last executing test programs: 9.299453273s ago: executing program 4 (id=735): socket$isdn(0x22, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) ioperm(0x0, 0xf1, 0x7) uname(&(0x7f0000001440)=""/131) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000070601080000000000000000010000ca050001000700000008000640dfffaa27080006400000000c"], 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4804) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000dbdb3b401c577336c3c6e6a309c20000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1a37c1, 0x42) statfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)=""/212) 9.298004177s ago: executing program 2 (id=736): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) setuid(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x3}], 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 8.117218399s ago: executing program 4 (id=737): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) 7.885783918s ago: executing program 2 (id=738): openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) fsopen(&(0x7f0000000340)='hfs\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000dc0)={{0x12, 0x1, 0x201, 0x75, 0xe2, 0xd7, 0x20, 0x1bc7, 0x1005, 0x397, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcb, 0x2, 0x0, 0xf2, 0x40, 0x0, [{{0x9, 0x4, 0x24, 0x9, 0x0, 0x3, 0x26, 0x42, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x1, 0x4}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, '%gX\b:'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xfff, 0x4, 0x1}, {0x6, 0x24, 0x1a, 0x1, 0x1}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0x1e, 0x24, 0x13, 0x10, "1f8a1c1c7b234ba589dc12191649ecfe56c9eec5b5d866620942"}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0x3, 0xd, 0x4, 0x200, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x8c, 0x7, 0xf9, 0xdd}, @dmm={0x7, 0x24, 0x14, 0x6, 0x6}, @mbim={0xc, 0x24, 0x1b, 0x47b9, 0x7, 0x1, 0x4, 0x5, 0x1}]}]}}, {{0x9, 0x4, 0x36, 0x3, 0x1, 0xa8, 0x6d, 0x4, 0x9, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "a3f9b58c"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x9, 0x8000, 0x5}, {0x6, 0x24, 0x1a, 0x400, 0x51}, [@obex={0x5, 0x24, 0x15, 0x3ce1}]}], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0xe5, 0x6, 0x8}}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x2, 0x36, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x8, &(0x7f0000000140)=@string={0x8, 0x3, "2815a3f7ae30"}}]}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, 0x0}, 0x99) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xd2}, &(0x7f00000001c0)=0x9c) r5 = add_key$user(&(0x7f0000000440), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)='7\f', 0x2, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r6, r5}, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000001c0)={r7, r9}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) pread64(r10, 0x0, 0x0, 0x5c2fbf97) 7.311936916s ago: executing program 3 (id=739): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x2000000, 0x200000000}) 7.271940119s ago: executing program 0 (id=740): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) io_setup(0x9, &(0x7f0000000b80)=0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000009c0)) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="1078f918bd7544db77f47bbe4caa7062e5a5d72e0daf922b642b726e5328430dd535781b911a612b1db50187dfd2ab0b4138f808d815e6a2c7aa4dac668f1b67cdd0dabfa247815bfab13b9893403172380d44167836f9cc485e6378e793cd88e5ee1279e344ec31de689d11d9ed67c8a8", 0x71, r1) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='smaps_rollup\x00') syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x302, 0x0, 0x0, 0x0, 0x0}) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) (async) io_setup(0x9, &(0x7f0000000b80)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) (async) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000009c0)) (async) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="1078f918bd7544db77f47bbe4caa7062e5a5d72e0daf922b642b726e5328430dd535781b911a612b1db50187dfd2ab0b4138f808d815e6a2c7aa4dac668f1b67cdd0dabfa247815bfab13b9893403172380d44167836f9cc485e6378e793cd88e5ee1279e344ec31de689d11d9ed67c8a8", 0x71, r1) (async) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000500)='smaps_rollup\x00') (async) 7.18360067s ago: executing program 3 (id=741): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80083, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000100)) 7.183101907s ago: executing program 4 (id=742): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) mkdir(&(0x7f0000000400)='./file1\x00', 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x1a2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000380)=0xfffffffffffff800, 0x12) getsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f0000000440)=""/202, &(0x7f00000000c0)=0xca) io_setup(0xccc7, &(0x7f0000000180)) chdir(&(0x7f00000005c0)='./bus\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x18) 5.611790878s ago: executing program 0 (id=744): syz_emit_ethernet(0x2ae, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x408d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @local}) close(0x3) 5.611046339s ago: executing program 1 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x80000000, 0x0, 0x81, 0xdfb, 0x40, 0x4, 0x4, {0x0, @in6={{0xa, 0x4e21, 0x9, @mcast1, 0x8}}, 0x0, 0x3, 0x492, 0xff, 0x7}}, &(0x7f0000000200)=0xb0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) 5.520993575s ago: executing program 4 (id=746): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000002240)='\x00', 0x1, 0x600448e9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x4, r3}, 0x38) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'os2.', '&&{}$/@\'\x00'}, &(0x7f0000000140)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1c2420, &(0x7f0000000900)) 5.44969842s ago: executing program 3 (id=747): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000380)='./file0\x00', 0x14927e, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) 4.564209895s ago: executing program 0 (id=748): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x6, 0x0, 0x3}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x80800) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000140)={0x395, 0x6}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, &(0x7f0000000000)=""/40, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe}) 4.446352698s ago: executing program 0 (id=749): socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r0, 0x851, 0x400000000000000) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @multicast, 'gre0\x00'}}, 0x1e) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket(0x23, 0xa, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) syz_io_uring_setup(0x2601, &(0x7f00000000c0)={0x0, 0x0, 0x10711, 0x1, 0xefffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, 0x0) (async, rerun: 64) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) (rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a052401"], 0x0) (rerun: 64) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r5}, 0x10) (async, rerun: 64) msgrcv(0x0, 0x0, 0x4e, 0x2, 0x800) (rerun: 64) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (rerun: 32) r7 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_getfd(r8, 0xffffffffffffffff, 0x0) 4.323804504s ago: executing program 3 (id=750): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffd, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000440), 0x10001, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, 0x0, 0x10002) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000625000/0x3000)=nil, 0x3000, 0x2000000, 0x11, r0, 0xa2d91000) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd0e4c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x515f3157, 0x0, "78e114100985a79874342a70e113343972d01f"}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @win={{0x100, 0x3, 0x2, 0x1}, 0x6, 0x1, &(0x7f0000000080)={{0x6, 0x5, 0x6, 0x7}}, 0x2f890000, 0x0, 0xd}}}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) write$UHID_INPUT(r7, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) read$FUSE(r7, &(0x7f0000002080)={0x2020}, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.189817696s ago: executing program 2 (id=751): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000840001, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x586abc7b6f5091ec, 0xfa00, {0x0, 0x0, 0x13f}}, 0xfdbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000300)={0x0, 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) 3.894285502s ago: executing program 1 (id=752): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x33}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004011, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80280, 0x0) read$msr(r2, &(0x7f00000000c0)=""/237, 0xed) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x4, 0x30314142, 0x1, @discrete={0x200, 0x4}}) 3.532509462s ago: executing program 4 (id=753): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x7000201c}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) 3.449814272s ago: executing program 1 (id=754): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x20540, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000001772c21552dfb14e54232e3012de840000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/144]}, 0x108) 2.994015961s ago: executing program 0 (id=755): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, &(0x7f0000000500)="f415078807f6d8e5d630008956beb76bb69d8aae5ee308748adc607af549c702a83b4e2c6d42bac509bb61603783667f4af91eb3b9cfa4eeb06d4aa5c05e48b51e143c50256f9500866d2abb5ad49d65869cef56edd0f8d76af4035859583e756da45b432d606a72e43c202565388f843619e08fd0876e0973438b3f4df68bddf77ce3950c739f4c947605ed5f0b52e08fd5e72dc6864278ef87ceb0b612ff28f97c2d5c2c0eaf149a2f3edd9a70a2e1c04b19484870354f63c6a81db93033f32fc8a91c13b49ef4db855568cf28774e23ea55d688ebc68c6c587d130fc4ea56edcf7497554f6685cb9ed8533f45", 0xee, 0x48004, &(0x7f0000000180)={0xa, 0x4e20, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8024}], 0x1, 0xfffffff9) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1d000005000000020018680100751b3ee351ca00000000000001020000484b6dd9bf4cebe44e6163949ce7af9690e64e20725344f784cd36fbcd13eb79f377e31b21a90bf5869e96e310d7979481eb19e2b279fa9be3a40b8aed88f64e2fa0912fabe831b51d8a", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) 2.712085007s ago: executing program 2 (id=756): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x0, "08000000000000000000000000000000000000b582000000010000000100"}) (async) unshare(0x400) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240100001300000226bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x20080014}, 0x41) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x6102, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000000c0)={[{@inode32}, {@nr_blocks={'nr_blocks', 0x3d, [0x39]}}]}) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @union={0x0, 0xef, 0x0, 0x5, 0x1}]}}, &(0x7f0000000980)=""/144, 0x36, 0x90, 0x1, 0x0, 0x0, @void, @value}, 0x1f) unshare(0x4000000) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) (async) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc) (async) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x1000, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x405c004}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r5 = dup2(r3, r3) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0xfff9, 0x8, 0x1, 0x3, 0x3}) 2.325734154s ago: executing program 2 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f0000000240)=[{r1, 0x21c8}, {r0, 0x8000}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000000)=0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000280)="ca1c808bb35bda", 0x7) write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x225dfd2f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r7}, 0x18) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x20403) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$cont(0x20, r8, 0x3, 0x3) 1.773474955s ago: executing program 4 (id=758): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) iopl(0xff) pwritev(r0, 0x0, 0x0, 0x6, 0x1ff) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001100)={'syztnl0\x00', &(0x7f0000001080)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x8000, 0x8001, {{0x5, 0x4, 0x2, 0x1, 0x14, 0x68, 0xfff, 0xa0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast}}}}) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x0, 0x6, 0x1ff, 0x4f, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000480)=@sack_info={r5, 0x257, 0x100}, &(0x7f00000004c0)=0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x2000004) write$ppp(r0, &(0x7f0000000340)="ed", 0x1) io_uring_setup(0x4d57, &(0x7f0000000200)={0x0, 0xcb9c, 0x8, 0x1, 0x143}) socket(0x10, 0x803, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYRES32=0x0], 0x0) pwritev(r0, &(0x7f0000000880)=[{&(0x7f00000008c0)}], 0x1, 0x295e, 0x0) syz_io_uring_setup(0xb58, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000380)=0x40, 0x0, 0x4) 1.165822972s ago: executing program 1 (id=759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, &(0x7f0000000bc0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000003100), r2) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, 0x0, 0x4008000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24008881}, 0x24000000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) close(r1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa2000000000000070200"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket(0x1a, 0xa, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) 1.002429787s ago: executing program 1 (id=760): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000380)='./file0\x00', 0x14927e, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000140)=@framed={{}, [@generic={0x71, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) 725.868012ms ago: executing program 3 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000080) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee000000", @ANYRES16=0x0, @ANYBLOB="0100fdffffff000000000100000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c0001"], 0x5c}, 0x1, 0xf000, 0x0, 0x8c1}, 0x20040) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100b4eeff7f0000010008"], 0x118}], 0x3c, 0x0, 0x0, 0x40}, 0x0) 641.891596ms ago: executing program 0 (id=762): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424020244"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 570.528077ms ago: executing program 1 (id=763): r0 = fsopen(&(0x7f0000000100)='ecryptfs\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101081, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3a) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000300), 0x0) fallocate(r3, 0x4, 0x6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) uname(&(0x7f0000000340)=""/40) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x80044dff, 0x1000000000000) close_range(r0, r1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12015002d4cef1209911a368b54201020301190a120001010340d30904990800ffffff07"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 444.876809ms ago: executing program 3 (id=764): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) timerfd_create(0x9, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0x2, &(0x7f0000000180)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x6}], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, r1, 0x7, &(0x7f0000000680)=[r0], &(0x7f00000006c0)=[{0x0, 0x4, 0x5, 0x1}, {0x1, 0x1, 0xb, 0x1}, {0x3, 0x3, 0x1, 0x8}, {0x0, 0x4, 0x6}, {0x4, 0x2, 0x0, 0x7}, {0x3, 0x3, 0xc, 0x2}, {0x3, 0x2, 0x1, 0x4}], 0x10, 0xfffffffa, @void, @value}, 0x94) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000f80)={{0x12, 0x1, 0x110, 0x9f, 0xe5, 0x63, 0x20, 0x41e, 0x4064, 0x9763, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x1, 0x7, 0x40, 0xc9, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0x43, 0x49, 0x7a, 0x3}}, {{0x9, 0x4, 0x3e, 0xff, 0x0, 0x86, 0x42, 0x12, 0x8}}]}}]}}, 0x0) 0s ago: executing program 2 (id=765): syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x20000000, 0x0, 0x0, [0x0], [0x1, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0xb68a], [0x0, 0x2, 0x0, 0xcbb]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x12, r6, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x204600, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r9, &(0x7f0000000380)={0x18, 0x0, r10, {0x6}}, 0x18) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty=0xac1414aa}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004a00)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x19}]}, 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.870602][ T5899] usb 2-1: config 0 descriptor?? [ 168.883433][ T5899] usblcd 2-1:0.0: USBLCD model not supported. [ 