last executing test programs: 1m14.617181969s ago: executing program 1 (id=437): syz_open_procfs$namespace(0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000000c}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={@multicast2, 0x1, 0x0, 0x20, 0x0, [{@dev}, {@remote}]}}) 1m13.882068773s ago: executing program 2 (id=442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 1m11.1739695s ago: executing program 1 (id=446): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000800d0904000003030000000905be3b"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000026c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$zero(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000380)='\x00'/11, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x7}, 0x8, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) syz_clone(0xa012c000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='fuse\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@mpls_newroute={0xcc, 0x18, 0x400, 0x70bd2d, 0x25dfdbff, {0x1c, 0x10, 0x20, 0x9, 0xff, 0x3, 0xfe, 0x0, 0x2000}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_NEWDST={0x84, 0x13, [{0x1000, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4}, {0xb834b, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0xff}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7f}, {0xfac}, {0x662d, 0x0, 0x1}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8}, {0x48, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xffc00}, {0xd41b, 0x0, 0x1}, {0xc00, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x284}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8b, 0x0, 0x1}, {0x7}, {0x2, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x664, 0x0, 0x1}, {0x6}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xff}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x14, 0x7}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x33}}]}, 0xcc}}, 0x800) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdc02, {0x1, 0x0, 0x106}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4080) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, &(0x7f0000001080)) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) 1m11.017568196s ago: executing program 2 (id=448): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r6 = socket(0x1, 0x3, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000002509000020000000aa23df25150000000b005e00f81c4442d16b3e00"], 0x20}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) 1m10.267156956s ago: executing program 0 (id=451): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x40, 0xf, 0x6, "ae2964eb4fe2"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000100)={0x0, 0x5, 0x2, "af0b"}, 0x0, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x80001, &(0x7f0000000140)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@volatile}], [{@permit_directio}, {@smackfsfloor={'smackfsfloor', 0x3d, '@/]'}}, {@seclabel}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m10.093486112s ago: executing program 4 (id=453): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1331b44c01681fe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x7, &(0x7f0000000140)={[0xc000000]}, 0x8) 1m9.942763027s ago: executing program 4 (id=454): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x4c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m9.170640008s ago: executing program 2 (id=457): syz_open_procfs$namespace(0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x1000004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x20000}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000000c}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfe, 0x0, 0x7fffffff}]}) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={@multicast2, 0x1, 0x0, 0x20, 0x0, [{@dev}, {@remote}]}}) 1m8.343168931s ago: executing program 3 (id=459): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000000680)=[@increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x400) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x628000, 0x9d) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000500)={"6306ffe10000010000e137c6e7f24b7891d6f012acc9fe23b2a300", 0x2, 0x1, 0x0, 0x1, 0x81, 0x5, 0x1, 0x6, [0x6, 0x4, 0x6, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x80007, 0x3, 0x4, 0x7ee, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x5cd0, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1c}, &(0x7f0000000100), &(0x7f00000000c0)=0x0, &(0x7f0000000480)=0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) r5 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0xffff, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x5, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4005) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4048054}, 0x5c055) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32=r6, @ANYRES8=r6, @ANYBLOB='6\x00'/12, @ANYRES32=r7, @ANYRESDEC=r4, @ANYBLOB="1480cf3ba8f42a7b334a95d9f32b8b360ae219f08120139cc5c54d50a70b17b431f034ad5785484e011f64a90d005d8c1eb5eb7eb547ebf4cc5b82a7285e231b8b46a9fb62206fb8aaa1c4d2d8fc2c0f90d01c315c13574fc65d7835a21cb1b35420a976b85cec3358c98d0b5345cf67f280532463e447521b616e9de194c8d3bf0f6b6d4c6f130e79276acfc9eb1699ee741f03798a77f9281bbd656384313509947f9fe55a2ecba440d341b85c5ab0cd1b9e65e696d09831f9dcd4ecb7dbf78d8d5c3bf9d95a2ab0c848b6b2b2b2bfb8c95ba80935354a550cbd05f2a7678a0785002b0fc1379bdb8139595c2cc58108111aed0664da4309c6d8bb1c91eb87365ea82b78c41a2bcb0dfa0248dc362ebf730ae619adda7413fac9281ed69deea6ca48983347e8e4cefc13a6f34ba83870", @ANYRES32=r3, @ANYRES16=r7, @ANYRES8=r4, @ANYRESHEX=r3, @ANYRESHEX=r9, @ANYRES16=r8], 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000005c0)={0x0, 0x38, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec16780b72164}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000200), 0x3) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1m8.238695549s ago: executing program 0 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) capset(0xfffffffffffffffd, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x100, 0x80000000, 0x3, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x3ff, 0x7, 0x1, 0x2, 0xfd, 0x0, 0x9, 0x40002, 0x80000000, 0x8, 0x2, 0x0, 0x1, 0x5, 0xf39e, 0x3, 0xfc, 0xa6b5, 0x24a05ffd, 0x7]}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="25003300d00000000802110000010802110000005050505050500000030100008000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4084}, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) 1m7.831770414s ago: executing program 4 (id=461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0xff, 0xc0000, 0x200, 0x8, 0x8, 0x1, 0x1, 0x4, 0x0, 0xde3c, 0x7, 0xfe5e, 0x5, 0x8, 0x3], 0x58000, 0x200}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@canfd={0xd, {{0x4, 0x0, 0x0, 0x1}, 0x23, 0x1, 0x0, 0x0, "f6804880d1c4fcb1e1e10cf8aec470bb4eda5f47aed2296cf3b21dfa46d8bbc7db6123a242b86bce84dd54bc8f94c2209d1f724ed0ebe42f3723cfab690e85a5"}}}}, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af000000190902120001000000000904"], 0x0) cachestat(r1, &(0x7f0000000300)={0x9}, &(0x7f0000000340), 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[], 0x58}}, 0x8000000) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x109000) write$sndseq(r3, &(0x7f0000000140)=[{0x9, 0x6, 0xfc, 0x3, @tick=0x2, {0xf, 0xbf}, {0x0, 0x5}, @addr={0x0, 0x3}}, {0x0, 0xe3, 0x4, 0x1, @tick, {0x2, 0xb0}, {0x5, 0xcc}, @control={0x1, 0x8, 0x2}}, {0x9, 0x2, 0x5, 0x7, @tick=0x1, {0x80, 0x1}, {0x7, 0x8}, @raw8={"e0108d016e5ee0ccd30f7513"}}], 0x54) 1m7.701190072s ago: executing program 1 (id=462): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x1ff}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x16, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff80d}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r2 = syz_open_dev$MSR(&(0x7f0000001800), 0x9c, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) read$msr(r2, &(0x7f0000025300)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003d00)=[{{&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/190, 0xbe}, {&(0x7f0000001a00)=""/118, 0x76}], 0x2, &(0x7f0000000480)=""/37, 0x25}, 0xe8}, {{&(0x7f00000004c0)=@nl=@unspec, 0x80, &(0x7f0000003c80)=[{&(0x7f0000000540)=""/19, 0x13}, {&(0x7f0000000600)=""/60, 0x3c}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/228, 0xe4}, {&(0x7f0000001740)}, {&(0x7f0000001840)=""/236, 0xec}, {&(0x7f0000001940)=""/183, 0xb7}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x8}, 0x4}], 0x2, 0x10002, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f00008a9000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r4]) socket(0xa, 0x5, 0x0) 1m7.274602586s ago: executing program 0 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6011}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0xc8, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc160}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc34}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x108, 0xc, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe8, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "b65638802d60032c2b573a2abcc9137c1a7e5e2f11518bc25cda3dc039960bea0d0faa02bd5d3f7e6b2b93b5cf5eae5d5c2b014470e562460a91cf36c5ab75f1a6dd64e18b00eb962c5bee2cf28299e59a2dd8005bccd6c4cf73dd34bd64281120952312554b099a2674b8629d6b4c7a3ea6620427c9fc923928c359778b86580b2360f068e8c7b63fd71b1725246e596a6019093570cce70f29c2d8c9c7e8d781eea4a49bb3cb929d6bb86deb0ab5578d6a450a720221d32ac2b15598040dc33b7c28e91744ecfaa0c7b967a24e8e4f25"}, @NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x278}, 0x1, 0x0, 0x0, 0xdf9efe94dd78e5f5}, 0x20004084) 1m6.634498453s ago: executing program 3 (id=464): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0xee00) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003380)=ANY=[@ANYBLOB="90100000460007012bbd7000fddbdf25017c00007c1003"], 0x1090}, 0x1, 0x0, 0x0, 0x4048011}, 0x24004800) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) 1m6.572079651s ago: executing program 0 (id=465): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0xf000, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) 1m6.48769097s ago: executing program 2 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_usb_connect$uac3(0x3, 0x93, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002000000400c201810400001020301090281000301018002080b0001010130040904000000010130000a24ff07000000000000132403060703050404ff070000030001000400090401000009023000090401010101023000090501099f030610040a25250000000007599f090402000001023000090402010101023000000000000000000805010a2525fc660000060600"], 0x0) socket$unix(0x1, 0x5, 0x0) r4 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/xfrm_stat\x00') openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r5, &(0x7f0000000d40)=""/43, 0x2b) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r7 = inotify_init() r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x330e, {{0xa, 0x0, 0x0, @loopback, 0xb7fe}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r9 = socket(0x1e, 0xa, 0x4) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) prctl$PR_SCHED_CORE(0x4d, 0x3, 0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r7, 0xffffffffffffffff, 0x0) 1m6.254841309s ago: executing program 3 (id=467): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b80500000066b9418739760f01c10f32663501000000b83f000f00d078a10f38828e4258660f08676ac744240072d13bf96766c744240601000000f20f78ecf5543e660f3829544e66b9800000c00f3d6635002000000f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc4cec0f01310f019c09000f01c2", 0x7c}], 0x1, 0x58, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = dup(r3) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r7 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000040)='\xfa\x97\x8a\xe1D', 0x0) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x02\x00', 0x240000, 0x0) renameat2(r8, &(0x7f00000001c0)='./file0\x00', r8, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r8, &(0x7f00000000c0)='.\x02\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0000000080ffff0800000009000000000004008bb95e75effbdfc08693f1c43a9ce9fd24272bf1f7b8eb187fe18a8994bb16b3a5097a5c90232a227c3db6833b591a8739c9b75bab1f", @ANYRES32=r4, @ANYBLOB="0600000400"/20, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0500000004000000050000000800"/28], 0x50) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x18, 0x6, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 1m6.190782529s ago: executing program 0 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x11, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) syz_usb_connect$uac3(0x3, 0x93, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010002000000400c201810400001020301090281000301018002080b0001010130040904000000010130000a24ff07000000000000132403060703050404ff070000030001000400090401000009023000090401010101023000090501099f030610040a25250000000007599f090402000001023000090402010101023000000000000000000805010a2525fc660000060600"], 0x0) socket$unix(0x1, 0x5, 0x0) r4 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/xfrm_stat\x00') openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r5, &(0x7f0000000d40)=""/43, 0x2b) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) inotify_init() r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x330e, {{0xa, 0x0, 0x0, @loopback, 0xb7fe}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r8 = socket(0x1e, 0xa, 0x4) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 1m6.190559883s ago: executing program 3 (id=469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 1m5.957349421s ago: executing program 3 (id=470): r0 = epoll_create(0x9) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = getpgrp(0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xe5d7, 0x226300) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0xf, 0x3, 0x1000, &(0x7f0000000140)={0x0, 0x0}) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043c07aaaaaaaa5172656ac0e44fb08afdc8e117cb6220b9daf2556f3df94528637d424d20fb3890e65575d8"], 0xa) dup(0xffffffffffffffff) setfsgid(0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x38}}, 0x10) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet6_buf(r5, 0x29, 0x1d, &(0x7f0000000280)=""/97, &(0x7f0000000340)=0x61) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r7, &(0x7f0000000080), 0x4001) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m5.906803726s ago: executing program 4 (id=471): syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mprotect(&(0x7f000038a000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) 1m4.466027432s ago: executing program 4 (id=472): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000800d0904000003030000000905be3b"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f00000026c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$zero(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xb, 0x0, &(0x7f0000000380)='\x00'/11, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x7}, 0x8, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0}) syz_clone(0xa012c000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='fuse\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@mpls_newroute={0xcc, 0x18, 0x400, 0x70bd2d, 0x25dfdbff, {0x1c, 0x10, 0x20, 0x9, 0xff, 0x3, 0xfe, 0x0, 0x2000}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_NEWDST={0x84, 0x13, [{0x1000, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4}, {0xb834b, 0x0, 0x1}, {0x401, 0x0, 0x1}, {0xff}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7f}, {0xfac}, {0x662d, 0x0, 0x1}, {0x9}, {0x9, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8}, {0x48, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xffc00}, {0xd41b, 0x0, 0x1}, {0xc00, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x284}, {0x6, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x8b, 0x0, 0x1}, {0x7}, {0x2, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x664, 0x0, 0x1}, {0x6}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xff}, @RTA_MULTIPATH={0xc, 0x9, {0x2, 0x14, 