last executing test programs: 2m47.548216014s ago: executing program 3 (id=180): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0xc80) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r3, r1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2m46.017704308s ago: executing program 3 (id=182): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x7}, 0xfffffffffffffe51) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4}) (async) r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000300)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)={r9}) (async) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r11, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) (async) close_range(r2, 0xffffffffffffffff, 0x0) 2m45.824383587s ago: executing program 3 (id=183): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) listen(r0, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x4001, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x2) read$ptp(r11, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f00000002c0)={'veth0_vlan\x00', @random='D\x00\x00\x00(E'}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x40007, 0x2, r4}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000025280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000025080)=@string={0x2}}, {0x3b, &(0x7f0000025180)=@string={0x3b, 0x3, "f42bfc09a39532dd4bf01b10cd6c26d828ec8c36475b9c30e3275d08ffc40c05362d0d56e59c373d11bae757145cb56f8ff1c1c555be3211f0"}}]}) 2m42.554133086s ago: executing program 3 (id=195): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x8018}, 0x48, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104000502010207240705000005082408050400049604000000010302000100060006092403050503060581092403060101040505072404", @ANYRESHEX=0x0], 0x0) ioperm(0x9, 0x3, 0x163f) mount$cgroup(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000680)={[{@name={'name', 0x3d, '+$!&%]-[(+\xfc\xe3T\xcd\x87\xca\x1b:\x17\x8a\x8fM\xe5\xc9\xaa\xaf|\xd4\xe2\xce\v\x0fAV\xedc7V\xef\xea\xa1\xe3\x1d\xff\x10\xe0\xa2\x10\'\xfa\xe7\x97\x86\xdc\xdf}\xd0Ddhp\xb9\vl\x85\xd5H\"\v\'\xaa\xe7$\x91\xf2\xc8\x81\xeb\x03\xf3\xe7\xd5\r\xb6\x00\xd6\x05;G\x84\x02x\x0f\xc3\xa7\xf2\x10Hp\xffDz\x06\xb0\xf8?\"\xdc@h\xf3D\x84j8\x88s\x00\x85\xae\x98x>7\xf1I\x0eI\x86\xb6g\xd9N\x9e\xd2\x9d\xab\x9e\xc78\xa2\xaa(tWMO\xe2\xc8\xd4I\xe8S\xc4\xc9\xc49W\x9a\xd4J\xd3\xc3\x90\xe2\xd9Z?\xa5\x8b\xb4]d\x9cL^\x1b\xf6\f\xe0\xf7N\xaf\x17\x13\xdaN\x7f\xebU\x06\xccz\xc9\xf6RY\xa1\xc7\xa5|E\xfa\xea[\xe3\x06ME\xb2z\x00[z(s>m\xfd\xe5wYP\xb1\x00*R\xa0\t\x9abF\xbb7\xe5\xc9'}}]}) unshare(0x2a020400) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = fsmount(r1, 0x1, 0x8) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000004, 0x8, 0x1, 0xc05}) mq_timedreceive(r3, &(0x7f0000000000)=""/96, 0x60, 0x8000000000000000, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x40000000100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x200, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000280)) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) 2m40.389683645s ago: executing program 3 (id=198): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xea\xec\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x94\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x70}}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r10, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m36.569297734s ago: executing program 3 (id=207): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x4, 0xfffffffd, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x80004, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x20000], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x4000000, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x5842, 0x136) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a40)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000ac0)={r8}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x100], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r10, @ANYRES64=r1, @ANYRES32=r6, @ANYRESOCT=r5, @ANYRES32, @ANYBLOB="7e0ac717d21fea237873ee01e1b10e472879d9b65b9a0fc0917b50832343c3912f6a4793f614f8064d630d5775dae7910002168b637acece936a944c6d7ce0042eb29f8f00e6311d0abec3d3e36d5f137da94526934a13aa3860bd59a0e6d70000001000"/109, @ANYRESOCT=r4], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r12, &(0x7f0000000040)=[{&(0x7f0000000380)="90", 0x1}], 0x1) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) 2m21.360769894s ago: executing program 32 (id=207): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x800) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x4, 0xfffffffd, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x80004, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x20000], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x4000000, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x5842, 0x136) writev(r7, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a40)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000000ac0)={r8}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz1\x00', {0xb710, 0xe, 0x3}, 0x34, [0xe, 0x1ff, 0x8, 0x3, 0x2, 0x8, 0x69, 0x2, 0x0, 0x874, 0x9, 0xd4a1, 0x3, 0x3, 0x7, 0x5b8, 0x2, 0x6, 0xc, 0x7, 0x51, 0xbe4, 0x100, 0x1, 0xa, 0x8, 0xfff, 0x8, 0xb, 0x80, 0x9ad, 0x26, 0x1, 0x5, 0x1, 0x1, 0x905e, 0xf87, 0xe2ee, 0x0, 0x6, 0x5, 0x1, 0x80000000, 0x1000, 0x1d7, 0x2, 0x6, 0xff, 0x8001, 0x10, 0x2, 0xc3bb, 0x1, 0x1, 0x5, 0x1, 0x4, 0x2, 0x339, 0xbbf, 0xfffff000, 0x800, 0x100], [0x2, 0x100, 0x7af, 0x6, 0x5, 0x0, 0x5, 0x7fffc, 0x2, 0x6, 0xa, 0x10000, 0x2, 0x17, 0x20, 0x2, 0x5, 0x5, 0xa, 0x65, 0x9, 0x9, 0x8, 0x4, 0x7fff, 0x3ff, 0xffffff01, 0x8, 0x3, 0x9, 0xb6, 0x7cb4cb2c, 0x0, 0x2, 0x81, 0xffff, 0x7, 0xc5d3, 0xa, 0xc2e, 0x7, 0x9, 0x9, 0x8, 0x2, 0xfffffffe, 0x7c, 0x9, 0x5, 0x5, 0xa, 0x5, 0xc98, 0x9, 0xffffcbb6, 0xd0, 0x1, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0x6], [0x4, 0x5, 0xffffffff, 0x200, 0x5e4, 0x6, 0x6, 0x3, 0x1ff, 0x6, 0x9, 0x3, 0x0, 0x10000, 0x9, 0x3, 0x2, 0x89a, 0x100, 0x5, 0x2, 0x1, 0x3, 0xfffffffb, 0x7, 0x6, 0x20000007, 0x9, 0x4, 0x0, 0x3, 0x9, 0x0, 0x2, 0x80000000, 0x0, 0xfffffff8, 0x7, 0x0, 0x3, 0x6, 0x0, 0x5, 0x3, 0x9bb, 0xa, 0x0, 0x4, 0x7, 0x3ff, 0x0, 0xe5c, 0x1, 0x5, 0x9, 0x7, 0x80000000, 0x8, 0x1, 0xffff6139, 0x42c0, 0x76, 0xe339], [0xd54, 0x1, 0x9, 0xb, 0x4, 0x7f, 0x6, 0x2, 0x0, 0x7ff, 0x2, 0x10000, 0x8, 0x8001, 0x80, 0xfb, 0xe68f, 0xdaba, 0xfffffffe, 0x52b, 0x8010, 0x9, 0xff, 0x80000000, 0x8, 0x8, 0x2, 0x5, 0xfffffffb, 0x5, 0x7, 0x7, 0xd2c7, 0x8001, 0x94, 0x80000000, 0x8, 0x0, 0x5, 0x0, 0x8, 0x6, 0x3, 0x7, 0x0, 0x7, 0x961a, 0x1, 0x7, 0x49, 0x7, 0x255d, 0x1, 0x0, 0x9, 0x5, 0x10, 0x7, 0x0, 0xff, 0x66, 0x90000000, 0x7, 0x81]}, 0x45c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r10, @ANYRES64=r1, @ANYRES32=r6, @ANYRESOCT=r5, @ANYRES32, @ANYBLOB="7e0ac717d21fea237873ee01e1b10e472879d9b65b9a0fc0917b50832343c3912f6a4793f614f8064d630d5775dae7910002168b637acece936a944c6d7ce0042eb29f8f00e6311d0abec3d3e36d5f137da94526934a13aa3860bd59a0e6d70000001000"/109, @ANYRESOCT=r4], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r12 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r12, &(0x7f0000000040)=[{&(0x7f0000000380)="90", 0x1}], 0x1) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x5, 0x8, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) 1m56.544086337s ago: executing program 1 (id=309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000850}, 0x8040) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3d060000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYRESDEC=r3], 0x3c}}, 0x10) (async) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$VT_OPENQRY(r1, 0x4b4b, &(0x7f0000000000)) 1m55.774804569s ago: executing program 1 (id=311): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@generic="261750397fba"]}, 0x1c}}, 0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, r0, &(0x7f0000000700)) r1 = syz_open_dev$vim2m(&(0x7f00000021c0), 0x5, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd35, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) syz_usbip_server_init(0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x91, &(0x7f00000003c0)=""/145, 0x41100, 0x1, '\x00', r8, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xd, 0x1000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000300)=[r2, r2], &(0x7f0000000340)=[{0x5, 0x3, 0x400000b, 0xa}, {0x4, 0x3, 0xd, 0x5}, {0x2, 0x4, 0x5, 0x16}], 0x10, 0x8}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x9464}, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000002200)={0xa, 0x1, 0x2, "da01f88565b3208f40690b659453e31226958e24e7de558cfdf1b9085007bee3", 0x494e4f4b}) 1m54.083118372s ago: executing program 1 (id=315): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r0, 0x1, 0x70bd26, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setitimer(0x3, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000040)=@mmap={0xb4, 0x5, 0x4, 0x8, 0x318ce603, {0x0, 0xea60}, {0x6524eda797d4146b, 0xc, 0xb, 0x4, 0x7, 0xe9, "4cf18eba"}, 0x3, 0x1, {}, 0xb}) 1m53.245838055s ago: executing program 1 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x7d, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x40880) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) (async, rerun: 64) r9 = dup3(r8, r7, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) listen(r3, 0x3) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0xc0c67962f343063d) ioctl$EVIOCGBITKEY(r10, 0x80404521, &(0x7f00000000c0)=""/37) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010102ac3414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) 1m53.208261442s ago: executing program 1 (id=318): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0) listen(r0, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x4001, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) read$ptp(r10, 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) write$cgroup_subtree(r11, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f00000002c0)={'veth0_vlan\x00', @random='D\x00\x00\x00(E'}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x40007, 0x2, r4}) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000025280)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000025080)=@string={0x2}}, {0x3b, &(0x7f0000025180)=@string={0x3b, 0x3, "f42bfc09a39532dd4bf01b10cd6c26d828ec8c36475b9c30e3275d08ffc40c05362d0d56e59c373d11bae757145cb56f8ff1c1c555be3211f0"}}]}) 1m49.163188645s ago: executing program 1 (id=323): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x20, 0xc, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000500)={0x10, 0x0, {0x8, @usage=0x3, 0x0, 0xffffffffffff0000, 0x6, 0xffffffffffff8000, 0x7, 0x1aa, 0x20, @usage=0x74, 0x7, 0x1a5, [0x33, 0x9, 0x7, 0x9, 0x1, 0x6]}, {0x4, @struct={0x5, 0x4}, 0x0, 0x8, 0x1000, 0x5, 0x3, 0x7ff, 0x50, @struct={0x7, 0x2}, 0x3, 0x0, [0x7fffffffffffffff, 0x7f, 0xffffffffffff8000, 0x9, 0x4, 0x19b2]}, {0x8000000000000000, @struct={0xffff, 0x3}, 0x0, 0xf, 0x6, 0xc7e, 0x8, 0x3, 0xf6, @struct={0x7341, 0x40}, 0x6, 0x7, [0x4, 0x51b, 0x0, 0x8, 0x3ff, 0x1]}, {0x3, 0x21}}) (async) r5 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000001e00)={0x14, &(0x7f0000001d40)={0x40, 0xd, 0x81, {0x81, 0x23, "b210853ebeb9884c921dba24426a821b32ff78f20ba3490036f88cb6c87138214d68c6f7130daba5b5ca2a4debe76915a6599e997996b2bb3de09d7c6fbc6c0064070e36cabd6c74567d2014dfcb912501735400a1e432f27ff6bf7398a82432b6341e3554a4e118f9e4df4470e47bbedc220f5cc13c39b174003f858570eb"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc8135ed08237cb1b}}}, &(0x7f0000002000)={0x34, &(0x7f0000001e40)={0x40, 0x3, 0x6b, "e2446f6d3feb39fd6523f67b14dcab73e0f69ab8c529462828153acc84d66d6a16b49ee5211f0cf0854ae11a61bf78c66d57095b314fccba7a7927570c38e7c27ae31c4dcd42dfd6843f93a8b9e88857d1cece30117eb2713ae215e370bd4b470c493a4dcb8875309a30b3"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001f40)={0xc0, 0xa1, 0x4}, &(0x7f0000001f80)={0x40, 0xa0, 0x4, 0x7fff}, &(0x7f0000001fc0)={0xc0, 0xa2, 0x2f, "b8bec8ed28e12a769a2a1e0d99890edd3247611e5de37a16aab5fbc0e83e74a3034a706bd2ca52ba3385df7f50c3ae"}}) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, 0x0) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x2) (async) ioctl$RTC_EPOCH_SET(r7, 0x4008700e, 0x10001) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{r2}, r3, 0x0, @inherit={0x50, &(0x7f0000000340)={0x0, 0x1, 0x5, 0x9, {0xc, 0x739, 0x10001, 0x6, 0x7}, [0x24]}}, @devid=r4}) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000d40)={{r1}, r3, 0x14, @unused=[0x1ff, 0x8000000000000001, 0xd, 0x2], @subvolid=0x5}) 1m34.11327057s ago: executing program 33 (id=323): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x80000001}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x20, 0xc, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000500)={0x10, 0x0, {0x8, @usage=0x3, 0x0, 0xffffffffffff0000, 0x6, 0xffffffffffff8000, 0x7, 0x1aa, 0x20, @usage=0x74, 0x7, 0x1a5, [0x33, 0x9, 0x7, 0x9, 0x1, 0x6]}, {0x4, @struct={0x5, 0x4}, 0x0, 0x8, 0x1000, 0x5, 0x3, 0x7ff, 0x50, @struct={0x7, 0x2}, 0x3, 0x0, [0x7fffffffffffffff, 0x7f, 0xffffffffffff8000, 0x9, 0x4, 0x19b2]}, {0x8000000000000000, @struct={0xffff, 0x3}, 0x0, 0xf, 0x6, 0xc7e, 0x8, 0x3, 0xf6, @struct={0x7341, 0x40}, 0x6, 0x7, [0x4, 0x51b, 0x0, 0x8, 0x3ff, 0x1]}, {0x3, 0x21}}) (async) r5 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f0000001e00)={0x14, &(0x7f0000001d40)={0x40, 0xd, 0x81, {0x81, 0x23, "b210853ebeb9884c921dba24426a821b32ff78f20ba3490036f88cb6c87138214d68c6f7130daba5b5ca2a4debe76915a6599e997996b2bb3de09d7c6fbc6c0064070e36cabd6c74567d2014dfcb912501735400a1e432f27ff6bf7398a82432b6341e3554a4e118f9e4df4470e47bbedc220f5cc13c39b174003f858570eb"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc8135ed08237cb1b}}}, &(0x7f0000002000)={0x34, &(0x7f0000001e40)={0x40, 0x3, 0x6b, "e2446f6d3feb39fd6523f67b14dcab73e0f69ab8c529462828153acc84d66d6a16b49ee5211f0cf0854ae11a61bf78c66d57095b314fccba7a7927570c38e7c27ae31c4dcd42dfd6843f93a8b9e88857d1cece30117eb2713ae215e370bd4b470c493a4dcb8875309a30b3"}, &(0x7f0000001ec0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001f00)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000001f40)={0xc0, 0xa1, 0x4}, &(0x7f0000001f80)={0x40, 0xa0, 0x4, 0x7fff}, &(0x7f0000001fc0)={0xc0, 0xa2, 0x2f, "b8bec8ed28e12a769a2a1e0d99890edd3247611e5de37a16aab5fbc0e83e74a3034a706bd2ca52ba3385df7f50c3ae"}}) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x1) ioctl$TIOCSETD(r7, 0x5412, 0x0) (async) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000002c0)=0x2) (async) ioctl$RTC_EPOCH_SET(r7, 0x4008700e, 0x10001) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000900)={{r2}, r3, 0x0, @inherit={0x50, &(0x7f0000000340)={0x0, 0x1, 0x5, 0x9, {0xc, 0x739, 0x10001, 0x6, 0x7}, [0x24]}}, @devid=r4}) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000d40)={{r1}, r3, 0x14, @unused=[0x1ff, 0x8000000000000001, 0xd, 0x2], @subvolid=0x5}) 26.951704926s ago: executing program 4 (id=494): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31830000000000000000190000000c000180080003000600"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x480a0) 26.006617398s ago: executing program 4 (id=497): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc2000000000001090224000100000003090400000103000300092130b4000122060009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x5, 0x3a, '/dev/bus\x0fusb/0\xa7\x96\t\x887R\x8b\xf2\xd7\xec\x1d\xab\x8a0#/00\\x7\a)8+\xbe\xf5\xf1k\xa25\xa23$\x85v~\xd2\x80\xf4\xdeD\xe4\xa0\x19\x12\xcc$\xe7K\x94\x99\xc6\xe9\xb1Mq\xd8\xc6\xb3\x17\xfd%_', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)="5b476041811905f1f41dfd0a3966ab1f98d66881cf6538fe153c67a694bff609bde57ba19cb2a7", 0x27, r5) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getsockopt$inet6_int(r1, 0x29, 0x11, 0x0, &(0x7f0000000100)) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000001340)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x4, "5faef1bf"}, @global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0) syz_usb_disconnect(r0) 22.653646579s ago: executing program 2 (id=503): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) 22.641702631s ago: executing program 2 (id=504): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x14, 0x0, 0x0) 22.59506567s ago: executing program 2 (id=505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x0) listen(r5, 0x9ce2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r6, 0x4010e501, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = dup(0xffffffffffffffff) futimesat(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="04010000", @ANYRES16=r9, @ANYBLOB="0700000000000000001005000000180001801400020073797a5f74756e000000000000000000d8000380b4000380100001800c000200657468746f6f6c003c00018004000300080300000000000000000200657468746f6f6c0008000100480000000c0002006e6c3830323131000400030007000200405e0000280001800400030008000100ff0f000004000300040003000400030004000300080001000000000008000180040003002c0001800c00020026233a2a3a2e21001000020040215e292d2d2d2d5c2f4a000800010007000000040003000800018004000300080002000900000018000500"], 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r11, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 21.872792805s ago: executing program 4 (id=507): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100), 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs(r1, &(0x7f0000000140)='personality\x00') r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x80000000, 0x4) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = fanotify_init(0x20, 0x80000) fanotify_mark(r5, 0x1, 0x4000001a, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) io_uring_setup(0x1b7b, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x44, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'gretap\x00'}]}]}]}]}, 0x44}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19.783830971s ago: executing program 2 (id=508): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac000000000000000000000000000082ffffff00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) 19.62864633s ago: executing program 0 (id=509): ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x121000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@fallback=r4, 0x11, 0x0, 0x4, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="380100001a0001000000000000000000fc00000000000000000000000000000000000000000000000000000000000000004000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000fc0100000000000000000000000000000000000000000000000000000085e13984260600000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002bbd700000000000020001004000000000000000480001006d643500000000000000000000000000000000000000000000000000000000002300"/230], 0x138}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 19.34603139s ago: executing program 2 (id=510): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x2000009) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x80000, 0x1f, 0x9, 0x6, 0xffffffff, 0x7}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc4c03d12, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4000, 0x0, @dev={0xfe, 0x80, '\x00', 0x9b}, 0xd}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x15, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x8000, 0x1, 