last executing test programs: 5.962696005s ago: executing program 0 (id=1517): syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101440, 0xcd) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffff1, 0x145e42) getdents64(r2, &(0x7f00000000c0)=""/42, 0x2a) getuid() r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x202, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) epoll_create1(0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r11, 0x0) socket$tipc(0x1e, 0x5, 0x0) 5.904833532s ago: executing program 0 (id=1518): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r3, 0x0, 0x20, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000cc9000/0x4000)=nil, 0x4000, 0x1000002, 0x20010, r0, 0x200000) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) r5 = dup(r4) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x50060}, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"}) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{}, 0x3}}, 0x10) socket$tipc(0x1e, 0x7, 0x0) listen(r0, 0x100) 5.715899411s ago: executing program 1 (id=1519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc0ffffff}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xcb}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.491516256s ago: executing program 1 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r3, &(0x7f0000000880), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r0, 0x9, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0xfffffffffffffea8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f0000feffff3d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) mount$9p_fd(0x0, 0x0, 0x0, 0x1800848, &(0x7f00000003c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@msize={'msize', 0x3d, 0x7ff}}, {@fscache}, {@cache_mmap}, {@fscache}, {@cache_none}, {@cache_mmap}, {@access_user}, {@version_u}]}}) 5.35601961s ago: executing program 3 (id=1523): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001000370429bd7000fcdbdf25d6918de2", @ANYRES32=r2, @ANYBLOB="890c040000000000440012800b000100697036746e6c000034000280080008003200000014000200fc0100000000000000000000000000e306000f0001000000040013000800140034c30000"], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 5.264687164s ago: executing program 3 (id=1524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009975ad070000700000001400040073797a6b616c6c6572300000000000000800050007"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 4.781201065s ago: executing program 4 (id=1526): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000061401"], 0x40}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200f07"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x8e45fecbe788cee3, 0x0, 0x2000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.734816425s ago: executing program 3 (id=1527): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x20000000}, 0x28) 4.695566849s ago: executing program 3 (id=1528): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x551003, 0x60) preadv(r5, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120141014813442024040075ee6901020301090212000100001000090420d54fe1b8070096d1ca00"], 0x0) read$FUSE(r5, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r4, 0xff08, 0x0) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x446143, 0x0) write$rfkill(r7, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000240)={{0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_clone3(0x0, 0x64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 4.587685362s ago: executing program 4 (id=1530): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x7, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x8}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x7}, {0x8, 0xf2, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x2, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x4000006, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xffff4fd7, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x20009, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x7b89}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x3ff}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000}, {0x3, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3ed, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x2401, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r5 = inotify_init1(0x80800) socket$inet6(0xa, 0x3, 0x5) sched_getattr(r2, &(0x7f0000000240)={0x38}, 0x38, 0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, 0x8) sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x105, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000034000900000000caae9e7f531771b3be0000000000030000000c000300332f34122ee5f6c7"], 0x20}}, 0x4000010) write$6lowpan_control(r3, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 4.224538546s ago: executing program 1 (id=1531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x1, 0x0, @c}, 0x29, r4) add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='P', 0x1, r4) keyctl$read(0xb, r4, &(0x7f0000002e40)=""/72, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xfb, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r5, 0x1, &(0x7f00000004c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}]) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f0000000640)={0x81, 0x0, 'client0\x00', 0x0, "1e1dc136d6f4bdda", "a973ee4846d9504bc69a10238bcd150b0e95547bd679f139106e78e15913759d"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003c0007010000000000400000017c00000400fc80100001805fd05a607fd4804053000000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x68a4c0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r10, 0xc008ae09, &(0x7f0000000700)={0x5, 0x0, [{0x80000007, 0xfffffff9, 0x4, 0x80000001, 0x0, 0x6, 0x2}, {0xa, 0x0, 0x2, 0x89b8, 0x8, 0x3, 0x1}, {0x6, 0xf, 0x2, 0x8, 0x604a, 0x9}, {0x0, 0x4, 0x4, 0x1, 0x4, 0x1, 0x3}, {0x80000019, 0x80000000, 0x4, 0x7f, 0x8, 0x6, 0x2000400}]}) keyctl$search(0xa, r4, &(0x7f0000000280)='keyring\x00', &(0x7f0000000300)={'syz', 0x3}, r4) 4.054773002s ago: executing program 1 (id=1532): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="0202200012000000000000000000000004000300fcffffff00000000000000000000010000000043ca00000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000b70002fa01000080030005000000000002"], 0x90}, 0x1, 0x0, 0x20}, 0x0) 3.951930738s ago: executing program 1 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000001805060003007665746831496d6163767461700000000900010073797a31"], 0xe8}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x9, 0xd6, 0xc6, 0x10, 0x908, 0x1ff, 0xc0c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x1c, 0x0, 0x64, [{{0x9, 0x4, 0x66, 0x2, 0x1, 0x98, 0xc6, 0x29, 0x5, [], [{{0x9, 0x5, 0xf, 0xc, 0x40, 0x5, 0xe, 0x6}}]}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) 2.647157221s ago: executing program 0 (id=1537): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_clone(0x8212080, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008c0, &(0x7f000001b700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',directio,dfltuid=', @ANYRESHEX=r4, @ANYBLOB=',directio,cache=loose,permit_directio,smackfstransm', @ANYRESDEC=r4, @ANYBLOB="2c61707072616973655f747970653d696d61736967a04958493e5b2fa36383b3a1af0e691e3eb1000000000000000000000000c044fde34dbe9bbf29b22cc1f438e22e4432c2d7dc269c00bb5517a98e1505c9221a777b9dcdd27b6523ba24c7d9f867f67c24f8c25c0d2d54efe9e1534885aeb10aa38b9dddffb9f473c831cbce8969db36491d59000000d719b4694cf114790000000000000000000000000000437e01464bfddc96966062010433e141f447cc39251bdfa1ebd03d754993439c6c466f6f7980758f613e9b585116f27453e68187b84459b5084ad096d3bd327dd1357f8ce71b3c129ee2bac9290651664e8739076ed11fb625dc1a4f7112ac50547fc8587f5f2ceff2146a18fb469ea16494561c2930c550d6a362555ac6e543ec5f3b008b5877e8d40f6adc378db0db1b127f3c698309b728defcf259ec12f4268a7c52047cd5733d62d2efc42d1765e517a253027ac98837e0c374686cd591e804b4f26efce7786a79390e04d489158552"]) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) tkill(r7, 0x3a) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000040)={0x5, 0x9808fb, 0x3}) read$msr(r5, &(0x7f0000002700)=""/102392, 0x5271) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) r8 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) setgroups(0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x80800) 2.5986187s ago: executing program 0 (id=1538): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) r0 = syz_open_dev$cec(0x0, 0x0, 0x8040) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000180), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x1020, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000003c0)=0x8) read$msr(0xffffffffffffffff, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000400)="87e2a5dcfe7bd0ec490df022c5ecbf26321048e097d1bcae18936f8aef0fa7241fe604d2e677275b268c7011ad3abac5f0f3f0c23912cb3cbb668a01a8776a0bb97ca5c03884cf1a59d80b66b75bcfb335336bd1da8cdb2ae95212d3342c2189bd8a5013faca9f77e1779c00d16f84a3c985a9bf13b0af889d101ca4a8f3cda53c65e9550e63f5c888dd39e0669f080dd4358aca3577461f4ba23ac4d12e3296deec8fb07b7345c1843d3b6c04c04d56e508756a16648b5f65dbeaf7ec2321f7572c7d73e08005fd61969f9fb18aaa275236", 0xd2}], 0x1, &(0x7f0000000b00)=[@rights={{0xfffffffffffffd37, 0x1, 0x1, [r6, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r0, r2, r3, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x88, 0x10008811}}], 0x1, 0x200408a5) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r7}, 0x38) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc000000000000"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.519676912s ago: executing program 1 (id=1539): pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x5}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc1, 0x13, 0xa3, 0x20, 0x112a, 0x1, 0xd811, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x8, [{{0x9, 0x4, 0x53, 0x0, 0x2, 0x5, 0x8d, 0x9d, 0x0, [], [{{0x9, 0x5, 0xf, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000700)={0x0, 0x278, 0x8, 0x0, 0x10000203}, &(0x7f00000004c0)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) sync() recvmsg$unix(0xffffffffffffffff, 0x0, 0x3121) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x0, r0, 0x2}) readv(r8, &(0x7f0000000900)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000000780)=""/142, 0x8e}, {&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f00000002c0)=""/21, 0x15}], 0x5) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000580)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r10, &(0x7f0000000780)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r11, 0x4c80, 0x7000000) syz_emit_vhci(&(0x7f0000000680)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_num_supported_adv_sets={{0x2}, {0x0, 0xeb}}}}, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.290321126s ago: executing program 2 (id=1540): socket(0x2b, 0x1, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2c, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) 2.216080608s ago: executing program 2 (id=1541): syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timerfd_create(0x0, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x4}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(r0, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x8080000, 0x0, &(0x7f0000000100)}, {0x5000, 0xf, &(0x7f00000001c0)=""/15}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') 1.555547247s ago: executing program 0 (id=1542): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa32, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = getpgrp(0xffffffffffffffff) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc4}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x0, 0xf, &(0x7f0000002740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) (async, rerun: 32) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) (rerun: 32) pwritev(r6, &(0x7f00000000c0), 0x300, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) (async, rerun: 64) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) (async, rerun: 64) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) (rerun: 32) r8 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0x8, 0x21, {0x21, 0xe, "ff719f72a2cc9ca731e10356950036c0a63a1626ac1479c21d67e462dd8c14"}}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0xe, 0x4, 0x2, 0x3, 0x6}}}, &(0x7f00000007c0)={0x84, 0x0, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xdb}, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4}, 0x0, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x9}, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x6}, 0x0, &(0x7f0000000640)={0x40, 0x17, 0x6}, 0x0, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0xfffc}, 0x0, 0x0, 0x0}) (async) fallocate(r7, 0x0, 0x0, 0x1000f4) (async) r9 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r9, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 1.555352096s ago: executing program 3 (id=1543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x31a8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03004000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) 1.26751398s ago: executing program 4 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009975ad070000700000001400040073797a6b616c6c6572300000000000000800050007"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1.188456066s ago: executing program 4 (id=1545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000003000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c0002800800014000000001"], 0xd0}}, 0x0) 1.127821817s ago: executing program 0 (id=1546): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000001080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000080)={@host, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 1.127096744s ago: executing program 4 (id=1547): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0xffffffffffff6260, {{0x7, 0x5, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000001c0)={0xc80, 0x1000, 0x30, 0xf0, 0x0, 0x4d8, 0x8, 0x0, {0x8000001, 0x40, 0x1}, {0x0, 0x20000004}, {0x3a8}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x400, 0x0, 0x0, 0x21, 0x301, 0x0, 0x7}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r6, 0x2030}], 0x1, 0x0, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r9 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000005c0)=r9, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x26, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.122177084s ago: executing program 2 (id=1548): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="0202200012000000000000000000000004000300fcffffff00000000000000000000010000000043ca00000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000b70002fa01000080030005000000000002"], 0x90}, 0x1, 0x0, 0x900}, 0x0) 1.06738281s ago: executing program 2 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xcc, &(0x7f00000004c0)=ANY=[], 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/warn_count', 0x280000, 0x18) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000440)) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r6, &(0x7f0000000300), 0x4003) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x24c, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x807}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x400, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x694}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x59300442}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5cf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3fb717ad}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}]}]}, 0x24c}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) 995.866786ms ago: executing program 3 (id=1550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x4000000000009, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010000000020000000000000000010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) request_key(&(0x7f00000001c0)='blacklist\x00', 0x0, &(0x7f0000000240)='\x05]!*,.)!