last executing test programs: 20.195626363s ago: executing program 2 (id=1852): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = getpid() syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={r2}) dup3(r1, r0, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) syz_io_uring_setup(0x3ba1, &(0x7f000001d140)={0x0, 0x9b36, 0x80, 0x1, 0x18b}, &(0x7f000001b0c0), 0x0, 0x0) 16.963128578s ago: executing program 2 (id=1859): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3, 0x9, 0x2fa, 0x8, 0x0, 0x6}) ioctl$DVB_DVR_DMX_REQBUFS(r0, 0xc0086f3c, &(0x7f0000000040)={0x0, 0x7}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000080)={0x0, @reserved}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x38, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbe9, 0x0, 0x0, 0x0, 0xb7d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x9, 0x5, 0x3, 0x100, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xdcb5cd4854a7411a}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x7fff, 0x1a, &(0x7f00000003c0)=""/26, 0x40f00, 0x4, '\x00', r2, 0x0, r0, 0x8, &(0x7f00000004c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x2, 0x61, 0x10}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000580)=[{0x5, 0x4, 0x2, 0x3}, {0x2, 0x1, 0xa, 0x7}, {0x5, 0x3, 0x3, 0x6}, {0x3, 0x4, 0xb, 0xc}, {0x0, 0x3, 0xb, 0x1a395d3413f19404}], 0x10, 0x3}, 0x94) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r4, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000d00)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000d80)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000e80)=0xe8) r7 = syz_clone(0x3820000, &(0x7f0000000ec0)="1c58b615912ab8cc198b2b5192d3639a716958026b7b3302e0dd447ad20778b22e09b5310ca70fdece3233b592677ff44104cc6e36353da9fa2c7ffc9db29a6c50ec4f1ea616b843d49f316d6d0b29303e3fed8df51a6620e77d2fafaeb3003fd7300600c27ae84a43ceb529c15647c03fcd5f61aef6d64c09079de04168dd4a26d7d42c26371ba762be8396172506ed209346a8e12591b8414e7a26b39bfb96e10e192267aa3ec9e6e25884ad00cf576bc03c2c0240d7c819668ba90a9fac4be03f63c3d8ee4f23bce485c0a192829faeade8620ba35fb03dd601ece827a23703c1655a", 0xe4, &(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)="0fe898a2daaf2c2f9b5589978aa0a000839b1270ee2ab0923dcd2317938e534e8aad376087860793e321769c837352f22f5d6698e777fe7fd45076e75a09a77556cb36f4442f6c4d9258dd46d3615bc97302c72f119e7590cdf8596734971b7b365fb8aebcc7405f4d2f5a905b67a101a8976bc4210fcedf118c46b5ae83d03847d702f0972f37af4fdfbb3f1112eb6dabe8eeb84131bc67092a9e8dbd8b9c0ad9c90d749c688ea558a078387612e20ec53d34fe263f78020da7282b11ab1178ec478d70a0d098ac952b913ec4299b4d84e741134040b973b21411eb46fd71c6f38534c79a26d612a8a9dde91e17b63782f1815c37f506") getgroups(0x5, &(0x7f0000001140)=[0xee00, 0x0, 0xee01, 0xee01, 0xee01]) r9 = gettid() read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r11 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000031c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000032c0)=0xe8) r13 = getegid() sendmmsg$unix(r0, &(0x7f0000003440)=[{{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000880)="a962925380bed4f396eaa66ac1e6a809e1830dc685352e8e6ae7b2581aca916b6c5695fcacef0cb93608a839039bb0b84a736b5ccf4043204271", 0x3a}, {&(0x7f00000008c0)="940cebd25c873cffd3395dd0366ffd69f5673ef36f28f8af494bdb0cecb40ae96d1b0cf5a7755ff98980c382ee7a859f725f912fcdb5c4aedb80df798c16960ddd", 0x41}, {&(0x7f0000000940)="1fc19c568bb1bab3a9e5df45f77753b9ddcca903398f6cb719cf22d0e3c1ca777457e752a407a53f503589e1ff479ec6913e0b4e3d964344d1e3c066875932ad6239133c987b562114ebf6c4fb929f0af944cd4c97e92633e009468d9984969e9ce81bb8c2e7829b3c2b6fce9eabd6d4124dcd7bb608f08b9dbe395196c189c841eefb0048adb580f00ad906e2f464d7d5aaba1a04e56931ea99b030ac1bb16d736b27f04c437b46c5ee704b5b03f0ce9a5ac5f56373c9649a5c4e25ffe12eef2146c737b060fa48dc52bfdb83235152e4eaa27f3623f76b468e7572b65ff767846b8e1d1ef6d131b42ed91c4df875fce5cac58507bcacb2", 0xf8}, {&(0x7f0000000a40)="6cbec67ef5239600854847cd20af6cca1099f6d2359133d18cd3e5d32281c2c7d52211357187ac026111f401286b07438afce5f0bfb46c6272b808f0b0922a39c92b9c25339d318f3f1fecec4e8e21ee204708024d1739bd9107e7eb086029210b07d8025b467da4d1044f4845559eb38178b5fc8a20c75a805c5c8e46ddff0ba30b6a6f6469253dfc626e11fa8d88a5e129359188565931320dceaf421cda422347832848cd1b24f7c5b5c030c5efcbe5ff2919ec1399938a775ef3cfede871cd0f05962a5fe2312dd526a7fb45332a833ae96d7db233528052890b872ed8d1fffabdccb4e5376b605329b9", 0xec}, {&(0x7f0000000b40)="4f5b1ac0417b744bf1c34bad60b9e40c49a4aeb865cc91e277b592c1f3b55ba357881c7710f261806540c9698a3f0502ad5f1d85c82ebdce33a5c630b50a917f2bbd3d6105a59a7f5c4caced01eddc75f0b1a509da97341366ebf27b8adf2b17c9ac29bccbf2e961df6bc0fe657864252fcbac4401210fb38f4843c29a95ee3f6f18825a91df28f081de6171066215776f9643422c70e1081aff88019cde7b67e10beaaa3000a375737b92a6b2e3dd4eef", 0xb1}, {&(0x7f0000000c00)="e2f3c16a95caae63efc32d129f3eb6e78d228d9b68bce1ebe8a03a0b7d656996c7b6d52e515672f9f930fa5db60f79e5d9a9772c5ee735c6b144b97f85c044c4b2ae6bad349a2d0709fc9108dfb3f35e94a25e9f527046bd5aa47a", 0x5b}], 0x6, &(0x7f0000003300)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r0, 0xffffffffffffffff, r3, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r3, r3, r1]}}], 0x108, 0x181}}], 0x1, 0x4010) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000003580)={&(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000034c0)=[0x0, 0x0], &(0x7f0000003500)=[0x0, 0x0, 0x0], &(0x7f0000003540)=[0x0], 0x4, 0x2, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000035c0)={0x3, r14, 0x6, 0x7, 0x2, 0x1000, 0x6}) read$FUSE(r0, &(0x7f0000003600)={0x2020}, 