last executing test programs: 21.506629966s ago: executing program 1 (id=635): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@random, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00f420", 0x18, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3e}, {[], @mld={0x83, 0x0, 0x0, 0x9, 0x0, @remote}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e5"], 0x48) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040085}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delchain={0x3c, 0x65, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff1, 0xfffa}, {0x1, 0x4}, {0x8, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x9}}, @TCA_RATE={0x6, 0x5, {0x7, 0xf9}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x240000e5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) 20.58717667s ago: executing program 1 (id=637): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x9, 0x11, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x7000000) 19.140096446s ago: executing program 1 (id=640): close(0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000940)={0x20, 0x11, 0x3, "dbb891"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@migrate={0xd8, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x5, 0x4e23, 0x1, 0xa, 0xa0, 0x20, 0x33}, 0x6e6bb9}, [@policy_type={0xa, 0x10, {0x1}}, @migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010101, @in=@empty, @in=@rand_addr=0x64010102, 0xff, 0x1, 0x0, 0x3504, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@remote, 0x0, 0xa}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20054885}, 0x20008080) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x40, 0x18, 0x8, "f78bffbd595f3f48"}, 0x0, 0x0, 0x0, 0x0}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00']) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r3, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000340)={0xf0f028}) 15.228070822s ago: executing program 1 (id=650): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000400000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.119551873s ago: executing program 1 (id=652): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') setns(r0, 0x8000000) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000004c0)={0x40, 0x8, 0x6, "a61623bea283"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x42, 0x17a) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffc98}]) ioctl$VIDIOC_DBG_S_REGISTER(r4, 0x4038564f, &(0x7f00000000c0)={{0x2, @addr=0x2}, 0x8, 0x3, 0xf}) landlock_restrict_self(r2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x10, 0x0, 0x1}, 0x18, 0x2) landlock_restrict_self(r5, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x202, 0x3, 0x3}, 0x18, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) 12.867956017s ago: executing program 4 (id=655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4048800) recvmsg$can_j1939(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}, 0x1003) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000001d40)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x20000095) 12.543882881s ago: executing program 4 (id=659): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x5, &(0x7f0000000280)={0xe152, 0xd}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeed, 0x30, 0xffffffffffffffff, 0xee87f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x44, '\x00', @data=0x8, 0x8}, {0x6, '\x00', @buffer={"8f01000000000000003acd90d11555827d3ac01c0075e71885aa05a1f7a01e83", 0x20}, 0x1c}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000400"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11.132096825s ago: executing program 0 (id=660): r0 = socket(0x10, 0x3, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) dup3(r0, r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 9.167057303s ago: executing program 0 (id=661): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_usb_connect$midi(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x808, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x4c, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xb}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000300)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x20}}]}) 7.945028403s ago: executing program 2 (id=662): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="8f93", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x4f, 0x3b00, 0x0, 0xfffffffffffffdfd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4c804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000400)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x401, {{0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, {{0xa, 0x4e23, 0x550deca0, @remote, 0x6cf}}}, 0x108) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0x526, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xf}, {}, {0xb, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 7.880669363s ago: executing program 3 (id=663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x12}, [@NFT_MSG_NEWSET={0x84, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_SET_DESC={0x38, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) 7.852223776s ago: executing program 1 (id=664): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x40004) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_clone(0x800, &(0x7f0000000080), 0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f00000003c0)="c485411436b5b8d22e402f96") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x4bfa, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x5, 0x2000000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102384, 0x18ff0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@private=0xa010102, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000843550400000000000001090224000100000020090400030503000200092104000001222800090581034000fdffffffffb0b1c1394d7ce573cb50db"], 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00!('], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x410480, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000180)={0xa, 0x80000, r5}) read$msr(r6, 0x0, 0xffffffffffffff02) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 7.508086647s ago: executing program 2 (id=665): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x20}}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 7.507832485s ago: executing program 3 (id=666): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r2 = dup(r1) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x100000000) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r2, 0x0) r3 = dup(r0) write$UHID_CREATE2(r3, &(0x7f00000004c0)=ANY=[], 0x118) 7.270856811s ago: executing program 2 (id=667): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="406a07efeb00000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x5, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1036, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x7, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x7c, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x7f, 0xf}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x5}], [{{0x9, 0x5, 0xd, 0x0, 0x1ff, 0x2, 0x6, 0xa, {0xf, 0x25, 0x1, 0xb, "8d1922b3428afe038d5336"}}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x4, 0x8, 0x9, {0xf, 0x25, 0x1, 0xb, "1b446b6c3e94d74c765204"}}}]}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x1, 0xb, 0x8, 0x1}, 0xdf, &(0x7f00000004c0)={0x5, 0xf, 0xdf, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "f667d389de7fe212ac5a40ad9d1004b7"}, @ss_container_id={0x14, 0x10, 0x4, 0xd9, "ea1c7924d297755b7ae6af31ebc4ed9a"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x8, 0x1}, @generic={0xab, 0x10, 0x2, "17c26a00d4a07b5774026a2a361a85a3a55e87225455f49714980cd1bac4dca535853db3b3aa8342abedacab98347d32d339f1d7650aa86982cd9abc6aa0c345bf43bb441b95bc79452054dabd1bce7d216561f70d423fbac5125d7564901daf9714e5d3ecfc7fdea8651dcec45afd050d6d0bfa1ae765a04c5632338470ddf0b205e125205d96ed4d8aa5e55dae831dbfe71e5c099f6854fc0108a769757627c0962d2415d77f05"}]}, 0x2, [{0xc3, &(0x7f0000000380)=@string={0xc3, 0x3, "61af7082e9f853a0657c2f0558be33398462b7995e3fb970c07bd8e65c8e9605f32c8932cced2d5229a1d0ded90a331b4deae05271de5a93176923d7154dc183772a2f975f7b64bf6588d98a112c65816f63b10f20037a00549f87658fb1f2244be8fba1b3b21de5366882d5fde1694fb2499cfd478726671ee81931bb8e0cbd823c7a80932ec449b75825b8df1ae90fd0c7cfbc9de7b3b2d1f6229586168e010100000000000026b5fd6bcaed555f70ffd1f2fac72e60539fa60193e96981f7b3"}}, {0x9f, &(0x7f0000000200)=@string={0x9f, 0x3, "09544f56831d87f1873e25515e09b3e8732e26bc97d1db78c62770014e0061e2f8619f645b1dbc3e697d9e09860a310cd7c8462f9b37191f68db5976cf893915c5fb372b315b3536bf3866dbff44043798b892ee3abddad9a33f160343078c28bb4894639e5bf1650a07e3a6813a42b94a52276684387f502b0b559a3efc78d97dc79b54560aa442451ff4e98bc4b61f6254c92940ae0cc18992f6435f"}}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)={0x0, 0xe, 0x4, "6a785cb5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.19992016s ago: executing program 4 (id=668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r7 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r7, &(0x7f0000000040)=""/4109, 0x100d) mmap$IORING_OFF_SQ_RING(&(0x7f0000e8c000/0x3000)=nil, 0x3000, 0x100001d, 0x1010, r7, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000180)={0x5, 0x5, 0x9, 0x0, 0x42, "d6f71eb591961baa9f273696e8124104d6c0e8", 0x5, 0x9}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 6.9486614s ago: executing program 3 (id=669): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4048800) recvmsg$can_j1939(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}, 0x1003) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000001d40)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x20000095) 6.540712458s ago: executing program 0 (id=670): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"1c50c9208275846e8091aea1a5ad449dc9633529a9c763a2cc9effe43c88e383", 0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc4}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15) 6.49698431s ago: executing program 3 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd40700002000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x1, &(0x7f0000006680)) statfs(0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r3, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x800000) lseek(r3, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000300)={0x0, 0x0, 0x7ff, 0x1, 0x3, 0xa, 0x7}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209c12d02"], 0x10}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ffffff7f0003000000000000360001000800000095fb21c941a68760a68e5560000000000000009500000b00000000"], &(0x7f0000000100)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000e400e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4ebc64e899b6b86153a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r5 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r5, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004) getsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000100)=""/235, &(0x7f0000000200)=0xeb) 5.212787697s ago: executing program 4 (id=672): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a6631e5", @ANYRES32=0x0, @ANYBLOB="a19001000e2c00002c00128009000100626f6e64000000001c000280080007"], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000680)=""/4096, &(0x7f0000001680)=0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20044185) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x1ff, 0x200, 0x9, 0xffffffff, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r4, 0x1c0}, &(0x7f0000000180)=0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) openat$nvme_fabrics(0xffffff9c, 0x0, 0x2000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="b40600000000000071112400000000008510000002000000850000000700000095000000000000009500000000000000ce8920f29328b7ddd3856df677997bc5cafa405a82061c5386992ff41f5524a21802a859883d24cc98e697e9e2aa06a6ade7a79a62029a98a8e09c7c6edefac53c5f767377cfcd6bb593240100378e"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4.88836319s ago: executing program 0 (id=673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x5000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000340)={0x3, r4, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36]}}]}) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x200000ffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x5000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000340)={0x3, r4, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000140)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x36]}}]}) (async) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x200000ffffff, 0x0) (async) 4.23649212s ago: executing program 3 (id=674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff0f}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5}, 0x94) 3.689016762s ago: executing program 2 (id=675): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72dc9f0ba1f8483a0000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4840) (fail_nth: 4) 3.483870441s ago: executing program 3 (id=676): socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x1e0, 0x258, 0x300, 0x30, 0xa, 0x0, 0x0, 0x4000000, {0x0, 0xd}, {0x1}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0xfffffff8, 0xffffffff, 0x1, 0x4, 0x9f6, 0xea0a, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x82, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000003c40)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)="eb5938deb6", 0x5}], 0x1, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x24044001}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f00000009c0)="3e22ea3b17a4159c7532c9a90fdb9d74f12730539b35c927be9dcd2f04ba98696641a145e047ef4c1d9d020a19bf1effa38119e358f57d92424368bbd84b08f2ce8fd38ca76763e90db67bac6336b1e044f1da578af18b4854968f6c936989378ddb57ef4d7a44ac934770de32d2d222f4a113d25ef07d9fe090c0063dbf0f82130a07ebf84b95e961bdb428d4", 0x8d}, {&(0x7f0000000a80)="7de0e90549634109", 0x8}, {&(0x7f0000000ac0)="bdc4d18ecc3f9992c6b1851e548b412813927bfd68939b126b863c4d48b7743a1696a330db25e4b836db181d33194437c789b10d3f8ae9efaaef8472a3364e330d68333e842c75666760bb167093494604", 0x51}, {&(0x7f0000000c40)="aabb4af28241ec4d213d50874207c68c150248aadbd628fc9c8a5996bdbc1e119d9790768781665188a8e9844d3ddb3c285ab79dbefc69deb5b97d8567f44b9be1916e652020ebabf02d5cfb90bfd3958666023a66d2550a938491", 0x5b}, {&(0x7f0000000e80)="daad66cbc7ca6c5cbdb28aa5e8db20e592a2673f95ff755a1f8bd60b00f385d6dd5b81df12ebfd66209f390acdb7a85a48b6dcac218b3455b0e53d5bc246ba5ac26b245b9d05598d108017a9e64172c6b29887f07aa5da", 0x57}], 0x5, &(0x7f0000000fc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c}}], 0x38, 0x804}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000001000)="ef886040d9e541735811904b6db3f9f74fabdb2c0a9db7f67af724e176ca534394fa6aa47ad53da5baf135ef35de2c102c4fd1839c", 0x35}, {&(0x7f0000001040)="123427635ac1db1adee2ba7cfb01d0cd34b4286b30a9339afa68800b794c7e95d51fd9f0b3f8ab97f295cef226ad50a031f0b82a06740beb6b03e580a09268ec88b502e111715928bc6e91eafb8206938f6fe89baa24464973d92ff73f6f47c2c38157cb45556dbcd60dd7d0677947595dc604e429d2422881c37e1f0662b53ab32e29adc1f1fa8d", 0x88}, {&(0x7f0000001100)="a5a87793dd78cad130cc06a5d0d35a2f72225a4b45db29ac4389eb8af5cce9e2fe5091504aae0d9cd1b7ca12d9327c28bbd6ec043491800f4332636367028f8b578fe5ab20ecfc5d2aa37dc3dfa04146251168b1800cead741d18b07843877be6ea708064a918d62aa1ec4130ab8ce100048abb1638a732811075212455463165a34a9a13a7102df17e7cd65116811ef22b039", 0x93}, {&(0x7f00000011c0)="9a1c8827461ac6e3406c9d76d4f73ae0c7a21add0119e8e77ad8d6b8b3c252e8dccb8e520210954402c1a19eb12fff7cff3d844762fa021141bccfc638ab614b2c2d", 0x42}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="dbbb2f0dc2463f3fe21ab69c7835f62aa5275afb4ae33df62cc03acf163f11f554de4777342f25d9f7caf9500d5b75dbebd6d22172c5bd8e09bf6faad8b8ab25d90c5b95ffceaa216684729389090b8de18d9c42182ea06b4b84", 0x5a}], 0x6, &(0x7f0000003300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3]}}], 0x48, 0x40010}}, {{&(0x7f0000003380)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003400)="8d46aa251f62598bdf31500716c36bfa6a83603aeb727e4228796eb4d1454b395c8ef0662a1f4753994226018a8353de0c2ebd6071ea15ad16ca513ad050d1ce9846120bbe4711214622e623f34570543c71234de5280d42eda0", 0x5a}, {&(0x7f0000003480)="ae", 