last executing test programs: 8.424478304s ago: executing program 0 (id=1637): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0984124, &(0x7f0000000300)) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0x4112, 0x0) 6.331284969s ago: executing program 0 (id=1648): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x8001, 0x9}, &(0x7f00000001c0)=0xc) 6.274309843s ago: executing program 0 (id=1649): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8081, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f0000004480)=[{{&(0x7f00000003c0)=@x25, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000580)="da714c34d2cca9dbe28568c7c2c38cdc091feede611c08f9587cd711194d63eed813416a292aaf48d74bf32a806c7cec82a9c28c1c44b83f239eea90fa40b3e5cdacb16f9bb7646f7cad2440c9c9b3b7e0f2a7", 0x53}, {&(0x7f0000000600)="5d333bb3817720b065ca468e0827a3b824207b6ee9820567122d388c18af5f338ca5568bda72993413", 0x29}, {&(0x7f0000000640)="d3de5f1e21eec09714f0fea34157c532f1feb365d02afa73e696e0f3cef9956e64999018f06a15d86ff8c68ee7ab513d027dcd3e11d635b0ede5dda368f493de2a72c585f0032a32a982817fc1f285ef9353de3febee6ba475867f02105575aaa72981b9600e", 0x66}], 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x78}}, {{&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001640)="a15e82836188ca607557f77c865ff3e779a7902dfa757d4cd688eb759482c855af10ea2d8c5c00711020e5749d886399a417ec2458a91204569e7f945ce9c7ca3367722bf9e9916810c54ee5d718bc8e8c938a05ef7c80c701c1c4e8c7fa5e19a3306fceebd98560a883d86cd9ed6c82c23603eab6975e14fc56102d899aeab5495b826743deb344ae1670aabf6b7b1c1af9ca5453f55fd66920e8507fdb811188a4fae1ee524c099bb7d0d6c0efd59e0beeb7a0ea863872016dff8fbb891619887ca3556828837bd80175a5f26f87b9d7e062ee5ee49c8f5b978c8e650c4fa453573b6f78813221d09730beed0c3776bd71bcf7fbefc062c43b31fd03d458cf807f991f33ffbdc1eed9302ae9987ea5db872c2e34d12481c5e5d4a4a0c629bc9a318882d55f9da7a909c49ef60ba378ba79567835b3ffb995309c535d1f8ecaacd14f783c07094591fcf50b6fcf83fbde0e77d9fed848af8afe86e6f9c7175fcfe358bdf6ee30e5982bbc38cf5edb52e89cc6dd32846a9d511298b1dcd2b4fb6a6d8741ed34649c25d28bc11a6e778e1e3dee6092b5a33935b240a25442edfbde0c7eb9e8a7d49ec2588b8cc6065a8422dd1aa48818d4056aa997ddf9a6ab980b86d48998090a9cd46619e7f0519e336704ab2ad9d008a32b066b0413b4dd709bdf2ed49605fe6eaf5bb5a88ba68a70fab74759271706214f4e8ffadbbfe72577cc3f1771adca5ece6171ab202a293228f7558c76ef92a20f23854a009c1e0c2d5898dcf8f682df2bcee11930828da4eeebbb2b53da273b7eeb1fbfbc1f65255c9e33db106ec7f2134740462cc02320e12243c219b93da3521efbfc90d4f725596092d862c838be07817a0c45edae90075f115233743a066e83a150bb97b38a62d2ca523933f57bbe3687363a3f6b58125692e0ebff38bb3ba566e7abe238abf69069e849231eb4ff839717bb11d0798e69126e36686ed560874153872420feb591ac067e0e797c88431670cb66296dce0e718b20f61d07f2e594a282da06e78eea6bee098c15b6b99cb12b708fd1f769663482caf5dc688e97ab35840db71215f59936ac7321a1d91f2450e9b05ef3142f6c299ea920cbcccef02d353744b2aecb4dbdb4f96a6aa485c878ba8755f6ec8f46f6c09585dd77b85c47257f26e1fc2a5a33ad86fcf8d2afa90dccf395229718952fcad1d08b2e4545441a8590a39f7b4277c1d67b2c7c8248e4940f7ad2ac868ec6a9864afda3dc251bd36eaa49c28fe2e6b1d11be40f3322985b5e0f6e04b94b000639ec8bab5a8ae556c809172a62cfcfe7f445c9b730b1d6b62edd16ba6d6967c092d3a8b2856a91dfd270a05de626085c664e07011cbf10b16376089a7b6fde8ae8abca8f20f4f3427f6193db56505ebf849343d97ea7af11f96824257d4afda4adc54a69fa3f066e5d8aaf04e8201c299e949fc01a24713cdf91d9f03099214e80798b4b70fd1ef69548697ae9b80432a846f532e5b6e17ed46aabb659f6268dbc9d9671108adb2c97f8f1d51b64ddfcbf0435382c61e8edaff021984483824bb3a74b4762aa85cdb3190deed62f06dc942f9fed9ff1666e43b7b89bf407b86654798a4f02cc4980b31ba72a446287bd2c6675cb85f5569d611299347dbb36c0d90c9acf2ff2deb7c1846b0c37945c6ecd2c00d3eca0b6a679e9eb396d24e889259897e8b22c42aaad5337764c46cb30f850da2a2d92af7f8e6378006f395a7d976cbd8aa26d7aa765eed9db65cea8118063690117572f33add874e96d363b5df740cee94065539149a45eb58e659420c261c4ce0112fa173ed71818165656859874f526016dac965ddd466b9c361830c7fd01ce61e0c8841f021778eb74d9fb50af39dbc68838bb85bbf996214800b3a2735632223cfa6bfd8f62570a9d2ed2d92792cde462e5f5a5c20516327a2ff66c54806b6bb293352ba72e3c5bffcdb0fd60fc6edecd269db2f56584e9b2bbb2d1be1e10177a87d1d6a90837713b231d4309de2e28cc1ad6c4420fc38fb068bcbdd2df4a793dbed24de41b84a1675e2d3f595a451831bb3c361d89667be5e6bf0451151a3197c1512580ffbd0512ef527af6f3b64f49651e29d72507e255eb2b987c7cf0ac3ac9d9b7d3f2922765d4e2fe0b0fc48cfcadf73cc502d6b93c1d30a3c1f7fe9a161c816e605ecb1ef62526f36b144a3893f2cd87de35ff3f1fb2bcd39f7512e5121f0f0c6678c2da7bc001db928c22c3552347e6b2de6dc849335d8e9389b78375993124aae076e11fecad78eddc517229aa57f5ad944a7726c7cc6778e8acf2559ec4877fb336b054c8b06ff89ff0688aa8297e952117f5603276f6f292e224bf4bfa085eacbf7a0f3f784f68302e9af3a61ec9c87f239c4e38e22178420a8f10bacac6e5db534611fb1c63081941f4fe0a72ec5ad3f2b3a844f35dde47fa367ea0fef3eeb97e6d344c3a398fa117e77a17746ccdab44208dcf1cb9f0c178aca6e6c731c20ca2c31816c438334cace28bf18a5d23df2a2783d3a20ffedffc6543a226e127ff70fba2c543c83aaaaa2bdcc1cad4a5d7aa11ea271d77ce9541dce8128030ffdea4399a9c4a29902a177f60b984fde641dd90838d41644593a379f288d1205a9c4ba304a72b9e5c7dca1dd606e3d6825f6fdb7540af0e3dbcdd646c40e82f0ec5aaa0ceac5f415c9fea1a9eebfba1cdea506cc88490ad71c601d1300fc72b960d0c8bce5b822630cd596a5c7bd1b601f4cd077ac2e2eba69b536b945ea4ae2b1f89c1ca21110ab446266d7406608dccfb0ecd76076870e47485f3883335191a972ef181584153594d25c75d1b53f45972a23029e61df9579fb9916e4bee1e74041c7f43aa1325971fea45c77cab0a40859b532cd5d397177dc5e9a15e3f6e79a7819186b113fc6944f72d207fd8446a8e7b55e161ca95dd55db41ed2ee64bd463dcbd013da2136a85e58b42073b575607c1f924c535c6a681d65248397057ef79694365658b4d740a1fa026eac49622305588c1344aed955b18e13a577543354e7d65009c331b2288f4705639c8c7640e05ca538a7fffb66e85fc39adf8621990c5cb2dc960223a948a56f478f57a0903d656bf2ce916afe750ce048d9f7b9777d6edf4283bcfc8f70d7c16ec5452427597b08897888af361387c0c388ddf4002ab629627776010d5dc0f9bb1b2ca3a328d8e24f74f33e63b71e4135824b2a018edb16fa23586298639ac388d14b69e98a06bb726cb8b68a2aefaff924290e694ccad4f4838dcb05871c3f4134a9a416b5a29d6790ef143647b75cd1e72c7fde8fcafa11b9a5936f43c5559629bb3f718836a8d1df692d5e3318b720a38fe64f8cbd910e9fe681253636244d29794371aa0ec1608758a2c706f63424dcbec96932cf74e05fd85974087f5a2052c1a1ae060688c1e1302b06464dd83d66ac8a608479f669db41029ceede5b6beabdfa3f72048586e2ea5b6de0d7ddec698501655a7dafdebca46947a0526d5e76421db06524b2da436798ba65b79bdff1b6317ec16655ce8d8e529dd7bd66808da5aca916f74e627d4e82712a60c1f63dc48d847be5beaa61d80003fa6cd60e50f25a66e206874528edc217cf1ce0bdd3b40d627596b8cc9307fd18f0f22005f1f0f8bf46143b4b7b91c50354bf9f7292d6532705ddc8217cd683e682bd9912013cb3a9f192696bf14f2f8ef86aba0478010b81398c614a0438db1bf28f8081d147984ff4cf7aee38015e6d73c05c18341113bb8ac279e2904dfcf239e8fe21b91367b11e90d59189adada728174238950017ef79e61a52e327e8796efa7e4bf2ec0d067026c659c645b910020361f27159b580c3a86aee4bba3b0d67e3467a35cbb816cdd680f48d960a1ac5b3f7e4a2b996f596c53e861bf59018017b1b385c680721db66af0dce78f54afdab584606af4ea8f5c9c3d46490f7cb2689b8414dee64caf9d7d87d3bdcd67500eaa5bff60a69d7d5b1590b02257d32ef908bb602f7db66ed8e202155324e00a0b1b5b8e3f60123756f86a2c18c9f12c45e7aaa9f46897bfff81d4d24ab4a4b04d3f31b6d2b3e4285189c8cc453d79329cbe38b5fe1ea8597f4fecdf2cac3060ba288a4badfa0d51ac9b3fe7c0316d579b31190c1e837d96e182a0ac1b48434a996cae54e38f1f77c18b28f471d1cf16c8dbd6be3d471901612b7f9cc10862b92261b11dbd92b99b401255630576aef5636408b7bb4cb5f9f9518e236ee7131f39c1823390f34ead642c6d0ccd70a029a1fe44aa65457acfc1f872fc6370bd665e9a881e4d6c88b9bc1d07a5ed115d429490732f3f0deb0bd7b50a6cec00ed8a2f47611d65f53cf3899b69521951476c77e392bf203cadf0c888b9c729aefd2fa8b607d6c4476accd334cbdbfa7d025ce0732335e809f181ab3c1f3f153fdb9839644b87f2cdaf551be928f1524bf34a7dad2440db79210590c6db56a866ba6b00a89c73f5d44602c40b181d5ffe3b3f83bb88aa5a39ee6f946152f9041166b951925b467150f3da7264996e155ab06f232a8dc1201e2f389d574a3ce66ac156c2682357cef65bb1c876ccc32973c88bb22a7ec59741910593eff6d678eb4eebfb24e849c8f6056120977b92023d0ab2af1bdd14690c0437babd4408e6a7e3229dc48895abe33d18316727a47beb07ad0d4359b6de1ed38b2521ba6b007f117e78b4b789cb971a26918699c50f9cd66cbf96ebbed8e661195b99e342b2bbfda3acf52dbd5990951943b1ea79202b2f14e15b3ccd5636642136c410b26a4f2cdc1165d48d29d3984e1de983694f92f14434be79296e3e7c4dd3a3bde6bfba9c01f5d8ad85e779f77d1a2176fead7c95b473bb09cbf1ab421ee4c7216c414008475bde49c70b6c704567ff8d6ac2f63eaca1fb3c4fae090ff35c4636e423b90afeae55e06075054681c16623907a5f9c5e15fa1e2176774fda01b556f86f5ad382b33d752cc0a5933ea1d2d7b707e543e91c143006cc458ce6e3c14497db4688a41e5e70c1a38883c5c2e2b1b6d9b6beacfe7483c5ddc5e59f43b103e9addda5290fbf60174998b9149e7b84bfe2ae7474e3806b72d68090147720a908ad23bc102e41c97cb12793c546c9a5b0b353e49fa1f0a09203d3605712b6ad4eeade928daf697a8a3adfef203e3e69fec4c891c16d8595139b15df700327556f693c1c208c95dbde1eaa3206e83cf5d738062713e58798cec19469bf05d4e8a0acabab3d6b7a92cd135b781653b0a21ce9439de9bb7e1432d0fced1c82873ea2aa9e8f7811ec832f1c5e5f2adc8538892f160488acd296bcd9960ad6479dbccbf735ca9d06b16d13f5bc7914e61ad2b5f6aa99563e3be8d065af14279ff4ccdcc86e9f947c775aa256c020ff4a7d2f5af28bb5accfab2091dfd3c0", 0xeff}, {&(0x7f0000002640)="5214fd8a6402b00b9597255482873f9e9af8bdf9217b334241c90b1378626b08e38730f81d95caba449dec193f1fdb4c59e2ee1ab584c9d2977af6c1c672f18a8ef2ce5cf4ca9dcdf9bb0c7b22303440ac42174374f7e7ef63115be02f43c12308", 0x61}, {&(0x7f00000026c0)="9b5e312069f162220991c6b88c18f14a2a8ae197e5e13ccab2919f", 0x1b}, {&(0x7f0000002700)="c951d71d80f405db58450a57447c32fc77d54bc4a9a547c4bfaec0631e3e38e75e696ff6133182c8f398bbed446227d5fcd78d34e3a3a752e5d84e325b7559ca51bc7058116a349ba09f946fc371a3fd6adffd81f92719129f9019fae05e4816f2c955b8ecdc90ba374e2f0e7d23705893e8ad7349bad3ef2af2760365d0092d617f2c2d13e7e368", 0x88}, {&(0x7f00000027c0)="027e0a916919853737986ce52ca2fc9b1f440b95d0c35affd2e84637fe421ffa923521ff8e218736587d9a1ff3b214b933ebb815c88182962ddf6c29589bf60c43a24b7c1aa87a2b9fea2fadcc7c2d972f4fcc61474f985795c339ab9c8809f63fb7ef7f7d70376f29e32a7a448fae269ee3c363bdb261e3f6551601c0c3ed77a5444ceb525e357de473b47dbb3aa5c8", 0x90}, {&(0x7f0000002880)="d5c972fa39744bf51b88b0516cfabe47782a73fe3a79176cda8f3409dab497afdffc1c064db243434f5e8e56cfeb20bf829a742d74e8acc62fb55f2e3e5fee6b04daa73ee910c6ea8670c14c010a49e82a23d68063fd00d5e00736e72993718a8e867842363c8087c03c3a35f87cf3f305a51125b5b84304557c143e5f2a6d764d5d8213e6908f16a2b640c7f459baaf5222ba01b40f4f470670daa1fa01194917fe8016bdbf5b70d7f6e82e3be7927a8a1ce3c2124ef4e918900c183c8da5f46079a40c7ddbab80c6d321feb4d7ceeac5", 0xd1}], 0x6}}, {{&(0x7f0000002a00)=@isdn={0x22, 0x12, 0x6, 0x54, 0x4}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002a80)="52d868e6acc9ec91f7828960682fd23eb9af52001ab16d6f89365dd6fdd5d614ed0ce7f22164ae067768df952e1dc64e57450e5c6c99805e3cb23d9aa06c24c7d14647902f4a28248b2840e76e90bb484beb4c4bf5dcb1a187fa6a8583dc20677baff20392b50eaf451e81b0204882cf898d4676762e829ed3a0f1d46ef6985f8b5e06761ae028daa515886853f14dbe5762817dc72278a0f51ca8ad229b1174b83d8095df", 0xa5}, {&(0x7f0000002b40)="42475ac2d4b802c545ec10b9a0ecdf013ebe09af782589a2abe72e8a06792f6002e85e32a0b79ca8ec", 0x29}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="58000000000000ff0000000003000000154891ac68cfbc1ef8e363ba88794044fcd1100445d6aa94a18347299838ace64ad4031c797a1703ba452ced8ecd02b4acece734daf2ea495e0000409ec7c7f1e232718614cd88520000007358718f83c63861b774729543c7f26fc894d1afdd0af3cff3ae7a5b35a55451700a606b85bfa25b136ab889c43a643d522cbdd5f31f74db8c1236a4c6a9ada86828557cca117d92ddadf9abac25d2c8ac9f570d2ab2d60f1c5453deb16d87cddfd29f64cb50f97ca3e3f4"], 0x58}}, {{&(0x7f0000002c40)=@ax25={{0x3, @default, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast]}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002cc0)="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", 0x1000}, {&(0x7f0000003cc0)="f4e88e676d2ceae97bb4cd328b79269bc1c86c3efd78f8146a9f7405f73c355ca64b32f9445214f026ca3ee1d6ab19e08b7ed02b4f78f2f65928ed00639746eac68b577b14582c196fef17f66d5e853dc3f7d24f2e482a61288f0b3878a1", 0x5e}, {&(0x7f0000003d40)="647ed63bcf9d0f570a0ef505118ea63a4be1a6ce9ed34149d87d85c8ae25f7f30b71ef6698fc9bd6e434136bea02aac1938b5339893b320f8625c701824e1bba4dfe38c2b8228a7f4540f24cd9a3c351763f12c12aea0e5f9239e6721ee71a8123a6b582a57e7ea57cf98206af51f0dabe876f66e2a4c63b3e2bc52436a4a81048b68907667e96a3a5c80dc577622764a8eab5cf05d734c94fa0923f2c6921f2580ddf15fb3544a79d146a7e4b3a57edce018cdd597036ecb465207c9287730a58c8c1056ae32f866c7e71d8e080af2fdc043c37a30c04282f", 0xd9}], 0x3, &(0x7f0000003e80)=ANY=[@ANYBLOB="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"], 0x600}}], 0x4, 0x4040001) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000180)) connect$can_j1939(r2, &(0x7f00000000c0)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x3}, 0x1}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x30, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x66c2, &(0x7f0000000700)={0x0, 0xf20f, 0x40, 0x2002, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r9, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 5.858587474s ago: executing program 0 (id=1653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ptrace(0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x62d2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x8864000000000000) 5.22063333s ago: executing program 3 (id=1657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r2, 0x0, 0x0, 0x80000) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r3, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r6, 0xc01864c2, &(0x7f0000000200)) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0x190b, 0x2}, @flat=@weak_binder={0x77622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/152, 0x98, 0x0, 0x2a}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x3a, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x66642a85, 0x7fffc, 0x0, 0x0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x2000}], 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df000000080007000200000008003a"], 0x94}}, 0x4) 5.077874725s ago: executing program 3 (id=1661): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/102, 0x66}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109020e47775fd8100c080b0102010130220904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c80010904ff02000102300009040201010102304087ed760857dd18a89d00172401060080000007000200000000000000064a0900100905"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) tkill(r2, 0x2b) syz_usb_control_io$uac3(r1, 0x0, 0x0) 4.485532202s ago: executing program 2 (id=1666): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x280042) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r3 = fcntl$dupfd(r2, 0x406, r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) write$binfmt_elf64(r3, &(0x7f0000000f80)=ANY=[], 0x540) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) (async) shutdown(r2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 4.429011779s ago: executing program 1 (id=1667): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000180)) 4.379464064s ago: executing program 1 (id=1668): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xa5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xe, [0xf68f, 0x8, 0x9, 0x1ff, 0x1ff, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x200006, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffffffe, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0x2, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0xfffffffe, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x0, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x3, 0x33e3, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x105, 0x80000005, 0x8, 0x3, 0x1, 0xfffffffa]}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, @mcast1, @empty, 0xb6, 0x20, 0x100009, 0x45}}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="08617400000000000000000000000000000000000000000000000000000000000500"], 0x78) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r0) 4.033918172s ago: executing program 2 (id=1670): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x7, 0x0, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x1, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) close(r0) 4.00492955s ago: executing program 2 (id=1672): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000fe0000000004ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) 3.890498693s ago: executing program 2 (id=1673): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) 3.805226386s ago: executing program 2 (id=1675): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xa5) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, @mcast1, @empty, 0xb6, 0x20, 0x100009, 0x45}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="08617400000000000000000000000000000000000000000000000000000000000500"], 0x78) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r0) 3.612463666s ago: executing program 0 (id=1676): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @dev, @val={@val={0x88a8, 0x2, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x80, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c11d58674e624c1a146558aab57fff"}}}}}}}, 0x0) socket$kcm(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x93, 0x0, 0xf, "100056f200"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8002) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001180)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xfd7c0}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) madvise(&(0x7f0000e9c000/0x2000)=nil, 0x2000, 0xc) ioctl$TCSETS(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={0x3, 0xfffffff8, 0x0, 0x401, 0x7, "bb40af00008000"}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0xfffb, 0xfffffffd, @loopback}, r5}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0x7fff, @loopback, 0x3}}}, 0x118) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000300000008001b400000ee000800290041010000"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 2.624627002s ago: executing program 4 (id=1677): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) rt_sigsuspend(0xffffffffffffffff, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ftruncate(r0, 0xffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x26, 0x301, 0x70bd28, 0x25dfdbfb, {0x15}, [@typed={0x8, 0x14e, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb8) 2.484740161s ago: executing program 4 (id=1678): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r1, &(0x7f0000000180)) 2.428630518s ago: executing program 4 (id=1679): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, 0x0, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x4b, &(0x7f0000000000), 0x80001}) 2.331422565s ago: executing program 4 (id=1680): openat$vimc1(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x93bdb000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000003c0)=""/144, &(0x7f00000000c0)=0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x80000300, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r0, 0xfffffb6e}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x12, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x42, 0x42, "f3", "f4"}}}}}, 0x0) 2.277047438s ago: executing program 3 (id=1681): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) (fail_nth: 1) 1.952319347s ago: executing program 3 (id=1682): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d4", 0x7a}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc", 0x2a}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a9", 0xb2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.950308459s ago: executing program 0 (id=1683): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x780}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) getsockopt$MRT6(r0, 0x29, 0x1f, 0x0, &(0x7f0000000080)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, 0x0, 