0x0, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18.824041733s ago: executing program 4 (id=511): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x5800) mount$fuse(0x0, 0x0, 0x0, 0x2000000, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff"], 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000c00e000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 18.760293889s ago: executing program 4 (id=512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x16d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x1c6) lseek(r5, 0x3, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e1d, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e2f92ad6ce8f2f0a6022a753acf1b3247", 0x251}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000100)="e579ca0bc6fa35e37811547113bf0c9401aec49d7aeb00678a4245a97ef4ed241799d1a7bb3d7e8b5ca233f194323a534c236c463ad7e5222005", 0x3a}, {&(0x7f00000002c0)="4c614cbf9fab19dc4b761d3423dc795d4ddf1c3ab8cd6ab26420a353d4b5bd46db31a6554db17fb796d25d75c0dec89ca8bb5c3a5f48dea6ae675646527c429c0be9fe3a3717e2b8f00ece3ae28ce4a55ec332a01e746a5d4c0f398260b7bb9010e40aa5751d8238820a8dbb3469f13f8bd5310b7b32f14bf5058df7ee184065741521ec2e97c5ad63867d372513edf4ce93c1b7c4bae225557616", 0x9b}, {&(0x7f0000000540)="504bdcbe7db7d104f7af67454784e640b1f4e91a9bbbd715023ee2a2380cd5fa232c9d9af67896eeda40496f030e313ec990a51359694377aa2501e6b906e71220d2b0c65be0f2dd9f885f68c30aae8dce52137b277a983b0cded80f8a4c1156", 0x60}, {&(0x7f0000000380)="0ea06c38840f16490bf8ae70993aee7dfbb263c1307043a0f9defc8d8d4e0e5ee095cc35b1f8612968a7c7ee6bafc900d36e4997ef54e630876418bc1625d1358f23d9e6553d009b6604e994499b3fa473f9cc308be93b5aa3c54415d3f7cc8be0f7f970b4837dd24369136fecfed2072ecb460274fef4c0168d663bbb312e743943d71e587dcb0e", 0xfe39}, {&(0x7f0000000440)="e4e7e37ba12773fba6897b866870f043226b5d68c0c6c645f6d304bb64878fe13707f814df7dfa29abcb01f3ae751435552b5cfd9222d6b704505d6319d9cc27e3d1941fc5415d61035868a378bf40f3504b9e9334ac32491132bad44dd426d04329072dace0", 0x66}, {0x0, 0xff56}, {&(0x7f00000004c0)="147a237be219338ecee9aefe78371bb4e2c7dd1eabc35ffeb377d0b5cf8e874d44d2", 0x22}, {&(0x7f0000000500)="7194baefb8e12c2dccf66a", 0xb}], 0x8}}], 0x2, 0x4000001) 18.629415918s ago: executing program 0 (id=513): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040), 0x0) 18.493773373s ago: executing program 4 (id=514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f00000001c0)={&(0x7f0000000080)="52fd23ee4489a3572d3dea25d6f2529e80ed144dd3c27a63b0c55aec7b79d24556f2e43590f117196fc89ccdaf332f539f1900feb1c0f85fdddcadb1703d4fcae0627963c2d59ddc1f771d809fb8e55e7deb7b1e090e56e851332da1adbcb112d859e7d8f0cfe9cbfd3a920ef2d3829b8641ee", 0x73, &(0x7f0000000340)=""/87, 0x57}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x10000}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) 18.493185498s ago: executing program 0 (id=515): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4004000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93", 0x17}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0xe21, 0x8}}}}}, 0x0) 17.688809496s ago: executing program 2 (id=516): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@generic="261750397fba"]}, 0x1c}}, 0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, r0, &(0x7f0000000700)) r1 = syz_open_dev$vim2m(&(0x7f00000021c0), 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd35, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) syz_usbip_server_init(0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x9464}, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000002200)={0xa, 0x1, 0x2, "da01f88565b3208f40690b659453e31226958e24e7de558cfdf1b9085007bee3", 0x494e4f4b}) 16.680558879s ago: executing program 0 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104280100"/20, @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x240008d4}, 0x4054) 16.264564459s ago: executing program 0 (id=518): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000000), 0x3fd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x54, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x8000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @remote, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@polexpire={0x2c0, 0x1b, 0x1, 0x70bd26, 0x25dfdbfc, {{{@in6=@local, @in=@multicast2, 0x4e22, 0x7ff, 0x4e20, 0x2, 0x2, 0xa0, 0x30}, {0x400, 0x2, 0x401, 0x0, 0x7, 0x4a2f, 0x2, 0x8001}, {0x2, 0x100000000, 0x2, 0x8}, 0x4, 0x0, 0x2, 0x1, 0x0, 0x1}, 0x5}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @policy_type={0xa}, @sa={0xe4, 0x6, {{@in=@loopback, @in=@remote, 0x4e23, 0x6, 0x4e22, 0x4, 0xa, 0xa0, 0x20, 0x3c}, {@in=@empty, 0x4d5, 0x33}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0xfff, 0xfff, 0x1000000000000, 0x4, 0x5}, {0x25a2e1b1, 0x76, 0x8855, 0x8}, {0x2, 0x0, 0x4b9c}, 0x70bd26, 0x3505, 0x2, 0x2, 0xd4, 0x80}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd2a, 0x70bd2d, 0x70bd28, 0x7, [0x7fff, 0x5]}}, @sa={0xe4, 0x6, {{@in6=@empty, @in6=@empty, 0x4e22, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x5e}, {@in=@broadcast, 0x4d6, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x3, 0x9, 0x5, 0x9, 0x8, 0xba, 0x8}, {0x6, 0x6, 0xcbf5, 0x9}, {0x2bc, 0x4, 0x401}, 0x70bd2b, 0x0, 0x2, 0x0, 0xff, 0x84}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4040841}, 0x4010) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getpid() write$P9_RGETLOCK(r6, 0x0, 0x2d) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf2481808000000000000000000014000100fc020000000000000000000000000000140002"], 0x44}}, 0x884) 15.931018342s ago: executing program 0 (id=519): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1ab, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r3, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010129bd7000fcdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00008000000600110002000000a299dd8562b195dba6bcea4cec1582e70d90eff8df66769b9f4a4168c48a1d22452a08bd295408cc3b"], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x30}]}, &(0x7f0000000140)='syzkaller\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) lseek(r4, 0xe, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000004680)=0x80, 0x4) socket$inet6(0xa, 0x1, 0xff) set_mempolicy(0x3, &(0x7f0000000000)=0xa, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) 3.508579986s ago: executing program 34 (id=514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f00000001c0)={&(0x7f0000000080)="52fd23ee4489a3572d3dea25d6f2529e80ed144dd3c27a63b0c55aec7b79d24556f2e43590f117196fc89ccdaf332f539f1900feb1c0f85fdddcadb1703d4fcae0627963c2d59ddc1f771d809fb8e55e7deb7b1e090e56e851332da1adbcb112d859e7d8f0cfe9cbfd3a920ef2d3829b8641ee", 0x73, &(0x7f0000000340)=""/87, 0x57}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x10000}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) 2.508596957s ago: executing program 35 (id=516): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfb, {0xa}, [@generic="261750397fba"]}, 0x1c}}, 0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, r0, &(0x7f0000000700)) r1 = syz_open_dev$vim2m(&(0x7f00000021c0), 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd35, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) syz_usbip_server_init(0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00'}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x8000000000000001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x9464}, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000002200)={0xa, 0x1, 0x2, "da01f88565b3208f40690b659453e31226958e24e7de558cfdf1b9085007bee3", 0x494e4f4b}) 0s ago: executing program 36 (id=519): socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0x1ab, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={r3, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010129bd7000fcdbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00008000000600110002000000a299dd8562b195dba6bcea4cec1582e70d90eff8df66769b9f4a4168c48a1d22452a08bd295408cc3b"], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x30}]}, &(0x7f0000000140)='syzkaller\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) lseek(r4, 0xe, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x24, &(0x7f0000004680)=0x80, 0x4) socket$inet6(0xa, 0x1, 0xff) set_mempolicy(0x3, &(0x7f0000000000)=0xa, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) kernel console output (not intermixed with test programs): 27][ T30] audit: type=1400 audit(1766022118.530:275): avc: denied { write } for pid=6314 comm="syz.1.90" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 119.246050][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 119.255394][ T6315] nbd: must specify at least one socket [ 119.261196][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.270204][ T6316] netlink: 84 bytes leftover after parsing attributes in process `syz.1.90'. [ 119.283082][ T9] usb 1-1: config 0 descriptor?? [ 119.296267][ T6316] nbd: must specify at least one socket [ 119.311513][ T48] usb 3-1: Product: syz [ 119.316405][ T48] usb 3-1: Manufacturer: syz [ 119.320996][ T48] usb 3-1: SerialNumber: syz [ 119.396031][ T30] audit: type=1400 audit(1766022118.720:276): avc: denied { mount } for pid=6300 comm="syz.3.87" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 119.502758][ T6319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.514005][ T6319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.535587][ T30] audit: type=1400 audit(1766022118.860:277): avc: denied { create } for pid=6300 comm="syz.3.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 119.792667][ T48] usb 2-1: USB disconnect, device number 13 [ 119.941317][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.095387][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 120.107159][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 120.120178][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.132037][ T10] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 120.141415][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.151761][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.171197][ T10] usb 5-1: Product: syz [ 120.184767][ T10] usb 5-1: Manufacturer: syz [ 120.198633][ T5885] usb 3-1: USB disconnect, device number 7 [ 120.207141][ T10] usb 5-1: SerialNumber: syz [ 120.232682][ T10] usb 5-1: config 0 descriptor?? [ 120.244167][ T10] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 120.277231][ T30] audit: type=1400 audit(1766022119.600:278): avc: denied { accept } for pid=6329 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.295162][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 122.356689][ T48] usb 4-1: USB disconnect, device number 5 [ 122.372308][ T30] audit: type=1400 audit(1766022121.690:279): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 122.400188][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 122.420114][ T9] usb 1-1: USB disconnect, device number 5 [ 122.598152][ T6341] netlink: 'syz.3.95': attribute type 21 has an invalid length. [ 122.617853][ T6341] netlink: 156 bytes leftover after parsing attributes in process `syz.3.95'. [ 122.657934][ T6341] netlink: 'syz.3.95': attribute type 25 has an invalid length. [ 122.786346][ T6341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'. [ 122.897341][ T30] audit: type=1400 audit(1766022122.220:280): avc: denied { getopt } for pid=6342 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.238498][ T30] audit: type=1400 audit(1766022122.560:281): avc: denied { bind } for pid=6347 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.239068][ T6348] Bluetooth: MGMT ver 1.23 [ 123.359297][ T792] usb 5-1: USB disconnect, device number 5 [ 123.386322][ T30] audit: type=1400 audit(1766022122.560:282): avc: denied { write } for pid=6347 comm="syz.2.98" path="socket:[9033]" dev="sockfs" ino=9033 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.570446][ T30] audit: type=1400 audit(1766022122.890:283): avc: denied { bind } for pid=6347 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.784500][ T30] audit: type=1400 audit(1766022123.100:284): avc: denied { read } for pid=6357 comm="syz.3.103" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.975670][ T6367] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 124.072025][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 124.359577][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 125.000967][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 125.000983][ T30] audit: type=1400 audit(1766022124.320:287): avc: denied { read } for pid=6371 comm="syz.3.106" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.033059][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.059624][ T10] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 125.072790][ T30] audit: type=1400 audit(1766022124.320:288): avc: denied { open } for pid=6371 comm="syz.3.106" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.098084][ T30] audit: type=1400 audit(1766022124.320:289): avc: denied { ioctl } for pid=6371 comm="syz.3.106" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 125.102979][ T10] usb 1-1: config 1 interface 1 has no altsetting 0 [ 125.143090][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.153062][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.170090][ T10] usb 1-1: Product: syz [ 125.179625][ T10] usb 1-1: Manufacturer: syz [ 125.189647][ T10] usb 1-1: SerialNumber: syz [ 125.212897][ T30] audit: type=1400 audit(1766022124.490:290): avc: denied { create } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.240149][ T10] cdc_ncm 1-1:1.0: skipping garbage [ 125.272576][ T10] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 125.287480][ T30] audit: type=1400 audit(1766022124.490:291): avc: denied { setopt } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.309615][ T10] cdc_ncm 1-1:1.0: bind() failure [ 125.338086][ T30] audit: type=1400 audit(1766022124.490:292): avc: denied { write } for pid=6379 comm="syz.4.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.359699][ T30] audit: type=1400 audit(1766022124.490:293): avc: denied { getopt } for pid=6379 comm="syz.4.100" lport=39129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.381424][ T48] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 125.392401][ T30] audit: type=1400 audit(1766022124.500:294): avc: denied { ioctl } for pid=6379 comm="syz.4.100" path="socket:[10691]" dev="sockfs" ino=10691 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.542896][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.553833][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.563989][ T48] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 125.581330][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.589404][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 125.599605][ T48] usb 2-1: config 0 descriptor?? [ 125.666058][ T5926] usb 1-1: USB disconnect, device number 6 [ 125.751295][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 125.757855][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.769047][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.778917][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 125.788149][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.798115][ T5878] usb 4-1: config 0 descriptor?? [ 125.871319][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.001323][ T24] usb 5-1: device descriptor read/64, error -71 [ 126.018724][ T48] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 126.028903][ T48] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 126.408512][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.425136][ T6390] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 126.446276][ T6390] tipc: Started in network mode [ 126.451336][ T6390] tipc: Node identity ac1414aa, cluster identity 4711 [ 126.459229][ T6390] tipc: Enabled bearer , priority 10 [ 126.504926][ T6392] lo speed is unknown, defaulting to 1000 [ 126.937500][ T5878] logitech 0003:046D:C29C.0004: hidraw1: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 126.949234][ T6390] warning: `syz.0.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.968970][ T30] audit: type=1400 audit(1766022126.290:295): avc: denied { setopt } for pid=6389 comm="syz.0.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.989858][ T24] usb 5-1: device descriptor read/64, error -71 [ 126.990054][ T5878] logitech 0003:046D:C29C.0004: no inputs found [ 127.019122][ T5878] usb 4-1: USB disconnect, device number 6 [ 127.112644][ T24] usb usb5-port1: attempt power cycle [ 127.140653][ T6398] fido_id[6398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 127.475704][ T6404] kvm: user requested TSC rate below hardware speed [ 127.491423][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 127.541567][ T24] usb 5-1: device descriptor read/8, error -71 [ 127.561602][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.585625][ T5878] tipc: Node number set to 2886997162 [ 127.731703][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 127.743365][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.760296][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 127.770779][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.790425][ T10] usb 1-1: Product: syz [ 127.794862][ T10] usb 1-1: Manufacturer: syz [ 127.803669][ T10] usb 1-1: SerialNumber: syz [ 127.914932][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.917331][ T10] usb 1-1: config 0 descriptor?? [ 127.943236][ T24] usb 5-1: device descriptor read/8, error -71 [ 128.154503][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.163519][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.215160][ T48] cp2112 0003:10C4:EA90.0003: error requesting version [ 128.222917][ T24] usb usb5-port1: unable to enumerate USB device [ 128.243322][ T48] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71 [ 128.287403][ T48] usb 2-1: USB disconnect, device number 14 [ 129.118341][ T30] audit: type=1400 audit(1766022128.430:296): avc: denied { read } for pid=6408 comm="syz.1.114" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 129.149626][ T6421] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 129.160695][ T6421] block device autoloading is deprecated and will be removed. [ 129.252497][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.382613][ T6409] md: could not open device unknown-block(0,0). [ 129.389287][ T6409] md: md_import_device returned -6 [ 129.470499][ T9] usb 3-1: device descriptor read/64, error -71 [ 129.722329][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 129.741688][ T792] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.771306][ T6242] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 129.851407][ T9] usb 3-1: device descriptor read/64, error -71 [ 129.891406][ T792] usb 5-1: Using ep0 maxpacket: 8 [ 129.909772][ T792] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 129.919933][ T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.925899][ T6242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.929164][ T792] usb 5-1: Product: syz [ 129.947598][ T792] usb 5-1: Manufacturer: syz [ 129.952299][ T792] usb 5-1: SerialNumber: syz [ 129.957799][ T6242] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.977069][ T9] usb usb3-port1: attempt power cycle [ 129.979181][ T6242] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 