0x7}}, @RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, {0x33}}]}, 0xcc}}, 0x800) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdc02, {0x1, 0x0, 0x106}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4080) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x0, 0xfff3}, {0x9, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041044}, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, &(0x7f0000001080)) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) 1m4.411724722s ago: executing program 3 (id=473): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0xfffffffffffffdc9}, './file0\x00'}) r3 = epoll_create1(0x0) splice(r1, 0x0, r3, 0x0, 0x20f39, 0x8) r4 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, &(0x7f000001be80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0f00000000000003000008000000180001801400020073797a5f74756e0000000000000000000800028004000380"], 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x80000) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000200)="68841e27"}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) 1m3.186767687s ago: executing program 1 (id=474): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') (async) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x4b75) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) link(0x0, 0x0) (async) lstat(0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e780cc08c0070515c5b80102030109023400010000800009040000038e4ee2000905000000041a06010905010300021007c109050c04400003030f07059acb"], 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 1m3.05116944s ago: executing program 2 (id=475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6011}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0xc8, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc160}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc34}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x108, 0xc, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe8, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd5, 0x1, "b65638802d60032c2b573a2abcc9137c1a7e5e2f11518bc25cda3dc039960bea0d0faa02bd5d3f7e6b2b93b5cf5eae5d5c2b014470e562460a91cf36c5ab75f1a6dd64e18b00eb962c5bee2cf28299e59a2dd8005bccd6c4cf73dd34bd64281120952312554b099a2674b8629d6b4c7a3ea6620427c9fc923928c359778b86580b2360f068e8c7b63fd71b1725246e596a6019093570cce70f29c2d8c9c7e8d781eea4a49bb3cb929d6bb86deb0ab5578d6a450a720221d32ac2b15598040dc33b7c28e91744ecfaa0c7b967a24e8e4f25"}, @NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x278}, 0x1, 0x0, 0x0, 0xdf9efe94dd78e5f5}, 0x20004084) 1m2.779948046s ago: executing program 2 (id=476): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02008001040000000800180001"], 0x50) 1m2.690735577s ago: executing program 1 (id=477): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040']) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8876, 0x40, 0xffffffff, 0x100002cf}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r0, 0x0) 1m2.332317398s ago: executing program 1 (id=478): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0) close(0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x2c020000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000580)=0x3) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m1.590860709s ago: executing program 0 (id=479): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe6f, &(0x7f0000000280)=0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x7}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x57}]}}]}, 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 58.703121954s ago: executing program 4 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 0s ago: executing program 32 (id=479): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe6f, &(0x7f0000000280)=0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='nv', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x2, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x7}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x57}]}}]}, 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): -90 [ 108.798693][ T30] audit: type=1400 audit(1779267918.349:414): avc: denied { ioctl } for pid=6370 comm="syz.2.139" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 108.823075][ T5804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.843006][ T5804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.887991][ T30] audit: type=1400 audit(1779267918.559:415): avc: denied { ioctl } for pid=6348 comm="syz.0.135" path="/dev/btrfs-control" dev="devtmpfs" ino=1315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.904701][ T5804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.950905][ T5706] usb 5-1: Can't get UAC3 power state for id 10 [ 108.969031][ T5706] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 108.978370][ T5804] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 108.998692][ T5804] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 109.022721][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 109.033026][ T5706] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 109.049875][ T5706] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 109.089510][ T30] audit: type=1400 audit(1779267918.919:416): avc: denied { ioctl } for pid=6385 comm="syz.3.142" path="socket:[11484]" dev="sockfs" ino=11484 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.116029][ T5706] usb 5-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 109.118145][ T6386] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 109.143543][ T5804] usb 1-1: USB disconnect, device number 6 [ 109.145524][ T6386] bond0: (slave lo): Enslaving as an active interface with an up link [ 109.160933][ T6386] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 109.351266][ T5706] usb 5-1: USB disconnect, device number 10 [ 109.432179][ T30] audit: type=1400 audit(1779267919.259:417): avc: denied { create } for pid=6389 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.501078][ T30] audit: type=1400 audit(1779267919.289:418): avc: denied { read write } for pid=6392 comm="syz.3.144" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.753132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 111.761804][ T6402] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.807004][ T6445] capability: warning: `syz.1.160' uses deprecated v2 capabilities in a way that may be insecure [ 114.012088][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 114.012129][ T30] audit: type=1400 audit(1779267923.829:432): avc: denied { mounton } for pid=6444 comm="syz.1.160" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 114.016339][ T6448] Mount JFS Failure: -5 [ 114.085595][ T6449] netlink: 67 bytes leftover after parsing attributes in process `syz.2.161'. [ 114.637107][ T5706] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.190380][ T30] audit: type=1400 audit(1779267924.959:433): avc: denied { mount } for pid=6451 comm="syz.3.163" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.633286][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 115.642480][ T5706] usb 3-1: Using ep0 maxpacket: 32 [ 115.642560][ T30] audit: type=1400 audit(1779267924.969:434): avc: denied { mounton } for pid=6451 comm="syz.3.163" path="/36/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 115.644046][ T5706] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 116.521451][ T5706] usb 3-1: config 0 has no interface number 0 [ 116.528010][ T5706] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.539093][ T5706] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 116.550859][ T5706] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 116.633799][ T5706] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 116.664759][ T5706] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 116.704694][ T5706] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 116.736433][ T5706] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 116.772769][ T5706] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 116.803229][ T5706] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 116.822933][ T5706] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.889506][ T30] audit: type=1400 audit(1779267926.719:435): avc: denied { connect } for pid=6464 comm="syz.0.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 116.915357][ T5706] usb 3-1: string descriptor 0 read error: -71 [ 116.937627][ T5706] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 116.953391][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.971913][ T30] audit: type=1400 audit(1779267926.769:436): avc: denied { write } for pid=6464 comm="syz.0.157" path="socket:[11262]" dev="sockfs" ino=11262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.004314][ T5706] usb 3-1: config 0 descriptor?? [ 117.020390][ T5706] usb 3-1: can't set config #0, error -71 [ 117.042640][ T5706] usb 3-1: USB disconnect, device number 9 [ 117.383784][ T30] audit: type=1400 audit(1779267927.219:437): avc: denied { ioctl } for pid=6464 comm="syz.0.157" path="socket:[11589]" dev="sockfs" ino=11589 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.793208][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 118.433037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.602918][ T1221] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.720318][ T30] audit: type=1400 audit(1779267928.519:438): avc: denied { create } for pid=6480 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.740791][ T30] audit: type=1400 audit(1779267928.549:439): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.786365][ T30] audit: type=1400 audit(1779267928.619:440): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 118.872948][ T1221] usb 3-1: Using ep0 maxpacket: 16 [ 118.896192][ T1221] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 118.905369][ T1221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.914542][ T1221] usb 3-1: Product: syz [ 118.918834][ T1221] usb 3-1: Manufacturer: syz [ 118.924146][ T1221] usb 3-1: SerialNumber: syz [ 119.018853][ T6486] syzkaller0: entered promiscuous mode [ 119.024402][ T6486] syzkaller0: entered allmulticast mode [ 119.367299][ T1221] usb 3-1: config 0 descriptor?? [ 119.391552][ T30] audit: type=1400 audit(1779267929.219:441): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 119.460919][ T1221] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 119.567634][ T6490] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.577637][ T30] audit: type=1400 audit(1779267929.409:442): avc: denied { open } for pid=6489 comm="syz.4.172" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 119.676850][ T30] audit: type=1400 audit(1779267929.429:443): avc: denied { ioctl } for pid=6489 comm="syz.4.172" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 119.796655][ T6497] netlink: 136 bytes leftover after parsing attributes in process `syz.4.174'. [ 119.815864][ T6497] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 119.918102][ T6468] afs: Unknown parameter '0x0000000000000000' [ 119.938457][ T30] audit: type=1400 audit(1779267929.769:444): avc: denied { append } for pid=6496 comm="syz.4.174" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.965320][ T1221] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 119.979248][ T1221] visor 3-1:0.0: probe with driver visor failed with error -71 [ 119.983092][ T5804] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 119.989423][ T1221] usb 3-1: USB disconnect, device number 10 [ 120.004531][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 120.023969][ T30] audit: type=1400 audit(1779267929.859:445): avc: denied { module_request } for pid=6496 comm="syz.4.174" kmod=72746E6C2D6C696E6B2D626F6E6402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 120.164865][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.182813][ T5804] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.192216][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.233696][ T5804] usb 2-1: config 0 descriptor?? [ 120.255094][ T5804] pwc: Askey VC010 type 2 USB webcam detected. [ 120.456201][ T5804] pwc: send_video_command error -71 [ 120.471028][ T5804] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 120.498197][ T5804] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 120.536428][ T5804] usb 2-1: USB disconnect, device number 10 [ 120.639337][ T6509] netlink: 67 bytes leftover after parsing attributes in process `syz.3.176'. [ 120.886352][ T30] audit: type=1400 audit(1779267930.719:446): avc: denied { setcurrent } for pid=6521 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 120.916106][ T1221] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 120.936621][ T30] audit: type=1401 audit(1779267930.739:447): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 120.975422][ T5804] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 121.151779][ T1221] usb 4-1: Using ep0 maxpacket: 32 [ 121.161316][ T1221] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 121.170631][ T5804] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.183030][ T5804] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.192139][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.195064][ T1221] usb 4-1: config 0 has no interface number 0 [ 121.204963][ T5804] usb 2-1: config 0 descriptor?? [ 121.270719][ T5804] pwc: Askey VC010 type 2 USB webcam detected. [ 121.809326][ T6495] netlink: 840 bytes leftover after parsing attributes in process `syz.1.175'. [ 121.936342][ T5804] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.970346][ T5804] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.996321][ T5804] pwc: recv_control_msg error -32 req 02 val 2c00 [ 122.027791][ T5804] pwc: recv_control_msg error -32 req 04 val 1000 [ 122.062578][ T5804] pwc: recv_control_msg error -32 req 04 val 1300 [ 122.088444][ T5804] pwc: recv_control_msg error -32 req 04 val 1400 [ 122.111327][ T5804] pwc: recv_control_msg error -32 req 02 val 2000 [ 122.143475][ T5804] pwc: recv_control_msg error -32 req 02 val 2100 [ 122.154389][ T5804] pwc: recv_control_msg error -32 req 04 val 1500 [ 122.165054][ T1221] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 122.175779][ T5804] pwc: recv_control_msg error -71 req 02 val 2500 [ 122.202549][ T1221] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 122.220480][ T5804] pwc: recv_control_msg error -71 req 02 val 2400 [ 122.248109][ T5804] pwc: recv_control_msg error -71 req 02 val 2600 [ 122.256333][ T1221] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 122.288695][ T1221] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 122.313934][ T5804] pwc: recv_control_msg error -71 req 02 val 2900 [ 122.331906][ T1221] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 122.355019][ T5804] pwc: recv_control_msg error -71 req 02 val 2800 [ 122.372885][ T1221] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.374846][ T5804] pwc: recv_control_msg error -71 req 04 val 1100 [ 122.400363][ T1221] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.481867][ T1221] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 122.482299][ T5804] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.505382][ T1221] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 122.625508][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 122.666620][ T1221] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.793036][ T1221] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 122.802687][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.809507][ T5804] pwc: Registered as video103. [ 122.841410][ T1221] usb 4-1: Product: syz [ 122.846542][ T5804] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 122.857689][ T1221] usb 4-1: Manufacturer: syz [ 122.884757][ T1221] usb 4-1: SerialNumber: syz [ 122.920966][ T1221] usb 4-1: config 0 descriptor?? [ 122.929384][ T5804] usb 2-1: USB disconnect, device number 11 [ 122.944354][ T6509] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.952122][ T6509] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.961286][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 