last executing test programs: 2m34.975651331s ago: executing program 3 (id=199): socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xa7ff) 2m34.870887152s ago: executing program 3 (id=201): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x2c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x11d341) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x28000600) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000200)={0x0, '\x00', {0x2}, 0x5}) fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x6}) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000000e00)={0x2020}, 0x2020) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) listen(r1, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2202001}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4020055}, 0x8054) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r5, 0x1, 0xfffffffe, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x805}, 0x40080d1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022a6463e518bdb13e672ebd7000fbdbdf250000000019566cfbc68dcbd02fc9790768675608000700", @ANYRES32=r3, @ANYBLOB="0800080003000000080005000a01010208000500ac1e010105000d0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x40014) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285628, &(0x7f0000000340)={0x0, @pix_mp={0x200, 0x6, 0x31303453, 0x1, 0x3, [{0xfffffff9, 0x2}, {0x2000001, 0x1}, {0x3ff, 0x8ea}, {0x8, 0xc1e}, {0x9, 0x45}, {0x6, 0xc7}, {0x200005, 0x7}, {0x5, 0x401}], 0x0, 0x3, 0x0, 0x2, 0x5}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) 2m33.752428541s ago: executing program 3 (id=207): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) syz_io_uring_setup(0x15f5, &(0x7f00000002c0)={0x0, 0x1f9c, 0x20228, 0x3, 0x2e7, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 2m30.805087337s ago: executing program 3 (id=221): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r8, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r9, r6, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 2m30.138298383s ago: executing program 3 (id=222): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x40000) socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000180)={0x33, 0x40000020, 0xfffffffb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m29.143369268s ago: executing program 3 (id=223): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() (async) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENT(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) (async) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2m13.871963736s ago: executing program 32 (id=223): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() (async) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r1}}) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) (async) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENT(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) (async) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 19.116806103s ago: executing program 5 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) accept4(r2, 0x0, &(0x7f00000002c0), 0x80800) (async) accept4(r2, 0x0, &(0x7f00000002c0), 0x80800) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d100"/20, @ANYRES32=r7, @ANYBLOB="02ea330466c4d03f09000d0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r9 = syz_io_uring_setup(0x1110, &(0x7f0000000240)={0x0, 0xdb9c, 0x800, 0x10000000, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r8, 0x8000000000000001, 0x0, 0x40000, 0x2}) io_uring_enter(r9, 0x47f6, 0x0, 0x20, 0x0, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xcc34, '\x00', 0x0, r4, 0x2, 0x2, 0x3}, 0x50) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x6e}) 17.221065465s ago: executing program 5 (id=615): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) r7 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="9d612698e0c1d3eb5aba2c22e20cce7ecb0a9a2ca22d62bae5f7e3047318700832727534e470802a41a85ddd10d7d71c8dbfaad2f2c01fb84ec18f1191", 0x3d, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000080)={r8}) syz_usb_connect(0x5, 0x24, &(0x7f0000006080)={{0x12, 0x1, 0x200, 0x30, 0x2d, 0x45, 0x10, 0x5e3, 0x502, 0xf1d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xf, 0x0, 0x4, [{{0x9, 0x4, 0x9c, 0x2, 0x0, 0xba, 0x22, 0x54, 0x3}}]}}]}}, 0x0) 9.800054795s ago: executing program 5 (id=629): syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x29, 0x6, 0xfffffff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000e7ff000000000000211980000000000095000000000000005ca1a26d2107367ef7dbd05b68f52b6b9793415dec883aeee1f37996cbd5787fdad668b39de18f5209f18188855029efb6f80895a83aa4ddcbae4817459ea8b3a8e62860c7bb1a8f0737ea066b7098ee334056fbdbb5b63f93e0f9578dbe5ab232d43e5e169070b3ca264603d2b08476749f383ec6feea"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) eventfd2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000900)={'wlan1\x00', @random}) 8.406026624s ago: executing program 2 (id=633): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0xa4ff, 0xd4, &(0x7f0000000080)=0x8, 0x4) 8.331466919s ago: executing program 5 (id=634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x28003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_init() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x20008000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x5, &(0x7f0000000200)=[{0x101, 0x3, 0xff, 0x9409}, {0x81, 0x0, 0x4, 0xe}, {0xfffe, 0x9, 0x7}, {0x0, 0x0, 0x25, 0x135}, {0x5c4, 0x40, 0x7, 0x6}]}) close_range(r8, r4, 0x0) 8.175892141s ago: executing program 2 (id=636): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket(0x11, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r8, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r9, r6, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 7.992938595s ago: executing program 2 (id=637): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000a, 0x5}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_procfs(0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x48080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x2, 0xfffffffd, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x1) 7.60375615s ago: executing program 2 (id=638): syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00'}, 0x10) socket(0x29, 0x6, 0xfffffff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000e7ff000000000000211980000000000095000000000000005ca1a26d2107367ef7dbd05b68f52b6b9793415dec883aeee1f37996cbd5787fdad668b39de18f5209f18188855029efb6f80895a83aa4ddcbae4817459ea8b3a8e62860c7bb1a8f0737ea066b7098ee334056fbdbb5b63f93e0f9578dbe5ab232d43e5e169070b3ca264603d2b08476749f383ec6feea"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) eventfd2(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000900)={'wlan1\x00', @random}) 7.43214794s ago: executing program 4 (id=639): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"0e5b67bf021c619d235943afd81f1068c3596311ba4bb6641c3d381d7b3b8677", r2, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002540)=@nat={'nat\x00', 0x1b, 0x5, 0x5f8, 0x0, 0x320, 0xffffffff, 0x208, 0x438, 0x528, 0x528, 0xffffffff, 0x528, 0x528, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x40, 0x8], 0x80000000, 0x2, 0x7, [@dev={0xfe, 0x80, '\x00', 0x3f}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @rand_addr=' \x01\x00', @remote, @mcast1, @loopback, @loopback, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote], 0xe}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xffff, 0xfff5}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0x7fffff7f], [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], 'netpci0\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x1, 0x8, 0x4, 0x7a}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xe, @ipv4=@multicast2, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x6, @icmp_id=0x64}}}, {{@ipv6={@empty, @mcast1, [0x0, 0xffffffff, 0xff, 0xff], [0xff, 0xffffff00, 0xffffffff], 'veth0_macvtap\x00', 'erspan0\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x2, 0xc}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xc, @ipv6=@mcast1, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}, @gre_key=0x9, @gre_key=0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@remote, @icmp_id=0x66, @port=0x100}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000100)={"12bcf1ed05910bb4da24227548a17458a14588968f17ef614d2cfee8c3c4337f", r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x20, r0, 0x1, 0x70bd28, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x40000) 7.035874846s ago: executing program 2 (id=641): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @local}, 0x74) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x24, 0x0, &(0x7f0000000140)=0xfffffffe, 0x3000003) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x70, 0x99, 0x89, 0x8, 0xc45, 0x614a, 0x6e05, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x8, 0x40, 0xb, [{{0x9, 0x4, 0xed, 0x2, 0x0, 0x8c, 0xec, 0xe7, 0x7}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x5, &(0x7f0000000b40)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x4a, 0x0}, {0x0, 0x0}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='syzkaller\x00', 0x425}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000100)=0x954, 0x4) 6.689141697s ago: executing program 4 (id=642): socket$alg(0x26, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x5a93, 0x10100, 0xfffffffd, 0x307}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0xf735, 0x5, 0x0, 0x7, 0x1, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) rt_tgsigqueueinfo(r5, r6, 0x31, &(0x7f00000001c0)={0x17, 0x4, 0x1800000}) sched_setparam(r5, &(0x7f0000000000)=0x6) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) read$FUSE(r1, &(0x7f0000002b00)={0x2020}, 0x2020) 6.171104226s ago: executing program 4 (id=643): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) getsockopt$ax25_int(r0, 0x101, 0xa, 0x0, &(0x7f0000002400)) 6.089160566s ago: executing program 4 (id=644): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000933bbb29f6bf4af507878f0c8526aeedc08975738ac4d81ae185162b50798ce06b45036a2447c2abbecd978d4ba77bb1e870896320c7a88f9661c1783e3fb36236204c6657973167c70d0c824e9705f721dd46f53b5b147fccde7f8276733ecf8821f6cae24037b882b026b1b910f00e0a47246b9108f8867fa1fc42a180f28b02383bc870fe100488cfb739296a15ca333c45f6c822d54d344e732240d6eceee41881a377defb01cd0b98f5de05edd77174c7100f183cc07aca404c6a5f60a238b719829f4d8137d0704b873e65f17e7df37ad18cc3b96af0"], 0x16) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x0, 0x2, 0x2, 0xf}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) 6.063986127s ago: executing program 5 (id=645): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) r5 = syz_open_dev$loop(0x0, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r5) chdir(0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000180)='&', 0x1}, {0x0}, {0x0}], 0x4) syz_usb_disconnect(r6) openat$cgroup_ro(r4, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030801d000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000002f4993b30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0b20a8bc129b00439b7e3fde75a01a60c25f7cdc789c4732b6a78fe832827893bb0b2917abbba8aa05714e2f655a266d7e1a2516c0f9a9513c7a8bb"], 0xb8}}, 0x0) r11 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) openat$cgroup(r12, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) sendmsg$nl_xfrm(r9, 0x0, 0x0) syz_usb_connect(0x0, 0x8fa, &(0x7f00000005c0)={{0x12, 0x1, 0x201, 0x7b, 0xbd, 0xf4, 0x10, 0xc45, 0x610e, 0x7637, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e8, 0x3, 0x7e, 0x6, 0x60, 0x8, [{{0x9, 0x4, 0x12, 0x0, 0xc, 0x3b, 0xe0, 0x4d, 0x3, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'I'}, {0x5, 0x24, 0x0, 0xd20}, {0xd, 0x24, 0xf, 0x1, 0x506a47de, 0x8, 0x9}, {0x6, 0x24, 0x1a, 0x7fff, 0x3}, [@mdlm_detail={0x97, 0x24, 0x13, 0xbc, "72c0698484bc7320e161e802fece275f6b9d537ab5b41936cc96ecf11388135ccebc24b252480df184bdf165308321e7f9f56b525fdf70e6ab71da80d7c50408c964ed36905bbe95273403555b0253243fd064f3d11c2a19350781c7b5b7ee104b2e1e8edb9f06304be046e21812d2fd67687701d7455a29e988d1914f235c6e24048c32cdb18438a66df6b466854fa18f8743"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x7f, 0xff, 0x80}]}], [{{0x9, 0x5, 0xe, 0xc, 0x450, 0x10, 0x41, 0xfc}}, {{0x9, 0x5, 0x3ba97ec4b0183ef3, 0x1, 0x3ff, 0xff, 0xd3, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x6, 0x2, 0xfe, [@generic={0x6e, 0x23, "357e450daf95d7a639fa8bacd5cf61e4309ba07efcc44558e9ee807682455bbca50b0a3aae37d9b4064eeec4dece5d6c37a8f4f95a838905f4ca69587994bddd2bf20880b96fa78ba581f02c12f3bca7c466d89388813c7fddb3946ad94cd5bb47576312aad89a80bc29ea41"}, @generic={0xac, 0xe, "ca77409856d6f5c4592a127d618728970deeca00ddb85111d9ede21c3fea00826c820245ec95820303fd05e4516464c0c8f0af6726b4183522c82362107f81733fac6f0058518367d57ec26786e54b83c79be7701b73301dd212bd2043756fceb4adab1107dbacd22666659ab2190c6d1c6d0b5e6162cacf5542d578132fb16d528b811adb18a2514674eb24c4a42fd581646d894b2bedbaae09b5114e8ededca8079e0eb974025ef8f9"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x5e, 0x5, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x8, 0x5, 0x4, [@generic={0xfa, 0x10, "6ee1409a071875818a8be6d18f2d039aa5f99b5d6dbcb43cc2b6718a48812c2e036b190b9874a5c8442dd22636d5bf8ada4b1f5c7e37bd32eb1b682919e436e43919c790dcf3686d098f5e0b883391cddb641b15d0024cb9db66980e4bd851ae85a98446249187150bb441f031a7a6c54838cd5bcd63f60d299ed2cc7100ef4d40cddbc046155299e3f42adde0cc1e5bd614fea7e5a0b832fba2ebef4421647fd188f83f07f53990619e80b7472b224d1a7b9345ebc0de1de9c6d5e0526fcedea20ba65dbfdd6b78eaa269b679a926bcb13f8527d22b50408c14b24a7ab8cc2b92fc087f7c1450e7eeddb34ce1491488bff7193a9a7cc86a"}, @generic={0xc1, 0x11, "b8fe0ea366f19b8ed5f5180d14c2d8e3e844b1a17e37b41600864f2b29781c8411273ff71913c8bf7770ee4b3e4fd01af2e2397678cf1c99c29eb05c2c2aa028e253dfdd3aa929c5b2a58b10b4be6627104b0d8338a159400192119a8a66e62537b4b1f1d1175aafcc863e328f07023cf0cc3df02288e87d57d62c8189877e9c8aa262e0d92fea1fa4368c9ccd4fb8415e19bbbddd8500531c50762d23cc61a15fd912048c37041cf3c3939a576bd57db5f4511ba21875bb03a04bf0b89f7d"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x6, 0xc, 0x9c}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x2, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x9}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x0, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xb8a}, @uac_iso={0x7, 0x25, 0x1, 0xc3, 0x40, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xef, 0xe4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x6}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x5, 0x3, 0x2, [@generic={0x95, 0x5, "9997c6e00d5bec1ff32845d43120a5a1d5f8af60890a7c316e4b57c53d7c0bbe15a149c33f6979191dc4c7a1202e6a1cd5347660428ae71ac60911fa72b0b5de39fbd65c13098bfc2dd9d4c86dad86d616f1b3ce4bd2b8d58b1b0128fbc208c1f727f35325d03953a2dd028c9612486561f529d7c7efe319bbf2654c51c4226a1b138d19e41311b45eca2b327645cb8d54894e"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x7f6, 0x7, 0xc0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x86}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x400}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x8, 0x2, 0x6}}]}}, {{0x9, 0x4, 0xad, 0x3, 0x9, 0x26, 0xb3, 0x78, 0x7f, [], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x3, 0x1, 0x10}}, {{0x9, 0x5, 0x8e, 0x10, 0x20, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0x9}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x73, 0x7, 0x5e}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x8, 0x4, 0xf9}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x400, 0xc, 0xf8, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x83, 0x80}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0xe5, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x1, 0x7, [@generic={0xc4, 0x2, "d441fda73f4e3c474e81cff8f527d8b20d63cbf89b81e00385b210d8c0eeace27bad331c099956b7dc55b2186c020ed8e7a44d64642308b2e5752d52fbd8795480f6bdf7ce698486852bf984cf9e1d6e759de26545e0da54a05047bd6113a70c6b8836d32551b5af6a766f6a7b7357b10c47a0a80c49ef17ce441706f0b9b2d31142d5f18889c998547e5a6eef8daec1887788586e2f08908b190b4285c621f4f344636d9450de0f86638daf357c8b15d40a1aa9209fabbd176bf7c44f7a5f787b9a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xf001}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xfe, 0x2b, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}, @generic={0x12, 0xb, "1087289a0f6b1076f6394c12cddef886"}]}}]}}, {{0x9, 0x4, 0x3e, 0x7f, 0xa, 0x56, 0x7, 0xb8, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x23b, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x206, 0x4, 0x81, 0x3b, 0x30, 0x8}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x7, 0x92, "81e553"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x2, 0xca, 0x0, 0x10, 0xd}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x2, 0x6, [0x2, 0x2, 0x9, 0x2, 0x9, 0x5], 0x4}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x80, "374f03a03514"}, @processing_unit={0x8, 0x24, 0x7, 0x6, 0x4, 0x2, 'n'}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "b21b"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x1, 0xb}, {0x6, 0x24, 0x1a, 0x5, 0x3e021561d8eb8328}, [@country_functional={0xa, 