0x41) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r5, 0x20, 0xfffffffffffffffe}, 0x10) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r6, 0x81, 0x1, &(0x7f00000006c0)='P') 1.23480429s ago: executing program 4 (id=1684): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4040840) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_sfeatures={0x3b, 0x5, [{0x8001}, {0x1, 0x2}, {0x3cb6, 0x5}, {0x6, 0x5}, {0x1f, 0x7}]}}) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xd) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f0000000280)={0xb, &(0x7f00000001c0)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xe76, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, 0x90) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xd01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={r5, 0x0, 0x3a, 0x1000, &(0x7f00000000c0)="7dd53cbd3194ca5fdf819f26407baee211bc663e897588e401f0e4a0fb45b71d77741621473ac658833ca3a65d0cce88271044d28f364b55ad3b", &(0x7f0000002600)=""/4096, 0x5, 0x0, 0x18, 0xee, &(0x7f0000003600)="c56a8c847238ff52ad0600"/24, &(0x7f0000000500)="229659ccd6f855f1bd40fd739fa8de0cf1ea3f2f73819162675a1ad240b49256c8b5ad664c93136c96f3edc592119ca3df9a80f378d8a74b6a002cad87c687c57201c01f48a4b96bc64e86aafbe22b123676a913b97292c8b81cb7f354a8bbe56b6801d91ea0f5a62faf0660d63f0f204da7c2eb0ff4276ef0f673fc3e0daa8a6375ae443d958b949236f304d7b7ec3c74a34e82949b401a080000000000000019668bedd2eec7ed2766b9f69557646f981aeb9342e4fbd9ee239c7e20caa8beb6b9a56f39c059b4723325cfee096fe5c09269845ea686525461429559d4b3dcbb5134a83966f6c5c8a85a343480", 0x2, 0x0, 0x3}, 0x50) r6 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp6(0xa, 0x2, 0x73) 1.211934424s ago: executing program 1 (id=1685): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) 1.108479024s ago: executing program 1 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noxattr}, {@cache_readahead}, {@privport}]}}) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x4) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="740000001800010c012328e51a85722e00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d30000000000000000000000024000e00"/92], 0x74}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000fa00000000001000000018000180140002006e657464657673696d30000000000000080011"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044890) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000001c80)=[{&(0x7f0000000c80)=',', 0x1}], 0x1) recvmmsg$unix(r10, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010000, 0x0) 935.996777ms ago: executing program 4 (id=1687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ptrace(0x10, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x62d2000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x8864000000000000) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f009a9d7e2636f36f0f01d1baf80c66b85ff5e48366efbafc0cec8fe978023466660fde7933f3e1a3646536f30fa6c066b90d0a00000f32362ef4", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x418, 0x1d0, 0x1d0, 0xffffffff, 0x118, 0x1d0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, &(0x7f00000000c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x21}, @multicast2, 0x0, 0x0, 'macvlan0\x00', 'tunl0\x00', {}, {}, 0x8, 0x0, 0x58}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x9], 0x1}}, @common=@addrtype={{0x30}, {0x40, 0x400, 0x1, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}, @icmp_id=0x68, @port=0x4e20}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @gre_key=0x4, @gre_key=0x8}}}, {{@ip={@private=0xa010102, @local, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'syzkaller1\x00', {}, {0xff}, 0x1d, 0x3, 0x48}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@length={{0x28}, {0xfa0}}, @common=@inet=@length={{0x28}, {0x0, 0x8000, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2, @remote, @port=0x4e21, @gre_key=0x7}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x68, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='$', 0x1}], 0x1}}], 0x2, 0x2090) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000002080)) 934.52415ms ago: executing program 3 (id=1688): r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) rt_sigsuspend(0xffffffffffffffff, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ftruncate(r0, 0xffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x26, 0x301, 0x70bd28, 0x25dfdbfb, {0x15}, [@typed={0x8, 0x14e, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f02000007683815b12e890300000a000000059afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000010007bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000", 0xb8) 836.56907ms ago: executing program 3 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x0, 0x20}, 0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) fcntl$notify(r5, 0x402, 0x91ea6c12f182534) r6 = openat(r5, &(0x7f0000000000)='./file0\x00', 0x0, 0x131) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000008c0)={0xc0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x39) vmsplice(r7, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 643.069092ms ago: executing program 1 (id=1690): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000680)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x78, &(0x7f0000000000)="3186f95917a9ff826a9721fbce0c7a0ed31946a4b25f665855ea01b3b0a0a929b4383ce0b8f3e828ce468668a0e78bb297481ce0728936188a395c59d03ea7e8d537b8c8d7d761878784ec81da0cdbd686ced515835502bf7885b37eae2fda8bbc94e7dc65bea3d7c2abf4677636ae00966980b9f1d4bfa8", 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 641.207776ms ago: executing program 2 (id=1691): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/102, 0x66}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r1 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000103d10000140000102030109020e47775fd8100c080b0102010130220904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c80010904ff02000102300009040201010102304087ed760857dd18a89d00172401060080000007000200000000000000064a0900100905"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) tkill(r2, 0x2b) syz_usb_control_io$uac3(r1, 0x0, 0x0) 0s ago: executing program 1 (id=1692): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9, 0x7fffffffffffffff, 0x5, 0x1, 0x2, 0x5, 0x3e0, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x7524584d24ce333c, 0x181) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000100)={@remote, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff89, &(0x7f0000000280)={&(0x7f0000000180)=@mpls_newroute={0x0, 0x18, 0x100, 0x70bd26, 0x25dfdbfb, {0x1c, 0x14, 0x80, 0x6, 0xfc, 0x1, 0xc8, 0x0, 0x80}, [@RTA_MULTIPATH={0x0, 0x9, {0x1000, 0x2, 0xb, r5}}, @RTA_DST={0x0, 0x1, {0x2}}]}, 0x18}, 0x1, 0xba01}, 0xc0) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090269000301f81005080b010000002008090400000001012000092401fdff0a09004709040100000102200009040101010102200040000204d80825cc00000904020000010220000904020101010220000905820900040d0700082501010f04100000000000000000"], 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) kernel console output (not intermixed with test programs): cast mode [ 529.481407][T11220] usb usb7: usbfs: process 11220 (syz.2.1215) did not claim interface 0 before use [ 529.600144][ T5705] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 529.729285][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 529.729302][ T29] audit: type=1400 audit(2000000003.950:768): avc: denied { write } for pid=11216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.793499][ T5705] usb 1-1: config 0 has no interfaces? [ 529.799076][ T5705] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 529.821186][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.842501][ T5705] usb 1-1: config 0 descriptor?? [ 529.904146][ T29] audit: type=1400 audit(2000000004.120:769): avc: denied { write } for pid=11234 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.948009][ T5705] usb 4-1: USB disconnect, device number 32 [ 529.969250][ T5705] etas_es58x 4-1:0.2: Disconnecting syz syz [ 530.188128][T11218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.197371][T11218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.206947][ T24] usb 1-1: USB disconnect, device number 23 [ 530.390197][ T5746] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 530.463624][ T29] audit: type=1400 audit(2000000004.690:770): avc: denied { write } for pid=11240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.521886][ T5705] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 530.574378][ T5746] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 530.583829][ T29] audit: type=1400 audit(2000000004.800:771): avc: denied { write } for pid=11251 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 530.610103][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.628013][ T5746] usb 3-1: Product: syz [ 530.628951][ T45] usb 2-1: USB disconnect, device number 18 [ 530.652102][ T5746] usb 3-1: Manufacturer: syz [ 530.679696][ T5746] usb 3-1: SerialNumber: syz [ 530.691808][ T5705] usb 4-1: config 0 has no interfaces? [ 530.713314][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 530.721691][ T5705] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 530.749282][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.767014][ T5705] usb 4-1: config 0 descriptor?? [ 530.874254][T11256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.882757][ T24] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 530.900846][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.932151][ T24] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 530.938497][ T29] audit: type=1400 audit(2000000005.160:772): avc: denied { read write } for pid=11259 comm="syz.1.1222" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 530.950107][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.992034][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1222'. [ 531.003879][ T29] audit: type=1400 audit(2000000005.200:773): avc: denied { open } for pid=11259 comm="syz.1.1222" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 531.028239][ T29] audit: type=1400 audit(2000000005.200:774): avc: denied { ioctl } for pid=11259 comm="syz.1.1222" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 531.069897][T11260] input: syz1 as /devices/virtual/input/input7 [ 531.118160][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.128659][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.173100][ T24] usb 1-1: Product: syz [ 531.177923][ T24] usb 1-1: Manufacturer: syz [ 531.183800][ T24] usb 1-1: SerialNumber: syz [ 531.199189][ T24] rtl8150 1-1:1.0: couldn't find required endpoints [ 531.211108][ T24] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 531.502002][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.513125][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.560455][ T24] usb 4-1: USB disconnect, device number 33 [ 531.711889][ T5746] rtl8150 3-1:1.0: couldn't reset the device [ 531.726467][ T5746] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 531.755978][ T5746] usb 3-1: USB disconnect, device number 26 [ 532.052437][ T29] audit: type=1400 audit(2000000006.280:775): avc: denied { name_bind } for pid=11261 comm="syz.4.1223" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 532.129840][ T57] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.143861][ T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.158852][ T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.180134][ T57] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.439008][T11282] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.753189][ T24] usb 1-1: USB disconnect, device number 24 [ 532.793609][ T29] audit: type=1400 audit(2000000007.010:776): avc: denied { setopt } for pid=11287 comm="syz.4.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 532.892053][T11295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.940115][ T5746] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 533.535194][ T5746] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.557715][ T5746] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 533.569162][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.577888][ T5746] usb 3-1: Product: syz [ 533.583247][ T5746] usb 3-1: Manufacturer: syz [ 533.587997][ T5746] usb 3-1: SerialNumber: syz [ 533.829521][ T5746] usb 3-1: USB disconnect, device number 27 [ 533.866062][T11305] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.874463][T11305] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.012578][T11305] tipc: Resetting bearer [ 534.089953][T11305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.090702][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 534.102287][T11305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.579360][ T29] audit: type=1400 audit(2000000008.390:777): avc: denied { create } for pid=11310 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 534.651958][ T9] usb 1-1: config 0 has no interfaces? [ 534.661091][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 534.691628][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.784182][ T9] usb 1-1: config 0 descriptor?? [ 535.167360][ T5746] usb 1-1: USB disconnect, device number 25 [ 535.256533][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.309703][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 535.371204][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.427955][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 535.466052][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.507964][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 535.547490][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.586161][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 535.808851][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 535.808868][ T29] audit: type=1400 audit(2000000010.030:779): avc: denied { create } for pid=11328 comm="syz.2.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 535.847449][T11329] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.278922][ T29] audit: type=1400 audit(2000000010.070:780): avc: denied { write } for pid=11328 comm="syz.2.1244" path="socket:[29452]" dev="sockfs" ino=29452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 536.364232][T11339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.545462][T11344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.701197][T11350] nbd1: detected capacity change from 0 to 63 [ 536.716437][T11353] block nbd1: NBD_DISCONNECT [ 536.727574][T11353] block nbd1: Disconnected due to user request. [ 536.744032][T11355] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 536.759073][T11353] block nbd1: shutting down sockets [ 536.769038][ C1] blk_print_req_error: 137 callbacks suppressed [ 536.769058][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.784425][ C1] buffer_io_error: 138 callbacks suppressed [ 536.784436][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 536.798026][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.807068][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 536.814790][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.823875][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 536.831604][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.840684][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 536.851781][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.861174][ T1611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 536.869576][ T1611] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.878744][ T1611] Buffer I/O error on dev nbd1, logical block 1, async page read [ 536.887509][ T1611] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.896804][ T1611] Buffer I/O error on dev nbd1, logical block 2, async page read [ 536.905179][ T1611] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.914606][ T1611] Buffer I/O error on dev nbd1, logical block 3, async page read [ 536.923622][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.933476][ T1611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 536.943213][ T1611] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 536.952682][ T1611] Buffer I/O error on dev nbd1, logical block 1, async page read [ 536.962147][ T5863] ldm_validate_partition_table(): Disk read failed. [ 536.972083][ T5863] Dev nbd1: unable to read RDB block 0 [ 536.982850][ T5863] nbd1: unable to read partition table [ 537.019470][ T5863] ldm_validate_partition_table(): Disk read failed. [ 537.044297][ T5863] Dev nbd1: unable to read RDB block 0 [ 537.056224][ T5863] nbd1: unable to read partition table [ 537.264868][ T29] audit: type=1400 audit(2000000011.490:781): avc: denied { read } for pid=11364 comm="syz.1.1257" name="usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 537.381262][ T29] audit: type=1400 audit(2000000011.490:782): avc: denied { open } for pid=11364 comm="syz.1.1257" path="/dev/usbmon7" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 537.413648][ T29] audit: type=1400 audit(2000000011.540:783): avc: denied { ioctl } for pid=11364 comm="syz.1.1257" path="/dev/usbmon7" dev="devtmpfs" ino=738 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 537.545925][ T29] audit: type=1400 audit(2000000011.640:784): avc: denied { write } for pid=11368 comm="syz.2.1258" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 538.943984][ T29] audit: type=1400 audit(2000000013.170:785): avc: denied { listen } for pid=11374 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 539.066581][T11377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.134277][T11379] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1262'. [ 539.226177][ T29] audit: type=1400 audit(2000000013.450:786): avc: denied { ioctl } for pid=11378 comm="syz.2.1262" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 539.580425][ T29] audit: type=1400 audit(2000000013.510:787): avc: denied { create } for pid=11383 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.654972][ T29] audit: type=1400 audit(2000000013.520:788): avc: denied { read } for pid=11383 comm="syz.1.1265" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 539.913406][T11395] block nbd1: NBD_DISCONNECT [ 540.024009][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 540.201612][ T24] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 540.210712][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 540.223423][ T24] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 540.233221][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.247542][ T24] usb 5-1: Product: syz [ 540.255838][ T24] usb 5-1: Manufacturer: syz [ 540.264770][ T24] usb 5-1: SerialNumber: syz [ 540.280468][ T24] usb 5-1: config 0 descriptor?? [ 540.370126][ T5746] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 540.445291][T11413] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1271'. [ 540.531489][ T5746] usb 1-1: config 0 has no interfaces? [ 540.531525][ T5746] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 540.531543][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.533739][ T5746] usb 1-1: config 0 descriptor?? [ 540.825231][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 540.836183][ T29] audit: type=1400 audit(2000000015.050:833): avc: denied { create } for pid=11404 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.895908][ T24] mos7840 5-1:0.0: required endpoints missing [ 540.979386][ T29] audit: type=1400 audit(2000000015.050:834): avc: denied { read write } for pid=11404 comm="syz.0.1270" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 541.093625][ T24] usb 5-1: USB disconnect, device number 20 [ 541.259186][ T29] audit: type=1400 audit(2000000015.050:835): avc: denied { open } for pid=11404 comm="syz.0.1270" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 541.531063][ T29] audit: type=1400 audit(2000000015.080:836): avc: denied { create } for pid=11404 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 541.844055][ T29] audit: type=1400 audit(2000000015.410:838): avc: denied { ioctl } for pid=11404 comm="syz.0.1270" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 542.050072][ T29] audit: type=1400 audit(2000000015.400:837): avc: denied { lock } for pid=11416 comm="syz.1.1274" path="socket:[28447]" dev="sockfs" ino=28447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 542.241078][ T29] audit: type=1400 audit(2000000015.660:839): avc: denied { read append } for pid=11404 comm="syz.0.1270" name="sg0" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 542.412402][ T29] audit: type=1400 audit(2000000015.660:840): avc: denied { open } for pid=11404 comm="syz.0.1270" path="/dev/sg0" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 542.599840][ T29] audit: type=1400 audit(2000000015.680:841): avc: denied { map } for pid=11404 comm="syz.0.1270" path="/dev/sg0" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 542.755296][ T29] audit: type=1400 audit(2000000015.680:842): avc: denied { write execute } for pid=11404 comm="syz.0.1270" path="/dev/sg0" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 543.514649][T11426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.736227][T11434] syzkaller0: entered promiscuous mode [ 543.754633][T11434] syzkaller0: entered allmulticast mode [ 543.778836][T11434] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 545.783042][ T9] usb 1-1: USB disconnect, device number 26 [ 546.216454][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 546.216487][ T29] audit: type=1400 audit(2000000020.420:874): avc: denied { name_bind } for pid=11475 comm="syz.0.1285" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 546.641008][ T29] audit: type=1400 audit(2000000020.420:875): avc: denied { node_bind } for pid=11475 comm="syz.0.1285" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 546.665638][ T29] audit: type=1400 audit(2000000020.860:876): avc: denied { write } for pid=11486 comm="syz.4.1287" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 546.854848][ T29] audit: type=1400 audit(2000000020.890:877): avc: denied { create } for pid=11486 comm="syz.4.