0x2020) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000005640)={0x10, 0x0, "d287ba90c3ab14b908e1bae27261051e"}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005680)={'pimreg0\x00'}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f0000005700), r0) sendmsg$DEVLINK_CMD_RATE_SET(r15, &(0x7f00000057c0)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005780)={&(0x7f0000005740)={0x1c, r16, 0x2, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x48005) write$nci(r1, &(0x7f0000005800)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x0, 0x2, 0x1, 0x0, {0x1, 0x10001, 0x1, 0x1, 0x7f, 0xc, 0xd, 0x4, 0x9a, "67bcf1ac30a2d1291666e748b685bb454c219d0e02d961053452673f53415dad72f87e4f1b87ba70da05ced3a2af6fcba42495f965dd8a9a0ed2ba0334bcb942379bc8387ef7a055c30d74c9fa7ea63d103330baee3529b3711b0fc2d72d6fbbe2b83337937115809b7b25c48e6dc891d241ef1de3ea5c220c6dfea2abab4de2345095358d18a7d1628f8ac4c06612e71447133e50605cb164c1"}}, 0xab) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000058c0)={{@host, 0x10}, @hyper, 0xa, 0x2, 0xff, 0x7fffffff, 0x7f, 0x8ce2, 0x4}) 15.600511966s ago: executing program 1 (id=1863): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b", 0x1f}], 0x1, 0x0, 0x0, 0x8080}], 0x1, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000140), 0x4) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) read(r4, &(0x7f0000000040)=""/148, 0xffffff96) 15.557187498s ago: executing program 2 (id=1865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newqdisc={0x148, 0x24, 0xd0f, 0xffffffff, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "1d01000080b9639cda1554de667145238cfe634ebf62812d9ee1a5246cdcd657af6d8526e028059d2dd72fc3aef8fb5e51a294ea4d7090fba24662c7698fce7b84dbacba6bdcf51e642fce176ef4962b254f798c53f18d96841c2940e5a0049fb2e6c126d8b49da8378b0c5c6b321632339f59f4773aa2f2457985b0842691990da8447b7b4a63e37dbb547300c4c55aa5b0e91123fda1a374537f7901297ff26d16d7beefc6bef8e448eb58b3d478fdfbf0dc18581e29a8e7287015fa699edaaed818f95817335467b7fb3716b9e44d9ef8d54343a04cbe3f22ae18d72d994e0c4e493a1c9f2812fd8d5e68f97da8757553c2dbd72400"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x8, 0x7, 0x0, 0x38, 0x6}}]}}]}, 0x148}}, 0x400081c) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) unshare(0x6020400) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r7, 0x0, 0x262) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') fanotify_init(0x40, 0x101000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000001c0)={0x0, 0x80000, 0x0, 0x2, 0x18, "00000000000700000000fffe00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0x1) modify_ldt$write(0x1, &(0x7f0000000100)={0x3af, 0x7fffffffffffffff, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}, 0x10) io_submit(0x0, 0x0, &(0x7f0000000940)) 14.518362715s ago: executing program 2 (id=1866): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000101c1b0c0a00000000000109027453010000b0010400580903000200092109000601222c00090581030800100400fb27bf193b178a7a4b46e718dd930d3865ddaec2"], 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x75, 0x7, 0xe, 0x10, 0x9}, 0x47, &(0x7f0000000280)=ANY=[@ANYBLOB="050f4700050b10010c400005690100d303100b0c100aeae00000000f1e0000141004046e9adf4ac0468a9fdece2f697760cbeb141004937bef122ee14a910d280243f28f3a"]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x27b4, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x3ff, 0x4, 0xe5ce, 0x8cf}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x25a0, 0x1, [@m_nat={0xcc, 0x1a, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0x1, 0xc3, 0x7a4}, @local, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xaa, 0x5}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x514e, 0x5f, 0x1, 0x3, 0x6d7f}, @local, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x5, 0x8, 0x2d, 0xc}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xb34, 0xe, 0x0, 0x0, {{0x7}, {0xae4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa85, 0x6, {0x93, 'nat\x00', 0x2b, 0x1, "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"}}, @TCA_IPT_TARG={0x4e, 0x6, {0x0, 'filter\x00', 0x6, 0x76b2, "09be888352e1636a6f02d65ff730c94cb88e52c5c37e0cf00fa6f57dbfd25d4cb29eafa4"}}, @TCA_IPT_HOOK={0x8}]}, {0x2a, 0x6, "54efc6bede17512378a571f7be540951ec9929be6a33e95c9a6b2eece042d6d557d3b835f81c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xe64, 0x1f, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x10000000, 0x5, 0x80000001}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0x3, 0x8, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x1, 0x5, 0x9, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xdd8, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x104, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x3, 0x8}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffff9, 0x1, 0x0, 0x3}, 0x27}}]}, {0x9d, 0x6, "40e6c68e7d112a02a3d120cba60409a40e24b035ca0d572e5b2606739a59121eab62f5f81a079d957c3f9bbba270c1cba5e2b1d9ccb8009a91c57909168295be023959764a2da392c5376ed636c11499f091db45bfaed5132047d7f818bfb7c6d2479e86023b317037c3bc9b1e19b61ad6bcef9b7595d974e68e6a03d8c8ad3355ef0a3febd72acc1c4bc91659b59cf5f43379dcf4d21b6e63"}, {0xc}, {0xc, 0x8, {0x3, 0x2632767e6fcd1fa4}}}}, @m_ctinfo={0x104, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd7, 