122.973813][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 123.011997][ T1221] usb 4-1: will this work? Response EP is not usually 3 [ 123.022776][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 123.032813][ T1221] usb 4-1: will this work? Image data EP is not usually 2 [ 123.057979][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 123.081746][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 123.094821][ T1221] scsi host1: microtekX6 [ 123.115674][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.150285][ T9] usb 5-1: config 0 descriptor?? [ 123.223007][ T5706] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.251839][ T1221] usb 4-1: USB disconnect, device number 7 [ 123.379511][ T9] hdpvr 5-1:0.0: firmware version 0x44 dated !5<] [ 123.393481][ T6551] kAFS: unable to lookup cell '' [ 123.402380][ T9] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 123.451479][ T5706] usb 1-1: Using ep0 maxpacket: 16 [ 123.483202][ T5706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.505204][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.539127][ T5706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.549065][ T5706] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.564511][ T5706] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.591889][ T6540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.592728][ T5706] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 123.611526][ T5706] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 123.620867][ T5706] usb 1-1: Manufacturer: syz [ 123.635621][ T6540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.660886][ T5706] usb 1-1: config 0 descriptor?? [ 123.673238][ T5617] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 123.843537][ T5617] usb 3-1: Using ep0 maxpacket: 16 [ 123.871469][ T5617] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 123.907080][ T5617] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.927570][ T6554] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 123.952301][ T5617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.983991][ T9] hdpvr 5-1:0.0: Could not setup controls [ 123.997185][ T5617] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.008027][ T9] hdpvr 5-1:0.0: registering videodev failed [ 124.021082][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.058826][ T5617] usb 3-1: Product: syz [ 124.070834][ T9] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 124.084635][ T5617] usb 3-1: Manufacturer: syz [ 124.112365][ T5617] usb 3-1: SerialNumber: syz [ 124.127758][ T9] usb 5-1: USB disconnect, device number 11 [ 124.150333][ T5617] usb 3-1: 0:2 : does not exist [ 124.209073][ T6554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.250152][ T6554] team0: Port device netdevsim1 added [ 124.256468][ T5706] rc_core: IR keymap rc-hauppauge not found [ 124.289000][ T5706] Registered IR keymap rc-empty [ 124.317208][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.353444][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.394563][ T5706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 124.443204][ T5706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 124.490787][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.522980][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.563196][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.608287][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.653522][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.693014][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.722984][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.762938][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.833001][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.886264][ T5706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 124.934155][ T5706] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 124.965793][ T5706] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 125.029164][ T5706] usb 1-1: USB disconnect, device number 7 [ 125.030915][ T5617] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 125.143195][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 125.235468][ T5617] usb 3-1: USB disconnect, device number 11 [ 125.306399][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.355209][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.381364][ T9] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=87.bd [ 125.404288][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.431290][ T9] usb 5-1: Product: syz [ 125.444603][ T9] usb 5-1: Manufacturer: syz [ 125.460631][ T9] usb 5-1: SerialNumber: syz [ 125.485391][ T9] usb 5-1: config 0 descriptor?? [ 125.506315][ T9] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 125.726638][ T9] usb 5-1: USB disconnect, device number 12 [ 126.138179][ T6577] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.193'. [ 126.156887][ T30] audit: type=1400 audit(1779267935.989:448): avc: denied { write } for pid=6573 comm="syz.2.193" name="sg0" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 126.254262][ T30] audit: type=1400 audit(1779267935.989:449): avc: denied { accept } for pid=6573 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.358620][ T30] audit: type=1400 audit(1779267936.189:450): avc: denied { write } for pid=6580 comm="syz.1.196" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 126.384395][ T6582] random: crng reseeded on system resumption [ 126.421805][ T30] audit: type=1400 audit(1779267936.239:451): avc: denied { ioctl } for pid=6580 comm="syz.1.196" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 126.508783][ T30] audit: type=1400 audit(1779267936.239:452): avc: denied { create } for pid=6580 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 126.565457][ T30] audit: type=1400 audit(1779267936.349:453): avc: denied { bind } for pid=6579 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.783228][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 127.032680][ T6607] warning: `syz.3.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.043384][ T6606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6606 comm=syz.4.201 [ 127.049130][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 127.096370][ T6608] syz.0.200 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.507116][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.520896][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.527567][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.544626][ T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 127.564987][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.579261][ T9] usb 2-1: Product: syz [ 127.585589][ T9] usb 2-1: Manufacturer: syz [ 127.594348][ T9] usb 2-1: SerialNumber: syz [ 127.785541][ T6611] Illegal XDP return value 14 on prog (id 30) dev N/A, expect packet loss! [ 127.962918][ T5706] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.073074][ T5804] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 128.084406][ T6624] /dev/nullb0: Can't open blockdev [ 128.123045][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 128.132423][ T5706] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 128.141699][ T5706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.164758][ T5706] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.228646][ T5706] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.273048][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 128.300175][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.324083][ T5804] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.398198][ T5706] usb 4-1: Product: syz [ 128.428913][ T5804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.444254][ T805] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 128.454307][ T5706] usb 4-1: Manufacturer: syz [ 128.478158][ T5706] usb 4-1: SerialNumber: syz [ 128.495405][ T5804] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 128.518718][ T5706] usb 4-1: 0:2 : does not exist [ 128.528805][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.543274][ T5804] usb 5-1: config 0 descriptor?? [ 128.586175][ T6628] FAULT_INJECTION: forcing a failure. [ 128.586175][ T6628] name failslab, interval 1, probability 0, space 0, times 0 [ 128.600230][ T6628] CPU: 1 UID: 0 PID: 6628 Comm: syz.2.207 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.600255][ T6628] Tainted: [L]=SOFTLOCKUP [ 128.600260][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.600269][ T6628] Call Trace: [ 128.600274][ T6628] [ 128.600279][ T6628] dump_stack_lvl+0x100/0x190 [ 128.600296][ T6628] should_fail_ex.cold+0x5/0xa [ 128.600320][ T6628] should_failslab+0xc2/0x120 [ 128.600339][ T6628] __kvmalloc_node_noprof+0xfa/0xa00 [ 128.600364][ T6628] ? seq_read_iter+0x819/0x1270 [ 128.600389][ T6628] seq_read_iter+0x819/0x1270 [ 128.600405][ T6628] ? _kstrtoull+0x13c/0x1f0 [ 128.600418][ T6628] ? __pfx__kstrtoull+0x10/0x10 [ 128.600432][ T6628] seq_read+0x33b/0x4c0 [ 128.600445][ T6628] ? __pfx_seq_read+0x10/0x10 [ 128.600461][ T6628] ? __lock_acquire+0x4a5/0x2630 [ 128.600485][ T6628] ? import_ubuf+0x1b6/0x220 [ 128.600511][ T6628] ? selinux_file_permission+0x8f/0x6d0 [ 128.600536][ T6628] ? __pfx_seq_read+0x10/0x10 [ 128.600555][ T6628] proc_reg_read+0x240/0x330 [ 128.600571][ T6628] ? __pfx_proc_reg_read+0x10/0x10 [ 128.600586][ T6628] vfs_readv+0x5d8/0x8d0 [ 128.600604][ T6628] ? __pfx_vfs_readv+0x10/0x10 [ 128.600621][ T6628] ? find_held_lock+0x2b/0x80 [ 128.600652][ T6628] ? __fget_files+0x21f/0x3d0 [ 128.600679][ T6628] ? do_preadv+0x1ac/0x270 [ 128.600690][ T6628] do_preadv+0x1ac/0x270 [ 128.600701][ T6628] ? __pfx_do_preadv+0x10/0x10 [ 128.600713][ T6628] ? rcu_is_watching+0x12/0xc0 [ 128.600732][ T6628] do_syscall_64+0x10b/0xf80 [ 128.600751][ T6628] ? clear_bhb_loop+0x40/0x90 [ 128.600770][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.600786][ T6628] RIP: 0033:0x7f124539ce59 [ 128.600799][ T6628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.600814][ T6628] RSP: 002b:00007f12435f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 128.600830][ T6628] RAX: ffffffffffffffda RBX: 00007f1245615fa0 RCX: 00007f124539ce59 [ 128.600837][ T6628] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 128.600843][ T6628] RBP: 00007f12435f6090 R08: 0000000000000100 R09: 0000000000000000 [ 128.600850][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.600856][ T6628] R13: 00007f1245616038 R14: 00007f1245615fa0 R15: 00007fff8c13f4a8 [ 128.600870][ T6628] [ 128.864879][ T805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 128.879490][ T805] usb 1-1: string descriptor 0 read error: -22 [ 128.885776][ T805] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 128.894902][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.992728][ T6630] random: crng reseeded on system resumption [ 129.760490][ T5706] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 129.812111][ T805] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 129.825300][ T5706] usb 4-1: USB disconnect, device number 8 [ 129.844757][ T5804] usbhid 5-1:0.0: can't add hid device: -71 [ 129.851931][ T5804] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 129.882232][ T5804] usb 5-1: USB disconnect, device number 13 [ 129.964743][ T9] usb 2-1: Can't get UAC3 power state for id 10 [ 129.969023][ T805] usb 1-1: USB disconnect, device number 8 [ 129.992370][ T9] usb 2-1: BAAD HEADSET c_chmask mismatch [ 130.000036][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 130.039879][ T9] usb 2-1: cannot find UAC_HEADER [ 130.101435][ T9] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 130.239771][ T9] usb 2-1: USB disconnect, device number 12 [ 130.460156][ T30] audit: type=1400 audit(1779267940.199:454): avc: denied { create } for pid=6640 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.677939][ T30] audit: type=1400 audit(1779267940.209:455): avc: denied { setopt } for pid=6640 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.952593][ T30] audit: type=1400 audit(1779267940.209:456): avc: denied { connect } for pid=6640 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.195900][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.203752][ T6648] overlayfs: failed lookup in lower (newroot/43, name='bus', err=-40): overlapping layers [ 131.227478][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 131.234401][ T6648] overlayfs: failed lookup in lower (newroot/43, name='bus', err=-40): overlapping layers [ 131.246922][ T6648] overlayfs: failed lookup in lower (newroot/43, name='file0', err=-40): overlapping layers [ 131.258345][ T6648] overlayfs: failed lookup in lower (newroot/43, name='bus', err=-40): overlapping layers [ 131.270401][ T6648] overlayfs: failed lookup in lower (newroot/43, name='bus', err=-40): overlapping layers [ 131.294279][ T6650] FAULT_INJECTION: forcing a failure. [ 131.294279][ T6650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.307465][ T6650] CPU: 1 UID: 0 PID: 6650 Comm: syz.2.215 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.307490][ T6650] Tainted: [L]=SOFTLOCKUP [ 131.307496][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.307505][ T6650] Call Trace: [ 131.307510][ T6650] [ 131.307515][ T6650] dump_stack_lvl+0x100/0x190 [ 131.307539][ T6650] should_fail_ex.cold+0x5/0xa [ 131.307561][ T6650] _copy_from_user+0x2e/0xd0 [ 131.307586][ T6650] copy_msghdr_from_user+0x9f/0x4f0 [ 131.307610][ T6650] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 131.307644][ T6650] ___sys_sendmsg+0x106/0x1e0 [ 131.307666][ T6650] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.307715][ T6650] __sys_sendmsg+0x170/0x220 [ 131.307733][ T6650] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.307758][ T6650] ? rcu_is_watching+0x12/0xc0 [ 131.307787][ T6650] do_syscall_64+0x10b/0xf80 [ 131.307809][ T6650] ? clear_bhb_loop+0x40/0x90 [ 131.307827][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.307843][ T6650] RIP: 0033:0x7f124539ce59 [ 131.307856][ T6650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.307871][ T6650] RSP: 002b:00007f12435f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.307886][ T6650] RAX: ffffffffffffffda RBX: 00007f1245615fa0 RCX: 00007f124539ce59 [ 131.307897][ T6650] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 131.307906][ T6650] RBP: 00007f12435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.307917][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.307926][ T6650] R13: 00007f1245616038 R14: 00007f1245615fa0 R15: 00007fff8c13f4a8 [ 131.307949][ T6650] [ 131.619827][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.629667][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.675698][ T30] audit: type=1400 audit(1779267941.509:457): avc: denied { accept } for pid=6658 comm="syz.4.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 132.478361][ T9] usb 2-1: Product: syz [ 132.482601][ T9] usb 2-1: Manufacturer: syz [ 132.487281][ T9] usb 2-1: SerialNumber: syz [ 132.571171][ T6668] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 132.577585][ T5617] IPVS: starting estimator thread 0... [ 132.589014][ T30] audit: type=1400 audit(1779267942.419:458): avc: denied { connect } for pid=6663 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.648108][ T30] audit: type=1400 audit(1779267942.419:459): avc: denied { write } for pid=6663 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.668424][ T30] audit: type=1400 audit(1779267942.419:460): avc: denied { shutdown } for pid=6663 comm="syz.3.