169.079943][ T5856] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 169.155013][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 169.155028][ T30] audit: type=1400 audit(1742582671.477:591): avc: denied { open } for pid=7342 comm="syz.1.350" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 169.194550][ T30] audit: type=1400 audit(1742582671.507:592): avc: denied { ioctl } for pid=7342 comm="syz.1.350" path="/dev/ptyq7" dev="devtmpfs" ino=126 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 169.219850][ T30] audit: type=1400 audit(1742582671.507:593): avc: denied { write } for pid=7342 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.253716][ T30] audit: type=1400 audit(1742582671.567:594): avc: denied { setattr } for pid=7342 comm="syz.1.350" name="SCTPv6" dev="sockfs" ino=13904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.276489][ T5856] usb 3-1: Using ep0 maxpacket: 8 [ 169.284368][ T5869] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 169.294780][ T5869] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 169.302985][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 160, changing to 11 [ 169.316300][ T5869] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 169.323990][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25161, setting to 1024 [ 169.339627][ T5869] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 169.347126][ T5856] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.357617][ T5869] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 169.365731][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.378978][ T5856] usb 3-1: config 0 descriptor?? [ 169.429864][ T5869] hid-picolcd 0003:04D8:C002.0003: No report with id 0x11 found [ 169.593401][ T5856] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 169.623791][ T5869] usb 4-1: USB disconnect, device number 15 [ 169.638212][ T5856] usb 3-1: USB disconnect, device number 17 [ 170.049553][ T5899] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.123213][ T7375] pim6reg: entered allmulticast mode [ 170.167408][ T5869] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.339644][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 170.390363][ T5899] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 170.433431][ T5899] usb 5-1: config 0 has no interface number 0 [ 170.538695][ T5856] usb 2-1: USB disconnect, device number 15 [ 170.736359][ T5869] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 170.956309][ T5899] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 170.989903][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.000218][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.008403][ T5869] usb 1-1: Product: syz [ 171.013163][ T30] audit: type=1400 audit(1742582673.337:595): avc: denied { ioctl } for pid=7383 comm="syz.1.362" path="socket:[12912]" dev="sockfs" ino=12912 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.038365][ T5869] usb 1-1: Manufacturer: syz [ 171.043289][ T5899] usb 5-1: Product: syz [ 171.047762][ T5869] usb 1-1: SerialNumber: syz [ 171.052603][ T5899] usb 5-1: Manufacturer: syz [ 171.058390][ T5899] usb 5-1: SerialNumber: syz [ 171.064020][ T30] audit: type=1400 audit(1742582673.337:596): avc: denied { shutdown } for pid=7383 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.155709][ T5899] usb 5-1: config 0 descriptor?? [ 171.199199][ T5869] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 171.259346][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 171.348751][ T5899] msi2500 5-1:0.246: Registered as swradio24 [ 171.355015][ T5899] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 171.679604][ T5871] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 171.936007][ T5871] usb 4-1: config 0 has too many interfaces: 138, using maximum allowed: 32 [ 171.954043][ T5871] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 138 [ 171.964031][ T26] usb 1-1: USB disconnect, device number 8 [ 171.991996][ T46] usb 5-1: USB disconnect, device number 9 [ 172.012922][ T5871] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=a9.c8 [ 172.042492][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.156723][ T5871] usb 4-1: Product: syz [ 172.169608][ T5871] usb 4-1: Manufacturer: syz [ 172.179529][ T5871] usb 4-1: SerialNumber: syz [ 172.191055][ T5871] usb 4-1: config 0 descriptor?? [ 172.728606][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 172.744082][ T9] ath9k_htc: Failed to initialize the device [ 172.763494][ T26] usb 1-1: ath9k_htc: USB layer deinitialized [ 172.783150][ T7391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.793886][ T7391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.440229][ T7411] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 173.468284][ T7411] batman_adv: batadv0: Adding interface: ip6gretap1 [ 173.475105][ T7411] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.500942][ T7411] batman_adv: batadv0: Interface activated: ip6gretap1 [ 173.509953][ T5871] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 173.614509][ T6226] usb 4-1: USB disconnect, device number 16 [ 173.660191][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 173.668829][ T5871] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 173.686647][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.758738][ T5871] usb 2-1: config 0 has no interface number 0 [ 173.797105][ T5871] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 173.829731][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.841722][ T30] audit: type=1400 audit(1742582676.157:597): avc: denied { ioctl } for pid=7415 comm="syz.3.371" path="socket:[12961]" dev="sockfs" ino=12961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 173.866121][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.880135][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.894652][ T5871] usb 2-1: Product: syz [ 173.900626][ T5871] usb 2-1: Manufacturer: syz [ 173.905443][ T5871] usb 2-1: SerialNumber: syz [ 173.911254][ T5871] usb 2-1: config 0 descriptor?? [ 173.927347][ T5871] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 173.949593][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 173.984853][ T30] audit: type=1400 audit(1742582676.297:598): avc: denied { bind } for pid=7415 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.031141][ T5826] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 174.075573][ T30] audit: type=1400 audit(1742582676.297:599): avc: denied { name_bind } for pid=7415 comm="syz.3.371" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 174.126967][ T5871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 174.177561][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.219064][ T5871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 174.239331][ T5826] usb 3-1: Using ep0 maxpacket: 32 [ 174.250185][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.262734][ T5826] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 174.285981][ T46] usb 5-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 174.305376][ T5826] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 174.323298][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.331851][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 174.367213][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.377074][ T46] usb 5-1: config 0 descriptor?? [ 174.392115][ T5826] usb 3-1: config 0 descriptor?? [ 174.418061][ T5826] hub 3-1:0.0: bad descriptor, ignoring hub [ 174.424257][ T5826] hub 3-1:0.0: probe with driver hub failed with error -5 [ 174.449808][ T5826] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 174.534241][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.542729][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.615732][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 174.643654][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 174.727991][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 174.742289][ T5826] usb 2-1: USB disconnect, device number 16 [ 174.786505][ T5826] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 174.861443][ T5826] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 174.873351][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 174.882877][ T30] audit: type=1400 audit(1742582677.207:600): avc: denied { getopt } for pid=7426 comm="syz.3.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 174.910011][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 174.937098][ T5826] quatech2 2-1:0.51: device disconnected [ 174.965978][ T46] usb 5-1: USB disconnect, device number 10 [ 175.260059][ T7435] 9pnet_fd: Insufficient options for proto=fd [ 175.368194][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.701870][ T5826] usb 3-1: USB disconnect, device number 18 [ 175.721973][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 175.728085][ T5821] Bluetooth: hci0: command 0x0406 tx timeout [ 175.735123][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 175.736137][ T5133] Bluetooth: hci4: command 0x0406 tx timeout [ 175.741472][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 176.688100][ T30] audit: type=1400 audit(1742582678.357:601): avc: denied { write } for pid=7441 comm="syz.1.375" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.710716][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.618188][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 177.894206][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 177.988229][ T5899] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 177.996702][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.046796][ T5899] usb 3-1: config 0 has no interface number 0 [ 178.055076][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 178.068552][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.077696][ T5899] usb 3-1: Product: syz [ 178.084135][ T5899] usb 3-1: Manufacturer: syz [ 178.090860][ T5899] usb 3-1: SerialNumber: syz [ 178.098529][ T5899] usb 3-1: config 0 descriptor?? [ 178.173891][ T7464] FAULT_INJECTION: forcing a failure. [ 178.173891][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 178.189074][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.4.383 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 178.189095][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.189103][ T7464] Call Trace: [ 178.189108][ T7464] [ 178.189114][ T7464] dump_stack_lvl+0x16c/0x1f0 [ 178.189139][ T7464] should_fail_ex+0x50a/0x650 [ 178.189165][ T7464] ? fs_reclaim_acquire+0xae/0x150 [ 178.189188][ T7464] ? __request_module+0x2c6/0x6c0 [ 178.189210][ T7464] should_failslab+0xc2/0x120 [ 178.189228][ T7464] __kmalloc_cache_noprof+0x68/0x410 [ 178.189250][ T7464] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 178.189271][ T7464] ? lockdep_hardirqs_on+0x7c/0x110 [ 178.189296][ T7464] __request_module+0x2c6/0x6c0 [ 178.189318][ T7464] ? rtnl_newlink+0x1326/0x1d60 [ 178.189341][ T7464] ? __pfx___request_module+0x10/0x10 [ 178.189363][ T7464] ? find_held_lock+0x2d/0x110 [ 178.189391][ T7464] ? lock_acquire+0x2f/0xb0 [ 178.189412][ T7464] ? rtnl_link_ops_get+0x35/0x2c0 [ 178.189445][ T7464] rtnl_newlink+0x1326/0x1d60 [ 178.189467][ T7464] ? hlock_class+0x4e/0x130 [ 178.189482][ T7464] ? __lock_acquire+0xcc5/0x3c40 [ 178.189502][ T7464] ? __pfx_rtnl_newlink+0x10/0x10 [ 178.189526][ T7464] ? __pfx___lock_acquire+0x10/0x10 [ 178.189546][ T7464] ? cred_has_capability.isra.0+0x192/0x2f0 [ 178.189569][ T7464] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 178.189597][ T7464] ? find_held_lock+0x2d/0x110 [ 178.189616][ T7464] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 178.189638][ T7464] ? __pfx_lock_release+0x10/0x10 [ 178.189659][ T7464] ? trace_lock_acquire+0x14e/0x1f0 [ 178.189684][ T7464] ? __pfx_rtnl_newlink+0x10/0x10 [ 178.189707][ T7464] rtnetlink_rcv_msg+0x95b/0xea0 [ 178.189729][ T7464] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.189760][ T7464] netlink_rcv_skb+0x16b/0x440 [ 178.189784][ T7464] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.189810][ T7464] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.189843][ T7464] ? netlink_deliver_tap+0x1ae/0xd30 [ 178.189870][ T7464] netlink_unicast+0x53c/0x7f0 [ 178.189896][ T7464] ? __pfx_netlink_unicast+0x10/0x10 [ 178.189925][ T7464] netlink_sendmsg+0x8b8/0xd70 [ 178.189952][ T7464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.189983][ T7464] ____sys_sendmsg+0xaaf/0xc90 [ 178.190002][ T7464] ? copy_msghdr_from_user+0x10b/0x160 [ 178.190027][ T7464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.190055][ T7464] ___sys_sendmsg+0x135/0x1e0 [ 178.190078][ T7464] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.190111][ T7464] ? __pfx_lock_release+0x10/0x10 [ 178.190133][ T7464] ? trace_lock_acquire+0x14e/0x1f0 [ 178.190159][ T7464] ? __fget_files+0x206/0x3a0 [ 178.190180][ T7464] __sys_sendmsg+0x16e/0x220 [ 178.190205][ T7464] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.190243][ T7464] do_syscall_64+0xcd/0x250 [ 178.190269][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.190292][ T7464] RIP: 0033:0x7fdc3738d169 [ 178.190305][ T7464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.190321][ T7464] RSP: 002b:00007fdc38124038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.190337][ T7464] RAX: ffffffffffffffda RBX: 00007fdc375a5fa0 RCX: 00007fdc3738d169 [ 178.190348][ T7464] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 178.190358][ T7464] RBP: 00007fdc38124090 R08: 0000000000000000 R09: 0000000000000000 [ 178.190367][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.190377][ T7464] R13: 0000000000000000 R14: 00007fdc375a5fa0 R15: 00007fff7454eb28 [ 178.190398][ T7464] [ 179.706470][ T30] audit: type=1400 audit(1742582681.957:602): avc: denied { ioctl } for pid=7448 comm="syz.2.378" path="socket:[13097]" dev="sockfs" ino=13097 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 179.731215][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.822348][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 180.007278][ T30] audit: type=1400 audit(1742582682.327:603): avc: denied { listen } for pid=7473 comm="syz.3.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.099968][ T7476] sp0: Synchronizing with TNC [ 180.129399][ T30] audit: type=1400 audit(1742582682.337:604): avc: denied { read } for pid=7473 comm="syz.3.385" path="socket:[13111]" dev="sockfs" ino=13111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.189515][ T5899] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.287979][ T30] audit: type=1400 audit(1742582682.607:605): avc: denied { bind } for pid=7472 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 180.360606][ T5899] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 180.371026][ T5899] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 180.383063][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.402226][ T5899] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 180.549983][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.689915][ T9] usb 5-1: device descriptor read/64, error -71 [ 180.789548][ T5869] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 180.848040][ T46] usb 3-1: USB disconnect, device number 19 [ 180.919819][ T5869] usb 2-1: device descriptor read/64, error -71 [ 180.949848][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 181.184578][ T9] usb 5-1: device descriptor read/64, error -71 [ 181.289753][ T5869] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 181.358784][ T9] usb usb5-port1: attempt power cycle [ 181.479957][ T5899] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 181.492747][ T5869] usb 2-1: device descriptor read/64, error -71 [ 181.515710][ T5899] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 181.526076][ T5899] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 181.544879][ T5899] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 181.583308][ T5899] usb 1-1: USB disconnect, device number 9 [ 181.620577][ T5869] usb usb2-port1: attempt power cycle [ 181.699543][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.746046][ T9] usb 5-1: device descriptor read/8, error -71 [ 182.622726][ T5869] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 183.041793][ T5869] usb 2-1: device descriptor read/8, error -71 [ 183.069926][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.279627][ T9] usb 5-1: device not accepting address 14, error -71 [ 183.286536][ T5869] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 183.314830][ T9] usb usb5-port1: unable to enumerate USB device [ 183.340051][ T5869] usb 2-1: device descriptor read/8, error -71 [ 183.459719][ T5869] usb usb2-port1: unable to enumerate USB device [ 183.696386][ T7525] gfs2: gfs2 mount does not exist [ 183.710619][ T30] audit: type=1400 audit(1742583139.015:606): avc: denied { mounton } for pid=7523 comm="syz.1.400" path="/83/file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 