\xfb&\\#\x00', 0xfffffffffffffff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') socket$inet(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x42002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000001100)={0x0, 0xaee2, 0x0, 0x3, 0x1f0, 0x0, r0}, &(0x7f0000000380), &(0x7f0000000280)) 128.904081ms ago: executing program 4 (id=1551): socket(0x2b, 0x1, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x14, 0x14, 0x601, 0x3, 0x0, {0x2c, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) 68.936337ms ago: executing program 2 (id=1552): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000004001a80100003800c0005800800000f00000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a400000000060000c"], 0x270}}, 0x0) 0s ago: executing program 2 (id=1553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000002c00000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) kernel console output (not intermixed with test programs): 8913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.840916][ T8913] overlayfs: failed to resolve './file0': -2 [ 188.850007][ T44] usb 1-1: device descriptor read/64, error -71 [ 188.918097][ T8913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.069987][ T5895] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 189.093605][ T5895] usb 5-1: USB disconnect, device number 24 [ 189.148589][ T44] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 189.288588][ T44] usb 1-1: device descriptor read/64, error -71 [ 189.301535][ T5161] usb 4-1: USB disconnect, device number 22 [ 189.429966][ T44] usb usb1-port1: attempt power cycle [ 189.802867][ T44] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 190.048840][ T44] usb 1-1: device descriptor read/8, error -71 [ 190.068568][ T5927] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 190.110371][ T8971] netlink: 'syz.4.874': attribute type 1 has an invalid length. [ 190.127569][ T8971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.167609][ T8971] ip6tnl1: entered allmulticast mode [ 190.177204][ T8971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.186669][ T8971] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 190.200044][ T8971] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 190.251226][ T5927] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 190.260214][ T5927] usb 2-1: config 0 has no interface number 0 [ 190.266503][ T5927] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 190.311499][ T5927] usb 2-1: New USB device found, idVendor=0499, idProduct=6bab, bcdDevice=68.2f [ 190.320830][ T5927] usb 2-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 190.329508][ T5927] usb 2-1: Product: syz [ 190.333831][ T5927] usb 2-1: Manufacturer: syz [ 190.338758][ T5927] usb 2-1: SerialNumber: syz [ 190.345078][ T5927] usb 2-1: config 0 descriptor?? [ 190.348490][ T44] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 190.369553][ T44] usb 1-1: device descriptor read/8, error -71 [ 190.489328][ T44] usb usb1-port1: unable to enumerate USB device [ 190.628621][ T44] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 190.699585][ T8976] mkiss: ax0: crc mode is auto. [ 190.705892][ T30] audit: type=1400 audit(1755865510.701:518): avc: denied { listen } for pid=8963 comm="syz.1.872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 190.758676][ T5895] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 190.766326][ T44] usb 1-1: device descriptor read/64, error -71 [ 190.923246][ T5895] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 190.932609][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.940892][ T5895] usb 4-1: Product: syz [ 190.952382][ T5895] usb 4-1: Manufacturer: syz [ 190.957425][ T5895] usb 4-1: SerialNumber: syz [ 190.963538][ T5895] usb 4-1: config 0 descriptor?? [ 191.008578][ T44] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 191.175742][ T5895] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 191.241590][ T30] audit: type=1400 audit(1755865511.241:519): avc: denied { watch } for pid=8977 comm="syz.0.876" path="/178/file0" dev="tmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.264604][ T30] audit: type=1400 audit(1755865511.241:520): avc: denied { watch_sb watch_reads } for pid=8977 comm="syz.0.876" path="/178/file0" dev="tmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 191.396693][ T5895] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 191.410547][ T5895] usb 4-1: USB disconnect, device number 23 [ 192.422721][ T8998] netlink: 'syz.3.880': attribute type 11 has an invalid length. [ 192.749113][ T5927] usb 2-1: USB disconnect, device number 28 [ 192.798904][ T30] audit: type=1400 audit(1755865512.791:521): avc: denied { ioctl } for pid=9012 comm="syz.2.884" path="socket:[21442]" dev="sockfs" ino=21442 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 193.238954][ T30] audit: type=1400 audit(1755865513.211:522): avc: denied { bind } for pid=9022 comm="syz.1.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.388623][ T24] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 193.568644][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 193.576040][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 193.609512][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.625318][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 193.746205][ T9045] SELinux: policydb version 531 does not match my version range 15-35 [ 193.910389][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.931895][ T9045] SELinux: failed to load policy [ 193.932056][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 193.969524][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 193.977065][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 193.993083][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.009047][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.020595][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 194.040844][ T24] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 194.082553][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 194.116041][ T24] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 194.147630][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 194.173969][ T24] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 194.211472][ T24] usb 5-1: string descriptor 0 read error: -22 [ 194.217719][ T24] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 194.230988][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.246739][ T24] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 194.548535][ T5895] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 194.731010][ T30] audit: type=1400 audit(1755865514.731:523): avc: denied { create } for pid=9065 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 194.821569][ T30] audit: type=1400 audit(1755865514.751:524): avc: denied { sys_admin } for pid=9065 comm="syz.1.901" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 194.888515][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 194.895095][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.962832][ T5895] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 195.370626][ T5895] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 195.428348][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.440353][ T5895] usb 4-1: Product: syz [ 195.444622][ T5895] usb 4-1: Manufacturer: syz [ 195.450970][ T5895] usb 4-1: SerialNumber: syz [ 195.457075][ T5895] usb 4-1: config 0 descriptor?? [ 195.580360][ T5895] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 195.846331][ T9092] mkiss: ax0: crc mode is auto. [ 195.854999][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.921713][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.025957][ T9096] kvm: kvm [9057]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x26 [ 196.874827][ T30] audit: type=1400 audit(1755865516.871:525): avc: denied { read } for pid=9111 comm="syz.0.912" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 196.898105][ T30] audit: type=1400 audit(1755865516.871:526): avc: denied { open } for pid=9111 comm="syz.0.912" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 197.472769][ T24] usb 5-1: USB disconnect, device number 25 [ 197.788552][ T9112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.794597][ T9112] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.830647][ T9112] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 197.837271][ T9112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.844814][ T9112] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 197.852069][ T9112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.858136][ T9112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 197.865273][ T9112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.871761][ T9112] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 198.001113][ T24] usb 4-1: USB disconnect, device number 25 [ 198.984400][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 199.023655][ T30] audit: type=1400 audit(1755865519.021:527): avc: denied { write } for pid=9160 comm="syz.0.927" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 199.048553][ T5927] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 199.181409][ T24] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 199.198583][ T24] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 199.228025][ T24] usb 4-1: config 220 interface 0 has no altsetting 0 [ 199.237765][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 199.258721][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.266901][ T24] usb 4-1: Product: syz [ 199.268582][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 199.276387][ T24] usb 4-1: Manufacturer: syz [ 199.281528][ T24] usb 4-1: SerialNumber: syz [ 199.325746][ T5927] usb 5-1: config 9 has an invalid interface number: 70 but max is 0 [ 199.334160][ T5927] usb 5-1: config 9 has no interface number 0 [ 199.362053][ T5927] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.7d [ 199.371437][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.421950][ T5927] usb 5-1: Product: syz [ 199.431152][ T5927] usb 5-1: Manufacturer: syz [ 199.435948][ T5927] usb 5-1: SerialNumber: syz [ 199.438610][ T44] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 199.500393][ T24] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 199.561108][ T24] usb 4-1: No valid video chain found. [ 199.593467][ T24] usb 4-1: USB disconnect, device number 26 [ 199.612716][ T44] usb 2-1: No LPM exit latency info found, disabling LPM. [ 199.621331][ T44] usb 2-1: config 1 has an invalid descriptor of length 198, skipping remainder of the config [ 199.641387][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.668878][ T5927] ttusb_dec_send_command: command bulk message failed: error -22 [ 199.680694][ T5927] ttusb-dec 5-1:9.70: probe with driver ttusb-dec failed with error -22 [ 199.714268][ T5927] usb 5-1: USB disconnect, device number 26 [ 199.858615][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 199.864788][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 199.870992][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 199.939921][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 200.478635][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 200.649843][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 200.662090][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 200.678529][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.691346][ T24] usb 5-1: config 0 descriptor?? [ 200.768514][ T5895] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 200.898774][ T5895] usb 4-1: device descriptor read/64, error -71 [ 200.906157][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 200.982264][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.996305][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 201.003765][ T24] usb 5-1: media controller created [ 201.027132][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.057157][ T30] audit: type=1400 audit(1755865521.051:528): avc: denied { write } for pid=9210 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 201.129543][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.138130][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.146027][ T5895] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 201.163353][ T24] az6027: usb out operation failed. (-71) [ 201.171110][ T24] az6027: usb out operation failed. (-71) [ 201.183680][ T24] stb0899_attach: Driver disabled by Kconfig [ 201.189775][ T24] az6027: no front-end attached [ 201.189775][ T24] [ 201.197565][ T24] az6027: usb out operation failed. (-71) [ 201.226090][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 201.270418][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 201.281870][ T5895] usb 4-1: device descriptor read/64, error -71 [ 201.305397][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 201.308262][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.316593][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 201.338964][ T24] usb 5-1: USB disconnect, device number 27 [ 201.346133][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.369676][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 201.400103][ T5895] usb usb4-port1: attempt power cycle [ 201.471994][ T9214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.944'. [ 201.482555][ T9214] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 201.541422][ T9214] IPv6: sit1: Disabled Multicast RS [ 201.552678][ T9214] sit1: entered allmulticast mode [ 201.580140][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.590158][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.749696][ T5895] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 201.779200][ T5895] usb 4-1: device descriptor read/8, error -71 [ 201.941872][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 201.947891][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 201.955492][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 202.059431][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 202.074628][ T5895] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 202.178738][ T5895] usb 4-1: device descriptor read/8, error -71 [ 202.187430][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.202207][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.251800][ T44] usb 2-1: can't set config #1, error -71 [ 202.258807][ T9234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.260109][ T44] usb 2-1: USB disconnect, device number 29 [ 202.288680][ T5895] usb usb4-port1: unable to enumerate USB device [ 202.393113][ T9239] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.952'. [ 202.604058][ T9239] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.952'. [ 202.708570][ T44] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 202.864535][ T44] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 202.889057][ T44] usb 1-1: config 1 has no interface number 0 [ 202.915447][ T44] usb 1-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.936816][ T44] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 240, changing to 11 [ 202.951437][ T44] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 202.961196][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.036949][ T30] audit: type=1326 audit(1755865523.031:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 203.217326][ T44] usb 1-1: Product: syz [ 203.222620][ T44] usb 1-1: Manufacturer: syz [ 203.227440][ T44] usb 1-1: SerialNumber: syz [ 203.232567][ T30] audit: type=1326 audit(1755865523.031:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 203.266762][ T9241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.344614][ T44] usb 1-1: Expected 3 endpoints, found: 2 [ 203.657676][ T30] audit: type=1326 audit(1755865523.031:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 203.687006][ T5963] usb 1-1: USB disconnect, device number 28 [ 203.937698][ T30] audit: type=1326 audit(1755865523.931:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 204.015340][ T30] audit: type=1326 audit(1755865523.931:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.2.