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.969187][T11491] usb usb7: usbfs: process 11491 (syz.4.1287) did not claim interface 0 before use [ 547.277746][T11483] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 547.313245][ T29] audit: type=1400 audit(2000000021.050:878): avc: denied { bind } for pid=11481 comm="syz.3.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 547.437097][ T29] audit: type=1400 audit(2000000021.050:879): avc: denied { connect } for pid=11481 comm="syz.3.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 547.476105][T11490] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 547.571194][T11496] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 547.590133][ T29] audit: type=1400 audit(2000000021.140:880): avc: denied { ioctl } for pid=11486 comm="syz.4.1287" path="socket:[29762]" dev="sockfs" ino=29762 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 547.670626][ T29] audit: type=1400 audit(2000000021.190:881): avc: denied { getopt } for pid=11486 comm="syz.4.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 547.776205][ T29] audit: type=1400 audit(2000000021.600:882): avc: denied { write } for pid=11466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 547.856730][ T29] audit: type=1400 audit(2000000021.620:883): avc: denied { write } for pid=11481 comm="syz.3.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 548.723631][ T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 548.900919][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 548.920090][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 548.936746][ T45] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 548.972567][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 549.019505][ T45] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 549.044820][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.075007][ T45] usb 2-1: Product: syz [ 549.092922][ T45] usb 2-1: Manufacturer: syz [ 549.107542][ T45] usb 2-1: SerialNumber: syz [ 549.435297][T11537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.469844][T11529] syz_tun: mtu less than device minimum [ 549.520623][T11537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.450668][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 550.470429][ T45] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 550.488231][T11556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.996561][ T45] usb 2-1: USB disconnect, device number 19 [ 551.717947][ T8617] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 551.755415][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 551.755430][ T29] audit: type=1400 audit(2000000025.980:919): avc: denied { write } for pid=11542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.872540][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.889628][ T29] audit: type=1400 audit(2000000026.090:920): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 551.891528][ T8617] usb 4-1: config 0 has no interfaces? [ 552.001501][ T8617] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 552.018108][ T29] audit: type=1400 audit(2000000026.240:921): avc: denied { write } for pid=11571 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.144768][ T29] audit: type=1400 audit(2000000026.370:922): avc: denied { name_bind } for pid=11578 comm="syz.4.1306" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 552.200954][T11586] IPVS: length: 144 != 8 [ 552.201663][ T29] audit: type=1400 audit(2000000026.400:923): avc: denied { read write } for pid=11579 comm="syz.1.1307" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 552.205299][ T8617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.239457][ T8617] usb 4-1: config 0 descriptor?? [ 552.848836][ T29] audit: type=1400 audit(2000000026.400:924): avc: denied { open } for pid=11579 comm="syz.1.1307" path="/dev/input/event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 552.873071][ T29] audit: type=1400 audit(2000000026.820:925): avc: denied { setopt } for pid=11572 comm="syz.0.1304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 553.247374][T11593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 553.446738][ T29] audit: type=1400 audit(2000000027.670:926): avc: denied { mount } for pid=11597 comm="syz.4.1308" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 553.745904][ T8617] usb 4-1: USB disconnect, device number 34 [ 553.988437][ T29] audit: type=1400 audit(2000000028.210:927): avc: denied { search } for pid=11597 comm="syz.4.1308" name="/" dev="configfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 554.074409][ T29] audit: type=1400 audit(2000000028.290:928): avc: denied { mounton } for pid=11597 comm="syz.4.1308" path="/267/file1" dev="tmpfs" ino=1416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 554.118949][T11614] sctp: [Deprecated]: syz.0.1312 (pid 11614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.118949][T11614] Use struct sctp_sack_info instead [ 554.190086][ T5746] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 554.382181][ T5746] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 554.405137][ T5746] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.443793][ T5746] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 554.466081][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.514547][ T5746] usb 3-1: Product: syz [ 554.534666][ T5746] usb 3-1: Manufacturer: syz [ 554.545567][ T5746] usb 3-1: SerialNumber: syz [ 554.605449][ T5746] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input8 [ 554.840188][ T4962] bcm5974 3-1:1.0: could not read from device [ 555.199851][ T5746] bcm5974 3-1:1.0: could not read from device [ 555.237890][ T4962] bcm5974 3-1:1.0: could not read from device [ 555.296418][T11631] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.308863][ T5746] input: failed to attach handler mousedev to device input8, error: -5 [ 555.357223][ T5746] usb 3-1: USB disconnect, device number 28 [ 555.366692][ T4962] bcm5974 3-1:1.0: could not read from device [ 555.420724][ T5863] bcm5974 3-1:1.0: could not read from device [ 555.489242][ T5863] udevd[5863]: Error opening device "/dev/input/event4": No such file or directory [ 555.507921][ T5863] udevd[5863]: Unable to EVIOCGABS device "/dev/input/event4" [ 555.521260][ T5863] udevd[5863]: Unable to EVIOCGABS device "/dev/input/event4" [ 555.534693][ T5863] udevd[5863]: Unable to EVIOCGABS device "/dev/input/event4" [ 555.550516][ T5863] udevd[5863]: Unable to EVIOCGABS device "/dev/input/event4" [ 555.690501][ T8617] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 555.733482][T11643] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.850116][ T8617] usb 4-1: Using ep0 maxpacket: 32 [ 555.990101][ T8617] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 556.194975][ T8617] usb 4-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3 [ 556.269726][ T8617] usb 4-1: Product: syz [ 556.277155][ T8617] usb 4-1: Manufacturer: syz [ 556.289913][ T8617] usb 4-1: SerialNumber: syz [ 556.320461][ T8617] usb 4-1: config 0 descriptor?? [ 556.365457][T11652] sch_fq: defrate 0 ignored. [ 557.175334][T11670] nbd1: detected capacity change from 0 to 63 [ 557.225865][ T5616] block nbd1: Receive control failed (result -104) [ 557.277771][T11675] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.436633][ T8617] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 557.507974][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 557.508000][ T29] audit: type=1400 audit(2000000031.730:942): avc: denied { listen } for pid=11660 comm="syz.2.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 557.566292][ T29] audit: type=1400 audit(2000000031.770:943): avc: denied { shutdown } for pid=11683 comm="syz.4.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 557.613832][T11684] tipc: Enabled bearer , priority 0 [ 557.638981][T11684] syzkaller0: entered promiscuous mode [ 557.664729][T11684] syzkaller0: entered allmulticast mode [ 557.705409][ T29] audit: type=1400 audit(2000000031.920:944): avc: denied { write } for pid=11682 comm="syz.1.1331" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 557.776833][ T29] audit: type=1400 audit(2000000031.930:945): avc: denied { open } for pid=11682 comm="syz.1.1331" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 557.828320][T11684] tipc: Resetting bearer [ 557.854596][ T29] audit: type=1400 audit(2000000031.980:946): avc: denied { write } for pid=11689 comm="syz.4.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 558.090347][T11692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 558.104117][T11692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 558.192899][ T29] audit: type=1400 audit(2000000031.980:947): avc: denied { nlmsg_write } for pid=11689 comm="syz.4.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 558.214587][ T29] audit: type=1400 audit(2000000031.990:948): avc: denied { append } for pid=11682 comm="syz.1.1331" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 558.259432][T11682] tipc: Resetting bearer [ 558.265577][ T29] audit: type=1400 audit(2000000032.070:949): avc: denied { ioctl } for pid=11682 comm="syz.1.1331" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 558.329228][ T29] audit: type=1400 audit(2000000032.130:950): avc: denied { ioctl } for pid=11634 comm="syz.3.1316" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 558.380686][T11682] tipc: Disabling bearer [ 558.498086][ T29] audit: type=1400 audit(2000000032.610:951): avc: denied { read } for pid=11693 comm="syz.4.1334" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 559.104239][T11708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1337'. [ 559.147969][T11708] syzkaller1: entered promiscuous mode [ 559.153835][T11708] syzkaller1: entered allmulticast mode [ 559.182764][T11708] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 559.190176][ T5734] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 559.214897][T11708] Illegal XDP return value 70 on prog (id 25) dev syz_tun, expect packet loss! [ 559.313265][ T8617] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 559.320984][ T8617] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 559.330159][ T5734] usb 5-1: device descriptor read/64, error -71 [ 559.358504][ T8617] usb 4-1: USB disconnect, device number 35 [ 559.582247][ T5734] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 559.598144][T11718] sctp: [Deprecated]: syz.3.1340 (pid 11718) Use of int in max_burst socket option deprecated. [ 559.598144][T11718] Use struct sctp_assoc_value instead [ 559.645551][T11721] sctp: [Deprecated]: syz.3.1340 (pid 11721) Use of int in max_burst socket option deprecated. [ 559.645551][T11721] Use struct sctp_assoc_value instead [ 559.750169][ T5734] usb 5-1: device descriptor read/64, error -71 [ 559.776661][T11724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.861336][ T5734] usb usb5-port1: attempt power cycle [ 560.047388][ T8617] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 560.188089][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1347'. [ 560.212366][ T5734] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 560.237734][ T8617] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 560.241566][ T5734] usb 5-1: device descriptor read/8, error -71 [ 560.252157][ T8617] usb 4-1: config 0 has no interface number 0 [ 560.252200][ T8617] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 560.252227][ T8617] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.252250][ T8617] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.252272][ T8617] usb 4-1: config 0 interface 1 has no altsetting 0 [ 560.252300][ T8617] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 560.252325][ T8617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.254992][ T8617] usb 4-1: config 0 descriptor?? [ 560.328966][T11737] bridge1: port 1(veth3) entered blocking state [ 560.347131][T11737] bridge1: port 1(veth3) entered disabled state [ 560.354167][T11737] veth3: entered allmulticast mode [ 560.367293][T11737] veth3: entered promiscuous mode [ 560.413957][T11738] bridge1: port 2(veth5) entered blocking state [ 560.421245][T11738] bridge1: port 2(veth5) entered disabled state [ 560.428474][T11738] veth5: entered allmulticast mode [ 560.436392][T11738] veth5: entered promiscuous mode [ 560.497445][T11745] IPv6: NLM_F_CREATE should be specified when creating new route [ 560.500781][ T5734] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 560.507700][T11745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.520094][T11745] IPv6: NLM_F_CREATE should be set when creating new route [ 560.527322][T11745] IPv6: NLM_F_CREATE should be set when creating new route [ 560.532281][ T5734] usb 5-1: device descriptor read/8, error -71 [ 560.534567][T11745] IPv6: NLM_F_CREATE should be set when creating new route [ 560.545347][T11726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.571965][T11726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.587019][T11745] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1349'. [ 560.621360][ T5803] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 560.670598][ T5734] usb usb5-port1: unable to enumerate USB device [ 560.782735][ T5803] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 560.792706][ T5803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.813966][ T5803] usb 3-1: config 0 has no interfaces? [ 560.823117][ T5803] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 560.833028][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.843759][ T5803] usb 3-1: config 0 descriptor?? [ 560.926358][T11745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.005078][ T8617] uclogic 0003:145F:0212.001B: pen parameters not found [ 561.013284][ T8617] uclogic 0003:145F:0212.001B: interface is invalid, ignoring [ 561.081652][ T8617] usb 3-1: USB disconnect, device number 29 [ 561.540168][ T8617] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 561.702005][ T8617] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 561.710487][ T8617] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.720137][ T5734] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 561.720641][ T8617] usb 3-1: config 0 has no interfaces? [ 561.733745][ T8617] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 561.742858][ T8617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.754461][ T8617] usb 3-1: config 0 descriptor?? [ 561.871658][ T5734] usb 2-1: config 0 has no interfaces? [ 561.877281][ T5734] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 561.886777][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.897978][ T5734] usb 2-1: config 0 descriptor?? [ 561.985235][ T5734] usb 3-1: USB disconnect, device number 30 [ 562.007345][T11756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.015014][T11756] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.026739][T11756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.036009][T11756] tipc: Resetting bearer [ 562.066894][T11756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.075628][T11756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.088304][T11756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.098909][T11756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.111100][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.115878][T11756] veth1_vlan: left promiscuous mode [ 562.124234][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.125884][T11756] veth0_vlan: left promiscuous mode [ 562.135078][ T5344] usb 2-1: USB disconnect, device number 20 [ 562.139308][T11756] veth0_vlan: entered promiscuous mode [ 562.154933][T11756] veth1_vlan: entered promiscuous mode [ 562.163028][T11756] veth1_macvtap: left promiscuous mode [ 562.169170][T11756] veth0_macvtap: left promiscuous mode [ 562.175771][T11756] veth0_macvtap: entered promiscuous mode [ 562.182654][T11756] veth1_macvtap: entered promiscuous mode [ 562.192381][T11756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.201829][T11756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.210701][T11756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.218597][T11756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.230507][T11756] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 562.256356][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.263503][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.282854][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.289987][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.340759][ T7505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.349738][ T7505] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 562.371248][ T7505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.385630][ T7505] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 562.395981][ T7505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.405013][ T7505] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 562.416195][ T7505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.429269][ T7505] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 562.449138][T11759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.580107][ T5344] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 562.602486][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 562.602502][ T29] audit: type=1400 audit(2000000036.830:1005): avc: denied { create } for pid=11762 comm="syz.4.