0x6, "85145f3341ee7c816801a1ba58fb564ac84eb6a369ea4768af78c0c3555cc658d4caaa1365752191bf99dbe3d7b93894888c672d180f90b855f546adedf949d51d5a3ea04a1ee2d44bd2bf156a5935fa05b313b1e3b15d7e9f1ec5b660db769b836a7a3134f815d271426f240804a87f718fa9ecc8298486ee5cc85e3989415e16d791f304ad085c66cfcf84c3f92eec72f070a8d0a9469619dc5e94d17bb1867389f00b886aea4c114f903bb369712a9106df102e573d07c9ab8d967819fc5bdb5ad4643b5e9b15a47527a737caa3cc39ce98"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x8c0, 0x18, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1ff, 0x10000000, 0x1, 0xfffffff8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xffffffff, 0x5, 0xc3b9, 0x101}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0x5, 0xfffffffa, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000000, 0x9c9, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x81, 0x5, 0xbca, 0xfffffff9}, 0x2}}]}, {0x7f4, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x70, 0xe, 0x0, 0x0, {{0xd}, {0x4}, {0x3e, 0x6, "609157e44be6ae7698eb8fd59750139a83b2980808d3cd86893a5c54175d9880bbdec7a491e9d8318ba9c4195a8c2a38567afccb8b7780fe8ec8"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x1b0, 0x1, [@m_connmark={0x48, 0x8, 0x0, 0x0, {{0xd}, {0x4}, {0x16, 0x6, "aae97c2687c5dc0d9103fb1c8d70beaf8679"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x98, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x9, 0x10000000, 0x7f, 0x7}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x44, 0x6, "e9068002db361608c78740bad7ece8e156d7e680c474d060f80be0f4fa887c1695cc90985f27e58d287c8dec6268461398848df5a3bbd6c4a7e41c13da57ebf1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xcc, 0x20, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x94c3, 0x4, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3f80}]}, {0x6e, 0x6, "e2fdde4de934f1ebe259883ded80a7adb789f83eb880596203503e0f3933ad3c1650e42b53eed97ec49290e32c8f16b47d77da843def1935facbdba0916e0fc78e539008693776e0173d22362629725e30b1dedf3270d3f964e1b7845d6c274afc9455c4e13e039e8c71"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x27b4}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) close(0xffffffffffffffff) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000140)="ec", 0x1}], 0x1, 0x9, 0x26d0d5f1) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000000)=0x8, 0x4) 12.143622491s ago: executing program 0 (id=1873): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05292a20"], 0x8) 12.05930693s ago: executing program 3 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff00", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) 11.787169387s ago: executing program 1 (id=1877): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000780)={0x5, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 11.65055215s ago: executing program 1 (id=1878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f00000001c0)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 11.509010959s ago: executing program 0 (id=1879): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x8) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4048895, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @empty, 0x401}, 0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x8) 9.369126772s ago: executing program 3 (id=1880): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x2) lseek(r0, 0x7fffdfff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="018008000200010000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) clock_gettime(0x0, &(0x7f0000004c40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/186, 0xba}, {&(0x7f0000001700)=""/199, 0xc7}, {&(0x7f0000001800)=""/192, 0xc0}, {&(0x7f00000018c0)=""/126, 0x7e}, {&(0x7f0000001940)=""/97, 0x61}, {&(0x7f00000019c0)=""/123, 0x7b}], 0x9, &(0x7f0000001b00)=""/39, 0x27}, 0x7}, {{&(0x7f0000001b40)=@ieee802154, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001bc0)=""/101, 0x65}, {&(0x7f0000001c40)=""/101, 0x65}, {&(0x7f0000001cc0)=""/155, 0x9b}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/185, 0xb9}], 0x5, &(0x7f0000002ec0)=""/184, 0xb8}, 0x9}, {{&(0x7f0000002f80)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003000)=""/11, 0xb}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x2, &(0x7f0000004080)=""/123, 0x7b}, 0x9}, {{&(0x7f0000004ec0)=@hci, 0x80, &(0x7f0000004dc0), 0x0, &(0x7f0000004240)=""/155, 0x9b}, 0xf}, {{&(0x7f0000004300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004780)=[{0x0}, {&(0x7f0000004480)=""/91, 0x5b}, {&(0x7f0000004500)=""/7, 0x7}, {&(0x7f0000004540)=""/221, 0xdd}, {&(0x7f0000004740)=""/30, 0x1e}], 0x5, &(0x7f0000004800)=""/212, 0xd4}, 0xd8}, {{&(0x7f0000004900)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000004f40)=""/194, 0xc2}, 0x8}], 0x6, 0x2000, &(0x7f0000004c80)={r2, r3+60000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x14}, 0x0, 0xa, 0x0, 0x0}, 0x63) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102376, 0x18fe8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket(0x2b, 0x1, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r7, 0x0, 0xfffffffffffffda0, 0x80000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xffffffffffffffff}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000129f0300791e5e378eb0000000800100006000000741d7ebe272051f90eff5f970de36634fa916a9e96f3a8c62360c9111d3d80beefe4c51d8ff0154be4b09831fa64949fb478c6c05395cf6781bcea965f8081ab04e609389ebe86be94c2ad86a52141964da0089fd403155abd5907dbbee5461515190900389cdc54e8c0c4a52931403d4b14312b6d01853016a6732d59e442c61a34b2374383"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 9.309234486s ago: executing program 2 (id=1881): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = getpid() syz_usb_connect(0x0, 