0x24, 0x7, 0x0, 0x1, [0xa, 0xe3]}, @mdlm_detail={0x1f, 0x24, 0x13, 0x0, "23e2ba5428784306370adca4a06741f6cde5e14e4526dc7f815525"}, @mdlm={0x15, 0x24, 0x12, 0x8}, @obex={0x5, 0x24, 0x15, 0x6}, @country_functional={0x6, 0x24, 0x7, 0xe, 0xc79}, @mdlm={0x15, 0x24, 0x12, 0x3}]}], [{{0x9, 0x5, 0xf, 0x4, 0x20, 0x5, 0x48, 0xf7, [@generic={0x41, 0x23, "45a9c12348efea7ec253cb798c0f7304aff763c22e6331800a72c5e0028245abfbb82aec86c25642522eac0209a2b8558cc9af339da1a0b03ce6c789a5847a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xff, 0x6, 0xfa}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xcb8}, @generic={0x59, 0x7, "f67b164542c0d26e8c99387225af3980fb1c3dd32ad0df8149ba86b45eeaab58f073da89ca2fd11948b5175d7a42dfb2c046cc880964dae4627d3d217a137d7d0b7492d21849b340af3a9fa11551757e77886628700ce6"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x7}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0xa}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x6, 0x5, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x7, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd4, 0x9404}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x1, 0xd, 0x7}}, {{0x9, 0x5, 0x108ab0c5b1c82efc, 0x0, 0x10, 0x2, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfc, 0x6}]}}, {{0x9, 0x5, 0x80, 0x8, 0x3ff, 0x5, 0x2, 0x49, [@generic={0xd4, 0x1, "5887623813c9a76ed1b971f274ee237bc612b2f0eb9f13f825af6cdb80ac623d7686f726e6dbc799260d6381c853e40aa0a57487f7bb70d9b75b1a45ea5b85c643de1343af41011ea5190f16306b4503ef56b083de3249b18ad1131eaa3595673415fd5279ad25cbd928e0cd1d7898362874a87f1da4185916ae95ae3479871817d7b26b7a8e3fb33b9378b4213fe33cff84802f5a296ffbc8840b0a9fb997b0d62c6860127a68a1e6a4f13729b1c4f44e428bf002a8649b925f1e1c7af45d0cc5979d7a47df34558b7c679683f3a4d7ce83"}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xd, 0x3, 0x94, 0x40, 0x4}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "df202cf5ea3fb8993c83d06de9cd7eda"}]}, 0x5, [{0x5c, &(0x7f0000000380)=@string={0x5c, 0x3, "17005026f800237db08488a6617a132bd628aed862dc1eed17d8d62dc36766f95816f75cf7eff03cbd472f608caee2ce6a17c7bc6957376e69426f052cbf33d85722f2fd75726df1398d0a5163e2f2602a2f163e90ff7701c7bd"}}, {0xd2, &(0x7f0000000ec0)=@string={0xd2, 0x3, "ec53e5d0576d14f0237340088c6ad0d9b340579dc6a0e68189c3c716efb795990ea7d60dc054261f57ab1dc146eaf42d147a0d13769aff35ec08cc4feee36fc345d3b250d8ef828eb85a3beeaf16fec4c4267dd4e625d8ba3ca6abb63828c47a6038d138f9bfd3e2f890e9552643329a8838b22a2369f310393f23d78cd7a85c0a8b6b911daa2562e1e368ada2f98d81499e13d95a365fd2d01a51272867a71342fd9ced98281e5ec754f44089cf9a2dcb9d86dfa3d4faa965f961b5d519086bcea1ff858ebae25f70d3b61d159babda"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42d}}, {0x4e, &(0x7f00000004c0)=@string={0x4e, 0x3, "3aa44eaf29a8e01c07b35c7d4f5d1ed51defb28efcaa5f4e48d8d83c0b93fe9d0ed3a548ec92059eb60ef900d92f5de2023130ee262bca66297f986f33963d835738f7afd4c809f0da7bf9e9"}}, {0x7b, &(0x7f0000000fc0)=@string={0x7b, 0x3, "c1244dfdcd24a528876d79f2f97f8ceadebe832a5689238c311ab2584c9b9d7b83686b88da1c861eca662e35c94cd3ef10eef93bc448a7ac2f0f95d482c1b1b556f1c075508da0314b732775c99c81207ed70827e8cbc3a32ccbcd8ea3995e3f518035b422a228e6d8fcde7aed5d4bfe31959d644fcdce8e96"}}]}) 5.701068477s ago: executing program 4 (id=647): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1ff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0x8a010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000004000000040000000200000080020000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x48) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240), 0x8) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="00112f000000836d7b582f23ff7dbd0b342790b332d8c143e8b52873d5c7f9fcd26fce9651dc18e8c5389e52608c6b82705d1d35606f2230b0fd260033"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.56740491s ago: executing program 1 (id=648): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x400000000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) dup3(r1, r1, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x136) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 5.527211962s ago: executing program 0 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000804) (fail_nth: 5) 4.324015668s ago: executing program 1 (id=650): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000a, 0x5}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_procfs(0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061108c000000000004000040000000009500004000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 4.22905216s ago: executing program 0 (id=651): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = gettid() r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000180)={"4f148885365c01f6327cffbfde3271087d11fca10a424a283dddd79b4894"}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x8, 0xfffffffe, 0x2, 0x1, 0x1000, r3}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r5 = fsmount(r1, 0x0, 0x1) fchdir(r5) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000680)={0x2, {0x2, 0x876, 0xfff, 0xfff, 0x8, 0x1}}) mount$9p_fd(0x0, &(0x7f0000000640)='./file1\x00', &(0x7f0000000080), 0x84094, &(0x7f0000000400)=ANY=[]) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000600000023"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000005c0)={r9, 0x78, &(0x7f0000000500)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x2bdd}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x2, @loopback, 0xfffffff7}]}, &(0x7f0000000600)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000380)={0x18, 0x202d, 0x20, 0x70bd26, 0x25dfdbfc, {0xc}, [@typed={0x4, 0xe}]}, 0x18}}, 0xffb2e6a03df8887e) 4.097320925s ago: executing program 0 (id=652): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x4000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x7, 0x5}, {0x7f778000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0xdddd0000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x83, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x2353, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.070706308s ago: executing program 2 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000140)=0xb) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) mount$cgroup(0x0, 0x0, 0x0, 0x10012, &(0x7f0000000480)={[{@subsystem='perf_event'}], [{@fowner_eq}, {@smackfsdef={'smackfsdef', 0x3d, 'fuse\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x33, 0x35, 0x66, 0x38, 0x56, 0x0, 0x34], 0x2d, [0x31, 0x37, 0x66, 0x33], 0x2d, [0x0, 0x35, 0x33, 0x36], 0x2d, [0x32, 0x37, 0x5b, 0x61], 0x2d, [0x36, 0x65, 0x30, 0x38, 0x35, 0x64, 0x32, 0x63]}}}, {@appraise_type}, {@flag='sync'}, {@context={'context', 0x3d, 'root'}}]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='module_request\x00', r3}, 0x10) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r5, r4, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) poll(&(0x7f0000000140), 0x0, 0x79) syz_usb_connect(0x6, 0x1a, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) epoll_create1(0x80000) close_range(r2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.810007912s ago: executing program 0 (id=654): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r7, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r8, 0x3516, 0x701f, 0x0, 0x0, 0x0) 2.23078143s ago: executing program 1 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r2) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x9e}}, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000181000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r2, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x10c, &(0x7f0000000240)=0x4083fb9, 0x0, 0x4) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x40000004}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8) listen(r6, 0x80000001) r7 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='ceph\x00', &(0x7f0000000300)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00', 0x0) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xa1}], 0x1) tkill(r8, 0xb) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a0000000000006111500000000000180000000000000000002000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1.908821821s ago: executing program 0 (id=656): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x40, 0x650140) 1.802275153s ago: executing program 1 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r7, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r8, 0x3516, 0x701f, 0x0, 0x0, 0x0) 754.395893ms ago: executing program 1 (id=658): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000010ba82, 0x0) r1 = dup(r0) mmap(&(0x7f0000100000/0x3000)=nil, 0x3000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x1, 0x0, 0x0, 0x13, 0x1, 0x9}]}}, 0x0, 0x26, 0x0, 0x1, 0x6}, 0x28) fadvise64(r0, 0x18, 0x0, 0x4) 106.119756ms ago: executing program 1 (id=659): mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x81031, 0xffffffffffffffff, 0x10000000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000002140)='maps\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 67.5884ms ago: executing program 0 (id=660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000400)=r7, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0) 4.784828ms ago: executing program 4 (id=661): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) (async) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xff) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000380)=0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x7, 0x2}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) preadv(r6, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x6) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000000000000035000063a3000000badd444669f56133e59b005a8fa38fff74faecd5445da24b5d5d01dda5957edf0e139998a7e58fa5988a62fa59320ed043d9bd3c72547f9ec3b4cfbb89fcaedc3e3c64a347a137ead746000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b703000e000000008500000008000000bc09080000000000b60a0100000000000f000000000000001801000020756c2500000000002020207b9af8ff000000002d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000000000000000000000b50300000000008acba45834d919fe00b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x80003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=662): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0xfff}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r5, 0x5425, 0x0) r6 = syz_io_uring_setup(0x1860, &(0x7f00000000c0)={0x0, 0x31db, 0x400, 0x40000003, 0x229}, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x3406}, 0x1}) io_uring_enter(r6, 0x47f6, 0x1000, 0x2, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000680)={0x0, 0xf7, 0x2, [0x4, 0x3]}, 0xc) kernel console output (not intermixed with test programs): 89][ T9] gspca_vc032x: reg_w err -110 [ 185.809253][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.820165][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 185.860595][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.096591][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.290083][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.295439][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.332218][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.347711][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.372864][ T7567] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.428221][ T7567] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 186.807979][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.822829][ T30] audit: type=1400 audit(1756164570.123:448): avc: denied { name_bind } for pid=7564 comm="syz.0.340" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 186.830412][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.848829][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.854195][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.859485][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.865634][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.937997][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.956771][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.010526][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.034562][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.053650][ T9] gspca_vc032x: Unknown sensor... [ 187.070428][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 187.216506][ T5909] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 187.324002][ T5909] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 187.367990][ T5909] usb 2-1: USB disconnect, device number 15 [ 187.402366][ T5909] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 187.436945][ T5514] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 187.461840][ T5909] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 188.712508][ T5916] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.163610][ T5916] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.221745][ T5916] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 189.266425][ T5902] usb 3-1: USB disconnect, device number 20 [ 189.314925][ T7593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.337331][ T30] audit: type=1400 audit(1756164572.863:449): avc: denied { block_suspend } for pid=7592 comm="syz.2.348" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.372105][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.480108][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 189.548257][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 190.342876][ T5916] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 190.414307][ T30] audit: type=1400 audit(1756164573.933:450): avc: denied { create } for pid=7598 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 190.449643][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 190.506939][ T43] kernel write not supported for file [eventfd] (pid: 43 comm: kworker/1:1) [ 190.529766][ T5916] usb 5-1: Product: syz [ 190.539213][ T5916] usb 5-1: Manufacturer: syz [ 190.815825][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 191.038166][ T5916] usb 5-1: can't set config #1, error -71 [ 191.064448][ T5916] usb 5-1: USB disconnect, device number 21 [ 191.465338][ T7616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21760 sclass=netlink_route_socket pid=7616 comm=syz.4.354 [ 191.747435][ T30] audit: type=1400 audit(1756164575.273:451): avc: denied { append } for pid=7628 comm="syz.4.357" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 191.980685][ T5902] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 192.076708][ T7630] netlink: 56 bytes leftover after parsing attributes in process `syz.5.355'. [ 192.160619][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 192.179463][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 192.245705][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 192.281622][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 192.388088][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 192.456929][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 192.807541][ T5902] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 192.817090][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.899565][ T5902] usb 5-1: Product: syz [ 193.116695][ T5902] usb 5-1: Manufacturer: syz [ 193.134109][ T5902] usb 5-1: SerialNumber: syz [ 193.175010][ T5902] usb 5-1: config 0 descriptor?? [ 193.517854][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 194.012629][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.019122][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.339774][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 194.387593][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 194.397337][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 194.446181][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 194.497088][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.506084][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.515885][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.525522][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.533641][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.550883][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.558669][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.566789][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.574520][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.588297][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.606027][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.621816][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.630110][ T5853] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 194.643941][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.653740][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.690636][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.707288][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.722210][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.735921][ T5902] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.743794][ T5902] input input11: Timeout waiting for response from device. [ 194.760224][ T5916] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 194.796062][ T5902] usb 