ffff88807da58000 [ 375.573273][ C1] RBP: ffff88801d90b3a0 R08: 0000000000000003 R09: 000000000000001f [ 375.581238][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 375.589286][ C1] R13: 1ffff92000a10de7 R14: 0000000000000000 R15: 0000000000000001 [ 375.597256][ C1] ? __update_page_owner_handle+0xf4/0x550 [ 375.603056][ C1] __set_page_owner+0x11f/0x540 [ 375.607899][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 375.613261][ C1] ? bad_range+0x257/0x3f0 [ 375.617669][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 375.622862][ C1] post_alloc_hook+0x153/0x170 [ 375.627622][ C1] get_page_from_freelist+0x11a6/0x33b0 [ 375.633169][ C1] ? __pfx___might_resched+0x10/0x10 [ 375.638463][ C1] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 375.644350][ C1] ? irqentry_exit+0x24d/0x7e0 [ 375.649109][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 375.654303][ C1] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 375.660456][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 375.666798][ C1] ? mark_held_locks+0x40/0x70 [ 375.671555][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 375.676747][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 375.681941][ C1] ? __lock_acquire+0x4a5/0x2630 [ 375.686869][ C1] ? __lock_acquire+0x4a5/0x2630 [ 375.691795][ C1] ? css_rstat_updated+0x1ce/0x5a0 [ 375.696899][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 375.702785][ C1] ? policy_nodemask+0xed/0x4f0 [ 375.707628][ C1] alloc_pages_mpol+0x1fb/0x540 [ 375.712469][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 375.717827][ C1] ? __lock_acquire+0x4a5/0x2630 [ 375.722763][ C1] folio_alloc_mpol_noprof+0x36/0x260 [ 375.728131][ C1] vma_alloc_folio_noprof+0xed/0x1d0 [ 375.733408][ C1] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 375.739294][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 375.744050][ C1] ? rcu_read_unlock+0x2d/0xb0 [ 375.748814][ C1] do_wp_page+0xd75/0x4350 [ 375.753229][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 375.758072][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 375.763447][ C1] __handle_mm_fault+0x1ab6/0x2a00 [ 375.768557][ C1] ? mt_find+0x45e/0x8e0 [ 375.772801][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 375.778251][ C1] ? __pfx_mt_find+0x10/0x10 [ 375.782851][ C1] ? find_vma+0xbf/0x140 [ 375.787084][ C1] ? __pfx_find_vma+0x10/0x10 [ 375.791755][ C1] handle_mm_fault+0x36d/0xa20 [ 375.796518][ C1] do_user_addr_fault+0x74c/0x12f0 [ 375.801626][ C1] ? trace_page_fault_kernel+0x7a/0x200 [ 375.807167][ C1] exc_page_fault+0x6f/0xd0 [ 375.811663][ C1] asm_exc_page_fault+0x26/0x30 [ 375.816503][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 375.822215][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca e9 c7 d7 03 00 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 375.841897][ C1] RSP: 0018:ffffc900050879d8 EFLAGS: 00050246 [ 375.847951][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000352030 [ 375.855909][ C1] RDX: 0000000000080000 RSI: ffffffff8955e241 RDI: ffff88807da58000 [ 375.863867][ C1] RBP: ffffc90005087d78 R08: 0000000000000005 R09: 0000000000000000 [ 375.871824][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 375.879951][ C1] R13: 0000200000352000 R14: ffffc90005087dbc R15: 0000000000000002 [ 375.887918][ C1] ? ____sys_recvmsg+0x2e1/0x640 [ 375.892851][ C1] ____sys_recvmsg+0x2ec/0x640 [ 375.897610][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 375.903153][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 375.908436][ C1] ? rcu_is_watching+0x12/0xc0 [ 375.913197][ C1] ? ___sys_recvmsg+0x177/0x1a0 [ 375.918036][ C1] ? kfree+0x1dd/0x6c0 [ 375.922097][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 