0x1}, {&(0x7f00000034c0)="278b3a752c68038baf842b847dadd89ee1a800d105b151c3425a1ee1e84578175b382e8e0397f98499d8bab666efe8b34ee82e91bfade9bf4c3fb627d39f64bff7984a3698caee0f0988c6ce00d7ba78008065a499b3a166050bf01a769bd183923e7a046e215bb0c1a8226a2b1a8709d0b09d347f7bf6681dfd7353d20dda279ae707a1041e6bafc7e5c06576b7d364bc22ef5b2036cdba183d7e3484eda0108d5ff021d3ed074a640ff2086434d1e88c30a3dce8ab947d", 0xb8}], 0x3, &(0x7f00000036c0)=[@rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0, 0x40d5}}, {{&(0x7f00000037c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003840)="cbbe314695fb026570404da6b3aee637a524c93bac55d6e7a274e230c1b918a001b31f1f466ae19750707bda4eb39ed35c2e282dcf7ca0de131cc8a2e132e489f4ff1c82ce4f659464b6604b8c74d2caed93c7e048546e17374d347fb5be86c4b29ca1b2067adceecfb837eacd3caceb1bc6969e03aef1ccfc8be5976034d9", 0x7f}, {&(0x7f00000038c0)="b4bcefd85e5ad0fae68d4ab7f054140947968bc4f7b132c228003488f4ef3643862ed72f94d56a12a13370695291c8e43530a9620c97884fc6cc9d4a05ce0d7db87e9beace9bd67c6a1985528bbd7495d630a133eff60a9d5897c07adb3b42a7efcf24f13bd0d57807316bc080f9ac05fbd1ab4f0b77eb2727bd6cdf9190d1f5432c6079b1b0f8229d7bd06ca511395a9db90b5728c66172770f6aa754cdfadc0d22807676a7709b6735e0e08f262cd5a3937448103fc75cef2e6dfd87f0", 0xbe}, {&(0x7f0000003980)="3359d952209b023af620a39e32d025e700b9e286d591399c76eab20d384c171ed69449d2efb4f7bbb226327254bbc4a01ef4f7724bbb803d3261155e65e7e092878e5e978816f093799b412707abbe3c41e02a1e33d3d60e4304dc77f5185e59176bcb428e80c3903438100cffd03b6041bf86472539b57b", 0x78}], 0x3, &(0x7f0000003b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xe8, 0x40005}}], 0x5, 0x8008801) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x2) fchdir(r6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) r7 = syz_clone(0x151800, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) (async, rerun: 64) setpgid(0x0, r7) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r6, 0x80184153, &(0x7f0000000540)={0x0, &(0x7f00000004c0)=[0xfffffffffffffffd, &(0x7f0000000180)="3727822cb7d1e78628440d757efb1c0372fc8fdb235282b96dcabcc8e8167cb6af847004f0eea44b096d39e2371724a5083d843c2d8fc0e4025651f01c4b02322d9362512adc70", &(0x7f0000000300)="d2d7b7d538ff79ed69f86f6275a97dfd197ab425df439fe184c7e72e24a21c0b2ef109d5ebf41727aa46a11d0a11dc5ade6f85eec6e8ed0731e2b6f5968961d419aa689ba6f27df3b23eebbad6f2ba5a2a9c5ef9f257aa2f623417359e980fdc7dc9b2f2846724d6ca685dbbf438f26d54eabc786d0910843ca6bbfad652895d87a8b502d8d4877aab1311d03070b3d8b482d3ae9e272efbdc2a223fe9e18c3552c623156b9e562cfa60b0d9267346fcdf6b3c5467", &(0x7f0000000440)="4c94f411cc892b4641253f8a818247c946b9b7c73c6e93b4a77fbb8fc31aa236acf666c084b656238d8f6ee6b72dabacd0830f75322e5f15dc9319ae7b7f51807ae4c10d736196d7d5765a929af4"]}) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') socket$inet6_tcp(0xa, 0x1, 0x0) (async) preadv(r8, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 3.040082304s ago: executing program 4 (id=677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) request_key(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040613b33392b07bdfa8882e9617ff887c7619790f34bb", @ANYRESDEC=0x0], 0x6) write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7, 0x7b, 0xfffe}, 0xfffffffffffffe30) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r3, &(0x7f0000001300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/255, 0xff}], 0x1, 0x7, 0x7) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, 0x0, &(0x7f0000000100)) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r4], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0xfffffffffffffdcd}, 0x94) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x890}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2.762539626s ago: executing program 2 (id=678): r0 = socket(0x10, 0x3, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(r5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) dup3(r0, r5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001b3eb000040e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="4884000000c0000008001d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 2.300128235s ago: executing program 0 (id=679): r0 = socket$inet(0x2, 0x3, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000107000000860a00000003"], 0x20}}], 0x1, 0x24000004) 262.007282ms ago: executing program 2 (id=680): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40480d4) 95.120259ms ago: executing program 0 (id=681): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4048800) recvmsg$can_j1939(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1}, 0x1003) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000001d40)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x20000095) 0s ago: executing program 4 (id=682): socket$kcm(0x2, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x7, 0x640080) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r3, r1, 0xb, 0x20}, 0x20) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000000)) socket$kcm(0x2, 0x3, 0x2) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x7, 0x640080) (async) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r3, r1, 0xb, 0x20}, 0x20) (async) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x541c, &(0x7f0000000000)) (async) kernel console output (not intermixed with test programs): r pid=6935 comm="syz.2.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 163.502570][ T30] audit: type=1400 audit(1781433576.177:402): avc: denied { relabelfrom } for pid=6942 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 163.522912][ T30] audit: type=1400 audit(1781433576.177:403): avc: denied { relabelto } for pid=6942 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 163.545294][ T6953] syzkaller0: create flow: hash 2881244674 index 2 [ 163.560959][ T5718] syzkaller0: tun_net_xmit 76 [ 163.589074][ T30] audit: type=1400 audit(1781433576.257:404): avc: denied { module_request } for pid=6954 comm="syz.1.261" kmod="crypto-digest_null" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 163.627352][ T29] syzkaller0: tun_net_xmit 76 [ 163.810410][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 163.984872][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.023366][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.082196][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.111782][ T5718] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 164.135726][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.166424][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.223050][ T10] usb 3-1: Product: syz [ 164.239552][ T10] usb 3-1: Manufacturer: syz [ 164.257480][ T10] usb 3-1: SerialNumber: syz [ 164.306930][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 164.313444][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 164.328721][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 164.373258][ T5718] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 164.413132][ T10] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 164.437018][ T5718] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 164.460592][ T5746] syzkaller0: tun_net_xmit 76 [ 164.480918][ T806] syzkaller0: tun_net_xmit 76 [ 164.484793][ T6943] syzkaller0: delete flow: hash 2881244674 index 2 [ 164.531627][ T5718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.532663][ T10] usb 3-1: USB disconnect, device number 7 [ 164.584698][ T5718] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 164.635497][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.702788][ T5718] usb 2-1: config 0 descriptor?? [ 165.960443][ T5731] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 166.116768][ T5731] usb 3-1: Using ep0 maxpacket: 8 [ 166.132112][ T5731] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 166.165267][ T5731] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.228897][ T5731] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.260940][ T5731] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 166.303631][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.340128][ T5731] usb 3-1: config 0 descriptor?? [ 166.905897][ T5731] usbhid 3-1:0.0: can't add hid device: -71 [ 166.920402][ T5731] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 166.963590][ T5731] usb 3-1: USB disconnect, device number 8 [ 167.870477][ T5731] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 168.076639][ T5731] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.107292][ T5731] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 168.148563][ T5731] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 168.201697][ T5731] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.283507][ T5731] usb 3-1: config 0 descriptor?? [ 168.342849][ T5731] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 168.385469][ T5731] dvb-usb: bulk message failed: -22 (3/0) [ 168.431947][ T5718] usbhid 2-1:0.0: can't add hid device: -71 [ 168.443970][ T5718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 168.444655][ T5731] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 168.456123][ T5718] usb 2-1: USB disconnect, device number 9 [ 168.460954][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 168.460971][ T30] audit: type=1400 audit(1781433581.097:406): avc: denied { create } for pid=7001 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.511178][ T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.537893][ T5731] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 168.548554][ T6998] dvb-usb: bulk message failed: -22 (2/0) [ 168.564452][ T5731] usb 3-1: media controller created [ 168.581628][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.627946][ T5731] dvb-usb: bulk message failed: -22 (6/0) [ 168.635722][ T5731] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 168.662777][ T5731] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 168.670369][ T806] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 168.684430][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.691006][ T5731] dvb-usb: schedule remote query interval to 150 msecs. [ 168.717881][ T5731] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 168.722036][ T29] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.773899][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.813603][ T29] usb 1-1: config 0 descriptor?? [ 168.884423][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 168.886158][ T806] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 168.892569][ T5731] dvb-usb: error while querying for an remote control event. [ 168.900642][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.934386][ T806] usb 5-1: Product: syz [ 168.938780][ T806] usb 5-1: Manufacturer: syz [ 168.953958][ T806] usb 5-1: SerialNumber: syz [ 168.971521][ T806] usb 5-1: config 0 descriptor?? [ 169.051356][ T29] usbhid 1-1:0.0: can't add hid device: -71 [ 169.065444][ T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 169.088664][ T29] usb 1-1: USB disconnect, device number 11 [ 169.122180][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 169.129889][ T5731] dvb-usb: error while querying for an remote control event. [ 169.196166][ T806] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 169.290362][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 169.296429][ T5731] dvb-usb: error while querying for an remote control event. [ 169.472728][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 169.488348][ T5731] dvb-usb: error while querying for an remote control event. [ 169.537014][ T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 169.653759][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 169.659591][ T5731] dvb-usb: error while querying for an remote control event. [ 169.714432][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.734980][ T29] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 169.744730][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.757294][ T29] usb 1-1: config 0 descriptor?? [ 169.827399][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 169.833340][ T5731] dvb-usb: error while querying for an remote control event. [ 170.011190][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 170.018921][ T5731] dvb-usb: error while querying for an remote control event. [ 170.046714][ T806] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 170.155475][ T806] usb 3-1: USB disconnect, device number 9 [ 170.170446][ T5731] dvb-usb: bulk message failed: -22 (1/0) [ 170.176681][ T5731] dvb-usb: error while querying for an remote control event. [ 170.243842][ T806] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 170.271724][ T7021] Cannot find del_set index 1 as target [ 170.655623][ T29] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 170.960555][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 171.107252][ T29] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 171.413772][ T5731] usb 5-1: USB disconnect, device number 18 [ 171.464533][ T29] usb 1-1: USB disconnect, device number 12 [ 171.470630][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 172.822861][ T7056] netlink: 52 bytes leftover after parsing attributes in process `syz.0.276'. [ 172.969736][ T7062] syzkaller0: entered promiscuous mode [ 173.050442][ T806] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 173.209989][ T30] audit: type=1400 audit(1781433585.877:407): avc: denied { read } for pid=7068 comm="syz.3.280" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.260318][ T806] usb 5-1: Using ep0 maxpacket: 8 [ 173.606805][ T806] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 173.655137][ T806] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 173.677397][ T806] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.688957][ T806] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 173.702072][ T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.833818][ T806] usb 5-1: config 0 descriptor?? [ 174.578243][ T29] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 175.682881][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.021134][ T29] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 176.080556][ T29] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 176.107453][ T30] audit: type=1400 audit(1781433588.777:408): avc: denied { execute } for pid=7109 comm="syz.1.287" name="cgroup" dev="tmpfs" ino=340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 176.158158][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.233354][ T29] usb 1-1: config 0 descriptor?? [ 176.402895][ T29] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 176.433049][ T29] dvb-usb: bulk message failed: -22 (3/0) [ 176.462225][ T7115] netlink: 'syz.3.288': attribute type 21 has an invalid length. [ 176.476067][ T7091] dvb-usb: bulk message failed: -22 (2/0) [ 176.486141][ T29] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 176.490345][ T5746] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 176.552334][ T29] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 176.580317][ T29] usb 1-1: media controller created [ 176.606621][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.688128][ T29] dvb-usb: bulk message failed: -22 (6/0) [ 176.703892][ T29] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 176.740332][ T5746] usb 2-1: Using ep0 maxpacket: 8 [ 176.760965][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 176.763163][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 176.844604][ T29] dvb-usb: schedule remote query interval to 150 msecs. [ 176.867727][ T29] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 176.882032][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.926001][ T5746] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.958400][ T29] usb 1-1: USB disconnect, device number 13 [ 176.998287][ T5746] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 177.044465][ T5746] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 177.088853][ T29] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 177.103458][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.147980][ T5746] usb 2-1: config 0 descriptor?? [ 177.179361][ T7114] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 177.213462][ T7123] block nbd0: server does not support multiple connections per device. [ 177.255262][ T7123] block nbd0: shutting down sockets [ 177.609725][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 177.647007][ T7130] 9p: Bad value for 'rfdno' [ 178.150308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.550412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.570400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 178.810276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.070272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.130654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 179.224487][ T806] usbhid 5-1:0.0: can't add hid device: -32 [ 179.350275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.480385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 179.540534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 179.599270][ T5632] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 179.641071][ T806] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 179.688995][ T29] usb 2-1: USB disconnect, device number 10 [ 179.788057][ T806] usb 5-1: USB disconnect, device number 19 [ 179.991988][ T30] audit: type=1326 audit(1781433592.667:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0f99ce59 code=0x7ffc0000 [ 180.096752][ T30] audit: type=1326 audit(1781433592.687:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0f99ce59 code=0x7ffc0000 [ 180.495379][ T30] audit: type=1326 audit(1781433592.687:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0f99ce59 code=0x7ffc0000 [ 180.522218][ T30] audit: type=1326 audit(1781433592.687:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0f99ce59 code=0x7ffc0000 [ 180.549871][ T30] audit: type=1326 audit(1781433592.687:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3f0f99ce59 code=0x7ffc0000 [ 180.594849][ T7156] tipc: Started in network mode [ 180.599786][ T7156] tipc: Node identity 3e413c689f71, cluster identity 4711 [ 180.607232][ T7156] tipc: Enabled bearer , priority 0 [ 180.619241][ T30] audit: type=1326 audit(1781433592.697:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0f99ce59 code=0x7ffc0000 [ 180.658929][ T30] audit: type=1326 audit(1781433593.167:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f0f95d68e code=0x7ffc0000 [ 180.690965][ T30] audit: type=1326 audit(1781433593.197:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f0f95d68e code=0x7ffc0000 [ 180.719770][ T30] audit: type=1326 audit(1781433593.197:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7144 comm="syz.1.296" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f0f95d68e code=0x7ffc0000 [ 180.752521][ T7146] tipc: Disabling bearer [ 181.583920][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 181.583940][ T30] audit: type=1400 audit(1781433594.237:435): avc: denied { create } for pid=7154 comm="syz.0.