5-1: USB disconnect, device number 22 [ 194.891813][ T5853] usb 3-1: No LPM exit latency info found, disabling LPM. [ 194.901957][ T5853] usb 3-1: config 8 has an invalid interface number: 237 but max is 0 [ 194.919841][ T5853] usb 3-1: config 8 has no interface number 0 [ 194.927207][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 194.940261][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 194.947253][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 194.959307][ T5853] usb 3-1: config 8 interface 237 has no altsetting 0 [ 194.976219][ T5916] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 195.015666][ T5916] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 195.026367][ T5853] usb 3-1: string descriptor 0 read error: -22 [ 195.050157][ T5853] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=6e.05 [ 195.066212][ T5916] usb 2-1: Product: syz [ 195.070579][ T5916] usb 2-1: Manufacturer: syz [ 195.075678][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.083786][ T5916] usb 2-1: SerialNumber: syz [ 195.121243][ T5853] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 195.156773][ T43] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 195.169553][ T43] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.182930][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.196574][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 195.212103][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 195.237672][ T43] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.249375][ T43] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.259515][ T43] usb 1-1: Product: syz [ 195.274379][ T43] usb 1-1: Manufacturer: syz [ 195.375898][ T5916] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 195.386636][ T5916] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 195.443913][ T5916] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 195.466040][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 195.472971][ T5916] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 195.475256][ T43] cdc_wdm 1-1:1.0: skipping garbage [ 195.489984][ T43] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 195.499562][ T43] cdc_wdm 1-1:1.0: Unknown control protocol [ 195.586288][ T5916] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 195.608540][ T5916] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 195.648502][ T5916] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 195.668327][ T5853] gspca_sonixj: reg_w1 err -110 [ 195.676300][ T5853] sonixj 3-1:8.237: probe with driver sonixj failed with error -110 [ 195.799236][ T30] audit: type=1400 audit(1756164579.323:452): avc: denied { accept } for pid=7658 comm="syz.1.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 195.801476][ T5916] usb 2-1: USB disconnect, device number 16 [ 195.845104][ C1] wdm_int_callback: 3412 callbacks suppressed [ 195.845127][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.857746][ C1] wdm_int_callback: 3412 callbacks suppressed [ 195.857757][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.871374][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.873415][ T5916] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 195.877968][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.878156][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.899037][ T5916] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 195.899952][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.900882][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.921925][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.929177][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.935768][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.942329][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.948893][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.955611][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.962199][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.969423][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.975988][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.982495][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 195.989054][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 195.995830][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 196.002410][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 196.010107][ T43] usb 1-1: USB disconnect, device number 20 [ 196.016624][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 196.033590][ T5916] visor 2-1:1.0: device disconnected [ 196.608877][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 196.750293][ T7671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.858888][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 196.871560][ T43] usb 1-1: config 126 has an invalid interface number: 18 but max is 2 [ 196.883614][ T43] usb 1-1: config 126 has an invalid interface number: 173 but max is 2 [ 196.961766][ T43] usb 1-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 196.972169][ T43] usb 1-1: config 126 has an invalid interface number: 62 but max is 2 [ 196.983081][ T43] usb 1-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 196.992324][ T43] usb 1-1: config 126 has an invalid descriptor of length 198, skipping remainder of the config [ 197.010253][ T5916] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 197.047967][ T43] usb 1-1: config 126 has no interface number 0 [ 197.089882][ T43] usb 1-1: config 126 has no interface number 1 [ 197.096614][ T43] usb 1-1: config 126 has no interface number 2 [ 197.129115][ T5909] usb 3-1: USB disconnect, device number 21 [ 197.218036][ T43] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0xE has invalid maxpacket 1104, setting to 64 [ 197.232044][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 197.239448][ T5916] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 197.259574][ T5916] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 197.318369][ T43] usb 1-1: config 126 interface 18 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 197.324602][ T5916] usb 6-1: string descriptor 0 read error: -22 [ 197.342144][ T5916] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.351492][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.405922][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 197.441924][ T7685] netlink: 'syz.2.371': attribute type 21 has an invalid length. [ 197.450174][ T7685] netlink: 156 bytes leftover after parsing attributes in process `syz.2.371'. [ 197.469841][ T30] audit: type=1400 audit(1756164580.993:453): avc: denied { bind } for pid=7682 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.503415][ T43] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 7 [ 197.575798][ T30] audit: type=1400 audit(1756164580.993:454): avc: denied { read } for pid=7682 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.580522][ T43] usb 1-1: config 126 interface 18 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.609331][ T7668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.685928][ T43] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 197.697579][ T43] usb 1-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 197.709955][ T43] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 197.816016][ T43] usb 1-1: config 126 interface 18 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.848581][ T43] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 197.868514][ T43] usb 1-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 198.329051][ T43] usb 1-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 198.377820][ T43] usb 1-1: config 126 interface 18 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 198.448070][ T43] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0x89 has invalid maxpacket 57542, setting to 1024 [ 198.476572][ T43] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0x6 has invalid maxpacket 2038, setting to 64 [ 198.506222][ T43] usb 1-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 198.536095][ T30] audit: type=1400 audit(1756164582.063:455): avc: denied { mount } for pid=7701 comm="syz.2.376" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 198.584069][ T43] usb 1-1: config 126 interface 18 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 199.361045][ T43] usb 1-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 199.459230][ T43] usb 1-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x8E, skipping [ 199.891315][ T43] usb 1-1: config 126 interface 173 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 199.900915][ T5916] cdc_ncm 6-1:1.0: bind() failure [ 199.902935][ T43] usb 1-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 199.918868][ T43] usb 1-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 200.429939][ T43] usb 1-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 200.451778][ T43] usb 1-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 200.468837][ T43] usb 1-1: config 126 interface 173 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 200.485843][ T43] usb 1-1: config 126 interface 62 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 200.507867][ T43] usb 1-1: config 126 interface 173 has no altsetting 0 [ 200.515431][ T43] usb 1-1: config 126 interface 62 has no altsetting 0 [ 200.528463][ T43] usb 1-1: string descriptor 0 read error: -71 [ 200.535164][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=610e, bcdDevice=76.37 [ 200.546303][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.567178][ T5916] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 200.575894][ T43] usb 1-1: can't set config #126, error -71 [ 200.597789][ T43] usb 1-1: USB disconnect, device number 21 [ 200.688504][ T5916] cdc_ncm 6-1:1.1: bind() failure [ 200.746208][ T5916] usb 6-1: USB disconnect, device number 5 [ 201.032789][ T30] audit: type=1400 audit(1756164584.563:456): avc: denied { bind } for pid=7721 comm="syz.0.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 201.939412][ T7733] netlink: 'syz.2.384': attribute type 21 has an invalid length. [ 201.948573][ T7733] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 202.184899][ T7725] syz.0.382 (7725): drop_caches: 2 [ 202.424416][ T5916] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 202.470710][ T30] audit: type=1400 audit(1756164585.973:457): avc: denied { lock } for pid=7741 comm="syz.0.387" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 202.560545][ T5902] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 202.710337][ T5909] IPVS: starting estimator thread 0... [ 202.790566][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 202.792371][ T5902] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.810429][ T5916] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.817045][ T7748] IPVS: using max 71 ests per chain, 170400 per kthread [ 202.852789][ T5902] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 202.881671][ T5916] usb 3-1: config 4 interface 0 has no altsetting 0 [ 202.886378][ T5902] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.921985][ T5916] usb 3-1: string descriptor 0 read error: -22 [ 202.928571][ T5916] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 202.951150][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.987585][ T5916] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 202.989745][ T5902] usb 6-1: Product: syz [ 203.007749][ T5902] usb 6-1: Manufacturer: syz [ 203.019945][ T5902] usb 6-1: SerialNumber: syz [ 203.563912][ T5916] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 203.591651][ T5902] cdc_mbim 6-1:1.0: skipping garbage [ 203.603793][ T5916] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.685514][ T5916] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 203.711198][ T5916] usb 3-1: media controller created [ 203.738436][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.777556][ T7742] netlink: zone id is out of range [ 203.783119][ T7742] netlink: zone id is out of range [ 203.788221][ T7742] netlink: zone id is out of range [ 203.793668][ T7742] netlink: zone id is out of range [ 203.798761][ T7742] netlink: zone id is out of range [ 203.804169][ T7742] netlink: zone id is out of range [ 203.809257][ T7742] netlink: zone id is out of range [ 203.814678][ T7742] netlink: zone id is out of range [ 203.819766][ T7742] netlink: zone id is out of range [ 203.825934][ T7742] netlink: zone id is out of range [ 203.906308][ T5916] zl10353_read_register: readreg error (reg=127, ret==0) [ 203.925394][ T7742] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 204.214133][ T5916] usb 3-1: USB disconnect, device number 22 [ 204.538408][ T7742] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 204.546366][ T5902] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 204.560581][ T5902] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 204.565282][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.395'. [ 204.733231][ T30] audit: type=1400 audit(1756164588.223:458): avc: denied { setopt } for pid=7772 comm="syz.1.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 204.765607][ T5902] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 204.802828][ T5902] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 205.034886][ T5902] wwan wwan0: port wwan0mbim0 attached [ 205.114546][ T5902] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 1e:f7:cf:8c:f2:e2 [ 206.423867][ T5971] usb 6-1: USB disconnect, device number 6 [ 206.431297][ T5971] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 207.269028][ T5924] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 207.321699][ T5971] wwan wwan0: port wwan0mbim0 disconnected [ 207.343340][ T5924] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.570399][ T30] audit: type=1400 audit(1756164591.053:459): avc: denied { write } for pid=7800 comm="syz.1.405" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.701354][ T5924] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 207.761780][ T30] audit: type=1400 audit(1756164591.083:460): avc: denied { ioctl } for pid=7800 comm="syz.1.405" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 207.873758][ T5924] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.885349][ T5924] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 208.949280][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.016282][ T5924] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 209.059552][ T5924] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 209.099816][ T5924] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.113581][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.122248][ T5924] usb 3-1: Product: syz [ 209.238939][ T5924] usb 3-1: Manufacturer: syz [ 209.342053][ T5924] cdc_wdm 3-1:1.0: skipping garbage [ 209.374030][ T5924] cdc_wdm 3-1:1.0: skipping garbage [ 209.441024][ T5924] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 209.447029][ T5924] cdc_wdm 3-1:1.0: Unknown control protocol [ 209.589933][ C1] wdm_int_callback: 6 callbacks suppressed [ 209.589946][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.602315][ C1] wdm_int_callback: 6 callbacks suppressed [ 209.602332][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.615976][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.622567][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.630583][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.637171][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.643986][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.650569][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.658183][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.664769][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.671625][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.678210][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.684993][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.691577][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.698392][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.704977][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.711852][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.718435][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.725321][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 209.731900][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 209.739227][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 209.749907][ T5924] usb 3-1: USB disconnect, device number 23 [ 209.758601][ T7809] cdc_wdm 3-1:1.0: Tx URB error: -19 [ 210.607124][ T43] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 210.808443][ T43] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.818655][ T43] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 210.846826][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.859896][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 210.882112][ T5971] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 210.930485][ T5924] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 210.973177][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 211.029528][ T43] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.029546][ T43] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.029557][ T43] usb 5-1: Product: syz [ 211.029566][ T43] usb 5-1: Manufacturer: syz [ 211.043348][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 211.043365][ T43] cdc_wdm 5-1:1.0: skipping garbage [ 211.045098][ T43] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 211.045110][ T43] cdc_wdm 5-1:1.0: Unknown control protocol [ 211.093026][ T5971] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 211.093043][ T5971] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 211.093054][ T5971] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 211.093065][ T5971] usb 1-1: config 220 has no interface number 2 [ 211.093091][ T5971] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 211.093107][ T5971] usb 1-1: config 220 interface 0 has no altsetting 0 [ 211.093117][ T5971] usb 1-1: config 220 interface 76 has no altsetting 0 [ 211.093128][ T5971] usb 1-1: config 220 interface 1 has no altsetting 0 [ 211.099206][ T5971] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 211.099222][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.099233][ T5971] usb 1-1: Product: syz [ 211.099246][ T5971] usb 1-1: Manufacturer: syz [ 211.099254][ T5971] usb 1-1: SerialNumber: syz [ 211.113193][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 211.128182][ T5924] usb 3-1: config 126 has an invalid interface number: 18 but max is 2 [ 211.128219][ T5924] usb 3-1: config 126 has an invalid interface number: 173 but max is 2 [ 211.128231][ T5924] usb 3-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 211.128245][ T5924] usb 3-1: config 126 has an invalid interface number: 62 but max is 2 [ 211.128256][ T5924] usb 3-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 211.128266][ T5924] usb 3-1: config 126 has an invalid descriptor of length 0, skipping remainder of the config [ 211.128277][ T5924] usb 3-1: config 126 has no interface number 0 [ 211.128287][ T5924] usb 3-1: config 126 has no interface number 1 [ 211.128296][ T5924] usb 3-1: config 126 has no interface number 2 [ 211.128323][ T5924] usb 3-1: config 126 interface 18 altsetting 0 endpoint 0xE has invalid maxpacket 1104, setting to 64 [ 211.128350][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 211.128364][ T5924] usb 3-1: config 126 interface 18 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 7 [ 211.128379][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.128391][ T5924] usb 3-1: config 126 interface 18 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 211.128405][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 211.128417][ T5924] usb 3-1: config 126 interface 18 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 211.128430][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.128442][ T5924] usb 3-1: config 126 interface 18 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 211.128455][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 211.128467][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 211.128496][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 211.128525][ T5924] usb 3-1: config 126 interface 18 altsetting 0 endpoint 0x89 has invalid maxpacket 57542, setting to 1024 [ 211.128554][ T5924] usb 3-1: config 126 interface 18 altsetting 0 endpoint 0x6 has invalid maxpacket 2038, setting to 64 [ 211.128568][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 211.128580][ T5924] usb 3-1: config 126 interface 18 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 211.128599][ T5924] usb 3-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 211.128625][ T5924] usb 3-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x8E, skipping [ 211.128638][ T5924] usb 3-1: config 126 interface 173 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 211.128652][ T5924] usb 3-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 211.128662][ T5924] usb 3-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 211.128673][ T5924] usb 3-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 211.128684][ T5924] usb 3-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 211.128697][ T5924] usb 3-1: config 126 interface 173 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 211.128715][ T5924] usb 3-1: config 126 interface 62 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 211.128729][ T5924] usb 3-1: config 126 interface 173 has no altsetting 0 [ 211.128738][ T5924] usb 3-1: config 126 interface 62 has no altsetting 0 [ 211.136546][ T5924] usb 3-1: New USB device found, idVendor=0c45, idProduct=610e, bcdDevice=76.37 [ 211.136561][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.136573][ T5924] usb 3-1: Product: Э [ 211.136580][ T5924] usb 3-1: Manufacturer: 召탥浗猣ࡀ檌䂳鵗ꃆ臦쎉ᛇ럯馕꜎ූ哀ἦꭗ석ⷴ稔ግ驶㗿࣬俌썯퍅傲躂媸ᚯ쓾⛄푽◦뫘꘼뚫⠸竄㡠㣑뿹郸嗩䌦騲㢈⪲椣ჳ㼹휣힌岨謊酫ꨝ戥굨廉膍鹉㙚퉟᫐❑木Ꭷ﵂⢘帞哇䃴쾉⶚鷋풣ꧺ便땡᧕欈ꇎ藿몎忢퍰ᶶ鬕 [ 211.136599][ T5924] usb 3-1: SerialNumber: ꐺ꽎꠩᳠댇絜嵏픞躲꫼也㳘錋鷾팎䢥鋬鸅ຶù⿙㄂⬦曊缩澘阳茽㡗꿷죔篚 [ 211.355748][ T5971] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 211.355767][ T5971] usb 1-1: No valid video chain found. [ 211.355792][ T5971] usb 1-1: selecting invalid altsetting 0 [ 211.361017][ T5971] usb 1-1: selecting invalid altsetting 0 [ 211.361032][ T5971] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 211.365382][ T5971] usb 1-1: USB disconnect, device number 22 [ 211.473504][ T5924] usb 3-1: USB disconnect, device number 24 [ 211.499563][ T43] usb 5-1: USB disconnect, device number 23 [ 211.501717][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 212.696003][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.970703][ T5902] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 213.220982][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 213.231444][ T5902] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 213.247182][ T5902] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 213.868164][ T5902] usb 6-1: string descriptor 0 read error: -22 [ 213.868267][ T5902] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.868290][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.892546][ T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 214.004708][ T7888] netlink: 'syz.0.415': attribute type 11 has an invalid length. [ 214.004798][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.0.415'. [ 214.103049][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.294536][ T7895] lo speed is unknown, defaulting to 1000 [ 214.309865][ T7895] lo speed is unknown, defaulting to 1000 [ 214.320198][ T7895] lo speed is unknown, defaulting to 1000 [ 214.788663][ T5924] lo speed is unknown, defaulting to 1000 [ 214.795285][ T7895] infiniband syz2: set active [ 214.801727][ T7895] infiniband syz2: added lo [ 215.063720][ T7895] RDS/IB: syz2: added [ 215.099754][ T7900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.133168][ T7895] smc: adding ib device syz2 with port count 1 [ 215.154760][ T7895] smc: ib device syz2 port 1 has pnetid [ 215.167254][ T5909] lo speed is unknown, defaulting to 1000 [ 215.197411][ T5902] cdc_ncm 6-1:1.0: bind() failure [ 215.213123][ T7895] lo speed is unknown, defaulting to 1000 [ 215.232422][ T5902] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 215.260431][ T5902] cdc_ncm 6-1:1.1: bind() failure [ 215.277329][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 215.301644][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.5.425'. [ 215.318551][ T7905] overlayfs: failed to resolve './bus': -2 [ 215.538371][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 215.559484][ T5902] usb 6-1: USB disconnect, device number 7 [ 215.577421][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 215.641537][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 215.660353][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 215.900579][ T5971] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 216.036654][ T7895] lo speed is unknown, defaulting to 1000 [ 216.108585][ T5971] usb 3-1: No LPM exit latency info found, disabling LPM. [ 216.171731][ T5909] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 216.338814][ T7918] netlink: 31 bytes leftover after parsing attributes in process `syz.4.428'. [ 216.369087][ T5971] usb 3-1: config 8 has an invalid interface number: 237 but max is 0 [ 216.379091][ T5971] usb 3-1: config 8 has no interface number 0 [ 216.396074][ T5971] usb 3-1: config 8 interface 237 has no altsetting 0 [ 216.459666][ T5909] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.477908][ T5971] usb 3-1: string descriptor 0 read error: -22 [ 216.485318][ T5971] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=6e.05 [ 216.495044][ T5909] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.523090][ T5909] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.552538][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.603031][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 216.623968][ T5971] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 216.988097][ T5909] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 217.079182][ T5909] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.108567][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.176118][ T5909] usb 1-1: Product: syz [ 217.182006][ T5971] gspca_sonixj: reg_w1 err -110 [ 217.188011][ T5971] sonixj 3-1:8.237: probe with driver sonixj failed with error -110 [ 217.207578][ T7895] lo speed is unknown, defaulting to 1000 [ 217.213732][ T5909] usb 1-1: Manufacturer: syz [ 217.234237][ T5909] cdc_wdm 1-1:1.0: skipping garbage [ 217.248435][ T5909] cdc_wdm 1-1:1.0: skipping garbage [ 217.261546][ T5853] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 217.273173][ T5909] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 217.289229][ T5909] cdc_wdm 1-1:1.0: Unknown control protocol [ 217.420533][ T5853] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 217.429219][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.442140][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.525196][ C1] wdm_int_callback: 198 callbacks suppressed [ 217.525209][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.537716][ C1] wdm_int_callback: 198 callbacks suppressed [ 217.537724][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.549820][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.556210][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.562775][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.569263][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.575826][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.582315][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.588887][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.595399][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.601965][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.608491][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.615057][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.621566][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.628129][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.634587][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.641149][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.647675][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.654256][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.660539][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.667125][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.675659][ T5971] usb 1-1: USB disconnect, device number 23 [ 217.682198][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 217.790747][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.802857][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.812021][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.825148][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.836328][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.851473][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.864275][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.905055][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.919665][ T7895] lo speed is unknown, defaulting to 1000 [ 217.925089][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.952768][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.961245][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 217.972582][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 217.984654][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.326803][ T5902] usb 3-1: USB disconnect, device number 25 [ 218.393754][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.402871][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.427414][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.437712][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 218.446616][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.431'. [ 218.469252][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.481038][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.495810][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.514889][ T5853] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 218.524042][ T5853] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 218.584081][ T5853] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.598415][ T5853] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 218.610985][ T5853] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 218.619437][ T5853] usb 5-1: Product: syz [ 218.623761][ T5971] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 218.643860][ T5853] usb 5-1: Manufacturer: syz [ 218.654834][ T5853] usb 5-1: SerialNumber: syz [ 218.676270][ T5853] usb 5-1: config 0 descriptor?? [ 218.695493][ T5853] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 218.800564][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 218.826600][ T5971] usb 1-1: config 126 has an invalid interface number: 18 but max is 2 [ 218.837775][ T5971] usb 1-1: config 126 has an invalid interface number: 173 but max is 2 [ 218.849588][ T5971] usb 1-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 218.874175][ T7895] lo speed is unknown, defaulting to 1000 [ 218.889374][ T5971] usb 1-1: config 126 has an invalid interface number: 62 but max is 2 [ 218.907734][ T5853] usb 5-1: USB disconnect, device number 25 [ 218.910156][ T5971] usb 1-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 218.926933][ T5853] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 218.967089][ T5971] usb 1-1: config 126 has an invalid descriptor of length 0, skipping remainder of the config [ 218.988015][ T5971] usb 1-1: config 126 has no interface number 0 [ 219.080670][ T5971] usb 1-1: config 126 has no interface number 1 [ 219.087296][ T5971] usb 1-1: config 126 has no interface number 2 [ 219.101762][ T5971] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0xE has invalid maxpacket 1104, setting to 64 [ 219.113339][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 219.125705][ T5971] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 7 [ 219.137714][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 219.659733][ T5971] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 219.728864][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 219.779249][ T5971] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 219.795443][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 219.807542][ T5971] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 219.822472][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 219.839833][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 219.857592][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 219.974485][ T5971] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0x89 has invalid maxpacket 57542, setting to 1024 [ 219.998582][ T5971] usb 1-1: config 126 interface 18 altsetting 0 endpoint 0x6 has invalid maxpacket 2038, setting to 64 [ 220.099418][ T7943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.258231][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 220.293180][ T5971] usb 1-1: config 126 interface 18 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 220.308214][ T5971] usb 1-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 220.322026][ T5971] usb 1-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x8E, skipping [ 220.334354][ T5971] usb 1-1: config 126 interface 173 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 220.475128][ T5971] usb 1-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 220.494113][ T7895] lo speed is unknown, defaulting to 1000 [ 220.514916][ T30] audit: type=1400 audit(1756164604.033:461): avc: denied { write } for pid=7942 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 220.541388][ T5971] usb 1-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 220.554815][ T43] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 220.587011][ T5971] usb 1-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 220.599564][ T5971] usb 1-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 220.610854][ T5971] usb 1-1: config 126 interface 173 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 220.646755][ T5971] usb 1-1: config 126 interface 62 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 220.696928][ T5971] usb 1-1: config 126 interface 173 