0x24, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000000)={r2}) dup3(r1, r0, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) syz_io_uring_setup(0x3ba1, &(0x7f000001d140)={0x0, 0x9b36, 0x80, 0x1, 0x18b}, &(0x7f000001b0c0), 0x0, 0x0) 6.725509524s ago: executing program 1 (id=1886): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0106000000000000000009000000180004801300010062726f6164636173742d6c696e6b0000"], 0x2c}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4713080100083a000000010902120005000000ea0804"], 0x0) syz_usb_control_io$printer(r3, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000100)={0x40, 0x31, 0x2, "01ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "450a842de7b24b2d5936605e78a0377b0c21bc4724a559ed99d6cf3478e508484b05d9bf4226bb751986b553df8e41a005c993c0cd4802eef75a"}, 0x45) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, &(0x7f0000000040)=0x1000) r6 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r6, &(0x7f00000004c0)=""/384, 0x180) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x3d0, &(0x7f0000000980)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x39a, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x7f, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e3406070000005c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177304c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b03452dccf81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b104185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xe, "17dcea46805d4809c20547406b18901b0aeff24c0300f3c75dc2d227a82089483b1084743475671545e45eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0038e0c7bcafdbefbb5fb8a28534e9bbe64f372556b2c6f7c8ce924"}, {0x21, 0x7, "b8a3e100908f61640000006f00fec0ffff00000000000000ff0bc0fe000000000000000002000002d9a0274500040000000013eaf40000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3c, 0xd, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) 6.23824095s ago: executing program 0 (id=1888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6.01575535s ago: executing program 0 (id=1890): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff00", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1], 0x0) 5.698684714s ago: executing program 4 (id=1891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/131, 0x83}], 0x1, 0x98ca, 0x108000) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 5.695267184s ago: executing program 3 (id=1892): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xf, 0x1, '/dev/vsock\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4040000) sendto$packet(r0, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r3, 0x1, 0x41, 0x6, @remote}, 0x14) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000340)={0x2, 0x8d, "2206e25be72bf50632bf821c7a9a9448af6ce0c262f557b959a6bc6373e48672a4bdd70bd2bfbe4ecafbb51509d4100810a96cc65968b9a4b48ec4ad2120126d0df0eb089cda6225f37b493adb2712460743418ff97a9f19f1e466a4b2f01256917b5f0ff42c25c33f2ec386f6c632066ae55347d664395928c734d2fb5eef69b189ac788a0995ba2ac5507b90"}) 5.595298864s ago: executing program 3 (id=1893): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e23, @local}}}, 0x88) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r1, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8cd", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="9daf5194d6ff2fb71e455a389b8ead15aebc12ea8ead35a3b45cb2f2603e607dfe3f1228fb0b1cd1968a9bcd1badfa49059ce704fa1228343bfe3f3600c5000000000000d09c5c82111202b07c1c755457049ad0ebcd70cbaa678adaa17831266adfc9fa04f5093b8c9fd353b714b22e5454084aa316bd17dbadd5a49b0dd3b073051bb901212a764a56d76d2ff9747d5cad8712e20378bbbcca075b5564a0b50df37294931900f48618135effbb4f2392455f6451fd556b02e166b774d78b8f419eebd9998b8d428dc4b2fcb57503d0eeba1a3280f447ccf7812d1895b6479c7059fe50fff0e5c7dcf0768191e9bcb9c2b1e58427a93a7396d404a4116c8cd5e00456979d2dce4347f00189da68317adf15ea9e728f1fb93db495bd754b84cfc923a1428c97643f05cf00000000000000000000000000005e2cd2cd53a53fab4d50415b7fc9634782", 0x149}], 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 4.597111163s ago: executing program 4 (id=1894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ptype\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000100)=""/131, 0x83}], 0x1, 0x98ca, 0x108000) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3.526687488s ago: executing program 4 (id=1895): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x90) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) r8 = fanotify_init(0x200, 0x40000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r8, 0x101, 0x48001051, r9, 0x0) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000c85000)) readv(r9, 0x0, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r14) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x14, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{0x0}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0xc0, &(0x7f0000000180)="ddc61b61606f00f46798e0fdfd759bbfc5bc0ff6701062feba132b0efc0dadabdaca5ce152701fcce73fe2480522fce941978055c37156e10bc86f0f5d3407027cc773693eca55231840b5bc2b74a964acfd8ace0d204a8d2f28be4d73e2dfac8f2f120f1b543e7414d46e069ec83976b9aed44d5397f889a3382e0951e8bf3c42039b3c6202a69bde30f5278fb96ea1f9428fc120b59ec65b6330a59ac84e4a83972a69caaaa51f2acbfd87c5d55893fafd249e04c534bca60a8be013ac1405"}}}) io_uring_enter(r2, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 3.466933804s ago: executing program 0 (id=1896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f00000001c0)) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) 