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.747428][ T30] audit: type=1400 audit(1781433594.317:436): avc: denied { map } for pid=7154 comm="syz.0.299" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.776433][ T30] audit: type=1400 audit(1781433594.317:437): avc: denied { execute } for pid=7154 comm="syz.0.299" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.805722][ T3758] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 181.980895][ T3758] usb 2-1: Using ep0 maxpacket: 8 [ 181.996974][ T3758] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.031289][ T3758] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 182.062483][ T3758] usb 2-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 182.081231][ T5718] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 182.081322][ T3758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.118292][ T3758] usb 2-1: config 0 descriptor?? [ 182.128131][ T30] audit: type=1400 audit(1781433594.797:438): avc: denied { checkpoint_restore } for pid=7169 comm="syz.2.304" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 182.185887][ T30] audit: type=1400 audit(1781433594.857:439): avc: denied { create } for pid=7164 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 182.210363][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 182.250424][ T5718] usb 5-1: Using ep0 maxpacket: 8 [ 182.257286][ T5718] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 182.289550][ T5718] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 182.311637][ T5718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 182.318474][ T5718] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 182.327724][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.339014][ T5718] usb 5-1: config 0 descriptor?? [ 182.361980][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.373038][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 182.382449][ T10] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 182.393238][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.404951][ T10] usb 4-1: config 0 descriptor?? [ 182.417592][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 182.424343][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 182.432937][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 182.443202][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 182.450521][ T10] usb 4-1: media controller created [ 182.457237][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.478246][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 182.490652][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 182.500188][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 182.522846][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 182.531688][ T5746] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.539327][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 182.559332][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 182.567114][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 182.577570][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 182.584785][ T3758] usbhid 2-1:0.0: can't add hid device: -32 [ 182.590862][ T3758] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 182.605228][ T3758] usb 2-1: USB disconnect, device number 11 [ 182.627804][ T7168] dvb-usb: bulk message failed: -22 (2/0) [ 182.690347][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 182.696137][ T10] dvb-usb: error while querying for an remote control event. [ 182.703613][ T5746] usb 3-1: Using ep0 maxpacket: 32 [ 182.712781][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.724837][ T5746] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.739860][ T10] usb 4-1: USB disconnect, device number 10 [ 182.746107][ T5746] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 182.757096][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.776223][ T5746] usb 3-1: config 0 descriptor?? [ 182.785591][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 182.828470][ T5718] usbhid 5-1:0.0: can't add hid device: -71 [ 182.845247][ T5718] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 182.869457][ T5718] usb 5-1: USB disconnect, device number 20 [ 183.107924][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 183.327043][ T5746] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 183.350050][ T5746] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 183.491176][ T30] audit: type=1400 audit(1781433596.157:440): avc: denied { bind } for pid=7184 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.532117][ T5746] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 183.542727][ T30] audit: type=1400 audit(1781433596.187:441): avc: denied { write } for pid=7184 comm="syz.3.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 183.570216][ T5746] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 183.605533][ T5746] usb 3-1: USB disconnect, device number 10 [ 183.795625][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 185.936493][ T30] audit: type=1400 audit(1781433598.207:442): avc: denied { create } for pid=7223 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 186.380347][ T5746] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 186.592138][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.620440][ T5746] usb 4-1: Using ep0 maxpacket: 8 [ 186.634462][ T5746] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 186.684153][ T5746] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 186.767262][ T5746] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.804170][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 186.822271][ T5746] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 186.846128][ T10] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 186.857881][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.956937][ T10] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 186.975994][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 186.982832][ T10] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 187.123496][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.198448][ T5746] usb 4-1: config 0 descriptor?? [ 187.221059][ T10] usb 3-1: config 0 descriptor?? [ 187.501860][ T7255] netlink: 'syz.1.326': attribute type 64 has an invalid length. [ 187.966033][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 188.577714][ T5746] usbhid 4-1:0.0: can't add hid device: -71 [ 188.620175][ T5746] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 188.675649][ T5746] usb 4-1: USB disconnect, device number 11 [ 188.980592][ T5753] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 189.080346][ T29] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.120801][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 189.127548][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.140611][ T5753] usb 1-1: Using ep0 maxpacket: 8 [ 189.150630][ T10] usb 3-1: USB disconnect, device number 11 [ 189.168962][ T5753] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 189.188085][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.211179][ T5753] usb 1-1: Product: syz [ 189.220178][ T5753] usb 1-1: Manufacturer: syz [ 189.234413][ T5753] usb 1-1: SerialNumber: syz [ 189.247994][ T5753] usb 1-1: config 0 descriptor?? [ 189.382539][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.393769][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.431659][ T29] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.447706][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.485045][ T29] usb 5-1: SerialNumber: syz [ 189.926277][ T5753] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 189.996670][ T30] audit: type=1400 audit(1781433602.667:443): avc: denied { setopt } for pid=7279 comm="syz.1.331" lport=51845 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 190.251084][ T7267] sctp: [Deprecated]: syz.0.323 (pid 7267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.251084][ T7267] Use struct sctp_sack_info instead [ 190.337792][ T30] audit: type=1400 audit(1781433603.007:444): avc: denied { getopt } for pid=7279 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.340412][ T5746] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 190.412595][ T5753] usb write operation failed. (-71) [ 190.609512][ T5753] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 190.621019][ T5753] dvbdev: DVB: registering new adapter (Terratec H7) [ 190.627857][ T5753] usb 1-1: media controller created [ 190.636274][ T5753] usb read operation failed. (-71) [ 190.661683][ T5753] usb write operation failed. (-71) [ 190.690990][ T5753] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 190.702115][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 190.709888][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.724700][ T5753] usb 1-1: USB disconnect, device number 14 [ 190.734348][ T5746] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 190.745535][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.756292][ T5746] usb 4-1: Product: syz [ 190.763402][ T5746] usb 4-1: Manufacturer: syz [ 190.764693][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'. [ 190.770738][ T5746] usb 4-1: SerialNumber: syz [ 190.801124][ T5746] usb 4-1: config 0 descriptor?? [ 190.818390][ T5746] cdc_ether 4-1:0.0: Descriptor too short [ 190.827635][ T5746] usb 4-1: unsupported MDLM descriptors [ 190.878661][ T7295] Cannot find del_set index 1 as target [ 191.830195][ T29] usb 5-1: 0:2 : does not exist [ 191.840500][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.843609][ T29] usb 5-1: unit 48 not found! [ 191.852911][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.870113][ T5753] usb 4-1: USB disconnect, device number 12 [ 192.801432][ T29] usb 5-1: USB disconnect, device number 21 [ 192.845969][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 192.891148][ T6933] udevd[6933]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.256658][ T7323] overlayfs: missing 'lowerdir' [ 193.262426][ T30] audit: type=1400 audit(1781433605.927:445): avc: denied { create } for pid=7321 comm="syz.2.343" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.265287][ T7322] overlayfs: missing 'lowerdir' [ 193.318658][ T7326] overlay: ./file0 is not a directory [ 193.319810][ T30] audit: type=1400 audit(1781433605.927:446): avc: denied { mounton } for pid=7321 comm="syz.2.343" path="/65/file0" dev="tmpfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 193.427962][ T30] audit: type=1400 audit(1781433606.097:447): avc: denied { accept } for pid=7320 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 193.729351][ T30] audit: type=1400 audit(1781433606.397:448): avc: denied { read append } for pid=7343 comm="syz.3.348" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.758664][ T30] audit: type=1400 audit(1781433606.427:449): avc: denied { open } for pid=7343 comm="syz.3.348" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.862340][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 193.870760][ T7345] IPVS: set_ctl: invalid protocol: 22 172.30.1.4:20003 [ 193.893286][ T7347] sit0: entered promiscuous mode [ 193.908971][ T7347] netlink: 'syz.1.349': attribute type 1 has an invalid length. [ 193.910345][ T5753] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 193.916866][ T7347] netlink: 1 bytes leftover after parsing attributes in process `syz.1.349'. [ 194.007503][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.034423][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 194.065410][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.082434][ T5753] usb 3-1: Using ep0 maxpacket: 8 [ 194.093063][ T10] usb 5-1: Product: syz [ 194.099745][ T5753] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 194.113683][ T10] usb 5-1: Manufacturer: syz [ 194.128258][ T5753] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 194.141528][ T10] usb 5-1: SerialNumber: syz [ 194.517024][ T5753] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 194.538002][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 194.556910][ T5753] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 194.636832][ T5753] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 194.664843][ T5753] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.686457][ T30] audit: type=1400 audit(1781433607.347:450): avc: denied { firmware_load } for pid=5746 comm="kworker/0:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 194.748852][ T5753] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.769955][ T5746] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 194.791033][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.067956][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.080758][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.108056][ T5753] usb 3-1: GET_CAPABILITIES returned 0 [ 195.134566][ T5753] usbtmc 3-1:16.0: can't read capabilities [ 195.263603][ T30] audit: type=1400 audit(1781433607.937:451): avc: denied { write } for pid=7358 comm="syz.1.