has no altsetting 0 [ 220.710431][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 220.734209][ T5971] usb 1-1: config 126 interface 62 has no altsetting 0 [ 220.742541][ T43] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 220.759818][ T43] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 220.779150][ T5971] usb 1-1: string descriptor 0 read error: -71 [ 220.800628][ T5971] usb 1-1: New USB device found, idVendor=0c45, idProduct=610e, bcdDevice=76.37 [ 220.825229][ T43] usb 3-1: string descriptor 0 read error: -22 [ 220.837706][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.859399][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.881331][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.920754][ T5971] usb 1-1: can't set config #126, error -71 [ 220.994771][ T5971] usb 1-1: USB disconnect, device number 24 [ 221.357415][ T7941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.514220][ T30] audit: type=1400 audit(1756164605.043:462): avc: denied { create } for pid=7953 comm="syz.4.438" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 221.697627][ T30] audit: type=1400 audit(1756164605.223:463): avc: denied { unlink } for pid=5845 comm="syz-executor" name="file0" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 222.690096][ T5853] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 222.856096][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 222.901569][ T43] cdc_ncm 3-1:1.0: bind() failure [ 223.367036][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 223.377761][ T5853] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 223.388001][ T5853] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 223.397012][ T43] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 223.445050][ T5853] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.446906][ T43] cdc_ncm 3-1:1.1: bind() failure [ 223.465182][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 223.494620][ T43] usb 3-1: USB disconnect, device number 26 [ 223.512392][ T9] usb 6-1: config 0 has an invalid interface number: 207 but max is 0 [ 223.531773][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.542790][ T9] usb 6-1: config 0 has no interface number 0 [ 223.549203][ T5853] usb 1-1: Product: ᐇ [ 223.554200][ T9] usb 6-1: config 0 interface 207 has no altsetting 0 [ 223.562877][ T5853] usb 1-1: Manufacturer: ࡡ [ 223.567548][ T5853] usb 1-1: SerialNumber: ꢛ葈ⷺ᛭㲱呧硅⥯锆鷏༅凗潍㔢⨸ᖺ㗠禕䠥虖쏤廲寯빩漳뜯➔ৼӿ쥥䷜ⴤ䦕ƶ폆ᗊ愈￿諰伄ᲪⷔἇⰢ，ကṨᛡᡔ⫴ઢ鉄铕䁠杻凪ꬭ加脧링橗뵸弑䞡᳉ಈ쵆喕牒㋌償猆⃅崯哽ↆꆰ㰻疊ࢡ랂ك㭮폤﹎䴿磌鎄ᶕ膖镳賎ናட妐퀸ꢅ냲憉尺 [ 223.665310][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=ee.45 [ 223.681224][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.689253][ T9] usb 6-1: Product: syz [ 223.693499][ T9] usb 6-1: Manufacturer: syz [ 223.698093][ T9] usb 6-1: SerialNumber: syz [ 223.713895][ T9] usb 6-1: config 0 descriptor?? [ 223.724665][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 224.039249][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.064765][ T7966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.089363][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.171557][ T9] gspca_zc3xx: reg_w_i err -71 [ 224.176446][ T9] gspca_zc3xx 6-1:0.207: probe with driver gspca_zc3xx failed with error -71 [ 224.267860][ T30] audit: type=1400 audit(1756164607.693:464): avc: denied { execute } for pid=7978 comm="syz.2.446" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 224.306358][ T9] usb 6-1: USB disconnect, device number 8 [ 224.330261][ T5958] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 224.629018][ T5958] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 224.642015][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.651242][ T5958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.663688][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.671763][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.680833][ T5958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.691906][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.699987][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.713213][ T5958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.744831][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.765524][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.788148][ T5958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.819391][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.860659][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.873125][ T5958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.884218][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.892493][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.901474][ T5958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 224.920558][ T43] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 224.946897][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.961758][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 224.972804][ T5958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.111858][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.138028][ T5958] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 225.147223][ T5958] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 225.615660][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.628370][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 225.645531][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 225.657780][ T43] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1007, setting to 64 [ 225.682328][ T5958] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 225.709249][ T43] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.727864][ T5958] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 225.737035][ T5958] usb 2-1: Product: syz [ 225.743357][ T5853] cdc_ncm 1-1:1.0: bind() failure [ 225.755529][ T5958] usb 2-1: Manufacturer: syz [ 225.766907][ T5853] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 225.787902][ T5958] usb 2-1: SerialNumber: syz [ 225.862411][ T5853] cdc_ncm 1-1:1.1: bind() failure [ 225.868952][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 225.879328][ T5958] usb 2-1: config 0 descriptor?? [ 225.879693][ T43] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 225.895272][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.907076][ T43] usb 3-1: Product: syz [ 225.911991][ T43] usb 3-1: Manufacturer: syz [ 225.915295][ T5853] usb 1-1: USB disconnect, device number 25 [ 225.916638][ T43] usb 3-1: SerialNumber: syz [ 225.933047][ T7991] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 225.953674][ T5958] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 226.371501][ T5902] usb 2-1: USB disconnect, device number 17 [ 226.399646][ T5902] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 226.640256][ T8006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.120668][ T5853] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 227.131957][ T30] audit: type=1326 audit(1756164610.653:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0f58ebe9 code=0x7ffc0000 [ 227.206315][ T8011] netlink: 'syz.0.449': attribute type 11 has an invalid length. [ 227.224383][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 227.235920][ T30] audit: type=1326 audit(1756164610.683:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8001 comm="syz.4.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed0f58ebe9 code=0x7ffc0000 [ 227.262520][ T30] audit: type=1400 audit(1756164610.693:467): avc: denied { read } for pid=8001 comm="syz.4.451" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 227.288322][ T30] audit: type=1400 audit(1756164610.693:468): avc: denied { open } for pid=8001 comm="syz.4.451" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 227.336349][ T30] audit: type=1400 audit(1756164610.693:469): avc: denied { ioctl } for pid=8001 comm="syz.4.451" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 227.385165][ T5853] usb 6-1: Using ep0 maxpacket: 16 [ 227.398903][ T5853] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 227.442122][ T5853] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 227.460876][ T8014] syz2: rxe_newlink: already configured on lo [ 227.731152][ T5853] usb 6-1: string descriptor 0 read error: -22 [ 227.737519][ T5853] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.752287][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.928203][ T30] audit: type=1400 audit(1756164611.453:470): avc: denied { write } for pid=8016 comm="syz.1.454" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.020644][ T30] audit: type=1400 audit(1756164611.453:471): avc: denied { open } for pid=8016 comm="syz.1.454" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 228.197922][ T8004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.384468][ T43] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input12 [ 228.443355][ T43] usb 3-1: USB disconnect, device number 27 [ 228.449299][ C1] pxrc 3-1:1.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 228.476875][ T5204] pxrc 3-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 228.501641][ T5204] pxrc 3-1:1.0: pxrc_open - usb_submit_urb failed, error: -19 [ 229.454669][ T8037] FAULT_INJECTION: forcing a failure. [ 229.454669][ T8037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.490261][ T8037] CPU: 0 UID: 0 PID: 8037 Comm: syz.4.461 Not tainted syzkaller #0 PREEMPT(full) [ 229.490285][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 229.490295][ T8037] Call Trace: [ 229.490301][ T8037] [ 229.490307][ T8037] dump_stack_lvl+0x16c/0x1f0 [ 229.490335][ T8037] should_fail_ex+0x512/0x640 [ 229.490360][ T8037] _copy_to_user+0x32/0xd0 [ 229.490385][ T8037] snd_ctl_ioctl+0x751/0xf80 [ 229.490405][ T8037] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 229.490429][ T8037] ? selinux_file_ioctl+0x180/0x270 [ 229.490453][ T8037] ? selinux_file_ioctl+0xb4/0x270 [ 229.490479][ T8037] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 229.490500][ T8037] __x64_sys_ioctl+0x18b/0x210 [ 229.490529][ T8037] do_syscall_64+0xcd/0x4c0 [ 229.490551][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.490568][ T8037] RIP: 0033:0x7fed0f58ebe9 [ 229.490583][ T8037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.490600][ T8037] RSP: 002b:00007fed103ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 229.490616][ T8037] RAX: ffffffffffffffda RBX: 00007fed0f7b5fa0 RCX: 00007fed0f58ebe9 [ 229.490628][ T8037] RDX: 0000200000000640 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 229.490638][ T8037] RBP: 00007fed103ae090 R08: 0000000000000000 R09: 0000000000000000 [ 229.490648][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.490658][ T8037] R13: 00007fed0f7b6038 R14: 00007fed0f7b5fa0 R15: 00007ffe432c47e8 [ 229.490682][ T8037] [ 229.687421][ T5853] cdc_ncm 6-1:1.0: bind() failure [ 229.696390][ T5853] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 229.703388][ T5853] cdc_ncm 6-1:1.1: bind() failure [ 229.742862][ T5853] usb 6-1: USB disconnect, device number 9 [ 230.410152][ T8042] : entered promiscuous mode [ 230.680484][ T5902] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 230.701426][ T5924] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 230.850531][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 230.870619][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 230.877470][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.902286][ T5902] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 230.918238][ T5924] usb 1-1: config 4 interface 0 has no altsetting 0 [ 230.981092][ T5902] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 231.001514][ T5924] usb 1-1: string descriptor 0 read error: -22 [ 231.007751][ T5924] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 231.085489][ T5902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.120799][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.129023][ T5902] usb 2-1: Product: ᐇ [ 231.133792][ T5924] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 231.142406][ T5902] usb 2-1: Manufacturer: ࡡ [ 231.146998][ T5902] usb 2-1: SerialNumber: ꢛ葈ⷺ᛭㲱呧硅⥯锆鷏༅凗潍㔢⨸ᖺ㗠禕䠥虖쏤廲寯빩漳뜯➔ৼӿ쥥䷜ⴤ䦕ƶ폆ᗊ愈￿諰伄ᲪⷔἇⰢ，ကṨᛡᡔ⫴ઢ鉄铕䁠杻凪ꬭ加脧링橗뵸弑䞡᳉ಈ쵆喕牒㋌償猆⃅崯哽ↆꆰ㰻疊ࢡ랂ك㭮폤﹎䴿磌鎄ᶕ膖镳賎ናட妐퀸ꢅ냲憉尺 [ 231.196370][ T8061] netlink: 'syz.4.466': attribute type 11 has an invalid length. [ 231.215933][ T5924] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 231.235509][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'. [ 231.278524][ T5924] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.310931][ T5924] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 231.318362][ T5924] usb 1-1: media controller created [ 231.607551][ T30] audit: type=1400 audit(1756164615.093:472): avc: denied { name_connect } for pid=8063 comm="syz.5.469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 231.710424][ T30] audit: type=1400 audit(1756164615.163:473): avc: denied { module_request } for pid=8063 comm="syz.5.469" kmod="crypto-cmac(aes-generic)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 231.827105][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.847992][ T8039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.114130][ T5924] zl10353_read_register: readreg error (reg=127, ret==0) [ 232.279144][ T5924] usb 1-1: USB disconnect, device number 26 [ 232.933173][ T30] audit: type=1400 audit(1756164616.143:474): avc: denied { shutdown } for pid=8081 comm="syz.5.472" lport=42066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.932270][ T5902] cdc_ncm 2-1:1.0: bind() failure [ 233.953659][ T5902] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 233.976987][ T30] audit: type=1400 audit(1756164616.163:475): avc: denied { read } for pid=8081 comm="syz.5.472" lport=42066 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.002666][ T5902] cdc_ncm 2-1:1.1: bind() failure [ 234.020567][ T5902] usb 2-1: USB disconnect, device number 18 [ 236.208972][ T30] audit: type=1400 audit(1756164619.683:476): avc: denied { append } for pid=8099 comm="syz.1.477" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 236.514424][ T8118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 236.523622][ T8118] netlink: 'syz.0.483': attribute type 7 has an invalid length. [ 236.531567][ T8118] netlink: 'syz.0.483': attribute type 8 has an invalid length. [ 236.539165][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 236.551073][ T8118] erspan0: entered promiscuous mode [ 236.556767][ T8118] gretap0: entered promiscuous mode [ 236.562842][ T8118] debugfs: 'hsr1' already exists in 'hsr' [ 236.568537][ T8118] Cannot create hsr debugfs directory [ 236.720835][ T5902] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 236.808627][ T30] audit: type=1400 audit(1756164620.323:477): avc: denied { getopt } for pid=8117 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.839092][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.1.485'. [ 236.881284][ T30] audit: type=1400 audit(1756164620.363:478): avc: denied { getopt } for pid=8123 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 236.943394][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.956343][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 236.988918][ T5902] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 237.002740][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.030679][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 237.042175][ T5902] usb 6-1: config 0 descriptor?? [ 237.252584][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 237.265990][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 237.277345][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 237.296557][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.306131][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.316959][ T9] usb 3-1: Product: ᐇ [ 237.321291][ T9] usb 3-1: Manufacturer: ࡡ [ 237.325876][ T9] usb 3-1: SerialNumber: ꢛ葈ⷺ᛭㲱呧硅⥯锆鷏༅凗潍㔢⨸ᖺ㗠禕䠥虖쏤廲寯빩漳뜯➔ৼӿ쥥䷜ⴤ䦕ƶ폆ᗊ愈￿諰伄ᲪⷔἇⰢ，ကṨᛡᡔ⫴ઢ鉄铕䁠杻凪ꬭ加脧링橗뵸弑䞡᳉ಈ쵆喕牒㋌償猆⃅崯哽ↆꆰ㰻疊ࢡ랂ك㭮폤﹎䴿磌鎄ᶕ膖镳賎ናட妐퀸ꢅ냲憉尺 [ 237.736433][ T5902] usbhid 6-1:0.0: can't add hid device: -71 [ 237.753636][ T5902] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 238.011702][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.069585][ T5902] usb 6-1: USB disconnect, device number 10 [ 240.250240][ T8156] netlink: 'syz.1.495': attribute type 12 has an invalid length. [ 240.286578][ T8160] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2052513735 (8210054940 ns) > initial count (425259208 ns). Using initial count to start timer. [ 240.503089][ T30] audit: type=1400 audit(1756164623.893:479): avc: denied { getopt } for pid=8159 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 240.587506][ T9] cdc_ncm 3-1:1.0: bind() failure [ 240.590602][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 240.590635][ T9] cdc_ncm 3-1:1.1: bind() failure [ 240.632884][ T9] usb 3-1: USB disconnect, device number 28 [ 241.786756][ T8177] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 241.793280][ T8177] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 241.820079][ T8177] vhci_hcd vhci_hcd.0: Device attached [ 241.828957][ T8180] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 241.856621][ T7064] vhci_hcd: stop threads [ 241.899567][ T7064] vhci_hcd: release socket [ 241.940887][ T7064] vhci_hcd: disconnect device [ 242.012250][ T9] vhci_hcd: vhci_device speed not set [ 242.276441][ T5958] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 242.911354][ T30] audit: type=1400 audit(1756164626.433:480): avc: denied { read } for pid=8190 comm="syz.5.