183.990785][ T30] audit: type=1400 audit(1742583139.315:607): avc: denied { ioctl } for pid=7521 comm="syz.0.398" path="socket:[13180]" dev="sockfs" ino=13180 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.015381][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.389697][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 184.528969][ T7533] ipip0: entered promiscuous mode [ 184.559797][ T7533] netlink: 260 bytes leftover after parsing attributes in process `syz.1.403'. [ 184.632543][ T30] audit: type=1400 audit(1742583139.955:608): avc: denied { create } for pid=7517 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 184.677029][ T5869] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 184.685941][ T30] audit: type=1400 audit(1742583139.955:609): avc: denied { name_bind } for pid=7517 comm="syz.2.397" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 184.858974][ T6226] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 184.902538][ T5869] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 184.925755][ T5869] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 185.054382][ T30] audit: type=1400 audit(1742583140.375:610): avc: denied { read } for pid=7537 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 185.546256][ T30] audit: type=1400 audit(1742583140.375:611): avc: denied { read } for pid=7537 comm="syz.1.405" lport=46029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.548023][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.601066][ T6226] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 185.669536][ T6226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.670391][ T5869] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 185.689255][ T6226] usb 4-1: config 0 descriptor?? [ 187.327346][ T6226] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 187.337721][ T6226] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 187.349682][ T6226] [drm:udl_init] *ERROR* Selecting channel failed [ 187.360998][ T6226] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 187.367709][ T6226] [drm] Initialized udl on minor 2 [ 187.380065][ T6226] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 187.393196][ T6226] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 187.406548][ T5826] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 187.418034][ T6226] usb 4-1: USB disconnect, device number 17 [ 187.424084][ T5826] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 187.642227][ T46] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 187.800123][ T5869] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 188.307640][ T5869] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 188.365574][ T46] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 188.378789][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.379188][ T5869] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 188.455733][ T46] usb 2-1: config 0 descriptor?? [ 188.594087][ T5869] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 188.657795][ T5869] usb 5-1: USB disconnect, device number 15 [ 188.705264][ T7569] netem: change failed [ 189.116018][ T46] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 189.134458][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 189.144748][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 189.176084][ T46] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 189.267854][ T30] audit: type=1400 audit(1742583144.565:612): avc: denied { bind } for pid=7576 comm="syz.2.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.289832][ T46] [drm] Initialized udl on minor 2 [ 189.296681][ T46] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 189.305524][ T46] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 189.313325][ T973] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 189.338479][ T46] usb 2-1: USB disconnect, device number 21 [ 189.344609][ T973] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 191.876016][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 192.646283][ T7601] ucma_write: process 280 (syz.4.422) changed security contexts after opening file descriptor, this is not allowed. [ 192.729573][ T5899] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 192.961519][ T5899] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 192.972735][ T5899] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 192.988111][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.996650][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 193.017635][ T5899] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 193.170856][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 193.187173][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.227617][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.259525][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 193.266263][ T30] audit: type=1400 audit(1742583148.585:613): avc: denied { bind } for pid=7622 comm="syz.4.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 193.493929][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 193.503294][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.517628][ T9] usb 3-1: config 0 descriptor?? [ 193.931804][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 193.939398][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 194.011705][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 194.186687][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195498][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.232593][ T5899] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 194.293908][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 194.393895][ T5899] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 194.606385][ T9] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0 [ 194.691520][ T5899] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 194.780941][ T5899] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 194.807307][ T5899] usb 2-1: USB disconnect, device number 22 [ 194.829909][ T9] hid-picolcd 0003:04D8:C002.0004: No report with id 0x11 found [ 194.864553][ T9] usb 3-1: USB disconnect, device number 20 [ 195.214908][ T7641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52167 sclass=netlink_route_socket pid=7641 comm=syz.1.435 [ 195.473557][ T30] audit: type=1400 audit(1742583150.775:614): avc: denied { ioctl } for pid=7640 comm="syz.1.435" path="socket:[15495]" dev="sockfs" ino=15495 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 195.539984][ T7645] netlink: 'syz.2.436': attribute type 13 has an invalid length. [ 195.710149][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.682928][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.692632][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.731199][ T7645] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.740111][ T7645] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.749118][ T7645] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.799593][ T7645] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.873398][ T30] audit: type=1400 audit(1742583152.155:615): avc: denied { read } for pid=7653 comm="syz.4.439" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 197.379539][ T30] audit: type=1400 audit(1742583152.155:616): avc: denied { open } for pid=7653 comm="syz.4.439" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 197.441671][ T30] audit: type=1400 audit(1742583152.155:617): avc: denied { ioctl } for pid=7653 comm="syz.4.439" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 199.398228][ T7645] syz.2.436 (7645) used greatest stack depth: 21088 bytes left [ 199.659819][ T973] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 199.798107][ T7679] overlay: Unknown parameter 'func' [ 199.842825][ T973] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 199.854805][ T973] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 199.864545][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.870361][ T7681] sp0: Synchronizing with TNC [ 199.878542][ T30] audit: type=1400 audit(1742583155.195:618): avc: denied { watch } for pid=7677 comm="syz.3.446" path="/85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 199.999565][ T973] usb 5-1: Product: syz [ 200.003849][ T30] audit: type=1400 audit(1742583155.195:619): avc: denied { watch_sb watch_reads } for pid=7677 comm="syz.3.446" path="/85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 200.197862][ T973] usb 5-1: Manufacturer: syz [ 200.216700][ T973] usb 5-1: SerialNumber: syz [ 200.234288][ T973] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 200.250185][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.680655][ T46] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 200.706516][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.737886][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.778358][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 200.842303][ T46] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 201.195174][ T973] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 201.215774][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.221585][ T7671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.249607][ T7671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.315020][ T46] usb 1-1: config 0 descriptor?? [ 201.632903][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.651377][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.703332][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.712743][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.755752][ T46] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 201.763520][ T46] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 201.777487][ T46] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 201.938155][ T46] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 201.946275][ T46] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x0 [ 201.992119][ T973] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 202.014305][ T46] hid-picolcd 0003:04D8:C002.0005: No report with id 0x11 found [ 202.038391][ T5872] usb 1-1: USB disconnect, device number 10 [ 202.179538][ T973] usb 4-1: Using ep0 maxpacket: 8 [ 202.194245][ T973] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 202.216226][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.236083][ T973] usb 4-1: Product: syz [ 202.241023][ T973] usb 4-1: Manufacturer: syz [ 202.246404][ T973] usb 4-1: SerialNumber: syz [ 202.269651][ T973] usb 4-1: config 0 descriptor?? [ 202.350008][ T46] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 202.487445][ T973] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 202.509517][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 202.515946][ T46] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 202.527865][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 202.541154][ T46] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 202.550384][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.558386][ T46] usb 3-1: Product: syz [ 202.562636][ T46] usb 3-1: Manufacturer: syz [ 202.567255][ T46] usb 3-1: SerialNumber: syz [ 202.573692][ T46] usb 3-1: config 0 descriptor?? [ 202.587994][ T46] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 202.597918][ T46] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 202.969800][ T30] audit: type=1400 audit(1742583158.285:620): avc: denied { shutdown } for pid=7703 comm="syz.3.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 203.254651][ T46] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 203.272765][ T46] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 203.379003][ T5899] usb 5-1: USB disconnect, device number 16 [ 203.895068][ T7735] FAULT_INJECTION: forcing a failure. [ 203.895068][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.899832][ T46] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 203.910961][ T7735] CPU: 0 UID: 0 PID: 7735 Comm: syz.4.459 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 203.910981][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.910990][ T7735] Call Trace: [ 203.910994][ T7735] [ 203.910999][ T7735] dump_stack_lvl+0x16c/0x1f0 [ 203.911024][ T7735] should_fail_ex+0x50a/0x650 [ 203.911048][ T7735] _copy_from_user+0x2e/0xd0 [ 203.911064][ T7735] get_user_ifreq+0xf1/0x250 [ 203.911080][ T7735] inet_ioctl+0x381/0x3f0 [ 203.911101][ T7735] ? __pfx_inet_ioctl+0x10/0x10 [ 203.911136][ T7735] ? tomoyo_path_number_perm+0x190/0x590 [ 203.911157][ T7735] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 203.911180][ T7735] sock_do_ioctl+0x116/0x280 [ 203.911196][ T7735] ? __pfx_sock_do_ioctl+0x10/0x10 [ 203.911214][ T7735] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 203.911236][ T7735] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 203.911258][ T7735] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 203.911283][ T7735] sock_ioctl+0x228/0x6c0 [ 203.911299][ T7735] ? __pfx_sock_ioctl+0x10/0x10 [ 203.911319][ T7735] ? selinux_file_ioctl+0x180/0x270 [ 203.911339][ T7735] ? selinux_file_ioctl+0xb4/0x270 [ 203.911363][ T7735] ? __pfx_sock_ioctl+0x10/0x10 [ 203.911380][ T7735] __x64_sys_ioctl+0x190/0x200 [ 203.911400][ T7735] do_syscall_64+0xcd/0x250 [ 203.911421][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.911439][ T7735] RIP: 0033:0x7fdc3738d169 [ 203.911450][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.911463][ T7735] RSP: 002b:00007fdc38103038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.911477][ T7735] RAX: ffffffffffffffda RBX: 00007fdc375a6080 RCX: 00007fdc3738d169 [ 203.911486][ T7735] RDX: 0000200000000140 RSI: 0000000000008918 RDI: 000000000000000a [ 203.911495][ T7735] RBP: 00007fdc38103090 R08: 0000000000000000 R09: 0000000000000000 [ 203.911503][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.911511][ T7735] R13: 0000000000000000 R14: 00007fdc375a6080 R15: 00007fff7454eb28 [ 203.911529][ T7735] [ 204.146330][ T46] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 204.179806][ T6226] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 204.349391][ T6226] usb 1-1: unable to get BOS descriptor or descriptor too short [ 204.424482][ T46] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 204.479842][ T6226] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.514532][ T46] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 204.539345][ T6226] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.548745][ T46] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 204.555684][ T46] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 204.566019][ T6226] usb 1-1: string descriptor 0 read error: -22 [ 204.578707][ T6226] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 204.715906][ T973] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 204.725968][ T46] usb 3-1: USB disconnect, device number 21 [ 204.741619][ T6226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.760548][ T6226] usb 1-1: config 0 descriptor?? [ 204.803992][ T6226] usb 4-1: USB disconnect, device number 18 [ 205.063649][ T46] usb 1-1: USB disconnect, device number 11 [ 205.919570][ T5872] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 207.119530][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 207.340409][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 207.950853][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 207.959614][ T5872] usb 2-1: can't read configurations, error -61 [ 208.089602][ T5872] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 208.188106][ T7770] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 208.479532][ T5872] usb 2-1: device not accepting address 24, error -71 [ 208.979235][ T5872] usb usb2-port1: attempt power cycle [ 209.181671][ T7770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.484594][ T30] audit: type=1400 audit(1742583164.805:621): avc: denied { write } for pid=7779 comm="syz.1.471" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 209.508523][ C1] vkms_vblank_simulate: vblank timer overrun [ 209.528388][ T30] audit: type=1400 audit(1742583164.805:622): avc: denied { open } for pid=7779 comm="syz.1.471" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 209.576550][ T30] audit: type=1400 audit(1742583164.895:623): avc: denied { setopt } for pid=7784 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 209.629722][ T30] audit: type=1400 audit(1742583164.925:624): avc: denied { getopt } for pid=7755 comm="syz.0.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 209.658545][ T30] audit: type=1400 audit(1742583164.935:625): avc: denied { getopt } for pid=7786 comm="syz.1.