3.319726528s ago: executing program 1 (id=1897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@gettfilter={0x2c, 0x2e, 0x20, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x9, 0x8}, {0xfff1, 0xfff2}, {0x5, 0xf}}, [{0x8, 0xb, 0xffffffa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x8050) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xfffc, @empty}}}, 0x108) (async) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async) close(r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xe, 0x3}, {0xb, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f00000004c0)={'pimreg0\x00', @multicast}) execveat(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000180)='route\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='/dev/net/tun\x00']}, &(0x7f0000000380)={[&(0x7f00000002c0)='route\x00', &(0x7f0000000340)='syzkaller0\x00']}, 0x400) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001900010000000000000000000a0000000000000000000000140005"], 0x3c}}, 0x0) (async, rerun: 32) ioctl$XFS_IOC_GETBMAPX(r7, 0xc0205838, &(0x7f0000000480)={0x5, 0x793, 0x0, 0xffffffff, 0xc04, 0x1, 0x3}) (async, rerun: 32) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009000100000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000140a01080000000000000000030000071400080048d792932553770c491b955ac8c4b1c80900010073797a30000000000900010073797a30000000000c641c00064000000002000000020800034000000008140000001100010000000000000000000100000a"], 0x7c}}, 0x14) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x7, 0x4}, {0x0, 0x9}, {0xfff2, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040054) 3.067216142s ago: executing program 2 (id=1898): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) dup(r0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x47, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000019380)=@base={0x20, 0x1000, 0x4, 0x800, 0x2000, 0xffffffffffffffff, 0x12000000}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000280)={0x3, r4, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) socket(0x10, 0x3, 0x0) r5 = syz_open_dev$MSR(0x0, 0x32, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000100)) 3.058757505s ago: executing program 4 (id=1899): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000101c1b0c0a00000000000109027453010000b0010400580903000200092109000601222c00090581030800100400fb27bf193b178a7a4b46e718dd930d3865ddaec2"], 0x0) syz_usb_connect$midi(0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x75, 0x7, 0xe, 0x10, 0x9}, 0x47, &(0x7f0000000280)=ANY=[@ANYBLOB="050f4700050b10010c400005690100d303100b0c100aeae00000000f1e0000141004046e9adf4ac0468a9fdece2f697760cbeb141004937bef122ee14a910d280243f28f3a"]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x27bc, 0x30, 0x1, 0x0, 0x2, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x3ff, 0x4, 0xe5ce, 0x8cf}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}, {0x25a0, 0x1, [@m_nat={0xcc, 0x1a, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x200, 0x1, 0xc3, 0x7a4}, @local, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x0, 0xaa, 0x5}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x514e, 0x5f, 0x1, 0x3, 0x6d7f}, @local, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10001, 0x5, 0x8, 0x2d, 0xc}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xb34, 0xe, 0x0, 0x0, {{0x7}, {0xae4, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa85, 0x6, {0x93, 'nat\x00', 0x2b, 0x1, "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"}}, @TCA_IPT_TARG={0x4e, 0x6, {0x0, 'filter\x00', 0x6, 0x76b2, "09be888352e1636a6f02d65ff730c94cb88e52c5c37e0cf00fa6f57dbfd25d4cb29eafa4"}}, @TCA_IPT_HOOK={0x8}]}, {0x2a, 0x6, "54efc6bede17512378a571f7be540951ec9929be6a33e95c9a6b2eece042d6d557d3b835f81c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0xe64, 0x1f, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x10000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x6, 0x10000000, 0x5, 0x80000001}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x9, 0x3, 0x8, 0x6}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x1, 0x5, 0x9, 0x9}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0xdd8, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x104, 0x20, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x3, 0x8}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffffff9, 0x1, 0x0, 0x3}, 0x27}}]}, {0x9d, 0x6, "40e6c68e7d112a02a3d120cba60409a40e24b035ca0d572e5b2606739a59121eab62f5f81a079d957c3f9bbba270c1cba5e2b1d9ccb8009a91c57909168295be023959764a2da392c5376ed636c11499f091db45bfaed5132047d7f818bfb7c6d2479e86023b317037c3bc9b1e19b61ad6bcef9b7595d974e68e6a03d8c8ad3355ef0a3febd72acc1c4bc91659b59cf5f43379dcf4d21b6e63"}, {0xc}, {0xc, 0x8, {0x3, 0x2632767e6fcd1fa4}}}}, @m_ctinfo={0x104, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd7, 0x6, "85145f3341ee7c816801a1ba58fb564ac84eb6a369ea4768af78c0c3555cc658d4caaa1365752191bf99dbe3d7b93894888c672d180f90b855f546adedf949d51d5a3ea04a1ee2d44bd2bf156a5935fa05b313b1e3b15d7e9f1ec5b660db769b836a7a3134f815d271426f240804a87f718fa9ecc8298486ee5cc85e3989415e16d791f304ad085c66cfcf84c3f92eec72f070a8d0a9469619dc5e94d17bb1867389f00b886aea4c114f903bb369712a9106df102e573d07c9ab8d967819fc5bdb5ad4643b5e9b15a47527a737caa3cc39ce98"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x8c0, 0x18, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1ff, 0x10000000, 0x1, 0xfffffff8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xffffffff, 0x5, 0xc3b9, 0x101}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x4, 