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 195.353665][ T806] usb 5-1: USB disconnect, device number 22 [ 195.529390][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 195.555512][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 195.568768][ T7360] netlink: 'syz.0.353': attribute type 7 has an invalid length. [ 195.577481][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 195.603459][ T3758] usb 3-1: USB disconnect, device number 12 [ 195.850885][ T5746] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 195.889863][ T5746] ath9k_htc: Failed to initialize the device [ 195.915888][ T806] usb 5-1: ath9k_htc: USB layer deinitialized [ 197.359770][ T7372] binder: 7371:7372 ioctl c0285840 200000000000 returned -22 [ 197.797855][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'. [ 197.807049][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.359'. [ 198.450334][ T806] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 198.600335][ T806] usb 1-1: Using ep0 maxpacket: 8 [ 198.611895][ T806] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 198.621929][ T806] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 198.635110][ T806] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 198.875553][ T7395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.363'. [ 199.102948][ T7397] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 199.112417][ T7397] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 199.145084][ T7397] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 199.316220][ T30] audit: type=1400 audit(1781433611.807:452): avc: denied { firmware_load } for pid=7388 comm="syz.3.363" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 199.702474][ T806] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 199.716969][ T806] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 199.730066][ T806] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.744326][ T806] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.754757][ T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.916878][ T7402] syzkaller0: entered promiscuous mode [ 199.928619][ T7402] syzkaller0: entered allmulticast mode [ 199.963529][ T30] audit: type=1400 audit(1781433612.637:453): avc: denied { read } for pid=7401 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 199.984614][ T806] usb 1-1: GET_CAPABILITIES returned 0 [ 199.991651][ T806] usbtmc 1-1:16.0: can't read capabilities [ 200.252200][ T806] usb 1-1: USB disconnect, device number 15 [ 200.388064][ T7410] netlink: 240 bytes leftover after parsing attributes in process `syz.3.368'. [ 200.441032][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 201.138123][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 201.150269][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 201.159305][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 201.919048][ T7428] netlink: 18 bytes leftover after parsing attributes in process `syz.0.373'. [ 202.126471][ T30] audit: type=1400 audit(1781433614.797:454): avc: granted { setsecparam } for pid=7429 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 202.577143][ T7437] : entered promiscuous mode [ 202.995413][ T7438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.377'. [ 203.197134][ T806] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 203.362027][ T806] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.386225][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.416980][ T806] usb 3-1: config 0 descriptor?? [ 203.441477][ T806] cp210x 3-1:0.0: cp210x converter detected [ 203.628511][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 204.386066][ T5851] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 204.427637][ T806] usb 3-1: cp210x converter now attached to ttyUSB0 [ 204.458185][ T806] usb 3-1: USB disconnect, device number 13 [ 204.534388][ T5851] usb 4-1: device descriptor read/64, error -71 [ 204.686664][ T806] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.728326][ T806] cp210x 3-1:0.0: device disconnected [ 204.817525][ T30] audit: type=1400 audit(1781433617.487:455): avc: denied { map } for pid=7455 comm="syz.0.382" path="socket:[14901]" dev="sockfs" ino=14901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 204.831779][ T5851] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 205.010406][ T5851] usb 4-1: device descriptor read/64, error -71 [ 205.143335][ T5851] usb usb4-port1: attempt power cycle [ 205.238105][ T7463] syzkaller0: entered promiscuous mode [ 205.254646][ T7463] syzkaller0: entered allmulticast mode [ 205.328938][ T30] audit: type=1400 audit(1781433617.997:456): avc: denied { append } for pid=7465 comm="syz.4.386" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 205.385358][ T30] audit: type=1400 audit(1781433617.997:457): avc: denied { open } for pid=7465 comm="syz.4.386" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 205.510807][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 205.521028][ T5851] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.607646][ T5851] usb 4-1: device descriptor read/8, error -71 [ 205.957195][ T5851] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 205.993655][ T5851] usb 4-1: device descriptor read/8, error -71 [ 206.122880][ T5851] usb usb4-port1: unable to enumerate USB device [ 206.157770][ T7481] FAULT_INJECTION: forcing a failure. [ 206.157770][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 206.198519][ T7481] CPU: 0 UID: 0 PID: 7481 Comm: syz.4.391 Not tainted syzkaller #0 PREEMPT(full) [ 206.198538][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.198547][ T7481] Call Trace: [ 206.198551][ T7481] [ 206.198556][ T7481] dump_stack_lvl+0x100/0x190 [ 206.198590][ T7481] should_fail_ex.cold+0x5/0xa [ 206.198618][ T7481] should_failslab+0xc2/0x120 [ 206.198641][ T7481] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 206.198668][ T7481] ? alloc_empty_file+0x5b/0x1c0 [ 206.198699][ T7481] alloc_empty_file+0x5b/0x1c0 [ 206.198731][ T7481] alloc_file_pseudo+0x13a/0x230 [ 206.198764][ T7481] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 206.198796][ T7481] ? alloc_fd+0x476/0x790 [ 206.198825][ T7481] sock_alloc_file+0x50/0x210 [ 206.198845][ T7481] __sys_socket+0x1c0/0x260 [ 206.198878][ T7481] ? __pfx___sys_socket+0x10/0x10 [ 206.198903][ T7481] ? ksys_write+0x1ac/0x250 [ 206.198930][ T7481] __x64_sys_socket+0x72/0xb0 [ 206.198952][ T7481] ? lockdep_hardirqs_on+0x78/0x100 [ 206.198974][ T7481] do_syscall_64+0x115/0x870 [ 206.198996][ T7481] ? clear_bhb_loop+0x40/0x90 [ 206.199016][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.199033][ T7481] RIP: 0033:0x7f6f9499ce59 [ 206.199055][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.199070][ T7481] RSP: 002b:00007f6f9592cfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 206.199086][ T7481] RAX: ffffffffffffffda RBX: 00000000000000bf RCX: 00007f6f9499ce59 [ 206.199097][ T7481] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000027 [ 206.199107][ T7481] RBP: 00007f6f9592d090 R08: 0000000000000000 R09: 0000000000000000 [ 206.199117][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.199126][ T7481] R13: 00007f6f94c16038 R14: 00007f6f94c15fa0 R15: 00007fff126d0928 [ 206.199147][ T7481] [ 206.468499][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 206.694002][ T30] audit: type=1400 audit(1781433619.357:458): avc: denied { mounton } for pid=7488 comm="syz.2.396" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 206.810369][ T5851] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 207.171767][ T5851] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.190905][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.227950][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.399'. [ 207.356848][ T5851] usb 5-1: config 0 descriptor?? [ 207.366054][ T5851] cp210x 5-1:0.0: cp210x converter detected [ 207.491207][ T30] audit: type=1400 audit(1781433620.157:459): avc: denied { accept } for pid=7495 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 208.066643][ T5851] usb 5-1: cp210x converter now attached to ttyUSB0 [ 208.123120][ T5851] usb 5-1: USB disconnect, device number 23 [ 208.157957][ T7508] tipc: Enabled bearer , priority 0 [ 208.216516][ T5851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.218920][ T7508] tipc: Resetting bearer [ 208.276303][ T5851] cp210x 5-1:0.0: device disconnected [ 208.379628][ T7507] tipc: Disabling bearer [ 208.528176][ T7523] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 209.390510][ T5851] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 209.804517][ T5718] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 209.812338][ T30] audit: type=1400 audit(1781433622.157:460): avc: denied { append } for pid=7530 comm="syz.0.408" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 209.852074][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 209.897055][ T5851] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 209.950991][ T5851] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.015603][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0 [ 210.025432][ T5851] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 210.037104][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.114594][ T5851] usb 4-1: config 0 descriptor?? [ 210.150345][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 210.179833][ T5718] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 210.192651][ T806] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 210.210853][ T5718] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.225205][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.246259][ T5718] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 210.279261][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.356616][ T806] usb 5-1: Using ep0 maxpacket: 8 [ 210.399941][ T5718] usb 3-1: config 0 descriptor?? [ 210.403323][ T806] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 210.566380][ T5851] usbhid 4-1:0.0: can't add hid device: -71 [ 210.579217][ T5851] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 210.588294][ T806] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 210.643443][ T5851] usb 4-1: USB disconnect, device number 17 [ 210.720807][ T30] audit: type=1400 audit(1781433623.387:461): avc: denied { bind } for pid=7546 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 211.332514][ T806] usb 5-1: config 0 interface 0 has no altsetting 0 [ 211.344752][ T806] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 211.353920][ T806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.363952][ T806] usb 5-1: config 0 descriptor?? [ 211.841284][ T5851] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 212.102100][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 212.122459][ T806] usbhid 5-1:0.0: can't add hid device: -71 [ 212.138798][ T5851] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 212.208520][ T7572] netlink: 104 bytes leftover after parsing attributes in process `syz.0.415'. [ 212.707124][ T806] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 212.783398][ T5851] usb 4-1: config 0 interface 0 has no altsetting 0 [ 212.802208][ T806] usb 5-1: USB disconnect, device number 24 [ 212.829507][ T5851] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 212.898710][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.970134][ T5851] usb 4-1: config 0 descriptor?? [ 213.751486][ T30] audit: type=1400 audit(1781433626.427:462): avc: denied { ioctl } for pid=7552 comm="syz.3.412" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 214.103459][ T30] audit: type=1400 audit(1781433626.777:463): avc: denied { write } for pid=7552 comm="syz.3.412" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.201776][ T5851] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 214.222271][ T30] audit: type=1400 audit(1781433626.777:464): avc: denied { ioctl } for pid=7552 comm="syz.3.412" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.330451][ T30] audit: type=1400 audit(1781433626.837:465): avc: denied { getattr } for pid=7591 comm="syz.4.420" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 214.404676][ T30] audit: type=1400 audit(1781433626.937:466): avc: denied { mount } for pid=7591 comm="syz.4.420" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 214.572887][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.592250][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.611017][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.656559][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.678164][ T5851] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -110 [ 214.742178][ T5851] usb 4-1: USB disconnect, device number 18 [ 214.804279][ T30] audit: type=1804 audit(1781433627.477:467): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.420" name="/newroot/72/file0" dev="tmpfs" ino=385 res=1 errno=0 [ 215.080693][ T5718] usbhid 3-1:0.0: can't add hid device: -71 [ 215.092711][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 215.123274][ T5718] usb 3-1: USB disconnect, device number 14 [ 215.218276][ T30] audit: type=1400 audit(1781433627.887:468): avc: denied { ioctl } for pid=7601 comm="syz.0.422" path="socket:[15431]" dev="sockfs" ino=15431 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 215.251481][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'. [ 215.436415][ T7613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=7613 comm=syz.2.424 [ 215.672900][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 215.807502][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.427'. [ 216.048673][ T7621] gretap0: entered promiscuous mode [ 216.119996][ T7621] macvlan2: entered allmulticast mode [ 216.425996][ T7621] gretap0: entered allmulticast mode [ 216.680321][ T5753] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 216.686519][ T7637] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 216.769192][ T7637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.432'. [ 216.844323][ T5753] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 216.875977][ T5753] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 216.910637][ T5753] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 216.929185][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.962964][ T5753] usb 3-1: Product: syz [ 216.978995][ T5753] usb 3-1: Manufacturer: syz [ 216.989540][ T5753] usb 3-1: SerialNumber: syz [ 217.261750][ T30] audit: type=1400 audit(1781433629.877:469): avc: denied { bind } for pid=7625 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.441057][ T30] audit: type=1400 audit(1781433629.877:470): avc: denied { listen } for pid=7625 comm="syz.2.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.723779][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.433'. [ 218.020404][ T5851] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 218.190377][ T5851] usb 1-1: Using ep0 maxpacket: 8 [ 218.373994][ T5851] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 218.380683][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 218.383598][ T5851] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 218.383710][ T5851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.383796][ T5851] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 218.685520][ T5851] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 218.772927][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 219.046666][ T5851] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.204848][ T5851] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.691216][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.719724][ T5753] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 220.121308][ T5851] usb 1-1: GET_CAPABILITIES returned 0 [ 220.142719][ T5753] usb 3-1: USB disconnect, device number 15 [ 220.153458][ T5851] usbtmc 1-1:16.0: can't read capabilities [ 220.281167][ T7686] netlink: 240 bytes leftover after parsing attributes in process `syz.3.445'. [ 221.082947][ T5851] usb 1-1: USB disconnect, device number 16 [ 222.224308][ T6933] udevd[6933]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.934557][ T5851] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 223.141057][ T5851] usb 5-1: Using ep0 maxpacket: 8 [ 223.181814][ T5851] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 223.253436][ T5851] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.361307][ T5851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 223.380399][ T5851] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 223.403813][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.473762][ T5851] usb 5-1: config 0 descriptor?? [ 223.787587][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.454'. [ 225.987059][ T30] audit: type=1400 audit(1781433637.967:471): avc: denied { setopt } for pid=7738 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.237350][ T7742] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.245555][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 226.292602][ T7744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'. [ 226.753796][ T3758] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 226.919330][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 227.190639][ T3758] usb 1-1: Using ep0 maxpacket: 16 [ 227.203315][ T3758] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.225068][ T3758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.255858][ T3758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 227.276763][ T3758] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 227.308809][ T3758] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.322643][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 227.346386][ T10] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 227.357744][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 227.372997][ T3758] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 227.382976][ T3758] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 227.393068][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 227.405149][ T3758] usb 1-1: Manufacturer: syz [ 227.417873][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 227.432743][ T3758] usb 1-1: config 0 descriptor?? [ 227.442305][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 227.453123][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.461837][ T5718] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 227.467495][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.484178][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.680482][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 227.697917][ T5718] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 227.730579][ T5718] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 227.750410][ T3758] rc_core: IR keymap rc-hauppauge not found [ 227.768337][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 227.778270][ T5718] usb 3-1: config 0 interface 0 has no altsetting 0 [ 227.778821][ T3758] Registered IR keymap rc-empty [ 227.796740][ T10] usbtmc 4-1:16.0: can't read capabilities [ 227.800477][ T5718] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 227.822066][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.826514][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.849143][ T5718] usb 3-1: config 0 descriptor?? [ 227.900344][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 227.952167][ T3758] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 228.003950][ T3758] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 228.043702][ T29] usb 4-1: USB disconnect, device number 19 [ 228.066989][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.123436][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.161270][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.215000][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.297740][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.341098][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.392007][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.431485][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.481278][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.520407][ T3758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 228.611585][ T5851] usb 5-1: can't set config #0, error -110 [ 228.709885][ T7781] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 228.965065][ T3758] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 229.011514][ T3758] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 229.225858][ T7790] fuse: Bad value for 'fd' [ 229.355483][ T29] usb 5-1: USB disconnect, device number 25 [ 229.443806][ T5718] usbhid 3-1:0.0: can't add hid device: -71 [ 229.470133][ T5718] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.509801][ T5718] usb 3-1: USB disconnect, device number 16 [ 229.515161][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 229.576285][ T7796] macvlan2: entered allmulticast mode [ 229.592924][ T7796] gretap0: entered allmulticast mode [ 229.672804][ T3758] usb 1-1: USB disconnect, device number 17 [ 230.943284][ T7809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.468'. [ 230.953205][ T7809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.468'. [ 231.050774][ T7801] netlink: 'syz.4.466': attribute type 6 has an invalid length. [ 231.091401][ T7801] netlink: 'syz.4.466': attribute type 6 has an invalid length. [ 231.173566][ T7815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.472'. [ 231.312445][ T7817] netlink: 'syz.2.473': attribute type 13 has an invalid length. [ 231.340741][ T7817] gretap0: refused to change device tx_queue_len [ 231.359600][ T7817] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 231.627676][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 231.753853][ T7821] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 231.813110][ T5851] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 231.907218][ T7821] ======================================================= [ 231.907218][ T7821] WARNING: The mand mount option has been deprecated and [ 231.907218][ T7821] and is ignored by this kernel. Remove the mand [ 231.907218][ T7821] option from the mount to silence this warning. [ 231.907218][ T7821] ======================================================= [ 231.924728][ T7827] fuse: Bad value for 'fd' [ 232.021304][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 232.039379][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 232.061246][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.090119][ T5851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.123811][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 232.158457][ T5851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 232.177883][ T5851] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 232.188831][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.228332][ T5851] usb 3-1: config 0 descriptor?? [ 232.256927][ T30] audit: type=1400 audit(1781433644.927:472): avc: denied { read write } for pid=7810 comm="syz.1.471" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 232.284915][ T5632] Bluetooth: hci5: urb ffff8880343e3a00 submission failed (90) [ 232.324109][ T30] audit: type=1400 audit(1781433644.927:473): avc: denied { open } for pid=7810 comm="syz.1.471" path="/108/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 232.505637][ T7817] tipc: Enabled bearer , priority 0 [ 232.525019][ T3758] usb 3-1: USB disconnect, device number 17 [ 232.908296][ T7816] tipc: Disabling bearer [ 233.206839][ T7846] netlink: 240 bytes leftover after parsing attributes in process `syz.4.483'. [ 233.240150][ T7848] futex_wake_op: syz.3.484 tries to shift op by -1; fix this program [ 233.416551][ T7852] FAULT_INJECTION: forcing a failure. [ 233.416551][ T7852] name failslab, interval 1, probability 0, space 0, times 0 [ 233.494647][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.1.485 Not tainted syzkaller #0 PREEMPT(full) [ 233.494677][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.494691][ T7852] Call Trace: [ 233.494698][ T7852] [ 233.494706][ T7852] dump_stack_lvl+0x100/0x190 [ 233.494740][ T7852] should_fail_ex.cold+0x5/0xa [ 233.494772][ T7852] should_failslab+0xc2/0x120 [ 233.494797][ T7852] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 233.494828][ T7852] ? skb_clone+0x190/0x400 [ 233.494865][ T7852] skb_clone+0x190/0x400 [ 233.494904][ T7852] nfnetlink_rcv_batch+0x1c8/0x2880 [ 233.494949][ T7852] ? __lock_acquire+0x4a5/0x2630 [ 233.494975][ T7852] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 233.495004][ T7852] ? preempt_schedule_common+0x42/0xc0 [ 233.495051][ T7852] ? avc_has_perm_noaudit+0x145/0x3b0 [ 233.495080][ T7852] ? __asan_memset+0x23/0x50 [ 233.495110][ T7852] ? __nla_validate_parse+0x1e7/0x28b0 [ 233.495141][ T7852] ? __pfx___nla_validate_parse+0x10/0x10 [ 233.495164][ T7852] ? rcu_is_watching+0x12/0xc0 [ 233.495196][ T7852] ? cap_capable+0x10b/0x440 [ 233.495230][ T7852] ? __nla_parse+0x40/0x60 [ 233.495255][ T7852] nfnetlink_rcv+0x3bd/0x440 [ 233.495287][ T7852] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 233.495315][ T7852] ? rcu_is_watching+0x12/0xc0 [ 233.495349][ T7852] netlink_unicast+0x585/0x850 [ 233.495381][ T7852] ? __pfx_netlink_unicast+0x10/0x10 [ 233.495411][ T7852] netlink_sendmsg+0x8b0/0xda0 [ 233.495440][ T7852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.495462][ T7852] ? __might_fault+0xa0/0x140 [ 233.495500][ T7852] ____sys_sendmsg+0x9e1/0xb70 [ 233.495523][ T7852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.495550][ T7852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.495587][ T7852] ___sys_sendmsg+0x190/0x1e0 [ 233.495614][ T7852] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.495675][ T7852] __sys_sendmsg+0x170/0x220 [ 233.495708][ T7852] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.495753][ T7852] ? rcu_is_watching+0x12/0xc0 [ 233.495784][ T7852] do_syscall_64+0x115/0x870 [ 233.495810][ T7852] ? clear_bhb_loop+0x40/0x90 [ 233.495836][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.495859][ T7852] RIP: 0033:0x7f3f0f99ce59 [ 233.495877][ T7852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.495904][ T7852] RSP: 002b:00007f3f1078d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.495926][ T7852] RAX: ffffffffffffffda RBX: 00007f3f0fc15fa0 RCX: 00007f3f0f99ce59 [ 233.495940][ T7852] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 233.495953][ T7852] RBP: 00007f3f1078d090 R08: 0000000000000000 R09: 0000000000000000 [ 233.495966][ T7852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.495979][ T7852] R13: 00007f3f0fc16038 R14: 00007f3f0fc15fa0 R15: 00007ffc9c65b928 [ 233.496009][ T7852] [ 233.814407][ T30] audit: type=1400 audit(1781433646.467:474): avc: denied { bind } for pid=7856 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.848558][ T7859] capability: warning: `syz.1.489' uses 32-bit capabilities (legacy support in use) [ 233.859513][ T7857] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 233.869340][ T30] audit: type=1400 audit(1781433646.467:475): avc: denied { connect } for pid=7856 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.912845][ T7859] trusted_key: encrypted_key: keylen parameter is missing [ 233.920140][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.920989][ T30] audit: type=1400 audit(1781433646.477:476): avc: denied { write } for pid=7856 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.932005][ T7857] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 234.158468][ T7863] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 234.230789][ T5753] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 234.384864][ T5753] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 234.407026][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.419461][ T5753] usb 1-1: Product: syz [ 234.424583][ T5753] usb 1-1: Manufacturer: syz [ 234.431352][ T5753] usb 1-1: SerialNumber: syz [ 234.452122][ T5753] usb 1-1: config 0 descriptor?? [ 234.670309][ T5851] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 234.750369][ T3758] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 234.767178][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 234.776750][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 234.785664][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 234.817553][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 234.827206][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 234.830453][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 234.837141][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 234.847089][ T5851] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 234.860850][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.869093][ T5851] usb 4-1: Product: syz [ 234.874554][ T5851] usb 4-1: Manufacturer: syz [ 234.879315][ T5851] usb 4-1: SerialNumber: syz [ 234.887979][ T7857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.902654][ T5851] usb 4-1: config 0 descriptor?? [ 234.922854][ T7857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.923988][ T5851] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 234.940732][ T3758] usb 3-1: Using ep0 maxpacket: 8 [ 234.942231][ T5851] pctv452e: pctv452e_power_ctrl: 1 [ 234.942231][ T5851] [ 234.953891][ T5851] usb 4-1: selecting invalid altsetting 3 [ 234.959819][ T5851] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 234.959819][ T5851] [ 234.964969][ T3758] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 234.970977][ T5851] dvb-usb: bulk message failed: -22 (5/0) [ 234.995117][ T7857] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 234.996206][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.014473][ T5851] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 235.018164][ T3758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.033421][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 235.046095][ T7857] bond0 (unregistering): Released all slaves [ 235.046166][ T5851] usb 4-1: media controller created [ 235.053132][ T3758] usb 3-1: Product: syz [ 235.058988][ T5851] dvb-usb: bulk message failed: -22 (8/0) [ 235.069982][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 235.079788][ T3758] usb 3-1: Manufacturer: syz [ 235.084559][ T3758] usb 3-1: SerialNumber: syz [ 235.089242][ T7879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 235.103788][ T3758] usb 3-1: config 0 descriptor?? [ 235.109599][ T5851] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 235.131111][ T5851] dvb-usb: MAC address reading failed. [ 235.492827][ T5753] usb 1-1: Firmware version (0.0) predates our first public release. [ 235.540749][ T3758] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 235.548194][ T5753] usb 1-1: Please update to version 0.2 or newer [ 235.564574][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.840610][ T5851] DVB: Unable to find symbol stb0899_attach() [ 235.848732][ T5851] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 235.872794][ T5753] usb 1-1: USB disconnect, device number 18 [ 235.943882][ T5851] rc_core: IR keymap rc-tt-1500 not found [ 235.950018][ T5851] Registered IR keymap rc-empty [ 235.957868][ T5851] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 235.990506][ T5851] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input16 [ 236.019525][ T5851] dvb-usb: schedule remote query interval to 100 msecs. [ 236.038361][ T5851] pctv452e: pctv452e_power_ctrl: 0 [ 236.038361][ T5851] [ 236.055256][ T5851] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 236.072230][ T7877] sctp: [Deprecated]: syz.2.493 (pid 7877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.072230][ T7877] Use struct sctp_sack_info instead [ 236.088905][ T5731] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 236.142291][ T5851] dvb-usb: bulk message failed: -22 (4/0) [ 236.198889][ T5851] dvb-usb: error -22 while querying for an remote control event. [ 236.238322][ T3758] usb write operation failed. (-71) [ 236.270462][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 236.277708][ T3758] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 236.304992][ T5731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.321939][ T3758] dvbdev: DVB: registering new adapter (Terratec H7) [ 236.329357][ T5731] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 236.337581][ T5851] dvb-usb: bulk message failed: -22 (4/0) [ 236.342573][ T3758] usb 3-1: media controller created [ 236.353799][ T5731] usb 2-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 236.364198][ T3758] usb read operation failed. (-71) [ 236.378640][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.381402][ T5851] dvb-usb: error -22 while querying for an remote control event. [ 236.387288][ T3758] usb write operation failed. (-71) [ 236.407711][ T5731] usb 2-1: config 0 descriptor?? [ 236.416491][ T3758] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 236.440897][ T3758] usb 3-1: USB disconnect, device number 18 [ 236.576546][ T5851] dvb-usb: bulk message failed: -22 (4/0) [ 236.595477][ T5851] dvb-usb: error -22 while querying for an remote control event. [ 236.712545][ T5851] dvb-usb: bulk message failed: -22 (4/0) [ 236.719273][ T5851] dvb-usb: error -22 while querying for an remote control event. [ 236.730420][ T5718] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 236.824268][ T7917] syzkaller0: entered promiscuous mode [ 236.829827][ T7917] syzkaller0: entered allmulticast mode [ 236.841487][ T806] dvb-usb: bulk message failed: -22 (4/0) [ 236.847268][ T806] dvb-usb: error -22 while querying for an remote control event. [ 236.862920][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.872162][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.879151][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.887437][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.892169][ T5718] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.894539][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.905262][ T5718] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.911942][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.927794][ T5718] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.928066][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.948456][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.950656][ T5718] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.955740][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 236.964627][ T5851] dvb-usb: bulk message failed: -22 (4/0) [ 236.988846][ T5851] dvb-usb: error -22 while querying for an remote control event. [ 236.996974][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.005246][ T5718] usb 1-1: Product: syz [ 237.007193][ T5731] lenovo 0003:17EF:6049.0004: unknown main item tag 0x0 [ 237.016937][ T5718] usb 1-1: Manufacturer: syz [ 237.021985][ T5718] usb 1-1: SerialNumber: syz [ 237.037335][ T5718] hub 1-1:1.0: bad descriptor, ignoring hub [ 237.044778][ T5718] hub 1-1:1.0: probe with driver hub failed with error -5 [ 237.048731][ T5731] lenovo 0003:17EF:6049.