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 204.138561][ T44] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 204.454115][ T44] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 204.491317][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 204.514143][ T44] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.526881][ T9289] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.967'. [ 204.554486][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 204.566670][ T9289] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.967'. [ 204.583383][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 204.608736][ T44] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 204.711467][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 204.720347][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 204.769433][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 204.793564][ T44] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.817380][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 204.839330][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 204.860710][ T44] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 204.860885][ T9297] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 204.876914][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 204.893062][ T44] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.905909][ T9297] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 205.118674][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 205.130571][ T44] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 205.153138][ T44] usb 2-1: string descriptor 0 read error: -22 [ 205.191177][ T44] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 205.212913][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.228918][ T9283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.234320][ T44] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 205.498936][ T5963] usb 2-1: USB disconnect, device number 30 [ 205.588871][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.977'. [ 205.798663][ T44] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 206.331685][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 206.489076][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.503058][ T9339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.508497][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.512602][ T9339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.550208][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.577588][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.593091][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.608113][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.621818][ T44] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.630113][ T44] usb 1-1: Manufacturer: syz [ 206.648975][ T44] usb 1-1: config 0 descriptor?? [ 206.727884][ T9348] netlink: 'syz.3.986': attribute type 2 has an invalid length. [ 207.278512][ T44] rc_core: IR keymap rc-hauppauge not found [ 207.284640][ T44] Registered IR keymap rc-empty [ 207.298794][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.338525][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.660071][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 207.700818][ T5927] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 207.744819][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 207.760029][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 207.783843][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.819992][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.852845][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.950999][ T5927] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 207.958644][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.959493][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 207.979933][ T5927] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.980090][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.136076][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.174819][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 208.218849][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.238509][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.315579][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.452078][ T30] audit: type=1400 audit(1755865528.451:534): avc: denied { ioctl } for pid=9382 comm="syz.3.998" path="socket:[23129]" dev="sockfs" ino=23129 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 208.477196][ T44] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 208.477679][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 208.499521][ T44] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 208.507808][ T44] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.522180][ T5927] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 208.531687][ T44] usb 1-1: USB disconnect, device number 29 [ 208.548399][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 208.567093][ T5927] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.579878][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 208.591157][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 208.604292][ T5927] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 208.613071][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 208.624427][ T5927] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 208.647848][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 208.660402][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 208.683344][ T5927] usb 2-1: string descriptor 0 read error: -22 [ 208.690366][ T5927] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 208.701271][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.717338][ T5927] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 208.760326][ T9391] netlink: 'syz.2.999': attribute type 4 has an invalid length. [ 208.774561][ T9391] netlink: 'syz.2.999': attribute type 4 has an invalid length. [ 208.948946][ T9396] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 208.995427][ T9397] Invalid ELF header magic: != ELF [ 209.001089][ T30] audit: type=1400 audit(1755865528.991:535): avc: denied { module_load } for pid=9388 comm="syz.0.1000" path="/sys/kernel/notes" dev="sysfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 209.046839][ T5161] usb 2-1: USB disconnect, device number 31 [ 209.182893][ T5927] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 209.348490][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 209.354785][ T5927] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 209.405639][ T5927] usb 5-1: config 0 has no interface number 0 [ 209.803320][ T5927] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 209.818982][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.826980][ T5927] usb 5-1: Product: syz [ 209.831183][ T5927] usb 5-1: Manufacturer: syz [ 209.836270][ T5927] usb 5-1: SerialNumber: syz [ 210.076666][ T5927] usb 5-1: config 0 descriptor?? [ 210.296792][ T5927] smsc95xx v2.0.0 [ 211.028499][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 211.158540][ T24] usb 1-1: device descriptor read/64, error -71 [ 211.230200][ T30] audit: type=1400 audit(1755865531.231:536): avc: denied { checkpoint_restore } for pid=9432 comm="syz.3.1012" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.230574][ T5927] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 211.461281][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.468533][ T5927] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 211.470890][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 211.498667][ T5927] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 211.502424][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.522451][ T5927] usb 5-1: USB disconnect, device number 28 [ 211.658602][ T24] usb 1-1: device descriptor read/64, error -71 [ 211.758112][ T5963] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 211.831089][ T9452] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1017'. [ 211.875243][ T9454] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1018'. [ 211.887414][ T24] usb usb1-port1: attempt power cycle [ 211.960745][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.971193][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.981959][ T5963] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 211.984062][ T9458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.998281][ T9458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.017001][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.028333][ T5963] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.042249][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.053481][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.094436][ T5963] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 212.103720][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.115480][ T5963] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.127339][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.138658][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.173263][ T5963] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 212.181346][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 212.192168][ T5963] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.203870][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.215072][ T5963] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 212.228515][ T5963] usb 2-1: string descriptor 0 read error: -22 [ 212.234746][ T5963] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 212.244540][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.252775][ T24] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 212.259326][ T5963] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 212.279576][ T24] usb 1-1: device descriptor read/8, error -71 [ 212.293780][ T9461] netlink: 'syz.4.1021': attribute type 13 has an invalid length. [ 212.302444][ T9461] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1021'. [ 212.336283][ T9464] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 212.478711][ T5870] usb 2-1: USB disconnect, device number 32 [ 212.531631][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 212.572416][ T24] usb 1-1: device descriptor read/8, error -71 [ 212.628725][ T5963] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 212.882856][ T5963] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 212.963289][ T5963] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 213.050755][ T5963] usb 5-1: config 220 interface 0 has no altsetting 0 [ 213.113631][ T5963] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 213.128324][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.415510][ T5963] usb 5-1: Product: syz [ 213.509247][ T24] usb usb1-port1: unable to enumerate USB device [ 213.650808][ T5963] usb 5-1: Manufacturer: syz [ 213.810578][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.828485][ T5963] usb 5-1: SerialNumber: syz [ 213.829873][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.098497][ T5895] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 214.356071][ T5963] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 214.368621][ T30] audit: type=1400 audit(1755865534.361:537): avc: denied { setopt } for pid=9490 comm="syz.2.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 214.539081][ T5895] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.550374][ T5895] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.560393][ T5963] usb 5-1: No valid video chain found. [ 214.561824][ T5963] usb 5-1: USB disconnect, device number 29 [ 214.567942][ T5895] usb 4-1: config 0 interface 0 has no altsetting 0 [ 214.597923][ T5895] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 214.607996][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.622915][ T5895] usb 4-1: config 0 descriptor?? [ 215.084469][ T9508] Malformed UNC in devname [ 215.084469][ T9508] [ 215.091151][ T9508] CIFS: VFS: Malformed UNC in devname [ 215.225846][ T5895] input: HID 054c:03d5 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:03D5.0005/input/input26 [ 215.331359][ T5895] sony 0003:054C:03D5.0005: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.3-1/input0 [ 215.540652][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.552195][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.624887][ T9530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.971155][ T9534] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 215.977773][ T9534] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.985235][ T9526] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 215.991835][ T9526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.009671][ T9534] vhci_hcd vhci_hcd.0: Device attached [ 216.087255][ T9526] vhci_hcd vhci_hcd.0: Device attached [ 216.096139][ T9534] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.211409][ T9526] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 216.218001][ T9526] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.227339][ T9526] vhci_hcd vhci_hcd.0: Device attached [ 216.247320][ T9534] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(19) [ 216.253943][ T9534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.276059][ T9534] vhci_hcd vhci_hcd.0: Device attached [ 216.302230][ T9526] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(21) [ 216.308837][ T9526] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.319877][ T9526] vhci_hcd vhci_hcd.0: Device attached [ 216.349820][ T9526] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.385274][ T24] usb 41-2: new low-speed USB device number 2 using vhci_hcd [ 216.425906][ T9540] vhci_hcd: connection closed [ 216.426054][ T9535] vhci_hcd: connection reset by peer [ 216.426061][ T36] vhci_hcd: stop threads [ 216.426073][ T36] vhci_hcd: release socket [ 216.430838][ T9532] vhci_hcd: connection closed [ 216.444855][ T9542] vhci_hcd: connection closed [ 216.453183][ T36] vhci_hcd: disconnect device [ 216.454101][ T9544] vhci_hcd: connection closed [ 216.458080][ T36] vhci_hcd: stop threads [ 216.510254][ T5895] usb 4-1: reset high-speed USB device number 31 using dummy_hcd [ 216.767414][ T36] vhci_hcd: release socket [ 216.772085][ T36] vhci_hcd: disconnect device [ 216.776987][ T36] vhci_hcd: stop threads [ 216.781449][ T36] vhci_hcd: release socket [ 216.785950][ T36] vhci_hcd: disconnect device [ 216.790819][ T36] vhci_hcd: stop threads [ 216.795098][ T36] vhci_hcd: release socket [ 216.800637][ T36] vhci_hcd: disconnect device [ 216.805567][ T36] vhci_hcd: stop threads [ 216.809918][ T36] vhci_hcd: release socket [ 216.814431][ T36] vhci_hcd: disconnect device [ 217.004085][ T9556] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.332610][ T30] audit: type=1400 audit(1755865537.331:538): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 217.414551][ T9565] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 217.417024][ T30] audit: type=1400 audit(1755865537.411:539): avc: denied { create } for pid=9566 comm="syz.2.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.428465][ T9568] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 217.459643][ T9565] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1044'. [ 217.478734][ T9565] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1044'. [ 217.534369][ T9565] netlink: 'syz.0.1044': attribute type 39 has an invalid length. [ 217.669207][ T5910] usb 4-1: USB disconnect, device number 31 [ 217.681560][ T30] audit: type=1400 audit(1755865537.681:540): avc: denied { execmem } for pid=9579 comm="syz.1.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 217.774920][ T9571] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 217.781353][ T9571] PKCS7: Only support pkcs7_signedData type [ 217.904828][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1051'. [ 217.949591][ T9582] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1051'. [ 217.959059][ T9582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'. [ 217.960903][ T30] audit: type=1400 audit(1755865537.951:541): avc: denied { write } for pid=9581 comm="syz.4.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.202284][ T30] audit: type=1400 audit(1755865537.951:542): avc: denied { nlmsg_write } for pid=9581 comm="syz.4.