375.927290][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 375.931965][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 375.937155][ C1] ? irqentry_exit+0x24d/0x7e0 [ 375.941927][ C1] ? __pfx___might_resched+0x10/0x10 [ 375.947210][ C1] do_recvmmsg+0x301/0x760 [ 375.951621][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 375.956553][ C1] ? __lock_acquire+0x4a5/0x2630 [ 375.961484][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 375.966497][ C1] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 375.973348][ C1] ? find_held_lock+0x2b/0x80 [ 375.978011][ C1] ? kcov_ioctl+0x16a/0x720 [ 375.982510][ C1] ? rcu_is_watching+0x12/0xc0 [ 375.987274][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 375.992295][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 375.997829][ C1] ? kcov_ioctl+0x16a/0x720 [ 376.002323][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.007083][ C1] do_syscall_64+0x10b/0xf80 [ 376.011664][ C1] ? clear_bhb_loop+0x40/0x90 [ 376.016332][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.022211][ C1] RIP: 0033:0x7f7249b9ce59 [ 376.026612][ C1] RSP: 002b:00007f724aa43028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 376.035009][ C1] RAX: ffffffffffffffda RBX: 00007f7249e16090 RCX: 00007f7249b9ce59 [ 376.042966][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 376.050923][ C1] RBP: 00007f7249c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 376.058881][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 376.066838][ C1] R13: 00007f7249e16128 R14: 00007f7249e16090 R15: 00007ffe62b198b8 [ 376.074806][ C1] [ 376.077811][ C1] task:syz.1.791 state:R running task stack:23688 pid:8306 tgid:8306 ppid:5608 task_flags:0x40064c flags:0x00080001 [ 376.091286][ C1] Call Trace: [ 376.094549][ C1] [ 376.097467][ C1] __schedule+0x1295/0x67a0 [ 376.101979][ C1] ? __pfx___schedule+0x10/0x10 [ 376.106821][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.111582][ C1] preempt_schedule_irq+0x50/0x90 [ 376.116599][ C1] irqentry_exit+0x205/0x7e0 [ 376.121190][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.127159][ C1] RIP: 0010:lock_is_held_type+0x42/0x140 [ 376.132784][ C1] Code: 8b 15 aa 96 80 08 85 d2 0f 85 de 00 00 00 41 57 41 56 41 55 41 54 55 53 48 83 ec 08 65 48 8b 2d 1c 4f 80 08 8b 95 8c 0b 00 00 <85> d2 0f 85 a7 00 00 00 48 89 fb 41 89 f4 9c 41 5d fa 48 c7 c7 29 [ 376.152377][ C1] RSP: 0018:ffffc900050e7240 EFLAGS: 00000282 [ 376.158430][ C1] RAX: 00000000ffffffff RBX: ffffea00012fe2c0 RCX: 0000000000000001 [ 376.166386][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff888058eab9c0 [ 376.174340][ C1] RBP: ffff888033420000 R08: 0000000000000005 R09: 0000000000000000 [ 376.182298][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffea00012fe2c0 [ 376.190252][ C1] R13: ffff888057e4d8c0 R14: 0000000000000001 R15: dffffc0000000000 [ 376.198225][ C1] find_lock_entries+0x841/0x1190 [ 376.203243][ C1] ? __pfx_find_lock_entries+0x10/0x10 [ 376.208702][ C1] ? __pfx___might_resched+0x10/0x10 [ 376.213980][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 376.220299][ C1] shmem_undo_range+0x212/0x1570 [ 376.225234][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 376.230647][ C1] shmem_evict_inode+0x3f3/0xc40 [ 376.235576][ C1] ? inode_wait_for_writeback+0x171/0x390 [ 376.241287][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 376.246731][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 376.252793][ C1] ? find_held_lock+0x2b/0x80 [ 376.257455][ C1] ? evict+0x37e/0xad0 [ 376.261510][ C1] ? evict+0x37e/0xad0 [ 376.265566][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 376.271011][ C1] evict+0x3c2/0xad0 [ 376.274898][ C1] ? __pfx_evict+0x10/0x10 [ 376.279314][ C1] ? iput.part.0+0x5fd/0xf50 [ 376.283895][ C1] iput.part.0+0x605/0xf50 [ 376.288299][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 376.293576][ C1] iput+0x35/0x40 [ 376.297195][ C1] dentry_unlink_inode+0x2c0/0x4c0 [ 376.302302][ C1] __dentry_kill+0x1d0/0x690 [ 376.306892][ C1] finish_dput+0x76/0x480 [ 376.311212][ C1] dput.part.0+0x456/0x570 [ 376.315616][ C1] dput+0x1f/0x30 [ 376.319238][ C1] __fput+0x519/0xb50 [ 376.323221][ C1] task_work_run+0x150/0x240 [ 376.327803][ C1] ? __pfx_task_work_run+0x10/0x10 [ 376.332907][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 376.338107][ C1] do_exit+0x951/0x2af0 [ 376.342255][ C1] ? __pfx_do_exit+0x10/0x10 [ 376.346830][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 376.352811][ C1] do_group_exit+0xd5/0x2a0 [ 376.357304][ C1] get_signal+0x20ff/0x2210 [ 376.361812][ C1] ? __pfx_get_signal+0x10/0x10 [ 376.366663][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 376.372210][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 376.378367][ C1] ? rcu_is_watching+0x12/0xc0 [ 376.383130][ C1] irqentry_exit+0x410/0x7e0 [ 376.387716][ C1] asm_exc_page_fault+0x26/0x30 [ 376.392555][ C1] RIP: 0033:0x7f506e59ce61 [ 376.396954][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 376.403005][ C1] RAX: 0000000000000000 RBX: 00007f506e816090 RCX: 00007f506e59ce59 [ 376.410964][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 376.418923][ C1] RBP: 00007f506e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 376.426887][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 376.434843][ C1] R13: 00007f506e816128 R14: 00007f506e816090 R15: 00007fffc94d15d8 [ 376.442819][ C1] [ 376.445825][ C1] task:syz.2.823 state:R running task stack:23656 pid:8419 tgid:8419 ppid:5621 task_flags:0x400640 flags:0x00080000 [ 376.459297][ C1] Call Trace: [ 376.462562][ C1] [ 376.465481][ C1] __schedule+0x1295/0x67a0 [ 376.469978][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 376.475794][ C1] ? __pfx___schedule+0x10/0x10 [ 376.480641][ C1] ? mark_held_locks+0x40/0x70 [ 376.485400][ C1] preempt_schedule_irq+0x50/0x90 [ 376.490424][ C1] irqentry_exit+0x205/0x7e0 [ 376.495012][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 376.500982][ C1] RIP: 0010:unwind_next_frame+0x154c/0x2090 [ 376.506868][ C1] Code: c2 40 0f 9e c6 84 d2 0f 95 c0 40 84 c6 0f 85 90 07 00 00 48 0f bf 69 02 ba 08 00 00 00 4c 89 ef 4d 8d 7d 34 4c 01 f5 48 89 ee cf e8 ff ff 84 c0 0f 84 f3 ed ff ff 48 89 ef e8 9f e2 ff ff 49 [ 376.526462][ C1] RSP: 0018:ffffc9000582e378 EFLAGS: 00000287 [ 376.532510][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff9182eb20 [ 376.540467][ C1] RDX: 0000000000000008 RSI: ffffc9000582ed88 RDI: ffffc9000582e3e8 [ 376.548427][ C1] RBP: ffffc9000582ed88 R08: 0000000000000001 R09: 0000000000000007 [ 376.556382][ C1] R10: 0000000000000200 R11: 0000000000015188 R12: ffffc9000582e438 [ 376.564336][ C1] R13: ffffc9000582e3e8 R14: ffffc9000582edb8 R15: ffffc9000582e41c [ 376.572305][ C1] ? unwind_next_frame+0xd07/0x2090 [ 376.577497][ C1] ? shmem_get_folio_gfp+0x6ab/0x1900 [ 376.582866][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.589011][ C1] arch_stack_walk+0x94/0xf0 [ 376.593602][ C1] ? shmem_write_begin+0x1a4/0x420 [ 376.598713][ C1] stack_trace_save+0x8e/0xc0 [ 376.603386][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 376.608754][ C1] save_stack+0x162/0x1e0 [ 376.613069][ C1] ? __pfx_save_stack+0x10/0x10 [ 376.617905][ C1] ? post_alloc_hook+0x153/0x170 [ 376.622834][ C1] ? get_page_from_freelist+0x11a6/0x33b0 [ 376.628545][ C1] ? __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 376.634604][ C1] ? alloc_pages_mpol+0x1fb/0x540 [ 376.639619][ C1] ? folio_alloc_mpol_noprof+0x36/0x260 [ 376.645156][ C1] ? shmem_alloc_folio+0x135/0x160 [ 376.650258][ C1] ? shmem_alloc_and_add_folio+0x371/0xd40 [ 376.656056][ C1] ? shmem_get_folio_gfp+0x6ab/0x1900 [ 376.661425][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.666360][ C1] __set_page_owner+0x8c/0x540 [ 376.671117][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 376.676478][ C1] ? bad_range+0x257/0x3f0 [ 376.680883][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 376.686080][ C1] post_alloc_hook+0x153/0x170 [ 376.690838][ C1] get_page_from_freelist+0x11a6/0x33b0 [ 376.696382][ C1] ? __pfx___might_resched+0x10/0x10 [ 376.701673][ C1] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 376.707569][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.712502][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.717434][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 376.723760][ C1] ? do_raw_spin_lock+0x128/0x260 [ 376.728783][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 376.734154][ C1] ? find_held_lock+0x2b/0x80 [ 376.738827][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.743757][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 376.749648][ C1] ? policy_nodemask+0xed/0x4f0 [ 376.754489][ C1] alloc_pages_mpol+0x1fb/0x540 [ 376.759329][ C1] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 376.764688][ C1] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 376.770578][ C1] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 376.776472][ C1] folio_alloc_mpol_noprof+0x36/0x260 [ 376.781839][ C1] shmem_alloc_folio+0x135/0x160 [ 376.786768][ C1] shmem_alloc_and_add_folio+0x371/0xd40 [ 376.792402][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 376.798551][ C1] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 376.804538][ C1] shmem_get_folio_gfp+0x6ab/0x1900 [ 376.809744][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 376.815381][ C1] shmem_write_begin+0x1a4/0x420 [ 376.820319][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 376.825777][ C1] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 376.832614][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 376.837810][ C1] generic_perform_write+0x292/0xa40 [ 376.843094][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 376.848896][ C1] ? file_update_time_flags+0x373/0x500 [ 376.854440][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 376.860234][ C1] shmem_file_write_iter+0x10e/0x140 [ 376.865511][ C1] __kernel_write_iter+0x2ac/0x920 [ 376.870614][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 376.876233][ C1] ? __up_read+0x2c1/0x6e0 [ 376.880644][ C1] ? dump_user_range+0x65e/0xad0 [ 376.885572][ C1] ? __sanitizer_cov_trace_pc+0x39/0x70 [ 376.891117][ C1] dump_user_range+0x3f9/0xad0 [ 376.895873][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 376.901151][ C1] ? __pfx_writenote+0x10/0x10 [ 376.905909][ C1] elf_core_dump+0x2d5f/0x3d10 [ 376.910677][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 376.915775][ C1] ? kasan_save_stack+0x3f/0x50 [ 376.920611][ C1] ? kasan_save_stack+0x30/0x50 [ 376.925446][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 376.930195][ C1] ? __kvmalloc_node_noprof+0x360/0xa00 [ 376.935737][ C1] ? vfs_coredump+0x22db/0x5770 [ 376.940576][ C1] ? asm_exc_page_fault+0x26/0x30 [ 376.945589][ C1] ? 