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 209.709652][ T46] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 210.426255][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.443283][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.453738][ T46] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 210.476081][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.506433][ T46] usb 3-1: config 0 descriptor?? [ 210.749691][ T5872] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 211.083828][ T5872] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 211.205690][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.216682][ T30] audit: type=1400 audit(1742583166.525:626): avc: denied { setopt } for pid=7801 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.254122][ T7807] ubi31: attaching mtd0 [ 211.259898][ T7807] ubi31: scanning is finished [ 211.320378][ T30] audit: type=1400 audit(1742583166.645:627): avc: denied { name_bind } for pid=7780 comm="syz.2.472" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 211.342017][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.909657][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.924442][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 211.937471][ T5872] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 211.949457][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.959728][ T30] audit: type=1400 audit(1742583167.105:628): avc: denied { setopt } for pid=7793 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 212.014548][ T5872] usb 1-1: config 0 descriptor?? [ 212.057626][ T7807] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 212.099530][ T7807] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 212.107054][ T7807] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 212.117648][ T7807] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 212.179696][ T7807] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 212.503313][ T7807] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 212.530786][ T7807] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1371274104 [ 212.570619][ T7807] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 212.635167][ T7811] ubi31: background thread "ubi_bgt31d" started, PID 7811 [ 212.747496][ T5872] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 212.876584][ T46] razer 0003:1532:010E.0006: failed to enable macro keys: -71 [ 212.885758][ T46] razer 0003:1532:010E.0006: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 212.889216][ T5872] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 212.909761][ T5872] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 212.917175][ T5872] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 212.925646][ T46] usb 3-1: USB disconnect, device number 22 [ 212.995882][ T5872] hid-picolcd 0003:04D8:C002.0007: unknown main item tag 0x0 [ 213.019179][ T7820] netlink: 802 bytes leftover after parsing attributes in process `syz.1.481'. [ 213.179738][ T5872] hid-picolcd 0003:04D8:C002.0007: No report with id 0x11 found [ 213.909865][ T5872] usb 1-1: USB disconnect, device number 12 [ 214.226081][ T30] audit: type=1400 audit(1742583169.545:629): avc: denied { ioctl } for pid=7830 comm="syz.2.485" path="socket:[15801]" dev="sockfs" ino=15801 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 214.421359][ T7836] FAULT_INJECTION: forcing a failure. [ 214.421359][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 214.524942][ T7836] CPU: 0 UID: 0 PID: 7836 Comm: syz.4.484 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 214.524971][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 214.524980][ T7836] Call Trace: [ 214.524985][ T7836] [ 214.524991][ T7836] dump_stack_lvl+0x16c/0x1f0 [ 214.525027][ T7836] should_fail_ex+0x50a/0x650 [ 214.525054][ T7836] ? fs_reclaim_acquire+0xae/0x150 [ 214.525080][ T7836] ? tomoyo_realpath_from_path+0xb9/0x720 [ 214.525103][ T7836] should_failslab+0xc2/0x120 [ 214.525122][ T7836] __kmalloc_noprof+0xcb/0x510 [ 214.525139][ T7836] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 214.525165][ T7836] tomoyo_realpath_from_path+0xb9/0x720 [ 214.525185][ T7836] ? tomoyo_path_number_perm+0x235/0x590 [ 214.525205][ T7836] ? tomoyo_path_number_perm+0x235/0x590 [ 214.525228][ T7836] tomoyo_path_number_perm+0x248/0x590 [ 214.525245][ T7836] ? tomoyo_path_number_perm+0x235/0x590 [ 214.525263][ T7836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 214.525295][ T7836] ? __pfx_lock_release+0x10/0x10 [ 214.525310][ T7836] ? trace_lock_acquire+0x14e/0x1f0 [ 214.525327][ T7836] ? lock_acquire+0x2f/0xb0 [ 214.525342][ T7836] ? __fget_files+0x40/0x3a0 [ 214.525356][ T7836] ? __fget_files+0x206/0x3a0 [ 214.525370][ T7836] security_file_ioctl+0x9b/0x240 [ 214.525389][ T7836] __x64_sys_ioctl+0xb7/0x200 [ 214.525407][ T7836] do_syscall_64+0xcd/0x250 [ 214.525426][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.525444][ T7836] RIP: 0033:0x7fdc3738d169 [ 214.525455][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.525467][ T7836] RSP: 002b:00007fdc38124038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.525480][ T7836] RAX: ffffffffffffffda RBX: 00007fdc375a5fa0 RCX: 00007fdc3738d169 [ 214.525488][ T7836] RDX: 0000200000000100 RSI: 00000000c00caee0 RDI: 0000000000000004 [ 214.525496][ T7836] RBP: 00007fdc38124090 R08: 0000000000000000 R09: 0000000000000000 [ 214.525503][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.525511][ T7836] R13: 0000000000000000 R14: 00007fdc375a5fa0 R15: 00007fff7454eb28 [ 214.525528][ T7836] [ 214.527250][ T7836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 214.889738][ T5872] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 215.064304][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 215.091915][ T30] audit: type=1400 audit(1742583170.415:630): avc: denied { listen } for pid=7840 comm="syz.4.488" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 215.095512][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.140378][ T5872] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 215.179604][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.223781][ T5872] usb 1-1: config 0 descriptor?? [ 215.299606][ T6226] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 215.464710][ T6226] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 215.672345][ T6226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.681449][ T7856] ax25_connect(): syz.4.488 uses autobind, please contact jreuter@yaina.de [ 215.699735][ T30] audit: type=1400 audit(1742583171.005:631): avc: denied { connect } for pid=7840 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 215.750113][ T6226] usb 3-1: config 0 descriptor?? [ 215.878012][ T5872] hid (null): global environment stack underflow [ 216.089722][ T7859] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=7859 comm=syz.3.492 [ 216.202923][ T6226] [drm] vendor descriptor length:b9 data:06 00 00 00 00 00 00 00 00 00 00 [ 216.315678][ T6226] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 216.389544][ T6226] [drm:udl_init] *ERROR* Selecting channel failed [ 216.422732][ T6226] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 216.448053][ T6226] [drm] Initialized udl on minor 2 [ 216.470383][ T6226] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 216.524664][ T6226] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 216.532844][ T46] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 216.573023][ T46] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 216.582715][ T6226] usb 3-1: USB disconnect, device number 23 [ 216.589963][ T46] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 216.621605][ T7861] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 216.629974][ T7861] netlink: 134708 bytes leftover after parsing attributes in process `syz.4.491'. [ 216.760137][ T30] audit: type=1400 audit(1742583172.055:632): avc: denied { relabelfrom } for pid=7862 comm="syz.3.493" name="" dev="pipefs" ino=15009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 216.782434][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.143407][ T46] usb 1-1: USB disconnect, device number 13 [ 217.450090][ T5872] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 217.736949][ T7877] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.497'. [ 218.233703][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 218.251947][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 218.261578][ T5872] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 218.273362][ T5872] usb 4-1: can't read configurations, error -61 [ 218.420877][ T7881] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 218.427442][ T7881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 218.435278][ T7881] vhci_hcd vhci_hcd.0: Device attached [ 218.494419][ T7882] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 218.579526][ T5872] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 218.649535][ T6226] vhci_hcd: vhci_device speed not set [ 218.658454][ T6980] vhci_hcd: stop threads [ 218.662986][ T6980] vhci_hcd: release socket [ 219.465701][ T6980] vhci_hcd: disconnect device [ 219.475996][ T6226] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 219.487236][ T6226] usb 33-1: enqueue for inactive port 0 [ 219.627019][ T6226] vhci_hcd: vhci_device speed not set [ 219.639595][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 219.653815][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 219.678455][ T5872] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 219.690797][ T5872] usb 4-1: can't read configurations, error -61 [ 219.717442][ T5872] usb usb4-port1: attempt power cycle [ 220.109966][ T5872] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 220.392654][ T5872] usb 4-1: device descriptor read/8, error -71 [ 221.159615][ T973] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 221.189610][ T5872] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 221.221262][ T5872] usb 4-1: config 8 has an invalid interface number: 34 but max is 0 [ 221.244737][ T5872] usb 4-1: config 8 has no interface number 0 [ 221.251489][ T5872] usb 4-1: config 8 interface 34 has no altsetting 0 [ 221.265257][ T5872] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=7b.88 [ 221.274551][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.284565][ T5872] usb 4-1: Product: syz [ 221.288736][ T5872] usb 4-1: Manufacturer: syz [ 221.304921][ T5872] usb 4-1: SerialNumber: syz [ 221.349576][ T7930] bridge_slave_0: left allmulticast mode [ 221.357788][ T7930] bridge_slave_0: left promiscuous mode [ 221.383796][ T7930] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.420508][ T973] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 221.449535][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.450465][ T7930] bridge_slave_1: left allmulticast mode [ 221.488821][ T973] usb 1-1: config 0 descriptor?? [ 222.148474][ T7930] bridge_slave_1: left promiscuous mode [ 222.166028][ T7930] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.174529][ T5872] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.238788][ T7930] bond0: (slave bond_slave_0): Releasing backup interface [ 222.239753][ T5872] snd-usb-audio 4-1:8.34: probe with driver snd-usb-audio failed with error -2 [ 222.264776][ T5872] usb 4-1: USB disconnect, device number 22 [ 222.287297][ T7930] bond0: (slave bond_slave_1): Releasing backup interface [ 222.349239][ T7930] team0: Port device team_slave_0 removed [ 222.381307][ T973] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 222.389959][ T973] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 222.437575][ T7930] team0: Port device team_slave_1 removed [ 222.466156][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.476613][ T7930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.496126][ T7930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.503646][ T7930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.552987][ T7933] team0: Mode changed to "loadbalance" [ 222.582881][ T973] [drm:udl_init] *ERROR* Selecting channel failed [ 222.617381][ T30] audit: type=1400 audit(1742583177.915:633): avc: denied { write } for pid=7940 comm="syz.1.513" path="socket:[16192]" dev="sockfs" ino=16192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 222.640435][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.685979][ T973] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 222.703402][ T973] [drm] Initialized udl on minor 2 [ 222.711160][ T973] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.719393][ T973] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 222.727474][ T973] usb 1-1: USB disconnect, device number 14 [ 222.733546][ T6226] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 222.743414][ T6226] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 222.752048][ T6226] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 222.829788][ T7948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.514'. [ 222.838703][ T7948] netlink: 7 bytes leftover after parsing attributes in process `syz.2.514'. [ 223.436781][ T7960] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.538291][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 223.681425][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 223.693086][ T5830] Bluetooth: hci0: ACL packet for unknown connection handle 4041 [ 223.719561][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 223.727086][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 223.742272][ T7965] input: syz0 as /devices/virtual/input/input17 [ 223.764084][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 223.764104][ T5899] usb 5-1: can't read configurations, error -61 [ 223.799740][ T5871] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 223.889519][ T5899] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 223.959686][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 223.973515][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.985751][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.136655][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 224.182287][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 224.199839][ T5871] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 224.368955][ T30] audit: type=1326 audit(1742583179.685:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.1.521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f856918d169 code=0x0 [ 224.391691][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.400474][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.419825][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 224.427529][ T5899] usb 5-1: can't read configurations, error -61 [ 224.434006][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.448258][ T5899] usb usb5-port1: attempt power cycle [ 224.484718][ T5871] usb 4-1: config 0 descriptor?? [ 224.839987][ T5899] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 224.902068][ T5871] shield 0003:0955:7214.0009: item fetching failed at offset 4/5 [ 224.929871][ T5871] shield 0003:0955:7214.0009: Parse failed [ 224.940915][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 224.949699][ T5871] shield 0003:0955:7214.0009: probe with driver shield failed with error -22 [ 224.951283][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 224.999844][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 225.014101][ T5899] usb 5-1: can't read configurations, error -61 [ 225.196643][ T30] audit: type=1400 audit(1742583180.515:635): avc: denied { setopt } for pid=7974 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 225.201090][ T7989] tipc: Started in network mode [ 225.221333][ T7989] tipc: Node identity 4, cluster identity 4711 [ 225.227527][ T7989] tipc: Node number set to 4 [ 225.489556][ T5899] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 225.542809][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 225.599590][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 225.613737][ T5871] usb 4-1: USB disconnect, device number 23 [ 225.674890][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 225.685727][ T5899] usb 5-1: can't read configurations, error -61 [ 225.702260][ T5899] usb usb5-port1: unable to enumerate USB device [ 225.934245][ T30] audit: type=1400 audit(1742583181.255:636): avc: denied { write } for pid=8000 comm="syz.1.527" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 226.051742][ T5871] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 226.210764][ T5871] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.223636][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.233039][ T5871] usb 1-1: config 0 descriptor?? [ 226.313004][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 226.324173][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.531'. [ 226.334649][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 226.345085][ T5899] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 226.349815][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 226.445617][ T5871] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 226.454258][ T5871] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 226.520782][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.531109][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 