129.984711][ T792] usb 5-1: config 0 descriptor?? [ 130.006356][ T792] gspca_main: se401-2.14.0 probing 047d:5003 [ 130.013058][ T6242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.035401][ T6242] usb 2-1: config 0 descriptor?? [ 130.093005][ T10] usb 1-1: probing VID:PID(0424:012C) [ 130.102309][ T10] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 130.110339][ T10] vub300 1-1:0.0: probe with driver vub300 failed with error -22 [ 130.131128][ T10] usb 1-1: USB disconnect, device number 7 [ 130.182315][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 130.182327][ T30] audit: type=1400 audit(1766022129.490:299): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 130.331496][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 130.354128][ T9] usb 3-1: device descriptor read/8, error -71 [ 130.394369][ T792] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 130.411625][ T792] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 130.441588][ T792] usb 5-1: USB disconnect, device number 10 [ 130.492738][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.527808][ T30] audit: type=1400 audit(1766022129.850:300): avc: denied { create } for pid=6438 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 130.627563][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.657959][ T6440] netlink: 48 bytes leftover after parsing attributes in process `syz.0.122'. [ 130.751673][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.775660][ T30] audit: type=1400 audit(1766022129.920:301): avc: denied { bind } for pid=6438 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 131.648113][ T30] audit: type=1400 audit(1766022130.080:303): avc: denied { write } for pid=6443 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.650215][ T5827] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 131.668961][ T9] usb 3-1: device descriptor read/8, error -71 [ 131.678569][ T5827] Bluetooth: hci0: Injecting HCI hardware error event [ 131.694524][ T5823] Bluetooth: hci0: hardware error 0x00 [ 131.704942][ T6242] usbhid 2-1:0.0: can't add hid device: -71 [ 131.710942][ T6242] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 131.760072][ T30] audit: type=1400 audit(1766022130.070:302): avc: denied { getopt } for pid=6443 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.789666][ T6242] usb 2-1: USB disconnect, device number 15 [ 131.856092][ T9] usb usb3-port1: unable to enumerate USB device [ 131.901519][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.909553][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.039154][ T6456] bridge0: entered allmulticast mode [ 132.039423][ T6459] netlink: 'syz.0.122': attribute type 2 has an invalid length. [ 132.132602][ T30] audit: type=1400 audit(1766022131.430:304): avc: denied { getopt } for pid=6460 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.293848][ T30] audit: type=1400 audit(1766022131.430:305): avc: denied { mounton } for pid=6460 comm="syz.2.125" path="/29/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 132.452369][ T30] audit: type=1400 audit(1766022131.450:306): avc: denied { mounton } for pid=6460 comm="syz.2.125" path="/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 132.521366][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 132.549192][ T30] audit: type=1400 audit(1766022131.690:307): avc: denied { write } for pid=6457 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.636340][ T30] audit: type=1400 audit(1766022131.690:308): avc: denied { connect } for pid=6457 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.713603][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.742447][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.782249][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 132.839062][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 238, using maximum allowed: 30 [ 132.863306][ T10] usb 3-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 132.920083][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.968910][ T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 132.983546][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.028280][ T10] usb 3-1: Product: syz [ 133.032494][ T10] usb 3-1: Manufacturer: syz [ 133.037446][ T10] usb 3-1: SerialNumber: syz [ 133.052378][ T10] usb 3-1: config 0 descriptor?? [ 133.100356][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 133.486179][ T10] gspca_se401: ExtraFeatures: 127 [ 133.491290][ T10] gspca_se401: Too many frame sizes [ 133.591411][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.793969][ T48] usb 3-1: USB disconnect, device number 12 [ 133.821385][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 133.821676][ T5823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 134.361598][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.370533][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 134.393850][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 134.403862][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.412431][ T9] usb 5-1: Product: syz [ 134.417721][ T9] usb 5-1: Manufacturer: syz [ 134.422421][ T9] usb 5-1: SerialNumber: syz [ 134.437939][ T9] usb 5-1: config 0 descriptor?? [ 134.446251][ T6469] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 134.486062][ T9] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 134.532967][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.554318][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.594361][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.633094][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.660709][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 134.666934][ C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 134.674162][ T9] usb 5-1: USB disconnect, device number 11 [ 134.702057][ T6477] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 134.719623][ T9] mcba_usb 5-1:0.0 can0: device disconnected [ 134.729380][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.940737][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.982696][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.001596][ T792] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 135.033532][ T5834] usb 1-1: USB disconnect, device number 8 [ 135.061026][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 135.173207][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 135.197327][ T792] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 135.219916][ T792] usb 2-1: config 0 has no interface number 0 [ 135.226124][ T792] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0612, bcdDevice=ce.e9 [ 135.250385][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.380810][ T6499] netlink: 'syz.4.135': attribute type 21 has an invalid length. [ 135.396728][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 135.396746][ T30] audit: type=1400 audit(1766022134.720:320): avc: denied { add_name } for pid=6483 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.475806][ T792] usb 2-1: config 0 descriptor?? [ 135.492753][ T30] audit: type=1400 audit(1766022134.780:321): avc: denied { create } for pid=6483 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.515484][ T30] audit: type=1400 audit(1766022134.780:322): avc: denied { write } for pid=6483 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2693 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.545843][ T30] audit: type=1400 audit(1766022134.780:323): avc: denied { append } for pid=6483 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2693 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 135.585006][ T6504] netlink: 72 bytes leftover after parsing attributes in process `syz.3.134'. [ 135.975014][ T6482] netlink: 'syz.1.132': attribute type 39 has an invalid length. [ 136.005714][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 136.027308][ T30] audit: type=1400 audit(1766022135.350:324): avc: denied { remove_name } for pid=6509 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2693 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 136.051624][ T30] audit: type=1400 audit(1766022135.350:325): avc: denied { unlink } for pid=6509 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2693 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 136.211276][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 136.218351][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 136.234296][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.243693][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.254680][ T24] usb 3-1: Product: syz [ 136.258851][ T24] usb 3-1: Manufacturer: syz [ 136.267485][ T24] usb 3-1: SerialNumber: syz [ 136.276692][ T24] usb 3-1: config 0 descriptor?? [ 136.298729][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.308657][ T24] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 136.319599][ T48] usb 2-1: USB disconnect, device number 16 [ 136.347702][ T6516] sctp: [Deprecated]: syz.4.138 (pid 6516) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.347702][ T6516] Use struct sctp_sack_info instead [ 136.859406][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 136.946292][ T24] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 136.955622][ T24] em28xx 3-1:0.0: board has no eeprom [ 137.021540][ T24] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 137.029651][ T24] em28xx 3-1:0.0: dvb set to bulk mode. [ 137.040830][ T48] em28xx 3-1:0.0: Binding DVB extension [ 137.063645][ T24] usb 3-1: USB disconnect, device number 13 [ 137.096935][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 137.146301][ T48] em28xx 3-1:0.0: Registering input extension [ 137.152880][ T24] em28xx 3-1:0.0: Closing input extension [ 137.171306][ T792] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 137.303244][ T24] em28xx 3-1:0.0: Freeing device [ 137.579587][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.660299][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.672304][ T30] audit: type=1400 audit(1766022136.980:326): avc: denied { lock } for pid=6542 comm="syz.3.143" path="socket:[10972]" dev="sockfs" ino=10972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 138.009548][ T792] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 138.030636][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.159237][ T792] usb 1-1: config 0 descriptor?? [ 138.183184][ T30] audit: type=1400 audit(1766022137.300:327): avc: denied { connect } for pid=6542 comm="syz.3.143" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.793061][ T30] audit: type=1400 audit(1766022137.590:328): avc: denied { write } for pid=6539 comm="syz.4.140" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.837816][ T30] audit: type=1400 audit(1766022137.640:329): avc: denied { mount } for pid=6542 comm="syz.3.143" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 139.194200][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.208619][ T6561] netlink: 72 bytes leftover after parsing attributes in process `syz.3.145'. [ 139.258162][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.434894][ T6572] loop3: detected capacity change from 0 to 7 [ 140.457252][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 140.457263][ T30] audit: type=1400 audit(1766022139.780:335): avc: denied { write } for pid=6567 comm="syz.2.149" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 140.488536][ T6572] Dev loop3: unable to read RDB block 7 [ 140.498955][ T6572] loop3: AHDI p3 p4 [ 140.503306][ T6572] loop3: partition table partially beyond EOD, truncated [ 140.524943][ T6572] loop3: p3 start 1702000233 is beyond EOD, truncated [ 140.613392][ T792] usbhid 1-1:0.0: can't add hid device: -71 [ 140.620266][ T6574] kernel profiling enabled (shift: 7) [ 140.637000][ T792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 140.661421][ T5885] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 140.681039][ T792] usb 1-1: USB disconnect, device number 9 [ 140.828059][ T5885] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.844943][ T5885] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 140.860729][ T5885] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.870749][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.192355][ T6571] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 141.229092][ T5885] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.424265][ T24] usb 5-1: USB disconnect, device number 12 [ 141.458362][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 141.687914][ T6595] netlink: 'syz.2.158': attribute type 5 has an invalid length. [ 141.946466][ T6604] netlink: 72 bytes leftover after parsing attributes in process `syz.0.159'. [ 142.145411][ T30] audit: type=1800 audit(1766022141.450:336): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.160" name="bus" dev="overlay" ino=210 res=0 errno=0 [ 142.286963][ T6607] lo speed is unknown, defaulting to 1000 [ 142.471610][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 142.632893][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 142.643604][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 142.666329][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 142.688160][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 142.697635][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.709233][ T24] usb 3-1: Product: syz [ 142.713712][ T24] usb 3-1: Manufacturer: syz [ 142.720075][ T24] usb 3-1: SerialNumber: syz [ 142.768997][ T24] usb 3-1: config 0 descriptor?? [ 142.779233][ T6608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.795741][ T6608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 142.816630][ T24] usb 3-1: ucan: probing device on interface #0 [ 143.055728][ T6612] loop3: detected capacity change from 0 to 7 [ 143.078337][ T5980] Dev loop3: unable to read RDB block 7 [ 143.085853][ T5980] loop3: AHDI p3 p4 [ 143.090269][ T5980] loop3: partition table partially beyond EOD, truncated [ 143.108589][ T5980] loop3: p3 start 1702000233 is beyond EOD, truncated [ 143.143011][ T6612] Dev loop3: unable to read RDB block 7 [ 143.160637][ T6612] loop3: AHDI p3 p4 [ 143.165568][ T6612] loop3: partition table partially beyond EOD, truncated [ 143.180143][ T6612] loop3: p3 start 1702000233 is beyond EOD, truncated [ 143.861854][ T6242] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 144.066631][ T24] usb 3-1: ucan: failed to retrieve device info [ 144.091837][ T6242] usb 1-1: Using ep0 maxpacket: 8 [ 144.092830][ T6623] capability: warning: `syz.1.165' uses 32-bit capabilities (legacy support in use) [ 144.110307][ T24] usb 3-1: ucan: probe failed; try to update the device firmware [ 144.138751][ T6242] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 144.186792][ T6624] Cannot find set identified by id 0 to match [ 144.200673][ T6242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.484098][ T6242] pvrusb2: Hardware description: Terratec Grabster AV400 [ 144.508360][ T6242] pvrusb2: ********** [ 144.513476][ T6242] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 144.535719][ T6242] pvrusb2: Important functionality might not be entirely working. [ 144.547380][ T6242] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 144.559536][ T6242] pvrusb2: ********** [ 144.560785][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.168'. [ 144.685398][ T2339] pvrusb2: Invalid write control endpoint [ 144.735940][ T2339] pvrusb2: Invalid write control endpoint [ 144.774792][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 145.121569][ T48] usb 3-1: USB disconnect, device number 14 [ 145.180772][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 145.182512][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.216613][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 145.234680][ T30] audit: type=1400 audit(1766022144.560:337): avc: denied { create } for pid=6640 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.254472][ T2339] pvrusb2: Device being rendered inoperable [ 145.260764][ T6644] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 145.306886][ T6644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.363827][ T30] audit: type=1400 audit(1766022144.560:338): avc: denied { connect } for pid=6640 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.386099][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.402219][ T24] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 145.424858][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 145.439763][ T6614] pvrusb2: Attempted to execute control transfer when device not ok [ 145.449177][ T24] usb 4-1: can't read configurations, error -61 [ 145.481644][ T6639] pvrusb2: Attempted to execute control transfer when device not ok [ 145.516168][ T6647] overlay: filesystem on ./bus not supported as upperdir [ 145.531436][ T2339] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 145.543504][ T5885] usb 1-1: USB disconnect, device number 10 [ 145.580855][ T2339] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 145.622133][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.712247][ T2339] pvrusb2: Attached sub-driver cx25840 [ 145.717981][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 145.761621][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 145.866045][ T6655] netlink: 72 bytes leftover after parsing attributes in process `syz.1.173'. [ 145.946563][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 145.956367][ T24] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 145.967167][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 145.976422][ T24] usb 4-1: can't read configurations, error -61 [ 145.984880][ T24] usb usb4-port1: attempt power cycle [ 146.021307][ T5928] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 146.130416][ T6644] bond1 (unregistering): Released all slaves [ 146.213490][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.224995][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.236472][ T5928] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 146.245798][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.259425][ T5928] usb 3-1: config 0 descriptor?? [ 146.331351][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.373599][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.381373][ T24] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 146.422247][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 146.429846][ T24] usb 4-1: can't read configurations, error -61 [ 146.581756][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 146.603502][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 146.616827][ T24] usb 4-1: too many configurations: 42, using maximum allowed: 8 [ 146.626842][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 146.634607][ T24] usb 4-1: can't read configurations, error -61 [ 146.641373][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 146.665058][ T24] usb usb4-port1: unable to enumerate USB device [ 146.677458][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.688434][ T6663] IPVS: set_ctl: invalid protocol: 5887 172.30.1.2:20003 [ 146.697968][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.573047][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 147.579011][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 