0x5, 0xfffffffa, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0x20000000, 0x9c9, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x81, 0x5, 0xbca, 0xfffffff9}, 0x2}}]}, {0x7f4, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x70, 0xe, 0x0, 0x0, {{0xd}, {0x4}, {0x3e, 0x6, "609157e44be6ae7698eb8fd59750139a83b2980808d3cd86893a5c54175d9880bbdec7a491e9d8318ba9c4195a8c2a38567afccb8b7780fe8ec8"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x1b8, 0x1, [@m_connmark={0x50, 0x8, 0x0, 0x0, {{0xd}, {0x4}, {0x1f, 0x6, "aae97c2687c5dc0d9103fb1c8d70beaf867984af09a16260834264"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x98, 0x1e, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x9, 0x10000000, 0x7f, 0x7}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x44, 0x6, "e9068002db361608c78740bad7ece8e156d7e680c474d060f80be0f4fa887c1695cc90985f27e58d287c8dec6268461398848df5a3bbd6c4a7e41c13da57ebf1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xcc, 0x20, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x94c3, 0x4, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3f80}]}, {0x6e, 0x6, "e2fdde4de934f1ebe259883ded80a7adb789f83eb880596203503e0f3933ad3c1650e42b53eed97ec49290e32c8f16b47d77da843def1935facbdba0916e0fc78e539008693776e0173d22362629725e30b1dedf3270d3f964e1b7845d6c274afc9455c4e13e039e8c71"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x27bc}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) close(0xffffffffffffffff) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000140)="ec", 0x1}], 0x1, 0x9, 0x26d0d5f1) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000000)=0x8, 0x4) 2.875752252s ago: executing program 1 (id=1900): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="08f49a00001a7cf9ebbf40950580c2a6888f50392c81c219111167f42bba989928b8505e158c95bd0b4d481565c443edac1ea7facd", 0xffffffffffffff91}, {0x0, 0xfffffffffffffe38}], 0x2d3) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$audion(&(0x7f0000000180), 0xfffffbff, 0x800) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0xffff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x23, 0x6b, 0x25, 0x10, 0x681, 0x10, 0x525e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x64, 0x99, 0x10, 0x70, "", [{{0x9, 0x4, 0x7c, 0x66, 0x1, 0xa, 0x65, 0x6d, 0xf2, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x0, 0x6}}]}}]}}]}}, 0x0) 2.15876795s ago: executing program 0 (id=1901): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x41, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x2404c801}, 0x4000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) epoll_create1(0x0) dup(r5) r6 = epoll_create1(0x80000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000001980)=[{{0x0, 0x20, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11, 0x1000000}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)={0xc000200b}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000001, 0x101a82) ioctl$VIDIOC_OVERLAY(r10, 0xc0405627, &(0x7f0000000040)=0xffffff94) getpid() r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0x2}]}) epoll_pwait(r6, &(0x7f0000000540)=[{}], 0x1, 0x4000a, 0x0, 0x0) r12 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) 1.561992235s ago: executing program 3 (id=1902): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x2) lseek(r0, 0x7fffdfff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="018008000200010000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) clock_gettime(0x0, &(0x7f0000004c40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004ac0)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/186, 0xba}, {&(0x7f0000001700)=""/199, 0xc7}, {&(0x7f0000001800)=""/192, 0xc0}, {&(0x7f00000018c0)=""/126, 0x7e}, {&(0x7f0000001940)=""/97, 0x61}, {&(0x7f00000019c0)=""/123, 0x7b}], 0x9, &(0x7f0000001b00)=""/39, 0x27}, 0x7}, {{&(0x7f0000001b40)=@ieee802154, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001bc0)=""/101, 0x65}, {&(0x7f0000001c40)=""/101, 0x65}, {&(0x7f0000001cc0)=""/155, 0x9b}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/185, 0xb9}], 0x5, &(0x7f0000002ec0)=""/184, 0xb8}, 0x9}, {{&(0x7f0000002f80)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003000)=""/11, 0xb}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x2, &(0x7f0000004080)=""/123, 0x7b}, 0x9}, {{&(0x7f0000004ec0)=@hci, 0x80, &(0x7f0000004dc0)}, 0xf}, {{&(0x7f0000004300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004780)=[{0x0}, {&(0x7f0000004480)=""/91, 0x5b}, {&(0x7f0000004500)=""/7, 0x7}, {&(0x7f0000004540)=""/221, 0xdd}, {&(0x7f0000004740)=""/30, 0x1e}], 0x5, &(0x7f0000004800)=""/212, 0xd4}, 0xd8}, {{&(0x7f0000004900)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000004f40)=""/194, 0xc2}, 0x8}], 0x6, 0x2000, &(0x7f0000004c80)={r2, r3+60000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x14}, 0x0, 0xa, 0x0, 0x0}, 0x63) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102376, 0x18fe8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket(0x2b, 0x1, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$vsock_stream(r7, 0x0, 0xfffffffffffffda0, 0x80000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0xffffffffffffffff}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r9, r8, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000004e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000129f0300791e5e378eb0000000800100006000000741d7ebe272051f90eff5f970de36634fa916a9e96f3a8c62360c9111d3d80beefe4c51d8ff0154be4b09831fa64949fb478c6c05395cf6781bcea965f8081ab04e609389ebe86be94c2ad86a52141964da0089fd403155abd5907dbbee5461515190900389cdc54e8c0c4a52931403d4b14312b6d01853016a6732d59e442c61a34b2374383"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.025796557s