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6049] on usb-dummy_hcd.1-1/input0 [ 237.052544][ T5718] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 237.095453][ T5731] usb 2-1: USB disconnect, device number 12 [ 237.111932][ T5718] dvb-usb: bulk message failed: -22 (4/0) [ 237.130529][ T5718] dvb-usb: error -22 while querying for an remote control event. [ 237.213291][ T7918] fido_id[7918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 237.270441][ T5851] dvb-usb: bulk message failed: -22 (4/0) [ 237.276785][ T5851] dvb-usb: error -22 while querying for an remote control event. [ 237.407805][ T5718] dvb-usb: bulk message failed: -22 (4/0) [ 237.414084][ T5718] dvb-usb: error -22 while querying for an remote control event. [ 237.424322][ T5851] usb 1-1: USB disconnect, device number 19 [ 237.465807][ T5851] usb 4-1: USB disconnect, device number 20 [ 237.924702][ T806] dvb-usb: bulk message failed: -22 (4/0) [ 237.947846][ T806] dvb-usb: error -22 while querying for an remote control event. [ 238.087745][ T5851] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 238.692955][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 239.405090][ T7936] evm: overlay not supported [ 239.616661][ T30] audit: type=1400 audit(1781433652.154:477): avc: denied { accept } for pid=7948 comm="syz.0.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.720357][ T30] audit: type=1400 audit(1781433652.192:478): avc: denied { create } for pid=7949 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 240.907681][ T7961] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 240.979102][ T7961] bond2: (slave geneve2): making interface the new active one [ 240.994980][ T7961] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 241.017407][ T7964] __nla_validate_parse: 1 callbacks suppressed [ 241.017413][ T6092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 241.017436][ T7964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.514'. [ 241.046197][ T5731] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 241.053853][ T3758] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 241.055549][ T6092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 241.074337][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 241.091327][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 241.109909][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 241.258256][ T5731] usb 1-1: Using ep0 maxpacket: 16 [ 241.265698][ T3758] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.283159][ T5731] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.298652][ T3758] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.311733][ T5731] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.330875][ T30] audit: type=1400 audit(1781433653.745:479): avc: denied { bind } for pid=7965 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 241.353307][ T3758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.364759][ T5731] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 241.387353][ T3758] usb 5-1: config 0 descriptor?? [ 241.393986][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.410364][ T3758] pwc: Askey VC010 type 2 USB webcam detected. [ 241.810936][ T7970] futex_wake_op: syz.2.517 tries to shift op by -1; fix this program [ 241.892072][ T3758] pwc: recv_control_msg error -32 req 02 val 2b00 [ 241.910288][ T3758] pwc: recv_control_msg error -32 req 02 val 2700 [ 241.930580][ T7974] Cannot find del_set index 1 as target [ 241.950348][ T3758] pwc: recv_control_msg error -32 req 02 val 2c00 [ 243.815984][ T7954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.969102][ T7954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.132532][ T5731] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 244.143224][ T3758] pwc: recv_control_msg error -71 req 04 val 1000 [ 244.598376][ T3758] pwc: recv_control_msg error -71 req 04 val 1300 [ 244.616709][ T3758] pwc: recv_control_msg error -71 req 04 val 1400 [ 244.631152][ T3758] pwc: recv_control_msg error -71 req 02 val 2000 [ 244.645491][ T3758] pwc: recv_control_msg error -71 req 02 val 2100 [ 244.672707][ T3758] pwc: recv_control_msg error -71 req 04 val 1500 [ 244.695205][ T3758] pwc: recv_control_msg error -71 req 02 val 2500 [ 244.731478][ T3758] pwc: recv_control_msg error -71 req 02 val 2400 [ 244.772292][ T3758] pwc: recv_control_msg error -71 req 02 val 2600 [ 244.823049][ T3758] pwc: recv_control_msg error -71 req 02 val 2900 [ 244.863388][ T3758] pwc: recv_control_msg error -71 req 02 val 2800 [ 244.907652][ T3758] pwc: recv_control_msg error -71 req 04 val 1100 [ 244.945902][ T3758] pwc: recv_control_msg error -71 req 04 val 1200 [ 244.963312][ T5731] usb 1-1: USB disconnect, device number 20 [ 244.994261][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 245.027416][ T3758] pwc: Registered as video103. [ 245.059067][ T3758] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 245.059977][ T7986] syzkaller0: entered promiscuous mode [ 245.110021][ T30] audit: type=1400 audit(1781433657.292:480): avc: denied { map } for pid=7993 comm="syz.4.523" path="/dev/sg0" dev="devtmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 245.167206][ T3758] usb 5-1: USB disconnect, device number 26 [ 245.193264][ T7986] syzkaller0: entered allmulticast mode [ 245.230540][ T30] audit: type=1400 audit(1781433657.292:481): avc: denied { execute } for pid=7993 comm="syz.4.523" path="/dev/sg0" dev="devtmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 245.530179][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.522'. [ 245.972926][ T8016] cgroup: release_agent respecified [ 245.990376][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.527'. [ 247.181186][ T30] audit: type=1400 audit(1781433659.229:482): avc: denied { nlmsg_read } for pid=8033 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 247.645032][ T8041] netlink: 104 bytes leftover after parsing attributes in process `syz.0.532'. [ 250.252946][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 250.370548][ T8059] netlink: 260 bytes leftover after parsing attributes in process `syz.4.538'. [ 250.595842][ T8066] Cannot find del_set index 1 as target [ 251.901103][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 251.925260][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 251.952956][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 252.069991][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 252.096314][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 252.126026][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 252.294734][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.4.543'. [ 252.829457][ T3758] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 253.078785][ T3758] usb 4-1: config 0 has no interfaces? [ 253.166747][ T3758] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 253.219070][ T3758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.294379][ T3758] usb 4-1: config 0 descriptor?? [ 253.394156][ T30] audit: type=1400 audit(1781433665.040:483): avc: denied { ioctl } for pid=8101 comm="syz.4.550" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 253.424478][ T8103] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 253.606957][ T30] audit: type=1400 audit(1781433665.246:484): avc: denied { map } for pid=8079 comm="syz.3.544" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 253.641038][ T5731] usb 4-1: USB disconnect, device number 21 [ 253.693299][ T8114] __nla_validate_parse: 4 callbacks suppressed [ 253.693311][ T8114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 253.712501][ T8113] syzkaller0: entered promiscuous mode [ 253.721030][ T8113] syzkaller0: entered allmulticast mode [ 253.721033][ T3758] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 253.900031][ T3758] usb 5-1: Using ep0 maxpacket: 16 [ 254.216665][ T3758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.289955][ T3758] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 254.336171][ T3758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.377223][ T3758] usb 5-1: config 0 descriptor?? [ 254.519652][ T3758] rc_core: IR keymap rc-xbox-dvd not found [ 254.527547][ T3758] Registered IR keymap rc-empty [ 254.543086][ T3758] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 254.592234][ T3758] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 254.641256][ T8129] syzkaller0: entered promiscuous mode [ 254.646760][ T3758] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 254.700134][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.713030][ T8129] syzkaller0: entered allmulticast mode [ 254.729692][ T3758] input: failed to attach handler kbd to device input19, error: -5 [ 254.758736][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.775387][ T4968] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 254.830437][ T4968] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 254.878706][ T7694] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 254.910824][ T4968] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 254.953960][ T4968] xbox_remote 5-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 255.398227][ T5731] usb 5-1: USB disconnect, device number 27 [ 255.724080][ T30] audit: type=1400 audit(1781433667.221:485): avc: denied { mount } for pid=8154 comm="syz.3.561" name="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 255.769908][ T5753] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 255.965348][ T5753] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.010851][ T5753] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 256.049778][ T5753] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 256.081987][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.120065][ T8150] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 256.157229][ T5753] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.482443][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.563'. [ 256.707703][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.752988][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 257.059096][ T30] audit: type=1400 audit(1781433668.475:486): avc: denied { name_bind 0x1000000 } for pid=8148 comm="syz.1.559" path="socket:[17126]" dev="sockfs" ino=17126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.989022][ T5753] usb 2-1: USB disconnect, device number 13 [ 259.343330][ T8195] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 259.380347][ T8195] ipvlan0: entered allmulticast mode [ 259.419533][ T8195] veth0_vlan: entered allmulticast mode [ 259.452438][ T8195] team0: Device ipvlan0 failed to register rx_handler [ 259.465642][ T30] audit: type=1400 audit(1781433670.721:487): avc: denied { unmount } for pid=5622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 259.826655][ T8205] netlink: 104 bytes leftover after parsing attributes in process `syz.3.574'. [ 260.659974][ T8213] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 260.960204][ T8211] PKCS8: Unsupported PKCS#8 version [ 260.984250][ T8211] CIFS: VFS: UNC: missing share name [ 260.998479][ T8211] CIFS: VFS: Malformed UNC in devname [ 261.738115][ T8234] netlink: 64 bytes leftover after parsing attributes in process `syz.4.581'. [ 261.887586][ T8238] netlink: 'syz.0.582': attribute type 1 has an invalid length. [ 261.948362][ T5731] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 262.047085][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'. [ 262.126488][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.171322][ T5731] usb 2-1: Using ep0 maxpacket: 8 [ 262.198581][ T5731] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 262.247395][ T5731] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.314182][ T5731] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.341343][ T5731] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 262.386311][ T5731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.414738][ T8255] overlayfs: failed to resolve './file1/file0': -2 [ 262.447897][ T5731] usb 2-1: config 0 descriptor?? [ 262.622614][ T8262] netlink: 68 bytes leftover after parsing attributes in process `syz.0.587'. [ 262.642679][ T8263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'. [ 262.653097][ T5718] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 262.823245][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 262.841364][ T5718] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 262.886817][ T806] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 262.917212][ T5718] usb 5-1: config 0 has no interface number 0 [ 262.952200][ T5718] usb 5-1: config 0 interface 184 has no altsetting 0 [ 262.978539][ T5718] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 262.999484][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.009493][ T5718] usb 5-1: Product: syz [ 263.013802][ T5718] usb 5-1: Manufacturer: syz [ 263.019667][ T5718] usb 5-1: SerialNumber: syz [ 263.051991][ T5718] usb 5-1: config 0 descriptor?? [ 263.167776][ T806] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 263.177008][ T806] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.188019][ T806] usb 1-1: config 0 has no interface number 0 [ 263.200564][ T806] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 263.676326][ T5718] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 263.689915][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.706483][ T806] usb 1-1: Product: syz [ 263.712558][ T5718] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 263.721434][ T806] usb 1-1: Manufacturer: syz [ 263.732718][ T5753] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 263.734527][ T806] usb 1-1: SerialNumber: syz [ 263.751479][ T5718] usb 5-1: USB disconnect, device number 28 [ 263.800648][ T806] usb 1-1: config 0 descriptor?? [ 263.818244][ T806] usb 1-1: expecting 3 got 0 endpoints! Bailing out. [ 264.048891][ T5851] usb 1-1: USB disconnect, device number 21 [ 264.055544][ T5753] usb 3-1: device descriptor read/64, error -71 [ 264.298526][ T5718] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 264.318811][ T5753] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 264.470802][ T5753] usb 3-1: device descriptor read/64, error -71 [ 264.471618][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 264.477026][ T5718] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 264.477046][ T5718] usb 5-1: config 0 has no interface number 0 [ 264.477100][ T5718] usb 5-1: config 0 interface 184 has no altsetting 0 [ 264.478809][ T5718] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 264.478890][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.478915][ T5718] usb 5-1: Product: syz [ 264.478932][ T5718] usb 5-1: Manufacturer: syz [ 264.480747][ T5718] usb 5-1: SerialNumber: syz [ 264.485548][ T5718] usb 5-1: config 0 descriptor?? [ 264.587473][ T5753] usb usb3-port1: attempt power cycle [ 264.707583][ T30] audit: type=1400 audit(1781433675.634:488): avc: denied { shutdown } for pid=8248 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.719226][ T5718] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 264.719262][ T5718] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 264.719284][ T5718] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 264.719483][ T5718] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 264.755811][ T5718] usb 5-1: USB disconnect, device number 29 [ 264.849439][ T5731] usbhid 2-1:0.0: can't add hid device: -71 [ 264.849545][ T5731] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.859767][ T5731] usb 2-1: USB disconnect, device number 14 [ 264.950244][ T5753] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 264.972389][ T5753] usb 3-1: device descriptor read/8, error -71 [ 265.052729][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 265.052748][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.594'. [ 265.280598][ T5753] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 265.323948][ T5753] usb 3-1: device descriptor read/8, error -71 [ 265.464517][ T5753] usb usb3-port1: unable to enumerate USB device [ 265.621935][ T8299] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 265.661992][ T8299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.747464][ T8299] bond3: (slave ip6gretap1): making interface the new active one [ 265.765296][ T30] audit: type=1400 audit(1781433676.626:489): avc: denied { audit_read } for pid=8308 comm="syz.3.598" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.183306][ T8299] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 266.701441][ T8321] netlink: 6 bytes leftover after parsing attributes in process `syz.4.602'. [ 266.710297][ T8321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.718350][ T8321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.734230][ T8321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.741640][ T8321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.764236][ T30] audit: type=1400 audit(1781433677.552:490): avc: denied { accept } for pid=8319 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 266.854574][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 267.442832][ T8322] tc_dump_action: action bad kind [ 267.738692][ T8343] netlink: 'syz.1.603': attribute type 1 has an invalid length. [ 268.236204][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.603'. [ 268.450987][ T8352] netlink: 'syz.0.605': attribute type 49 has an invalid length. [ 268.683757][ T8351] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.815077][ T8348] bond4: (slave geneve2): making interface the new active one [ 268.853132][ T8348] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 268.959272][ T8352] bond_slave_0: entered promiscuous mode [ 268.975765][ T8352] bond_slave_0: entered allmulticast mode [ 269.032892][ T5922] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.071401][ T5922] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.282066][ T30] audit: type=1400 audit(1781433679.789:491): avc: denied { create } for pid=8361 comm="syz.4.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 269.315192][ T30] audit: type=1400 audit(1781433679.901:492): avc: denied { search } for pid=5279 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.366825][ T5922] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.528565][ T479] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.540071][ T8370] netlink: 'syz.1.609': attribute type 10 has an invalid length. [ 269.553980][ T30] audit: type=1400 audit(1781433679.901:493): avc: denied { search } for pid=5279 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.578016][ T30] audit: type=1400 audit(1781433679.901:494): avc: denied { search } for pid=5279 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.600943][ T30] audit: type=1400 audit(1781433679.901:495): avc: denied { read } for pid=5279 comm="dhcpcd" name="n508" dev="tmpfs" ino=4506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 269.610469][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.628217][ T30] audit: type=1400 audit(1781433679.901:496): avc: denied { open } for pid=5279 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=4506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 269.660493][ T8370] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 269.690126][ T30] audit: type=1400 audit(1781433679.901:497): avc: denied { getattr } for pid=5279 comm="dhcpcd" path="/run/udev/data/n508" dev="tmpfs" ino=4506 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 269.788445][ T30] audit: type=1400 audit(1781433680.388:498): avc: denied { read } for pid=8374 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1778 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 269.848382][ T5753] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 269.876508][ T5718] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 270.027999][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.043890][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.050455][ T5718] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 270.062799][ T5753] usb 1-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 270.086570][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.087275][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.115143][ T5753] usb 1-1: config 0 descriptor?? [ 270.125075][ T5718] usb 2-1: Product: syz [ 270.155020][ T5718] usb 2-1: Manufacturer: syz [ 270.170381][ T5718] usb 2-1: SerialNumber: syz [ 270.191553][ T5718] usb 2-1: config 0 descriptor?? [ 270.970013][ T5753] hid-generic 0003:18D1:503C.0006: hidraw0: USB HID ve6.e6 Device [HID 18d1:503c] on usb-dummy_hcd.0-1/input0 [ 271.051908][ T5753] usb 1-1: USB disconnect, device number 22 [ 271.156882][ T8370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.175099][ T8370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.203422][ T8370] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 271.220784][ T8370] bond0 (unregistering): Released all slaves [ 271.243415][ T29] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 271.292210][ T8385] kexec: Could not allocate control_code_buffer [ 271.309082][ T8395] fido_id[8395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 271.355317][ T5718] usb 2-1: Firmware version (0.0) predates our first public release. [ 271.387465][ T5718] usb 2-1: Please update to version 0.2 or newer [ 271.430418][ T29] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 271.482556][ T29] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 271.512633][ T29] usb 5-1: Manufacturer: syz [ 271.546303][ T29] usb 5-1: config 0 descriptor?? [ 271.567113][ T29] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 271.584834][ T5718] usb 2-1: USB disconnect, device number 15 [ 271.615521][ T29] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 271.773127][ T8406] input: syz0 as /devices/virtual/input/input21 [ 271.817009][ T29] usb 5-1: USB disconnect, device number 30 [ 271.898613][ T29] ftdi_sio 5-1:0.0: device disconnected [ 272.077934][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 272.225642][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 272.225658][ T30] audit: type=1400 audit(1781433682.661:509): avc: denied { write } for pid=8398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.297223][ T8434] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 272.421116][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'. [ 272.467075][ T8441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.576741][ T30] audit: type=1400 audit(1781433682.989:510): avc: denied { write } for pid=8440 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.985158][ T5746] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 273.040565][ T30] audit: type=1400 audit(1781433683.429:511): avc: denied { read } for pid=5279 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 273.183137][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 273.218865][ T5746] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 273.353014][ T5746] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 273.443302][ T8455] random: crng reseeded on system resumption [ 273.481403][ T30] audit: type=1400 audit(1781433683.803:512): avc: denied { append } for pid=8448 comm="syz.1.623" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 273.572982][ T29] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 273.793906][ T5746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 273.809874][ T5746] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 273.830471][ T5746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.853612][ T5746] usb 3-1: config 0 descriptor?? [ 273.969076][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 273.983281][ T29] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 273.998795][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.009039][ T29] usb 4-1: Product: syz [ 274.013273][ T29] usb 4-1: Manufacturer: syz [ 274.018310][ T29] usb 4-1: SerialNumber: syz [ 274.029364][ T29] usb 4-1: config 0 descriptor?? [ 274.259154][ T29] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 274.433941][ T5746] usbhid 3-1:0.0: can't add hid device: -71 [ 274.451192][ T5746] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 274.493194][ T5746] usb 3-1: USB disconnect, device number 23 [ 274.731739][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.627'. [ 274.751461][ T8452] sctp: [Deprecated]: syz.3.618 (pid 8452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.751461][ T8452] Use struct sctp_sack_info instead [ 274.813687][ T29] usb write operation failed. (-71) [ 274.831492][ T29] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 274.858985][ T8475] tmpfs: Unknown parameter 'usrquota$' [ 274.869757][ T29] dvbdev: DVB: registering new adapter (Terratec H7) [ 274.887279][ T29] usb 4-1: media controller created [ 274.893458][ T29] usb read operation failed. (-71) [ 274.899049][ T29] usb write operation failed. (-71) [ 274.907375][ T29] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 274.924119][ T29] usb 4-1: USB disconnect, device number 22 [ 275.603250][ T5746] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 275.796445][ T5746] usb 3-1: Using ep0 maxpacket: 8 [ 275.800009][ T5746] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 275.800042][ T5746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.800064][ T5746] usb 3-1: Product: syz [ 275.800080][ T5746] usb 3-1: Manufacturer: syz [ 275.800097][ T5746] usb 3-1: SerialNumber: syz [ 275.804133][ T5746] usb 3-1: config 0 descriptor?? [ 275.882938][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz.1.630'. [ 275.955360][ T8491] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 276.054470][ T8495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1548 sclass=netlink_route_socket pid=8495 comm=syz.0.634 [ 276.207444][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'. [ 276.376586][ T5746] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 276.481829][ T8497] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.558497][ T5731] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 277.077995][ T5731] usb 5-1: Using ep0 maxpacket: 8 [ 277.091262][ T5731] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 277.105862][ T5731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.117250][ T5731] usb 5-1: Product: syz [ 277.125867][ T5731] usb 5-1: Manufacturer: syz [ 277.131574][ T5731] usb 5-1: SerialNumber: syz [ 278.189945][ T5731] usb 5-1: config 0 descriptor?? [ 278.213637][ T5746] usb write operation failed. (-71) [ 278.282572][ T5731] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 278.294030][ T5746] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 278.323797][ T5731] pctv452e: pctv452e_power_ctrl: 1 [ 278.323797][ T5731] [ 278.344301][ T5746] dvbdev: DVB: registering new adapter (Terratec H7) [ 278.351618][ T5731] usb 5-1: selecting invalid altsetting 3 [ 278.357651][ T5746] usb 3-1: media controller created [ 278.363149][ T5731] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 278.363149][ T5731] [ 278.374182][ T5731] dvb-usb: bulk message failed: -22 (5/0) [ 278.380316][ T5746] usb read operation failed. (-71) [ 278.386517][ T5746] usb write operation failed. (-71) [ 278.409126][ T5746] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 278.428944][ T5731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.450666][ T5746] usb 3-1: USB disconnect, device number 24 [ 278.469687][ T30] audit: type=1400 audit(1781433688.510:513): avc: denied { write } for pid=8517 comm="syz.0.638" path="socket:[18773]" dev="sockfs" ino=18773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.474026][ T5731] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 278.688457][ T5731] usb 5-1: media controller created [ 278.697259][ T5731] dvb-usb: bulk message failed: -22 (8/0) [ 278.701259][ T8520] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 278.745512][ T5731] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 278.783002][ T5731] dvb-usb: MAC address reading failed. [ 278.986956][ T5731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.008930][ T5632] Bluetooth: hci1: ISO packet for unknown connection handle 201 [ 279.152532][ T5851] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 279.305645][ T5731] DVB: Unable to find symbol stb0899_attach() [ 279.455660][ T5731] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 279.472400][ T5851] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 279.568230][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.662742][ T5851] usb 2-1: Product: syz [ 279.692742][ T5851] usb 2-1: Manufacturer: syz [ 279.846782][ T5851] usb 2-1: SerialNumber: syz [ 279.871149][ T5851] usb 2-1: config 0 descriptor?? [ 279.994591][ T30] audit: type=1400 audit(1781433689.933:514): avc: denied { create } for pid=8536 comm="syz.2.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 280.017005][ T5731] rc_core: IR keymap rc-tt-1500 not found [ 280.077489][ T5731] Registered IR keymap rc-empty [ 280.109480][ T5731] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 280.126420][ T30] audit: type=1400 audit(1781433690.064:515): avc: denied { bind } for pid=8542 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 280.365487][ T5851] usb 2-1: Firmware: major: 219, minor: 184, hardware type: UNKNOWN (145) [ 280.506624][ T8547] tipc: Failed to remove unknown binding: 66,1,1/0:2892527214/2892527216 [ 280.523419][ T30] audit: type=1400 audit(1781433690.429:516): avc: denied { write } for pid=8542 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.600748][ T8548] tipc: Failed to remove unknown binding: 66,1,1/0:2892527214/2892527216 [ 280.610558][ T8548] tipc: Failed to remove unknown binding: 66,1,1/0:2892527214/2892527216 [ 280.732188][ T5851] usb 2-1: Read permanent extended address 48:3f:5f:59:bd:ff:8b:f7 from device [ 280.887464][ T5851] usb 2-1: atusb_probe: initialization failed, error = -524 [ 280.963982][ T5851] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 281.220098][ T5731] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input22 [ 281.275325][ T5731] dvb-usb: schedule remote query interval to 100 msecs. [ 281.283968][ T5731] pctv452e: pctv452e_power_ctrl: 0 [ 281.283968][ T5731] [ 281.292942][ T5731] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 281.340230][ T5731] usb 5-1: USB disconnect, device number 31 [ 281.599301][ T5731] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 281.716743][ T8560] netlink: 240 bytes leftover after parsing attributes in process `syz.0.648'. [ 281.857477][ T30] audit: type=1400 audit(1781433691.598:517): avc: denied { ioctl } for pid=8556 comm="syz.4.647" path="socket:[18318]" dev="sockfs" ino=18318 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 282.025061][ T30] audit: type=1400 audit(1781433691.617:518): avc: denied { write } for pid=8556 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 282.117555][ T30] audit: type=1400 audit(1781433691.870:519): avc: denied { getopt } for pid=8563 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 282.262194][ T30] audit: type=1400 audit(1781433692.066:520): avc: denied { map } for pid=8536 comm="syz.2.642" path="socket:[18858]" dev="sockfs" ino=18858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.290432][ T30] audit: type=1400 audit(1781433692.066:521): avc: denied { read } for pid=8536 comm="syz.2.642" path="socket:[18858]" dev="sockfs" ino=18858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 282.304187][ T5718] usb 2-1: USB disconnect, device number 16 [ 282.818370][ T8576] IPVS: set_ctl: invalid protocol: 22 