147.622656][ T5928] usb 3-1: USB disconnect, device number 15 [ 147.693293][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.817118][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.832649][ T9] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 147.844507][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.859817][ T9] usb 1-1: config 0 descriptor?? [ 147.992163][ T6675] fuse: Bad value for 'fd' [ 148.538486][ T6659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.677180][ T6659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.454152][ T30] audit: type=1400 audit(1766022149.780:339): avc: denied { write } for pid=6688 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.510167][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 150.534800][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.610473][ T9] usb 1-1: USB disconnect, device number 11 [ 151.110739][ T6694] netlink: 72 bytes leftover after parsing attributes in process `syz.4.187'. [ 151.432623][ T6709] Cannot find set identified by id 0 to match [ 152.500416][ T6718] hsr0: entered promiscuous mode [ 152.531146][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 152.619895][ T6705] hsr_slave_0: left promiscuous mode [ 152.690530][ T5926] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 152.721322][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 152.854554][ T6705] hsr_slave_1: left promiscuous mode [ 152.893537][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.903208][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.928315][ T9] usb 2-1: config 0 descriptor?? [ 152.949031][ T9] cp210x 2-1:0.0: cp210x converter detected [ 152.976912][ T5926] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 153.000466][ T5926] usb 3-1: config 0 has no interface number 0 [ 153.148929][ T5926] usb 3-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=98.f4 [ 153.167643][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.175952][ T6242] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.199293][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 153.200369][ T5926] usb 3-1: Product: syz [ 153.211293][ T9] cp210x 2-1:0.0: querying part number failed [ 153.259834][ T5926] usb 3-1: Manufacturer: syz [ 153.262829][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 153.281334][ T5926] usb 3-1: SerialNumber: syz [ 153.302369][ T5926] usb 3-1: config 0 descriptor?? [ 153.343505][ T5926] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 153.353700][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.387256][ T5926] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 153.409266][ T6242] usb 4-1: Using ep0 maxpacket: 8 [ 153.421441][ T5926] usb 3-1: media controller created [ 153.428431][ T6242] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 153.457782][ T6242] usb 4-1: config 0 has no interface number 0 [ 153.489865][ T6242] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 153.504969][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.529085][ T6242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.566475][ T5834] usb 2-1: USB disconnect, device number 17 [ 153.639709][ T6242] usb 4-1: Product: syz [ 153.645529][ T5834] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.701833][ T6242] usb 4-1: Manufacturer: syz [ 153.708962][ T6242] usb 4-1: SerialNumber: syz [ 153.717124][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 153.734056][ T5834] cp210x 2-1:0.0: device disconnected [ 153.745853][ T5926] dvb-usb: bulk message failed: -22 (6/0) [ 153.752956][ T6242] usb 4-1: config 0 descriptor?? [ 153.766326][ T5926] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 153.792191][ T30] audit: type=1326 audit(1766022153.110:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6726 comm="syz.4.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x0 [ 153.971296][ T5926] rc_core: IR keymap rc-avermedia-m135a not found [ 153.977765][ T5926] Registered IR keymap rc-empty [ 153.986319][ T6721] cgroup: Name too long [ 153.995739][ T5926] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 154.101505][ T5834] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 154.227164][ T5926] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 154.443809][ T5926] dvb-usb: schedule remote query interval to 150 msecs. [ 154.474485][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.489634][ T5926] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 154.510074][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.528922][ T5834] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 154.560187][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.579312][ T5834] usb 2-1: config 0 descriptor?? [ 154.637340][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 154.741347][ T5926] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.801280][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 154.809235][ T5892] usb 5-1: config 159 interface 0 has no altsetting 0 [ 154.818961][ T5892] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=80.b9 [ 154.828302][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.836566][ T5892] usb 5-1: Product: syz [ 154.840818][ T5892] usb 5-1: Manufacturer: syz [ 154.846466][ T5892] usb 5-1: SerialNumber: syz [ 154.892932][ T5926] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.904334][ T5926] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.915613][ T5926] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.924885][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.948327][ T6242] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 154.989571][ T6242] usb 4-1: USB disconnect, device number 11 [ 155.011183][ T6737] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 155.022178][ T6729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.036026][ T6729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.062275][ T5926] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.161744][ T5834] usbhid 2-1:0.0: can't add hid device: -71 [ 156.202476][ T5834] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 156.259239][ T5834] usb 2-1: USB disconnect, device number 18 [ 156.289753][ T5926] usb 1-1: USB disconnect, device number 12 [ 156.372652][ T5892] snd-usb-audio 5-1:159.0: probe with driver snd-usb-audio failed with error -22 [ 156.385366][ T5892] usb 5-1: USB disconnect, device number 13 [ 156.426369][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:159.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 156.492148][ T6083] dvb-usb: error -19 while querying for an remote control event. [ 156.507461][ T6083] usb 3-1: USB disconnect, device number 16 [ 156.631286][ T6746] netlink: 'syz.3.198': attribute type 15 has an invalid length. [ 156.790595][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 156.968018][ T6083] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 156.981302][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 156.994255][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.005962][ T5892] usb 5-1: config 14 has too many interfaces: 36, using maximum allowed: 32 [ 157.018516][ T6751] policy can only be matched on NF_INET_PRE_ROUTING [ 157.018529][ T6751] unable to load match [ 157.030945][ T5892] usb 5-1: config 14 has an invalid interface number: 156 but max is 35 [ 157.030974][ T6751] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 157.045870][ T6751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 157.053615][ T6751] vhci_hcd vhci_hcd.0: Device attached [ 157.067204][ T5892] usb 5-1: config 14 has 1 interface, different from the descriptor's value: 36 [ 157.086528][ T5892] usb 5-1: config 14 has no interface number 0 [ 157.103247][ T5892] usb 5-1: config 14 interface 156 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 157.117273][ T5892] usb 5-1: config 14 interface 156 has no altsetting 0 [ 157.127249][ T5892] usb 5-1: language id specifier not provided by device, defaulting to English [ 157.146869][ T5892] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 157.157181][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 157.223061][ T6756] Cannot find set identified by id 0 to match [ 157.230369][ T5892] usb 5-1: Product: syz [ 157.234589][ T5892] usb 5-1: SerialNumber: syz [ 157.298767][ T5892] usb 5-1: can't set config #14, error -71 [ 157.323517][ T6242] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 157.340540][ T5892] usb 5-1: USB disconnect, device number 14 [ 157.921700][ T6752] vhci_hcd: connection reset by peer [ 157.931309][ T13] vhci_hcd vhci_hcd.2: stop threads [ 157.956207][ T13] vhci_hcd vhci_hcd.2: release socket [ 157.975372][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 158.371179][ T6768] fuse: Bad value for 'fd' [ 159.816041][ T30] audit: type=1400 audit(1766022159.140:341): avc: denied { write } for pid=6771 comm="syz.3.207" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 159.846955][ T30] audit: type=1400 audit(1766022159.170:342): avc: denied { create } for pid=6773 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.853924][ T6772] input: syz0 as /devices/virtual/input/input7 [ 159.881252][ T30] audit: type=1400 audit(1766022159.170:343): avc: denied { connect } for pid=6773 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.110846][ T30] audit: type=1400 audit(1766022159.170:344): avc: denied { read } for pid=6773 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.183268][ T30] audit: type=1400 audit(1766022159.200:345): avc: denied { read } for pid=5171 comm="acpid" name="event4" dev="devtmpfs" ino=2974 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.208556][ T30] audit: type=1400 audit(1766022159.200:346): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2974 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.221136][ T6793] delete_channel: no stack [ 160.232932][ T5892] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 160.256883][ T30] audit: type=1400 audit(1766022159.200:347): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2974 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 160.257973][ T6792] netlink: 64 bytes leftover after parsing attributes in process `syz.2.210'. [ 160.391390][ T5892] usb 4-1: device descriptor read/64, error -71 [ 160.470702][ T30] audit: type=1400 audit(1766022159.230:348): avc: denied { write } for pid=6773 comm="syz.1.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.560551][ T30] audit: type=1400 audit(1766022159.540:349): avc: denied { create } for pid=6788 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 160.641795][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 160.771374][ T5892] usb 4-1: device descriptor read/64, error -71 [ 160.884005][ T5892] usb usb4-port1: attempt power cycle [ 161.374600][ T6742] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.667187][ T6742] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.722662][ T6742] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.739954][ T6742] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.751398][ T5892] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 162.071357][ T6815] hub 1-0:1.0: USB hub found [ 162.078676][ T6815] hub 1-0:1.0: 1 port detected [ 162.222110][ T6742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.225190][ T5823] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.277204][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 162.301511][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 162.411685][ T6798] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 162.451487][ T6242] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 162.479813][ T6742] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.601410][ T5931] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 162.606677][ T5892] usb 4-1: device not accepting address 14, error -71 [ 162.805738][ T5931] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 162.823434][ T5931] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 162.881428][ T5931] usb 3-1: config 8 has no interface number 0 [ 162.887552][ T5931] usb 3-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 163.027460][ T5931] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.039968][ T5931] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 163.052899][ T5931] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 163.179869][ T5931] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 163.197088][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.240561][ T5931] usb 3-1: NFC: intf ffff888078bb4000 id ffffffff8f3251e0 [ 163.400187][ T6834] policy can only be matched on NF_INET_PRE_ROUTING [ 163.400200][ T6834] unable to load match [ 163.416718][ T6834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 163.423317][ T6834] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.431320][ T6834] vhci_hcd vhci_hcd.0: Device attached [ 163.454298][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.469683][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.671561][ T6742] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 164.335201][ T6836] vhci_hcd: connection reset by peer [ 164.335253][ T30] audit: type=1400 audit(1766022163.530:350): avc: denied { setattr } for pid=6855 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 164.366363][ T3929] vhci_hcd vhci_hcd.1: stop threads [ 164.412108][ T5892] usb 5-1: USB disconnect, device number 15 [ 164.412336][ T3929] vhci_hcd vhci_hcd.1: release socket [ 164.444764][ T3929] vhci_hcd vhci_hcd.1: disconnect device [ 164.569941][ T6869] Cannot find set identified by id 0 to match [ 164.621315][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 164.627546][ T5823] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.633698][ T6666] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.644054][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 164.801611][ T6666] usb 1-1: Using ep0 maxpacket: 16 [ 164.812681][ T6666] usb 1-1: unable to get BOS descriptor or descriptor too short [ 164.830577][ T6666] usb 1-1: config 1 has an invalid interface number: 35 but max is 0 [ 164.839540][ T6666] usb 1-1: config 1 has no interface number 0 [ 164.852399][ T6666] usb 1-1: config 1 interface 35 has no altsetting 0 [ 164.875769][ T6666] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=fd.15 [ 164.885108][ T6666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.903599][ T6666] usb 1-1: Product: syz [ 164.908874][ T6666] usb 1-1: Manufacturer: syz [ 164.916060][ T6666] usb 1-1: SerialNumber: syz [ 165.019817][ T6879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=164 sclass=netlink_route_socket pid=6879 comm=syz.1.220 [ 165.149184][ T30] audit: type=1400 audit(1766022164.470:351): avc: denied { getopt } for pid=6855 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 165.838261][ T5935] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 166.701417][ T5823] Bluetooth: hci2: command 0x0405 tx timeout [ 166.707706][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 166.714019][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 166.727593][ T5935] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.740915][ T5935] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.073735][ T5935] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.091181][ T5935] usb 5-1: config 1 interface 1 has no altsetting 0 [ 167.109756][ T5935] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.160404][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.209481][ T5935] usb 5-1: Product: syz [ 167.247248][ T5935] usb 5-1: Manufacturer: syz [ 167.278533][ T5935] usb 5-1: SerialNumber: syz [ 167.294727][ T30] audit: type=1400 audit(1766022166.610:352): avc: denied { mount } for pid=6916 comm="syz.1.225" name="/" dev="configfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 167.355874][ T6666] usb 1-1: USB disconnect, device number 13 [ 167.434759][ T5935] cdc_ncm 5-1:1.0: skipping garbage [ 167.475707][ T5935] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 167.483603][ T30] audit: type=1400 audit(1766022166.810:353): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 167.549472][ T5935] cdc_ncm 5-1:1.0: bind() failure [ 167.674513][ T30] audit: type=1326 audit(1766022166.850:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6867 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5d718f749 code=0x7fc00000 [ 167.942930][ T6924] input: syz1 as /devices/virtual/input/input8 [ 168.715902][ T30] audit: type=1400 audit(1766022167.990:355): avc: denied { read } for pid=6926 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 168.806912][ T6937] 9p: Bad value for 'rfdno' [ 168.811552][ T6742] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 168.819529][ T30] audit: type=1400 audit(1766022168.130:356): avc: denied { read } for pid=6926 comm="syz.2.227" dev="sockfs" ino=12088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.851988][ T5935] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 168.902660][ T5935] usb 5-1: USB disconnect, device number 16 [ 168.913919][ T30] audit: type=1400 audit(1766022168.130:357): avc: denied { write } for pid=6926 comm="syz.2.227" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.019556][ T6944] loop3: detected capacity change from 0 to 7 [ 169.029162][ T6944] Dev loop3: unable to read RDB block 7 [ 169.035620][ T6944] loop3: AHDI p3 p4 [ 169.040852][ T6944] loop3: partition table partially beyond EOD, truncated [ 169.048834][ T6944] loop3: p3 start 1702000233 is beyond EOD, truncated [ 169.149327][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 169.266937][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.275463][ T9] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 169.299202][ T9] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 169.677879][ T6968] netlink: 64 bytes leftover after parsing attributes in process `syz.1.235'. [ 170.263315][ T6969] batadv_slave_1: entered promiscuous mode [ 170.491538][ T48] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 170.554620][ T6965] batadv_slave_1: left promiscuous mode [ 170.657566][ T48] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 170.678847][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.706882][ T48] usb 5-1: config 0 has no interface number 0 [ 170.718464][ T48] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 28515, setting to 64 [ 170.745092][ T48] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.802257][ T48] usb 5-1: config 0 interface 52 has no altsetting 0 [ 170.974885][ T48] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 170.989828][ T48] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 170.998505][ T48] usb 5-1: Manufacturer: syz [ 171.027037][ T48] usb 5-1: config 0 descriptor?? [ 171.469189][ T48] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input10 [ 171.481348][ T6992] input: syz0 as /devices/virtual/input/input9 [ 171.737544][ T792] usb 5-1: USB disconnect, device number 17 [ 171.737629][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 172.251326][ T48] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 172.412688][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 172.430698][ T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 172.446742][ T48] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 