ago: executing program 4 (id=1903): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20045091}, 0x40044) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) 982.226437ms ago: executing program 3 (id=1904): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x1, 0x5003) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f0000000080)="1c321f2d0f3a48ce6a7fc5ab631b43", &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x13be, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x9, [0x3, 0x8, 0x3000, 0x2, 0x9, 0x0, 0x0, 0x5, 0x2]}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 0s ago: executing program 4 (id=1905): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0xf, 0x7, 0x40000000010015, 0x10001, 0x9, 0x6, 0xcf, 0x0, 0x1800000000000000, 0x7ffffffffffffffc, 0x6, 0x82, 0x5, 0xe9c, 0x80], 0x0, 0x1019c4}) ioctl$KVM_RUN(r3, 0xae80, 0x15) kernel console output (not intermixed with test programs): e 0 has no altsetting 0 [ 578.486246][ T7233] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 578.495827][ T7233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.504302][ T7233] usb 4-1: Product: syz [ 578.508656][ T7233] usb 4-1: Manufacturer: syz [ 578.513422][ T7233] usb 4-1: SerialNumber: syz [ 578.584465][ T7233] usb 4-1: config 0 descriptor?? [ 578.593491][T11249] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 578.632860][ T7233] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected [ 578.664552][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 578.675095][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 578.683185][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 578.699341][ T7233] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 578.709795][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82 [ 578.721587][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 578.734405][ T7233] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 578.819841][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 578.828071][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 578.881213][ T7233] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 578.909751][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84 [ 579.078393][ T7233] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 579.165157][ T7233] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 579.597948][T11271] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 579.639653][T11271] syzkaller0: entered promiscuous mode [ 579.667819][T11271] syzkaller0: entered allmulticast mode [ 579.787776][T11261] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.056055][T11282] netlink: 'syz.4.1443': attribute type 4 has an invalid length. [ 580.066487][T11282] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1443'. [ 580.079209][T11282] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 580.374689][T11291] netlink: 'syz.1.1446': attribute type 4 has an invalid length. [ 580.410902][T11291] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1446'. [ 580.429360][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.442553][T11291] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 580.498757][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.855050][ T7233] usb 4-1: USB disconnect, device number 49 [ 581.890726][ T7233] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 581.973293][ T7233] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 582.113380][ T7233] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 582.178874][ T7233] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 582.244817][ T7233] keyspan 4-1:0.0: device disconnected [ 582.394569][T11308] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 582.405231][T11308] SELinux: failed to load policy [ 583.826419][T11333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.837584][T11333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.900103][ T7224] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 583.924404][T11336] netlink: 'syz.3.1462': attribute type 4 has an invalid length. [ 583.932350][T11336] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1462'. [ 583.941842][T11336] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 583.970398][ T5342] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 584.050143][ T7224] usb 3-1: Using ep0 maxpacket: 16 [ 584.058052][ T7224] usb 3-1: config index 0 descriptor too short (expected 21364, got 36) [ 584.071167][ T7224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.098528][ T7224] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.116660][ T7224] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 584.135703][ T5342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.145950][ T7224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.160494][ T5342] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 584.173102][ T7224] usb 3-1: config 0 descriptor?? [ 584.191883][ T5342] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 584.203586][ T5342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.229505][ T5342] usb 2-1: config 0 descriptor?? [ 584.262698][ T5342] gspca_main: spca561-2.14.0 probing abcd:cdee [ 584.536511][ T7233] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 584.540274][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 