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.987420][ T5958] usb 1-1: device descriptor read/64, error -71 [ 243.170435][ T8211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.641193][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 243.700083][ T5958] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 243.751276][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 243.765577][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 243.780375][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 243.790222][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 243.820897][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 243.850665][ T5958] usb 1-1: device descriptor read/64, error -71 [ 243.859663][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 243.874604][ T9] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 243.889092][ T8219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8219 comm=syz.2.512 [ 243.904271][ T8219] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 243.925937][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.935144][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.946436][ T9] usb 5-1: Product: ᐇ [ 243.956493][ T9] usb 5-1: Manufacturer: ࡡ [ 243.963376][ T9] usb 5-1: SerialNumber: ꢛ葈ⷺ᛭㲱呧硅⥯锆鷏༅凗潍㔢⨸ᖺ㗠禕䠥虖쏤廲寯빩漳뜯➔ৼӿ쥥䷜ⴤ䦕ƶ폆ᗊ愈￿諰伄ᲪⷔἇⰢ，ကṨᛡᡔ⫴ઢ鉄铕䁠杻凪ꬭ加脧링橗뵸弑䞡᳉ಈ쵆喕牒㋌償猆⃅崯哽ↆꆰ㰻疊ࢡ랂ك㭮폤﹎䴿磌鎄ᶕ膖镳賎ናட妐퀸ꢅ냲憉尺 [ 243.996404][ T5958] usb usb1-port1: attempt power cycle [ 244.012292][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.512'. [ 244.130595][ T5924] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 244.350587][ T5958] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 244.411945][ T8207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.462872][ T5958] usb 1-1: device descriptor read/8, error -71 [ 244.578806][ T5924] usb 2-1: No LPM exit latency info found, disabling LPM. [ 244.601895][ T5924] usb 2-1: config 8 has an invalid interface number: 237 but max is 0 [ 244.622206][ T5924] usb 2-1: config 8 has no interface number 0 [ 244.646072][ T5924] usb 2-1: config 8 interface 237 has no altsetting 0 [ 244.670764][ T5924] usb 2-1: string descriptor 0 read error: -22 [ 244.677159][ T5924] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=6e.05 [ 244.686789][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.701223][ T5958] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 245.026812][ T5924] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 245.050487][ T5958] usb 1-1: device descriptor read/8, error -71 [ 245.138517][ T30] audit: type=1400 audit(1756164628.663:481): avc: denied { create } for pid=8238 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.235067][ T8240] netlink: 185388 bytes leftover after parsing attributes in process `syz.2.518'. [ 245.270252][ T5958] usb usb1-port1: unable to enumerate USB device [ 245.470103][ T30] audit: type=1400 audit(1756164628.803:482): avc: denied { ioctl } for pid=8238 comm="syz.2.518" path="socket:[19270]" dev="sockfs" ino=19270 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 245.479609][ T43] lo speed is unknown, defaulting to 1000 [ 245.595117][ T5924] gspca_sonixj: reg_w1 err -110 [ 245.607025][ T5924] sonixj 2-1:8.237: probe with driver sonixj failed with error -110 [ 245.817162][ T8244] netlink: 'syz.0.519': attribute type 11 has an invalid length. [ 245.825634][ T8244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'. [ 246.387452][ T9] cdc_ncm 5-1:1.0: bind() failure [ 246.397250][ T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 246.405729][ T9] cdc_ncm 5-1:1.1: bind() failure [ 246.419169][ T9] usb 5-1: USB disconnect, device number 26 [ 247.019168][ T5958] usb 2-1: USB disconnect, device number 19 [ 247.448993][ T30] audit: type=1400 audit(1756164630.973:483): avc: denied { write } for pid=8260 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.518393][ T8255] SELinux: ebitmap: truncated map [ 247.524006][ T8255] SELinux: failed to load policy [ 247.532464][ T30] audit: type=1400 audit(1756164631.044:484): avc: denied { load_policy } for pid=8254 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 247.576547][ T30] audit: type=1400 audit(1756164631.064:485): avc: denied { setopt } for pid=8254 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.590576][ T8265] tipc: Enabling of bearer rejected, failed to enable media [ 247.830547][ T5924] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 248.360165][ T8279] FAULT_INJECTION: forcing a failure. [ 248.360165][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 248.550720][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.2.530 Not tainted syzkaller #0 PREEMPT(full) [ 248.550746][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.550756][ T8279] Call Trace: [ 248.550762][ T8279] [ 248.550775][ T8279] dump_stack_lvl+0x16c/0x1f0 [ 248.550800][ T8279] should_fail_ex+0x512/0x640 [ 248.550824][ T8279] should_failslab+0xc2/0x120 [ 248.550846][ T8279] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 248.550865][ T8279] ? skb_clone+0x190/0x3f0 [ 248.550889][ T8279] skb_clone+0x190/0x3f0 [ 248.550909][ T8279] netlink_deliver_tap+0xabd/0xd30 [ 248.550935][ T8279] netlink_unicast+0x64c/0x870 [ 248.550960][ T8279] ? __pfx_netlink_unicast+0x10/0x10 [ 248.550981][ T8279] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 248.551010][ T8279] netlink_sendmsg+0x8d1/0xdd0 [ 248.551035][ T8279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.551066][ T8279] ____sys_sendmsg+0xa95/0xc70 [ 248.551091][ T8279] ? copy_msghdr_from_user+0x10a/0x160 [ 248.551110][ T8279] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.551146][ T8279] ___sys_sendmsg+0x134/0x1d0 [ 248.551167][ T8279] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.551220][ T8279] __sys_sendmsg+0x16d/0x220 [ 248.551239][ T8279] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.551277][ T8279] do_syscall_64+0xcd/0x4c0 [ 248.551299][ T8279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.551318][ T8279] RIP: 0033:0x7fb30e58ebe9 [ 248.551333][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.551350][ T8279] RSP: 002b:00007fb30c7d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.551371][ T8279] RAX: ffffffffffffffda RBX: 00007fb30e7b6090 RCX: 00007fb30e58ebe9 [ 248.551382][ T8279] RDX: 0000000020040054 RSI: 0000200000000280 RDI: 0000000000000003 [ 248.551393][ T8279] RBP: 00007fb30c7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 248.551403][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.551413][ T8279] R13: 00007fb30e7b6128 R14: 00007fb30e7b6090 R15: 00007ffe79f680e8 [ 248.551441][ T8279] [ 248.581999][ T5924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.688245][ T5958] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 248.731952][ T5924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.816526][ T5958] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.860692][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 248.953719][ T5924] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.074994][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.083633][ T5924] usb 6-1: SerialNumber: syz [ 249.150663][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 249.167770][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 249.211324][ T43] usb 1-1: config 4 interface 0 has no altsetting 0 [ 249.533316][ T5924] usb 6-1: 0:2 : does not exist [ 249.540809][ T43] usb 1-1: string descriptor 0 read error: -22 [ 249.547629][ T43] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 249.557295][ T5924] usb 6-1: unit 255 not found! [ 249.575084][ T43] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 249.596953][ T5924] usb 6-1: USB disconnect, device number 11 [ 249.648234][ T43] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 249.706207][ T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.721930][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 249.729510][ T43] usb 1-1: media controller created [ 249.866268][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.248027][ T8296] bond0: entered promiscuous mode [ 250.254243][ T8296] bond_slave_0: entered promiscuous mode [ 250.261138][ T8296] bond_slave_1: entered promiscuous mode [ 250.268645][ T8296] batadv0: entered promiscuous mode [ 250.295806][ T8296] debugfs: 'hsr1' already exists in 'hsr' [ 250.316701][ T8296] Cannot create hsr debugfs directory [ 250.323587][ T8296] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 250.514807][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 250.539469][ T8301] net_ratelimit: 5 callbacks suppressed [ 250.539853][ T8301] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 250.600626][ T5971] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 250.611077][ T43] usb 1-1: USB disconnect, device number 31 [ 250.808306][ T5971] usb 6-1: config 0 has no interfaces? [ 250.818822][ T5971] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 250.845656][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.893681][ T5971] usb 6-1: Product: syz [ 250.948183][ T8306] netlink: 188 bytes leftover after parsing attributes in process `syz.2.537'. [ 250.996149][ T5971] usb 6-1: Manufacturer: syz [ 251.304033][ T5971] usb 6-1: SerialNumber: syz [ 251.322434][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.538'. [ 251.331724][ T5971] usb 6-1: config 0 descriptor?? [ 251.542868][ T30] audit: type=1400 audit(1756164635.034:486): avc: denied { getopt } for pid=8307 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 251.713584][ T30] audit: type=1400 audit(1756164635.034:487): avc: denied { ioctl } for pid=8310 comm="syz.0.539" path="socket:[18248]" dev="sockfs" ino=18248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 251.832033][ T30] audit: type=1400 audit(1756164635.354:488): avc: denied { write } for pid=8297 comm="syz.5.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.499313][ T5971] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 252.520729][ T5971] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.928023][ T9] usb 6-1: USB disconnect, device number 12 [ 253.250206][ T5971] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 253.408453][ T8344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.460639][ T5971] usb 3-1: Using ep0 maxpacket: 16 [ 253.490605][ T5971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.788176][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.865732][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 254.115944][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.163512][ T5971] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.291878][ T5971] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 254.310824][ T5971] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 254.323265][ T5971] usb 3-1: Manufacturer: syz [ 254.841886][ T5971] usb 3-1: config 0 descriptor?? [ 255.154803][ T8361] netlink: 188 bytes leftover after parsing attributes in process `syz.1.551'. [ 255.160626][ T5971] rc_core: IR keymap rc-hauppauge not found [ 255.189928][ T5971] Registered IR keymap rc-empty [ 255.201658][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.214315][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.221280][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.250400][ T5902] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 255.258246][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.289565][ T8365] lo speed is unknown, defaulting to 1000 [ 255.294469][ T8367] mmap: syz.4.554 (8367) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 255.308779][ T5971] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 255.325104][ T5971] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 255.346675][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.374530][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.400769][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.412441][ T5902] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 255.421631][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.428826][ T5902] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 255.442799][ T5902] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 255.455194][ T5902] usb 1-1: config 220 has no interface number 2 [ 255.462211][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.474890][ T5902] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 255.489006][ T5902] usb 1-1: config 220 interface 0 has no altsetting 0 [ 255.496242][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.505076][ T5902] usb 1-1: config 220 interface 76 has no altsetting 0 [ 255.512409][ T5902] usb 1-1: config 220 interface 1 has no altsetting 0 [ 255.522109][ T5902] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 255.531294][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.538435][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.546930][ T5902] usb 1-1: Product: syz [ 255.551721][ T5902] usb 1-1: Manufacturer: syz [ 255.556334][ T5902] usb 1-1: SerialNumber: syz [ 255.561360][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.580135][ T9] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 255.580590][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.611416][ T5971] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 255.631774][ T5971] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 255.641805][ T5971] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 255.662832][ T5971] usb 3-1: USB disconnect, device number 29 [ 255.744287][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.760024][ T9] usb 2-1: config 0 has no interfaces? [ 255.767130][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 255.776494][ T9] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 255.785116][ T9] usb 2-1: Product: syz [ 255.789277][ T9] usb 2-1: Manufacturer: syz [ 255.794232][ T9] usb 2-1: SerialNumber: syz [ 255.801216][ T9] usb 2-1: config 0 descriptor?? [ 256.088795][ T5971] usb 2-1: USB disconnect, device number 20 [ 256.610883][ T30] audit: type=1326 audit(1756164640.134:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.649693][ T30] audit: type=1326 audit(1756164640.134:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.673742][ T30] audit: type=1326 audit(1756164640.134:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.697738][ T30] audit: type=1326 audit(1756164640.134:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.724487][ T30] audit: type=1326 audit(1756164640.134:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.762829][ T30] audit: type=1326 audit(1756164640.134:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.861708][ T30] audit: type=1326 audit(1756164640.164:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.888356][ T30] audit: type=1326 audit(1756164640.164:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.911569][ T30] audit: type=1326 audit(1756164640.164:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 256.935854][ T30] audit: type=1326 audit(1756164640.164:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30e58ebe9 code=0x50000 [ 257.063949][ T8385] lo speed is unknown, defaulting to 1000 [ 259.013944][ T5902] usb 1-1: selecting invalid altsetting 0 [ 259.026423][ T5902] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 259.033452][ T5902] usb 1-1: No valid video chain found. [ 259.045421][ T5902] usb 1-1: selecting invalid altsetting 0 [ 259.051776][ T5902] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 259.081737][ T43] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 259.133613][ T43] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.185663][ T5902] usb 1-1: USB disconnect, device number 32 [ 259.712422][ T5958] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 260.161274][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 260.169539][ T5958] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.181472][ T5958] usb 2-1: config 4 interface 0 has no altsetting 0 [ 260.195929][ T5958] usb 2-1: string descriptor 0 read error: -22 [ 260.202672][ T5958] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 260.240136][ T5958] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 260.276034][ T5958] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 260.304546][ T5958] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.377163][ T5958] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 260.414900][ T5958] usb 2-1: media controller created [ 260.426886][ T8409] netlink: 188 bytes leftover after parsing attributes in process `syz.4.564'. [ 260.720604][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.850476][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 260.984071][ T5958] zl10353_read_register: readreg error (reg=127, ret==0) [ 261.010556][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 261.020342][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 