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 562.629503][ T29] audit: type=1400 audit(2000000036.830:1006): avc: denied { write } for pid=11762 comm="syz.4.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 562.652836][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.659352][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.750572][ T5344] usb 2-1: Using ep0 maxpacket: 8 [ 562.766170][ T5344] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 562.781542][ T5344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.797789][ T5344] usb 2-1: Product: syz [ 562.804348][ T5344] usb 2-1: Manufacturer: syz [ 562.810975][ T5344] usb 2-1: SerialNumber: syz [ 562.846087][ T5803] usb 4-1: USB disconnect, device number 36 [ 562.894887][T11773] fuse: Unknown parameter '' [ 562.928115][ T29] audit: type=1400 audit(2000000037.150:1007): avc: denied { listen } for pid=11774 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 562.951041][ T8617] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 562.966613][ T29] audit: type=1400 audit(2000000037.190:1008): avc: denied { accept } for pid=11774 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 562.988303][ T29] audit: type=1400 audit(2000000037.190:1009): avc: denied { write } for pid=11774 comm="syz.0.1362" path="socket:[30267]" dev="sockfs" ino=30267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.020670][ T29] audit: type=1400 audit(2000000037.190:1010): avc: denied { read } for pid=11774 comm="syz.0.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 563.321014][ T5803] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 563.325872][ T29] audit: type=1400 audit(2000000037.410:1011): avc: denied { create } for pid=11772 comm="syz.2.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 563.432160][ T8617] usb 5-1: config 0 has no interfaces? [ 563.463837][ T29] audit: type=1400 audit(2000000037.410:1012): avc: denied { write } for pid=11772 comm="syz.2.1361" path="socket:[31510]" dev="sockfs" ino=31510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 563.469013][ T8617] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 563.495923][ T5344] usb 2-1: USB disconnect, device number 21 [ 563.515316][ T29] audit: type=1400 audit(2000000037.690:1013): avc: denied { write } for pid=11772 comm="syz.2.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 563.614555][ T8617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.651254][ T5598] udevd[5598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.675078][ T8617] usb 5-1: config 0 descriptor?? [ 563.681101][ T5803] usb 4-1: Using ep0 maxpacket: 16 [ 563.691114][ T5803] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 563.739973][ T5803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 563.774430][ T5803] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 563.806194][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.843395][ T5803] usb 4-1: Product: syz [ 563.857622][ T5803] usb 4-1: Manufacturer: syz [ 563.870370][ T5803] usb 4-1: SerialNumber: syz [ 563.881391][ T5803] usb 4-1: config 0 descriptor?? [ 563.891435][ T5803] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 563.901037][ T5803] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 564.002413][T11767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.028603][ T29] audit: type=1400 audit(2000000038.250:1014): avc: denied { sqpoll } for pid=11792 comm="syz.2.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 564.032987][T11767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.072463][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.080639][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.094823][T11793] binder: 11790:11793 ioctl 541b 0 returned -22 [ 564.162239][T11767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.179974][T11767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.205027][T11789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.214556][ T5720] usb 5-1: USB disconnect, device number 25 [ 564.235906][T11789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.350574][ T5803] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 564.360244][ T5344] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 564.377418][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.402391][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.427118][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.444412][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.454396][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.464960][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.476605][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.488365][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.512437][ T5803] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 564.524937][ T5803] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 564.533861][ T5803] em28xx 4-1:0.0: No AC97 audio processor [ 564.534021][ T5344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 564.551375][ T5344] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 564.557701][ T5803] usb 4-1: USB disconnect, device number 37 [ 564.567692][ T5344] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 564.586742][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.595275][ T5344] usb 1-1: Product: syz [ 564.599682][ T5344] usb 1-1: Manufacturer: syz [ 564.604656][ T5803] em28xx 4-1:0.0: Disconnecting em28xx [ 564.606052][ T5344] usb 1-1: SerialNumber: syz [ 564.622547][ T5803] em28xx 4-1:0.0: Freeing device [ 564.660705][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 564.811762][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 564.820072][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.836041][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 564.847595][ T5344] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 564.854598][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.863681][ T9] usb 5-1: Product: syz [ 564.867864][ T9] usb 5-1: Manufacturer: syz [ 564.872595][ T9] usb 5-1: SerialNumber: syz [ 564.882400][ T9] rtl8150 5-1:1.0: couldn't find required endpoints [ 564.889260][ T9] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 565.106355][ T9] usb 5-1: USB disconnect, device number 26 [ 565.200811][T11812] nbd3: detected capacity change from 0 to 63 [ 565.254470][ T5616] block nbd3: Receive control failed (result -104) [ 565.397436][T11819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.453652][ T5344] usb 1-1: invalid uac2 rates [ 565.467773][ T5344] usb 1-1: invalid uac2 rates [ 565.717991][ T5344] usb 1-1: failed to enable PITCH for EP 0x82 [ 565.739801][ T5344] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 565.758943][ T5344] usb 1-1: clock source 0 is not valid, cannot use [ 565.768737][ T5344] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 565.778063][ T5344] usb 1-1: 2:1: cannot set freq 1423878371 (v2/v3): err -71 [ 565.854446][ T5344] usb 1-1: USB disconnect, device number 27 [ 565.930812][T10998] udevd[10998]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.260732][T11853] nbd4: detected capacity change from 0 to 63 [ 566.289581][T11854] block nbd4: NBD_DISCONNECT [ 566.298048][T11854] block nbd4: Disconnected due to user request. [ 566.305691][T11854] block nbd4: shutting down sockets [ 566.308494][T11856] sch_fq: defrate 0 ignored. [ 566.326104][ C1] blk_print_req_error: 127 callbacks suppressed [ 566.326116][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.341462][ C1] buffer_io_error: 138 callbacks suppressed [ 566.341473][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 566.355071][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.364130][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 566.371864][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.380914][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 566.388629][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.397707][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 566.412290][ T1611] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.424951][ T1611] Buffer I/O error on dev nbd4, logical block 0, async page read [ 566.434818][ T1611] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.444782][ T1611] Buffer I/O error on dev nbd4, logical block 1, async page read [ 566.454324][ T1611] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.463507][ T1611] Buffer I/O error on dev nbd4, logical block 2, async page read [ 566.476502][ T8252] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.486376][ T8252] Buffer I/O error on dev nbd4, logical block 3, async page read [ 566.496316][ T1611] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.505446][ T1611] Buffer I/O error on dev nbd4, logical block 0, async page read [ 566.515120][ T1611] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 566.526001][ T1611] Buffer I/O error on dev nbd4, logical block 1, async page read [ 566.543790][ T6247] ldm_validate_partition_table(): Disk read failed. [ 566.562587][ T6247] Dev nbd4: unable to read RDB block 0 [ 566.575358][ T6247] nbd4: unable to read partition table [ 566.598185][ T6247] ldm_validate_partition_table(): Disk read failed. [ 566.609275][ T6247] Dev nbd4: unable to read RDB block 0 [ 566.618859][ T6247] nbd4: unable to read partition table [ 567.547814][T11894] NILFS (nullb0): couldn't find nilfs on the device [ 567.639707][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 567.639741][ T29] audit: type=1400 audit(2000000041.860:1021): avc: denied { create } for pid=11888 comm="syz.0.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 568.032857][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.041167][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.075288][T11899] tipc: Resetting bearer [ 568.123211][T11899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.144402][T11899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.403509][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.440792][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 568.499826][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.530897][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 568.547130][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.572971][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 568.592838][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.616199][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 568.655949][T11915] usb usb7: usbfs: process 11915 (syz.4.1410) did not claim interface 0 before use [ 568.670948][T11913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.719890][ T29] audit: type=1400 audit(2000000042.940:1022): avc: denied { block_suspend } for pid=11912 comm="syz.4.1410" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 568.887876][ T29] audit: type=1400 audit(2000000043.110:1023): avc: denied { connect } for pid=11920 comm="syz.3.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 568.933369][ T29] audit: type=1400 audit(2000000043.160:1024): avc: denied { setopt } for pid=11920 comm="syz.3.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.005017][ T29] audit: type=1400 audit(2000000043.160:1025): avc: denied { map } for pid=11912 comm="syz.4.1410" path="socket:[31809]" dev="sockfs" ino=31809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 569.031322][ T29] audit: type=1400 audit(2000000043.190:1026): avc: denied { ioctl } for pid=11920 comm="syz.3.1412" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 569.078146][ T29] audit: type=1400 audit(2000000043.200:1027): avc: denied { set_context_mgr } for pid=11920 comm="syz.3.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 569.101683][ T29] audit: type=1400 audit(2000000043.200:1028): avc: denied { map } for pid=11920 comm="syz.3.1412" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 569.126274][ T29] audit: type=1400 audit(2000000043.200:1029): avc: denied { call } for pid=11920 comm="syz.3.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 569.147023][ T29] audit: type=1400 audit(2000000043.210:1030): avc: denied { transfer } for pid=11920 comm="syz.3.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 569.434841][T11932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.761907][T11940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.809006][ T3106] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 569.905053][T11948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 569.926211][T11947] binder: 11945:11947 ioctl 541b 0 returned -22 [ 569.981651][ T3106] usb 1-1: config 0 has no interfaces? [ 569.992395][ T3106] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 570.007867][ T3106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.024934][ T3106] usb 1-1: config 0 descriptor?? [ 570.067509][T11954] all (unregistering): Released all slaves [ 570.107275][T11956] usb usb7: usbfs: process 11956 (syz.3.1426) did not claim interface 0 before use [ 570.175775][T11958] binder: 11957:11958 ioctl 541b 0 returned -22 [ 570.180566][ T5344] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 570.343003][ T5344] usb 5-1: unable to get BOS descriptor or descriptor too short [ 570.362307][ T5344] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 570.414122][ T5344] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 570.490254][ T3106] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 570.774121][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.785599][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.884437][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.892561][ T5344] usb 5-1: Product: syz [ 570.896727][ T5344] usb 5-1: Manufacturer: syz [ 570.906289][ T5803] usb 1-1: USB disconnect, device number 28 [ 570.912437][ T5344] usb 5-1: SerialNumber: syz [ 571.052004][ T3106] usb 4-1: unable to get BOS descriptor or descriptor too short [ 571.078439][ T3106] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 571.105589][ T3106] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 571.123146][ T3106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.123832][ T5344] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 571.133431][ T3106] usb 4-1: Product: syz [ 571.148406][ T3106] usb 4-1: Manufacturer: syz [ 571.153853][ T3106] usb 4-1: SerialNumber: syz [ 571.791586][T11969] nbd0: detected capacity change from 0 to 63 [ 571.813895][T11971] block nbd1: NBD_DISCONNECT [ 571.824271][T11971] block nbd1: Send disconnect failed -32 [ 571.830092][T11971] block nbd1: shutting down sockets [ 571.839233][ C1] blk_print_req_error: 138 callbacks suppressed [ 571.839252][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.854648][ C1] buffer_io_error: 138 callbacks suppressed [ 571.854660][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 571.868666][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.877781][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 571.885858][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.894958][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 571.902712][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 571.911794][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 571.943031][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 571.953637][ T1611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 571.961932][ T1611] Buffer I/O error on dev nbd1, logical block 1, async page read [ 571.969779][ T1611] Buffer I/O error on dev nbd1, logical block 2, async page read [ 571.977713][ T1611] Buffer I/O error on dev nbd1, logical block 3, async page read [ 571.986229][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 571.995520][ T1611] Buffer I/O error on dev nbd1, logical block 0, async page read [ 572.006644][ T1611] Buffer I/O error on dev nbd1, logical block 1, async page read [ 572.014758][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 572.024340][ T5616] block nbd0: Receive control failed (result -104) [ 572.031232][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 572.040844][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 572.050472][ T1611] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 572.059861][ T5874] ldm_validate_partition_table(): Disk read failed. [ 572.068858][ T5344] usb 5-1: invalid uac2 rates [ 572.075858][ T5344] usb 5-1: invalid uac2 rates [ 572.081840][ T5874] Dev nbd1: unable to read RDB block 0 [ 572.105240][ T5874] nbd1: unable to read partition table [ 572.135876][ T5874] ldm_validate_partition_table(): Disk read failed. [ 572.146109][ T5874] Dev nbd1: unable to read RDB block 0 [ 572.155010][ T5874] nbd1: unable to read partition table [ 572.181596][ T5344] usb 5-1: failed to enable PITCH for EP 0x82 [ 572.188273][ T5344] usb 5-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 572.197116][ T5344] usb 5-1: clock source 0 is not valid, cannot use [ 572.205868][ T5344] usb 5-1: 2:1: cannot get freq (v2/v3): err -71 [ 572.213340][ T5344] usb 5-1: 2:1: cannot set freq 1423878371 (v2/v3): err -71 [ 572.315999][ T3106] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 572.326339][ T5344] usb 5-1: USB disconnect, device number 27 [ 572.469596][T11994] tipc: Enabling of bearer rejected, failed to enable media [ 572.574408][ T3106] usb 4-1: invalid uac2 rates [ 572.579433][ T3106] usb 4-1: invalid uac2 rates [ 573.007459][ T3106] usb 4-1: failed to enable PITCH for EP 0x82 [ 573.024704][ T5720] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 573.101866][ T3106] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 573.259706][ T3106] usb 4-1: clock source 0 is not valid, cannot use [ 573.300713][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 573.365986][ T3106] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 573.382267][ T5720] usb 1-1: unable to get BOS descriptor or descriptor too short [ 573.393904][ T3106] usb 4-1: 2:1: cannot set freq 1423878371 (v2/v3): err -71 [ 573.406829][ T5720] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 573.444976][ T5720] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 573.484124][ T5720] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 573.514728][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.550479][ T5720] usb 1-1: Product: syz [ 573.571489][ T5720] usb 1-1: Manufacturer: syz [ 573.577970][ T3106] usb 4-1: USB disconnect, device number 38 [ 573.584202][ T5720] usb 1-1: SerialNumber: syz [ 573.676956][T12021] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.695526][ T8617] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 573.776224][T11002] udevd[11002]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 573.860216][ T8617] usb 2-1: device descriptor read/64, error -71 [ 573.870792][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 573.899866][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.949682][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.220169][ T8617] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 575.350183][ T8617] usb 2-1: device descriptor read/64, error -71 [ 575.527241][ T8617] usb usb2-port1: attempt power cycle [ 575.549947][ T5720] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 575.560525][ T5720] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 575.637165][ T5720] usb 1-1: USB disconnect, device number 29 [ 575.711887][T12048] nbd4: detected capacity change from 0 to 63 [ 575.718345][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.736107][T12050] block nbd4: NBD_DISCONNECT [ 575.742420][T12050] block nbd4: Disconnected due to