172.30.1.1:20003 [ 284.947661][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 285.448643][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz.4.659'. [ 285.594928][ T30] audit: type=1400 audit(1781433695.173:522): avc: denied { write } for pid=8583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.690965][ T5718] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 285.874320][ T5718] usb 2-1: Using ep0 maxpacket: 8 [ 285.901893][ T5718] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 285.934503][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.972799][ T5718] usb 2-1: Product: syz [ 285.997984][ T5718] usb 2-1: Manufacturer: syz [ 286.017105][ T5718] usb 2-1: SerialNumber: syz [ 286.026728][ T30] audit: type=1400 audit(1781433695.585:523): avc: denied { write } for pid=8609 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.069323][ T5718] usb 2-1: config 0 descriptor?? [ 286.308336][ T5718] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 286.343768][ T5851] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 286.452867][ T8601] syz.4.659 (8601) used greatest stack depth: 19056 bytes left [ 286.462268][ T5731] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 286.524883][ T5851] usb 3-1: Using ep0 maxpacket: 8 [ 288.406175][ T5731] usb 4-1: Using ep0 maxpacket: 8 [ 288.437467][ T5851] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 289.072540][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.094653][ T5851] usb 3-1: Product: syz [ 289.099720][ T5851] usb 3-1: Manufacturer: syz [ 289.104443][ T5851] usb 3-1: SerialNumber: syz [ 289.113776][ T5851] usb 3-1: config 0 descriptor?? [ 289.241578][ T5731] usb 4-1: device descriptor read/all, error -71 [ 289.291114][ T5851] usb 3-1: can't set config #0, error -71 [ 289.331441][ T5851] usb 3-1: USB disconnect, device number 25 [ 289.337903][ T5718] usb write operation failed. (-71) [ 289.382376][ T8628] input: syz0 as /devices/virtual/input/input23 [ 289.387588][ T5718] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 289.423077][ T5718] dvbdev: DVB: registering new adapter (Terratec H7) [ 289.455785][ T5718] usb 2-1: media controller created [ 289.488528][ T5718] usb read operation failed. (-71) [ 289.513313][ T5718] usb write operation failed. (-71) [ 289.534963][ T30] audit: type=1400 audit(1781433698.860:524): avc: denied { write } for pid=8614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.576875][ T5718] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 289.607953][ T5718] usb 2-1: USB disconnect, device number 17 [ 289.698394][ T29] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 289.835750][ T30] audit: type=1400 audit(1781433699.141:525): avc: denied { setopt } for pid=8632 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.883186][ T29] usb 1-1: language id specifier not provided by device, defaulting to English [ 289.898701][ T30] audit: type=1400 audit(1781433699.169:526): avc: denied { ioctl } for pid=8632 comm="syz.2.662" path="socket:[19047]" dev="sockfs" ino=19047 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 289.937563][ T29] usb 1-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 0.40 [ 289.954586][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.982339][ T29] usb 1-1: Product: syz [ 289.997334][ T29] usb 1-1: Manufacturer: [ 290.002818][ T30] audit: type=1400 audit(1781433699.197:527): avc: denied { write } for pid=8634 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.041428][ T29] usb 1-1: SerialNumber: syz [ 290.259170][ T30] audit: type=1400 audit(1781433699.543:528): avc: denied { append } for pid=8646 comm="syz.3.666" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.315852][ T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.358280][ T29] usb 1-1: MIDIStreaming interface descriptor not found [ 290.628318][ T5851] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 290.698813][ T8656] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 290.762335][ T29] usb 1-1: USB disconnect, device number 23 [ 290.810126][ T5718] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 290.841569][ T5851] usb 2-1: Using ep0 maxpacket: 8 [ 290.855777][ T5851] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 290.876537][ T5851] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 290.890319][ T5851] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.901600][ T5851] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 290.920131][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.989211][ T5718] usb 3-1: unable to get BOS descriptor or descriptor too short [ 291.014080][ T5851] usb 2-1: config 0 descriptor?? [ 291.047072][ T5718] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.067010][ T6927] udevd[6927]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.131092][ T5718] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 291.181420][ T30] audit: type=1400 audit(1781433700.395:529): avc: denied { map } for pid=8655 comm="syz.4.668" path="/proc/413/mountinfo" dev="proc" ino=18397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 291.211669][ T5718] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 291.269609][ T5718] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 291.308574][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.668'. [ 291.349971][ T30] audit: type=1400 audit(1781433700.395:530): avc: denied { execute } for pid=8655 comm="syz.4.668" path="/proc/413/mountinfo" dev="proc" ino=18397 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 291.378261][ T5718] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 291.407928][ T5718] usb 3-1: config 1 interface 1 has no altsetting 0 [ 291.437781][ T5718] usb 3-1: string descriptor 0 read error: -22 [ 291.446493][ T5718] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 291.562111][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.690911][ T8660] bond2: (slave geneve2): making interface the new active one [ 291.795445][ T8660] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 291.881902][ T8664] bond2: entered promiscuous mode [ 291.887613][ T8664] geneve2: entered promiscuous mode [ 291.933140][ T8668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.044405][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.200093][ T8668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.297765][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.316357][ T8668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 292.343557][ T8668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.371798][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.388867][ T8653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.421307][ T30] audit: type=1400 audit(1781433701.565:531): avc: denied { setopt } for pid=8667 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 292.451016][ T8653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.469101][ T6088] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 292.587592][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.4.672'. [ 292.600453][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 292.656159][ T8685] IPVS: length: 4096 != 8 [ 293.453476][ T5718] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 294.125336][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.239142][ T5718] usb 3-1: USB disconnect, device number 26 [ 294.264728][ T8699] FAULT_INJECTION: forcing a failure. [ 294.264728][ T8699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.344994][ T8699] CPU: 1 UID: 0 PID: 8699 Comm: syz.2.675 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.345030][ T8699] Tainted: [L]=SOFTLOCKUP [ 294.345043][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.345057][ T8699] Call Trace: [ 294.345064][ T8699] [ 294.345074][ T8699] dump_stack_lvl+0x100/0x190 [ 294.345104][ T8699] should_fail_ex.cold+0x5/0xa [ 294.345135][ T8699] _copy_from_iter+0x1f4/0x1690 [ 294.345166][ T8699] ? __asan_memset+0x23/0x50 [ 294.345199][ T8699] ? __pfx__copy_from_iter+0x10/0x10 [ 294.345225][ T8699] ? __pfx___alloc_skb+0x10/0x10 [ 294.345268][ T8699] netlink_sendmsg+0x808/0xda0 [ 294.345301][ T8699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.345326][ T8699] ? __might_fault+0xa0/0x140 [ 294.345368][ T8699] ____sys_sendmsg+0x9e1/0xb70 [ 294.345393][ T8699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.345422][ T8699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.345461][ T8699] ___sys_sendmsg+0x190/0x1e0 [ 294.345490][ T8699] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.345552][ T8699] __sys_sendmsg+0x170/0x220 [ 294.345585][ T8699] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.345630][ T8699] ? rcu_is_watching+0x12/0xc0 [ 294.345666][ T8699] do_syscall_64+0x115/0x870 [ 294.345694][ T8699] ? clear_bhb_loop+0x40/0x90 [ 294.345721][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.345743][ T8699] RIP: 0033:0x7f0c67b9ce59 [ 294.345761][ T8699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.345782][ T8699] RSP: 002b:00007f0c68a83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.345804][ T8699] RAX: ffffffffffffffda RBX: 00007f0c67e15fa0 RCX: 00007f0c67b9ce59 [ 294.345819][ T8699] RDX: 0000000000004840 RSI: 0000200000000340 RDI: 0000000000000003 [ 294.345833][ T8699] RBP: 00007f0c68a83090 R08: 0000000000000000 R09: 0000000000000000 [ 294.345847][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.345860][ T8699] R13: 00007f0c67e16038 R14: 00007f0c67e15fa0 R15: 00007ffe2609cc88 [ 294.345890][ T8699] [ 294.551389][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.558448][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.565460][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 295.159048][ T30] audit: type=1400 audit(1781433704.110:532): avc: denied { ioctl } for pid=8704 comm="syz.3.676" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.312404][ T5851] usbhid 2-1:0.0: can't add hid device: -32 [ 297.318501][ T5851] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 298.941633][ T5718] ------------[ cut here ]------------ [ 298.948654][ T5718] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 298.955840][ T5718] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x2fd/0x500, CPU#1: kworker/1:4/5718 [ 298.967513][ T5718] Modules linked in: [ 298.971646][ T5718] CPU: 1 UID: 0 PID: 5718 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.982623][ T5718] Tainted: [L]=SOFTLOCKUP [ 298.986960][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.998004][ T5718] Workqueue: events drm_fb_helper_damage_work [ 299.005372][ T5718] RIP: 0010:drm_crtc_wait_one_vblank+0x303/0x500 [ 299.011756][ T5718] Code: 48 8b 6b 50 48 85 ed 0f 84 96 01 00 00 e8 15 ae 63 fc 48 89 df e8 5d a9 90 00 48 89 c6 48 8d 3d 23 42 3d 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 17 f8 ff ff [ 299.031387][ T5718] RSP: 0018:ffffc90003967a68 EFLAGS: 00010293 [ 299.037458][ T5718] RAX: ffffffff8c4e90a0 RBX: ffff888026570000 RCX: 0000000000000000 [ 299.045438][ T5718] RDX: ffffffff8c4c7380 RSI: ffffffff8c4e90a0 RDI: ffffffff90e245a0 [ 299.053432][ T5718] RBP: ffffffff8c4c7380 R08: 0000000000000005 R09: 0000000000000000 [ 299.061702][ T5718] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888026580000 [ 299.069762][ T5718] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000043d1 [ 299.077730][ T5718] FS: 0000000000000000(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 299.086682][ T5718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.093279][ T5718] CR2: 0000200000002dc0 CR3: 000000005d240000 CR4: 00000000003526f0 [ 299.101893][ T5718] Call Trace: [ 299.105167][ T5718] [ 299.108094][ T5718] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 299.114671][ T5718] ? __pfx_autoremove_wake_function+0x10/0x10 [ 299.120745][ T5718] ? lockdep_hardirqs_on+0x78/0x100 [ 299.125972][ T5718] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 299.131780][ T5718] ? drm_vblank_get+0x14f/0x280 [ 299.136666][ T5718] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 299.143029][ T5718] drm_fb_helper_damage_work+0x164/0x640 [ 299.148691][ T5718] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 299.154850][ T5718] ? rcu_is_watching+0x12/0xc0 [ 299.159646][ T5718] process_one_work+0xa0e/0x1980 [ 299.164602][ T5718] ? __pfx_process_one_work+0x10/0x10 [ 299.170067][ T5718] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 299.176230][ T5718] worker_thread+0x5ef/0xe50 [ 299.180854][ T5718] ? kthread+0x13a/0x450 [ 299.185096][ T5718] ? __pfx_worker_thread+0x10/0x10 [ 299.190226][ T5718] kthread+0x370/0x450 [ 299.194294][ T5718] ? __pfx_kthread+0x10/0x10 [ 299.198901][ T5718] ret_from_fork+0x72b/0xd50 [ 299.203497][ T5718] ? __pfx_ret_from_fork+0x10/0x10 [ 299.210019][ T5718] ? __switch_to+0x800/0x1100 [ 299.215357][ T5718] ? __pfx_kthread+0x10/0x10 [ 299.220412][ T5718] ret_from_fork_asm+0x1a/0x30 [ 299.225203][ T5718] [ 299.228218][ T5718] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 299.235492][ T5718] CPU: 1 UID: 0 PID: 5718 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.246440][ T5718] Tainted: [L]=SOFTLOCKUP [ 299.250762][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.260829][ T5718] Workqueue: events drm_fb_helper_damage_work [ 299.266914][ T5718] Call Trace: [ 299.270192][ T5718] [ 299.273117][ T5718] dump_stack_lvl+0x100/0x190 [ 299.277797][ T5718] vpanic+0x552/0x970 [ 299.281777][ T5718] ? __pfx_vpanic+0x10/0x10 [ 299.286285][ T5718] panic+0xd1/0xe0 [ 299.290001][ T5718] ? __pfx_panic+0x10/0x10 [ 299.294421][ T5718] ? check_panic_on_warn+0x1f/0x90 [ 299.299536][ T5718] check_panic_on_warn.cold+0x19/0x34 [ 299.304907][ T5718] ? drm_crtc_wait_one_vblank+0x2fd/0x500 [ 299.310633][ T5718] __warn.cold+0x191/0x328 [ 299.315054][ T5718] __report_bug+0x296/0x3d0 [ 299.319560][ T5718] ? drm_crtc_wait_one_vblank+0x2fd/0x500 [ 299.325289][ T5718] ? __pfx___report_bug+0x10/0x10 [ 299.330318][ T5718] ? lockdep_hardirqs_on+0x78/0x100 [ 299.335536][ T5718] report_bug_entry+0xe1/0x290 [ 299.340301][ T5718] ? drm_crtc_wait_one_vblank+0x303/0x500 [ 299.346031][ T5718] handle_bug+0x1cd/0x2a0 [ 299.350371][ T5718] exc_invalid_op+0x17/0x50 [ 299.354880][ T5718] asm_exc_invalid_op+0x1a/0x20 [ 299.359726][ T5718] RIP: 0010:drm_crtc_wait_one_vblank+0x303/0x500 [ 299.366062][ T5718] Code: 48 8b 6b 50 48 85 ed 0f 84 96 01 00 00 e8 15 ae 63 fc 48 89 df e8 5d a9 90 00 48 89 c6 48 8d 3d 23 42 3d 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 17 f8 ff ff [ 299.385666][ T5718] RSP: 0018:ffffc90003967a68 EFLAGS: 00010293 [ 299.391733][ T5718] RAX: ffffffff8c4e90a0 RBX: ffff888026570000 RCX: 0000000000000000 [ 299.399697][ T5718] RDX: ffffffff8c4c7380 RSI: ffffffff8c4e90a0 RDI: ffffffff90e245a0 [ 299.407659][ T5718] RBP: ffffffff8c4c7380 R08: 0000000000000005 R09: 0000000000000000 [ 299.415622][ T5718] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888026580000 [ 299.423588][ T5718] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000043d1 [ 299.431569][ T5718] ? drm_crtc_wait_one_vblank+0x2f3/0x500 [ 299.437301][ T5718] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 299.443377][ T5718] ? __pfx_autoremove_wake_function+0x10/0x10 [ 299.449446][ T5718] ? lockdep_hardirqs_on+0x78/0x100 [ 299.454650][ T5718] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 299.460456][ T5718] ? drm_vblank_get+0x14f/0x280 [ 299.465321][ T5718] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 299.471655][ T5718] drm_fb_helper_damage_work+0x164/0x640 [ 299.477289][ T5718] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 299.483441][ T5718] ? rcu_is_watching+0x12/0xc0 [ 299.488216][ T5718] process_one_work+0xa0e/0x1980 [ 299.493169][ T5718] ? __pfx_process_one_work+0x10/0x10 [ 299.498552][ T5718] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 299.504707][ T5718] worker_thread+0x5ef/0xe50 [ 299.509311][ T5718] ? kthread+0x13a/0x450 [ 299.513550][ T5718] ? __pfx_worker_thread+0x10/0x10 [ 299.518661][ T5718] kthread+0x370/0x450 [ 299.522727][ T5718] ? __pfx_kthread+0x10/0x10 [ 299.527317][ T5718] ret_from_fork+0x72b/0xd50 [ 299.531910][ T5718] ? __pfx_ret_from_fork+0x10/0x10 [ 299.537026][ T5718] ? __switch_to+0x800/0x1100 [ 299.541712][ T5718] ? __pfx_kthread+0x10/0x10 [ 299.546301][ T5718] ret_from_fork_asm+0x1a/0x30 [ 299.551084][ T5718] [ 300.653064][ T5718] Shutting down cpus with NMI [ 300.658089][ T5718] Kernel Offset: disabled [ 300.662432][ T5718] Rebooting in 86400 seconds..