226.549468][ T5899] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 226.575334][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.584714][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.597144][ T5899] usb 5-1: Product: syz [ 226.605955][ T5899] usb 5-1: Manufacturer: syz [ 226.613657][ T5899] usb 5-1: SerialNumber: syz [ 226.626972][ T5899] cdc_ncm 5-1:1.0: skipping garbage [ 226.668763][ T5871] [drm:udl_init] *ERROR* Selecting channel failed [ 226.694702][ T5871] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 226.703286][ T5871] [drm] Initialized udl on minor 2 [ 226.709282][ T5871] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 226.718978][ T30] audit: type=1400 audit(1742583182.025:637): avc: denied { write } for pid=8018 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.740128][ T5871] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 226.774020][ T973] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 226.786604][ T5871] usb 1-1: USB disconnect, device number 15 [ 226.804145][ T973] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 226.815035][ T973] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 226.934353][ T30] audit: type=1400 audit(1742583182.255:638): avc: denied { connect } for pid=8026 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.120228][ T973] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 227.133260][ T30] audit: type=1400 audit(1742583182.455:639): avc: denied { listen } for pid=8028 comm="syz.1.536" path=2F3132302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 227.156212][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.186148][ T30] audit: type=1400 audit(1742583182.505:640): avc: denied { read } for pid=8028 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.205274][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.430893][ T973] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 227.442764][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 227.492624][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 227.528031][ T973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 227.541222][ T973] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 227.550521][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.566700][ T973] usb 3-1: config 0 descriptor?? [ 227.706240][ T5899] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 227.730280][ T5899] cdc_ncm 5-1:1.0: bind() failure [ 227.737790][ T5899] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 227.769012][ T5899] cdc_ncm 5-1:1.1: bind() failure [ 227.778658][ T5899] usb 5-1: USB disconnect, device number 21 [ 227.798449][ T973] usbhid 3-1:0.0: can't add hid device: -71 [ 227.804617][ T973] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 227.815098][ T973] usb 3-1: USB disconnect, device number 24 [ 227.869856][ T5871] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 228.049619][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 228.104578][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.246628][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.356147][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.369609][ T5871] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.378745][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.388834][ T5871] usb 1-1: config 0 descriptor?? [ 228.710482][ T30] audit: type=1400 audit(1742583184.035:641): avc: denied { getopt } for pid=8060 comm="syz.3.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.965193][ T5871] HID 045e:07da: Invalid code 65791 type 1 [ 228.987559][ T5871] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input18 [ 229.008794][ T5871] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 229.981013][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.989828][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.644342][ T5871] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 230.709722][ T5899] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 230.895047][ T5899] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 230.916529][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.099684][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.129514][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 231.146055][ T5899] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 231.167064][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.309737][ T5899] usb 4-1: config 0 descriptor?? [ 231.508619][ T6226] usb 1-1: USB disconnect, device number 16 [ 231.581904][ T8088] overlayfs: upper fs does not support tmpfile. [ 231.692305][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.559'. [ 231.745157][ T5899] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 231.752855][ T5899] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 231.769227][ T5899] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 231.947837][ T30] audit: type=1400 audit(1742583187.125:642): avc: denied { connect } for pid=8107 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.967316][ T5899] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 231.974877][ T30] audit: type=1400 audit(1742583187.125:643): avc: denied { accept } for pid=8107 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 231.974912][ T30] audit: type=1400 audit(1742583187.125:644): avc: denied { ioctl } for pid=8107 comm="syz.4.561" path="socket:[17578]" dev="sockfs" ino=17578 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 232.115192][ T8111] Invalid source name [ 232.119240][ T8111] UBIFS error (pid: 8111): cannot open "./file0", error -22 [ 232.567687][ T5899] hid-picolcd 0003:04D8:C002.000B: unknown main item tag 0x0 [ 232.583173][ T30] audit: type=1400 audit(1742583187.395:645): avc: denied { mounton } for pid=8103 comm="syz.0.559" path="/106/file0" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 232.716976][ T5899] hid-picolcd 0003:04D8:C002.000B: No report with id 0x11 found [ 232.734112][ T5899] usb 4-1: USB disconnect, device number 24 [ 232.740287][ T30] audit: type=1400 audit(1742583187.405:646): avc: denied { mount } for pid=8103 comm="syz.0.559" name="/" dev="rpc_pipefs" ino=17582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 232.860723][ T6226] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 232.894772][ T8108] netlink: 96 bytes leftover after parsing attributes in process `syz.4.561'. [ 232.906754][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.561'. [ 233.659899][ T6226] usb 3-1: Using ep0 maxpacket: 8 [ 233.684603][ T6226] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 233.706863][ T6226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.726672][ T6226] usb 3-1: config 0 descriptor?? [ 233.737067][ T6226] usblcd 3-1:0.0: USBLCD model not supported. [ 233.899520][ T5899] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 233.992814][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 234.069651][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 234.085531][ T5899] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 234.099581][ T973] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 234.107351][ T6226] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 234.109291][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.147734][ T5899] usb 2-1: config 0 descriptor?? [ 234.164630][ T5899] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 234.182537][ T5899] pwc: Warning: more than 1 configuration available. [ 234.268111][ T6226] usb 5-1: config 0 has an invalid interface number: 115 but max is 0 [ 234.282062][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.296118][ T6226] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.307977][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.322189][ T6226] usb 5-1: config 0 has no interface number 0 [ 234.342683][ T6226] usb 5-1: config 0 interface 115 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 32 [ 234.353535][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.369485][ T6226] usb 5-1: config 0 interface 115 altsetting 2 endpoint 0xE has invalid wMaxPacketSize 0 [ 234.379328][ T6226] usb 5-1: config 0 interface 115 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.396547][ T973] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.405907][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.414370][ T6226] usb 5-1: config 0 interface 115 has no altsetting 0 [ 234.425208][ T6226] usb 5-1: New USB device found, idVendor=16ab, idProduct=7801, bcdDevice=d8.4e [ 234.434687][ T6226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.443802][ T973] usb 1-1: config 0 descriptor?? [ 234.449743][ T6226] usb 5-1: Product: syz [ 234.456188][ T6226] usb 5-1: Manufacturer: syz [ 234.461263][ T6226] usb 5-1: SerialNumber: syz [ 234.467666][ T6226] usb 5-1: config 0 descriptor?? [ 234.473653][ T8134] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 234.490820][ T6226] usb 5-1: Could not find all expected endpoints [ 234.696525][ T5871] usb 5-1: USB disconnect, device number 22 [ 234.791440][ T6226] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 234.857337][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.881869][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.889364][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.897298][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.908833][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.916514][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.928095][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.936072][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.947705][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.955192][ T6226] usb 4-1: Using ep0 maxpacket: 16 [ 234.965069][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.973806][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.982670][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 234.990244][ T6226] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 235.003133][ T6226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.014150][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 235.022030][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 235.030124][ T973] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 235.038519][ T6226] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 235.047990][ T6226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.056305][ T973] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 235.064855][ T6226] usb 4-1: Product: syz [ 235.069035][ T6226] usb 4-1: Manufacturer: syz [ 235.076257][ T973] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 235.093389][ T6226] usb 4-1: SerialNumber: syz [ 235.105581][ T6226] usb 4-1: config 0 descriptor?? [ 235.131513][ T6226] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 235.138134][ T5856] usb 3-1: USB disconnect, device number 25 [ 235.165640][ T6226] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 235.186394][ T5872] usb 1-1: USB disconnect, device number 17 [ 236.489072][ T6226] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 236.530190][ T6226] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 236.600351][ T5835] Bluetooth: hci5: sending frame failed (-49) [ 236.611251][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 236.623127][ T8165] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 237.049751][ T6226] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 237.050997][ T30] audit: type=1400 audit(1742583192.365:647): avc: denied { map } for pid=8143 comm="syz.3.570" path="/dev/sg0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.066970][ T6226] em28xx 4-1:0.0: No AC97 audio processor [ 237.330090][ T30] audit: type=1400 audit(1742583192.365:648): avc: denied { execute } for pid=8143 comm="syz.3.570" path="/dev/sg0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 237.475657][ T6226] usb 4-1: USB disconnect, device number 25 [ 237.488777][ T6226] em28xx 4-1:0.0: Disconnecting em28xx [ 237.498928][ T6226] em28xx 4-1:0.0: Freeing device [ 237.740225][ T973] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 237.769525][ T5871] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 238.124311][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 238.129949][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 238.158674][ T973] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.166463][ T5871] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 238.174667][ T5869] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 238.182343][ T5871] usb 1-1: config 0 has no interface number 0 [ 238.189815][ T973] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 238.197540][ T973] usb 3-1: can't read configurations, error -61 [ 238.874721][ T5871] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 238.894640][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.909495][ T5871] usb 1-1: Product: syz [ 238.913679][ T5871] usb 1-1: Manufacturer: syz [ 238.918330][ T5871] usb 1-1: SerialNumber: syz [ 238.924682][ T5871] usb 1-1: config 0 descriptor?? [ 238.931734][ T5871] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 238.942826][ T5871] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 238.969610][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 238.977830][ T5869] usb 4-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 238.992545][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.005124][ T5869] usb 4-1: config 0 descriptor?? [ 239.017203][ T5869] usblcd 4-1:0.0: USBLCD model not supported. [ 239.019486][ T973] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 239.109526][ T5826] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 239.144974][ T5869] usb 1-1: USB disconnect, device number 18 [ 239.158003][ T5869] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 239.174763][ T5869] kobil_sct 1-1:0.148: device disconnected [ 239.199675][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 239.210074][ T973] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.222977][ T973] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 239.230799][ T973] usb 3-1: can't read configurations, error -61 [ 239.237364][ T973] usb usb3-port1: attempt power cycle [ 239.251868][ T5899] pwc: Failed to set LED on/off time (-110) [ 239.269784][ T5899] pwc: send_video_command error -32 [ 239.271456][ T5826] usb 5-1: Using ep0 maxpacket: 32 [ 239.275103][ T5899] pwc: Failed to set video mode VGA@30 fps; return code = -32 [ 239.288066][ T5899] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -32 [ 239.288936][ T5826] usb 5-1: config 0 has an invalid interface number: 145 but max is 1 [ 239.305875][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 239.317080][ T5899] usb 2-1: USB disconnect, device number 26 [ 239.321075][ T5826] usb 5-1: config 0 has an invalid interface number: 43 but max is 1 [ 239.331472][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.341892][ T5826] usb 5-1: config 0 has no interface number 0 [ 239.347984][ T5826] usb 5-1: config 0 has no interface number 1 [ 239.354505][ T5826] usb 5-1: config 0 interface 43 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 239.373171][ T5826] usb 5-1: config 0 interface 145 has no altsetting 0 [ 239.381397][ T5826] usb 5-1: config 0 interface 43 has no altsetting 0 [ 239.391375][ T5826] usb 5-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 239.401481][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.409548][ T5826] usb 5-1: Product: syz [ 239.413891][ T5826] usb 5-1: Manufacturer: syz [ 239.418487][ T5826] usb 5-1: SerialNumber: syz [ 239.426091][ T5826] usb 5-1: config 0 descriptor?? [ 239.589689][ T973] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 239.621902][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 239.625633][ T8201] 9pnet_fd: Insufficient options for proto=fd [ 239.670626][ T973] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.692743][ T973] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 239.700602][ T973] usb 3-1: can't read configurations, error -61 [ 239.839765][ T973] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 239.872285][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 240.079024][ T973] usb 3-1: device descriptor read/all, error -71 [ 240.102843][ T973] usb usb3-port1: unable to enumerate USB device [ 240.872755][ T6226] usb 4-1: USB disconnect, device number 26 [ 240.989122][ T5826] keyspan_pda 5-1:0.145: required endpoints missing [ 241.252165][ T5826] keyspan_pda 5-1:0.43: required endpoints missing [ 241.327759][ T5826] usb 5-1: USB disconnect, device number 23 [ 242.017274][ T8218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.592'. [ 242.038008][ T8218] netlink: 32 bytes leftover after parsing attributes in process `syz.4.592'. [ 242.047970][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 242.119281][ T30] audit: type=1400 audit(1742583197.425:649): avc: denied { bind } for pid=8225 