user request. [ 575.749193][T12050] block nbd4: shutting down sockets [ 575.756485][ T6247] ldm_validate_partition_table(): Disk read failed. [ 575.765915][ T6247] Dev nbd4: unable to read RDB block 0 [ 575.773947][ T6247] nbd4: unable to read partition table [ 575.789877][ T6247] ldm_validate_partition_table(): Disk read failed. [ 575.819111][ T6247] Dev nbd4: unable to read RDB block 0 [ 575.846065][ T6247] nbd4: unable to read partition table [ 575.892444][ T8617] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 575.941988][ T8617] usb 2-1: device descriptor read/8, error -71 [ 576.074594][T12063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.092223][ T35] ip6_tunnel: K xmit: Local address not yet configured! [ 576.275148][ T9] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 576.280397][ T8617] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 576.290305][T12073] IPVS: length: 144 != 8 [ 576.321384][ T8617] usb 2-1: device descriptor read/8, error -71 [ 576.348487][ T9] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 576.612232][ T8617] usb usb2-port1: unable to enumerate USB device [ 577.372099][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 577.712518][ T9] usb 5-1: config 0 has no interfaces? [ 577.723237][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 577.753784][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.781412][ T9] usb 5-1: config 0 descriptor?? [ 577.925309][T12093] nbd: nbd0 already in use [ 577.941085][T12093] block nbd0: NBD_DISCONNECT [ 577.954791][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 577.954807][ T29] audit: type=1400 audit(2000000052.180:1034): avc: denied { mount } for pid=12071 comm="syz.3.1463" name="/" dev="autofs" ino=33047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 577.960537][T12093] block nbd0: Send disconnect failed -32 [ 578.020211][T12093] block nbd0: shutting down sockets [ 578.053761][ C0] blk_print_req_error: 214 callbacks suppressed [ 578.053780][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.069213][ C0] buffer_io_error: 286 callbacks suppressed [ 578.069232][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.084137][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.093228][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 578.100959][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.110032][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 578.117762][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 578.126813][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 578.148842][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.161743][ T8252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 578.170963][ T8252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.179916][ T8252] Buffer I/O error on dev nbd0, logical block 1, async page read [ 578.188364][ T8252] Buffer I/O error on dev nbd0, logical block 2, async page read [ 578.198663][ T8252] Buffer I/O error on dev nbd0, logical block 3, async page read [ 578.207136][ T8252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 578.217934][ T8252] Buffer I/O error on dev nbd0, logical block 0, async page read [ 578.225807][ T8252] Buffer I/O error on dev nbd0, logical block 1, async page read [ 578.233799][ T8252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 578.243366][ T8252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 578.253111][ T8252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 578.255598][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.262569][ T8252] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 578.282038][ T6248] ldm_validate_partition_table(): Disk read failed. [ 578.296389][ T6248] Dev nbd0: unable to read RDB block 0 [ 578.307796][ T6248] nbd0: unable to read partition table [ 578.327180][ T6248] ldm_validate_partition_table(): Disk read failed. [ 578.336999][ T6248] Dev nbd0: unable to read RDB block 0 [ 578.344049][ T6248] nbd0: unable to read partition table [ 578.423342][ T5344] usb 5-1: USB disconnect, device number 28 [ 578.613708][T12108] binder: 12107:12108 ioctl 541b 0 returned -22 [ 578.718346][ T29] audit: type=1400 audit(2000000052.940:1035): avc: denied { create } for pid=12105 comm="syz.3.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 578.744700][T12106] overlayfs: workdir and upperdir must reside under the same mount [ 578.757870][ T29] audit: type=1400 audit(2000000052.970:1036): avc: denied { mounton } for pid=12105 comm="syz.3.1474" path="/273/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 578.870296][ T5344] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 578.881590][ T5803] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 578.940110][ T5734] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 579.032309][ T5344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 579.048714][ T5344] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 579.066678][ T5344] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 579.067876][ T5803] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 579.076301][ T5344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.092067][ T5734] usb 2-1: Using ep0 maxpacket: 16 [ 579.094760][ T5803] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.097761][ T5344] usb 1-1: Product: syz [ 579.116433][ T5344] usb 1-1: Manufacturer: syz [ 579.121556][ T5344] usb 1-1: SerialNumber: syz [ 579.121718][ T5803] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 579.121746][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.121768][ T5803] usb 5-1: Product: syz [ 579.121785][ T5803] usb 5-1: Manufacturer: syz [ 579.128577][ T5734] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 579.165299][ T5803] usb 5-1: SerialNumber: syz [ 579.172632][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.181366][ T5734] usb 2-1: Product: syz [ 579.186021][ T5734] usb 2-1: Manufacturer: syz [ 579.191223][ T5734] usb 2-1: SerialNumber: syz [ 579.195016][ T5803] rtl8150 5-1:1.0: couldn't find required endpoints [ 579.200844][ T5734] usb 2-1: config 0 descriptor?? [ 579.214482][ T5803] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 579.399791][ T5803] usb 5-1: USB disconnect, device number 29 [ 579.410406][ T5344] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 579.624007][ T5734] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 579.660761][ T5734] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 579.675307][ T5734] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 579.685717][ T5734] usb 2-1: media controller created [ 579.688837][T12128] nbd: nbd3 already in use [ 579.704348][T12128] block nbd3: NBD_DISCONNECT [ 579.709108][T12128] block nbd3: Send disconnect failed -32 [ 579.711208][ T5734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 579.714995][T12128] block nbd3: shutting down sockets [ 579.749348][ T5863] ldm_validate_partition_table(): Disk read failed. [ 579.767708][ T5863] Dev nbd3: unable to read RDB block 0 [ 579.785244][ T5863] nbd3: unable to read partition table [ 579.812277][ T5863] ldm_validate_partition_table(): Disk read failed. [ 579.821431][ T5863] Dev nbd3: unable to read RDB block 0 [ 579.834062][ T5863] nbd3: unable to read partition table [ 579.991533][ T5344] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 580.123291][ T5344] usb 1-1: USB disconnect, device number 30 [ 580.300829][ T5734] zl10353_read_register: readreg error (reg=127, ret==0) [ 580.318004][T12132] dtv5100: wlen = 0, aborting. [ 580.319090][ T5734] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 580.330181][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 580.369003][ T5734] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 580.431934][ T5734] usb 2-1: USB disconnect, device number 26 [ 580.583160][ T5734] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 580.830183][T12150] nbd0: detected capacity change from 0 to 63 [ 580.851079][T12155] block nbd0: NBD_DISCONNECT [ 580.858799][T12155] block nbd0: Disconnected due to user request. [ 580.878617][T12155] block nbd0: shutting down sockets [ 580.924921][ T5874] ldm_validate_partition_table(): Disk read failed. [ 580.945887][ T5874] Dev nbd0: unable to read RDB block 0 [ 580.970768][ T5874] nbd0: unable to read partition table [ 580.985361][ T5874] ldm_validate_partition_table(): Disk read failed. [ 580.995376][ T5874] Dev nbd0: unable to read RDB block 0 [ 581.016767][ T5874] nbd0: unable to read partition table [ 581.109421][T12157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.232596][ T29] audit: type=1400 audit(2000000055.450:1037): avc: denied { create } for pid=12160 comm="syz.0.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 581.396498][ T29] audit: type=1400 audit(2000000055.620:1038): avc: denied { listen } for pid=12167 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 581.616853][ T29] audit: type=1400 audit(2000000055.650:1039): avc: denied { connect } for pid=12167 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 581.703442][ T29] audit: type=1400 audit(2000000055.660:1040): avc: denied { map } for pid=12167 comm="syz.0.1493" path="socket:[32195]" dev="sockfs" ino=32195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 582.430786][T12187] nbd0: detected capacity change from 0 to 63 [ 582.438224][T12192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.451697][T12188] block nbd0: NBD_DISCONNECT [ 582.473375][T12188] block nbd0: Disconnected due to user request. [ 582.486085][T12188] block nbd0: shutting down sockets [ 582.539514][ T5874] ldm_validate_partition_table(): Disk read failed. [ 582.588781][ T5874] Dev nbd0: unable to read RDB block 0 [ 582.612149][T12197] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.629787][ T5874] nbd0: unable to read partition table [ 582.675761][ T5874] ldm_validate_partition_table(): Disk read failed. [ 582.692828][ T5874] Dev nbd0: unable to read RDB block 0 [ 582.701746][ T5874] nbd0: unable to read partition table [ 583.582750][T12227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.836079][ T29] audit: type=1400 audit(2000000058.030:1041): avc: denied { append } for pid=12223 comm="syz.1.1515" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 583.876105][T12230] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 583.884895][T12230] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 583.904950][T12230] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 583.913790][ T8617] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 584.193304][ T8617] usb 5-1: not running at top speed; connect to a high speed hub [ 584.272094][ T29] audit: type=1400 audit(2000000058.130:1042): avc: denied { firmware_load } for pid=12223 comm="syz.1.1515" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 584.337297][ T8617] usb 5-1: no configurations [ 584.441431][ T8617] usb 5-1: can't read configurations, error -22 [ 584.470276][ T5803] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 584.701355][ T8617] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 584.765680][ T5803] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 584.898170][ T5803] usb 2-1: config 0 has no interface number 0 [ 584.982919][ T8617] usb 5-1: not running at top speed; connect to a high speed hub [ 585.050923][ T5803] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 585.085571][ T8617] usb 5-1: no configurations [ 585.133963][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.155469][ T8617] usb 5-1: can't read configurations, error -22 [ 585.285840][ T5803] usb 2-1: Product: syz [ 585.299356][ T8617] usb usb5-port1: attempt power cycle [ 585.343508][ T5803] usb 2-1: Manufacturer: syz [ 585.414391][ T5803] usb 2-1: SerialNumber: syz [ 585.577625][ T5803] usb 2-1: config 0 descriptor?? [ 585.710529][ T8617] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 585.769853][ T8617] usb 5-1: not running at top speed; connect to a high speed hub [ 585.838805][ T8617] usb 5-1: no configurations [ 585.927916][ T8617] usb 5-1: can't read configurations, error -22 [ 585.976510][ T5803] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 586.040272][ T5720] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 586.191625][ T5803] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 586.236831][ T5803] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 586.257066][ T5803] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 586.267097][ T5720] usb 1-1: config 0 has no interfaces? [ 586.280102][ T5720] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 586.302128][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.311229][ T5803] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 586.345278][ T5720] usb 1-1: config 0 descriptor?? [ 586.441456][T12238] nbd3: detected capacity change from 0 to 63 [ 586.474826][T12239] block nbd3: NBD_DISCONNECT [ 586.480078][T12239] block nbd3: Disconnected due to user request. [ 586.486496][T12239] block nbd3: shutting down sockets [ 586.504976][ C0] blk_print_req_error: 494 callbacks suppressed [ 586.504996][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.520499][ C0] buffer_io_error: 582 callbacks suppressed [ 586.520516][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 586.534310][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 586.542137][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 586.549956][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 586.587393][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.599256][ T1611] Buffer I/O error on dev nbd3, logical block 0, async page read [ 586.609495][ T1611] Buffer I/O error on dev nbd3, logical block 1, async page read [ 586.620442][ T1611] Buffer I/O error on dev nbd3, logical block 2, async page read [ 586.634057][ T1611] Buffer I/O error on dev nbd3, logical block 3, async page read [ 586.679839][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.692719][ T1611] Buffer I/O error on dev nbd3, logical block 0, async page read [ 586.702305][ T1611] Buffer I/O error on dev nbd3, logical block 1, async page read [ 586.718072][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.731281][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.744974][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.757721][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.793871][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.803590][ T6247] ldm_validate_partition_table(): Disk read failed. [ 586.814991][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.827531][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 586.837528][ T6247] Dev nbd3: unable to read RDB block 0 [ 586.844544][ T6247] nbd3: unable to read partition table [ 586.854323][ T6247] ldm_validate_partition_table(): Disk read failed. [ 586.864695][ T6247] Dev nbd3: unable to read RDB block 0 [ 586.873893][ T6247] nbd3: unable to read partition table [ 587.010142][ T29] audit: type=1400 audit(2000000061.200:1043): avc: denied { mount } for pid=12244 comm="syz.2.1521" name="/" dev="ramfs" ino=32366 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 587.135102][T12245] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1521'. [ 587.570400][ T29] audit: type=1400 audit(2000000061.800:1044): avc: denied { bind } for pid=12244 comm="syz.2.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 587.914353][ T29] audit: type=1400 audit(2000000062.140:1045): avc: denied { setopt } for pid=12255 comm="syz.4.1523" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 588.045153][T12260] binder: 12258:12260 ioctl 541b 0 returned -22 [ 588.192470][T12266] IPVS: length: 144 != 8 [ 588.800097][ T5734] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 588.841191][ T5803] usb 1-1: USB disconnect, device number 31 [ 588.880153][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 589.068712][ T8617] usb 2-1: USB disconnect, device number 27 [ 589.072250][ T29] audit: type=1400 audit(2000000063.290:1046): avc: denied { cmd } for pid=12272 comm="syz.4.1529" path="/dev/ublk-control" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 589.107164][T12273] netlink: 'syz.4.1529': attribute type 62 has an invalid length. [ 589.134299][ T5734] usb 4-1: unable to get BOS descriptor or descriptor too short [ 589.174294][ T5734] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 589.176376][ T8617] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 589.189364][ T29] audit: type=1400 audit(2000000063.330:1047): avc: denied { bind } for pid=12272 comm="syz.4.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 589.244815][ T8617] keyspan 2-1:0.133: device disconnected [ 589.266142][ T5734] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 589.279685][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.298220][ T29] audit: type=1400 audit(2000000063.390:1048): avc: denied { write } for pid=12272 comm="syz.4.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 589.318179][ T5734] usb 4-1: Product: syz [ 589.323422][ T5734] usb 4-1: Manufacturer: syz [ 589.332287][ T5734] usb 4-1: SerialNumber: syz [ 589.555773][ T5734] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 589.648053][T12287] process 'syz.0.1532' launched './file1' with NULL argv: empty string added [ 589.671922][ T29] audit: type=1400 audit(2000000063.890:1049): avc: denied { execute_no_trans } for pid=12284 comm="syz.0.1532" path="/297/file1" dev="tmpfs" ino=1579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 589.769712][ T29] audit: type=1400 audit(2000000063.990:1050): avc: denied { create } for pid=12284 comm="syz.0.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 590.585962][ T5734] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 590.707376][ T5734] usb 4-1: USB disconnect, device number 39 [ 590.810859][T12300] nbd1: detected capacity change from 0 to 63 [ 590.823843][T12301] block nbd1: NBD_DISCONNECT [ 590.836150][T12301] block nbd1: Disconnected due to user request. [ 590.839824][ T5874] udevd[5874]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.845786][T12301] block nbd1: shutting down sockets [ 590.935745][ T5863] ldm_validate_partition_table(): Disk read failed. [ 590.964758][ T5863] Dev nbd1: unable to read RDB block 0 [ 590.998875][ T5863] nbd1: unable to read partition table [ 591.044079][ T5863] ldm_validate_partition_table(): Disk read failed. [ 591.053920][ T5863] Dev nbd1: unable to read RDB block 0 [ 591.062521][ T5863] nbd1: unable to read partition table [ 591.151261][T12309] IPVS: length: 144 != 8 [ 591.580277][ T5720] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 591.984602][T12320] IPVS: length: 144 != 8 [ 592.060091][ T5720] usb 2-1: Using ep0 maxpacket: 8 [ 592.585647][ T5720] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 592.710453][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.727948][ T5720] usb 2-1: Product: syz [ 592.735718][ T5720] usb 2-1: Manufacturer: syz [ 592.740678][ T5720] usb 2-1: SerialNumber: syz [ 592.748686][ T5720] usb 2-1: config 0 descriptor?? [ 592.774315][ T5720] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 593.090100][T12333] nbd3: detected capacity change from 0 to 63 [ 593.119273][ T5616] block nbd3: Receive control failed (result -104) [ 593.327020][ T29] audit: type=1400 audit(2000000067.550:1051): avc: denied { create } for pid=12336 comm="syz.0.