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.723756][ T6669] IPVS: using max 57 ests per chain, 136800 per kthread [ 133.831733][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 133.843756][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 133.854744][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 133.892861][ T6673] nvme_fabrics: missing parameter 'transport=%s' [ 133.967273][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 134.040125][ T6673] nvme_fabrics: missing parameter 'nqn=%s' [ 134.152280][ T6683] random: crng reseeded on system resumption [ 134.183054][ T5617] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 134.406760][ T5617] usb 4-1: device descriptor read/64, error -71 [ 134.700013][ T9] usb 2-1: USB disconnect, device number 13 [ 134.733327][ T5617] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 135.046913][ T5617] usb 4-1: device descriptor read/64, error -71 [ 135.354044][ T5617] usb usb4-port1: attempt power cycle [ 135.660527][ T6693] netlink: 67 bytes leftover after parsing attributes in process `syz.1.226'. [ 135.932934][ T5617] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.995471][ T5617] usb 4-1: device descriptor read/8, error -71 [ 136.087420][ T6702] capability: warning: `syz.0.229' uses 32-bit capabilities (legacy support in use) [ 136.162915][ T805] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 136.213509][ T5706] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 136.233286][ T5617] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 136.253366][ T5617] usb 4-1: device descriptor read/8, error -71 [ 136.322954][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 136.329202][ T805] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 136.337629][ T805] usb 2-1: config 0 has no interface number 0 [ 136.343852][ T805] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.355707][ T805] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 136.364463][ T5617] usb usb4-port1: unable to enumerate USB device [ 136.368126][ T805] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 136.373966][ T5619] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 136.385175][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 136.397861][ T805] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 136.408206][ T805] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 136.420024][ T805] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.430154][ T805] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 136.440163][ T805] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 136.451580][ T805] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 136.462695][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.475998][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.485851][ T805] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.498997][ T5706] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.511938][ T5706] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.521299][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.530569][ T805] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 136.540086][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.548763][ T5706] usb 3-1: config 0 descriptor?? [ 136.553943][ T805] usb 2-1: Product: syz [ 136.554772][ T5619] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.559067][ T805] usb 2-1: Manufacturer: syz [ 136.578460][ T5619] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 136.580156][ T805] usb 2-1: SerialNumber: syz [ 136.594459][ T5619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 136.602639][ T5619] usb 5-1: Product: syz [ 136.603353][ T805] usb 2-1: config 0 descriptor?? [ 136.607159][ T5619] usb 5-1: Manufacturer: syz [ 136.612544][ T6693] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.616684][ T5619] usb 5-1: SerialNumber: syz [ 136.624010][ T6693] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.640989][ T805] usb 2-1: will this work? Response EP is not usually 3 [ 136.648042][ T805] usb 2-1: will this work? Image data EP is not usually 2 [ 136.658442][ T805] scsi host1: microtekX6 [ 136.852650][ T30] audit: type=1400 audit(1779267946.679:461): avc: denied { ioctl } for pid=6705 comm="syz.4.231" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.875162][ T5619] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 136.894632][ T6706] binder: BINDER_SET_CONTEXT_MGR already set [ 136.895031][ T1221] usb 2-1: USB disconnect, device number 14 [ 136.907147][ T6706] binder: 6705:6706 ioctl 4018620d 200000000040 returned -16 [ 136.926482][ T30] audit: type=1400 audit(1779267946.709:462): avc: denied { set_context_mgr } for pid=6705 comm="syz.4.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 137.009282][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.017394][ T30] audit: type=1400 audit(1779267946.719:463): avc: denied { write } for pid=6705 comm="syz.4.231" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.055039][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.077336][ T6713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.087786][ T30] audit: type=1400 audit(1779267946.719:464): avc: denied { map } for pid=6705 comm="syz.4.231" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.210934][ T6713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.231567][ T30] audit: type=1400 audit(1779267946.829:465): avc: denied { read } for pid=6699 comm="syz.2.228" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.261177][ T30] audit: type=1400 audit(1779267946.979:466): avc: denied { read write } for pid=6699 comm="syz.2.228" name="lp0" dev="devtmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 137.703035][ T30] audit: type=1400 audit(1779267946.979:467): avc: denied { open } for pid=6699 comm="syz.2.228" path="/dev/usb/lp0" dev="devtmpfs" ino=2969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 137.756582][ T5706] usbhid 3-1:0.0: can't add hid device: -71 [ 137.774267][ T5706] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 137.815526][ T5706] usb 3-1: USB disconnect, device number 12 [ 138.505170][ T6728] trusted_key: encrypted_key: insufficient parameters specified [ 138.831109][ T30] audit: type=1326 audit(1779267948.659:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6736 comm="syz.3.240" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f762959ce59 code=0x0 [ 138.933827][ T5706] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 138.956834][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 138.962488][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'. [ 138.975622][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 139.096328][ T5706] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.105946][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.115469][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 139.116609][ T5706] usb 2-1: Product: syz [ 139.116746][ T5706] usb 2-1: Manufacturer: syz [ 139.116761][ T5706] usb 2-1: SerialNumber: syz [ 139.117236][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.125698][ T30] audit: type=1400 audit(1779267948.959:469): avc: denied { create } for pid=6748 comm="syz.0.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 139.129658][ T24] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.138714][ T30] audit: type=1400 audit(1779267948.959:470): avc: denied { ioctl } for pid=6748 comm="syz.0.244" path="socket:[12840]" dev="sockfs" ino=12840 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 139.217759][ T5619] usb 5-1: USB disconnect, device number 14 [ 139.218737][ T5706] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.228766][ T5619] usblp0: removed [ 139.273927][ T24] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.289394][ T5705] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.333191][ T1221] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 139.372950][ T5617] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.401595][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 139.410997][ T24] usb 3-1: string descriptor 0 read error: -22 [ 139.417351][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.40 [ 139.427282][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.482894][ T1221] usb 4-1: Using ep0 maxpacket: 16 [ 139.489290][ T1221] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.831692][ T1221] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.843745][ T5617] usb 1-1: Using ep0 maxpacket: 16 [ 139.849049][ T1221] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.863164][ T5617] usb 1-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 139.873865][ T5617] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.896048][ T1221] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.907837][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.916732][ T1221] usb 4-1: Product: syz [ 139.921360][ T1221] usb 4-1: Manufacturer: syz [ 139.921681][ T6731] syz.1.237 (6731) used obsolete PPPIOCDETACH ioctl [ 139.926876][ T1221] usb 4-1: SerialNumber: syz [ 139.938616][ T5617] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 139.947820][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.956944][ T5617] usb 1-1: Product: syz [ 139.961924][ T5617] usb 1-1: Manufacturer: syz [ 139.967670][ T5617] usb 1-1: SerialNumber: syz [ 139.975922][ T1221] usb 4-1: 0:2 : does not exist [ 139.986733][ T5617] usb 1-1: config 0 descriptor?? [ 140.162896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 140.855584][ T6758] block device autoloading is deprecated and will be removed. [ 141.250643][ T805] usb 2-1: USB disconnect, device number 15 [ 141.513799][ T5705] usb 2-1: Service connection timeout for: 258 [ 141.523606][ T24] usbhid 3-1:1.0: can't add hid device: -71 [ 141.531183][ T5705] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 141.541853][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 141.553831][ T5705] ath9k_htc: Failed to initialize the device [ 141.942334][ T24] usb 3-1: USB disconnect, device number 13 [ 141.951737][ T805] usb 2-1: ath9k_htc: USB layer deinitialized [ 142.012117][ T1221] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 142.120846][ T5617] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 142.138621][ T1221] usb 4-1: USB disconnect, device number 13 [ 142.138694][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 142.138705][ T30] audit: type=1400 audit(1779267951.969:475): avc: denied { write } for pid=6773 comm="syz.0.250" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 142.176193][ T143] usb 1-1: Failed to submit usb control message: -71 [ 142.220197][ T5617] usb 1-1: USB disconnect, device number 9 [ 142.229539][ T143] usb 1-1: unable to send the bmi data to the device: -71 [ 142.281161][ T143] usb 1-1: unable to get target info from device [ 142.303854][ T143] usb 1-1: could not get target info (-71) [ 142.312091][ T143] usb 1-1: could not probe fw (-71) [ 142.324790][ T30] audit: type=1400 audit(1779267952.149:476): avc: denied { block_suspend } for pid=6773 comm="syz.0.250" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.486572][ T6775] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.703050][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 142.874375][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 142.987910][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.056919][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.056950][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.056988][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.057007][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.092185][ T24] usb 5-1: config 0 descriptor?? [ 143.224744][ T4930] Bluetooth: hci2: unexpected event for opcode 0x203d [ 143.241047][ T6795] netlink: 348 bytes leftover after parsing attributes in process `syz.2.257'. [ 143.325898][ T5705] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 143.401330][ T30] audit: type=1326 audit(1779267953.229:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d46d9ce59 code=0x7ffc0000 [ 143.916301][ T30] audit: type=1326 audit(1779267953.259:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9d46d9ce59 code=0x7ffc0000 [ 143.943740][ T5705] usb 4-1: Using ep0 maxpacket: 8 [ 143.948899][ T30] audit: type=1326 audit(1779267953.259:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d46d9ce59 code=0x7ffc0000 [ 143.982563][ T30] audit: type=1326 audit(1779267953.259:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9d46d9ce59 code=0x7ffc0000 [ 144.009948][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.028464][ T5705] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.050311][ T5705] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.067839][ T30] audit: type=1326 audit(1779267953.259:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d46d9ce59 code=0x7ffc0000 [ 144.168207][ T5705] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 144.186809][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.196207][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 144.206083][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 144.219394][ T5705] usb 4-1: config 0 descriptor?? [ 144.224426][ T30] audit: type=1326 audit(1779267953.259:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9d46d9ce59 code=0x7ffc0000 [ 144.262436][ T24] usb 5-1: USB disconnect, device number 15 [ 144.306000][ T30] audit: type=1326 audit(1779267953.269:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d46d9ce59 code=0x7ffc0000 [ 144.337570][ T30] audit: type=1326 audit(1779267953.269:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.0.256" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d46d9ce59 code=0x7ffc0000 [ 144.392452][ T6802] overlayfs: failed lookup in lower (newroot/56, name='bus', err=-40): overlapping layers [ 144.627861][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.636877][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.652489][ T5705] usbhid 4-1:0.0: can't add hid device: -71 [ 144.658913][ T5705] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 144.668535][ T6802] overlayfs: failed lookup in lower (newroot/56, name='bus', err=-40): overlapping layers [ 144.693762][ T5705] usb 4-1: USB disconnect, device number 14 [ 144.703458][ T6807] overlayfs: failed lookup in lower (newroot/56, name='file0', err=-40): overlapping layers [ 144.849316][ T6809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.260'. [ 145.496241][ T6827] geneve3: entered promiscuous mode [ 145.515765][ T6827] geneve3: entered allmulticast mode [ 145.609171][ T6831] netlink: 'syz.4.265': attribute type 2 has an invalid length. [ 145.661687][ T6835] netlink: 348 bytes leftover after parsing attributes in process `syz.2.268'. [ 145.733094][ T24] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 145.823635][ T6828] 0: reclassify loop, rule prio 0, protocol 700 [ 145.984362][ T24] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 146.008647][ T24] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 146.022747][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.035913][ T24] usb 4-1: config 0 has no interface number 0 [ 146.042187][ T24] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 146.067730][ T24] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.123029][ T24] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 146.188379][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 146.202340][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.224634][ T24] usb 4-1: config 0 descriptor?? [ 146.255015][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 146.537090][ T24] usb 4-1: USB disconnect, device number 15 [ 146.538403][ T143] usb 4-1: Failed to submit usb control message: -71 [ 146.567605][ T143] usb 4-1: unable to send the bmi data to the device: -71 [ 146.598500][ T143] usb 4-1: unable to get target info from device [ 146.630839][ T143] usb 4-1: could not get target info (-71) [ 146.724103][ T143] usb 4-1: could not probe fw (-71) [ 147.275008][ T4930] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 147.284259][ T4930] Bluetooth: hci2: Injecting HCI hardware error event [ 147.293261][ T4930] Bluetooth: hci2: hardware error 0x00 [ 148.245272][ T6899] netlink: 64 bytes leftover after parsing attributes in process `syz.2.281'. [ 148.278454][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 148.278468][ T30] audit: type=1326 audit(1779267958.109:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6866 comm="syz.3.274" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f762959ce59 code=0x0 [ 148.279605][ T6900] syzkaller1: entered promiscuous mode [ 148.319728][ T6900] syzkaller1: entered allmulticast mode [ 148.323253][ T30] audit: type=1400 audit(1779267958.149:505): avc: denied { setopt } for pid=6903 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.327248][ T6904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.282'. [ 148.423143][ T5706] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 148.431232][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 148.441640][ T6906] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 148.448267][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.466308][ T6906] vhci_hcd vhci_hcd.0: Device attached [ 148.495288][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.509087][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.572648][ T6907] vhci_hcd: connection closed [ 148.576235][ T143] vhci_hcd vhci_hcd.4: stop threads [ 148.584709][ T5706] usb 1-1: not running at top speed; connect to a high speed hub [ 148.599199][ T143] vhci_hcd vhci_hcd.4: release socket [ 148.609063][ T6913] overlayfs: failed lookup in lower (newroot/62, name='bus', err=-40): overlapping layers [ 148.621968][ T5706] usb 1-1: config 3 has an invalid interface number: 52 but max is 0 [ 148.638421][ T6913] overlayfs: failed lookup in lower (newroot/62, name='bus', err=-40): overlapping layers [ 148.650766][ T143] vhci_hcd vhci_hcd.4: disconnect device [ 148.663013][ T5706] usb 1-1: config 3 has no interface number 0 [ 148.670503][ T5706] usb 1-1: config 3 interface 52 has no altsetting 0 [ 148.693681][ T24] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 148.703557][ T5706] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 148.706005][ T6917] FAULT_INJECTION: forcing a failure. [ 148.706005][ T6917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.733382][ T24] usb 41-1: enqueue for inactive port 0 [ 148.741186][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.743853][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.1.286 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.743882][ T6917] Tainted: [L]=SOFTLOCKUP [ 148.743887][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.743896][ T6917] Call Trace: [ 148.743902][ T6917] [ 148.743907][ T6917] dump_stack_lvl+0x100/0x190 [ 148.743933][ T6917] should_fail_ex.cold+0x5/0xa [ 148.743955][ T6917] _copy_from_user+0x2e/0xd0 [ 148.743980][ T6917] __sys_bpf+0x243/0x4b90 [ 148.743998][ T6917] ? __pfx___sys_bpf+0x10/0x10 [ 148.744011][ T6917] ? proc_fail_nth_write+0x9f/0x220 [ 148.744028][ T6917] ? find_held_lock+0x2b/0x80 [ 148.744047][ T6917] ? find_held_lock+0x2b/0x80 [ 148.744061][ T6917] ? ksys_write+0x190/0x250 [ 148.744078][ T6917] ? ksys_write+0x190/0x250 [ 148.744098][ T6917] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 148.744120][ T6917] ? kernel_write+0x653/0x6c0 [ 148.744135][ T6917] ? __fget_files+0x215/0x3d0 [ 148.744171][ T6917] ? fput+0x79/0x100 [ 148.744191][ T6917] ? ksys_write+0x1ac/0x250 [ 148.744207][ T6917] ? __pfx_ksys_write+0x10/0x10 [ 148.744228][ T6917] __x64_sys_bpf+0x7b/0xc0 [ 148.744242][ T6917] ? lockdep_hardirqs_on+0x78/0x100 [ 148.744264][ T6917] do_syscall_64+0x10b/0xf80 [ 148.744285][ T6917] ? clear_bhb_loop+0x40/0x90 [ 148.744304][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.744320][ T6917] RIP: 0033:0x7f325159ce59 [ 148.744333][ T6917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.744348][ T6917] RSP: 002b:00007f32523b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.744364][ T6917] RAX: ffffffffffffffda RBX: 00007f3251815fa0 RCX: 00007f325159ce59 [ 148.744377][ T6917] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 148.744386][ T6917] RBP: 00007f32523b6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.744395][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.744403][ T6917] R13: 00007f3251816038 R14: 00007f3251815fa0 R15: 00007ffeaac83098 [ 148.744424][ T6917] [ 148.961237][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 148.968150][ T5706] usb 1-1: Product: syz [ 148.972428][ T5706] usb 1-1: Manufacturer: syz [ 148.980359][ T5706] usb 1-1: SerialNumber: syz [ 149.151325][ T6930] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 149.177254][ T6930] bond1 (unregistering): Released all slaves [ 149.198620][ T5706] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 149.208963][ T5706] usb 1-1: selecting invalid altsetting 0 [ 149.220813][ T2362] pvrusb2: control-write URB failure, status=-71 [ 149.223478][ T5706] usb 1-1: USB disconnect, device number 10 [ 149.233231][ T6933] netpci0: tun_chr_ioctl cmd 1074025672 [ 149.233248][ T6933] netpci0: ignored: set checksum enabled [ 149.239209][ T2362] pvrusb2: Device being rendered inoperable [ 149.279364][ T30] audit: type=1400 audit(1779267959.109:506): avc: denied { map } for pid=6929 comm="syz.1.292" path="socket:[13652]" dev="sockfs" ino=13652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.283971][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 149.306109][ T30] audit: type=1400 audit(1779267959.129:507): avc: denied { read } for pid=6929 comm="syz.1.292" path="socket:[13652]" dev="sockfs" ino=13652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 149.313810][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 149.336413][ T5705] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 149.354141][ T4930] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 149.414468][ T5804] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 149.484336][ T30] audit: type=1400 audit(1779267959.319:508): avc: denied { read } for pid=6939 comm="syz.2.295" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 149.507929][ T5705] usb 5-1: device descriptor read/64, error -71 [ 149.521557][ T30] audit: type=1400 audit(1779267959.349:509): avc: denied { create } for pid=6939 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 149.543675][ T30] audit: type=1400 audit(1779267959.349:510): avc: denied { listen } for pid=6939 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 149.593071][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 149.605475][ T5804] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 149.616761][ T5804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.628179][ T5804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.640771][ T5804] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.650277][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.658397][ T5804] usb 4-1: Product: syz [ 149.662815][ T5804] usb 4-1: Manufacturer: syz [ 149.668525][ T5804] usb 4-1: SerialNumber: syz [ 149.684409][ T5804] usb 4-1: 0:2 : does not exist [ 149.762906][ T5705] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 149.840660][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 149.862661][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 149.892997][ T5705] usb 5-1: device descriptor read/64, error -71 [ 149.933790][ T6950] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 149.943170][ T6950] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 149.953396][ T6950] kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 149.967305][ T6949] tmpfs: Bad value for 'mpol' [ 149.974623][ T6950] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 149.982597][ T6950] kvm: requested 184381 ns i8254 timer period limited to 200000 ns [ 150.003305][ T5705] usb usb5-port1: attempt power cycle [ 150.020373][ T6950] kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 150.062648][ T6956] 9p: Unknown Cache mode or invalid value 0 [ 150.077306][ T6950] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 150.322912][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 150.362934][ T5705] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 150.403711][ T5705] usb 5-1: device descriptor read/8, error -71 [ 150.482902][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 150.500951][ T24] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 150.523028][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.537041][ T24] usb 2-1: Product: syz [ 150.546281][ T24] usb 2-1: Manufacturer: syz [ 150.555707][ T24] usb 2-1: SerialNumber: syz [ 150.642916][ T5705] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 150.673433][ T5705] usb 5-1: device descriptor read/8, error -71 [ 150.783816][ T5705] usb usb5-port1: unable to enumerate USB device [ 150.798847][ T24] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 150.835912][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.862095][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 150.882947][ T24] usb 2-1: media controller created [ 150.917481][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.942942][ T5804] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 151.007803][ T5804] usb 4-1: USB disconnect, device number 16 [ 151.041216][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.198305][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 151.285874][ T24] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 151.306310][ T24] usb 2-1: USB disconnect, device number 16 [ 151.329084][ T5601] udevd[5601]: setting mode of /dev/bus/usb/002/016 to 020664 failed: No such file or directory [ 151.352306][ T5601] udevd[5601]: setting owner of /dev/bus/usb/002/016 to uid=0, gid=0 failed: No such file or directory [ 151.485415][ T6960] overlayfs: failed lookup in lower (newroot/68, name='bus', err=-40): overlapping layers [ 151.752337][ T6966] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 152.208324][ T6966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.334628][ T6968] bond1: (slave gretap1): making interface the new active one [ 152.337906][ T6966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6966 comm=syz.3.301 [ 152.547042][ T6968] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 153.641910][ T30] audit: type=1400 audit(1779267963.469:511): avc: denied { node_bind } for pid=6985 comm="syz.3.306" saddr=ffff:ffff:86dd:6914:80:44:2f00:2001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 154.233933][ T5617] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 154.566344][ T7004] random: crng reseeded on system resumption [ 154.639727][ T30] audit: type=1400 audit(1779267964.469:512): avc: denied { append } for pid=7006 comm="syz.2.312" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 154.704567][ T5617] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.707964][ T30] audit: type=1400 audit(1779267964.469:513): avc: denied { connect } for pid=7006 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.724305][ T5617] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.764728][ T5617] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.793970][ T30] audit: type=1400 audit(1779267964.469:514): avc: denied { write } for pid=7006 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.813343][ T5804] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 154.838552][ T5617] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.850717][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.862508][ T5617] usb 4-1: Product: syz [ 154.880159][ T5617] usb 4-1: Manufacturer: syz [ 154.891437][ T5617] usb 4-1: SerialNumber: syz [ 154.914338][ T5617] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 154.926743][ T5617] cdc_ncm 4-1:1.0: bind() failure [ 154.973308][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 154.986246][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.013210][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.037412][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 155.067046][ T5804] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 155.102530][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.542415][ T30] audit: type=1400 audit(1779267965.319:515): avc: denied { execute } for pid=7014 comm="syz.0.315" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.587654][ T5804] usb 2-1: config 0 descriptor?? [ 156.305558][ T5804] usbhid 2-1:0.0: can't add hid device: -71 [ 156.549611][ T6999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.561123][ T5804] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.586226][ T5804] usb 2-1: USB disconnect, device number 17 [ 156.592286][ T6999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.615770][ T30] audit: type=1400 audit(1779267966.449:516): avc: denied { map } for pid=7023 comm="syz.4.318" path="pipe:[13885]" dev="pipefs" ino=13885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 156.809282][ T30] audit: type=1400 audit(1779267966.639:517): avc: denied { setopt } for pid=7033 comm="syz.0.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 156.912691][ T7038] random: crng reseeded on system resumption [ 157.068081][ T30] audit: type=1400 audit(1779267966.899:518): avc: denied { ioctl } for pid=7039 comm="syz.4.324" path="socket:[13922]" dev="sockfs" ino=13922 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.342918][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.544996][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 157.555826][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.566369][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 157.578434][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 157.591534][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 157.638009][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.677516][ T9] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 157.688371][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 157.709182][ T24] usb 4-1: USB disconnect, device number 17 [ 157.737490][ T9] usb 1-1: Product: syz [ 157.756199][ T9] usb 1-1: Manufacturer: syz [ 157.765947][ T9] usb 1-1: SerialNumber: syz [ 157.777371][ T9] usb 1-1: config 0 descriptor?? [ 157.952894][ T5617] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.929348][ T7071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.939486][ T7071] block device autoloading is deprecated and will be removed. [ 158.947453][ T9] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 158.956405][ T9] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 159.545947][ T30] audit: type=1400 audit(1779267968.639:519): avc: denied { read } for pid=7066 comm="syz.3.334" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 159.699093][ T5617] usb 3-1: device descriptor read/64, error -71 [ 159.720002][ T30] audit: type=1400 audit(1779267968.639:520): avc: denied { open } for pid=7066 comm="syz.3.334" path="/57/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 159.996023][ T30] audit: type=1400 audit(1779267969.729:521): avc: denied { ioctl } for pid=7075 comm="syz.3.337" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 160.152431][ T5617] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 160.521444][ T7085] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 160.542377][ T7085] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.552975][ T5617] usb 3-1: device descriptor read/64, error -71 [ 160.652907][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 160.673096][ T5617] usb usb3-port1: attempt power cycle [ 160.852588][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.872055][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.902429][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.118551][ T5617] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 161.150421][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 161.167693][ T5617] usb 3-1: device descriptor read/8, error -71 [ 161.174046][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.184984][ T9] usb 5-1: Product: syz [ 161.189904][ T9] usb 5-1: Manufacturer: syz [ 161.197732][ T9] usb 5-1: SerialNumber: syz [ 161.219012][ T9] usb 5-1: selecting invalid altsetting 1 [ 161.225584][ T9] usb 5-1: unit 6 not found! [ 161.468832][ T9] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 161.501341][ T7100] netlink: 67 bytes leftover after parsing attributes in process `syz.3.343'. [ 161.587198][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 161.898394][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.962633][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.093412][ T9] usb 1-1: USB disconnect, device number 11 [ 162.134388][ T805] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 162.323404][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 162.360978][ T805] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 162.395351][ T805] usb 4-1: config 0 has no interface number 0 [ 162.416717][ T805] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.453447][ T805] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 162.488286][ T805] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 162.555658][ T805] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 162.586707][ T805] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 162.624359][ T805] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.675546][ T805] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 162.717204][ T805] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 163.007706][ T805] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 163.048542][ T805] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.108840][ T805] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 163.124296][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.136969][ T805] usb 4-1: Product: syz [ 163.167974][ T805] usb 4-1: Manufacturer: syz [ 163.191945][ T805] usb 4-1: SerialNumber: syz [ 163.222756][ T805] usb 4-1: config 0 descriptor?? [ 163.255028][ T7100] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 163.281684][ T7100] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 163.306903][ T805] usb 4-1: will this work? Response EP is not usually 3 [ 163.325886][ T805] usb 4-1: will this work? Image data EP is not usually 2 [ 163.347955][ T805] scsi host1: microtekX6 [ 163.430594][ T5617] usb 5-1: USB disconnect, device number 20 [ 163.455437][ T5804] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 163.542646][ T805] usb 4-1: USB disconnect, device number 18 [ 163.597334][ T30] audit: type=1400 audit(1779267973.429:522): avc: denied { execute } for pid=7125 comm="syz.2.349" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 163.642972][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 163.653608][ T5804] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 163.663064][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.678137][ T5804] usb 2-1: Product: syz [ 163.707640][ T5804] usb 2-1: Manufacturer: syz [ 163.724093][ T5804] usb 2-1: SerialNumber: syz [ 163.752079][ T5804] usb 2-1: config 0 descriptor?? [ 163.767723][ T5804] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 163.784097][ T30] audit: type=1326 audit(1779267973.619:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7125 comm="syz.2.349" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f124539ce59 code=0x0 [ 164.144174][ T5706] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 164.299388][ T7116] afs: Unknown parameter '0x0000000000000000' [ 164.336205][ T5804] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 164.354875][ T5804] visor 2-1:0.0: probe with driver visor failed with error -71 [ 164.378294][ T5804] usb 2-1: USB disconnect, device number 18 [ 164.473022][ T5706] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.493596][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.508770][ T5706] usb 5-1: Product: syz [ 164.566614][ T5705] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 164.843273][ T5706] usb 5-1: Manufacturer: syz [ 164.850972][ T5706] usb 5-1: SerialNumber: syz [ 164.859732][ T5706] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.880731][ T805] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.992915][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 165.000848][ T5705] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 165.009640][ T5705] usb 1-1: config 0 has no interface number 0 [ 165.016180][ T5705] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.028021][ T5705] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 165.048519][ T5705] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 165.079744][ T5705] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.130153][ T5705] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 165.151151][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.161033][ T5705] usb 1-1: Product: syz [ 165.165329][ T5705] usb 1-1: Manufacturer: syz [ 165.169958][ T5705] usb 1-1: SerialNumber: syz [ 165.183894][ T7142] 9p: Bad value for 'rfdno' [ 165.200734][ T5705] usb 1-1: config 0 descriptor?? [ 165.207444][ T7142] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 165.218797][ T7133] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 165.233783][ T5705] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input11 [ 165.469590][ T7132] ubi: mtd0 is already attached to ubi31 [ 165.541527][ T7150] fuse: Bad value for 'fd' [ 165.546575][ T5705] usb 1-1: USB disconnect, device number 12 [ 165.562271][ T30] audit: type=1800 audit(1779267975.379:524): pid=7150 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.358" name="nullb0" dev="tmpfs" ino=361 res=0 errno=0 [ 165.725053][ T5804] usb 5-1: USB disconnect, device number 21 [ 166.184071][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 166.533000][ T1221] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 166.543817][ T7173] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 166.558277][ T805] usb 5-1: Service connection timeout for: 258 [ 166.572375][ T805] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 166.609928][ T805] ath9k_htc: Failed to initialize the device [ 166.630598][ T7173] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 166.641770][ T5804] usb 5-1: ath9k_htc: USB layer deinitialized [ 166.754702][ T1221] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.771454][ T1221] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 166.780317][ T9] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 166.792671][ T1221] usb 1-1: config 114 has no interface number 0 [ 166.809959][ T1221] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 166.832676][ T7178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34806 sclass=netlink_route_socket pid=7178 comm=syz.2.365 [ 166.869724][ T1221] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 166.937351][ T1221] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 166.964361][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.976976][ T1221] usb 1-1: config 114 interface 240 has no altsetting 0 [ 166.984566][ T9] usb 2-1: config 0 has no interface number 0 [ 166.997636][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 167.018706][ T1221] usb 1-1: string descriptor 0 read error: -22 [ 167.025290][ T1221] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 167.038957][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 167.054077][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.067427][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.086087][ T7164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.093650][ T7164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.106567][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.127295][ T1221] ir_usb 1-1:114.240: IR Dongle converter detected [ 167.138234][ T9] usb 2-1: config 0 descriptor?? [ 167.148124][ T7172] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 167.178168][ T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.336916][ T1221] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 167.421599][ T30] audit: type=1400 audit(1779267977.249:525): avc: denied { write } for pid=7170 comm="syz.1.363" name="iowarrior0" dev="devtmpfs" ino=3053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.533106][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 167.679358][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.715189][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.793247][ T5804] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 168.014587][ T5706] usb 1-1: USB disconnect, device number 13 [ 168.060662][ T5706] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 168.071670][ T24] usb 2-1: USB disconnect, device number 19 [ 168.090989][ T5706] ir_usb 1-1:114.240: device disconnected [ 168.156177][ T5804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 168.185119][ T5804] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 168.209046][ T5804] usb 3-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 168.245833][ T5804] usb 3-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 168.327967][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.346427][ T5804] usb 3-1: Product: 멦ﺶ₊샂ฌ䀒졔阷灕풁Ώ竾夎䝙 [ 168.364427][ T5804] usb 3-1: Manufacturer: 芀厪㕵ⷡ誯潥콿튆ೞ䱖䣑鹳俖悊ᣓ࿗脗콑搭裃ﮇ溊⓱訨멙꽈癢찀ᩨ孔ꋭ팚≑ [ 168.421425][ T5804] usb 3-1: SerialNumber: 麎꛽䇂༒⹽禷€䊱䬩睙猚ꕋ｠ꆈ喫튌쌌緙⓭䷴⽩揰꯲㖹믣꯿睻㈎闞벯꿵뚔㳄经땆᤹鵂䙠듭ꆣ뇍ⷢ䢝瑠万怣묹客扑ꩇ穃ᕯ◔⒄鰉ￓᠣ㛯ݱ⻱쮭呑삈覘⶙ⅸ炈쫅袹ஷ呜鈶膡똀緲䮏餽ﳚ挫罭ᇡ끯ᨬ꺃嘘멢锿㵂蛴ࠢ謫앆싄먾ꮟ⒈涗ﷱ믧䏞᪢䜒虉⩐ꠜ벘 [ 169.627698][ T7199] tipc: Started in network mode [ 169.642965][ T7199] tipc: Node identity ac14140f, cluster identity 4711 [ 169.665198][ T7199] tipc: New replicast peer: 255.255.255.255 [ 169.671513][ T30] audit: type=1400 audit(1779267979.479:526): avc: denied { write } for pid=7196 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 169.707933][ T7198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7198 comm=syz.3.371 [ 169.722378][ T5804] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 169.738498][ T30] audit: type=1400 audit(1779267979.559:527): avc: denied { ioctl } for pid=7195 comm="syz.0.372" path="socket:[14202]" dev="sockfs" ino=14202 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.762329][ T5804] usb 3-1: USB disconnect, device number 18 [ 169.767480][ T7199] tipc: Enabled bearer , priority 10 [ 169.773805][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.796195][ T7198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=7198 comm=syz.3.371 [ 169.850191][ T7198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=7198 comm=syz.3.371 [ 169.878533][ T7198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=7198 comm=syz.3.371 [ 169.892964][ T5706] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 170.150860][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 170.703091][ T5706] usb 2-1: device descriptor read/64, error -71 [ 170.709411][ T5705] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 170.765425][ T5617] tipc: Node number set to 2886997007 [ 170.873032][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 170.899376][ T5705] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 170.913744][ T5705] usb 1-1: config 0 has no interface number 0 [ 170.934952][ T5705] usb 1-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 170.956943][ T5706] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 170.973830][ T5705] usb 1-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 170.998258][ T5705] usb 1-1: config 0 interface 246 has no altsetting 0 [ 171.029605][ T5705] usb 1-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 171.043954][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.072546][ T5705] usb 1-1: Product: syz [ 171.080299][ T5705] usb 1-1: Manufacturer: syz [ 171.092235][ T5705] usb 1-1: SerialNumber: syz [ 171.113020][ T5706] usb 2-1: device descriptor read/64, error -71 [ 171.120672][ T5705] usb 1-1: config 0 descriptor?? [ 171.233556][ T5706] usb usb2-port1: attempt power cycle [ 171.531673][ T5705] usb 1-1: USB disconnect, device number 14 [ 171.604741][ T5706] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 171.665341][ T5706] usb 2-1: device descriptor read/8, error -71 [ 171.772992][ T5804] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 171.865782][ T30] audit: type=1400 audit(1779267981.699:528): avc: denied { append } for pid=7223 comm="syz.2.379" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 171.913045][ T5706] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 171.933416][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 171.941129][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.957250][ T5706] usb 2-1: device descriptor read/8, error -71 [ 171.967223][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.987377][ T5804] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.009076][ T5804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 172.024387][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.054257][ T5804] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.069086][ T5804] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.082443][ T5706] usb usb2-port1: unable to enumerate USB device [ 172.088934][ T5804] usb 5-1: Manufacturer: syz [ 172.110508][ T5804] usb 5-1: config 0 descriptor?? [ 172.204297][ T7230] fuse: Unknown parameter '0x00000000000000030x00000000000000060000000000000000000300000000000000000000' [ 172.410243][ T7232] raw_sendmsg: syz.2.381 forgot to set AF_INET. Fix it! [ 172.425138][ T30] audit: type=1400 audit(1779267982.259:529): avc: denied { read } for pid=7231 comm="syz.2.381" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.434136][ T5804] rc_core: IR keymap rc-hauppauge not found [ 172.483583][ T5804] Registered IR keymap rc-empty [ 172.503066][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.532957][ T5617] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 172.543017][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 172.551070][ T30] audit: type=1400 audit(1779267982.369:530): avc: denied { mount } for pid=7238 comm="syz.1.382" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 172.563954][ T5804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 173.098404][ T30] audit: type=1400 audit(1779267982.369:531): avc: denied { mounton } for pid=7238 comm="syz.1.382" path="/70/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 173.121236][ T30] audit: type=1400 audit(1779267982.369:532): avc: denied { remount } for pid=7238 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 173.148100][ T5804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input12 [ 173.164662][ T30] audit: type=1400 audit(1779267982.479:533): avc: denied { mount } for pid=7238 comm="syz.1.382" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 173.164811][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.228753][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.246634][ T30] audit: type=1400 audit(1779267982.499:534): avc: denied { mounton } for pid=7238 comm="syz.1.382" path="/70/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 173.269263][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.284177][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.420010][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.443065][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.462437][ T30] audit: type=1400 audit(1779267983.289:535): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 173.462971][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.883386][ T30] audit: type=1400 audit(1779267983.409:536): avc: denied { bind } for pid=7229 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.892968][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 173.911384][ T30] audit: type=1400 audit(1779267983.419:537): avc: denied { listen } for pid=7229 comm="syz.0.