261.037108][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 261.047511][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 261.127246][ T8423] tmpfs: Cannot enable quota on remount [ 261.372930][ T5958] usb 2-1: USB disconnect, device number 21 [ 261.880052][ T5909] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 262.339217][ T5958] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 262.382972][ T5909] usb 1-1: No LPM exit latency info found, disabling LPM. [ 262.411479][ T5909] usb 1-1: config 8 has an invalid interface number: 237 but max is 0 [ 262.419643][ T5909] usb 1-1: config 8 has no interface number 0 [ 262.481015][ T8444] netlink: 'syz.4.572': attribute type 11 has an invalid length. [ 262.488903][ T8444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 262.831622][ T5909] usb 1-1: config 8 interface 237 has no altsetting 0 [ 262.848115][ T5909] usb 1-1: string descriptor 0 read error: -22 [ 262.952632][ T5909] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=6e.05 [ 262.961769][ T5958] usb 2-1: device descriptor read/64, error -71 [ 262.968269][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.988745][ T5909] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 263.619186][ T8447] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 263.623426][ T5909] gspca_sonixj: reg_w1 err -110 [ 263.626108][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 263.626120][ T30] audit: type=1400 audit(1756164646.844:563): avc: denied { read } for pid=8439 comm="syz.2.571" path="socket:[20773]" dev="sockfs" ino=20773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.633988][ T5909] sonixj 1-1:8.237: probe with driver sonixj failed with error -110 [ 263.741441][ T5902] usb 1-1: USB disconnect, device number 33 [ 263.743313][ T8450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 263.767005][ T8450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.574'. [ 263.790748][ T5958] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 263.869148][ T30] audit: type=1400 audit(1756164647.394:564): avc: denied { read write } for pid=8451 comm="syz.4.573" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 263.940586][ T30] audit: type=1400 audit(1756164647.434:565): avc: denied { open } for pid=8451 comm="syz.4.573" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 263.975958][ T5958] usb 2-1: device descriptor read/64, error -71 [ 264.070866][ T5909] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 264.102671][ T5958] usb usb2-port1: attempt power cycle [ 264.117028][ T5909] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.592967][ T5958] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 264.648329][ T8471] netlink: 188 bytes leftover after parsing attributes in process `syz.1.578'. [ 264.892312][ T5958] usb 2-1: device not accepting address 24, error -71 [ 265.330491][ T5971] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 265.330555][ T5853] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 265.587781][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 265.670655][ T5860] Bluetooth: hci0: command tx timeout [ 265.676376][ T5971] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 265.710735][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 265.793234][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.863605][ T5853] usb 1-1: unable to get BOS descriptor or descriptor too short [ 265.867299][ T5971] usb 6-1: config 0 descriptor?? [ 266.004795][ T5853] usb 1-1: config 4 interface 0 has no altsetting 0 [ 266.140779][ T5853] usb 1-1: string descriptor 0 read error: -22 [ 266.150164][ T5853] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 266.176894][ T8489] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 266.177184][ T5853] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 266.259014][ T5853] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 266.268485][ T5853] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 266.352520][ T8507] lo speed is unknown, defaulting to 1000 [ 266.362496][ T5853] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 266.397139][ T5853] usb 1-1: media controller created [ 266.443109][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 266.805347][ T5971] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 267.986807][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 267.994815][ T5853] zl10353_read_register: readreg error (reg=127, ret==0) [ 268.033479][ T5902] usb 6-1: reset full-speed USB device number 13 using dummy_hcd [ 268.143275][ T5853] usb 1-1: USB disconnect, device number 34 [ 268.839796][ T5971] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 269.002231][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 269.033002][ T5971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 269.077410][ T5971] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 269.094976][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.124312][ T5971] usb 5-1: Product: syz [ 269.128603][ T5971] usb 5-1: Manufacturer: syz [ 269.152533][ T5971] usb 5-1: SerialNumber: syz [ 269.190680][ T5971] usb 5-1: config 0 descriptor?? [ 269.264266][ T5924] usb 6-1: USB disconnect, device number 13 [ 270.150273][ T30] audit: type=1400 audit(1756164653.214:566): avc: denied { connect } for pid=8529 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 270.667992][ T30] audit: type=1400 audit(1756164654.194:567): avc: denied { mount } for pid=8515 comm="syz.4.585" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 273.109575][ T8567] dummy0: entered promiscuous mode [ 273.119895][ T8567] bridge0: entered promiscuous mode [ 273.128601][ T8567] hsr2: entered allmulticast mode [ 273.140180][ T5916] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 273.147853][ T8567] dummy0: entered allmulticast mode [ 273.161154][ T8567] bridge0: entered allmulticast mode [ 273.268361][ T8568] netlink: 188 bytes leftover after parsing attributes in process `syz.1.599'. [ 273.716812][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 273.739873][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short [ 273.760785][ T30] audit: type=1400 audit(1756164657.284:568): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 273.816166][ T5916] usb 6-1: config 4 interface 0 has no altsetting 0 [ 273.887546][ T5971] usb 5-1: USB disconnect, device number 27 [ 273.948581][ T5916] usb 6-1: string descriptor 0 read error: -22 [ 273.958972][ T5916] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 273.968111][ T5916] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 274.246455][ T5916] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 274.292948][ T5916] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 274.292992][ T30] audit: type=1400 audit(1756164657.824:569): avc: denied { write } for pid=8577 comm="syz.1.603" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 274.317673][ T5916] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 274.326343][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.348938][ T5916] usb 6-1: media controller created [ 274.379621][ T8572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.406199][ T30] audit: type=1400 audit(1756164657.934:570): avc: denied { write } for pid=8576 comm="syz.0.604" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 274.407089][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.429126][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.623811][ T30] audit: type=1400 audit(1756164658.154:571): avc: denied { getopt } for pid=8576 comm="syz.0.604" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.630745][ T5924] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 274.652817][ T5971] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 274.810786][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 274.818654][ T5924] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 274.830624][ T5971] usb 5-1: Using ep0 maxpacket: 16 [ 274.843020][ T5916] zl10353_read_register: readreg error (reg=127, ret==0) [ 274.845056][ T5971] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.869581][ T5924] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 536 [ 274.880262][ T5971] usb 5-1: config 0 interface 0 has no altsetting 0 [ 274.893941][ T5971] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 274.906039][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.909260][ T5916] usb 6-1: USB disconnect, device number 14 [ 274.916651][ T5924] usb 3-1: string descriptor 0 read error: -22 [ 274.928953][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.963214][ T5971] usb 5-1: config 0 descriptor?? [ 274.984690][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.139793][ T30] audit: type=1400 audit(1756164658.664:572): avc: denied { map } for pid=8594 comm="syz.0.607" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 275.219612][ T8572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.438922][ T5971] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 276.702261][ T5916] usb 5-1: USB disconnect, device number 28 [ 276.816440][ T8618] netlink: 188 bytes leftover after parsing attributes in process `syz.1.612'. [ 277.176752][ T5924] cdc_ncm 3-1:1.0: bind() failure [ 277.204306][ T5924] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 277.219945][ T5924] cdc_ncm 3-1:1.1: bind() failure [ 277.357886][ T5924] usb 3-1: USB disconnect, device number 30 [ 277.528610][ T8626] netlink: 188 bytes leftover after parsing attributes in process `syz.2.613'. [ 279.635557][ T5916] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 279.760430][ T5902] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 279.810178][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 279.855975][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.866550][ T5916] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 279.909242][ T5916] usb 2-1: config 4 has no interface number 0 [ 279.911190][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 279.915788][ T5916] usb 2-1: config 4 interface 30 has no altsetting 0 [ 279.940273][ T5916] usb 2-1: string descriptor 0 read error: -22 [ 279.952753][ T5916] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 279.961648][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.267014][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.291608][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.292830][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.347600][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 280.401479][ T5924] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 280.439284][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.601039][ T5916] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 280.619211][ T5902] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 280.623688][ T5916] dw2102: su3000_power_ctrl: 1, initialized 0 [ 280.629198][ T5902] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 280.895469][ T5916] dvb-usb: bulk message failed: -22 (2/0) [ 280.903762][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 280.914014][ T5916] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 280.918030][ T5902] usb 3-1: Manufacturer: syz [ 280.921757][ T5916] usb 2-1: media controller created [ 280.921833][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 280.921862][ T5916] dw2102: i2c transfer failed. [ 280.921905][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 280.921917][ T5916] dw2102: i2c transfer failed. [ 280.921928][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 280.921939][ T5916] dw2102: i2c transfer failed. [ 280.921949][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 280.921961][ T5916] dw2102: i2c transfer failed. [ 280.921972][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 280.921983][ T5916] dw2102: i2c transfer failed. [ 280.921993][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 280.922005][ T5916] dw2102: i2c transfer failed. [ 280.922012][ T5916] dvb-usb: MAC address: 02:02:02:02:02:02 [ 280.934867][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.980266][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 281.015918][ T5902] usb 3-1: config 0 descriptor?? [ 281.075256][ T5924] usb 6-1: config 3 has an invalid interface number: 156 but max is 0 [ 281.083793][ T5924] usb 6-1: config 3 has no interface number 0 [ 281.089897][ T5924] usb 6-1: config 3 interface 156 has no altsetting 0 [ 281.099264][ T5924] usb 6-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8 [ 281.108665][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.117974][ T5924] usb 6-1: Product: syz [ 281.123623][ T5924] usb 6-1: Manufacturer: syz [ 281.130896][ T5924] usb 6-1: SerialNumber: syz [ 281.170890][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 281.178588][ T5916] dw2102: command 0x0e transfer failed. [ 281.207214][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 281.257206][ T5916] dw2102: command 0x0e transfer failed. [ 281.470648][ T5902] rc_core: IR keymap rc-hauppauge not found [ 281.476656][ T5902] Registered IR keymap rc-empty [ 281.482390][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.500106][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.532288][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 281.545401][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 281.572734][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 281.579707][ T5916] dw2102: command 0x0e transfer failed. [ 281.591181][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 281.598402][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.651454][ T5916] dw2102: command 0x0e transfer failed. [ 281.670501][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.679498][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 281.700532][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.731648][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.743543][ T5916] dw2102: command 0x51 transfer failed. [ 281.755321][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 281.785946][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.785993][ T5916] dw2102: i2c probe for address 0x68 failed. [ 281.810227][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 281.816386][ T5916] dw2102: i2c probe for address 0x69 failed. [ 281.820548][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.836476][ T5916] dvb-usb: bulk message failed: -22 (5/0) [ 281.843005][ T5916] dw2102: i2c probe for address 0x6a failed. [ 281.853599][ T5916] dw2102: probing for demodulator failed. Is the external power switched on? [ 281.879236][ T5916] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 281.930612][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 281.940822][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.972517][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.980592][ T5916] rc_core: IR keymap rc-tt-1500 not found [ 281.986333][ T5916] Registered IR keymap rc-empty [ 281.990353][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 281.992588][ T5916] rc rc1: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1 [ 282.010549][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 282.031904][ T5902] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 282.044890][ T5902] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 282.070953][ T5916] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc1/input15 [ 282.133373][ T5902] usb 3-1: USB disconnect, device number 31 [ 282.167666][ T5916] dvb-usb: schedule remote query interval to 250 msecs. [ 282.192887][ T5916] dw2102: su3000_power_ctrl: 0, initialized 1 [ 282.223424][ T5916] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 282.451406][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 282.470776][ T5916] dw2102: i2c transfer failed. [ 282.637995][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 283.305505][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 283.323332][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 283.332556][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 283.353911][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 283.385342][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 283.396662][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 283.409348][ T9] usb 1-1: Product: syz [ 283.438613][ T9] usb 1-1: Manufacturer: syz [ 283.453817][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 283.459011][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 283.465821][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 283.480063][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 283.630725][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 283.640760][ T5924] gl620a 6-1:3.156: probe with driver gl620a failed with error -22 [ 283.970066][ T9] dw2102: i2c transfer failed. [ 284.100708][ T5924] usb 6-1: USB disconnect, device number 15 [ 284.602424][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 284.608171][ T9] dw2102: i2c transfer failed. [ 284.657196][ T5971] usb 1-1: USB disconnect, device number 35 [ 284.687590][ T5924] usb 2-1: USB disconnect, device number 26 [ 284.716043][ T5924] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 285.260708][ T5971] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 285.799245][ T5971] usb 1-1: Using ep0 maxpacket: 16 [ 286.270322][ T30] audit: type=1400 audit(1756164669.794:573): avc: denied { setopt } for pid=8693 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 286.317286][ T5971] usb 1-1: device descriptor read/all, error -71 [ 287.581135][ T30] audit: type=1400 audit(1756164671.114:574): avc: denied { setopt } for pid=8718 comm="syz.4.