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 593.350726][T12337] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.382051][ T5803] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 593.444761][ T29] audit: type=1400 audit(2000000067.580:1052): avc: denied { write } for pid=12336 comm="syz.0.1547" path="socket:[32554]" dev="sockfs" ino=32554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 593.564078][ T5803] usb 5-1: Using ep0 maxpacket: 16 [ 593.596068][ T5803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 593.611821][ T5803] usb 5-1: config index 0 descriptor too short (expected 18190, got 133) [ 593.625017][ T5803] usb 5-1: config 95 has too many interfaces: 119, using maximum allowed: 32 [ 593.652294][ T5803] usb 5-1: config 95 has an invalid interface number: 255 but max is 118 [ 593.670874][ T5803] usb 5-1: config 95 has an invalid descriptor of length 135, skipping remainder of the config [ 593.706870][ T5803] usb 5-1: config 95 has 4 interfaces, different from the descriptor's value: 119 [ 593.730235][ T5803] usb 5-1: config 95 has no interface number 3 [ 593.757435][ T5803] usb 5-1: config 95 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.780344][ T5803] usb 5-1: config 95 interface 255 has no altsetting 0 [ 593.799868][ T5803] usb 5-1: config 95 interface 2 has no altsetting 0 [ 593.832944][ T5803] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 593.856891][ T5803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.875500][ T5803] usb 5-1: Product: syz [ 593.886087][ T5803] usb 5-1: Manufacturer: syz [ 593.903769][ T5803] usb 5-1: SerialNumber: syz [ 594.129756][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.151555][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.184546][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 594.234450][ T5803] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 594.260115][ T5720] gspca_sonixj: i2c_w8 err -71 [ 594.269096][ T5803] snd-usb-audio 5-1:95.0: probe with driver snd-usb-audio failed with error -22 [ 594.298522][ T5803] usb 5-1: selecting invalid altsetting 0 [ 594.350165][ T5720] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 594.379131][ T5803] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 594.389942][ T5720] usb 2-1: USB disconnect, device number 28 [ 594.414739][ T5803] snd-usb-audio 5-1:95.255: probe with driver snd-usb-audio failed with error -22 [ 594.453068][ T5803] usb 5-1: USB disconnect, device number 34 [ 594.504995][T12349] nbd: nbd3 already in use [ 594.524594][T12349] block nbd3: NBD_DISCONNECT [ 594.548817][T12349] block nbd3: Send disconnect failed -32 [ 594.590650][T12349] block nbd3: shutting down sockets [ 594.610652][ C1] blk_print_req_error: 175 callbacks suppressed [ 594.610671][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.626029][ C1] buffer_io_error: 286 callbacks suppressed [ 594.626045][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 594.665472][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.674592][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 594.689008][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.698117][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 594.705852][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.714920][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 594.744662][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 594.754011][ T1611] Buffer I/O error on dev nbd3, logical block 0, async page read [ 594.762322][ T1611] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 594.771455][ T1611] Buffer I/O error on dev nbd3, logical block 1, async page read [ 594.779262][ T1611] Buffer I/O error on dev nbd3, logical block 2, async page read [ 594.787226][ T1611] Buffer I/O error on dev nbd3, logical block 3, async page read [ 594.803051][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 594.812233][ T1611] Buffer I/O error on dev nbd3, logical block 0, async page read [ 594.821549][ T1611] Buffer I/O error on dev nbd3, logical block 1, async page read [ 594.829982][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 594.846763][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 594.856939][ T1611] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 594.867376][ T5863] ldm_validate_partition_table(): Disk read failed. [ 594.878126][ T5863] Dev nbd3: unable to read RDB block 0 [ 594.886630][ T5863] nbd3: unable to read partition table [ 594.904305][ T5863] ldm_validate_partition_table(): Disk read failed. [ 594.913356][ T5863] Dev nbd3: unable to read RDB block 0 [ 594.921066][ T5863] nbd3: unable to read partition table [ 595.087845][ T29] audit: type=1400 audit(2000000069.310:1053): avc: denied { connect } for pid=12351 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 595.380162][ T5720] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 595.561793][ T5720] usb 4-1: config 0 has no interfaces? [ 595.574645][ T5720] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 595.609880][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.653947][ T5720] usb 4-1: config 0 descriptor?? [ 595.760708][T12370] nbd4: detected capacity change from 0 to 63 [ 595.773687][T12371] nbd: must specify an index to disconnect [ 595.820869][ T5616] block nbd4: Receive control failed (result -104) [ 596.411334][T12380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.422740][T12380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.476623][ T5803] usb 4-1: USB disconnect, device number 40 [ 596.883197][T12396] binder: 12395:12396 ioctl 541b 0 returned -22 [ 597.125210][T12401] ======================================================= [ 597.125210][T12401] WARNING: The mand mount option has been deprecated and [ 597.125210][T12401] and is ignored by this kernel. Remove the mand [ 597.125210][T12401] option from the mount to silence this warning. [ 597.125210][T12401] ======================================================= [ 597.165115][ T5803] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 597.342821][ T5803] usb 2-1: unable to get BOS descriptor or descriptor too short [ 597.486493][ T5803] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 597.521628][ T5803] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 597.540194][ T5803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.548395][ T5803] usb 2-1: Product: syz [ 597.563659][ T5803] usb 2-1: Manufacturer: syz [ 597.582796][ T5803] usb 2-1: SerialNumber: syz [ 597.732083][ T29] audit: type=1400 audit(2000000071.960:1054): avc: denied { getopt } for pid=12409 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 597.824576][ T5803] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 598.380908][T12421] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 598.786403][ T5803] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 598.908212][ T5803] usb 2-1: USB disconnect, device number 29 [ 598.979037][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.193103][T12433] xt_hashlimit: size too large, truncated to 1048576 [ 599.551260][ T5344] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 599.624276][T12435] nbd0: detected capacity change from 0 to 63 [ 599.664309][T12439] nbd: must specify an index to disconnect [ 599.692665][ T5616] block nbd0: Receive control failed (result -104) [ 599.710260][ T5344] usb 5-1: device descriptor read/64, error -71 [ 599.821415][T12448] FAULT_INJECTION: forcing a failure. [ 599.821415][T12448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.875574][T12448] CPU: 1 UID: 0 PID: 12448 Comm: syz.0.1582 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.875598][T12448] Tainted: [L]=SOFTLOCKUP [ 599.875603][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 599.875611][T12448] Call Trace: [ 599.875615][T12448] [ 599.875620][T12448] dump_stack_lvl+0x100/0x190 [ 599.875638][T12448] should_fail_ex.cold+0x5/0xa [ 599.875654][T12448] _copy_from_user+0x2e/0xd0 [ 599.875668][T12448] do_ipv6_setsockopt+0x73d/0x44a0 [ 599.875688][T12448] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 599.875699][T12448] ? avc_has_perm_noaudit+0xf0/0x3b0 [ 599.875710][T12448] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 599.875728][T12448] ? avc_has_perm_noaudit+0x145/0x3b0 [ 599.875741][T12448] ? avc_has_perm+0x135/0x1e0 [ 599.875751][T12448] ? __pfx_avc_has_perm+0x10/0x10 [ 599.875764][T12448] ? get_pid_task+0x106/0x250 [ 599.875784][T12448] ? sock_has_perm+0x25a/0x2f0 [ 599.875803][T12448] ? __pfx_sock_has_perm+0x10/0x10 [ 599.875815][T12448] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 599.875833][T12448] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 599.875853][T12448] ? ipv6_setsockopt+0xcb/0x170 [ 599.875868][T12448] ipv6_setsockopt+0xcb/0x170 [ 599.875886][T12448] tcp_setsockopt+0xa7/0x100 [ 599.875899][T12448] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 599.875915][T12448] do_sock_setsockopt+0xf3/0x1d0 [ 599.875929][T12448] __sys_setsockopt+0x195/0x220 [ 599.875960][T12448] __x64_sys_setsockopt+0xbd/0x160 [ 599.875981][T12448] ? do_syscall_64+0x90/0x870 [ 599.875996][T12448] ? lockdep_hardirqs_on+0x78/0x100 [ 599.876011][T12448] do_syscall_64+0x115/0x870 [ 599.876025][T12448] ? clear_bhb_loop+0x40/0x90 [ 599.876039][T12448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.876051][T12448] RIP: 0033:0x7fa5a979de59 [ 599.876061][T12448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.876073][T12448] RSP: 002b:00007fa5a79f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 599.876085][T12448] RAX: ffffffffffffffda RBX: 00007fa5a9a25fa0 RCX: 00007fa5a979de59 [ 599.876093][T12448] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 599.876099][T12448] RBP: 00007fa5a79f6090 R08: 0000000000000020 R09: 0000000000000000 [ 599.876107][T12448] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.876114][T12448] R13: 00007fa5a9a26038 R14: 00007fa5a9a25fa0 R15: 00007fffedfd95d8 [ 599.876129][T12448] [ 600.381740][ T5344] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 600.475336][T12451] tipc: Enabled bearer , priority 0 [ 600.495005][T12451] syzkaller0: entered promiscuous mode [ 600.505174][T12451] syzkaller0: entered allmulticast mode [ 600.620714][ T5344] usb 5-1: device descriptor read/64, error -71 [ 600.793372][ T5344] usb usb5-port1: attempt power cycle [ 601.152916][ T29] audit: type=1400 audit(2000000074.970:1055): avc: denied { create } for pid=12453 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 601.152965][ T29] audit: type=1400 audit(2000000074.970:1056): avc: denied { connect } for pid=12453 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 601.152989][ T29] audit: type=1400 audit(2000000075.020:1057): avc: denied { write } for pid=12453 comm="syz.0.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 601.249956][T12458] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.258520][T12458] tipc: Enabled bearer , priority 10 [ 601.380557][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.400748][ T5344] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 601.427945][T12449] tipc: Resetting bearer [ 601.434633][ T5344] usb 5-1: device descriptor read/8, error -71 [ 601.497254][T12449] tipc: Disabling bearer [ 601.660153][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.680366][ T5344] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 601.713399][ T5344] usb 5-1: device descriptor read/8, error -71 [ 601.720129][ T5803] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 601.842904][ T5344] usb usb5-port1: unable to enumerate USB device [ 601.870761][ T5803] usb 1-1: device descriptor read/64, error -71 [ 602.048984][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.056321][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.140107][ T5803] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 602.200149][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 602.286154][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.290093][ T5803] usb 1-1: device descriptor read/64, error -71 [ 602.329434][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.330549][ T8617] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 602.430598][ T5803] usb usb1-port1: attempt power cycle [ 602.541312][ T8617] usb 2-1: Using ep0 maxpacket: 32 [ 602.555955][ T7010] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.583767][ T8617] usb 2-1: unable to get BOS descriptor or descriptor too short [ 602.592042][ T7010] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 602.616007][ T8617] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 602.627225][ T7010] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.636808][ T8617] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 602.648025][ T7010] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 602.658885][ T7010] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.669375][ T8617] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 602.681216][ T7010] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 602.691958][ T8617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.700391][ T7010] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.709852][ T8617] usb 2-1: Product: syz [ 602.715156][ T8617] usb 2-1: Manufacturer: syz [ 602.719824][ T7010] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 602.729065][ T8617] usb 2-1: SerialNumber: syz [ 602.770140][ T5803] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 602.792156][ T5803] usb 1-1: device descriptor read/8, error -71 [ 603.009984][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.030185][ T5803] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 603.041366][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.080589][ T5803] usb 1-1: device descriptor read/8, error -71 [ 603.190689][ T5803] usb usb1-port1: unable to enumerate USB device [ 603.290214][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.604236][T12530] IPVS: length: 144 != 8 [ 603.612770][ T8617] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 603.621766][ T8617] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 603.668562][ T8617] usb 2-1: USB disconnect, device number 30 [ 604.325538][ T6247] udevd[6247]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 604.341412][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 604.386903][T12534] nbd: must specify an index to disconnect [ 604.652761][T12544] IPVS: length: 144 != 8 [ 605.371223][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 605.819534][ T29] audit: type=1400 audit(2000000080.040:1058): avc: denied { shutdown } for pid=12548 comm="syz.0.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 606.160165][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 606.363964][T12562] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 606.400159][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 606.504085][ T29] audit: type=1400 audit(2000000080.730:1059): avc: denied { read append } for pid=12565 comm="syz.3.1611" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 606.539108][ T29] audit: type=1400 audit(2000000080.750:1060): avc: denied { open } for pid=12565 comm="syz.3.1611" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 606.604583][T12569] IPVS: length: 144 != 8 [ 606.626399][ T29] audit: type=1400 audit(2000000080.750:1061): avc: denied { ioctl } for pid=12565 comm="syz.3.1611" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 607.260952][ T29] audit: type=1400 audit(2000000080.760:1062): avc: denied { create } for pid=12565 comm="syz.3.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 607.335645][ T5803] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 607.450159][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 607.523233][ T3106] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 607.550134][ T5803] usb 5-1: Using ep0 maxpacket: 8 [ 607.559266][ T5803] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 607.575594][ T5803] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 607.603581][ T5803] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 607.615547][ T29] audit: type=1326 audit(2000000081.840:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.1.1615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279de59 code=0x7ffc0000 [ 607.644056][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.655224][ T5803] usb 5-1: config 0 descriptor?? [ 607.663917][ T29] audit: type=1326 audit(2000000081.840:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.1.1615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279de59 code=0x7ffc0000 [ 607.694152][ T3106] usb 4-1: Using ep0 maxpacket: 32 [ 607.705525][ T3106] usb 4-1: unable to get BOS descriptor or descriptor too short [ 607.715808][ T29] audit: type=1326 audit(2000000081.840:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.1.1615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f279de59 code=0x7ffc0000 [ 607.753107][ T3106] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.770889][ T3106] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.822309][ T3106] usb 4-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 607.832462][ T29] audit: type=1326 audit(2000000081.840:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.1.1615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f34f279de59 code=0x7ffc0000 [ 607.859179][ T3106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.886548][ T29] audit: type=1326 audit(2000000081.870:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.1.1615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34f279dbc2 code=0x7ffc0000 [ 607.917388][T12562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.945889][ T3106] usb 4-1: Product: syz [ 607.960158][ T3106] usb 4-1: Manufacturer: syz [ 607.975710][ T29] audit: type=1326 audit(2000000081.870:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.1.1615" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34f279dbc2 code=0x7ffc0000 [ 608.172352][ T3106] usb 4-1: SerialNumber: syz [ 608.178570][T12562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.199304][ T3106] usb 4-1: 0:1 : does not exist [ 608.205428][ T3106] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 608.385828][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1617'. [ 608.480162][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 608.694432][ T5803] sunplus 0003:04FC:05D8.001D: unknown main item tag 0x0 [ 608.702992][ T5803] sunplus 0003:04FC:05D8.001D: unknown main item tag 0x0 [ 608.710154][ T5803] sunplus 0003:04FC:05D8.001D: unknown main item tag 0x0 [ 608.778258][ T5803] sunplus 0003:04FC:05D8.001D: unknown main item tag 0x0 [ 608.795845][ T5803] sunplus 0003:04FC:05D8.001D: unknown main item tag 0x0 [ 608.816161][T12591] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 608.848836][ T5803] sunplus 0003:04FC:05D8.001D: unknown main item tag 0x0 [ 608.859177][ T5803] sunplus 0003:04FC:05D8.001D: item fetching failed at offset 29/40 [ 608.867893][ T5803] sunplus 0003:04FC:05D8.001D: probe with driver sunplus failed with error -22 [ 608.937986][ T3106] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 609.036436][ T6247] udevd[6247]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.146978][T12498] usb 4-1: USB disconnect, device number 41 [ 609.148612][ T3106] usb 5-1: USB disconnect, device number 39 [ 609.484016][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1622'. [ 609.520156][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 609.882433][ T149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.906216][ T149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.915199][ T149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.926828][ T149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.560157][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 610.590833][T12498] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 610.660131][T11903] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 610.765046][T12498] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 