172.456019][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.465487][ T48] usb 1-1: Product: syz [ 172.469708][ T48] usb 1-1: Manufacturer: syz [ 172.474511][ T48] usb 1-1: SerialNumber: syz [ 172.480938][ T48] usb 1-1: config 0 descriptor?? [ 172.486765][ T6998] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.494369][ T6998] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.506884][ T30] audit: type=1400 audit(1766022171.830:358): avc: denied { write } for pid=6999 comm="syz.4.243" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.529954][ T30] audit: type=1400 audit(1766022171.830:359): avc: denied { bind } for pid=6999 comm="syz.4.243" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.710135][ T6998] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 172.717709][ T6998] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.835634][ T48] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 173.851085][ T48] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, a2:79:44:f4:fd:5c [ 173.866267][ T48] usb 1-1: USB disconnect, device number 15 [ 173.935370][ T48] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 173.991757][ T6742] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 174.050413][ T7011] loop3: detected capacity change from 0 to 7 [ 174.069561][ T7011] Dev loop3: unable to read RDB block 7 [ 174.089701][ T7011] loop3: AHDI p3 p4 [ 174.098814][ T7011] loop3: partition table partially beyond EOD, truncated [ 174.119124][ T7011] loop3: p3 start 1702000233 is beyond EOD, truncated [ 174.176473][ T6742] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.211266][ T6742] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 559 [ 174.255717][ T6742] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.284895][ T30] audit: type=1400 audit(1766022173.600:360): avc: denied { read write } for pid=7018 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 174.289425][ T6742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.353638][ T30] audit: type=1400 audit(1766022173.600:361): avc: denied { open } for pid=7018 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 174.416377][ T7007] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 174.428984][ T6742] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.475337][ T30] audit: type=1400 audit(1766022173.800:362): avc: denied { watch watch_reads } for pid=7016 comm="syz.1.247" path="/47" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 174.546826][ T7026] netlink: 64 bytes leftover after parsing attributes in process `syz.0.248'. [ 174.646711][ T6742] usb 5-1: USB disconnect, device number 18 [ 174.682272][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.910160][ T30] audit: type=1400 audit(1766022174.220:363): avc: denied { write } for pid=7003 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 174.994469][ T7034] Illegal XDP return value 4294967274 on prog (id 54) dev N/A, expect packet loss! [ 175.008199][ T30] audit: type=1400 audit(1766022174.230:364): avc: denied { setopt } for pid=7003 comm="syz.4.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 176.089317][ T30] audit: type=1400 audit(1766022175.410:365): avc: denied { ioctl } for pid=7058 comm="syz.0.252" path="socket:[12278]" dev="sockfs" ino=12278 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.840904][ T30] audit: type=1400 audit(1766022176.160:366): avc: denied { getopt } for pid=7065 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.135926][ T30] audit: type=1400 audit(1766022176.250:367): avc: denied { accept } for pid=7065 comm="syz.4.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.192961][ T7067] binder: 7065:7067 ioctl c0306201 0 returned -14 [ 177.275834][ T7072] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 177.282446][ T7072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.290283][ T7072] vhci_hcd vhci_hcd.0: Device attached [ 177.713056][ T7073] vhci_hcd: connection closed [ 178.128428][ T13] vhci_hcd vhci_hcd.1: stop threads [ 178.328881][ T6742] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 178.361437][ T13] vhci_hcd vhci_hcd.1: release socket [ 178.367264][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 178.598815][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 178.598829][ T30] audit: type=1326 audit(1766022177.920:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.4.260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f086db8f749 code=0x0 [ 178.721341][ T6666] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 178.871411][ T6666] usb 2-1: Using ep0 maxpacket: 32 [ 178.993141][ T30] audit: type=1400 audit(1766022178.270:370): avc: denied { connect } for pid=7092 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.150632][ T30] audit: type=1400 audit(1766022178.360:371): avc: denied { write } for pid=7092 comm="syz.2.261" path="socket:[13293]" dev="sockfs" ino=13293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.241946][ T6666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.261679][ T6666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.271736][ T6666] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 179.280841][ T6666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.294565][ T6666] usb 2-1: config 0 descriptor?? [ 180.479432][ T7113] capability: warning: `syz.2.266' uses deprecated v2 capabilities in a way that may be insecure [ 180.552283][ T30] audit: type=1400 audit(1766022179.870:372): avc: denied { mounton } for pid=7112 comm="syz.2.266" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 181.202453][ T6666] usbhid 2-1:0.0: can't add hid device: -71 [ 181.208491][ T6666] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 181.232682][ T6666] usb 2-1: USB disconnect, device number 19 [ 181.536693][ T7122] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 181.543319][ T7122] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 181.552143][ T7122] vhci_hcd vhci_hcd.0: Device attached [ 181.835351][ T7123] vhci_hcd: connection closed [ 181.839081][ T36] vhci_hcd vhci_hcd.4: stop threads [ 181.942418][ T36] vhci_hcd vhci_hcd.4: release socket [ 181.978689][ T36] vhci_hcd vhci_hcd.4: disconnect device [ 182.051328][ T6666] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 185.390872][ T6742] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 185.404264][ T30] audit: type=1400 audit(1766022184.150:373): avc: denied { bind } for pid=7142 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.055301][ T7167] fuse: Unknown parameter 'ÿ' [ 188.637689][ T7175] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 188.644388][ T7175] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.709621][ T7175] vhci_hcd vhci_hcd.0: Device attached [ 188.863114][ T7176] vhci_hcd: connection closed [ 188.863460][ T1157] vhci_hcd vhci_hcd.4: stop threads [ 188.874782][ T1157] vhci_hcd vhci_hcd.4: release socket [ 188.880347][ T1157] vhci_hcd vhci_hcd.4: disconnect device [ 188.921813][ T6742] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 188.931369][ T6666] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 189.022853][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 189.034318][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.283'. [ 189.083513][ T6666] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.097941][ T6666] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.108284][ T6666] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.113641][ T6666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.143615][ T7179] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 190.152986][ T6666] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.185614][ T30] audit: type=1400 audit(1766022189.510:374): avc: denied { setopt } for pid=7191 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.529552][ T5932] usb 2-1: USB disconnect, device number 20 [ 190.606945][ T7196] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 190.691723][ T7197] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 190.726563][ T7197] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 191.177513][ T30] audit: type=1400 audit(1766022190.430:375): avc: denied { append } for pid=7198 comm="syz.0.286" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 191.840262][ T7210] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 192.047782][ T30] audit: type=1400 audit(1766022191.370:376): avc: denied { create } for pid=7209 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 192.125647][ T30] audit: type=1400 audit(1766022191.440:377): avc: denied { write } for pid=7209 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 192.253958][ T7210] bond1: entered promiscuous mode [ 192.259093][ T30] audit: type=1400 audit(1766022191.580:378): avc: denied { setopt } for pid=7209 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.283131][ T7210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.331407][ T30] audit: type=1400 audit(1766022191.580:379): avc: denied { read } for pid=7209 comm="syz.2.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.645926][ T7210] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.717725][ T7210] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 192.763410][ T7210] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 192.914963][ T30] audit: type=1400 audit(1766022192.240:380): avc: denied { bind } for pid=7225 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.196836][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.203141][ T5899] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 194.206127][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.351349][ T5899] usb 1-1: device descriptor read/64, error -71 [ 194.471581][ T5892] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 194.498882][ T7246] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 194.560085][ T7248] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 194.573030][ T7248] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 194.591566][ T5899] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 194.630121][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.641441][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.656441][ T5892] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 194.666361][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.683168][ T5892] usb 2-1: config 0 descriptor?? [ 194.702831][ T7250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.297'. [ 194.712650][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 194.731320][ T5899] usb 1-1: device descriptor read/64, error -71 [ 194.778576][ T7250] hsr_slave_1 (unregistering): left promiscuous mode [ 194.822631][ T5834] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 194.841782][ T5899] usb usb1-port1: attempt power cycle [ 194.983585][ T5834] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.001405][ T5834] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.021743][ T5834] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.030832][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.055274][ T7248] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 195.066964][ T5834] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.115606][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.141769][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.885526][ T5899] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 195.983753][ T30] audit: type=1400 audit(1766022195.310:381): avc: denied { bind } for pid=7247 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 196.007393][ T5834] usb 5-1: USB disconnect, device number 19 [ 196.046231][ T5899] usb 1-1: device descriptor read/8, error -71 [ 196.107035][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 196.120785][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 196.183676][ T5892] usb 2-1: USB disconnect, device number 21 [ 196.277188][ T30] audit: type=1400 audit(1766022195.600:382): avc: denied { read write } for pid=7264 comm="syz.0.303" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.306199][ T30] audit: type=1400 audit(1766022195.630:383): avc: denied { open } for pid=7264 comm="syz.0.303" path="/dev/sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 196.552527][ T7266] program syz.0.303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.661314][ T30] audit: type=1400 audit(1766022195.880:384): avc: denied { ioctl } for pid=7264 comm="syz.0.303" path="/dev/sg0" dev="devtmpfs" ino=803 ioctlcmd=0x4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 197.673157][ T30] audit: type=1400 audit(1766022197.000:385): avc: denied { append } for pid=7275 comm="syz.4.307" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 197.751341][ T30] audit: type=1400 audit(1766022197.000:386): avc: denied { ioctl } for pid=7275 comm="syz.4.307" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 197.821835][ T30] audit: type=1400 audit(1766022197.140:387): avc: denied { load_policy } for pid=7272 comm="syz.0.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 197.847141][ T7274] SELinux: ebitmap start bit (234881280) is beyond the end of the bitmap (1472) [ 198.443591][ T30] audit: type=1400 audit(1766022197.300:388): avc: denied { open } for pid=7277 comm="syz.1.305" path="/dev/ttyq6" dev="devtmpfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 198.498973][ T7274] SELinux: failed to load policy [ 198.547735][ T7286] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 198.554333][ T7286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.562360][ T7286] vhci_hcd vhci_hcd.0: Device attached [ 198.812442][ T5932] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 199.144280][ T7287] vhci_hcd: connection reset by peer [ 199.149775][ T3544] vhci_hcd vhci_hcd.4: stop threads [ 199.167865][ T3544] vhci_hcd vhci_hcd.4: release socket [ 199.204779][ T3544] vhci_hcd vhci_hcd.4: disconnect device [ 199.343469][ T30] audit: type=1400 audit(1766022198.640:389): avc: denied { create } for pid=7296 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 199.674495][ T30] audit: type=1400 audit(1766022198.950:390): avc: denied { write } for pid=7296 comm="syz.0.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 199.986460][ T7302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 199.993091][ T7302] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 200.000928][ T7302] vhci_hcd vhci_hcd.0: Device attached [ 200.545994][ T6666] usb 35-1: new high-speed USB device number 4 using vhci_hcd [ 200.703695][ T7304] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 200.794942][ T7303] vhci_hcd: connection closed [ 200.867038][ T50] vhci_hcd vhci_hcd.1: stop threads [ 200.898367][ T50] vhci_hcd vhci_hcd.1: release socket [ 200.912855][ T50] vhci_hcd vhci_hcd.1: disconnect device [ 201.421412][ T6000] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 201.573064][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.584395][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.607176][ T6000] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 201.634033][ T7321] Cannot find set identified by id 0 to match [ 201.659376][ T7316] syz.1.315 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 201.719194][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.772098][ T6000] usb 1-1: config 0 descriptor?? [ 202.383037][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.898727][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.131322][ T5932] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 204.228399][ T30] audit: type=1400 audit(1766022203.550:391): avc: denied { setopt } for pid=7336 comm="syz.4.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 204.237488][ T7339] lo speed is unknown, defaulting to 1000 [ 205.090756][ T7338] lo speed is unknown, defaulting to 1000 [ 205.163514][ T6000] usbhid 1-1:0.0: can't add hid device: -71 [ 205.169515][ T6000] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 205.290464][ T6000] usb 1-1: USB disconnect, device number 20 [ 205.589520][ T7350] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 205.596165][ T7350] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.603986][ T7350] vhci_hcd vhci_hcd.0: Device attached [ 205.731474][ T6666] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 205.891352][ T6000] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 206.250604][ T7351] vhci_hcd: connection reset by peer [ 206.789403][ T3532] vhci_hcd vhci_hcd.2: stop threads [ 206.799961][ T3532] vhci_hcd vhci_hcd.2: release socket [ 206.805739][ T3532] vhci_hcd vhci_hcd.2: disconnect device [ 207.059149][ T7359] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 207.065779][ T7359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 207.075152][ T7359] vhci_hcd vhci_hcd.0: Device attached [ 207.091294][ T5834] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 207.828553][ T7368] Cannot find set identified by id 0 to match [ 207.865202][ T7360] vhci_hcd: connection closed [ 207.867232][ T13] vhci_hcd vhci_hcd.2: stop threads [ 207.909118][ T13] vhci_hcd vhci_hcd.2: release socket [ 207.933706][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 208.535757][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.536180][ T5834] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.536273][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.556056][ T5834] usb 2-1: config 0 descriptor?? [ 208.737799][ T5834] pwc: Askey VC010 type 2 USB webcam detected. [ 208.931856][ T5834] pwc: recv_control_msg error -32 req 02 val 2b00 [ 208.983140][ T30] audit: type=1400 audit(1766022208.310:392): avc: denied { setopt } for pid=7377 comm="syz.0.