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.609580][ T8714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.624858][ T30] audit: type=1400 audit(1756164671.134:575): avc: denied { ioctl } for pid=8718 comm="syz.4.639" path="socket:[21194]" dev="sockfs" ino=21194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.778256][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 288.410820][ T43] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 288.576436][ T5850] Bluetooth: hci6: command 0x1003 tx timeout [ 288.590203][ T5860] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 288.837840][ T8740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.646'. [ 288.847135][ T8740] netlink: 'syz.0.646': attribute type 7 has an invalid length. [ 288.855101][ T8740] netlink: 'syz.0.646': attribute type 8 has an invalid length. [ 288.863083][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.646'. [ 288.894088][ T43] usb 3-1: No LPM exit latency info found, disabling LPM. [ 288.907478][ T43] usb 3-1: config 8 has an invalid interface number: 237 but max is 0 [ 288.930365][ T43] usb 3-1: config 8 has no interface number 0 [ 288.958460][ T43] usb 3-1: config 8 interface 237 has no altsetting 0 [ 288.999584][ T43] usb 3-1: string descriptor 0 read error: -22 [ 289.018307][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=6e.05 [ 289.027974][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.049754][ T43] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 289.089848][ T8749] FAULT_INJECTION: forcing a failure. [ 289.089848][ T8749] name failslab, interval 1, probability 0, space 0, times 0 [ 289.119329][ T8749] CPU: 0 UID: 0 PID: 8749 Comm: syz.0.649 Not tainted syzkaller #0 PREEMPT(full) [ 289.119353][ T8749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.119363][ T8749] Call Trace: [ 289.119369][ T8749] [ 289.119376][ T8749] dump_stack_lvl+0x16c/0x1f0 [ 289.119402][ T8749] should_fail_ex+0x512/0x640 [ 289.119427][ T8749] should_failslab+0xc2/0x120 [ 289.119448][ T8749] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 289.119468][ T8749] ? skb_clone+0x190/0x3f0 [ 289.119491][ T8749] skb_clone+0x190/0x3f0 [ 289.119511][ T8749] netlink_deliver_tap+0xabd/0xd30 [ 289.119538][ T8749] netlink_unicast+0x64c/0x870 [ 289.119563][ T8749] ? __pfx_netlink_unicast+0x10/0x10 [ 289.119585][ T8749] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 289.119614][ T8749] netlink_sendmsg+0x8d1/0xdd0 [ 289.119639][ T8749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.119670][ T8749] ____sys_sendmsg+0xa95/0xc70 [ 289.119694][ T8749] ? copy_msghdr_from_user+0x10a/0x160 [ 289.119713][ T8749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.119750][ T8749] ___sys_sendmsg+0x134/0x1d0 [ 289.119771][ T8749] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.119824][ T8749] __sys_sendmsg+0x16d/0x220 [ 289.119845][ T8749] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.119882][ T8749] do_syscall_64+0xcd/0x4c0 [ 289.119905][ T8749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.119923][ T8749] RIP: 0033:0x7f6ec3d8ebe9 [ 289.119938][ T8749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.119958][ T8749] RSP: 002b:00007f6ec4c61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.119975][ T8749] RAX: ffffffffffffffda RBX: 00007f6ec3fb5fa0 RCX: 00007f6ec3d8ebe9 [ 289.119986][ T8749] RDX: 0000000004000804 RSI: 0000200000000140 RDI: 0000000000000003 [ 289.119996][ T8749] RBP: 00007f6ec4c61090 R08: 0000000000000000 R09: 0000000000000000 [ 289.120006][ T8749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.120015][ T8749] R13: 00007f6ec3fb6038 R14: 00007f6ec3fb5fa0 R15: 00007ffcb631bae8 [ 289.120039][ T8749] [ 289.300490][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 289.452979][ T8750] binder: 8745:8750 ioctl c0306201 200000000680 returned -14 [ 290.152716][ T24] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.169702][ T24] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 290.187084][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.188769][ T5958] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 290.246377][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 290.370391][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 290.374857][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 290.381711][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.406861][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.429144][ T5958] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 290.439300][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.440562][ T24] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.510443][ T43] gspca_sonixj: reg_w1 err -110 [ 290.516078][ T43] sonixj 3-1:8.237: probe with driver sonixj failed with error -110 [ 290.524542][ T5958] usb 5-1: config 0 descriptor?? [ 290.529597][ T24] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.543749][ T24] usb 6-1: Product: syz [ 290.547968][ T24] usb 6-1: Manufacturer: syz [ 290.676631][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 290.683375][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 290.689914][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 290.702575][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 290.774202][ T8757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.371806][ T24] usb 3-1: USB disconnect, device number 32 [ 291.486267][ T5958] hid-multitouch 0003:1FD2:6007.0012: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 291.555397][ C1] wdm_int_callback: 13 callbacks suppressed [ 291.555410][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 291.567862][ C1] wdm_int_callback: 13 callbacks suppressed [ 291.567878][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 291.590758][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 291.597347][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 291.610176][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 291.616771][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 291.624121][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 291.630713][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 291.637624][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 291.644207][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 291.650469][ T5971] usb 6-1: USB disconnect, device number 16 [ 291.656957][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 291.663533][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 291.669594][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 292.230556][ T5958] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 292.440054][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 292.454559][ T30] audit: type=1400 audit(1756164675.984:576): avc: denied { map } for pid=8771 comm="syz.1.655" path="/proc/508/fdinfo" dev="proc" ino=21375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 292.487286][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 292.499673][ T5958] usb 3-1: config 4 interface 0 has no altsetting 0 [ 292.515643][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 292.522334][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 292.530667][ T5958] usb 3-1: string descriptor 0 read error: -22 [ 292.538177][ T5958] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 292.547505][ T5958] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 292.555797][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 292.582332][ T8772] ceph: No mds server is up or the cluster is laggy [ 292.743042][ T5958] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 292.780035][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 292.794425][ T9] usb 6-1: config 126 has an invalid interface number: 18 but max is 2 [ 292.820050][ T9] usb 6-1: config 126 has an invalid interface number: 173 but max is 2 [ 292.847603][ T5958] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 292.860548][ T9] usb 6-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 292.958948][ T5958] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 292.966418][ T9] usb 6-1: config 126 has an invalid interface number: 62 but max is 2 [ 292.975014][ T5958] usb 3-1: media controller created [ 292.980265][ T9] usb 6-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 292.989118][ T9] usb 6-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 293.005850][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 293.014334][ T9] usb 6-1: config 126 contains an unexpected descriptor of type 0x2, skipping [ 293.593047][ T9] usb 6-1: config 126 has an invalid descriptor of length 0, skipping remainder of the config [ 293.603511][ T9] usb 6-1: config 126 has no interface number 0 [ 293.609756][ T9] usb 6-1: config 126 has no interface number 1 [ 293.716515][ T9] usb 6-1: config 126 has no interface number 2 [ 293.826117][ T5924] usb 5-1: USB disconnect, device number 29 [ 294.110691][ T9] usb 6-1: config 126 interface 18 altsetting 0 endpoint 0xE has invalid maxpacket 1104, setting to 64 [ 294.122057][ T9] usb 6-1: config 126 interface 18 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 294.134070][ T9] usb 6-1: config 126 interface 18 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 7 [ 294.145481][ T9] usb 6-1: config 126 interface 18 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.156631][ T9] usb 6-1: config 126 interface 18 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 294.167781][ T9] usb 6-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 294.178710][ T9] usb 6-1: config 126 interface 18 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 294.190071][ T9] usb 6-1: config 126 interface 18 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.202435][ T9] usb 6-1: config 126 interface 18 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 294.214539][ T9] usb 6-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 294.226007][ T9] usb 6-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 294.240164][ T9] usb 6-1: config 126 interface 18 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 294.252118][ T9] usb 6-1: config 126 interface 18 altsetting 0 endpoint 0x89 has invalid maxpacket 57542, setting to 1024 [ 294.270195][ T9] usb 6-1: config 126 interface 18 altsetting 0 endpoint 0x6 has invalid maxpacket 2038, setting to 64 [ 294.298629][ T9] usb 6-1: config 126 interface 18 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 294.340165][ T5958] zl10353_read_register: readreg error (reg=127, ret==0) [ 294.350186][ T9] usb 6-1: config 126 interface 18 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 294.365245][ T9] usb 6-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 294.388109][ T5958] usb 3-1: USB disconnect, device number 33 [ 294.406651][ T9] usb 6-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x8E, skipping [ 294.418204][ T9] usb 6-1: config 126 interface 173 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 294.432025][ T9] usb 6-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 294.449235][ T9] usb 6-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 294.483429][ T9] usb 6-1: config 126 interface 173 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 294.514490][ T9] usb 6-1: config 126 interface 173 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 294.645711][ T9] usb 6-1: config 126 interface 173 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 294.658575][ T9] usb 6-1: config 126 interface 62 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 294.672957][ T9] usb 6-1: config 126 interface 173 has no altsetting 0 [ 294.680242][ T9] usb 6-1: config 126 interface 62 has no altsetting 0 [ 294.688136][ T9] usb 6-1: string descriptor 0 read error: -71 [ 295.116524][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=610e, bcdDevice=76.37 [ 295.125933][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.145242][ T9] usb 6-1: can't set config #126, error -71 [ 295.159266][ T8802] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 295.171328][ T8802] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 295.179723][ T8802] CPU: 1 UID: 0 PID: 8802 Comm: syz.4.661 Not tainted syzkaller #0 PREEMPT(full) [ 295.188896][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.198934][ T8802] RIP: 0010:h5_recv+0x104/0x950 [ 295.203772][ T8802] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 91 b4 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 295.223360][ T8802] RSP: 0018:ffffc9000402fc00 EFLAGS: 00010293 [ 295.229405][ T8802] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ad72a [ 295.237355][ T8802] RDX: ffff88806263a440 RSI: ffffffff887ad76f RDI: 0000000000000005 [ 295.245304][ T8802] RBP: ffffc9000402fd88 R08: 0000000000000005 R09: 0000000000000000 [ 295.253252][ T8802] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 295.261202][ T8802] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb478e0 [ 295.269153][ T8802] FS: 00007fed1036c6c0(0000) GS:ffff8881247b9000(0000) knlGS:0000000000000000 [ 295.278061][ T8802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.284622][ T8802] CR2: 00007fed1036bf98 CR3: 0000000029a4b000 CR4: 00000000003526f0 [ 295.292573][ T8802] Call Trace: [ 295.295830][ T8802] [ 295.298739][ T8802] ? __pfx_h5_recv+0x10/0x10 [ 295.303319][ T8802] hci_uart_tty_receive+0x251/0x7e0 [ 295.308497][ T8802] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 295.314215][ T8802] tty_ioctl+0x583/0x1680 [ 295.318526][ T8802] ? __pfx_tty_ioctl+0x10/0x10 [ 295.323267][ T8802] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 295.330105][ T8802] ? hook_file_ioctl_common+0x145/0x410 [ 295.335631][ T8802] ? selinux_file_ioctl+0x180/0x270 [ 295.340814][ T8802] ? selinux_file_ioctl+0xb4/0x270 [ 295.345910][ T8802] ? __pfx_tty_ioctl+0x10/0x10 [ 295.350654][ T8802] __x64_sys_ioctl+0x18b/0x210 [ 295.355404][ T8802] do_syscall_64+0xcd/0x4c0 [ 295.359888][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.365765][ T8802] RIP: 0033:0x7fed0f58ebe9 [ 295.370155][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.389742][ T8802] RSP: 002b:00007fed1036c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.398130][ T8802] RAX: ffffffffffffffda RBX: 00007fed0f7b6180 RCX: 00007fed0f58ebe9 [ 295.406078][ T8802] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000006 [ 295.414025][ T8802] RBP: 00007fed0f611e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.421972][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.429920][ T8802] R13: 00007fed0f7b6218 R14: 00007fed0f7b6180 R15: 00007ffe432c47e8 [ 295.437875][ T8802] [ 295.440873][ T8802] Modules linked in: [ 295.445733][ T8802] ---[ end trace 0000000000000000 ]--- [ 295.448019][ T9] usb 6-1: USB disconnect, device number 17 [ 295.464116][ T30] audit: type=1400 audit(1756164678.994:577): avc: denied { read } for pid=5201 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 295.489372][ T30] audit: type=1400 audit(1756164678.994:578): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.514567][ T30] audit: type=1400 audit(1756164678.994:579): avc: denied { search } for pid=5201 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.539288][ T30] audit: type=1400 audit(1756164678.994:580): avc: denied { add_name } for pid=5201 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.564860][ T8802] RIP: 0010:h5_recv+0x104/0x950 [ 295.569796][ T8802] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 91 b4 40 f9 48 8b 44 24 08 <80> 38 00 0f 85 ae 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 295.594405][ T8802] RSP: 0018:ffffc9000402fc00 EFLAGS: 00010293 [ 295.601018][ T8802] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff887ad72a [ 295.609065][ T30] audit: type=1400 audit(1756164678.994:581): avc: denied { create } for pid=5201 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 295.630697][ T8802] RDX: ffff88806263a440 RSI: ffffffff887ad76f RDI: 0000000000000005 [ 295.638693][ T8802] RBP: ffffc9000402fd88 R08: 0000000000000005 R09: 0000000000000000 [ 295.638751][ T30] audit: type=1400 audit(1756164678.994:582): avc: denied { append open } for pid=5201 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 295.647017][ T8802] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 295.647029][ T8802] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8cb478e0 [ 295.647040][ T8802] FS: 00007fed1036c6c0(0000) GS:ffff8881246b9000(0000) knlGS:0000000000000000 [ 295.647058][ T8802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.647069][ T8802] CR2: 00005555862245c8 CR3: 0000000029a4b000 CR4: 00000000003526f0 [ 295.647082][ T8802] Kernel panic - not syncing: Fatal exception [ 295.647272][ T8802] Kernel Offset: disabled