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.224329][ T30] audit: type=1400 audit(1755865537.971:543): avc: denied { ioctl } for pid=9581 comm="syz.4.1051" path="socket:[23508]" dev="sockfs" ino=23508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.508676][ T30] audit: type=1400 audit(1755865538.481:544): avc: denied { write } for pid=9589 comm="syz.0.1054" path="socket:[24220]" dev="sockfs" ino=24220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 218.556883][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 218.872815][ T30] audit: type=1400 audit(1755865538.861:545): avc: denied { kexec_image_load } for pid=9595 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 219.170717][ T9575] syz.2.1048 (9575): drop_caches: 2 [ 219.227874][ T9618] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1062'. [ 219.237850][ T9618] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1062'. [ 219.348550][ T5895] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 219.573777][ T5895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 219.585129][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 219.608388][ T5895] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.668256][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 219.668545][ T5963] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 219.708535][ T5927] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 219.778328][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 219.824367][ T5895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 219.837777][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 219.840367][ T5963] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.857917][ T5963] usb 5-1: config 0 has no interface number 0 [ 219.867769][ T5895] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 219.879925][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 219.888039][ T5927] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 219.897301][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.908557][ T5927] usb 1-1: Product: syz [ 219.912765][ T5963] usb 5-1: config 0 interface 1 has no altsetting 0 [ 219.931079][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 219.943355][ T5927] usb 1-1: Manufacturer: syz [ 219.948147][ T5927] usb 1-1: SerialNumber: syz [ 219.952895][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 219.954345][ T5963] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 219.974237][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.984814][ T5927] usb 1-1: config 0 descriptor?? [ 219.997186][ T5895] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 220.022905][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 220.061683][ T5895] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 220.073396][ T5963] usb 5-1: Product: syz [ 220.073415][ T5963] usb 5-1: Manufacturer: syz [ 220.073427][ T5963] usb 5-1: SerialNumber: syz [ 220.074407][ T5963] usb 5-1: config 0 descriptor?? [ 220.133385][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 220.156409][ T5895] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 220.186982][ T5895] usb 4-1: string descriptor 0 read error: -22 [ 220.190395][ T5927] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 220.195057][ T5895] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 220.210418][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.233119][ T5895] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 220.247369][ T5927] usb 1-1: Detected FT-X [ 220.545150][ T5927] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 220.562739][ T9628] openvswitch: netlink: IP tunnel dst address not specified [ 220.579391][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.598656][ T9643] input: syz0 as /devices/virtual/input/input27 [ 220.627948][ T30] audit: type=1400 audit(1755865540.621:546): avc: denied { create } for pid=9642 comm="syz.1.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 220.632159][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.739104][ T30] audit: type=1400 audit(1755865540.741:547): avc: denied { ioctl } for pid=9642 comm="syz.1.1070" path="socket:[24631]" dev="sockfs" ino=24631 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 220.800994][ T5927] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 220.821033][ T5927] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 220.839725][ T5161] usb 4-1: USB disconnect, device number 32 [ 220.855761][ T5927] usb 1-1: USB disconnect, device number 34 [ 220.904301][ T5927] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 220.919576][ T5927] ftdi_sio 1-1:0.0: device disconnected [ 220.977263][ T5963] msi2500 5-1:0.1: Registered as swradio24 [ 220.984107][ T5963] msi2500 5-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 221.001643][ T5963] usb 5-1: USB disconnect, device number 30 [ 221.445312][ T9668] binder: 9666:9668 ioctl 8933 200000000080 returned -22 [ 221.529066][ T24] vhci_hcd: vhci_device speed not set [ 221.620027][ T30] audit: type=1400 audit(1755865541.621:548): avc: denied { accept } for pid=9670 comm="syz.3.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 221.889107][ T9681] input: syz0 as /devices/virtual/input/input28 [ 222.836672][ T30] audit: type=1400 audit(1755865542.831:549): avc: denied { append } for pid=9700 comm="syz.2.1085" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 222.866113][ T5963] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 223.032158][ T5963] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 223.138383][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.176547][ T5963] usb 4-1: Product: syz [ 223.188150][ T5963] usb 4-1: Manufacturer: syz [ 223.246619][ T9713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.254748][ T9713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.261544][ T9713] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.267913][ T9713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.274615][ T9713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 223.305596][ T5963] usb 4-1: SerialNumber: syz [ 223.375642][ T5963] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 223.386077][ T30] audit: type=1400 audit(1755865543.381:550): avc: denied { firmware_load } for pid=5927 comm="kworker/0:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 223.424970][ T5927] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 223.500406][ T9725] fuse: Unknown parameter '0x0000000000000004' [ 223.528599][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 223.688587][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 223.707624][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 223.724822][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.40 [ 223.746805][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.758281][ T24] usb 5-1: Product: Ñ… [ 223.767575][ T24] usb 5-1: Manufacturer: 쥟懑뺰瑜렵ᠻﳟ傇èƒå¶šì˜Žç ¹ï—‹æ›žéŸ¦í©ã¨€á®â„¥â¥³á¦£é€Œá”¼é©ŒéŒ–í§êˆží‹µê‹½îœƒæº«Ô‹á½¯ê“Šâ¹¡ì›…륉痨쭒濎ퟔ형é扰좗匲í˜éœî°£ë³ì›¼ê§§å‹›è£µí‹’ٓ쑧壽㭣á€ëˆ”橒硳⵵毚殦ݫ蘂뎼ᤈ♯ṧ䅙Ǟá¿éŸ æ²±æ¸™à¤œæ›Žä“¡É ï¢µÛ¦ä§¿ç§Œâ±ê¶èˆ³è©˜ã •é©ƒåŠ±ë¨©éœé©„착楞푿 [ 223.847479][ T24] usb 5-1: SerialNumber: á ‰ [ 223.987645][ T30] audit: type=1400 audit(1755865543.981:551): avc: denied { connect } for pid=9732 comm="syz.0.1096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.351775][ T5161] usb 4-1: USB disconnect, device number 33 [ 224.524647][ T9743] tmpfs: Unknown parameter '0x0000000000000007' [ 224.564800][ T30] audit: type=1400 audit(1755865544.541:552): avc: denied { ioctl } for pid=9738 comm="syz.0.1097" path="socket:[24847]" dev="sockfs" ino=24847 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 224.722778][ T5927] usb 4-1: Service connection timeout for: 256 [ 224.729018][ T5927] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 224.737099][ T5927] ath9k_htc: Failed to initialize the device [ 224.835963][ T5161] usb 4-1: ath9k_htc: USB layer deinitialized [ 225.312066][ T5854] Bluetooth: hci4: command 0x0406 tx timeout [ 225.312070][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 225.312100][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 225.330390][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 225.362831][ T9758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.380955][ T9758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.461397][ T9758] autofs: Unknown parameter '@' [ 225.462006][ T30] audit: type=1400 audit(1755865545.461:553): avc: denied { connect } for pid=9756 comm="syz.2.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.490464][ T9760] netlink: 'syz.4.1103': attribute type 4 has an invalid length. [ 225.722655][ T9774] netlink: 'syz.4.1103': attribute type 4 has an invalid length. [ 225.782995][ T5161] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 226.218500][ T5910] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 226.297349][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 226.303487][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 226.321254][ T24] usb 5-1: USB disconnect, device number 31 [ 226.394762][ T5910] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.409621][ T5910] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 226.451487][ T5910] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.671424][ T5161] usb 4-1: Using ep0 maxpacket: 16 [ 226.692247][ T30] audit: type=1400 audit(1755865546.471:554): avc: denied { setopt } for pid=9782 comm="syz.1.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 226.726725][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.767736][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.778187][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.816843][ T30] audit: type=1400 audit(1755865546.761:555): avc: denied { ioctl } for pid=9782 comm="syz.1.1108" path="socket:[25911]" dev="sockfs" ino=25911 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.884058][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.888774][ T9775] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.897957][ T5161] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.925002][ T5910] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 227.049272][ T5161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.095023][ T5161] usb 4-1: config 0 descriptor?? [ 227.398659][ T9800] input: syz0 as /devices/virtual/input/input29 [ 227.929884][ T5161] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 227.951008][ T5161] microsoft 0003:045E:07DA.0006: unsupported Resolution Multiplier 0 [ 228.605232][ T5963] usb 1-1: USB disconnect, device number 35 [ 228.624512][ T9827] 9pnet_fd: Insufficient options for proto=fd [ 228.696412][ T9832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.884674][ T9842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.894680][ T9842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.147301][ T30] audit: type=1400 audit(1755865549.141:556): avc: denied { remount } for pid=9850 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.241287][ T9856] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1127'. [ 229.251409][ T9856] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1127'. [ 229.297060][ T30] audit: type=1400 audit(1755865549.291:557): avc: denied { map } for pid=9857 comm="syz.1.1128" path="/proc/781/maps" dev="proc" ino=25037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 229.505747][ T9869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1129'. [ 229.534504][ T5846] Bluetooth: hci2: ACL packet too small [ 229.567162][ T5161] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 229.615689][ T5161] microsoft 0003:045E:07DA.0006: no inputs found [ 229.624923][ T5161] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 229.629088][ T5950] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 229.742271][ T5161] usb 4-1: USB disconnect, device number 34 [ 229.820736][ T5950] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.829632][ T5950] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.858678][ T5950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.893638][ T9871] ip6gre1: entered allmulticast mode [ 229.906994][ T9871] team_slave_0: entered promiscuous mode [ 229.912662][ T9871] team_slave_1: entered promiscuous mode [ 229.918278][ T9871] dummy0: entered promiscuous mode [ 229.923394][ T9871] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 229.940224][ T5950] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 230.001040][ T9871] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 230.023827][ T5950] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 230.039011][ T9871] team0: Device macvtap1 is already an upper device of the team interface [ 230.050766][ T9871] team_slave_0: left promiscuous mode [ 230.051629][ T5950] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 230.056204][ T9871] team_slave_1: left promiscuous mode [ 230.065844][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 230.070632][ T9871] dummy0: left promiscuous mode [ 230.070670][ T9871] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 230.118583][ T5950] usb 5-1: Product: syz [ 230.160693][ T5950] usb 5-1: Manufacturer: syz [ 230.166279][ T9878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.190070][ T9878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.191923][ T5950] cdc_wdm 5-1:1.0: skipping garbage [ 230.205641][ T5950] cdc_wdm 5-1:1.0: skipping garbage [ 230.230195][ T5950] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 230.256230][ T5950] cdc_wdm 5-1:1.0: Unknown control protocol [ 230.476476][ T30] audit: type=1400 audit(1755865550.471:558): avc: denied { read } for pid=9853 comm="syz.4.1126" dev="sockfs" ino=25020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.499810][ T9854] 9pnet_fd: Insufficient options for proto=fd [ 230.507412][ T5950] usb 5-1: USB disconnect, device number 32 [ 230.930081][ T5963] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 231.290064][ T5963] usb 4-1: config 0 has an invalid descriptor of length 237, skipping remainder of the config [ 231.314567][ T5963] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.359431][ T5963] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 231.377953][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.410040][ T5963] usb 4-1: config 0 descriptor?? [ 231.420925][ T5963] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 231.536439][ T9927] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[9927] [ 233.628532][ T5963] usb 4-1: USB disconnect, device number 35 [ 234.076150][ T9974] cifs: Unknown parameter 'F‘ý›:Ãâvô9^Æž²8T\÷Ž™¾í8õVp' [ 234.118573][ T30] audit: type=1400 audit(1755865553.841:559): avc: denied { setopt } for pid=9965 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 234.242121][ T9972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1158'. [ 234.723554][ T9995] FAULT_INJECTION: forcing a failure. [ 234.723554][ T9995] name failslab, interval 1, probability 0, space 0, times 0 [ 234.737645][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.1.1165 Not tainted syzkaller #0 PREEMPT(full) [ 234.737671][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.737681][ T9995] Call Trace: [ 234.737687][ T9995] [ 234.737693][ T9995] dump_stack_lvl+0x16c/0x1f0 [ 234.737715][ T9995] should_fail_ex+0x512/0x640 [ 234.737736][ T9995] should_failslab+0xc2/0x120 [ 234.737755][ T9995] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 234.737773][ T9995] ? __alloc_skb+0x2b2/0x380 [ 234.737789][ T9995] __alloc_skb+0x2b2/0x380 [ 234.737803][ T9995] ? __pfx___alloc_skb+0x10/0x10 [ 234.737817][ T9995] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 234.737848][ T9995] pfkey_sendmsg+0x16e/0x850 [ 234.737869][ T9995] ____sys_sendmsg+0xa95/0xc70 [ 234.737890][ T9995] ? copy_msghdr_from_user+0x10a/0x160 [ 234.737907][ T9995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.737927][ T9995] ? __pfx_kstrtouint+0x10/0x10 [ 234.737944][ T9995] ? kstrtouint_from_user+0x13c/0x1d0 [ 234.737960][ T9995] ___sys_sendmsg+0x134/0x1d0 [ 234.737977][ T9995] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.737998][ T9995] ? rcu_is_watching+0x12/0xc0 [ 234.738027][ T9995] __sys_sendmsg+0x16d/0x220 [ 234.738043][ T9995] ? __pfx___sys_sendmsg+0x10/0x10 [ 234.738067][ T9995] do_syscall_64+0xcd/0x4c0 [ 234.738086][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.738102][ T9995] RIP: 0033:0x7f94d338ebe9 [ 234.738115][ T9995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.738133][ T9995] RSP: 002b:00007f94d42d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.738150][ T9995] RAX: ffffffffffffffda RBX: 00007f94d35b5fa0 RCX: 00007f94d338ebe9 [ 234.738161][ T9995] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 234.738171][ T9995] RBP: 00007f94d42d1090 R08: 0000000000000000 R09: 0000000000000000 [ 234.738181][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.738191][ T9995] R13: 00007f94d35b6038 R14: 00007f94d35b5fa0 R15: 00007fff749bcc78 [ 234.738216][ T9995] [ 234.943930][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.952763][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 235.238522][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 235.318495][ T5950] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 235.391298][ T24] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 235.406930][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.425827][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 235.436100][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.451576][ T24] usb 5-1: Product: syz [ 235.455861][ T24] usb 5-1: Manufacturer: syz [ 235.460818][ T24] usb 5-1: SerialNumber: syz [ 235.471592][ T5950] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 