610.784582][T12498] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.794534][T12498] usb 2-1: Product: syz [ 610.798739][T12498] usb 2-1: Manufacturer: syz [ 610.803798][T11903] usb 5-1: device descriptor read/64, error -71 [ 610.810673][T12498] usb 2-1: SerialNumber: syz [ 610.819229][T12498] usb 2-1: config 0 descriptor?? [ 611.050309][T11903] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 611.260035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 611.275406][T11903] usb 5-1: device descriptor read/64, error -71 [ 611.289554][T12498] usb 2-1: Firmware: major: 108, minor: 101, hardware type: UNKNOWN (114) [ 611.600375][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 611.822575][T11903] usb usb5-port1: attempt power cycle [ 611.829375][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 611.829391][ T29] audit: type=1400 audit(2000000085.610:1127): avc: denied { ioctl } for pid=12635 comm="syz.0.1634" path="socket:[35198]" dev="sockfs" ino=35198 ioctlcmd=0x4d65 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 611.869119][ T29] audit: type=1326 audit(2000000086.050:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.4.1623" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc2e39daeb code=0x7ffc0000 [ 611.871857][T12498] usb 2-1: no permanent extended address found, random address set [ 611.899203][ T29] audit: type=1326 audit(2000000086.050:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.4.1623" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc2e39daeb code=0x7ffc0000 [ 611.907216][T12498] usb 2-1: atusb_probe: initialization failed, error = -524 [ 611.935123][ T29] audit: type=1326 audit(2000000086.060:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.4.1623" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc2e39daeb code=0x7ffc0000 [ 611.941524][T12498] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 611.991573][ T29] audit: type=1326 audit(2000000086.140:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.4.1623" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc2e39daeb code=0x7ffc0000 [ 612.068984][ T29] audit: type=1326 audit(2000000086.140:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.4.1623" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc2e39daeb code=0x7ffc0000 [ 612.120137][ T5803] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 612.200968][ T29] audit: type=1326 audit(2000000086.430:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.4.1623" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc2e39daeb code=0x7ffc0000 [ 612.260118][T11903] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 612.338203][ T5803] usb 4-1: config 0 has no interfaces? [ 612.392407][ T5803] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 612.640229][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 612.707034][T11903] usb 5-1: device descriptor read/8, error -71 [ 612.716061][ T29] audit: type=1400 audit(2000000086.570:1134): avc: denied { ioctl } for pid=12614 comm="syz.1.1625" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 612.744035][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.768876][ T5803] usb 4-1: config 0 descriptor?? [ 612.774218][ T29] audit: type=1400 audit(2000000086.580:1135): avc: denied { ioctl } for pid=12614 comm="syz.1.1625" path="socket:[35221]" dev="sockfs" ino=35221 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 612.801744][ T29] audit: type=1400 audit(2000000086.580:1136): avc: denied { accept } for pid=12614 comm="syz.1.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 612.991131][T11903] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 613.011603][T11903] usb 5-1: device descriptor read/8, error -71 [ 613.130808][T11903] usb usb5-port1: unable to enumerate USB device [ 613.333738][T12664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.344692][T12664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.381108][ T5803] usb 4-1: USB disconnect, device number 42 [ 613.680152][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 613.749255][T11903] usb 2-1: USB disconnect, device number 31 [ 614.045820][T12670] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.421272][T12676] nbd1: detected capacity change from 0 to 63 [ 614.431696][T12678] block nbd0: NBD_DISCONNECT [ 614.443693][T12678] block nbd0: Send disconnect failed -32 [ 614.454430][T12678] block nbd0: shutting down sockets [ 614.463090][ C0] blk_print_req_error: 112 callbacks suppressed [ 614.463109][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 614.478484][ C0] buffer_io_error: 138 callbacks suppressed [ 614.478496][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 614.493637][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 614.502776][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 614.510530][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 614.519599][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 614.527347][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 614.536451][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 614.545477][ T1611] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 614.554645][ T1611] Buffer I/O error on dev nbd0, logical block 0, async page read [ 614.564015][ T1611] Buffer I/O error on dev nbd0, logical block 1, async page read [ 614.572829][ T1611] Buffer I/O error on dev nbd0, logical block 2, async page read [ 614.580803][ T1611] Buffer I/O error on dev nbd0, logical block 3, async page read [ 614.589160][ T1611] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 614.598330][ T1611] Buffer I/O error on dev nbd0, logical block 0, async page read [ 614.607172][ T1611] Buffer I/O error on dev nbd0, logical block 1, async page read [ 614.616616][ T1611] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 614.626437][ T1611] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 614.636422][ T5616] block nbd1: Receive control failed (result -104) [ 614.636741][ T1611] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 614.654091][ T1611] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 614.672942][ T5863] ldm_validate_partition_table(): Disk read failed. [ 614.681868][ T5863] Dev nbd0: unable to read RDB block 0 [ 614.720166][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 614.757203][ T5863] nbd0: unable to read partition table [ 614.828608][ T5863] ldm_validate_partition_table(): Disk read failed. [ 614.868924][ T5863] Dev nbd0: unable to read RDB block 0 [ 614.895208][ T5863] nbd0: unable to read partition table [ 615.361230][T12701] warning: `syz.3.1657' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 615.471235][T12706] binder: BINDER_SET_CONTEXT_MGR already set [ 615.490137][T12706] binder: 12705:12706 ioctl 4018620d 200000004a80 returned -16 [ 615.524978][T12708] nbd: nbd1 already in use [ 615.542536][T12708] block nbd1: NBD_DISCONNECT [ 615.551874][T12708] block nbd1: Send disconnect failed -32 [ 615.569374][T12708] block nbd1: shutting down sockets [ 615.583151][ T6247] ldm_validate_partition_table(): Disk read failed. [ 615.595906][ T6247] Dev nbd1: unable to read RDB block 0 [ 615.629383][ T6247] nbd1: unable to read partition table [ 615.662467][ T6247] ldm_validate_partition_table(): Disk read failed. [ 615.685627][ T6247] Dev nbd1: unable to read RDB block 0 [ 615.694853][ T6247] nbd1: unable to read partition table [ 615.712155][T12715] tipc: Enabling of bearer rejected, failed to enable media [ 615.760289][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 616.315602][T11903] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 616.470197][ T8617] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 616.480136][T11903] usb 4-1: Using ep0 maxpacket: 16 [ 616.492502][T11903] usb 4-1: unable to get BOS descriptor or descriptor too short [ 616.507380][T11903] usb 4-1: config index 0 descriptor too short (expected 18190, got 133) [ 616.523632][T11903] usb 4-1: config 95 has too many interfaces: 119, using maximum allowed: 32 [ 616.543762][T11903] usb 4-1: config 95 has an invalid interface number: 255 but max is 118 [ 616.553165][T11903] usb 4-1: config 95 has an invalid descriptor of length 135, skipping remainder of the config [ 616.563372][T12745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.564738][T11903] usb 4-1: config 95 has 4 interfaces, different from the descriptor's value: 119 [ 616.591050][T11903] usb 4-1: config 95 has no interface number 3 [ 616.602145][T11903] usb 4-1: config 95 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.615536][T11903] usb 4-1: config 95 interface 255 has no altsetting 0 [ 616.622889][T11903] usb 4-1: config 95 interface 2 has no altsetting 0 [ 616.632097][T11903] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 616.646212][T11903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.656531][T11903] usb 4-1: Product: syz [ 616.656985][ T8617] usb 2-1: config 0 has no interfaces? [ 616.661147][T11903] usb 4-1: Manufacturer: syz [ 616.673231][ T8617] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 616.682025][T11903] usb 4-1: SerialNumber: syz [ 616.699108][ T8617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.718322][ T8617] usb 2-1: config 0 descriptor?? [ 616.801570][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 616.910971][T12712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.940677][T12712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.964687][T11903] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 617.334433][T11903] snd-usb-audio 4-1:95.0: probe with driver snd-usb-audio failed with error -22 [ 617.584019][T12760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.595348][T12760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.650296][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 617.674071][ T8617] usb 2-1: USB disconnect, device number 32 [ 617.831073][T11903] usb 4-1: selecting invalid altsetting 0 [ 617.840204][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 617.901107][T11903] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 617.909372][T11903] snd-usb-audio 4-1:95.255: probe with driver snd-usb-audio failed with error -22 [ 617.930533][T11903] usb 4-1: USB disconnect, device number 43 [ 617.945125][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.952659][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.008832][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.113260][T12761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.127513][T12761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.310732][T12772] FAULT_INJECTION: forcing a failure. [ 618.310732][T12772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.325770][T12772] CPU: 0 UID: 0 PID: 12772 Comm: syz.3.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 618.325804][T12772] Tainted: [L]=SOFTLOCKUP [ 618.325812][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 618.325825][T12772] Call Trace: [ 618.325833][T12772] [ 618.325842][T12772] dump_stack_lvl+0x100/0x190 [ 618.325873][T12772] should_fail_ex.cold+0x5/0xa [ 618.325901][T12772] _copy_from_user+0x2e/0xd0 [ 618.325926][T12772] copy_msghdr_from_user+0x9f/0x4c0 [ 618.325955][T12772] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 618.325997][T12772] ___sys_sendmsg+0x106/0x1e0 [ 618.326025][T12772] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.326050][T12772] ? __lock_acquire+0x49f/0x1a40 [ 618.326073][T12772] ? get_pid_task+0x106/0x250 [ 618.326142][T12772] __sys_sendmsg+0x160/0x210 [ 618.326164][T12772] ? __pfx___sys_sendmsg+0x10/0x10 [ 618.326202][T12772] do_syscall_64+0x115/0x870 [ 618.326229][T12772] ? clear_bhb_loop+0x40/0x90 [ 618.326256][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.326279][T12772] RIP: 0033:0x7fcebb39de59 [ 618.326298][T12772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.326318][T12772] RSP: 002b:00007fcebc2a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.326339][T12772] RAX: ffffffffffffffda RBX: 00007fcebb625fa0 RCX: 00007fcebb39de59 [ 618.326353][T12772] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 618.326367][T12772] RBP: 00007fcebc2a7090 R08: 0000000000000000 R09: 0000000000000000 [ 618.326380][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.326393][T12772] R13: 00007fcebb626038 R14: 00007fcebb625fa0 R15: 00007ffdf4d38498 [ 618.326423][T12772] [ 618.509804][T12773] IPVS: length: 144 != 8 [ 618.561333][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.570499][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.579809][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.880377][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 619.081776][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.630115][T11903] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 619.920168][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 619.959182][T11903] usb 1-1: Using ep0 maxpacket: 16 [ 619.966080][T11903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.977383][T11903] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 619.987008][T11903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.000527][T11903] usb 1-1: config 0 descriptor?? [ 620.039033][T12805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 620.172028][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 620.172064][ T29] audit: type=1400 audit(2000000094.340:1146): avc: denied { bind } for pid=12798 comm="syz.3.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 620.500155][ T29] audit: type=1400 audit(2000000094.340:1147): avc: denied { name_bind } for pid=12798 comm="syz.3.1689" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 620.531792][ T29] audit: type=1400 audit(2000000094.340:1148): avc: denied { node_bind } for pid=12798 comm="syz.3.1689" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 620.555156][T11903] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 620.576562][ T29] audit: type=1400 audit(2000000094.480:1149): avc: denied { watch } for pid=12798 comm="syz.3.1689" path="/306" dev="tmpfs" ino=1619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 620.753237][ C0] ================================================================== [ 620.761339][ C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x101c/0x1090 [ 620.769326][ C0] Read of size 1 at addr ffff88805705ffff by task kworker/0:4/11903 [ 620.777289][ C0] [ 620.779604][ C0] CPU: 0 UID: 0 PID: 11903 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.779637][ C0] Tainted: [L]=SOFTLOCKUP [ 620.779645][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 620.779670][ C0] Workqueue: usb_hub_wq hub_event [ 620.779696][ C0] Call Trace: [ 620.779704][ C0] [ 620.779714][ C0] dump_stack_lvl+0x100/0x190 [ 620.779741][ C0] print_report+0x13d/0x4b0 [ 620.779772][ C0] ? __virt_addr_valid+0x239/0x430 [ 620.779797][ C0] ? mcp2221_raw_event+0x101c/0x1090 [ 620.779824][ C0] kasan_report+0xdf/0x1c0 [ 620.779850][ C0] ? mcp2221_raw_event+0x101c/0x1090 [ 620.779882][ C0] mcp2221_raw_event+0x101c/0x1090 [ 620.779908][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 620.779937][ C0] __hid_input_report.constprop.0+0x319/0x470 [ 620.779973][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 620.780001][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 620.780027][ C0] hid_irq_in+0x55d/0x710 [ 620.780060][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 620.780086][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 620.780112][ C0] dummy_timer+0xda1/0x36c0 [ 620.780145][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 620.780176][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 620.780202][ C0] ? mark_held_locks+0x40/0x70 [ 620.780224][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 620.780251][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 620.780275][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 620.780309][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 620.780338][ C0] handle_softirqs+0x1ea/0x9b0 [ 620.780364][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 620.780388][ C0] ? _raw_spin_unlock+0x28/0x50 [ 620.780411][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 620.780449][ C0] __irq_exit_rcu+0x162/0x210 [ 620.780474][ C0] irq_exit_rcu+0x9/0x30 [ 620.780498][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 620.780529][ C0] [ 620.780536][ C0] [ 620.780543][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 620.780567][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 620.780590][ C0] Code: 05 3b df 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 c4 3c 0f 0f 82 ac 02 00 00 8b 35 4e f8 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd de 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 620.780612][ C0] RSP: 0018:ffffc9001c326638 EFLAGS: 00000206 [ 620.780630][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 620.780644][ C0] RDX: 0000000000000000 RSI: ffffffff8e17cd15 RDI: ffffffff8c400c80 [ 620.780659][ C0] RBP: ffffffff8ebe6100 R08: 000000002eeb0c20 R09: 0000000000000007 [ 620.780673][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 620.780687][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.780707][ C0] ? unwind_next_frame+0x3be/0x2090 [ 620.780738][ C0] ? unwind_next_frame+0x3be/0x2090 [ 620.780768][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.780801][ C0] unwind_next_frame+0xd1/0x2090 [ 620.780830][ C0] ? unwind_next_frame+0xbd/0x2090 [ 620.780860][ C0] ? usb_probe_interface+0x303/0x8f0 [ 620.780885][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 620.780918][ C0] arch_stack_walk+0x94/0xf0 [ 620.780950][ C0] ? usb_probe_interface+0x303/0x8f0 [ 620.780974][ C0] ? mcp_send_data_req_status+0x9a/0x160 [ 620.781000][ C0] stack_trace_save+0x8e/0xc0 [ 620.781031][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 620.781063][ C0] ? __lock_acquire+0x49f/0x1a40 [ 620.781084][ C0] ? kmemdup_noprof+0x29/0x60 [ 620.781115][ C0] ? mcp_send_data_req_status+0x56/0x160 [ 620.781141][ C0] kasan_save_stack+0x30/0x50 [ 620.781161][ C0] ? kasan_save_stack+0x30/0x50 [ 620.781181][ C0] ? kasan_save_track+0x14/0x30 [ 620.781200][ C0] ? kasan_save_free_info+0x3b/0x70 [ 620.781228][ C0] ? __kasan_slab_free+0x5f/0x80 [ 620.781249][ C0] ? kfree+0x22b/0x6c0 [ 620.781275][ C0] ? mcp_send_data_req_status+0x9a/0x160 [ 620.781299][ C0] ? mcp2221_probe.cold+0x6ec/0xf16 [ 620.781326][ C0] ? hid_device_probe+0x50e/0x800 [ 620.781355][ C0] ? really_probe+0x241/0xa60 [ 620.781375][ C0] ? __driver_probe_device+0x20e/0x450 [ 620.781395][ C0] ? driver_probe_device+0x4a/0x140 [ 620.781415][ C0] ? __device_attach_driver+0x1df/0x320 [ 620.781440][ C0] ? bus_for_each_drv+0x159/0x1e0 [ 620.781470][ C0] ? __device_attach+0x1e4/0x4d0 [ 620.781491][ C0] ? device_initial_probe+0xaf/0xd0 [ 620.781513][ C0] ? bus_probe_device+0x64/0x160 [ 620.781544][ C0] ? device_add+0x121d/0x1970 [ 620.781568][ C0] ? hid_add_device+0x2bf/0x440 [ 620.781597][ C0] ? usbhid_probe+0xa64/0x10b0 [ 620.781621][ C0] ? usb_probe_interface+0x303/0x8f0 [ 620.781659][ C0] kasan_save_track+0x14/0x30 [ 620.781679][ C0] kasan_save_free_info+0x3b/0x70 [ 620.781707][ C0] __kasan_slab_free+0x5f/0x80 [ 620.781728][ C0] ? mcp2221_remove+0x80/0x80 [ 620.781752][ C0] kfree+0x22b/0x6c0 [ 620.781781][ C0] mcp_send_data_req_status+0x9a/0x160 [ 620.781808][ C0] mcp2221_probe.cold+0x6ec/0xf16 [ 620.781836][ C0] ? __pfx_mcp2221_probe+0x10/0x10 [ 620.781862][ C0] hid_device_probe+0x50e/0x800 [ 620.781895][ C0] ? __pfx_hid_device_probe+0x10/0x10 [ 620.781928][ C0] really_probe+0x241/0xa60 [ 620.781950][ C0] __driver_probe_device+0x20e/0x450 [ 620.781970][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 620.781993][ C0] driver_probe_device+0x4a/0x140 [ 