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.102444][ T7382] xt_nfacct: accounting object `syz1' does not exist [ 209.112582][ T7382] netlink: zone id is out of range [ 209.117729][ T7382] netlink: zone id is out of range [ 209.125146][ T7382] netlink: zone id is out of range [ 209.130385][ T7382] netlink: zone id is out of range [ 209.155914][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.169820][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.487077][ T6000] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 213.339960][ T30] audit: type=1400 audit(1766022212.460:393): avc: denied { connect } for pid=7400 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 213.910211][ T7411] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 213.916845][ T7411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.925007][ T7411] vhci_hcd vhci_hcd.0: Device attached [ 213.991607][ T5834] pwc: recv_control_msg error -110 req 02 val 2c00 [ 214.174233][ T6000] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 214.553274][ T5834] pwc: recv_control_msg error -32 req 04 val 1000 [ 214.825054][ T7412] vhci_hcd: connection reset by peer [ 214.984629][ T50] vhci_hcd vhci_hcd.0: stop threads [ 215.005710][ T50] vhci_hcd vhci_hcd.0: release socket [ 215.040399][ T50] vhci_hcd vhci_hcd.0: disconnect device [ 215.188045][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 215.216376][ T5834] pwc: recv_control_msg error -32 req 04 val 1300 [ 215.223271][ T5834] pwc: recv_control_msg error -32 req 04 val 1400 [ 215.230096][ T5834] pwc: recv_control_msg error -32 req 02 val 2000 [ 215.237076][ T5834] pwc: recv_control_msg error -32 req 02 val 2100 [ 215.243987][ T5834] pwc: recv_control_msg error -32 req 04 val 1500 [ 215.250822][ T5834] pwc: recv_control_msg error -32 req 02 val 2500 [ 215.257704][ T5834] pwc: recv_control_msg error -32 req 02 val 2400 [ 215.264726][ T5834] pwc: recv_control_msg error -32 req 02 val 2600 [ 215.271556][ T5834] pwc: recv_control_msg error -32 req 02 val 2900 [ 215.278381][ T5834] pwc: recv_control_msg error -32 req 02 val 2800 [ 215.285515][ T5834] pwc: recv_control_msg error -32 req 04 val 1100 [ 215.292379][ T5834] pwc: recv_control_msg error -32 req 04 val 1200 [ 215.306819][ T5834] pwc: Registered as video103. [ 215.315089][ T5834] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 215.556601][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.340'. [ 215.751344][ T5834] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 215.872945][ T5892] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 215.911438][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 215.923737][ T5834] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 215.934965][ T5834] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.941633][ T5834] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 215.952692][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.964043][ T5834] usb 5-1: config 0 descriptor?? [ 216.033111][ T5892] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 216.041148][ T5892] usb 1-1: config 1 has no interface number 0 [ 216.047794][ T5892] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 216.058825][ T5892] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 216.069421][ T5892] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 192, changing to 11 [ 216.085625][ T5892] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 216.095001][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.103516][ T5892] usb 1-1: Product: syz [ 216.107881][ T5892] usb 1-1: Manufacturer: syz [ 216.114234][ T5892] usb 1-1: SerialNumber: syz [ 216.124340][ T7433] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 216.132257][ T7433] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 216.146165][ T5892] usb 1-1: Expected 3 endpoints, found: 2 [ 216.166250][ T30] audit: type=1400 audit(1766022215.490:394): avc: denied { shutdown } for pid=7439 comm="syz.2.343" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.194489][ T7442] tmpfs: Unknown parameter 'mpoult' [ 216.235486][ T30] audit: type=1400 audit(1766022215.520:395): avc: denied { read } for pid=7439 comm="syz.2.343" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.401770][ T5834] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 216.508628][ T30] audit: type=1400 audit(1766022215.830:396): avc: denied { getopt } for pid=7432 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 216.659898][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.674741][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.989059][ T5871] usb 5-1: USB disconnect, device number 20 [ 217.148974][ T48] usb 1-1: USB disconnect, device number 21 [ 218.833663][ T30] audit: type=1400 audit(1766022218.160:397): avc: denied { shutdown } for pid=7460 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 219.124920][ T7463] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 219.151740][ T7463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.179219][ T7463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.186792][ T7463] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 219.197997][ T7463] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 219.332033][ T6000] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 219.461331][ T48] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 219.615050][ T48] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 219.624259][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.633011][ T48] usb 1-1: Product: syz [ 219.637210][ T48] usb 1-1: Manufacturer: syz [ 219.641990][ T48] usb 1-1: SerialNumber: syz [ 219.648132][ T48] usb 1-1: config 0 descriptor?? [ 219.879851][ T48] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 220.889708][ T7463] gretap1: entered promiscuous mode [ 220.897930][ T7463] bond1: (slave gretap1): making interface the new active one [ 220.906328][ T7463] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 220.930080][ T7463] macvlan2: entered promiscuous mode [ 220.935431][ T7463] macvlan2: entered allmulticast mode [ 220.945137][ T7463] bond1: entered promiscuous mode [ 220.950975][ T7463] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.963246][ T7463] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 220.975733][ T7463] bond1: left promiscuous mode [ 220.996145][ T48] gspca_sunplus: reg_w_riv err -71 [ 221.001503][ T48] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 221.044507][ T48] usb 1-1: USB disconnect, device number 22 [ 221.144585][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 221.201927][ T30] audit: type=1400 audit(1766022220.530:398): avc: denied { create } for pid=7468 comm="syz.4.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 221.394229][ T7476] Cannot find set identified by id 0 to match [ 222.226040][ T7485] netlink: 72 bytes leftover after parsing attributes in process `syz.4.355'. [ 222.251341][ T30] audit: type=1400 audit(1766022221.230:399): avc: denied { watch watch_reads } for pid=7460 comm="syz.2.348" path="pipe:[4502]" dev="pipefs" ino=4502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 222.330664][ T30] audit: type=1400 audit(1766022221.240:400): avc: denied { read } for pid=7460 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.624193][ T7487] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 222.719727][ T7488] SELinux: failed to load policy [ 222.727311][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 222.967822][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'. [ 223.535347][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 224.221440][ T48] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 224.371311][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 224.378019][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.391065][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.401104][ T48] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 224.410219][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.425505][ T48] usb 1-1: config 0 descriptor?? [ 225.940097][ T48] logitech 0003:046D:C29C.0006: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 225.953117][ T7392] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 225.962359][ T48] logitech 0003:046D:C29C.0006: no inputs found [ 225.975923][ T48] usb 1-1: USB disconnect, device number 23 [ 226.000765][ T7519] fido_id[7519]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 226.112746][ T7392] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.121532][ T7392] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 226.132139][ T7392] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.141443][ T7392] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 226.154155][ T7392] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 226.166645][ T7392] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.175783][ T7392] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.183849][ T7392] usb 5-1: Product: syz [ 226.188051][ T7392] usb 5-1: Manufacturer: syz [ 226.197142][ T7392] cdc_wdm 5-1:1.0: skipping garbage [ 226.202437][ T7392] cdc_wdm 5-1:1.0: skipping garbage [ 226.209053][ T7392] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 226.215035][ T7392] cdc_wdm 5-1:1.0: Unknown control protocol [ 226.401956][ T30] audit: type=1400 audit(1766022225.730:401): avc: denied { read write } for pid=7512 comm="syz.4.366" name="cdc-wdm0" dev="devtmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 226.425877][ T30] audit: type=1400 audit(1766022225.730:402): avc: denied { open } for pid=7512 comm="syz.4.366" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 227.185895][ T30] audit: type=1400 audit(1766022226.510:403): avc: denied { bind } for pid=7523 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 227.208693][ T30] audit: type=1400 audit(1766022226.510:404): avc: denied { name_bind } for pid=7523 comm="syz.0.368" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 227.231280][ T30] audit: type=1400 audit(1766022226.510:405): avc: denied { node_bind } for pid=7523 comm="syz.0.368" saddr=fe80::aa src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 227.254107][ T30] audit: type=1400 audit(1766022226.510:406): avc: denied { bind } for pid=7523 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.273749][ T30] audit: type=1400 audit(1766022226.510:407): avc: denied { name_bind } for pid=7523 comm="syz.0.368" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 227.294778][ T30] audit: type=1400 audit(1766022226.510:408): avc: denied { node_bind } for pid=7523 comm="syz.0.368" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 227.316230][ T30] audit: type=1400 audit(1766022226.510:409): avc: denied { connect } for pid=7523 comm="syz.0.368" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 227.337864][ T30] audit: type=1400 audit(1766022226.510:410): avc: denied { name_connect } for pid=7523 comm="syz.0.368" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 227.369141][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.370'. [ 227.838115][ T89] usb 5-1: USB disconnect, device number 21 [ 228.781406][ T6000] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 229.425570][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.437207][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.447317][ T6000] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 229.456555][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.467096][ T6000] usb 1-1: config 0 descriptor?? [ 229.886811][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.899187][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.800831][ T6000] usbhid 1-1:0.0: can't add hid device: -71 [ 230.819793][ T6000] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 230.838086][ T6000] usb 1-1: USB disconnect, device number 24 [ 231.318820][ T7569] netlink: 72 bytes leftover after parsing attributes in process `syz.4.381'. [ 232.116197][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 232.116213][ T30] audit: type=1400 audit(1766022231.440:413): avc: denied { sqpoll } for pid=7571 comm="syz.4.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 232.156913][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'. [ 232.278763][ T30] audit: type=1400 audit(1766022231.600:414): avc: denied { ioctl } for pid=7577 comm="syz.4.385" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 233.653336][ T7598] netlink: 72 bytes leftover after parsing attributes in process `syz.0.388'. [ 234.731363][ T792] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 234.802082][ T7611] netlink: 72 bytes leftover after parsing attributes in process `syz.4.391'. [ 234.903973][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.915900][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.926333][ T792] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 234.935462][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.989307][ T792] usb 1-1: config 0 descriptor?? [ 235.441757][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.457285][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.920659][ T7633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.948740][ T7633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.977891][ T7634] Cannot find set identified by id 0 to match [ 237.978713][ T7641] netlink: 'syz.4.398': attribute type 10 has an invalid length. [ 238.004541][ T792] usbhid 1-1:0.0: can't add hid device: -71 [ 238.010564][ T792] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 238.072506][ T792] usb 1-1: USB disconnect, device number 25 [ 241.238086][ T7655] netlink: 72 bytes leftover after parsing attributes in process `syz.4.400'. [ 243.562790][ T7672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 243.569417][ T7672] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 243.622539][ T7672] vhci_hcd vhci_hcd.0: Device attached [ 243.935574][ T6064] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 244.977087][ T7674] vhci_hcd: connection reset by peer [ 244.982815][ T3431] vhci_hcd vhci_hcd.0: stop threads [ 244.988011][ T3431] vhci_hcd vhci_hcd.0: release socket [ 244.994830][ T3431] vhci_hcd vhci_hcd.0: disconnect device [ 245.157471][ T7683] lo speed is unknown, defaulting to 1000 [ 245.265453][ T30] audit: type=1400 audit(1766022244.590:415): avc: denied { read write } for pid=7685 comm="syz.2.409" dev="sockfs" ino=16461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 245.309751][ T7686] netlink: 40 bytes leftover after parsing attributes in process `syz.4.408'. [ 245.323378][ T7687] 9p: Bad value for 'rfdno' [ 245.681325][ T7694] netlink: 72 bytes leftover after parsing attributes in process `syz.2.410'. [ 247.773604][ T7707] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 247.780221][ T7707] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 247.789250][ T7707] vhci_hcd vhci_hcd.0: Device attached [ 248.447974][ T6242] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 249.518265][ T6064] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 250.576646][ T7708] vhci_hcd: connection reset by peer [ 250.602958][ T12] vhci_hcd vhci_hcd.4: stop threads [ 250.621494][ T12] vhci_hcd vhci_hcd.4: release socket [ 250.654003][ T12] vhci_hcd vhci_hcd.4: disconnect device [ 250.790646][ T30] audit: type=1400 audit(1766022250.110:416): avc: denied { bind } for pid=7721 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.798543][ T7723] CUSE: unknown device info "" [ 250.829523][ T7723] CUSE: unknown device info "@" [ 250.835703][ T7723] CUSE: DEVNAME unspecified [ 252.253221][ T7743] netlink: 72 bytes leftover after parsing attributes in process `syz.2.421'. [ 254.275668][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.427'. [ 254.301346][ T6242] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 254.301841][ T6064] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 254.532478][ T6064] usb 5-1: Using ep0 maxpacket: 32 [ 254.708324][ T6064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.731420][ T6064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.751315][ T6064] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 254.770549][ T6064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.796073][ T6064] usb 5-1: config 0 descriptor?? [ 255.124771][ T7771] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 255.131401][ T7771] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 255.139369][ T7771] vhci_hcd vhci_hcd.0: Device attached [ 255.983961][ T6064] logitech 0003:046D:C29C.0007: item fetching failed at offset 5/6 [ 255.989562][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.993563][ T6000] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 256.009493][ T6064] logitech 0003:046D:C29C.0007: parse failed [ 256.015861][ T6064] logitech 0003:046D:C29C.0007: probe with driver logitech failed with error -22 [ 256.028650][ T6064] usb 5-1: USB disconnect, device number 22 [ 256.056656][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.081118][ T30] audit: type=1400 audit(1766022255.380:417): avc: denied { read } for pid=7754 comm="syz.4.425" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 256.305789][ T30] audit: type=1400 audit(1766022255.380:418): avc: denied { open } for pid=7754 comm="syz.4.425" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 256.436584][ T30] audit: type=1400 audit(1766022255.390:419): avc: denied { ioctl } for pid=7754 comm="syz.4.425" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 256.494915][ T7772] vhci_hcd: connection reset by peer [ 256.500470][ T133] vhci_hcd vhci_hcd.2: stop threads [ 256.575437][ T133] vhci_hcd vhci_hcd.2: release socket [ 256.595128][ T133] vhci_hcd vhci_hcd.2: disconnect device [ 256.806513][ T30] audit: type=1400 audit(1766022256.130:420): avc: denied { write } for pid=7777 comm="syz.0.428" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 257.350016][ T7784] netlink: 72 bytes leftover after parsing attributes in process `syz.2.432'. [ 257.861406][ T6064] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 258.076579][ T30] audit: type=1400 audit(1766022257.400:421): avc: denied { setopt } for pid=7786 comm="syz.4.