235.490008][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.501109][ T24] rtl8150 5-1:1.0: couldn't find required endpoints [ 235.508349][ T24] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 235.517674][ T5950] usb 2-1: config 0 descriptor?? [ 235.533768][ T5950] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 235.701482][ T24] usb 5-1: USB disconnect, device number 33 [ 236.008384][ T30] audit: type=1400 audit(1755865556.001:560): avc: denied { create } for pid=10029 comm="syz.2.1175" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.131919][ T5950] gspca_stv06xx: vv6410 sensor detected [ 236.142030][ T30] audit: type=1400 audit(1755865556.141:561): avc: denied { read } for pid=10029 comm="syz.2.1175" name="file0" dev="tmpfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.183784][ T30] audit: type=1400 audit(1755865556.141:562): avc: denied { open } for pid=10029 comm="syz.2.1175" path="/244/file0" dev="tmpfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.238488][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 236.412809][ T24] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 236.421054][ T24] usb 4-1: config 0 has no interface number 0 [ 236.433063][ T24] usb 4-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 236.913770][ T24] usb 4-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 236.941264][ T24] usb 4-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 236.955031][ T24] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 236.965453][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.974397][T10040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 236.975288][ T24] usb 4-1: Product: syz [ 236.985054][T10040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 236.991536][T10040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.997848][T10040] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.004265][ T24] usb 4-1: Manufacturer: syz [ 237.055806][ T5950] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 237.117834][ T5950] usb 2-1: USB disconnect, device number 33 [ 237.136716][ T24] usb 4-1: SerialNumber: syz [ 237.152496][ T24] usb 4-1: config 0 descriptor?? [ 237.163538][T10024] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.170797][T10024] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.644618][ T30] audit: type=1400 audit(1755865557.441:563): avc: denied { mount } for pid=10020 comm="syz.3.1172" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 238.907330][ T24] usb 4-1: Error in usbnet_get_endpoints (-71) [ 238.923687][ T24] usb 4-1: USB disconnect, device number 36 [ 239.078676][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 239.078690][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 239.078726][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 239.084733][ T5168] Bluetooth: hci4: command 0x0406 tx timeout [ 239.195630][T10040] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 239.222812][T10029] delete_channel: no stack [ 239.399083][T10075] block device autoloading is deprecated and will be removed. [ 239.688529][ T24] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 239.840243][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 239.847677][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.860104][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.871813][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.883005][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.894820][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 239.902286][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.912981][ T24] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.918551][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 239.924634][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.932309][ T5963] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 239.943361][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.982826][ T24] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 239.991080][ T24] usb 1-1: can't read configurations, error -71 [ 240.007462][ T30] audit: type=1400 audit(1755865560.001:564): avc: denied { ioctl } for pid=10089 comm="syz.0.1190" path="socket:[26280]" dev="sockfs" ino=26280 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 240.125999][ T30] audit: type=1400 audit(1755865560.121:565): avc: denied { getopt } for pid=10089 comm="syz.0.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.147762][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 240.157447][ T10] usb 2-1: config 0 has no interfaces? [ 240.180939][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 240.191889][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.203414][ T10] usb 2-1: Product: syz [ 240.207660][ T5963] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 240.220439][ T10] usb 2-1: Manufacturer: syz [ 240.225031][ T10] usb 2-1: SerialNumber: syz [ 240.229764][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.243937][ T5963] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.253761][ T10] usb 2-1: config 0 descriptor?? [ 240.260726][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.272058][T10096] netlink: 'syz.0.1190': attribute type 12 has an invalid length. [ 240.300171][ T5963] usb 4-1: Product: syz [ 240.307409][ T5963] usb 4-1: Manufacturer: syz [ 240.316730][ T5963] usb 4-1: SerialNumber: syz [ 240.368585][ T5963] usb 4-1: config 0 descriptor?? [ 240.395344][ T5963] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.405494][ T5963] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 240.474704][ T5161] usb 2-1: USB disconnect, device number 34 [ 241.110023][ T5963] em28xx 4-1:0.0: chip ID is em2874 [ 241.218627][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 241.377914][T10120] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1189'. [ 241.400487][T10120] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1189'. [ 241.410716][T10120] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1189'. [ 241.490371][ T30] audit: type=1400 audit(1755865561.491:566): avc: denied { ioctl } for pid=10087 comm="syz.3.1189" path="socket:[25489]" dev="sockfs" ino=25489 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.497000][ T5895] usb 4-1: USB disconnect, device number 37 [ 241.953738][ T5895] em28xx 4-1:0.0: Disconnecting em28xx [ 241.962177][ T5895] em28xx 4-1:0.0: Freeing device [ 242.886340][T10135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.899441][T10160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.961461][ T30] audit: type=1326 audit(1755865562.961:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.1207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f8558ebe9 code=0x0 [ 243.093812][ T30] audit: type=1400 audit(1755865563.081:568): avc: denied { mounton } for pid=10164 comm="syz.2.1211" path="/253/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 244.358290][T10187] binder: 10186:10187 ioctl 4018620d 0 returned -22 [ 244.637357][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1215'. [ 244.774134][ T30] audit: type=1800 audit(1755865564.561:569): pid=10191 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1217" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 244.820309][ T30] audit: type=1400 audit(1755865564.571:570): avc: denied { map } for pid=10184 comm="syz.2.1215" path="socket:[25594]" dev="sockfs" ino=25594 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 245.409002][ T30] audit: type=1400 audit(1755865565.301:571): avc: denied { read write } for pid=10201 comm="syz.3.1220" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.415227][T10206] netlink: 'syz.3.1220': attribute type 4 has an invalid length. [ 245.438528][ T30] audit: type=1400 audit(1755865565.301:572): avc: denied { open } for pid=10201 comm="syz.3.1220" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.739884][ T30] audit: type=1400 audit(1755865565.301:573): avc: denied { map } for pid=10201 comm="syz.3.1220" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.767658][ T30] audit: type=1400 audit(1755865565.301:574): avc: denied { execute } for pid=10201 comm="syz.3.1220" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.808886][ T24] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 246.878557][ T5161] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 247.014034][T10236] syz.2.1226: attempt to access beyond end of device [ 247.014034][T10236] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 247.024481][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.027056][ T5161] usb 5-1: device descriptor read/64, error -71 [ 247.034981][ T24] usb 1-1: config 0 has no interface number 0 [ 247.047566][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.430256][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.453511][T10236] syz.2.1226: attempt to access beyond end of device [ 247.453511][T10236] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 247.480744][T10236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 247.495451][T10236] syz.2.1226: attempt to access beyond end of device [ 247.495451][T10236] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 247.516056][T10236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 247.562695][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 247.588219][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.746878][T10236] syz.2.1226: attempt to access beyond end of device [ 247.746878][T10236] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 247.760034][T10236] syz.2.1226: attempt to access beyond end of device [ 247.760034][T10236] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 247.773058][T10236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 247.782845][T10236] syz.2.1226: attempt to access beyond end of device [ 247.782845][T10236] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 247.796045][T10236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 247.806191][T10236] syz.2.1226: attempt to access beyond end of device [ 247.806191][T10236] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 247.819329][T10236] syz.2.1226: attempt to access beyond end of device [ 247.819329][T10236] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 247.832458][T10236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 247.842235][T10236] syz.2.1226: attempt to access beyond end of device [ 247.842235][T10236] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 247.855387][T10236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 247.865400][T10236] syz.2.1226: attempt to access beyond end of device [ 247.865400][T10236] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 247.878586][T10236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 247.888351][T10236] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 247.897947][T10236] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 247.908200][ T24] usb 1-1: config 0 descriptor?? [ 248.004715][ T30] audit: type=1400 audit(1755865567.961:575): avc: denied { write } for pid=10249 comm="syz.3.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 248.039574][ T5161] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 248.162950][T10258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.172971][T10260] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 248.177063][T10258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.200010][ T5161] usb 5-1: device descriptor read/64, error -71 [ 248.212385][T10260] bond1: entered promiscuous mode [ 248.217607][T10260] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.588257][ T24] uclogic 0003:28BD:0094.0007: pen parameters not found [ 248.603376][ T24] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring [ 248.624600][ T5161] usb usb5-port1: attempt power cycle [ 248.774366][ T10] usb 1-1: USB disconnect, device number 38 [ 248.879236][ T5963] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 248.968602][ T5161] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 249.020166][ T5161] usb 5-1: device descriptor read/8, error -71 [ 249.048736][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 249.057975][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.079480][ T5963] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 249.093512][ T5963] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 249.114426][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.122729][ T5963] usb 4-1: Product: syz [ 249.127047][ T5963] usb 4-1: Manufacturer: syz [ 249.143340][ T5963] usb 4-1: SerialNumber: syz [ 249.493858][ T5963] usb 4-1: config 0 descriptor?? [ 249.577828][ T5161] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 249.707889][ T5161] usb 5-1: device descriptor read/8, error -71 [ 249.778709][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 249.787594][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 249.797361][ T30] audit: type=1400 audit(1755865569.801:576): avc: denied { write } for pid=10259 comm="syz.3.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 249.939303][ T5161] usb usb5-port1: unable to enumerate USB device [ 249.948549][ T5963] usb 4-1: USB disconnect, device number 38 [ 250.041026][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1250'. [ 250.260685][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 250.398537][ T5963] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 250.599160][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 250.628685][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 250.635249][ T5963] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.683966][ T5963] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.698690][ T5963] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.844423][ T5963] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 250.848644][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 250.860484][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.860486][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.860518][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.890326][ T5963] usb 4-1: config 0 descriptor?? [ 250.929351][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.964424][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 250.976094][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.986634][ T24] usb 2-1: Manufacturer: syz [ 250.996806][ T24] usb 2-1: config 0 descriptor?? [ 251.044920][T10330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.070876][T10330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.080391][T10330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.096512][T10330] sch_fq: defrate 4294967295 ignored. [ 251.112870][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.130501][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.139371][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.150419][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.177665][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.194975][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.207129][ T24] usb 2-1: USB disconnect, device number 35 [ 251.237456][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.253257][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.266155][T10315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.278663][T10315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.488229][ T30] audit: type=1400 audit(1755865571.481:577): avc: denied { write } for pid=10334 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.552686][T10339] netlink: 'syz.4.1259': attribute type 20 has an invalid length. [ 251.571933][ T5963] steelseries 0003:1038:1410.0008: item fetching failed at offset 3/5 [ 251.626051][ T5963] steelseries 0003:1038:1410.0008: parse failed [ 251.647130][ T30] audit: type=1400 audit(1755865571.611:578): avc: denied { read } for pid=10334 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 251.701971][ T5963] steelseries 0003:1038:1410.0008: probe with driver steelseries failed with error -22 [ 252.006205][T10363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.040627][T10363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.333015][T10380] fuseblk: Bad value for 'group_id' [ 252.537887][T10380] fuseblk: Bad value for 'group_id' [ 252.580137][ T24] usb 4-1: USB disconnect, device number 39 [ 253.470344][T10401] vlan2: entered promiscuous mode [ 253.485605][T10401] dummy0: entered promiscuous mode [ 253.497254][T10401] vlan2: entered allmulticast mode [ 253.504386][T10401] dummy0: entered