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 242.312268][ T8229] SELinux: policydb version 1571891127 does not match my version range 15-34 [ 242.316246][ T30] audit: type=1400 audit(1742583197.435:650): avc: denied { accept } for pid=8225 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 242.349975][ T973] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 242.391942][ T8229] SELinux: failed to load policy [ 242.510732][ T8229] afs: Unknown parameter 'dy' [ 242.540791][ T973] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 242.552221][ T973] usb 1-1: config 0 has no interface number 0 [ 242.564822][ T973] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 242.672032][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.680815][ T973] usb 1-1: Product: syz [ 242.684955][ T973] usb 1-1: Manufacturer: syz [ 242.691453][ T973] usb 1-1: SerialNumber: syz [ 242.700316][ T973] usb 1-1: config 0 descriptor?? [ 242.714881][ T973] hub 1-1:0.2: bad descriptor, ignoring hub [ 242.722423][ T973] hub 1-1:0.2: probe with driver hub failed with error -5 [ 242.774646][ T973] f81232 1-1:0.2: f81534a converter detected [ 243.134882][ T5869] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 243.372962][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.593'. [ 243.387053][ T973] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 243.395078][ T973] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 243.580826][ T5869] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 243.617368][ T8245] overlayfs: overlapping lowerdir path [ 243.625105][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.660031][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.673671][ T973] usb 1-1: USB disconnect, device number 19 [ 243.680668][ T973] f81232 1-1:0.2: device disconnected [ 243.857232][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 243.877151][ T5869] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 243.930686][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.101619][ T5869] usb 4-1: config 0 descriptor?? [ 244.809811][ T5869] hid-picolcd 0003:04D8:C002.000D: unknown main item tag 0x0 [ 244.819760][ T5869] hid-picolcd 0003:04D8:C002.000D: unknown main item tag 0x0 [ 245.035751][ T5869] hid-picolcd 0003:04D8:C002.000D: unknown main item tag 0x0 [ 245.096709][ T5869] hid-picolcd 0003:04D8:C002.000D: unknown main item tag 0x0 [ 245.118494][ T5869] hid-picolcd 0003:04D8:C002.000D: unknown main item tag 0x0 [ 245.145504][ T30] audit: type=1400 audit(1742583200.465:651): avc: denied { map } for pid=8275 comm="syz.0.605" path="socket:[17914]" dev="sockfs" ino=17914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 245.168364][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.184419][ T8280] ubi: mtd0 is already attached to ubi31 [ 245.200331][ T5869] hid-picolcd 0003:04D8:C002.000D: No report with id 0x11 found [ 245.220855][ T5869] usb 4-1: USB disconnect, device number 27 [ 246.191877][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.612'. [ 246.499657][ T973] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 246.689902][ T5869] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 246.709981][ T973] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 246.759570][ T973] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 246.768644][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.796529][ T973] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 247.113449][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 247.126156][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.260237][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.616'. [ 247.331819][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 247.339890][ T5869] usb 3-1: can't read configurations, error -61 [ 247.529744][ T5869] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 247.699495][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 247.738614][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.747610][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 247.757437][ T5869] usb 3-1: can't read configurations, error -61 [ 247.894457][ T30] audit: type=1400 audit(1742583203.125:652): avc: denied { create } for pid=8317 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 247.917991][ T5869] usb usb3-port1: attempt power cycle [ 247.923610][ T30] audit: type=1400 audit(1742583203.125:653): avc: denied { getopt } for pid=8317 comm="syz.0.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.145011][ T5899] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 248.280217][ T5869] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 248.303435][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 248.309790][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 248.316539][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.324935][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 248.358397][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 248.369855][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 248.377617][ T5869] usb 3-1: can't read configurations, error -61 [ 248.389786][ T973] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 248.393155][ T5899] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 248.398152][ T973] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 248.407853][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.443514][ T5899] usb 4-1: Product: syz [ 248.453926][ T5899] usb 4-1: Manufacturer: syz [ 248.458934][ T5899] usb 4-1: SerialNumber: syz [ 248.464699][ T5899] usb 4-1: config 0 descriptor?? [ 248.484474][ T5899] usb 4-1: no audio or video endpoints found [ 248.492789][ T973] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 248.509569][ T5869] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 248.512989][ T973] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 248.531913][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 248.538618][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.547924][ T5869] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 248.559039][ T5869] usb 3-1: can't read configurations, error -61 [ 248.576121][ T5869] usb usb3-port1: unable to enumerate USB device [ 249.235080][ T5869] usb 2-1: USB disconnect, device number 27 [ 249.240306][ T8321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.346966][ T8321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.482255][ T8321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.642802][ T8321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.743663][ T5869] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 250.230762][ T5869] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 250.257627][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.279547][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.320828][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 250.322824][ T8321] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.467053][ T8321] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.539348][ T5869] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 250.638271][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.668583][ T8321] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.685251][ T5869] usb 2-1: config 0 descriptor?? [ 250.741239][ T8321] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.784214][ T5899] usb 4-1: USB disconnect, device number 28 [ 251.064404][ T8349] capability: warning: `syz.2.624' uses 32-bit capabilities (legacy support in use) [ 251.253925][ T30] audit: type=1400 audit(1742583206.275:654): avc: denied { read } for pid=8344 comm="syz.2.624" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.313838][ T30] audit: type=1400 audit(1742583206.275:655): avc: denied { open } for pid=8344 comm="syz.2.624" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.361651][ T30] audit: type=1400 audit(1742583206.285:656): avc: denied { ioctl } for pid=8344 comm="syz.2.624" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 251.387511][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.896460][ T8350] syz.3.625: attempt to access beyond end of device [ 251.896460][ T8350] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 251.899606][ T30] audit: type=1400 audit(1742583207.205:657): avc: denied { mounton } for pid=8347 comm="syz.3.625" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 251.913220][ T8350] VFS: could not find a valid V7 on nbd3. [ 251.933075][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.933396][ T5826] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 251.946445][ T5869] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 252.027738][ T5869] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 252.035680][ T5869] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 252.043470][ T5869] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 252.130532][ T5869] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 252.265912][ T5869] hid-picolcd 0003:04D8:C002.000E: No report with id 0x11 found [ 252.669145][ T8361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.627'. [ 252.685907][ T5869] usb 2-1: USB disconnect, device number 28 [ 252.712687][ T8361] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 252.723590][ T5826] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 252.749202][ T5826] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 252.767169][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.776593][ T5826] usb 3-1: Product: syz [ 252.784413][ T5826] usb 3-1: Manufacturer: syz [ 252.789177][ T5826] usb 3-1: SerialNumber: syz [ 252.795613][ T5826] usb 3-1: config 0 descriptor?? [ 252.890352][ T8367] netlink: 52 bytes leftover after parsing attributes in process `syz.4.629'. [ 253.000574][ T5899] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 253.320504][ T30] audit: type=1400 audit(1742583208.645:658): avc: denied { watch } for pid=8366 comm="syz.4.629" path="/121/file0" dev="tmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 253.348617][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.630'. [ 253.370971][ T5899] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 253.391834][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.398991][ T30] audit: type=1400 audit(1742583208.705:659): avc: denied { map } for pid=8366 comm="syz.4.629" path="socket:[18086]" dev="sockfs" ino=18086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 253.402308][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.436746][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.461883][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.477011][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.486930][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.499266][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.513875][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.523222][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.535280][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.545664][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.560194][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.567822][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.587448][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.596737][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.609841][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.625122][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.634395][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.647227][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.660180][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.669139][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.679171][ T5826] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 253.682406][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.700190][ T5899] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 253.709064][ T5899] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.719315][ T5899] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 253.728694][ T5899] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 253.737197][ T5899] usb 1-1: Product: syz [ 253.741429][ T5899] usb 1-1: Manufacturer: syz [ 253.746085][ T5899] usb 1-1: SerialNumber: syz [ 253.754191][ T5899] usb 1-1: config 0 descriptor?? [ 253.761475][ T5899] yurex 1-1:0.0: Could not find endpoints [ 253.799635][ T5871] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 253.840711][ T5826] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 253.851016][ T5826] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 253.860164][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.870936][ T5826] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 253.950708][ T5871] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 253.958881][ T5871] usb 2-1: config 0 has no interface number 0 [ 253.965199][ T5871] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.976367][ T5871] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.981130][ T5830] Bluetooth: hci3: unknown advertising packet type: 0x69 [ 253.986400][ T5871] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 253.987353][ T5830] Bluetooth: hci3: Dropping invalid advertising data [ 253.993749][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.002870][ T5830] Bluetooth: hci3: Malformed LE Event: 0x02 [ 254.032478][ T5871] usb 2-1: config 0 descriptor?? [ 254.117049][ T6226] usb 3-1: USB disconnect, device number 34 [ 254.127396][ T8364] tmpfs: Unknown parameter 'grpquota_block_har' [ 254.152447][ T5899] usb 1-1: USB disconnect, device number 20 [ 254.437299][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 254.447770][ T5871] uclogic 0003:5543:0781.000F: item fetching failed at offset 5/7 [ 254.448446][ T8386] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.457251][ T5871] uclogic 0003:5543:0781.000F: parse failed [ 254.473159][ T5871] uclogic 0003:5543:0781.000F: probe with driver uclogic failed with error -22 [ 254.934934][ T5826] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 254.949557][ T5826] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 254.962923][ T5826] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 254.977318][ T5871] usb 2-1: USB disconnect, device number 29 [ 254.990894][ T5826] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 255.003803][ T5826] usb 4-1: USB disconnect, device number 29 [ 255.073074][ T30] audit: type=1400 audit(1742583210.385:660): avc: denied { mount } for pid=8394 comm="syz.0.639" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 255.128481][ T8396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.640'. [ 255.244060][ T30] audit: type=1400 audit(1742583210.425:661): avc: denied { bind } for pid=8395 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 255.461464][ T30] audit: type=1400 audit(1742583210.555:662): avc: denied { listen } for pid=8398 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.565869][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.572596][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.919480][ T30] audit: type=1400 audit(1742583210.555:663): avc: denied { accept } for pid=8398 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.038342][ T30] audit: type=1400 audit(1742583210.635:664): avc: denied { shutdown } for pid=8398 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.289511][ T30] audit: type=1400 audit(1742583211.325:665): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 256.972559][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 257.081863][ T8429] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.648'. [ 257.109673][ T8429] openvswitch: netlink: Message has 44053 unknown bytes. [ 257.137157][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 257.321493][ T8437] dns_resolver: Unsupported server list version (0) [ 257.449831][ T5869] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 257.649654][ T973] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 257.811492][ T5869] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 257.834232][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 257.843599][ T5869] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 257.863912][ T973] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 258.410798][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.424898][ T5869] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 258.438811][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.480899][ T973] usb 1-1: config 0 descriptor?? [ 258.501759][ T973] pwc: Samsung MPC-C10 USB webcam detected. [ 259.229087][ T30] audit: type=1400 audit(1742583214.185:666): avc: denied { write } for pid=8443 comm="syz.4.653" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 259.254927][ T973] pwc: send_video_command error -71 [ 259.260246][ T973] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 259.268524][ T973] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 259.289328][ T973] usb 1-1: USB disconnect, device number 21 [ 259.628618][ T5869] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 259.646901][ T5869] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 259.659727][ T5869] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 259.667992][ T5869] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 259.678760][ T5869] usb 4-1: USB disconnect, device number 30 [ 259.899741][ T8453] SET target dimension over the limit! [ 260.006632][ T5899] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 260.530945][ T5899] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 260.623110][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.664305][ T8461] x_tables: duplicate underflow at hook 2 [ 260.672641][ T8461] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 260.680467][ T8461] netlink: 244 bytes leftover after parsing attributes in process `syz.3.659'. [ 260.693493][ T5899] usb 1-1: config 0 descriptor?? [ 260.794797][ T5899] usb 1-1: can't set config #0, error -71 [ 260.831850][ T5899] usb 1-1: USB disconnect, device number 22 [ 261.552029][ T30] audit: type=1400 audit(1742583216.875:667): avc: denied { getopt } for pid=8473 comm="syz.1.