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 258.141255][ T6064] usb 1-1: Using ep0 maxpacket: 8 [ 258.157444][ T6064] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 258.172500][ T6064] usb 1-1: config 0 has no interface number 0 [ 258.190144][ T6064] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 258.203419][ T6064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.212219][ T6064] usb 1-1: Product: syz [ 258.216791][ T6064] usb 1-1: Manufacturer: syz [ 258.221663][ T6064] usb 1-1: SerialNumber: syz [ 258.231940][ T6064] usb 1-1: config 0 descriptor?? [ 258.383197][ T7647] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 258.445312][ T6064] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 258.456270][ T6064] usb 1-1: USB disconnect, device number 26 [ 258.566152][ T7647] usb 5-1: unable to get BOS descriptor or descriptor too short [ 258.580393][ T7647] usb 5-1: not running at top speed; connect to a high speed hub [ 258.596391][ T7647] usb 5-1: config 0 has an invalid interface number: 187 but max is 0 [ 258.605440][ T7647] usb 5-1: config 0 has no interface number 0 [ 258.611686][ T7647] usb 5-1: config 0 interface 187 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 258.623413][ T7647] usb 5-1: config 0 interface 187 has no altsetting 0 [ 258.632519][ T7647] usb 5-1: New USB device found, idVendor=08f2, idProduct=007f, bcdDevice=ea.de [ 258.641731][ T7647] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.649838][ T7647] usb 5-1: Product: syz [ 258.654102][ T7647] usb 5-1: Manufacturer: syz [ 258.658725][ T7647] usb 5-1: SerialNumber: syz [ 258.665186][ T7647] usb 5-1: config 0 descriptor?? [ 259.027637][ T7795] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 259.034353][ T7795] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 259.042488][ T7795] vhci_hcd vhci_hcd.0: Device attached [ 259.713605][ T7803] Cannot find set identified by id 0 to match [ 259.970663][ T7796] vhci_hcd: connection closed [ 259.974198][ T133] vhci_hcd vhci_hcd.2: stop threads [ 259.990119][ T133] vhci_hcd vhci_hcd.2: release socket [ 259.998916][ T133] vhci_hcd vhci_hcd.2: disconnect device [ 260.570461][ T30] audit: type=1400 audit(1766022259.890:422): avc: denied { map } for pid=7805 comm="syz.2.439" path="socket:[15949]" dev="sockfs" ino=15949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.618545][ T30] audit: type=1400 audit(1766022259.890:423): avc: denied { accept } for pid=7805 comm="syz.2.439" path="socket:[15949]" dev="sockfs" ino=15949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 260.728236][ T7808] netlink: 35 bytes leftover after parsing attributes in process `syz.2.439'. [ 260.907013][ T7647] usb 5-1: USB disconnect, device number 23 [ 260.959604][ T30] audit: type=1400 audit(1766022260.270:424): avc: denied { mount } for pid=7811 comm="syz.0.440" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 261.154659][ T6000] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 261.161409][ T30] audit: type=1400 audit(1766022260.270:425): avc: denied { mounton } for pid=7811 comm="syz.0.440" path="/112/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 261.867488][ T30] audit: type=1400 audit(1766022261.190:426): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 262.038595][ T7821] fuse: Unknown parameter 'grou00000000000000000000' [ 262.103000][ T7722] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 262.281340][ T7722] usb 5-1: Using ep0 maxpacket: 32 [ 262.302586][ T7722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.316020][ T7722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.326848][ T7722] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 262.336780][ T7722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.383753][ T7722] usb 5-1: config 0 descriptor?? [ 262.891296][ T7825] netlink: 72 bytes leftover after parsing attributes in process `syz.2.443'. [ 263.799342][ T7818] siw: device registration error -23 [ 263.881276][ T6036] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 263.895874][ T30] audit: type=1400 audit(1766022263.220:427): avc: denied { setopt } for pid=7830 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 263.918378][ T7831] input: syz1 as /devices/virtual/input/input13 [ 264.026592][ T7722] usbhid 5-1:0.0: can't add hid device: -71 [ 264.032699][ T7722] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 264.055540][ T7722] usb 5-1: USB disconnect, device number 24 [ 264.113165][ T6036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.210754][ T6036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.313718][ T6036] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 264.416908][ T6036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.671956][ T6036] usb 1-1: config 0 descriptor?? [ 265.051369][ T7836] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 265.057975][ T7836] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.065706][ T7836] vhci_hcd vhci_hcd.0: Device attached [ 265.144046][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.172503][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.321390][ T7722] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 265.681450][ T7838] vhci_hcd: connection reset by peer [ 265.721607][ T4041] vhci_hcd vhci_hcd.4: stop threads [ 265.728874][ T4041] vhci_hcd vhci_hcd.4: release socket [ 265.781361][ T4041] vhci_hcd vhci_hcd.4: disconnect device [ 266.866437][ T6036] usbhid 1-1:0.0: can't add hid device: -71 [ 266.891325][ T6036] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 266.930296][ T6036] usb 1-1: USB disconnect, device number 27 [ 266.991531][ T7841] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 266.998146][ T7841] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 267.005880][ T7841] vhci_hcd vhci_hcd.0: Device attached [ 267.402289][ T7843] vhci_hcd: connection closed [ 267.402571][ T1157] vhci_hcd vhci_hcd.4: stop threads [ 267.417183][ T1157] vhci_hcd vhci_hcd.4: release socket [ 267.428367][ T1157] vhci_hcd vhci_hcd.4: disconnect device [ 267.491308][ T6064] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 267.651256][ T6064] usb 1-1: Using ep0 maxpacket: 32 [ 267.657766][ T6064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.669985][ T6064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.679880][ T6064] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 267.688991][ T6064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.701838][ T6064] usb 1-1: config 0 descriptor?? [ 268.791318][ T6064] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 268.810246][ T7866] netlink: 36 bytes leftover after parsing attributes in process `syz.4.452'. [ 268.971671][ T6064] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 269.241844][ T7875] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 269.248470][ T7875] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 269.256486][ T7875] vhci_hcd vhci_hcd.0: Device attached [ 269.501377][ T6036] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 270.161562][ T6064] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 270.238952][ T7876] vhci_hcd: connection reset by peer [ 270.267009][ T1157] vhci_hcd vhci_hcd.2: stop threads [ 270.285760][ T1157] vhci_hcd vhci_hcd.2: release socket [ 270.293309][ T6064] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 270.302153][ T1157] vhci_hcd vhci_hcd.2: disconnect device [ 270.461438][ T7722] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 270.502035][ T10] usb 1-1: reset high-speed USB device number 28 using dummy_hcd [ 270.691326][ T7392] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 270.841293][ T7392] usb 5-1: Using ep0 maxpacket: 32 [ 270.872536][ T7884] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 270.879165][ T7884] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 270.886981][ T7884] vhci_hcd vhci_hcd.0: Device attached [ 271.611427][ T10] usb 1-1: device descriptor read/64, error -71 [ 271.696713][ T7885] vhci_hcd: connection closed [ 271.697168][ T3544] vhci_hcd vhci_hcd.2: stop threads [ 271.711387][ T3544] vhci_hcd vhci_hcd.2: release socket [ 271.720180][ T3544] vhci_hcd vhci_hcd.2: disconnect device [ 271.866743][ T10] usb 1-1: reset high-speed USB device number 28 using dummy_hcd [ 271.883251][ T10] usb 1-1: device reset changed ep0 maxpacket size! [ 271.895308][ T6064] usb 1-1: USB disconnect, device number 28 [ 271.979110][ T7392] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.211778][ T6064] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 272.220135][ T7392] usb 5-1: config 0 has no interface number 0 [ 272.233354][ T7392] usb 5-1: New USB device found, idVendor=80a1, idProduct=9500, bcdDevice=b6.d8 [ 272.242534][ T7392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.251365][ T7392] usb 5-1: Product: syz [ 272.255539][ T7392] usb 5-1: Manufacturer: syz [ 272.260124][ T7392] usb 5-1: SerialNumber: syz [ 272.267822][ T7392] usb 5-1: config 0 descriptor?? [ 272.508122][ T7392] usb 5-1: USB disconnect, device number 25 [ 272.847952][ T6064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.859055][ T6064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.869048][ T6064] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 272.878319][ T6064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.888069][ T6064] usb 1-1: config 0 descriptor?? [ 273.302384][ T7889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.407173][ T7889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.481981][ T7912] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 275.488580][ T7912] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 275.496244][ T7912] vhci_hcd vhci_hcd.0: Device attached [ 276.201281][ T6036] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 276.240547][ T7913] vhci_hcd: connection closed [ 276.242754][ T1157] vhci_hcd vhci_hcd.4: stop threads [ 276.353245][ T1157] vhci_hcd vhci_hcd.4: release socket [ 276.406137][ T1157] vhci_hcd vhci_hcd.4: disconnect device [ 276.473867][ T7722] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 276.792273][ T6064] usbhid 1-1:0.0: can't add hid device: -71 [ 276.798289][ T6064] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 276.902800][ T6064] usb 1-1: USB disconnect, device number 29 [ 277.162615][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.464'. [ 277.918731][ T30] audit: type=1400 audit(1766022276.490:428): avc: denied { append } for pid=7925 comm="syz.4.464" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 278.168562][ T30] audit: type=1326 audit(1766022277.490:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 278.266680][ T30] audit: type=1326 audit(1766022277.520:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 278.369037][ T30] audit: type=1326 audit(1766022277.520:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 278.420979][ T7934] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 278.427604][ T7934] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 278.435435][ T7934] vhci_hcd vhci_hcd.0: Device attached [ 278.476950][ T30] audit: type=1326 audit(1766022277.520:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 278.611976][ T30] audit: type=1326 audit(1766022277.520:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 278.711305][ T7722] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 278.777954][ T30] audit: type=1326 audit(1766022277.520:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 279.406627][ T30] audit: type=1326 audit(1766022277.520:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 279.458938][ T7935] vhci_hcd: connection reset by peer [ 279.467196][ T36] vhci_hcd vhci_hcd.0: stop threads [ 279.473128][ T36] vhci_hcd vhci_hcd.0: release socket [ 279.480166][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 280.618467][ T30] audit: type=1326 audit(1766022277.530:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 280.641906][ T30] audit: type=1326 audit(1766022277.530:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7932 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086db8f749 code=0x7ffc0000 [ 281.494313][ T7946] batadv_slave_1: entered promiscuous mode [ 281.504350][ T7946] batman_adv: batadv0: Adding interface: macvlan2 [ 281.510797][ T7946] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.536328][ T7946] batman_adv: batadv0: Interface activated: macvlan2 [ 281.760168][ T7960] Cannot find set identified by id 0 to match [ 281.912273][ T6064] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 282.061331][ T6064] usb 5-1: Using ep0 maxpacket: 32 [ 282.072748][ T6064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.088509][ T6064] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.099391][ T6064] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 282.109112][ T6064] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.127555][ T6064] usb 5-1: config 0 descriptor?? [ 282.721109][ T7970] netlink: 72 bytes leftover after parsing attributes in process `syz.0.475'. [ 282.986991][ T6064] logitech 0003:046D:C29C.0009: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 283.030613][ T6064] logitech 0003:046D:C29C.0009: no inputs found [ 283.055672][ T6064] usb 5-1: USB disconnect, device number 26 [ 283.095459][ T7977] bridge_slave_0: left allmulticast mode [ 283.101112][ T7977] bridge_slave_0: left promiscuous mode [ 283.103832][ T7974] fido_id[7974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 283.127127][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.141099][ T7977] bridge_slave_1: left allmulticast mode [ 283.148326][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.160787][ T7977] bond0: (slave bond_slave_0): Releasing backup interface [ 283.172957][ T7977] bond0: (slave bond_slave_1): Releasing backup interface [ 283.186422][ T7977] team0: Port device team_slave_0 removed [ 283.190112][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 283.203359][ T7977] team0: Port device team_slave_1 removed [ 283.219946][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.227536][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.243175][ T7977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.250668][ T7977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.272095][ T7977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 283.289570][ T792] lo speed is unknown, defaulting to 1000 [ 283.348918][ T7982] loop7: detected capacity change from 0 to 16384 [ 283.637079][ T7986] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 283.643711][ T7986] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 283.651907][ T7986] vhci_hcd vhci_hcd.0: Device attached [ 283.775304][ T7985] loop7: detected capacity change from 16384 to 0 [ 283.782501][ C0] I/O error, dev loop7, sector 2560 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 283.782620][ C0] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 283.913913][ T7722] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 284.101358][ T792] usb 37-1: new high-speed USB device number 7 using vhci_hcd [ 284.319995][ T7987] vhci_hcd: connection reset by peer [ 284.417324][ T133] vhci_hcd vhci_hcd.2: stop threads [ 284.478268][ T133] vhci_hcd vhci_hcd.2: release socket [ 284.526816][ T133] vhci_hcd vhci_hcd.2: disconnect device [ 285.995216][ T8024] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 286.190205][ T7722] IPVS: starting estimator thread 0... [ 286.281499][ T8026] IPVS: using max 36 ests per chain, 86400 per kthread [ 287.687803][ T8033] Cannot find set identified by id 0 to match [ 289.331266][ T792] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 289.611330][ T5900] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 289.761238][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 289.767758][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.778750][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.788568][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 289.797729][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.808343][ T5900] usb 5-1: config 0 descriptor?? [ 290.436630][ T8062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.498'. [ 291.555665][ T8070] netlink: 124 bytes leftover after parsing attributes in process `syz.2.500'. [ 292.272661][ T5900] logitech 0003:046D:C29C.000A: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 292.285088][ T5900] logitech 0003:046D:C29C.000A: no inputs found [ 292.310840][ T5900] usb 5-1: USB disconnect, device number 27 [ 292.345580][ T8075] fido_id[8075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 292.512020][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 292.512035][ T30] audit: type=1400 audit(1766022291.840:491): avc: denied { connect } for pid=8076 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 292.539939][ T30] audit: type=1400 audit(1766022291.870:492): avc: denied { setopt } for pid=8076 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.182059][ T8097] batadv_slave_1: entered promiscuous mode [ 295.196100][ T8097] batman_adv: batadv0: Adding interface: macvlan2 [ 295.202607][ T8097] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.228081][ T8097] batman_adv: batadv0: Interface activated: macvlan2 [ 295.703052][ T8106] loop3: detected capacity change from 0 to 7 [ 295.745279][ T8106] Dev loop3: unable to read RDB block 7 [ 295.771281][ T8106] loop3: AHDI p3 p4 [ 295.781308][ T8106] loop3: partition table partially beyond EOD, truncated [ 295.789514][ T8106] loop3: p3 start 1702000233 is beyond EOD, truncated [ 296.047080][ T8116] netlink: 72 bytes leftover after parsing attributes in process `syz.0.509'. [ 296.545851][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 296.741425][ T30] audit: type=1400 audit(1766022296.060:493): avc: denied { mounton } for pid=8122 comm="syz.4.512" path="/proc/496/task" dev="proc" ino=17290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 297.851750][ T8143] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 297.858360][ T8143] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 297.866145][ T8143] vhci_hcd vhci_hcd.0: Device attached [ 298.111291][ T7948] usb 37-1: new high-speed USB device number 8 using vhci_hcd [ 298.544002][ T8144] vhci_hcd: connection reset by peer [ 298.553787][ T1157] vhci_hcd vhci_hcd.2: stop threads [ 298.576000][ T1157] vhci_hcd vhci_hcd.2: release socket [ 298.598590][ T1157] vhci_hcd vhci_hcd.2: disconnect device [ 298.976001][ T8149] batman_adv: batadv0: Adding interface: macvlan3 [ 298.983047][ T8149] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.010420][ T8149] batman_adv: batadv0: Interface activated: macvlan3 [ 303.251404][ T7948] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 316.381333][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 316.388827][ T31] Tainted: G L syzkaller #0 [ 316.395654][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.404441][ T31] task:kworker/0:0 state:D stack:22440 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 316.417318][ T31] Workqueue: events rfkill_op_handler [ 316.422772][ T31] Call Trace: [ 316.426046][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 316.428984][ T31] ? __schedule+0x10b9/0x6150 [ 316.434137][ T31] __schedule+0x1139/0x6150 [ 316.438652][ T31] ? __lock_acquire+0x436/0x2890 [ 316.443851][ T31] ? __pfx___schedule+0x10/0x10 [ 316.448703][ T31] ? find_held_lock+0x2b/0x80 [ 316.462077][ T31] ? schedule+0x2d7/0x3a0 [ 316.471346][ T31] schedule+0xe7/0x3a0 [ 316.475431][ T31] schedule_preempt_disabled+0x13/0x30 [ 316.480885][ T31] __mutex_lock+0xc69/0x1ca0 [ 316.490158][ T31] ? nfc_dev_down+0x2d/0x310 [ 316.494955][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 316.499986][ T31] ? kfree+0x2f8/0x6e0 [ 316.504358][ T31] ? kobject_uevent_env+0x2e5/0x1920 [ 316.509664][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 316.521358][ T31] ? nfc_dev_down+0x2d/0x310 [ 316.525972][ T31] nfc_dev_down+0x2d/0x310 [ 316.530396][ T31] nfc_rfkill_set_block+0x39/0x110 [ 316.542064][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 316.547820][ T31] rfkill_set_block+0x1fe/0x550 [ 316.552724][ T31] rfkill_epo+0x8e/0x1d0 [ 316.556961][ T31] rfkill_op_handler+0x25c/0x270 [ 316.561949][ T31] process_one_work+0x9ba/0x1b20 [ 316.566890][ T31] ? __pfx_process_one_work+0x10/0x10 [ 316.572301][ T31] ? assign_work+0x1a0/0x250 [ 316.576885][ T31] worker_thread+0x6c8/0xf10 [ 316.581561][ T31] ? __pfx_worker_thread+0x10/0x10 [ 316.586675][ T31] kthread+0x3c5/0x780 [ 316.590725][ T31] ? __pfx_kthread+0x10/0x10 [ 316.595346][ T31] ? rcu_is_watching+0x12/0xc0 [ 316.600103][ T31] ? __pfx_kthread+0x10/0x10 [ 316.604747][ T31] ret_from_fork+0x983/0xb10 [ 316.609361][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 316.614506][ T31] ? __switch_to+0x7af/0x10d0 [ 316.619181][ T31] ? __pfx_kthread+0x10/0x10 [ 316.623859][ T31] ret_from_fork_asm+0x1a/0x30 [ 316.628666][ T31] [ 316.631861][ T31] INFO: task kworker/0:5:5928 blocked for more than 144 seconds. [ 316.639583][ T31] Tainted: G L syzkaller #0 [ 316.646200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.655061][ T31] task:kworker/0:5 state:D stack:25584 pid:5928 tgid:5928 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 316.667141][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 316.673898][ T31] Call Trace: [ 316.677164][ T31] [ 316.680074][ T31] ? __schedule+0x10b9/0x6150 [ 316.684831][ T31] __schedule+0x1139/0x6150 [ 316.689370][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 316.694767][ T31] ? __pfx___schedule+0x10/0x10 [ 316.699614][ T31] ? find_held_lock+0x2b/0x80 [ 316.704748][ T31] ? schedule+0x2d7/0x3a0 [ 316.709093][ T31] schedule+0xe7/0x3a0 [ 316.713279][ T31] schedule_preempt_disabled+0x13/0x30 [ 316.718743][ T31] __mutex_lock+0xc69/0x1ca0 [ 316.723403][ T31] ? register_lock_class+0x41/0x4b0 [ 316.728605][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 316.734964][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 316.739986][ T31] ? __pfx___schedule+0x10/0x10 [ 316.744918][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 