0xffffffffff600000 [ 376.949771][ C1] ? vfs_coredump+0x29a0/0x5770 [ 376.954606][ C1] vfs_coredump+0x29a0/0x5770 [ 376.959280][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 376.964294][ C1] ? __lock_acquire+0x4a5/0x2630 [ 376.969232][ C1] ? lock_acquire+0x1b1/0x370 [ 376.973912][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 376.979104][ C1] ? bpf_ksym_find+0x128/0x1c0 [ 376.983871][ C1] ? __kernel_text_address+0xd/0x30 [ 376.989062][ C1] ? unwind_get_return_address+0x59/0xa0 [ 376.994688][ C1] ? arch_stack_walk+0xa6/0xf0 [ 376.999458][ C1] ? __sigqueue_free+0xbe/0x2a0 [ 377.004299][ C1] ? stack_trace_save+0x8e/0xc0 [ 377.009137][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 377.014516][ C1] ? stack_depot_save_flags+0x27/0x9d0 [ 377.019968][ C1] ? __lock_acquire+0x4a5/0x2630 [ 377.024926][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.029686][ C1] ? irqentry_exit+0x24d/0x7e0 [ 377.034446][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 377.039638][ C1] ? irqentry_exit+0x24d/0x7e0 [ 377.044399][ C1] ? proc_coredump_connector+0x2d3/0x4f0 [ 377.050023][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 377.056009][ C1] get_signal+0x2162/0x2210 [ 377.060524][ C1] ? __pfx_get_signal+0x10/0x10 [ 377.065375][ C1] arch_do_signal_or_restart+0x91/0x7e0 [ 377.070920][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 377.077088][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.081850][ C1] irqentry_exit+0x410/0x7e0 [ 377.086440][ C1] asm_exc_page_fault+0x26/0x30 [ 377.091277][ C1] RIP: 0033:0x7f7249b9ce61 [ 377.095678][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 377.101733][ C1] RAX: 0000000000000000 RBX: 00007f7249e16090 RCX: 00007f7249b9ce59 [ 377.109688][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 377.117647][ C1] RBP: 00007f7249c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 377.125604][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 377.133561][ C1] R13: 00007f7249e16128 R14: 00007f7249e16090 R15: 00007ffe62b198b8 [ 377.141532][ C1] [ 377.144539][ C1] rcu: rcu_preempt kthread starved for 10496 jiffies! g36037 f0x0 RCU_GP_DOING_FQS(6) ->state=0x0 ->cpu=1 [ 377.155803][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 377.165751][ C1] rcu: RCU grace-period kthread stack dump: [ 377.171621][ C1] task:rcu_preempt state:R running task stack:28216 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 377.185104][ C1] Call Trace: [ 377.188366][ C1] [ 377.191288][ C1] __schedule+0x1295/0x67a0 [ 377.195800][ C1] ? __pfx___schedule+0x10/0x10 [ 377.200644][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.205411][ C1] preempt_schedule_irq+0x50/0x90 [ 377.210430][ C1] irqentry_exit+0x205/0x7e0 [ 377.215011][ C1] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 377.221421][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 377.226869][ C1] RIP: 0010:force_qs_rnp+0x15/0x920 [ 377.232057][ C1] Code: 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 60 0f b6 05 68 d2 91 0c 05 61 d2 91 0c 00 48 89 7c 24 08 88 05 55 d2 91 0c 8b 05 97 8e [ 377.251652][ C1] RSP: 0018:ffffc90000157c10 EFLAGS: 00000282 [ 377.257702][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000006 [ 377.265663][ C1] RDX: 1ffffffff1c81e50 RSI: ffffffff8df22414 RDI: ffffffff81ed69e0 [ 377.273620][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 377.281574][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8e40f280 [ 377.289528][ C1] R13: ffffc90000157d10 R14: 0000000000000000 R15: 1ffff9200002af96 [ 377.297493][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 377.303637][ C1] ? find_held_lock+0x2b/0x80 [ 377.308301][ C1] ? rcu_gp_fqs_loop+0x1d5/0x900 [ 377.313227][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.317984][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.323786][ C1] rcu_gp_fqs_loop+0x53c/0x900 [ 377.328544][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 377.333823][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 377.339274][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 377.344203][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 377.349390][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.355191][ C1] rcu_gp_kthread+0x179/0x230 [ 377.359858][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.365046][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.370845][ C1] ? __kthread_parkme+0x18c/0x230 [ 377.375862][ C1] ? kthread+0x13a/0x450 [ 377.380092][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 377.385281][ C1] kthread+0x370/0x450 [ 377.389338][ C1] ? __pfx_kthread+0x10/0x10 [ 377.393923][ C1] ret_from_fork+0x72b/0xd50 [ 377.398505][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 377.403608][ C1] ? __switch_to+0x800/0x1100 [ 377.408281][ C1] ? __pfx_kthread+0x10/0x10 [ 377.412864][ C1] ret_from_fork_asm+0x1a/0x30 [ 377.417636][ C1] [ 377.420640][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 377.426949][ C1] CPU: 1 UID: 0 PID: 7490 Comm: kworker/u8:13 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.438045][ C1] Tainted: [L]=SOFTLOCKUP [ 377.442351][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.452391][ C1] Workqueue: events_unbound toggle_allocation_gate [ 377.458880][ C1] RIP: 0010:smp_call_function_many_cond+0x589/0x1700 [ 377.465544][ C1] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 39 83 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 63 0f 00 00 8b 45 08 31 [ 377.485138][ C1] RSP: 0018:ffffc90005367870 EFLAGS: 00000293 [ 377.491190][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fc2bcd [ 377.499144][ C1] RDX: ffff8880283d0000 RSI: ffffffff81fc2ba7 RDI: ffff8880283d0000 [ 377.507101][ C1] RBP: ffff8880b8443320 R08: 0000000000000005 R09: 0000000000000000 [ 377.515059][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 377.523024][ C1] R13: ffffed1017088665 R14: 0000000000000001 R15: ffff8880b853c5c0 [ 377.530982][ C1] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 377.539898][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.546471][ C1] CR2: 00007f506e5ea540 CR3: 000000000e596000 CR4: 00000000003526f0 [ 377.554432][ C1] Call Trace: [ 377.557695][ C1] [ 377.560618][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 377.565641][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 377.571957][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 377.577326][ C1] ? __pfx___text_poke+0x10/0x10 [ 377.582258][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 377.587278][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 377.592382][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 377.598870][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 377.604582][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 377.610811][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 377.617039][ C1] ? find_held_lock+0x2b/0x80 [ 377.621713][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 377.627686][ C1] jump_label_update+0x37a/0x550 [ 377.632618][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 377.638510][ C1] static_key_enable+0x1a/0x20 [ 377.643260][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 377.648532][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 377.654414][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.659178][ C1] process_one_work+0xa0e/0x1980 [ 377.664117][ C1] ? __pfx_process_one_work+0x10/0x10 [ 377.669492][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 377.675376][ C1] worker_thread+0x5ef/0xe50 [ 377.679969][ C1] ? kthread+0x13a/0x450 [ 377.684198][ C1] ? __pfx_worker_thread+0x10/0x10 [ 377.689300][ C1] kthread+0x370/0x450 [ 377.693358][ C1] ? __pfx_kthread+0x10/0x10 [ 377.697944][ C1] ret_from_fork+0x72b/0xd50 [ 377.702527][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 377.707631][ C1] ? __switch_to+0x800/0x1100 [ 377.712301][ C1] ? __pfx_kthread+0x10/0x10 [ 377.716882][ C1] ret_from_fork_asm+0x1a/0x30 [ 377.721651][ C1]