allmulticast mode [ 253.783544][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1278'. [ 253.798876][ T5895] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 254.035839][T10419] 9pnet_fd: Insufficient options for proto=fd [ 254.043667][T10419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1279'. [ 254.073488][ T30] audit: type=1400 audit(1755865574.031:579): avc: denied { open } for pid=10418 comm="syz.3.1279" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.310995][ T5895] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 254.333474][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.383452][ T5895] usb 2-1: Product: syz [ 254.390475][ T5895] usb 2-1: Manufacturer: syz [ 254.395723][ T5895] usb 2-1: SerialNumber: syz [ 254.404609][ T30] audit: type=1326 audit(1755865574.401:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 254.405678][ T5895] usb 2-1: config 0 descriptor?? [ 254.481906][ T30] audit: type=1326 audit(1755865574.401:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 254.519940][ T5895] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 254.535075][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 254.546953][ T30] audit: type=1326 audit(1755865574.461:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 254.585298][ T5895] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 254.609467][ T5895] usb 2-1: media controller created [ 254.617489][ T30] audit: type=1326 audit(1755865574.461:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 254.622453][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.641170][ T30] audit: type=1326 audit(1755865574.461:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 254.641231][ T30] audit: type=1326 audit(1755865574.461:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 254.641283][ T30] audit: type=1326 audit(1755865574.461:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd15c58ebe9 code=0x7ffc0000 [ 254.776975][ T5895] DVB: Unable to find symbol mt352_attach() [ 254.793715][ T5846] block nbd0: Receive control failed (result -32) [ 254.828043][ T5895] DVB: Unable to find symbol nxt6000_attach() [ 254.849134][ T5895] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 254.868512][ T5870] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 254.883862][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 254.923812][ T5895] dvb-usb: schedule remote query interval to 1000 msecs. [ 254.943566][ T5895] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 254.978451][ T5895] dvb-usb: bulk message failed: -22 (7/0) [ 254.997319][ T5895] dvb-usb: bulk message failed: -22 (7/0) [ 255.016595][ T5895] usb 2-1: USB disconnect, device number 36 [ 255.047123][T10454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.057749][ T5870] usb 5-1: Using ep0 maxpacket: 8 [ 255.059635][ T5895] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 255.084752][T10454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.093088][ T5870] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 255.108516][ T5870] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 255.119527][ T5870] usb 5-1: Product: syz [ 255.123707][ T5870] usb 5-1: Manufacturer: syz [ 255.147720][ T5870] usb 5-1: SerialNumber: syz [ 255.156179][T10455] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 255.173005][ T5870] usb 5-1: config 0 descriptor?? [ 255.179579][ T5870] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 255.192043][ T5161] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 255.218565][T10455] netlink: 'syz.0.1289': attribute type 4 has an invalid length. [ 255.348614][ T5161] usb 4-1: device descriptor read/64, error -71 [ 255.501298][T10458] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 255.578612][ T5895] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 255.595883][T10440] overlayfs: conflicting options: userxattr,metacopy=on [ 255.603220][ T5161] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 255.738544][ T5161] usb 4-1: device descriptor read/64, error -71 [ 255.925972][ T5161] usb usb4-port1: attempt power cycle [ 255.997729][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.017005][ T5895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 256.027652][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 256.041463][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.041858][ T5870] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 256.049724][ T5895] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 256.071309][T10470] Bluetooth: (null): Too short H5 packet [ 256.077535][T10470] netlink: zone id is out of range [ 256.082726][T10470] netlink: zone id is out of range [ 256.087820][T10470] netlink: zone id is out of range [ 256.092988][T10470] netlink: zone id is out of range [ 256.098084][T10470] netlink: zone id is out of range [ 256.104051][T10470] netlink: zone id is out of range [ 256.109221][T10470] netlink: zone id is out of range [ 256.114715][T10470] netlink: zone id is out of range [ 256.120268][T10470] netlink: zone id is out of range [ 256.126164][ T5895] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 256.135619][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.143660][T10470] netlink: zone id is out of range [ 256.148935][ T5895] usb 2-1: Product: syz [ 256.153096][ T5895] usb 2-1: Manufacturer: syz [ 256.157682][ T5895] usb 2-1: SerialNumber: syz [ 256.174907][ T5895] usb 2-1: config 0 descriptor?? [ 256.180592][T10457] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 256.187841][T10457] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 256.196403][ T5895] usb 2-1: ucan: probing device on interface #0 [ 256.268518][ T5161] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 256.290810][ T5161] usb 4-1: device descriptor read/8, error -71 [ 256.474437][T10478] netlink: 'syz.0.1299': attribute type 4 has an invalid length. [ 256.541370][T10479] netlink: 'syz.0.1299': attribute type 4 has an invalid length. [ 256.588574][ T5161] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 256.605815][ T5895] ucan 2-1:0.0 can0: registered device [ 256.619935][T10479] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 256.635564][ T5161] usb 4-1: device descriptor read/8, error -71 [ 256.748759][ T5161] usb usb4-port1: unable to enumerate USB device [ 256.812029][ T5895] ucan 2-1:0.0 can0: firmware string: unknown [ 257.194144][ T5161] usb 2-1: USB disconnect, device number 37 [ 257.227499][T10493] pim6reg1: entered allmulticast mode [ 257.946923][ T24] usb 5-1: USB disconnect, device number 38 [ 258.143317][T10504] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.1307'. [ 258.228819][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 258.726771][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.735992][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.816392][T10534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.872735][T10545] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 258.926695][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 258.926711][ T30] audit: type=1326 audit(1755865578.921:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.1.1313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d338ebe9 code=0x0 [ 258.968543][ T5870] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 259.152073][ T5870] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 259.161101][ T5870] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 259.170773][ T5870] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 259.183552][ T5870] usb 1-1: config 220 has no interface number 2 [ 259.310725][ T5870] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 259.324098][ T5870] usb 1-1: config 220 interface 0 has no altsetting 0 [ 259.331953][ T5870] usb 1-1: config 220 interface 76 has no altsetting 0 [ 259.339133][ T5870] usb 1-1: config 220 interface 1 has no altsetting 0 [ 259.347669][ T5870] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 259.358146][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.366324][ T5870] usb 1-1: Product: syz [ 259.373256][ T5870] usb 1-1: Manufacturer: syz [ 259.378243][ T5870] usb 1-1: SerialNumber: syz [ 259.697815][ T5870] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 259.723027][ T5870] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 259.738567][ T5870] usb 1-1: No valid video chain found. [ 259.745173][ T5870] usb 1-1: selecting invalid altsetting 0 [ 259.756962][ T5870] usb 1-1: selecting invalid altsetting 0 [ 259.772119][ T5870] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 259.798631][ T5870] usb 1-1: USB disconnect, device number 39 [ 260.910249][T10578] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 261.888549][ T5161] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 261.910985][T10609] /dev/sg0: Can't lookup blockdev [ 262.348511][ T5161] usb 4-1: Using ep0 maxpacket: 32 [ 262.358638][ T5161] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219 [ 262.395996][ T5870] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 262.418566][ T5161] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 262.448827][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.559762][ T5161] usb 4-1: Product: syz [ 262.566355][ T5161] usb 4-1: Manufacturer: syz [ 262.608618][ T5161] usb 4-1: SerialNumber: syz [ 262.615608][ T5161] usb 4-1: config 0 descriptor?? [ 262.621884][T10598] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.639748][ T5161] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 262.709665][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.722545][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 262.734204][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 262.744998][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.758393][ T5870] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.768929][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.782951][ T5870] usb 2-1: config 0 descriptor?? [ 262.840746][T10598] netlink: 'syz.3.1336': attribute type 4 has an invalid length. [ 262.870312][ T5161] usb 4-1: USB disconnect, device number 44 [ 262.923366][T10636] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1350'. [ 262.934128][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'. [ 262.943827][T10636] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1350'. [ 262.953124][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'. [ 262.965347][T10636] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1350'. [ 262.976885][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1350'. [ 263.085375][ T30] audit: type=1400 audit(1755865583.081:602): avc: denied { create } for pid=10625 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 263.119815][ T30] audit: type=1400 audit(1755865583.121:603): avc: denied { ioctl } for pid=10641 comm="syz.4.1351" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x5515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 263.147447][ T30] audit: type=1400 audit(1755865583.141:604): avc: denied { bind } for pid=10625 comm="syz.0.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 263.549549][ T5870] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 263.579846][ T5870] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 263.922075][T10672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1359'. [ 263.932660][T10672] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 264.593057][T10680] Failed to initialize the IGMP autojoin socket (err -2) [ 264.904508][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 265.452681][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1370'. [ 265.869161][ T5870] usb 2-1: USB disconnect, device number 38 [ 265.966268][T10718] netlink: 'syz.2.1374': attribute type 10 has an invalid length. [ 265.977970][T10718] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.987735][T10718] bond0: (slave team0): Enslaving as an active interface with an up link [ 266.020538][T10722] overlay: Bad value for 'uuid' [ 266.158621][ T5963] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 267.463723][ T5963] usb 5-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 267.500168][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.529202][ T5963] usb 5-1: config 0 descriptor?? [ 267.549500][ T5963] gspca_main: mars-2.14.0 probing 093a:050f [ 267.561753][ T30] audit: type=1400 audit(1755865587.551:605): avc: denied { unmount } for pid=5853 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 267.622478][T10740] netlink: 'syz.2.1381': attribute type 1 has an invalid length. [ 267.631863][ T30] audit: type=1400 audit(1755865587.631:606): avc: denied { mount } for pid=10734 comm="syz.3.1380" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 267.663950][T10740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.723243][T10746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=10746 comm=syz.1.1382 [ 267.746758][T10716] netlink: 'syz.4.1373': attribute type 10 has an invalid length. [ 267.805449][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.963376][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.970471][T10716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.977822][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.984916][T10716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.000796][T10716] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 268.034339][ T30] audit: type=1400 audit(1755865588.011:607): avc: denied { getopt } for pid=10737 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 268.119316][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 268.286653][ T5910] usb 5-1: USB disconnect, device number 39 [ 268.408710][ T5963] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 268.481880][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1387'. [ 268.585982][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 268.821825][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 268.906757][ T30] audit: type=1400 audit(1755865588.901:608): avc: denied { bind } for pid=10776 comm="syz.2.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 268.928064][ T5963] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 268.937827][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 268.947107][ T5963] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 268.958303][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 268.998511][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 269.005041][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.017677][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.027933][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 269.040146][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.060481][ T10] usb 4-1: config 0 descriptor?? [ 269.090766][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.099817][ T5963] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.137332][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.158935][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.167923][ T5963] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.197533][ T30] audit: type=1326 audit(1755865589.191:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10779 comm="syz.4.1393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19cef8ebe9 code=0x0 [ 269.220838][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.329558][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.339419][ T5963] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.399958][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.517212][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.535904][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.546772][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.588127][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.608457][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.626277][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.635352][ T5963] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.646443][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.654591][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.662917][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.683768][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 269.692829][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 269.702009][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1384'. [ 269.782898][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.791223][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.816182][ T5963] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.829261][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.836190][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.843153][ T10] apple 0003:05AC:029C.000A: unknown main item tag 0x0 [ 269.855991][ T10] apple 0003:05AC:029C.000A: collection stack underflow [ 269.895256][ T10] apple 0003:05AC:029C.000A: item 0 0 0 12 parsing failed [ 269.910081][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 269.933231][ T10] apple 0003:05AC:029C.000A: parse failed [ 269.939787][ T5963] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 269.954028][ T10] apple 0003:05AC:029C.000A: probe with driver apple failed with error -22 [ 269.965602][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.983587][ T10] usb 4-1: USB disconnect, device number 45 [ 270.018005][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 270.033862][ T5963] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 270.057730][ T5963] usb 1-1: config 0 interface 0 has no altsetting 0 [ 270.097740][ T5963] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 270.107517][ T5963] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 270.117383][ T5963] usb 1-1: Product: syz [ 270.122826][ T5963] usb 1-1: Manufacturer: syz [ 270.128459][ T5963] usb 1-1: SerialNumber: syz [ 270.136321][ T5963] usb 1-1: config 0 descriptor?? [ 270.278544][ T5963] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 270.488576][ T5870] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 270.511626][T10807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.660941][ T5870] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 270.678645][ T5870] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 270.688813][ T5870] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 270.699190][ T5870] usb 4-1: config 220 has no interface number 2 [ 270.719705][ T5870] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 270.752857][ T5870] usb 4-1: config 220 interface 0 has no altsetting 0 [ 270.804821][ T30] audit: type=1326 audit(1755865590.801:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.4.1398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19cef8ebe9 code=0x0 [ 270.835206][ T5870] usb 4-1: config 220 interface 76 has no altsetting 0 [ 270.842519][ T5870] usb 4-1: config 220 interface 1 has no altsetting 0 [ 270.859050][T10744] Failed to initialize the IGMP autojoin socket (err -2) [ 270.881151][ T5870] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 270.891708][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.900464][ T5870] usb 4-1: Product: syz [ 270.904651][ T5870] usb 4-1: Manufacturer: syz [ 270.910780][ T5870] usb 4-1: SerialNumber: syz [ 271.125725][ T5870] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 271.150213][ T5870] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 271.172043][ T5870] usb 4-1: No valid video chain found. [ 271.186150][ T5870] usb 4-1: selecting invalid altsetting 0 [ 271.205466][ T5870] usb 4-1: selecting invalid altsetting 0 [ 271.217317][ T5870] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 271.245290][ T5870] usb 4-1: USB disconnect, device number 46 [ 271.274890][T10824] netlink: 'syz.4.1401': attribute type 4 has an invalid length. [ 271.332914][T10824] netlink: 'syz.4.1401': attribute type 4 has an invalid length. [ 271.551439][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 271.850939][T10833] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 272.110205][ T24] usb 1-1: USB disconnect, device number 40 [ 272.646046][ T24] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 273.229823][T10864] trusted_key: syz.3.1415 sent an empty control message without MSG_MORE. [ 273.282446][T10864] netlink: 'syz.3.1415': attribute type 2 has an invalid length. [ 273.293164][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1415'. [ 273.369064][T10870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.416616][T10870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.598982][ T5895] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 273.808051][ T30] audit: type=1400 audit(1755865593.801:611): avc: denied { write } for pid=10874 comm="syz.1.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 273.828090][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 273.834439][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 273.846494][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 273.859893][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 273.870259][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 273.881888][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 273.894710][ T5895] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 273.903815][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.912206][ T5895] usb 4-1: Product: syz [ 273.916378][ T5895] usb 4-1: Manufacturer: syz [ 273.921038][ T5895] usb 4-1: SerialNumber: syz [ 273.926490][ T5895] usb 4-1: config 0 descriptor?? [ 274.097815][ T30] audit: type=1400 audit(1755865594.091:612): avc: denied { shutdown } for pid=10886 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 274.157229][ T30] audit: type=1400 audit(1755865594.091:613): avc: denied { nlmsg_read } for pid=10889 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.382844][ T5895] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 274.392227][ T5895] input input33: Device does not respond to id packet M [ 274.457616][ T5895] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 274.463910][ T5895] input input33: Device does not respond to id packet P [ 274.487863][ T5895] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 274.494145][ T5895] input input33: Device does not respond to id packet B [ 274.578611][ T30] audit: type=1400 audit(1755865594.571:614): avc: denied { write } for pid=10902 comm="syz.4.1428" name="usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 274.603354][T10904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1428'. [ 274.702879][ T5895] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 274.709234][ T5895] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 274.716830][ T5895] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 274.730743][ T5895] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 274.834683][ T5895] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input33 [ 274.853590][ T5895] usb 4-1: USB disconnect, device number 47 [ 275.825044][ T30] audit: type=1400 audit(1755865595.041:615): avc: denied { sqpoll } for pid=10912 comm="syz.0.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 276.156815][T10932] overlayfs: conflicting options: nfs_export=on,index=off [ 277.299735][T10968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 277.515337][ T30] audit: type=1326 audit(1755865597.461:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10961 comm="syz.2.1443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd15c58ebe9 code=0x0 [ 278.389021][ T5870] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 278.555079][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 278.572261][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.583658][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.638864][ T5870] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 278.658039][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.668213][ T5870] usb 4-1: config 0 descriptor?? [ 278.736378][T11013] Failed to initialize the IGMP autojoin socket (err -2) [ 278.849186][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 279.572586][ T30] audit: type=1400 audit(1755865599.491:617): avc: denied { mount } for pid=10997 comm="syz.3.1454" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 280.564959][T11049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'. [ 280.577070][ T30] audit: type=1400 audit(1755865600.561:618): avc: denied { setopt } for pid=11045 comm="syz.4.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 280.749282][ T5870] usb 4-1: Max retries (5) exceeded reading string descriptor 200 [ 280.767502][ T5870] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -71 [ 280.894126][ T5870] usb 4-1: USB disconnect, device number 48 [ 281.086187][T11053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1466'. [ 281.133524][T11055] netlink: 'syz.2.1467': attribute type 4 has an invalid length. [ 281.246546][T11059] netlink: 'syz.2.1467': attribute type 4 has an invalid length. [ 281.301024][T11064] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 281.414704][ T30] audit: type=1400 audit(1755865601.391:619): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 282.054151][ T5963] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 282.118507][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 282.259344][ T5963] usb 2-1: Invalid ep0 maxpacket: 64 [ 282.289561][ T24] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 282.297807][ T24] usb 1-1: config 0 has no interface number 0 [ 282.305565][ T24] usb 1-1: New USB device found, idVendor=469a, idProduct=d864, bcdDevice=62.50 [ 282.314791][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.326348][ T24] usb 1-1: Product: syz [ 282.329438][T11104] netlink: 'syz.4.1479': attribute type 4 has an invalid length. [ 282.357511][ T24] usb 1-1: Manufacturer: syz [ 282.392886][ T24] usb 1-1: SerialNumber: syz [ 282.400810][ T5963] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 282.411167][T11104] netlink: 'syz.4.1479': attribute type 4 has an invalid length. [ 282.489209][ T24] usb 1-1: config 0 descriptor?? [ 282.496453][ T24] cdc_eem 1-1:0.143: probe with driver cdc_eem failed with error -22 [ 282.510876][T11105] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 282.638506][ T5963] usb 2-1: Invalid ep0 maxpacket: 64 [ 282.644215][ T5963] usb usb2-port1: attempt power cycle [ 282.707798][ T30] audit: type=1400 audit(1755865602.701:620): avc: denied { bind } for pid=11095 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 283.000254][ T5963] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 283.043936][ T5963] usb 2-1: Invalid ep0 maxpacket: 64 [ 283.178597][ T5963] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 283.227859][ T5963] usb 2-1: Invalid ep0 maxpacket: 64 [ 283.278659][ T5963] usb usb2-port1: unable to enumerate USB device [ 283.573451][ T5963] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 283.743539][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 283.753661][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.765349][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.775323][ T5963] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.789861][ T5963] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.821654][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.832257][ T5963] usb 4-1: config 0 descriptor?? [ 283.957273][T11099] net_ratelimit: 15 callbacks suppressed [ 283.957290][T11099] Set syz1 is full, maxelem 65536 reached [ 284.210757][ T30] audit: type=1400 audit(1755865604.201:621): avc: denied { read } for pid=11127 comm="syz.2.1485" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 284.282287][T11131] bio_check_eod: 2 callbacks suppressed [ 284.282312][T11131] syz.2.1485: attempt to access beyond end of device [ 284.282312][T11131] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 284.301189][T11131] FAT-fs (loop5): unable to read boot sector [ 285.088573][ T30] audit: type=1400 audit(1755865604.201:622): avc: denied { open } for pid=11127 comm="syz.2.1485" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 285.114663][ T5963] hid_parser_main: 48 callbacks suppressed [ 285.114683][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.125289][ T30] audit: type=1400 audit(1755865604.211:623): avc: denied { ioctl } for pid=11127 comm="syz.2.1485" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 285.238466][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.276685][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.285150][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.315070][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.397204][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.445450][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.460681][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.468209][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.476766][ T5963] microsoft 0003:045E:07DA.000C: unknown main item tag 0x3 [ 285.490121][T11145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.588702][ T30] audit: type=1326 audit(1755865605.581:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11134 comm="syz.1.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94d338ebe9 code=0x0 [ 285.613367][ T5963] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input34 [ 285.631462][ T5963] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 285.687828][ T5963] usb 4-1: USB disconnect, device number 49 [ 285.704523][ T30] audit: type=1400 audit(1755865605.701:625): avc: denied { append } for pid=11148 comm="syz.4.1491" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.738740][ T44] usb 1-1: USB disconnect, device number 41 [ 285.899042][ T30] audit: type=1400 audit(1755865605.881:626): avc: denied { mount } for pid=11142 comm="syz.2.1490" name="/" dev="pstore" ino=3446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 286.053380][ T30] audit: type=1400 audit(1755865605.981:627): avc: denied { append } for pid=11148 comm="syz.4.1491" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 286.110636][ T30] audit: type=1400 audit(1755865606.101:628): avc: denied { connect } for pid=11164 comm="syz.4.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.142419][T11166] fuse: Bad value for 'fd' [ 286.148593][ T30] audit: type=1400 audit(1755865606.101:629): avc: denied { bind } for pid=11164 comm="syz.4.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 286.202260][T11171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1494'. [ 286.222746][T11171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.825388][T11227] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 287.860071][T11227] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.871692][T11227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=11227 comm=syz.4.1514 [ 287.879970][ T5910] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 288.025522][T11233] 0ªî{X¹¦: left allmulticast mode [ 288.099715][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.231231][ T30] audit: type=1400 audit(1755865608.001:630): avc: denied { mounton } for pid=11221 comm="syz.1.1513" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.256085][T11233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.259293][ T30] audit: type=1400 audit(1755865608.001:631): avc: denied { mount } for pid=11221 comm="syz.1.1513" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 288.370832][ T5910] usb 4-1: config 2 interface 0 has no altsetting 0 [ 288.380369][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=d8e4, bcdDevice=33.cb [ 288.389841][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.397911][ T5910] usb 4-1: Product: syz [ 288.403268][ T5910] usb 4-1: Manufacturer: syz [ 288.418907][ T5910] usb 4-1: SerialNumber: syz [ 288.806229][T11249] mkiss: ax0: crc mode is auto. [ 288.815526][T11249] tipc: Can't bind to reserved service type 0 [ 288.849810][ T5910] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 288.879489][ T5910] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 288.918018][ T5910] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 288.926009][ T5910] usb 4-1: media controller created [ 289.010892][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.216338][ T5910] usb 4-1: selecting invalid altsetting 2 [ 289.223735][ T5910] set interface failed [ 289.223808][ T5910] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 289.520660][ T5910] error writing reg: 0xff, val: 0x00 [ 289.642462][ T5910] dvb_usb_mxl111sf 4-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 289.687790][ T5910] usb 4-1: USB disconnect, device number 50 [ 289.702788][T11270] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1526'. [ 290.040300][T11284] input: syz0 as /devices/virtual/input/input35 [ 290.109211][ T5910] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 290.337546][T11287] _ÐZ`Ô€@S: entered promiscuous mode [ 290.455393][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1533'. [ 290.488525][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 290.494811][ T5910] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 290.503431][ T5910] usb 4-1: config 0 has no interface number 0 [ 290.509880][ T5910] usb 4-1: too many endpoints for config 0 interface 32 altsetting 213: 79, using maximum allowed: 30 [ 290.521168][ T5910] usb 4-1: config 0 interface 32 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 79 [ 290.550848][ T5910] usb 4-1: config 0 interface 32 has no altsetting 0 [ 290.561602][ T5910] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 290.571409][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.582779][ T5910] usb 4-1: Product: syz [ 290.587098][ T5910] usb 4-1: Manufacturer: syz [ 290.602199][ T5910] usb 4-1: SerialNumber: syz [ 290.610008][ T5910] usb 4-1: config 0 descriptor?? [ 290.620409][ T5910] smsc75xx v1.0.0 [ 290.626060][ T5910] smsc75xx 4-1:0.32 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 290.693139][ T5910] smsc75xx 4-1:0.32: probe with driver smsc75xx failed with error -22 [ 290.708914][ T5870] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 290.867448][T11292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.874315][T11292] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.881922][T11292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.897081][T11292] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 290.906582][T11292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.913829][ T5870] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.921817][ T5870] usb 2-1: not running at top speed; connect to a high speed hub [ 290.933263][ T5870] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 290.941726][ T5870] usb 2-1: config 0 has no interface number 0 [ 290.958517][ T5870] usb 2-1: config 0 interface 102 has no altsetting 0 [ 290.973825][ T5870] usb 2-1: New USB device found, idVendor=0908, idProduct=01ff, bcdDevice=c0.c8 [ 290.992200][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.011148][ T5870] usb 2-1: Product: syz [ 291.021802][ T5870] usb 2-1: Manufacturer: syz [ 291.033865][ T5870] usb 2-1: SerialNumber: syz [ 291.065010][ T5870] usb 2-1: config 0 descriptor?? [ 291.340897][ T5870] hub 2-1:0.102: bad descriptor, ignoring hub [ 291.347207][ T5870] hub 2-1:0.102: probe with driver hub failed with error -5 [ 291.355573][ T5870] cp210x 2-1:0.102: cp210x converter detected [ 291.362180][ T5870] cp210x 2-1:0.102: failed to get vendor val 0x370b size 1: -71 [ 291.371048][ T5870] cp210x 2-1:0.102: querying part number failed [ 291.381575][ T5870] usb 2-1: cp210x converter now attached to ttyUSB0 [ 291.729274][ T5870] usb 2-1: USB disconnect, device number 43 [ 291.736077][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 291.744899][ T5870] cp210x 2-1:0.102: device disconnected [ 291.800403][T11313] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 291.830703][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 291.830713][ T30] audit: type=1400 audit(1755865611.831:634): avc: denied { unmount } for pid=5840 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 292.289386][ T5910] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 292.763645][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 292.765149][ T5870] usb 4-1: USB disconnect, device number 51 [ 292.794233][ T5910] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 292.831084][ T5910] usb 2-1: config 0 has no interface number 0 [ 292.899187][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 292.905388][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 292.905401][ T5168] Bluetooth: hci2: command 0x0406 tx timeout [ 292.978660][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 293.189560][ T5910] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 293.208356][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.230041][ T5910] usb 2-1: Product: syz [ 293.235633][ T5910] usb 2-1: Manufacturer: syz [ 293.245845][ T5910] usb 2-1: SerialNumber: syz [ 293.266984][ T5910] usb 2-1: config 0 descriptor?? [ 293.335324][ T5910] redrat3 2-1:0.83: Couldn't find all endpoints [ 293.729449][T11362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1549'. [ 294.348844][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 294.367062][ T31] Not tainted syzkaller #0 [ 294.377164][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.615741][ T31] task:kworker/0:0 state:D stack:22616 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 294.644865][ T31] Workqueue: usb_hub_wq hub_event [ 294.671213][ T5855] Bluetooth: hci2: unexpected event for opcode 0x203b [ 294.687396][ T31] Call Trace: [ 294.694715][ T31] [ 294.697700][ T31] __schedule+0x1190/0x5de0 [ 294.704248][ T31] ? device_del+0x64e/0x9f0 [ 294.708999][ T31] ? device_unregister+0x1d/0xc0 [ 294.714094][ T31] ? i2c_del_adapter+0x53e/0x6f0 [ 294.719081][ T31] ? dvb_usb_i2c_exit+0x9f/0xf0 [ 294.723933][ T31] ? dvb_usb_device_exit+0x334/0x580 [ 294.729238][ T31] ? __driver_probe_device+0x1de/0x440 [ 294.734710][ T31] ? __device_attach_driver+0x1df/0x310 [ 294.740284][ T31] ? bus_for_each_drv+0x159/0x1e0 [ 294.745309][ T31] ? usb_set_configuration+0x1187/0x1e20 [ 294.750960][ T31] ? usb_generic_driver_probe+0xb1/0x110 [ 294.756581][ T31] ? usb_probe_device+0xec/0x3e0 [ 294.761690][ T31] ? __pfx___schedule+0x10/0x10 [ 294.766533][ T31] ? worker_thread+0x6c8/0xf10 [ 294.771320][ T31] ? kthread+0x3c2/0x780 [ 294.775550][ T31] ? ret_from_fork+0x5d7/0x6f0 [ 294.780314][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 294.785250][ T31] ? schedule+0x2d7/0x3a0 [ 294.789631][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.794393][ T31] ? lock_release+0x201/0x2f0 [ 294.799147][ T31] schedule+0xe7/0x3a0 [ 294.803222][ T31] schedule_timeout+0x257/0x290 [ 294.808074][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 294.813522][ T31] ? kobj_kset_leave+0x15c/0x200 [ 294.818589][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.823394][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.828189][ T31] __wait_for_common+0x2fc/0x4e0 [ 294.833178][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 294.838655][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 294.844129][ T31] ? __pfx_device_del+0x10/0x10 [ 294.849017][ T31] ? kobject_put+0xab/0x5a0 [ 294.853528][ T31] i2c_del_adapter+0x546/0x6f0 [ 294.858288][ T31] ? usb_free_stream_buffers.isra.0+0x1b8/0x2b0 [ 294.864592][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 294.869939][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.874867][ T31] ? kfree+0x24f/0x4d0 [ 294.878982][ T31] dvb_usb_i2c_exit+0x9f/0xf0 [ 294.883684][ T31] dvb_usb_device_exit+0x334/0x580 [ 294.888848][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 294.894504][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 294.899944][ T31] cxusb_probe+0x1c9/0x7d0 [ 294.904384][ T31] ? __pfx_cxusb_probe+0x10/0x10 [ 294.909347][ T31] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 294.915336][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 294.921207][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 294.926852][ T31] usb_probe_interface+0x303/0xa40 [ 294.932019][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 294.937671][ T31] really_probe+0x241/0xa90 [ 294.942210][ T31] __driver_probe_device+0x1de/0x440 [ 294.947492][ T31] driver_probe_device+0x4c/0x1b0 [ 294.952569][ T31] __device_attach_driver+0x1df/0x310 [ 294.957948][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 294.963908][ T31] bus_for_each_drv+0x159/0x1e0 [ 294.968988][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 294.974395][ T31] ? rcu_is_watching+0x12/0xc0 [ 294.979450][ T31] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 294.985550][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 294.992487][ T31] __device_attach+0x1e4/0x4b0 [ 294.997366][ T31] ? __pfx___device_attach+0x10/0x10 [ 295.003060][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 295.008269][ T31] bus_probe_device+0x17f/0x1c0 [ 295.013207][ T31] device_add+0x1148/0x1aa0 [ 295.017863][ T31] ? __pfx_device_add+0x10/0x10 [ 295.022839][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.027620][ T31] usb_set_configuration+0x1187/0x1e20 [ 295.034597][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 295.040703][ T31] usb_generic_driver_probe+0xb1/0x110 [ 295.046208][ T31] usb_probe_device+0xec/0x3e0 [ 295.051043][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 295.056512][ T31] really_probe+0x241/0xa90 [ 295.061710][ T31] __driver_probe_device+0x1de/0x440 [ 295.067086][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 295.072718][ T31] driver_probe_device+0x4c/0x1b0 [ 295.077774][ T31] __device_attach_driver+0x1df/0x310 [ 295.083257][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 295.089471][ T31] bus_for_each_drv+0x159/0x1e0 [ 295.094319][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 295.099722][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.104485][ T31] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 295.111039][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 295.116851][ T31] __device_attach+0x1e4/0x4b0 [ 295.121670][ T31] ? __pfx___device_attach+0x10/0x10 [ 295.126971][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 295.132810][ T31] bus_probe_device+0x17f/0x1c0 [ 295.137664][ T31] device_add+0x1148/0x1aa0 [ 295.142749][ T31] ? __pfx_device_add+0x10/0x10 [ 295.147629][ T31] ? usb_new_device+0xc41/0x1a60 [ 295.152678][ T31] usb_new_device+0xd07/0x1a60 [ 295.157461][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 295.162502][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 295.167706][ T31] ? hub_event+0x2f20/0x4fe0 [ 295.172316][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.177075][ T31] hub_event+0x2f34/0x4fe0 [ 295.181522][ T31] ? __pfx_hub_event+0x10/0x10 [ 295.186287][ T31] ? ioread16_rep+0xe0/0x110 [ 295.190954][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 295.196947][ T31] ? rcu_sync_enter+0x60/0x350 [ 295.201786][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.206545][ T31] ? lock_acquire+0x2cd/0x350 [ 295.211273][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.216032][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.220842][ T31] process_one_work+0x9cf/0x1b70 [ 295.225809][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 295.231141][ T31] ? __pfx_process_one_work+0x10/0x10 [ 295.236513][ T31] ? assign_work+0x1a0/0x250 [ 295.241113][ T31] worker_thread+0x6c8/0xf10 [ 295.245710][ T31] ? __pfx_worker_thread+0x10/0x10 [ 295.250883][ T31] kthread+0x3c2/0x780 [ 295.254949][ T31] ? __pfx_kthread+0x10/0x10 [ 295.259627][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.264420][ T31] ? __pfx_kthread+0x10/0x10 [ 295.269054][ T31] ret_from_fork+0x5d7/0x6f0 [ 295.273642][ T31] ? __pfx_kthread+0x10/0x10 [ 295.278224][ T31] ret_from_fork_asm+0x1a/0x30 [ 295.283017][ T31] [ 295.286154][ T31] INFO: lockdep is turned off. [ 295.291341][ T31] NMI backtrace for cpu 0 [ 295.291356][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 295.291374][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.291383][ T31] Call Trace: [ 295.291388][ T31] [ 295.291394][ T31] dump_stack_lvl+0x116/0x1f0 [ 295.291415][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 295.291436][ T31] ? watchdog+0xd17/0x1260 [ 295.291455][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 295.291480][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 295.291501][ T31] watchdog+0xf0e/0x1260 [ 295.291514][ T31] ? __pfx_watchdog+0x10/0x10 [ 295.291525][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.291536][ T31] ? __kthread_parkme+0x19e/0x250 [ 295.291552][ T31] ? __pfx_watchdog+0x10/0x10 [ 295.291563][ T31] kthread+0x3c2/0x780 [ 295.291573][ T31] ? __pfx_kthread+0x10/0x10 [ 295.291583][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.291596][ T31] ? __pfx_kthread+0x10/0x10 [ 295.291606][ T31] ret_from_fork+0x5d7/0x6f0 [ 295.291616][ T31] ? __pfx_kthread+0x10/0x10 [ 295.291626][ T31] ret_from_fork_asm+0x1a/0x30 [ 295.291642][ T31] [ 295.291646][ T31] Sending NMI from CPU 0 to CPUs 1: [ 295.410880][ C1] NMI backtrace for cpu 1 [ 295.410898][ C1] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 295.410913][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.410923][ C1] Workqueue: events_unbound toggle_allocation_gate [ 295.410943][ C1] RIP: 0010:walk_to_pmd+0x312/0x4c0 [ 295.410962][ C1] Code: ff 81 e3 80 00 00 00 48 89 de e8 79 02 b3 ff 48 85 db 0f 85 fe 00 00 00 e8 fb 06 b3 ff 48 89 e8 48 83 c4 08 5b 5d 41 5c 41 5d <41> 5e 41 5f e9 d5 1b 8e 09 e8 e0 06 b3 ff 48 89 de 4c 89 e7 48 89 [ 295.410975][ C1] RSP: 0018:ffffc90000ad78e8 EFLAGS: 00000282 [ 295.410986][ C1] RAX: ffff88801b86caa8 RBX: ffffea0000085d00 RCX: ffffffff820884e7 [ 295.410999][ C1] RDX: ffff8880212c0000 RSI: ffffffff820884f5 RDI: 0000000000000007 [ 295.411008][ C1] RBP: ffffffff82174bdb R08: 0000000000000007 R09: 0000000000000000 [ 295.411016][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801b870000 [ 295.411024][ C1] R13: 00002aaaaaaab000 R14: ffffffff8df56480 R15: 000000001b86c067 [ 295.411033][ C1] FS: 0000000000000000(0000) GS:ffff8881247bc000(0000) knlGS:0000000000000000 [ 295.411047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.411056][ C1] CR2: 000000110c461e1b CR3: 000000000e380000 CR4: 00000000003526f0 [ 295.411064][ C1] Call Trace: [ 295.411071][ C1] [ 295.411078][ C1] __get_locked_pte+0x25/0xc0 [ 295.411095][ C1] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 295.411111][ C1] __text_poke+0x255/0xb70 [ 295.411126][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 295.411142][ C1] ? __pfx___text_poke+0x10/0x10 [ 295.411157][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 295.411172][ C1] smp_text_poke_batch_finish+0x652/0xdb0 [ 295.411191][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 295.411209][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 295.411229][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 295.411247][ C1] jump_label_update+0x376/0x550 [ 295.411268][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 295.411287][ C1] static_key_enable+0x1a/0x20 [ 295.411305][ C1] toggle_allocation_gate+0xfa/0x280 [ 295.411318][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 295.411332][ C1] ? rcu_is_watching+0x12/0xc0 [ 295.411355][ C1] ? lock_acquire+0x2cd/0x350 [ 295.411378][ C1] ? rcu_is_watching+0x12/0xc0 [ 295.411393][ C1] ? rcu_is_watching+0x12/0xc0 [ 295.411409][ C1] process_one_work+0x9cf/0x1b70 [ 295.411427][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 295.411447][ C1] ? __pfx_process_one_work+0x10/0x10 [ 295.411462][ C1] ? assign_work+0x1a0/0x250 [ 295.411476][ C1] worker_thread+0x6c8/0xf10 [ 295.411492][ C1] ? __kthread_parkme+0x19e/0x250 [ 295.411511][ C1] ? __pfx_worker_thread+0x10/0x10 [ 295.411524][ C1] kthread+0x3c2/0x780 [ 295.411537][ C1] ? __pfx_kthread+0x10/0x10 [ 295.411550][ C1] ? rcu_is_watching+0x12/0xc0 [ 295.411569][ C1] ? __pfx_kthread+0x10/0x10 [ 295.411582][ C1] ret_from_fork+0x5d7/0x6f0 [ 295.411594][ C1] ? __pfx_kthread+0x10/0x10 [ 295.411606][ C1] ret_from_fork_asm+0x1a/0x30 [ 295.411626][ C1] [ 295.417175][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 295.723718][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 295.732808][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.742854][ T31] Call Trace: [ 295.746112][ T31] [ 295.749026][ T31] dump_stack_lvl+0x3d/0x1f0 [ 295.753609][ T31] vpanic+0x6e8/0x7a0 [ 295.757576][ T31] ? __pfx_vpanic+0x10/0x10 [ 295.762066][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 295.767943][ T31] panic+0xca/0xd0 [ 295.771655][ T31] ? __pfx_panic+0x10/0x10 [ 295.776061][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 295.781418][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 295.787558][ T31] ? watchdog+0xd78/0x1260 [ 295.791955][ T31] ? watchdog+0xd6b/0x1260 [ 295.796353][ T31] watchdog+0xd89/0x1260 [ 295.800576][ T31] ? __pfx_watchdog+0x10/0x10 [ 295.805234][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.810410][ T31] ? __kthread_parkme+0x19e/0x250 [ 295.815418][ T31] ? __pfx_watchdog+0x10/0x10 [ 295.820109][ T31] kthread+0x3c2/0x780 [ 295.824190][ T31] ? __pfx_kthread+0x10/0x10 [ 295.828761][ T31] ? rcu_is_watching+0x12/0xc0 [ 295.833526][ T31] ? __pfx_kthread+0x10/0x10 [ 295.838110][ T31] ret_from_fork+0x5d7/0x6f0 [ 295.842681][ T31] ? __pfx_kthread+0x10/0x10 [ 295.847250][ T31] ret_from_fork_asm+0x1a/0x30 [ 295.852004][ T31] [ 295.855235][ T31] Kernel Offset: disabled [ 295.859529][ T31] Rebooting in 86400 seconds..