316.751301][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 316.757457][ T31] process_one_work+0x9ba/0x1b20 [ 316.762606][ T31] ? __pfx_process_one_work+0x10/0x10 [ 316.767986][ T31] ? assign_work+0x1a0/0x250 [ 316.772586][ T31] worker_thread+0x6c8/0xf10 [ 316.777178][ T31] ? __pfx_worker_thread+0x10/0x10 [ 316.783088][ T31] kthread+0x3c5/0x780 [ 316.787186][ T31] ? __pfx_kthread+0x10/0x10 [ 316.791805][ T31] ? rcu_is_watching+0x12/0xc0 [ 316.796563][ T31] ? __pfx_kthread+0x10/0x10 [ 316.801154][ T31] ret_from_fork+0x983/0xb10 [ 316.805788][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 316.810878][ T31] ? __switch_to+0x7af/0x10d0 [ 316.815580][ T31] ? __pfx_kthread+0x10/0x10 [ 316.820163][ T31] ret_from_fork_asm+0x1a/0x30 [ 316.825006][ T31] [ 316.828024][ T31] INFO: task kworker/0:6:5931 blocked for more than 144 seconds. [ 316.835803][ T31] Tainted: G L syzkaller #0 [ 316.842348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.851002][ T31] task:kworker/0:6 state:D stack:23432 pid:5931 tgid:5931 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 316.863080][ T31] Workqueue: usb_hub_wq hub_event [ 316.868127][ T31] Call Trace: [ 316.871598][ T31] [ 316.874534][ T31] ? __schedule+0x10b9/0x6150 [ 316.879189][ T31] __schedule+0x1139/0x6150 [ 316.883718][ T31] ? __lock_acquire+0x436/0x2890 [ 316.888658][ T31] ? __pfx___schedule+0x10/0x10 [ 316.893543][ T31] ? find_held_lock+0x2b/0x80 [ 316.898222][ T31] ? schedule+0x2d7/0x3a0 [ 316.902614][ T31] schedule+0xe7/0x3a0 [ 316.906683][ T31] schedule_preempt_disabled+0x13/0x30 [ 316.912162][ T31] __mutex_lock+0xc69/0x1ca0 [ 316.916756][ T31] ? rfkill_register+0x3a/0xb40 [ 316.921682][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 316.926714][ T31] ? lockdep_init_map_type+0x5c/0x270 [ 316.932112][ T31] ? __init_waitqueue_head+0xca/0x150 [ 316.937516][ T31] ? rfkill_register+0x3a/0xb40 [ 316.942392][ T31] ? rfkill_alloc+0x25b/0x330 [ 316.947058][ T31] rfkill_register+0x3a/0xb40 [ 316.951777][ T31] nfc_register_device+0x11f/0x410 [ 316.956887][ T31] nci_register_device+0x7f1/0xb80 [ 316.962061][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 316.967687][ T31] ? nci_hci_allocate+0x29d/0x330 [ 316.972730][ T31] nfcmrvl_nci_register_dev+0x28d/0x520 [ 316.978271][ T31] nfcmrvl_probe+0x705/0xa10 [ 316.983051][ T31] ? __pfx_nfcmrvl_probe+0x10/0x10 [ 316.988150][ T31] ? usb_disable_lpm+0x49a/0x610 [ 316.993125][ T31] usb_probe_interface+0x303/0xa80 [ 316.998234][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 317.003904][ T31] really_probe+0x241/0xb20 [ 317.008439][ T31] __driver_probe_device+0x1de/0x470 [ 317.013744][ T31] driver_probe_device+0x4c/0x1b0 [ 317.018768][ T31] __device_attach_driver+0x1df/0x350 [ 317.025832][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 317.031796][ T31] bus_for_each_drv+0x159/0x1e0 [ 317.036656][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 317.037499][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.042299][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.053487][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.053490][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.065560][ T31] __device_attach+0x1e4/0x4e0 [ 317.070336][ T31] ? __pfx___device_attach+0x10/0x10 [ 317.075773][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 317.080975][ T31] device_initial_probe+0xaa/0xc0 [ 317.086027][ T31] bus_probe_device+0x64/0x150 [ 317.090785][ T31] device_add+0x116e/0x1980 [ 317.095459][ T31] ? __pfx_device_add+0x10/0x10 [ 317.100292][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 317.105752][ T31] usb_set_configuration+0x1187/0x1e50 [ 317.111256][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 317.117315][ T31] usb_generic_driver_probe+0xb1/0x110 [ 317.122822][ T31] usb_probe_device+0xef/0x400 [ 317.127585][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 317.132971][ T31] really_probe+0x241/0xb20 [ 317.137474][ T31] __driver_probe_device+0x1de/0x470 [ 317.142805][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 317.148260][ T31] driver_probe_device+0x4c/0x1b0 [ 317.153295][ T31] __device_attach_driver+0x1df/0x350 [ 317.158665][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 317.164591][ T31] bus_for_each_drv+0x159/0x1e0 [ 317.169439][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 317.174835][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 317.180027][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 317.185885][ T31] __device_attach+0x1e4/0x4e0 [ 317.190650][ T31] ? __pfx___device_attach+0x10/0x10 [ 317.195961][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 317.201360][ T31] device_initial_probe+0xaa/0xc0 [ 317.206383][ T31] bus_probe_device+0x64/0x150 [ 317.211202][ T31] device_add+0x116e/0x1980 [ 317.215705][ T31] ? __pfx_device_add+0x10/0x10 [ 317.220543][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 317.226308][ T31] usb_new_device+0xd07/0x1a90 [ 317.231071][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 317.236113][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 317.241333][ T31] ? mark_held_locks+0x49/0x80 [ 317.246077][ T31] hub_event+0x313a/0x52f0 [ 317.250483][ T31] ? __pfx_hub_event+0x10/0x10 [ 317.255258][ T31] ? debug_objects_fill_pool+0x300/0x660 [ 317.260883][ T31] ? finish_task_switch.isra.0+0x202/0xbd0 [ 317.266735][ T31] ? rcu_is_watching+0x12/0xc0 [ 317.271544][ T31] process_one_work+0x9ba/0x1b20 [ 317.276485][ T31] ? __pfx_process_one_work+0x10/0x10 [ 317.281886][ T31] ? assign_work+0x1a0/0x250 [ 317.286475][ T31] worker_thread+0x6c8/0xf10 [ 317.291048][ T31] ? __pfx_worker_thread+0x10/0x10 [ 317.296161][ T31] kthread+0x3c5/0x780 [ 317.300222][ T31] ? __pfx_kthread+0x10/0x10 [ 317.304843][ T31] ? rcu_is_watching+0x12/0xc0 [ 317.309596][ T31] ? __pfx_kthread+0x10/0x10 [ 317.314352][ T31] ret_from_fork+0x983/0xb10 [ 317.318925][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 317.324063][ T31] ? __switch_to+0x7af/0x10d0 [ 317.328735][ T31] ? __pfx_kthread+0x10/0x10 [ 317.333399][ T31] ret_from_fork_asm+0x1a/0x30 [ 317.338180][ T31] [ 317.341348][ T31] INFO: task syz.3.207:6775 blocked for more than 144 seconds. [ 317.348885][ T31] Tainted: G L syzkaller #0 [ 317.358024][ T31] Blocked by coredump. [ 317.362642][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.371306][ T31] task:syz.3.207 state:D stack:25704 pid:6775 tgid:6771 ppid:5820 task_flags:0x40054c flags:0x00080003 [ 317.383236][ T31] Call Trace: [ 317.386502][ T31] [ 317.389409][ T31] ? __schedule+0x10b9/0x6150 [ 317.394098][ T31] __schedule+0x1139/0x6150 [ 317.398608][ T31] ? __pfx___schedule+0x10/0x10 [ 317.403473][ T31] ? find_held_lock+0x2b/0x80 [ 317.408145][ T31] ? schedule+0x2d7/0x3a0 [ 317.412482][ T31] schedule+0xe7/0x3a0 [ 317.416543][ T31] schedule_preempt_disabled+0x13/0x30 [ 317.422213][ T31] __mutex_lock+0xc69/0x1ca0 [ 317.426812][ T31] ? find_held_lock+0x2b/0x80 [ 317.431530][ T31] ? rfkill_unregister+0xec/0x2c0 [ 317.436571][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 317.441638][ T31] ? kobject_put+0xaf/0x6f0 [ 317.446139][ T31] ? device_del+0x6b6/0x9f0 [ 317.450624][ T31] ? __pfx_device_del+0x10/0x10 [ 317.455534][ T31] ? rfkill_unregister+0xec/0x2c0 [ 317.460550][ T31] rfkill_unregister+0xec/0x2c0 [ 317.465449][ T31] nfc_unregister_device+0x94/0x390 [ 317.470652][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 317.476435][ T31] virtual_ncidev_close+0x4b/0xa0 [ 317.481499][ T31] __fput+0x402/0xb70 [ 317.485460][ T31] task_work_run+0x150/0x240 [ 317.490023][ T31] ? __pfx_task_work_run+0x10/0x10 [ 317.495157][ T31] do_exit+0x87f/0x2bd0 [ 317.499314][ T31] ? __pfx_do_exit+0x10/0x10 [ 317.504437][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 317.509474][ T31] ? find_held_lock+0x2b/0x80 [ 317.514187][ T31] do_group_exit+0xd3/0x2a0 [ 317.518688][ T31] get_signal+0x2671/0x26d0 [ 317.523231][ T31] ? putname+0xf5/0x1a0 [ 317.527383][ T31] ? __pfx_get_signal+0x10/0x10 [ 317.532413][ T31] ? do_futex+0x122/0x350 [ 317.536733][ T31] arch_do_signal_or_restart+0x8f/0x7e0 [ 317.542323][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 317.548478][ T31] ? __x64_sys_openat+0x174/0x210 [ 317.553524][ T31] ? __pfx___x64_sys_futex+0x10/0x10 [ 317.558817][ T31] exit_to_user_mode_loop+0x8c/0x540 [ 317.564147][ T31] do_syscall_64+0x4ee/0xf80 [ 317.568735][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.574653][ T31] RIP: 0033:0x7f615ab8f749 [ 317.579066][ T31] RSP: 002b:00007f615ba2e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.587529][ T31] RAX: fffffffffffffe00 RBX: 00007f615ade6098 RCX: 00007f615ab8f749 [ 317.595554][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f615ade6098 [ 317.603598][ T31] RBP: 00007f615ade6090 R08: 0000000000000000 R09: 0000000000000000 [ 317.611586][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.619552][ T31] R13: 00007f615ade6128 R14: 00007ffca9e4e1a0 R15: 00007ffca9e4e288 [ 317.627599][ T31] [ 317.630637][ T31] [ 317.630637][ T31] Showing all locks held in the system: [ 317.638391][ T31] 4 locks held by kworker/0:0/9: [ 317.643472][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 317.653942][ T31] #1: ffffc900000e7c90 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 317.664334][ T31] #2: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 317.674019][ T31] #3: ffff88802068a100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x310 [ 317.683047][ T31] 1 lock held by khungtaskd/31: [ 317.687870][ T31] #0: ffffffff8e3c9620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 317.697735][ T31] 2 locks held by getty/5573: [ 317.702429][ T31] #0: ffff8880373c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 317.712167][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 317.722291][ T31] 1 lock held by syz-executor/5820: [ 317.727471][ T31] #0: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 317.737607][ T31] 3 locks held by kworker/0:5/5928: [ 317.742919][ T31] #0: ffff88813ff51948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 317.753546][ T31] #1: ffffc9000534fc90 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 317.766446][ T31] #2: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 317.777904][ T31] 7 locks held by kworker/0:6/5931: [ 317.783149][ T31] #0: ffff888020abd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 317.793967][ T31] #1: ffffc90005397c90 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 317.805212][ T31] #2: ffff88802a0fe198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x52f0 [ 317.814121][ T31] #3: ffff888059400198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4e0 [ 317.823972][ T31] #4: ffff888078bb4160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4e0 [ 317.833255][ T31] #5: ffff888078bb3100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x410 [ 317.842875][ T31] #6: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 317.852831][ T31] 2 locks held by syz.3.207/6775: [ 317.857838][ T31] #0: ffff88802068a100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x390 [ 317.867769][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 317.877913][ T31] 2 locks held by syz-executor/7018: [ 317.883210][ T31] #0: ffff88802b0ca918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 317.892647][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 317.902603][ T31] 2 locks held by syz.1.323/7356: [ 317.907599][ T31] #0: ffff88804dbc60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 317.917351][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 317.927299][ T31] 2 locks held by syz-executor/7475: [ 317.932577][ T31] #0: ffff888047faa918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 317.942008][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 317.951957][ T31] 2 locks held by syz-executor/7602: [ 317.957225][ T31] #0: ffff88803247b918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 317.966636][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 317.976681][ T31] 2 locks held by syz-executor/7953: [ 317.982193][ T31] #0: ffff88802b671118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 317.991609][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 318.001566][ T31] 2 locks held by syz-executor/8112: [ 318.006842][ T31] #0: ffff8880796af118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_write+0x2b4/0x480 [ 318.016308][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 318.026263][ T31] 2 locks held by syz.4.514/8135: [ 318.031305][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 318.039719][ T31] #1: ffffffff905f9f08 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x136/0x750 [ 318.049734][ T31] 1 lock held by syz.2.516/8140: [ 318.054667][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 318.063290][ T31] 1 lock held by syz.0.519/8155: [ 318.068216][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 318.076660][ T31] 1 lock held by syz-executor/8159: [ 318.081969][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 318.090384][ T31] 1 lock held by syz-executor/8161: [ 318.095572][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 318.104051][ T31] 1 lock held by syz-executor/8163: [ 318.109217][ T31] #0: ffffffff8f0aa968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x450 [ 318.117706][ T31] [ 318.120014][ T31] ============================================= [ 318.120014][ T31] [ 318.128711][ T31] NMI backtrace for cpu 1 [ 318.128725][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 318.128741][ T31] Tainted: [L]=SOFTLOCKUP [ 318.128744][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.128751][ T31] Call Trace: [ 318.128754][ T31] [ 318.128759][ T31] dump_stack_lvl+0x116/0x1f0 [ 318.128776][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 318.128793][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 318.128806][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 318.128824][ T31] sys_info+0x133/0x180 [ 318.128842][ T31] watchdog+0xe66/0x1180 [ 318.128858][ T31] ? rcu_is_watching+0x12/0xc0 [ 318.128869][ T31] ? __pfx_watchdog+0x10/0x10 [ 318.128879][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.128893][ T31] ? __kthread_parkme+0x19e/0x250 [ 318.128905][ T31] ? __pfx_watchdog+0x10/0x10 [ 318.128916][ T31] kthread+0x3c5/0x780 [ 318.128929][ T31] ? __pfx_kthread+0x10/0x10 [ 318.128942][ T31] ? rcu_is_watching+0x12/0xc0 [ 318.128951][ T31] ? __pfx_kthread+0x10/0x10 [ 318.128964][ T31] ret_from_fork+0x983/0xb10 [ 318.128976][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 318.128989][ T31] ? __switch_to+0x7af/0x10d0 [ 318.129003][ T31] ? __pfx_kthread+0x10/0x10 [ 318.129016][ T31] ret_from_fork_asm+0x1a/0x30 [ 318.129039][ T31] [ 318.129043][ T31] Sending NMI from CPU 1 to CPUs 0: [ 318.268688][ C0] NMI backtrace for cpu 0 [ 318.268705][ C0] CPU: 0 UID: 0 PID: 1157 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.268727][ C0] Tainted: [L]=SOFTLOCKUP [ 318.268733][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.268743][ C0] Workqueue: events_unbound toggle_allocation_gate [ 318.268765][ C0] RIP: 0010:switch_mm_irqs_off+0x468/0x800 [ 318.268784][ C0] Code: e9 53 fe ff ff 83 fd 07 0f 87 54 02 00 00 48 89 e8 be 08 00 00 00 48 c1 f8 06 49 8d 7c c5 00 e8 2e 0b ba 00 f0 49 0f ab 6d 00 25 fd ff ff 48 89 e8 4c 09 f0 a8 02 0f 84 ba fc ff ff 41 83 e6 [ 318.268799][ C0] RSP: 0018:ffffc900042cf848 EFLAGS: 00000046 [ 318.268811][ C0] RAX: 0000000000000001 RBX: ffff88813ff58000 RCX: ffffffff816ebd52 [ 318.268822][ C0] RDX: ffffed1027feb171 RSI: 0000000000000008 RDI: ffff88813ff58b80 [ 318.268832][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1027feb170 [ 318.268841][ C0] R10: ffff88813ff58b87 R11: ffff888028d854b0 R12: ffffffff8e577500 [ 318.268852][ C0] R13: ffff88813ff58b80 R14: 0000000000000000 R15: ffff888028d84f18 [ 318.268862][ C0] FS: 0000000000000000(0000) GS:ffff8881248f6000(0000) knlGS:0000000000000000 [ 318.268877][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.268887][ C0] CR2: 000055bac643dad0 CR3: 000000000e184000 CR4: 00000000003526f0 [ 318.268897][ C0] Call Trace: [ 318.268902][ C0] [ 318.268911][ C0] use_temporary_mm+0x8c/0x150 [ 318.268927][ C0] ? kmem_cache_alloc_lru_noprof+0x9d/0x770 [ 318.268943][ C0] __text_poke+0x3a6/0xb00 [ 318.268960][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 318.268981][ C0] ? __pfx___text_poke+0x10/0x10 [ 318.269000][ C0] ? kmem_cache_alloc_lru_noprof+0x9d/0x770 [ 318.269017][ C0] smp_text_poke_batch_finish+0x4f1/0xdb0 [ 318.269041][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 318.269064][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 318.269091][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 318.269113][ C0] jump_label_update+0x376/0x550 [ 318.269132][ C0] static_key_disable_cpuslocked+0x158/0x1b0 [ 318.269152][ C0] static_key_disable+0x1a/0x20 [ 318.269170][ C0] toggle_allocation_gate+0x145/0x280 [ 318.269188][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 318.269208][ C0] ? rcu_is_watching+0x12/0xc0 [ 318.269224][ C0] process_one_work+0x9ba/0x1b20 [ 318.269248][ C0] ? __pfx_process_one_work+0x10/0x10 [ 318.269270][ C0] ? assign_work+0x1a0/0x250 [ 318.269289][ C0] worker_thread+0x6c8/0xf10 [ 318.269312][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.269331][ C0] kthread+0x3c5/0x780 [ 318.269349][ C0] ? __pfx_kthread+0x10/0x10 [ 318.269366][ C0] ? rcu_is_watching+0x12/0xc0 [ 318.269380][ C0] ? __pfx_kthread+0x10/0x10 [ 318.269396][ C0] ret_from_fork+0x983/0xb10 [ 318.269412][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 318.269429][ C0] ? __switch_to+0x7af/0x10d0 [ 318.269447][ C0] ? __pfx_kthread+0x10/0x10 [ 318.269465][ C0] ret_from_fork_asm+0x1a/0x30 [ 318.269493][ C0] [ 318.563438][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 318.570283][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 318.580934][ T31] Tainted: [L]=SOFTLOCKUP [ 318.585230][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.595255][ T31] Call Trace: [ 318.598505][ T31] [ 318.601409][ T31] dump_stack_lvl+0x3d/0x1f0 [ 318.605978][ T31] vpanic+0x640/0x6f0 [ 318.609933][ T31] panic+0xca/0xd0 [ 318.613626][ T31] ? __pfx_panic+0x10/0x10 [ 318.618011][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 318.623973][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 318.630131][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 318.636267][ T31] ? watchdog+0xe83/0x1180 [ 318.640659][ T31] ? watchdog+0xe76/0x1180 [ 318.645047][ T31] watchdog+0xe94/0x1180 [ 318.649264][ T31] ? rcu_is_watching+0x12/0xc0 [ 318.653997][ T31] ? __pfx_watchdog+0x10/0x10 [ 318.658652][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.663825][ T31] ? __kthread_parkme+0x19e/0x250 [ 318.668820][ T31] ? __pfx_watchdog+0x10/0x10 [ 318.673475][ T31] kthread+0x3c5/0x780 [ 318.677538][ T31] ? __pfx_kthread+0x10/0x10 [ 318.682117][ T31] ? rcu_is_watching+0x12/0xc0 [ 318.686863][ T31] ? __pfx_kthread+0x10/0x10 [ 318.691437][ T31] ret_from_fork+0x983/0xb10 [ 318.696009][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 318.701104][ T31] ? __switch_to+0x7af/0x10d0 [ 318.705769][ T31] ? __pfx_kthread+0x10/0x10 [ 318.710347][ T31] ret_from_fork_asm+0x1a/0x30 [ 318.715109][ T31] [ 318.718500][ T31] Kernel Offset: disabled [ 318.722828][ T31] Rebooting in 86400 seconds..