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.936808][ T5706] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 173.993728][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.028583][ T5804] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 174.067167][ T5804] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 174.100212][ T5804] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 174.219836][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.628527][ T5804] usb 5-1: USB disconnect, device number 22 [ 174.635438][ T5706] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.695886][ T5706] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 174.737435][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.799267][ T5706] usb 3-1: Product: syz [ 174.829536][ T5706] usb 3-1: Manufacturer: syz [ 174.848692][ T5706] usb 3-1: SerialNumber: syz [ 175.503849][ T5617] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.518228][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.518787][ T5617] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 175.535527][ T5617] usb 1-1: can't read configurations, error -71 [ 176.074461][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.381848][ T7273] QAT: failed to copy from user cfg_data. [ 176.962581][ T5706] usb 3-1: unit 4 not found! [ 177.041602][ T7276] netlink: 'syz.1.391': attribute type 1 has an invalid length. [ 177.523235][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 177.523252][ T30] audit: type=1400 audit(1779267987.359:542): avc: denied { read } for pid=7279 comm="syz.3.392" laddr=::ffff:172.20.20.170 lport=43747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.580370][ T5706] hub 3-1:1.1: Invalid hub with more than one config or interface [ 177.606567][ T5706] hub 3-1:1.1: probe with driver hub failed with error -22 [ 177.635721][ T5706] usb 3-1: USB disconnect, device number 19 [ 177.808149][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.876507][ T7276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.673794][ T7292] netlink: 67 bytes leftover after parsing attributes in process `syz.1.395'. [ 178.935533][ T5802] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 179.074135][ T7303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.398'. [ 179.083416][ T7302] netlink: 48 bytes leftover after parsing attributes in process `syz.2.398'. [ 180.062388][ T5802] usb 2-1: Using ep0 maxpacket: 32 [ 180.070286][ T5802] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 180.080023][ T5802] usb 2-1: config 0 has no interface number 0 [ 180.086514][ T5802] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.097653][ T5802] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 180.336533][ T5802] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 180.348088][ T5802] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 180.359252][ T5802] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 180.371112][ T5802] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 180.383564][ T5802] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 180.394435][ T5802] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 180.407999][ T5802] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 180.418659][ T5802] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.434406][ T5802] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 180.443703][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.451805][ T5802] usb 2-1: Product: syz [ 180.456218][ T5802] usb 2-1: Manufacturer: syz [ 180.460959][ T5802] usb 2-1: SerialNumber: syz [ 180.486669][ T5802] usb 2-1: config 0 descriptor?? [ 180.601748][ T7292] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 180.613242][ T7292] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 180.632654][ T30] audit: type=1400 audit(1779267990.459:543): avc: denied { create } for pid=7312 comm="syz.0.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 180.637972][ T5802] usb 2-1: will this work? Response EP is not usually 3 [ 181.074096][ T30] audit: type=1400 audit(1779267990.909:544): avc: denied { read } for pid=7312 comm="syz.0.401" path="socket:[15507]" dev="sockfs" ino=15507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 181.110459][ T5802] usb 2-1: will this work? Image data EP is not usually 2 [ 181.159366][ T5802] scsi host1: microtekX6 [ 181.191392][ T5802] usb 2-1: USB disconnect, device number 24 [ 181.232923][ T4979] usb 2-1: error -19 submitting URB [ 181.283018][ T4979] usb 2-1: error -19 submitting URB [ 181.323195][ T4979] usb 2-1: error -19 submitting URB [ 182.255582][ T30] audit: type=1400 audit(1779267992.089:545): avc: denied { write } for pid=7329 comm="syz.1.405" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 183.150923][ T7343] comedi comedi3: comedi_config --init_data is deprecated [ 183.603011][ T5705] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 183.762889][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 183.770930][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.782281][ T5705] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.792376][ T5705] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 183.805624][ T5705] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 183.815397][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.856919][ T5705] usb 2-1: config 0 descriptor?? [ 183.937806][ T7362] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 183.955616][ T7362] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 184.045284][ T7364] netlink: 67 bytes leftover after parsing attributes in process `syz.0.416'. [ 184.087354][ T5802] IPVS: starting estimator thread 0... [ 184.107879][ T30] audit: type=1400 audit(1779267993.939:546): avc: denied { create } for pid=7366 comm="syz.2.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 184.146182][ T5705] usbhid 2-1:0.0: can't add hid device: -71 [ 184.160771][ T30] audit: type=1804 audit(1779267993.989:547): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.417" name="bus" dev="ramfs" ino=15665 res=1 errno=0 [ 184.161085][ T5705] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 184.197748][ T30] audit: type=1804 audit(1779267994.029:548): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.417" name="bus" dev="ramfs" ino=15665 res=1 errno=0 [ 184.227062][ T7369] IPVS: using max 49 ests per chain, 117600 per kthread [ 184.271881][ T5705] usb 2-1: USB disconnect, device number 25 [ 184.382887][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.390675][ T5619] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 184.552923][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 184.561603][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 185.061966][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 185.076904][ T5619] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 185.085713][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 185.099917][ T5619] usb 1-1: config 0 has no interface number 0 [ 185.110511][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 185.124558][ T5619] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.135966][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 185.147484][ T5619] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 185.161684][ T5619] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 185.175024][ T5619] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 185.175147][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.199948][ T5619] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 185.213624][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.222508][ T5619] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.233665][ T9] usb 5-1: Product: syz [ 185.237951][ T9] usb 5-1: Manufacturer: syz [ 185.243454][ T5619] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 185.261171][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 185.271361][ T5619] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 185.286255][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 185.300731][ T5619] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 185.313308][ T5619] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.328660][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 185.334614][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 185.359968][ T5619] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 185.369600][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.371327][ T7378] syz.3.419 (7378) used greatest stack depth: 19360 bytes left [ 185.418595][ T5619] usb 1-1: Product: syz [ 185.424471][ T5619] usb 1-1: Manufacturer: syz [ 185.429187][ T5619] usb 1-1: SerialNumber: syz [ 185.448560][ T5619] usb 1-1: config 0 descriptor?? [ 185.456264][ T7364] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.495393][ T7364] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.514130][ T5619] usb 1-1: will this work? Response EP is not usually 3 [ 185.521712][ T5619] usb 1-1: will this work? Image data EP is not usually 2 [ 185.535525][ T5619] scsi host1: microtekX6 [ 185.730367][ T5619] usb 1-1: USB disconnect, device number 17 [ 185.963099][ T5705] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 186.542918][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 186.555234][ T5705] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.572536][ T5705] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 186.582789][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.591223][ T5705] usb 3-1: Product: syz [ 186.620417][ T5705] usb 3-1: Manufacturer: syz [ 186.628665][ T5705] usb 3-1: SerialNumber: syz [ 186.719470][ T5802] usb 5-1: USB disconnect, device number 23 [ 187.174611][ T7405] NILFS (nullb0): couldn't find nilfs on the device [ 188.957207][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.963608][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.280863][ T5705] usb 3-1: Can't get UAC3 power state for id 10 [ 189.326866][ T5705] usb 3-1: BAAD HEADSET c_chmask mismatch [ 189.360050][ T5705] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 189.458248][ T5705] usb 3-1: cannot find UAC_HEADER [ 190.345330][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 191.504192][ T7415] xt_TPROXY: Can be used only with -p tcp or -p udp [ 192.197426][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.205935][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.252140][ T9] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 192.341847][ T7425] bridge0: entered allmulticast mode [ 192.475301][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.500637][ T9] usb 1-1: config 194 has an invalid interface number: 4 but max is 0 [ 192.530177][ T9] usb 1-1: config 194 has no interface number 0 [ 192.549866][ T9] usb 1-1: config 194 interface 4 has no altsetting 0 [ 192.576502][ T9] usb 1-1: string descriptor 0 read error: -22 [ 192.595320][ T9] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 192.619588][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.941369][ T9] usb 1-1: USB disconnect, device number 18 [ 195.160920][ T5705] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 195.197089][ T5705] usb 3-1: USB disconnect, device number 20 [ 195.282584][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.824023][ T7425] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 199.654577][ T7437] netlink: 'syz.2.436': attribute type 2 has an invalid length. [ 200.758485][ T30] audit: type=1400 audit(1779268010.579:549): avc: denied { watch } for pid=7443 comm="syz.3.439" path="/82/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 200.789284][ T7447] netlink: 67 bytes leftover after parsing attributes in process `syz.1.437'. [ 201.212240][ T5619] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 201.412877][ T5619] usb 2-1: Using ep0 maxpacket: 32 [ 202.212885][ T5619] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 202.233868][ T5619] usb 2-1: config 0 has no interface number 0 [ 202.240020][ T5619] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.276997][ T5619] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 202.364549][ T5619] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 202.472601][ T5619] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 202.505927][ T5619] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 202.564808][ T5619] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.606463][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 202.616415][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 202.625293][ T5619] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 202.670782][ T5619] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 202.712547][ T5619] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 202.749369][ T5619] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.783061][ T9] usb 1-1: device descriptor read/64, error -71 [ 202.818514][ T5619] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 202.840700][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.858930][ T5619] usb 2-1: Product: syz [ 202.869038][ T5619] usb 2-1: Manufacturer: syz [ 202.876887][ T5619] usb 2-1: SerialNumber: syz [ 202.895723][ T5619] usb 2-1: config 0 descriptor?? [ 202.921937][ T7446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.931445][ T7446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.953510][ T5619] usb 2-1: will this work? Response EP is not usually 3 [ 202.970674][ T5619] usb 2-1: will this work? Image data EP is not usually 2 [ 203.021005][ T5619] scsi host1: microtekX6 [ 203.042947][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 203.163595][ T5619] usb 2-1: USB disconnect, device number 26 [ 203.173232][ T4979] usb 2-1: error -19 submitting URB [ 203.186654][ T9] usb 1-1: device descriptor read/64, error -71 [ 203.313269][ T9] usb usb1-port1: attempt power cycle [ 203.652904][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 203.684867][ T9] usb 1-1: device descriptor read/8, error -71 [ 203.963285][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 204.003994][ T9] usb 1-1: device descriptor read/8, error -71 [ 204.372230][ T7480] NILFS (nullb0): couldn't find nilfs on the device [ 204.471138][ T9] usb usb1-port1: unable to enumerate USB device [ 204.891989][ T30] audit: type=1400 audit(1779268014.719:550): avc: denied { getopt } for pid=7491 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.012989][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 205.172878][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 205.180116][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 205.188989][ T9] usb 1-1: config 0 has no interface number 0 [ 205.201468][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 205.220756][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 205.233196][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 205.242638][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.252105][ T9] usb 1-1: Product: syz [ 205.260670][ T9] usb 1-1: Manufacturer: syz [ 205.265630][ T9] usb 1-1: SerialNumber: syz [ 205.281722][ T9] usb 1-1: config 0 descriptor?? [ 205.296929][ T7490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 205.304874][ T7490] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 205.463100][ T1221] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 205.516687][ T7501] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 205.531407][ T7501] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 205.555516][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 205.576098][ T9] asix 1-1:0.34: probe with driver asix failed with error -32 [ 205.599698][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 205.635188][ T7503] xt_hashlimit: size too large, truncated to 1048576 [ 205.643093][ T1221] usb 5-1: Using ep0 maxpacket: 32 [ 205.654458][ T1221] usb 5-1: config 0 has an invalid interface number: 61 but max is 1 [ 205.669838][ T1221] usb 5-1: config 0 has no interface number 1 [ 205.736780][ T1221] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 205.784247][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.829623][ T1221] usb 5-1: Product: syz [ 205.844543][ T1221] usb 5-1: Manufacturer: syz [ 205.852181][ T7507] netlink: 67 bytes leftover after parsing attributes in process `syz.2.457'. [ 205.865358][ T1221] usb 5-1: SerialNumber: syz [ 205.885878][ T1221] usb 5-1: config 0 descriptor?? [ 206.024762][ T1221] viperboard 5-1:0.61: version 0.00 found at bus 005 address 024 [ 206.047308][ T5619] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 206.111546][ T7496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.126960][ T1221] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 206.140303][ T5617] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 206.148616][ T1221] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 206.177898][ T1221] viperboard 5-1:0.0: version 0.00 found at bus 005 address 024 [ 206.218709][ T1221] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 206.228712][ T5619] usb 2-1: Using ep0 maxpacket: 8 [ 206.238586][ T1221] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 206.253125][ T5619] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.270095][ T5619] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 206.295475][ T1221] usb 5-1: USB disconnect, device number 24 [ 206.301998][ T5619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 206.320772][ T5617] usb 3-1: Using ep0 maxpacket: 32 [ 206.366676][ T5617] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 206.387131][ T5619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 206.423671][ T5617] usb 3-1: config 0 has no interface number 0 [ 206.465144][ T5617] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.483978][ T5619] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.538961][ T5617] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 206.577986][ T5619] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 206.586908][ T5802] usb 1-1: USB disconnect, device number 23 [ 206.609268][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 206.617712][ T5617] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 206.654996][ T5619] usb 2-1: Product: syz [ 206.675411][ T5617] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 206.689089][ T5619] usb 2-1: Manufacturer: syz [ 206.707890][ T5619] usb 2-1: SerialNumber: syz [ 206.734656][ T5617] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 206.779858][ T5617] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.790608][ T5617] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 206.801224][ T5617] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 206.817202][ T5617] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 207.061751][ T5619] usb 2-1: config 0 descriptor?? [ 207.179063][ T5617] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.217598][ T5619] usb 2-1: can't set config #0, error -71 [ 207.260079][ T5617] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 207.270962][ T5619] usb 2-1: USB disconnect, device number 27 [ 207.335046][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.391605][ T5617] usb 3-1: Product: syz [ 207.436738][ T5617] usb 3-1: Manufacturer: syz [ 207.498190][ T5617] usb 3-1: SerialNumber: syz [ 207.555271][ T5617] usb 3-1: config 0 descriptor?? [ 207.571271][ T7507] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 207.579784][ T7507] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 207.606528][ T5617] usb 3-1: will this work? Response EP is not usually 3 [ 207.632947][ T1221] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 207.645153][ T5617] usb 3-1: will this work? Image data EP is not usually 2 [ 207.695907][ T5617] scsi host1: microtekX6 [ 207.825184][ T5619] usb 3-1: USB disconnect, device number 21 [ 207.842307][ T1221] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 207.876063][ T4979] usb 3-1: error -19 submitting URB [ 207.949437][ T1221] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 207.967005][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.994831][ T1221] usb 5-1: config 0 descriptor?? [ 208.020103][ T1221] pwc: Creative Labs Webcam Pro Ex detected. [ 208.034665][ T1221] pwc: Warning: more than 1 configuration available. [ 208.325799][ T1221] pwc: Failed to set LED on/off time (-71) [ 208.366058][ T1221] pwc: send_video_command error -71 [ 208.417305][ T1221] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 208.470197][ T1221] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 208.574447][ T1221] usb 5-1: USB disconnect, device number 25 [ 209.185054][ T1221] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 209.253592][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 210.217688][ T1221] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.486713][ T7550] fuse: Bad value for 'fd' [ 210.515109][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 210.538854][ T1221] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.238894][ T1221] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 211.271280][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.282951][ T5619] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 211.302155][ T9] usb 2-1: device descriptor read/all, error -71 [ 211.315362][ T1221] usb 1-1: Product: syz [ 211.325903][ T1221] usb 1-1: Manufacturer: syz [ 211.336016][ T1221] usb 1-1: SerialNumber: syz [ 211.474481][ T5619] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.515033][ T5619] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.554765][ T5619] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 211.564160][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 211.585079][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.602861][ T5619] usb 3-1: Product: syz [ 211.610432][ T5619] usb 3-1: Manufacturer: syz [ 211.622942][ T5619] usb 3-1: SerialNumber: syz [ 211.681344][ T5619] usb 3-1: can't set config #1, error -71 [ 211.705922][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.729863][ T5619] usb 3-1: USB disconnect, device number 22 [ 211.756034][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 211.767812][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.798019][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.854525][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 211.942151][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 212.011759][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 212.028217][ T30] audit: type=1400 audit(1779268021.849:551): avc: denied { load_policy } for pid=7556 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 212.044833][ T7559] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 212.062515][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.101009][ T7559] SELinux: failed to load policy [ 212.121112][ T10] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 212.164851][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 212.211775][ T10] usb 5-1: Product: syz [ 212.257651][ T10] usb 5-1: Manufacturer: syz [ 212.280583][ T10] usb 5-1: SerialNumber: syz [ 212.310328][ T10] usb 5-1: config 0 descriptor?? [ 212.443131][ T30] audit: type=1400 audit(1779268022.259:552): avc: denied { create } for pid=7547 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.496635][ T1221] usb 1-1: unit 4 not found! [ 212.559836][ T10] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 212.604533][ T10] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 212.760287][ T10] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 212.774658][ T1221] hub 1-1:1.1: Invalid hub with more than one config or interface [ 212.805790][ T10] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 212.835831][ T1221] hub 1-1:1.1: probe with driver hub failed with error -22 [ 212.874480][ T10] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 212.901641][ T1221] usb 1-1: USB disconnect, device number 24 [ 212.906574][ T7572] netdevsim netdevsim3: Direct firmware load for . [ 212.906574][ T7572] failed with error -2 [ 212.965913][ T7555] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 212.990065][ T7573] fuse: fd is not a fuse device [ 212.996753][ T7555] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 213.030451][ T7572] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 213.030451][ T7572] [ 213.031455][ T30] audit: type=1400 audit(1779268022.859:553): avc: denied { firmware_load } for pid=7571 comm="syz.3.473" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 213.162624][ T7527] udevd[7527]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.357187][ T10] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 213.401804][ T10] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 213.426388][ T10] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 213.454871][ T10] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 213.525535][ T10] usb 5-1: USB disconnect, device number 26 [ 218.332830][ C0] sched: DL replenish lagged too much [ 253.678319][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.758785][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.482779][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 341.489761][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5610/1:b..l [ 341.498012][ C0] rcu: (detected by 0, t=10503 jiffies, g=26681, q=769519 ncpus=2) [ 341.505985][ C0] task:syz-executor state:R running task stack:23024 pid:5610 tgid:5610 ppid:5608 task_flags:0x400140 flags:0x00080000 [ 341.520465][ C0] Call Trace: [ 341.523747][ C0] [ 341.526676][ C0] __schedule+0x1295/0x67a0 [ 341.531183][ C0] ? __pfx___schedule+0x10/0x10 [ 341.536020][ C0] ? mark_held_locks+0x40/0x70 [ 341.540785][ C0] preempt_schedule_irq+0x50/0x90 [ 341.545861][ C0] irqentry_exit+0x205/0x7e0 [ 341.550477][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 341.556444][ C0] RIP: 0010:lock_release+0x19e/0x310 [ 341.561734][ C0] Code: ff 65 0f c1 05 db e2 26 12 83 f8 01 0f 85 28 01 00 00 9c 58 f6 c4 02 0f 85 13 01 00 00 41 f7 c6 00 02 00 00 0f 85 c0 00 00 00 <48> 8b 44 24 10 65 48 2b 05 2d 9b 26 12 0f 85 4e 01 00 00 48 83 c4 [ 341.581347][ C0] RSP: 0018:ffffc9000470f508 EFLAGS: 00000206 [ 341.587435][ C0] RAX: 0000000000000046 RBX: ffffffff8e7e5620 RCX: ffffc9000470f514 [ 341.595416][ C0] RDX: 0000000000000002 RSI: ffffffff8defdaa7 RDI: ffffffff8c1c4180 [ 341.603391][ C0] RBP: ffffffff81b7d1ae R08: 0000000000000001 R09: 0000000000000007 [ 341.611352][ C0] R10: 0000000000000200 R11: 000000000000aef1 R12: ffff88807d904a00 [ 341.619302][ C0] R13: ffffc9000470f610 R14: 0000000000000202 R15: 0000000000000003 [ 341.627276][ C0] ? unwind_next_frame+0x3be/0x2090 [ 341.632487][ C0] unwind_next_frame+0x3c3/0x2090 [ 341.637500][ C0] ? arch_stack_walk+0x73/0xf0 [ 341.642283][ C0] __unwind_start+0x3d1/0x7f0 [ 341.646968][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 341.653119][ C0] arch_stack_walk+0x73/0xf0 [ 341.657723][ C0] ? stack_trace_save+0x8e/0xc0 [ 341.662580][ C0] stack_trace_save+0x8e/0xc0 [ 341.667260][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 341.672638][ C0] ? __lock_acquire+0x4a5/0x2630 [ 341.677576][ C0] ? __lock_acquire+0x4a5/0x2630 [ 341.682492][ C0] save_stack+0x162/0x1e0 [ 341.686831][ C0] ? __pfx_save_stack+0x10/0x10 [ 341.691696][ C0] ? page_ext_put+0x3e/0xd0 [ 341.696194][ C0] __reset_page_owner+0x84/0x190 [ 341.701108][ C0] __free_frozen_pages+0x747/0x1040 [ 341.706292][ C0] ? __free_slab+0xd0/0x220 [ 341.710800][ C0] ? tomoyo_realpath_from_path+0xb6/0x690 [ 341.716519][ C0] qlist_free_all+0x47/0xf0 [ 341.721021][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 341.726509][ C0] __kasan_kmalloc+0x8a/0xb0 [ 341.731110][ C0] __kmalloc_noprof+0x301/0x850 [ 341.735964][ C0] tomoyo_realpath_from_path+0xb6/0x690 [ 341.741487][ C0] tomoyo_path_perm+0x276/0x460 [ 341.746313][ C0] ? tomoyo_path_perm+0x262/0x460 [ 341.751337][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 341.756731][ C0] ? find_held_lock+0x2b/0x80 [ 341.761396][ C0] ? __might_fault+0xc5/0x140 [ 341.766054][ C0] ? __might_fault+0xc5/0x140 [ 341.770776][ C0] security_inode_getattr+0x116/0x280 [ 341.776156][ C0] vfs_statx+0x11f/0x3f0 [ 341.780378][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 341.785131][ C0] ? do_getname+0x191/0x390 [ 341.789644][ C0] vfs_fstatat+0x77/0xe0 [ 341.793874][ C0] __do_sys_newfstatat+0x9d/0x120 [ 341.798894][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 341.804519][ C0] ? __x64_sys_umount+0x124/0x1a0 [ 341.809542][ C0] ? __pfx___x64_sys_umount+0x10/0x10 [ 341.814910][ C0] ? rcu_is_watching+0x12/0xc0 [ 341.819655][ C0] do_syscall_64+0x10b/0xf80 [ 341.824297][ C0] ? clear_bhb_loop+0x40/0x90 [ 341.828978][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.834870][ C0] RIP: 0033:0x7f762959b49a [ 341.839284][ C0] RSP: 002b:00007fffb14c24c8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 341.847675][ C0] RAX: ffffffffffffffda RBX: 00007f76296321ca RCX: 00007f762959b49a [ 341.855652][ C0] RDX: 00007fffb14c24f0 RSI: 00007fffb14c2580 RDI: 00000000ffffff9c [ 341.863628][ C0] RBP: 00007fffb14c2580 R08: 00007fffb14c3580 R09: 00000000ffffffff [ 341.871598][ C0] R10: 0000000000000100 R11: 0000000000000286 R12: 00007fffb14c3610 [ 341.879575][ C0] R13: 00007f76296321ca R14: 00000000000342b6 R15: 00007fffb14c3650 [ 341.887544][ C0] [ 341.890559][ C0] rcu: rcu_preempt kthread starved for 2907 jiffies! g26681 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 341.901656][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 341.911610][ C0] rcu: RCU grace-period kthread stack dump: [ 341.917518][ C0] task:rcu_preempt state:R running task stack:27752 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 341.931011][ C0] Call Trace: [ 341.934291][ C0] [ 341.937222][ C0] __schedule+0x1295/0x67a0 [ 341.941732][ C0] ? __pfx___schedule+0x10/0x10 [ 341.946561][ C0] ? find_held_lock+0x2b/0x80 [ 341.951241][ C0] ? schedule+0x2bf/0x390 [ 341.955576][ C0] schedule+0xdd/0x390 [ 341.959640][ C0] schedule_timeout+0x127/0x280 [ 341.964469][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 341.969837][ C0] ? __pfx_process_timeout+0x10/0x10 [ 341.975122][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 341.980938][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 341.986382][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 341.991152][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 341.996440][ C0] ? prepare_to_swait_event+0x27/0x4a0 [ 342.001870][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 342.006796][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 342.012004][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.017812][ C0] rcu_gp_kthread+0x179/0x230 [ 342.022462][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 342.027634][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.033443][ C0] ? __kthread_parkme+0x18c/0x230 [ 342.038463][ C0] ? kthread+0x13a/0x450 [ 342.042683][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 342.047858][ C0] kthread+0x370/0x450 [ 342.051923][ C0] ? __pfx_kthread+0x10/0x10 [ 342.056509][ C0] ret_from_fork+0x72b/0xd50 [ 342.061101][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 342.066210][ C0] ? __switch_to+0x800/0x1100 [ 342.070888][ C0] ? __pfx_kthread+0x10/0x10 [ 342.075475][ C0] ret_from_fork_asm+0x1a/0x30 [ 342.080239][ C0] [ 342.083240][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 342.089553][ C0] Sending NMI from CPU 0 to CPUs 1: [ 342.094776][ C1] NMI backtrace for cpu 1 [ 342.094791][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.094810][ C1] Tainted: [L]=SOFTLOCKUP [ 342.094815][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.094823][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 342.094846][ C1] Code: 76 92 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 81 20 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 342.094858][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 342.094869][ C1] RAX: 000000000185b1a3 RBX: ffff88801e2ba500 RCX: ffffffff8b8b1095 [ 342.094878][ C1] RDX: 0000000000000000 RSI: ffffffff8df22fb5 RDI: ffffffff8c1c4180 [ 342.094891][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 342.094899][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 342.094908][ C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d7d650 [ 342.094916][ C1] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 342.094930][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.094938][ C1] CR2: 00007ff717200218 CR3: 000000002332e000 CR4: 00000000003526f0 [ 342.094947][ C1] Call Trace: [ 342.094951][ C1] [ 342.094955][ C1] default_idle+0x9/0x10 [ 342.094967][ C1] default_idle_call+0x6c/0xb0 [ 342.094978][ C1] do_idle+0x464/0x590 [ 342.094993][ C1] ? __pfx_do_idle+0x10/0x10 [ 342.095004][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 342.095020][ C1] cpu_startup_entry+0x4f/0x60 [ 342.095033][ C1] start_secondary+0x21d/0x2d0 [ 342.095048][ C1] ? __pfx_start_secondary+0x10/0x10 [ 342.095065][ C1] common_startup_64+0x13e/0x148 [ 342.095088][ C1]