620.782014][ C0] __device_attach_driver+0x1df/0x320 [ 620.782036][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 620.782057][ C0] bus_for_each_drv+0x159/0x1e0 [ 620.782086][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 620.782114][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 620.782142][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 620.782169][ C0] __device_attach+0x1e4/0x4d0 [ 620.782190][ C0] ? __pfx___device_attach+0x10/0x10 [ 620.782211][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 620.782240][ C0] device_initial_probe+0xaf/0xd0 [ 620.782262][ C0] bus_probe_device+0x64/0x160 [ 620.782293][ C0] device_add+0x121d/0x1970 [ 620.782317][ C0] ? __pfx_device_add+0x10/0x10 [ 620.782342][ C0] ? debugfs_create_file_full+0x41/0x60 [ 620.782374][ C0] hid_add_device+0x2bf/0x440 [ 620.782401][ C0] ? mutex_init_lockdep+0xf1/0x120 [ 620.782425][ C0] usbhid_probe+0xa64/0x10b0 [ 620.782455][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 620.782481][ C0] ? __pfx_usbhid_probe+0x10/0x10 [ 620.782506][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 620.782531][ C0] ? mark_held_locks+0x40/0x70 [ 620.782553][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 620.782579][ C0] usb_probe_interface+0x303/0x8f0 [ 620.782605][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 620.782628][ C0] really_probe+0x241/0xa60 [ 620.782649][ C0] __driver_probe_device+0x20e/0x450 [ 620.782669][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 620.782691][ C0] driver_probe_device+0x4a/0x140 [ 620.782712][ C0] __device_attach_driver+0x1df/0x320 [ 620.782734][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 620.782755][ C0] bus_for_each_drv+0x159/0x1e0 [ 620.782784][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 620.782812][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 620.782839][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 620.782866][ C0] __device_attach+0x1e4/0x4d0 [ 620.782886][ C0] ? __pfx___device_attach+0x10/0x10 [ 620.782907][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 620.782937][ C0] device_initial_probe+0xaf/0xd0 [ 620.782959][ C0] bus_probe_device+0x64/0x160 [ 620.782989][ C0] device_add+0x121d/0x1970 [ 620.783013][ C0] ? __pfx_device_add+0x10/0x10 [ 620.783037][ C0] ? mark_held_locks+0x40/0x70 [ 620.783062][ C0] usb_set_configuration+0xd97/0x1c60 [ 620.783090][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 620.783119][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 620.783148][ C0] usb_probe_device+0xef/0x400 [ 620.783168][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 620.783189][ C0] really_probe+0x241/0xa60 [ 620.783210][ C0] __driver_probe_device+0x20e/0x450 [ 620.783231][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 620.783253][ C0] driver_probe_device+0x4a/0x140 [ 620.783273][ C0] __device_attach_driver+0x1df/0x320 [ 620.783295][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 620.783316][ C0] bus_for_each_drv+0x159/0x1e0 [ 620.783344][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 620.783373][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 620.783400][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 620.783427][ C0] __device_attach+0x1e4/0x4d0 [ 620.783466][ C0] ? __pfx___device_attach+0x10/0x10 [ 620.783488][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 620.783516][ C0] device_initial_probe+0xaf/0xd0 [ 620.783538][ C0] bus_probe_device+0x64/0x160 [ 620.783569][ C0] device_add+0x121d/0x1970 [ 620.783593][ C0] ? __pfx_device_add+0x10/0x10 [ 620.783616][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 620.783650][ C0] usb_new_device.cold+0x685/0x115c [ 620.783679][ C0] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 620.783708][ C0] ? do_raw_spin_lock+0x128/0x260 [ 620.783733][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 620.783753][ C0] ? mark_held_locks+0x40/0x70 [ 620.783776][ C0] hub_event+0x314d/0x4af0 [ 620.783808][ C0] ? __pfx_hub_event+0x10/0x10 [ 620.783827][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 620.783857][ C0] ? rcu_is_watching+0x12/0xc0 [ 620.783887][ C0] process_one_work+0xa23/0x1940 [ 620.783913][ C0] ? __pfx_process_one_work+0x10/0x10 [ 620.783937][ C0] ? __pfx_hub_event+0x10/0x10 [ 620.783958][ C0] worker_thread+0x5ef/0xe50 [ 620.783981][ C0] ? __pfx_worker_thread+0x10/0x10 [ 620.784001][ C0] ? kthread+0x13a/0x450 [ 620.784031][ C0] ? __pfx_worker_thread+0x10/0x10 [ 620.784049][ C0] kthread+0x370/0x450 [ 620.784078][ C0] ? __pfx_kthread+0x10/0x10 [ 620.784108][ C0] ret_from_fork+0x72b/0xd50 [ 620.784134][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 620.784160][ C0] ? __switch_to+0x800/0x10f0 [ 620.784191][ C0] ? __pfx_kthread+0x10/0x10 [ 620.784221][ C0] ret_from_fork_asm+0x1a/0x30 [ 620.784258][ C0] [ 620.784265][ C0] [ 621.752026][ C0] Allocated by task 5615: [ 621.756334][ C0] kasan_save_stack+0x30/0x50 [ 621.761007][ C0] kasan_save_track+0x14/0x30 [ 621.765666][ C0] __kasan_kmalloc+0xaa/0xb0 [ 621.770236][ C0] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 621.775600][ C0] device_add+0xd3f/0x1970 [ 621.780007][ C0] netdev_register_kobject+0x1a9/0x3d0 [ 621.785462][ C0] register_netdevice+0x15b6/0x25a0 [ 621.790643][ C0] veth_newlink+0x316/0xa00 [ 621.795129][ C0] rtnl_newlink+0x1499/0x2380 [ 621.799790][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 621.804711][ C0] netlink_rcv_skb+0x159/0x420 [ 621.809470][ C0] netlink_unicast+0x585/0x850 [ 621.814221][ C0] netlink_sendmsg+0x8b0/0xda0 [ 621.818974][ C0] __sys_sendto+0x48b/0x4e0 [ 621.823470][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 621.828224][ C0] do_syscall_64+0x115/0x870 [ 621.832806][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.838681][ C0] [ 621.840984][ C0] The buggy address belongs to the object at ffff88805705fc00 [ 621.840984][ C0] which belongs to the cache kmalloc-512 of size 512 [ 621.855030][ C0] The buggy address is located 751 bytes to the right of [ 621.855030][ C0] allocated 272-byte region [ffff88805705fc00, ffff88805705fd10) [ 621.869692][ C0] [ 621.871996][ C0] The buggy address belongs to the physical page: [ 621.878395][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5705c [ 621.887142][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 621.895624][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 621.903155][ C0] page_type: f5(slab) [ 621.907119][ C0] raw: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 621.915689][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 621.924257][ C0] head: 00fff00000000040 ffff88813fe21c80 dead000000000100 dead000000000122 [ 621.932909][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 621.941561][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 621.950215][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 621.958862][ C0] page dumped because: kasan: bad access detected [ 621.965262][ C0] page_owner tracks the page as allocated [ 621.970950][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5615, tgid 5615 (syz-executor), ts 78212431022, free_ts 21995034977 [ 621.992294][ C0] post_alloc_hook+0xfd/0x120 [ 621.996965][ C0] get_page_from_freelist+0xf48/0x3530 [ 622.002414][ C0] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 622.008298][ C0] new_slab+0xa2/0x650 [ 622.012363][ C0] refill_objects+0xe3/0x410 [ 622.016942][ C0] __pcs_replace_empty_main+0x376/0x680 [ 622.022478][ C0] __kmalloc_cache_noprof+0x479/0x6c0 [ 622.027840][ C0] __ipv6_dev_mc_inc+0x2f1/0xbd0 [ 622.032759][ C0] ipv6_add_dev+0xb78/0x1520 [ 622.037334][ C0] addrconf_notify+0x5db/0x1ba0 [ 622.042166][ C0] notifier_call_chain+0x99/0x3f0 [ 622.047181][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 622.053060][ C0] register_netdevice+0x1998/0x25a0 [ 622.058257][ C0] veth_newlink+0x316/0xa00 [ 622.062741][ C0] rtnl_newlink+0x1499/0x2380 [ 622.067400][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 622.072320][ C0] page last free pid 1 tgid 1 stack trace: [ 622.078110][ C0] free_pages_prepare+0x586/0xd80 [ 622.083129][ C0] __free_contig_range_common+0x14f/0x250 [ 622.088839][ C0] destroy_args+0xa8/0x7a0 [ 622.093248][ C0] debug_vm_pgtable+0x1d69/0x3490 [ 622.098252][ C0] do_one_initcall+0x11d/0x700 [ 622.103007][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 622.108196][ C0] kernel_init+0x1f/0x1e0 [ 622.112506][ C0] ret_from_fork+0x72b/0xd50 [ 622.117080][ C0] ret_from_fork_asm+0x1a/0x30 [ 622.121835][ C0] [ 622.124135][ C0] Memory state around the buggy address: [ 622.129739][ C0] ffff88805705fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 622.137779][ C0] ffff88805705ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 622.145829][ C0] >ffff88805705ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 622.153867][ C0] ^ [ 622.161820][ C0] ffff888057060000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.169863][ C0] ffff888057060080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 622.177902][ C0] ================================================================== [ 622.185955][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 622.193129][ C0] CPU: 0 UID: 0 PID: 11903 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.204134][ C0] Tainted: [L]=SOFTLOCKUP [ 622.208436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 622.218472][ C0] Workqueue: usb_hub_wq hub_event [ 622.223486][ C0] Call Trace: [ 622.226748][ C0] [ 622.229618][ C0] dump_stack_lvl+0x100/0x190 [ 622.234285][ C0] vpanic+0x552/0x970 [ 622.238251][ C0] ? __pfx_vpanic+0x10/0x10 [ 622.242737][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 622.247756][ C0] ? mcp2221_raw_event+0x101c/0x1090 [ 622.253051][ C0] panic+0xd1/0xe0 [ 622.256755][ C0] ? __pfx_panic+0x10/0x10 [ 622.261158][ C0] ? end_report.part.0+0x23/0x90 [ 622.266095][ C0] ? rcu_is_watching+0x12/0xc0 [ 622.270849][ C0] ? end_report.part.0+0x23/0x90 [ 622.275785][ C0] check_panic_on_warn.cold+0x19/0x34 [ 622.281146][ C0] end_report.part.0+0x3a/0x90 [ 622.285901][ C0] kasan_report.cold+0xe/0x18 [ 622.290569][ C0] ? mcp2221_raw_event+0x101c/0x1090 [ 622.295850][ C0] mcp2221_raw_event+0x101c/0x1090 [ 622.300952][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 622.306750][ C0] __hid_input_report.constprop.0+0x319/0x470 [ 622.312813][ C0] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 622.318261][ C0] ? ktime_get_mono_fast_ns+0x1c3/0x3f0 [ 622.323793][ C0] hid_irq_in+0x55d/0x710 [ 622.328117][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 622.333477][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 622.338664][ C0] dummy_timer+0xda1/0x36c0 [ 622.343166][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 622.348966][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 622.353892][ C0] ? mark_held_locks+0x40/0x70 [ 622.358648][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 622.364442][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 622.369366][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 622.374560][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 622.379666][ C0] handle_softirqs+0x1ea/0x9b0 [ 622.384422][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 622.389697][ C0] ? _raw_spin_unlock+0x28/0x50 [ 622.394533][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 622.400160][ C0] __irq_exit_rcu+0x162/0x210 [ 622.404826][ C0] irq_exit_rcu+0x9/0x30 [ 622.409056][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 622.414692][ C0] [ 622.417618][ C0] [ 622.420533][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 622.426510][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 622.431698][ C0] Code: 05 3b df 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 c4 3c 0f 0f 82 ac 02 00 00 8b 35 4e f8 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 dd de 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 622.451294][ C0] RSP: 0018:ffffc9001c326638 EFLAGS: 00000206 [ 622.457349][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 622.465302][ C0] RDX: 0000000000000000 RSI: ffffffff8e17cd15 RDI: ffffffff8c400c80 [ 622.473257][ C0] RBP: ffffffff8ebe6100 R08: 000000002eeb0c20 R09: 0000000000000007 [ 622.481214][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 622.489169][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.497133][ C0] ? unwind_next_frame+0x3be/0x2090 [ 622.502329][ C0] ? unwind_next_frame+0x3be/0x2090 [ 622.507520][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 622.513669][ C0] unwind_next_frame+0xd1/0x2090 [ 622.518600][ C0] ? unwind_next_frame+0xbd/0x2090 [ 622.523706][ C0] ? usb_probe_interface+0x303/0x8f0 [ 622.528982][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 622.535132][ C0] arch_stack_walk+0x94/0xf0 [ 622.539719][ C0] ? usb_probe_interface+0x303/0x8f0 [ 622.545003][ C0] ? mcp_send_data_req_status+0x9a/0x160 [ 622.550639][ C0] stack_trace_save+0x8e/0xc0 [ 622.555318][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 622.560696][ C0] ? __lock_acquire+0x49f/0x1a40 [ 622.565622][ C0] ? kmemdup_noprof+0x29/0x60 [ 622.570295][ C0] ? mcp_send_data_req_status+0x56/0x160 [ 622.575919][ C0] kasan_save_stack+0x30/0x50 [ 622.580582][ C0] ? kasan_save_stack+0x30/0x50 [ 622.585420][ C0] ? kasan_save_track+0x14/0x30 [ 622.590329][ C0] ? kasan_save_free_info+0x3b/0x70 [ 622.595560][ C0] ? __kasan_slab_free+0x5f/0x80 [ 622.600519][ C0] ? kfree+0x22b/0x6c0 [ 622.604589][ C0] ? mcp_send_data_req_status+0x9a/0x160 [ 622.610217][ C0] ? mcp2221_probe.cold+0x6ec/0xf16 [ 622.615408][ C0] ? hid_device_probe+0x50e/0x800 [ 622.620429][ C0] ? really_probe+0x241/0xa60 [ 622.625096][ C0] ? __driver_probe_device+0x20e/0x450 [ 622.630540][ C0] ? driver_probe_device+0x4a/0x140 [ 622.635723][ C0] ? __device_attach_driver+0x1df/0x320 [ 622.641254][ C0] ? bus_for_each_drv+0x159/0x1e0 [ 622.646274][ C0] ? __device_attach+0x1e4/0x4d0 [ 622.651201][ C0] ? device_initial_probe+0xaf/0xd0 [ 622.656386][ C0] ? bus_probe_device+0x64/0x160 [ 622.661319][ C0] ? device_add+0x121d/0x1970 [ 622.665989][ C0] ? hid_add_device+0x2bf/0x440 [ 622.670840][ C0] ? usbhid_probe+0xa64/0x10b0 [ 622.675616][ C0] ? usb_probe_interface+0x303/0x8f0 [ 622.680912][ C0] kasan_save_track+0x14/0x30 [ 622.685581][ C0] kasan_save_free_info+0x3b/0x70 [ 622.690600][ C0] __kasan_slab_free+0x5f/0x80 [ 622.695351][ C0] ? mcp2221_remove+0x80/0x80 [ 622.700016][ C0] kfree+0x22b/0x6c0 [ 622.703912][ C0] mcp_send_data_req_status+0x9a/0x160 [ 622.709363][ C0] mcp2221_probe.cold+0x6ec/0xf16 [ 622.714386][ C0] ? __pfx_mcp2221_probe+0x10/0x10 [ 622.719486][ C0] hid_device_probe+0x50e/0x800 [ 622.724332][ C0] ? __pfx_hid_device_probe+0x10/0x10 [ 622.729697][ C0] really_probe+0x241/0xa60 [ 622.734186][ C0] __driver_probe_device+0x20e/0x450 [ 622.739454][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 622.745344][ C0] driver_probe_device+0x4a/0x140 [ 622.750354][ C0] __device_attach_driver+0x1df/0x320 [ 622.755714][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 622.761591][ C0] bus_for_each_drv+0x159/0x1e0 [ 622.766437][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 622.771800][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 622.776989][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 622.782786][ C0] __device_attach+0x1e4/0x4d0 [ 622.787539][ C0] ? __pfx___device_attach+0x10/0x10 [ 622.792810][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 622.798002][ C0] device_initial_probe+0xaf/0xd0 [ 622.803010][ C0] bus_probe_device+0x64/0x160 [ 622.807778][ C0] device_add+0x121d/0x1970 [ 622.812270][ C0] ? __pfx_device_add+0x10/0x10 [ 622.817112][ C0] ? debugfs_create_file_full+0x41/0x60 [ 622.822652][ C0] hid_add_device+0x2bf/0x440 [ 622.827322][ C0] ? mutex_init_lockdep+0xf1/0x120 [ 622.832424][ C0] usbhid_probe+0xa64/0x10b0 [ 622.837004][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 622.842364][ C0] ? __pfx_usbhid_probe+0x10/0x10 [ 622.847376][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 622.852743][ C0] ? mark_held_locks+0x40/0x70 [ 622.857490][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 622.863295][ C0] usb_probe_interface+0x303/0x8f0 [ 622.868396][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 622.874015][ C0] really_probe+0x241/0xa60 [ 622.878509][ C0] __driver_probe_device+0x20e/0x450 [ 622.883778][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 622.889658][ C0] driver_probe_device+0x4a/0x140 [ 622.894665][ C0] __device_attach_driver+0x1df/0x320 [ 622.900027][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 622.905904][ C0] bus_for_each_drv+0x159/0x1e0 [ 622.910745][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 622.916108][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 622.921300][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 622.927094][ C0] __device_attach+0x1e4/0x4d0 [ 622.931842][ C0] ? __pfx___device_attach+0x10/0x10 [ 622.937111][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 622.942302][ C0] device_initial_probe+0xaf/0xd0 [ 622.947312][ C0] bus_probe_device+0x64/0x160 [ 622.952070][ C0] device_add+0x121d/0x1970 [ 622.956573][ C0] ? __pfx_device_add+0x10/0x10 [ 622.961411][ C0] ? mark_held_locks+0x40/0x70 [ 622.966168][ C0] usb_set_configuration+0xd97/0x1c60 [ 622.971535][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 622.977594][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 622.982960][ C0] usb_probe_device+0xef/0x400 [ 622.987708][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 622.993068][ C0] really_probe+0x241/0xa60 [ 622.997559][ C0] __driver_probe_device+0x20e/0x450 [ 623.002831][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 623.008712][ C0] driver_probe_device+0x4a/0x140 [ 623.013722][ C0] __device_attach_driver+0x1df/0x320 [ 623.019080][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 623.024983][ C0] bus_for_each_drv+0x159/0x1e0 [ 623.029830][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 623.035195][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 623.040388][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 623.046187][ C0] __device_attach+0x1e4/0x4d0 [ 623.050941][ C0] ? __pfx___device_attach+0x10/0x10 [ 623.056216][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 623.061408][ C0] device_initial_probe+0xaf/0xd0 [ 623.066419][ C0] bus_probe_device+0x64/0x160 [ 623.071181][ C0] device_add+0x121d/0x1970 [ 623.075675][ C0] ? __pfx_device_add+0x10/0x10 [ 623.080513][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 623.086234][ C0] usb_new_device.cold+0x685/0x115c [ 623.091430][ C0] ? _mutex_trylock_nest_lock+0x2e1/0x310 [ 623.097144][ C0] ? do_raw_spin_lock+0x128/0x260 [ 623.102159][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 623.107346][ C0] ? mark_held_locks+0x40/0x70 [ 623.112114][ C0] hub_event+0x314d/0x4af0 [ 623.116530][ C0] ? __pfx_hub_event+0x10/0x10 [ 623.121285][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 623.126930][ C0] ? rcu_is_watching+0x12/0xc0 [ 623.131689][ C0] process_one_work+0xa23/0x1940 [ 623.136618][ C0] ? __pfx_process_one_work+0x10/0x10 [ 623.141984][ C0] ? __pfx_hub_event+0x10/0x10 [ 623.146734][ C0] worker_thread+0x5ef/0xe50 [ 623.151314][ C0] ? __pfx_worker_thread+0x10/0x10 [ 623.156408][ C0] ? kthread+0x13a/0x450 [ 623.160644][ C0] ? __pfx_worker_thread+0x10/0x10 [ 623.165738][ C0] kthread+0x370/0x450 [ 623.169804][ C0] ? __pfx_kthread+0x10/0x10 [ 623.174389][ C0] ret_from_fork+0x72b/0xd50 [ 623.178979][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 623.184087][ C0] ? __switch_to+0x800/0x10f0 [ 623.188759][ C0] ? __pfx_kthread+0x10/0x10 [ 623.193362][ C0] ret_from_fork_asm+0x1a/0x30 [ 623.198130][ C0] [ 623.201357][ C0] Kernel Offset: disabled [ 623.205662][ C0] Rebooting in 86400 seconds..