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 261.859620][ T5826] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 262.045426][ T30] audit: type=1326 audit(1742583217.365:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 262.124641][ T30] audit: type=1326 audit(1742583217.365:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 262.179562][ T5826] usb 2-1: device descriptor read/64, error -71 [ 262.194340][ T30] audit: type=1326 audit(1742583217.365:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 262.225357][ T30] audit: type=1326 audit(1742583217.365:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 262.335979][ T30] audit: type=1326 audit(1742583217.365:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 262.366407][ T30] audit: type=1326 audit(1742583217.365:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 262.394188][ T30] audit: type=1326 audit(1742583217.365:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 263.038084][ T30] audit: type=1326 audit(1742583217.365:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8468 comm="syz.0.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 263.069551][ T5826] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 263.299716][ T5826] usb 2-1: device descriptor read/64, error -71 [ 263.820786][ T5826] usb usb2-port1: attempt power cycle [ 264.209494][ T5826] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 264.335299][ T5826] usb 2-1: device descriptor read/8, error -71 [ 264.402225][ T8503] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.589494][ T5826] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 265.279557][ T5826] usb 2-1: device descriptor read/8, error -71 [ 265.391715][ T5826] usb usb2-port1: unable to enumerate USB device [ 265.512042][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.679'. [ 265.776745][ T8531] afs: Unknown parameter 'dyn0x0000000000000000' [ 266.149485][ T5826] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 266.579576][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 266.672152][ T5826] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 266.783761][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.849478][ T5826] usb 3-1: Product: syz [ 266.855100][ T5826] usb 3-1: Manufacturer: syz [ 266.968813][ T5826] usb 3-1: SerialNumber: syz [ 267.006391][ T5826] usb 3-1: config 0 descriptor?? [ 267.232032][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 267.232047][ T30] audit: type=1400 audit(1742583222.555:739): avc: denied { map } for pid=8549 comm="syz.1.685" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 267.326119][ T5826] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 267.352546][ T5826] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 267.386100][ T5826] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 267.404393][ T5826] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 267.445709][ T5826] usb 3-1: USB disconnect, device number 35 [ 267.529559][ T5899] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 267.678714][ T8559] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 267.688029][ T5899] usb 1-1: device descriptor read/64, error -71 [ 267.923631][ T8562] FAULT_INJECTION: forcing a failure. [ 267.923631][ T8562] name failslab, interval 1, probability 0, space 0, times 0 [ 267.936384][ T8562] CPU: 1 UID: 0 PID: 8562 Comm: syz.2.689 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 267.936405][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.936401][ T5899] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 267.936415][ T8562] Call Trace: [ 267.936420][ T8562] [ 267.936427][ T8562] dump_stack_lvl+0x16c/0x1f0 [ 267.936452][ T8562] should_fail_ex+0x50a/0x650 [ 267.936473][ T8562] ? fs_reclaim_acquire+0xae/0x150 [ 267.936495][ T8562] ? tomoyo_realpath_from_path+0xb9/0x720 [ 267.936514][ T8562] should_failslab+0xc2/0x120 [ 267.936530][ T8562] __kmalloc_noprof+0xcb/0x510 [ 267.936544][ T8562] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 267.936567][ T8562] tomoyo_realpath_from_path+0xb9/0x720 [ 267.936586][ T8562] ? tomoyo_path_number_perm+0x235/0x590 [ 267.936605][ T8562] ? tomoyo_path_number_perm+0x235/0x590 [ 267.936624][ T8562] tomoyo_path_number_perm+0x248/0x590 [ 267.936640][ T8562] ? tomoyo_path_number_perm+0x235/0x590 [ 267.936660][ T8562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 267.936696][ T8562] ? __pfx_lock_release+0x10/0x10 [ 267.936713][ T8562] ? trace_lock_acquire+0x14e/0x1f0 [ 267.936731][ T8562] ? lock_acquire+0x2f/0xb0 [ 267.936749][ T8562] ? __fget_files+0x40/0x3a0 [ 267.936765][ T8562] ? __fget_files+0x206/0x3a0 [ 267.936781][ T8562] security_file_ioctl+0x9b/0x240 [ 267.936802][ T8562] __x64_sys_ioctl+0xb7/0x200 [ 267.936822][ T8562] do_syscall_64+0xcd/0x250 [ 267.936842][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.936861][ T8562] RIP: 0033:0x7efe2418d169 [ 267.936873][ T8562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.936886][ T8562] RSP: 002b:00007efe25026038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.936900][ T8562] RAX: ffffffffffffffda RBX: 00007efe243a5fa0 RCX: 00007efe2418d169 [ 267.936910][ T8562] RDX: 0000200000000240 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 267.936919][ T8562] RBP: 00007efe25026090 R08: 0000000000000000 R09: 0000000000000000 [ 267.936927][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.936935][ T8562] R13: 0000000000000000 R14: 00007efe243a5fa0 R15: 00007ffd6eb6a2f8 [ 267.936954][ T8562] [ 267.936960][ T8562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.083813][ T5899] usb 1-1: device descriptor read/64, error -71 [ 268.183516][ T5826] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 268.285051][ T5899] usb usb1-port1: attempt power cycle [ 268.319540][ T5826] usb 4-1: device descriptor read/64, error -71 [ 268.785548][ T5899] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 268.829754][ T8568] netlink: 'syz.4.691': attribute type 10 has an invalid length. [ 269.008647][ T8568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.016887][ T8568] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 269.028276][ T5899] usb 1-1: device descriptor read/8, error -71 [ 269.039669][ T6226] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 269.113905][ T8568] syz.4.691 (8568) used greatest stack depth: 20656 bytes left [ 269.129523][ T5826] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 269.289534][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 269.298751][ T6226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.309724][ T6226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.310115][ T5899] usb 1-1: device descriptor read/8, error -71 [ 269.319620][ T6226] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 269.319648][ T6226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.321086][ T6226] usb 3-1: config 0 descriptor?? [ 269.896949][ T5899] usb usb1-port1: unable to enumerate USB device [ 269.900564][ T5826] usb 4-1: device descriptor read/64, error -71 [ 270.099678][ T5826] usb usb4-port1: attempt power cycle [ 270.465294][ T6226] uclogic 0003:5543:0042.0010: No inputs registered, leaving [ 270.486174][ T6226] uclogic 0003:5543:0042.0010: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 270.509540][ T5826] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 270.555006][ T8625] tmpfs: Bad value for 'mpol' [ 270.577252][ T30] audit: type=1400 audit(1742583225.895:740): avc: denied { create } for pid=8623 comm="syz.0.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 270.758059][ T5826] usb 4-1: device not accepting address 33, error -71 [ 271.059189][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 271.283939][ T6990] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.300709][ T8642] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 271.524511][ T5899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 271.589650][ T6226] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 271.770952][ T5826] usb 3-1: USB disconnect, device number 36 [ 271.809558][ T6226] usb 5-1: device descriptor read/64, error -71 [ 271.825085][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.845311][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.857654][ T5899] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 271.867323][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.875595][ T5899] usb 1-1: Product: syz [ 271.880298][ T5899] usb 1-1: Manufacturer: syz [ 271.884895][ T5899] usb 1-1: SerialNumber: syz [ 271.891627][ T5899] usb 1-1: config 0 descriptor?? [ 271.899018][ T5899] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 271.906039][ T5899] usb 1-1: No valid video chain found. [ 272.129667][ T6226] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 272.143552][ T5899] usb 1-1: USB disconnect, device number 27 [ 272.723152][ T6226] usb 5-1: device descriptor read/64, error -71 [ 272.843089][ T6226] usb usb5-port1: attempt power cycle [ 273.389642][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 273.639632][ T6226] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 273.856875][ T6226] usb 5-1: device descriptor read/8, error -71 [ 274.226075][ T5899] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 274.609470][ T6226] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 274.759609][ T5899] usb 1-1: Invalid ep0 maxpacket: 16 [ 274.839979][ T6226] usb 5-1: device not accepting address 27, error -71 [ 274.847031][ T6226] usb usb5-port1: unable to enumerate USB device [ 275.716427][ T8699] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 275.839503][ T5899] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 276.339558][ T5899] usb 1-1: Invalid ep0 maxpacket: 16 [ 276.349840][ T5899] usb usb1-port1: attempt power cycle [ 277.149505][ T5899] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 277.182128][ T8722] netlink: 'syz.2.721': attribute type 9 has an invalid length. [ 277.219229][ T8723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8723 comm=syz.0.722 [ 277.290187][ T30] audit: type=1400 audit(1742583232.615:741): avc: denied { connect } for pid=8719 comm="syz.2.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.371967][ T5899] usb 1-1: device not accepting address 30, error -71 [ 278.253259][ T8738] syz.0.726: attempt to access beyond end of device [ 278.253259][ T8738] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 278.439605][ T30] audit: type=1400 audit(1742583233.735:742): avc: denied { lock } for pid=8724 comm="syz.1.724" path="socket:[19625]" dev="sockfs" ino=19625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 278.797791][ T8738] syz.0.726: attempt to access beyond end of device [ 278.797791][ T8738] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 278.826334][ T8738] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 278.897409][ T8738] syz.0.726: attempt to access beyond end of device [ 278.897409][ T8738] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 278.910619][ T8738] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 279.018086][ T8738] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 279.029843][ T8738] UDF-fs: Scanning with blocksize 512 failed [ 279.179800][ T6226] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 279.290822][ T8738] syz.0.726: attempt to access beyond end of device [ 279.290822][ T8738] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 279.358194][ T8738] syz.0.726: attempt to access beyond end of device [ 279.358194][ T8738] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 279.413531][ T8738] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 279.442223][ T8738] syz.0.726: attempt to access beyond end of device [ 279.442223][ T8738] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 279.538803][ T8738] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 279.568710][ T6226] usb 2-1: Using ep0 maxpacket: 32 [ 279.579975][ T8738] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 279.589734][ T8738] UDF-fs: Scanning with blocksize 1024 failed [ 279.624856][ T6226] usb 2-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 279.634867][ T6226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.643354][ T6226] usb 2-1: Product: syz [ 279.647911][ T6226] usb 2-1: Manufacturer: syz [ 279.652819][ T6226] usb 2-1: SerialNumber: syz [ 279.659189][ T6226] usb 2-1: config 0 descriptor?? [ 279.664651][ T8738] syz.0.726: attempt to access beyond end of device [ 279.664651][ T8738] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 279.679656][ T6226] go7007 2-1:0.0: Sensoray 2250 found [ 279.746942][ T6226] go7007 2-1:0.0: probe with driver go7007 failed with error -12 [ 279.769224][ T8738] syz.0.726: attempt to access beyond end of device [ 279.769224][ T8738] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 279.789966][ T8738] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 279.841728][ T8738] syz.0.726: attempt to access beyond end of device [ 279.841728][ T8738] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 280.135694][ T8738] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 280.165697][ T8738] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 280.167782][ T5869] usb 2-1: USB disconnect, device number 34 [ 280.202804][ T8738] UDF-fs: Scanning with blocksize 2048 failed [ 280.222397][ T8764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=8764 comm=syz.4.735 [ 280.335112][ T8738] syz.0.726: attempt to access beyond end of device [ 280.335112][ T8738] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 280.925722][ T8738] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 280.971130][ T8738] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 280.982627][ T8738] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 281.678015][ T8738] UDF-fs: Scanning with blocksize 4096 failed [ 281.690750][ T8738] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 281.822132][ T8777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.949696][ T30] audit: type=1326 audit(1742583237.265:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8778 comm="syz.0.740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7538d169 code=0x7fc00000 [ 282.079654][ T6226] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 283.237812][ T8793] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 283.290077][ T8793] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 283.336220][ T8783] random: crng reseeded on system resumption [ 283.418521][ T30] audit: type=1400 audit(1742583238.655:744): avc: denied { read write } for pid=8781 comm="syz.3.741" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 283.466256][ T30] audit: type=1400 audit(1742583238.655:745): avc: denied { ioctl open } for pid=8781 comm="syz.3.741" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 283.619593][ T6226] usb 3-1: Using ep0 maxpacket: 32 [ 283.971623][ T5869] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 283.979626][ T30] audit: type=1400 audit(1742583239.255:746): avc: denied { ioctl } for pid=8773 comm="syz.2.738" path="socket:[18969]" dev="sockfs" ino=18969 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 284.272510][ T6226] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.305767][ T6226] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 284.418005][ T6226] usb 3-1: can't read configurations, error -71 [ 284.499614][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 284.535990][ T5869] usb 5-1: config 0 has no interfaces? [ 284.543208][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.561614][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.583872][ T5869] usb 5-1: Product: syz [ 284.588059][ T5869] usb 5-1: Manufacturer: syz [ 284.602886][ T5869] usb 5-1: SerialNumber: syz [ 284.610396][ T5869] usb 5-1: config 0 descriptor?? [ 284.832999][ T5869] usb 5-1: USB disconnect, device number 28 [ 284.842574][ T30] audit: type=1400 audit(1742583240.155:747): avc: denied { remount } for pid=8798 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 284.866050][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.876760][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.878271][ T8812] ptrace attach of ""[8819] was attempted by "./syz-executor exec"[8812] [ 284.886982][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.905497][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.916620][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.926742][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.936857][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.946964][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.957053][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 284.967184][ T8811] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 285.598937][ T8822] random: crng reseeded on system resumption [ 285.666552][ T30] audit: type=1400 audit(1742583240.915:748): avc: denied { append } for pid=8821 comm="syz.2.751" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 287.049522][ T30] audit: type=1400 audit(1742583242.365:749): avc: denied { append } for pid=8845 comm="syz.2.757" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 287.960075][ T6226] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 288.120381][ T6226] usb 5-1: device descriptor read/64, error -71 [ 288.439649][ T6226] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 288.573850][ T8875] netlink: 188 bytes leftover after parsing attributes in process `syz.3.761'. [ 288.582952][ T8875] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 288.609641][ T6226] usb 5-1: device descriptor read/64, error -71 [ 288.741537][ T6226] usb usb5-port1: attempt power cycle [ 288.839659][ T5826] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 289.023169][ T5826] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 289.033123][ T5826] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 289.043734][ T5826] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 289.057243][ T5826] usb 1-1: config 220 has no interface number 2 [ 289.067448][ T5826] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 289.086363][ T5826] usb 1-1: config 220 interface 0 has no altsetting 0 [ 289.093538][ T6226] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 289.105852][ T5826] usb 1-1: config 220 interface 76 has no altsetting 0 [ 289.113172][ T5826] usb 1-1: config 220 interface 1 has no altsetting 0 [ 289.127072][ T5826] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 289.137114][ T6226] usb 5-1: device descriptor read/8, error -71 [ 289.149581][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.167975][ T5826] usb 1-1: Product: syz [ 289.180601][ T5826] usb 1-1: Manufacturer: syz [ 289.182336][ T5869] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 289.188189][ T5826] usb 1-1: SerialNumber: syz [ 289.345596][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 289.551234][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 289.560416][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 289.567975][ T5869] usb 2-1: can't read configurations, error -61 [ 289.719673][ T5869] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 289.889524][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 289.902472][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 289.927056][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 289.948057][ T5869] usb 2-1: can't read configurations, error -61 [ 289.978660][ T5869] usb usb2-port1: attempt power cycle [ 290.339489][ T5869] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 290.360472][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 290.367300][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.376710][ T5869] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 290.392442][ T5869] usb 2-1: can't read configurations, error -61 [ 394.569363][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 394.576341][ C0] rcu: 1-...!: (8 ticks this GP) idle=f464/1/0x4000000000000000 softirq=26545/26547 fqs=46 [ 394.587450][ C0] rcu: (detected by 0, t=10502 jiffies, g=23477, q=130 ncpus=2) [ 394.595166][ C0] Sending NMI from CPU 0 to CPUs 1: [ 394.595193][ C1] NMI backtrace for cpu 1 [ 394.595203][ C1] CPU: 1 UID: 0 PID: 8885 Comm: syz.3.764 Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 394.595217][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 394.595225][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x1c/0x70 [ 394.595248][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 a4 e6 49 7e 65 8b 05 a5 e6 49 7e a9 00 01 ff 00 48 8b 34 24 <74> 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b [ 394.595260][ C1] RSP: 0018:ffffc90000a28e28 EFLAGS: 00000006 [ 394.595271][ C1] RAX: 0000000080010001 RBX: 0000000000000001 RCX: ffffffff81a72470 [ 394.595279][ C1] RDX: ffff888045382440 RSI: ffffffff81a726d6 RDI: 0000000000000001 [ 394.595287][ C1] RBP: 000000000003d94c R08: 0000000000000001 R09: 0000000000000000 [ 394.595294][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88802c426340 [ 394.595301][ C1] R13: ffff8880b872c780 R14: ffff8880b872c680 R15: ffffffff896ae790 [ 394.595310][ C1] FS: 00007fbed54406c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 394.595323][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 394.595331][ C1] CR2: 00007efe25005d58 CR3: 000000003c52c000 CR4: 00000000003526f0 [ 394.595339][ C1] Call Trace: [ 394.595344][ C1] [ 394.595349][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 394.595366][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 394.595381][ C1] ? nmi_handle+0x1ac/0x5d0 [ 394.595400][ C1] ? __sanitizer_cov_trace_pc+0x1c/0x70 [ 394.595417][ C1] ? default_do_nmi+0x6a/0x160 [ 394.595431][ C1] ? exc_nmi+0x170/0x1e0 [ 394.595443][ C1] ? end_repeat_nmi+0xf/0x53 [ 394.595459][ C1] ? __pfx_advance_sched+0x10/0x10 [ 394.595474][ C1] ? __hrtimer_run_queues+0x5a0/0xae0 [ 394.595487][ C1] ? __hrtimer_run_queues+0x806/0xae0 [ 394.595499][ C1] ? __sanitizer_cov_trace_pc+0x1c/0x70 [ 394.595516][ C1] ? __sanitizer_cov_trace_pc+0x1c/0x70 [ 394.595535][ C1] ? __sanitizer_cov_trace_pc+0x1c/0x70 [ 394.595552][ C1] [ 394.595556][ C1] [ 394.595560][ C1] __hrtimer_run_queues+0x806/0xae0 [ 394.595575][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 394.595586][ C1] ? read_tsc+0x9/0x20 [ 394.595599][ C1] ? rcu_is_watching+0x12/0xc0 [ 394.595614][ C1] hrtimer_interrupt+0x392/0x8e0 [ 394.595630][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 394.595649][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 394.595665][ C1] [ 394.595668][ C1] [ 394.595673][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 394.595689][ C1] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 394.595708][ C1] Code: a9 0a 00 00 44 8b 0d b3 e6 d9 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 49 f2 38 00 fb 65 48 8b 1d a0 20 7b 7e <48> 8d bb 08 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 394.595719][ C1] RSP: 0018:ffffc9000c93f8e8 EFLAGS: 00000202 [ 394.595728][ C1] RAX: 00000000000000b9 RBX: ffff888045382440 RCX: 1ffffffff20c4511 [ 394.595735][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cfc80 RDI: ffffffff8bd36a20 [ 394.595743][ C1] RBP: ffffc9000c93f930 R08: 0000000000000001 R09: 0000000000000001 [ 394.595750][ C1] R10: ffffffff90626c17 R11: 0000000000000000 R12: ffff8880b873fa30 [ 394.595758][ C1] R13: ffff88802af44880 R14: 0000000000000000 R15: ffff8880b863ec00 [ 394.595771][ C1] ? finish_task_switch.isra.0+0x217/0xcc0 [ 394.595788][ C1] ? __switch_to+0x749/0x1190 [ 394.595801][ C1] __schedule+0xf4b/0x5890 [ 394.595815][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 394.595836][ C1] ? __pfx___schedule+0x10/0x10 [ 394.595850][ C1] ? schedule+0x298/0x350 [ 394.595863][ C1] ? __pfx_lock_release+0x10/0x10 [ 394.595878][ C1] ? plist_add+0x458/0x600 [ 394.595891][ C1] ? lock_acquire+0x2f/0xb0 [ 394.595906][ C1] ? schedule+0x1fd/0x350 [ 394.595919][ C1] ? futex_wait_queue+0x41/0x1f0 [ 394.595936][ C1] schedule+0xe7/0x350 [ 394.595949][ C1] futex_wait_queue+0xfe/0x1f0 [ 394.595966][ C1] __futex_wait+0x291/0x3c0 [ 394.595983][ C1] ? __pfx___futex_wait+0x10/0x10 [ 394.596001][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 394.596020][ C1] ? add_device_randomness+0xb8/0xf0 [ 394.596038][ C1] futex_wait+0xe9/0x380 [ 394.596054][ C1] ? __pfx_futex_wait+0x10/0x10 [ 394.596071][ C1] ? add_device_randomness+0xb8/0xf0 [ 394.596087][ C1] ? __pfx_add_device_randomness+0x10/0x10 [ 394.596104][ C1] do_futex+0x22b/0x350 [ 394.596119][ C1] ? __pfx_do_futex+0x10/0x10 [ 394.596133][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 394.596151][ C1] ? bpf_lsm_capable+0x9/0x10 [ 394.596166][ C1] ? comedi_poll+0x1d1/0xa30 [ 394.596182][ C1] __x64_sys_futex+0x1e1/0x4c0 [ 394.596196][ C1] ? do_sys_settimeofday64+0x1e4/0x260 [ 394.596213][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 394.596227][ C1] ? __x64_sys_clock_settime+0x1ca/0x2a0 [ 394.596245][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 394.596265][ C1] do_syscall_64+0xcd/0x250 [ 394.596282][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.596298][ C1] RIP: 0033:0x7fbed458d169 [ 394.596308][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.596318][ C1] RSP: 002b:00007fbed54400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 394.596329][ C1] RAX: ffffffffffffffda RBX: 00007fbed47a6168 RCX: 00007fbed458d169 [ 394.596336][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbed47a6168 [ 394.596344][ C1] RBP: 00007fbed47a6160 R08: 0000000000000000 R09: 0000000000000000 [ 394.596351][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbed47a616c [ 394.596358][ C1] R13: 0000000000000000 R14: 00007ffee485e440 R15: 00007ffee485e528 [ 394.596370][ C1] [ 394.597188][ C0] rcu: rcu_preempt kthread starved for 10410 jiffies! g23477 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 395.168273][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 395.178235][ C0] rcu: RCU grace-period kthread stack dump: [ 395.184112][ C0] task:rcu_preempt state:R running task stack:28344 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00004000 [ 395.197598][ C0] Call Trace: [ 395.200868][ C0] [ 395.203797][ C0] __schedule+0xf43/0x5890 [ 395.208214][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 395.213420][ C0] ? __pfx___schedule+0x10/0x10 [ 395.218266][ C0] ? schedule+0x298/0x350 [ 395.222591][ C0] ? __pfx_lock_release+0x10/0x10 [ 395.227619][ C0] ? lock_acquire+0x2f/0xb0 [ 395.232117][ C0] ? schedule+0x1fd/0x350 [ 395.236443][ C0] schedule+0xe7/0x350 [ 395.240507][ C0] schedule_timeout+0x124/0x280 [ 395.245353][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 395.250718][ C0] ? __pfx_process_timeout+0x10/0x10 [ 395.256002][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 395.261805][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 395.267268][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 395.272033][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 395.277315][ C0] ? rcu_gp_init+0xc82/0x1630 [ 395.281993][ C0] ? lock_acquire+0x2f/0xb0 [ 395.286491][ C0] ? finish_swait+0xc5/0x280 [ 395.291081][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 395.296888][ C0] rcu_gp_kthread+0x271/0x380 [ 395.301566][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 395.306763][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.311960][ C0] ? __kthread_parkme+0x148/0x220 [ 395.316977][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 395.322174][ C0] kthread+0x3af/0x750 [ 395.326239][ C0] ? __pfx_kthread+0x10/0x10 [ 395.330830][ C0] ? __pfx_kthread+0x10/0x10 [ 395.335416][ C0] ret_from_fork+0x45/0x80 [ 395.339829][ C0] ? __pfx_kthread+0x10/0x10 [ 395.344413][ C0] ret_from_fork_asm+0x1a/0x30 [ 395.349183][ C0] [ 395.352191][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 395.358504][ C0] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00179-gb3ee1e460951 #0 [ 395.369336][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.379381][ C0] RIP: 0010:smp_call_function_many_cond+0x4c6/0x12c0 [ 395.386050][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 ac 0e 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 [ 395.405650][ C0] RSP: 0000:ffffc90002f179c0 EFLAGS: 00000293 [ 395.411708][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a80 RCX: ffffffff81ade40a [ 395.419669][ C0] RDX: ffff88802e438000 RSI: ffffffff81ade3e4 RDI: 0000000000000005 [ 395.427632][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 395.435595][ C0] R10: 0000000000000001 R11: 0000000000000003 R12: ffffed10170e8951 [ 395.443555][ C0] R13: 0000000000000001 R14: ffff8880b863fe80 R15: ffff8880b8744a88 [ 395.451516][ C0] FS: 00005555881ac500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 395.460438][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.467013][ C0] CR2: 00005555881c75c8 CR3: 000000005fb20000 CR4: 00000000003526f0 [ 395.474978][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.482940][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.490901][ C0] Call Trace: [ 395.494176][ C0] [ 395.497013][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 395.503333][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 395.508525][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 395.513986][ C0] ? __pfx_tmigr_requires_handle_remote_up+0x10/0x10 [ 395.520663][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 395.526287][ C0] ? tmigr_requires_handle_remote+0x140/0x310 [ 395.532347][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 395.538755][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 395.544043][ C0] ? hrtimer_run_queues+0x97/0x500 [ 395.549150][ C0] ? update_process_times+0x178/0x2d0 [ 395.554521][ C0] ? __pfx_update_process_times+0x10/0x10 [ 395.560240][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 395.565691][ C0] ? update_wall_time+0x1c/0x40 [ 395.570540][ C0] ? tick_nohz_handler+0x376/0x530 [ 395.575645][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 395.581096][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 395.586465][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 395.592174][ C0] ? read_tsc+0x9/0x20 [ 395.596242][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 395.601355][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 395.607512][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 395.613312][ C0] [ 395.616233][ C0] [ 395.619156][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.625313][ C0] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 395.631370][ C0] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 395.637427][ C0] ? smp_call_function_many_cond+0x4c6/0x12c0 [ 395.643489][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 395.648861][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 395.654050][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 395.659414][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 395.664519][ C0] flush_tlb_mm_range+0x271/0x4a0 [ 395.669535][ C0] ? __pfx___page_table_check_pte_clear+0x10/0x10 [ 395.675943][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 395.681485][ C0] ? __pfx_pte_mkwrite+0x10/0x10 [ 395.686418][ C0] ptep_clear_flush+0x136/0x180 [ 395.691269][ C0] do_wp_page+0x159a/0x4670 [ 395.695778][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 395.701407][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 395.706254][ C0] ? rcu_is_watching+0x12/0xc0 [ 395.711014][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.716376][ C0] ? lock_acquire+0x2f/0xb0 [ 395.720874][ C0] ? __handle_mm_fault+0xdfa/0x2a40 [ 395.726073][ C0] __handle_mm_fault+0x1ade/0x2a40 [ 395.731182][ C0] ? lock_vma_under_rcu+0x6b9/0x980 [ 395.736379][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 395.741853][ C0] handle_mm_fault+0x3fa/0xaa0 [ 395.746613][ C0] do_user_addr_fault+0x60d/0x13f0 [ 395.751726][ C0] exc_page_fault+0x5c/0xc0 [ 395.756229][ C0] asm_exc_page_fault+0x26/0x30 [ 395.761075][ C0] RIP: 0033:0x7fdc3734b5df [ 395.765480][ C0] Code: 8d 34 19 48 39 d5 48 89 75 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 eb 80 48 8d 0d 61 bc 0e 00 48 8d 15 65 ce 0e 00 bf 01 [ 395.785078][ C0] RSP: 002b:00007fff7454ed50 EFLAGS: 00010206 [ 395.791138][ C0] RAX: 0000000000018a41 RBX: 0000000000008040 RCX: 00005555881bf590 [ 395.799099][ C0] RDX: 0000000000008041 RSI: 00005555881c75c0 RDI: 0000000000000004 [ 395.807061][ C0] RBP: 00007fdc3757cca0 R08: 0000000000000000 R09: 0000000000000000 [ 395.815035][ C0] R10: 0000000000001000 R11: 0000000000000802 R12: 0000000000008030 [ 395.823017][ C0] R13: 0000000000000076 R14: 00007fdc3757cd00 R15: 0000000000000000 [ 395.831023][ C0]