584.765934][ T5342] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 584.808247][ T5342] usb 2-1: USB disconnect, device number 81 [ 584.920071][ T7233] usb 5-1: Using ep0 maxpacket: 16 [ 584.931280][ T7233] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 584.944761][ T7233] usb 5-1: config 0 has no interface number 0 [ 584.961262][ T7233] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 584.979934][ T7233] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 584.993751][ T7233] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 585.003175][ T7233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.011372][ T7233] usb 5-1: Product: syz [ 585.015727][ T7233] usb 5-1: Manufacturer: syz [ 585.021461][ T7233] usb 5-1: SerialNumber: syz [ 585.089443][ T5843] usb 3-1: USB disconnect, device number 73 [ 585.107582][ T7233] usb 5-1: config 0 descriptor?? [ 585.117565][T11338] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 585.127199][T11338] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 585.336441][T11338] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 585.344572][T11338] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 585.382878][T11351] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 585.393341][T11351] SELinux: failed to load policy [ 585.490491][ T29] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 585.553959][ T7233] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 585.620156][ T29] usb 4-1: device descriptor read/64, error -71 [ 585.930557][ T29] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 585.963030][ T7233] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 585.993279][ T7233] asix 5-1:0.34: probe with driver asix failed with error -61 [ 586.154369][ T29] usb 4-1: device descriptor read/64, error -71 [ 586.260330][T11360] binder: 11356:11360 ioctl c00c620f 200000000000 returned -22 [ 586.402706][ T29] usb usb4-port1: attempt power cycle [ 586.770235][ T29] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 586.826118][ T29] usb 4-1: device descriptor read/8, error -71 [ 587.090035][ T29] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 587.120889][ T29] usb 4-1: device descriptor read/8, error -71 [ 587.244124][ T29] usb usb4-port1: unable to enumerate USB device [ 587.290839][ T5342] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 587.526003][ T7224] usb 5-1: USB disconnect, device number 61 [ 587.600076][ T5342] usb 2-1: device descriptor read/64, error -71 [ 587.623495][T11369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.840058][ T5342] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 587.952334][ T7224] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 587.987811][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1475'. [ 588.006379][ T30] audit: type=1400 audit(1785354970.172:795): avc: denied { setopt } for pid=11376 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 588.027426][ T5342] usb 2-1: device descriptor read/64, error -71 [ 588.102049][ T7224] usb 5-1: device descriptor read/64, error -71 [ 588.150652][ T5342] usb usb2-port1: attempt power cycle [ 588.350561][ T7224] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 588.380176][ T5815] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 588.509132][ T7224] usb 5-1: device descriptor read/64, error -71 [ 588.570113][ T5342] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 588.583494][ T5815] usb 3-1: config 6 has an invalid interface number: 96 but max is 0 [ 588.593054][ T5815] usb 3-1: config 6 has no interface number 0 [ 588.599329][ T5342] usb 2-1: device descriptor read/8, error -71 [ 588.698491][ T7224] usb usb5-port1: attempt power cycle [ 589.009195][ T5342] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 589.031575][ T5342] usb 2-1: device descriptor read/8, error -71 [ 590.110996][ T7224] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 590.118985][ T5342] usb usb2-port1: unable to enumerate USB device [ 590.152186][ T7224] usb 5-1: device descriptor read/8, error -71 [ 590.410072][ T7224] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 590.452342][ T7224] usb 5-1: device descriptor read/8, error -71 [ 590.487249][T11397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.496000][T11397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.570094][ T5342] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 590.590295][ T7224] usb usb5-port1: unable to enumerate USB device [ 590.800428][T11400] overlayfs: missing 'workdir' [ 590.806827][ T5342] usb 4-1: device descriptor read/64, error -71 [ 591.071721][T11404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.080124][ T5342] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 591.081334][T11404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.140596][ T5815] usb 3-1: New USB device found, idVendor=0cad, idProduct=9013, bcdDevice=43.3e [ 591.150048][ T29] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 591.154559][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.169697][ T5815] usb 3-1: can't set config #6, error -71 [ 591.184515][ T5815] usb 3-1: USB disconnect, device number 74 [ 591.210081][ T5342] usb 4-1: device descriptor read/64, error -71 [ 591.231913][ T30] audit: type=1400 audit(1785354973.402:796): avc: denied { write } for pid=11403 comm="syz.0.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 591.310126][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 591.317247][ T29] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 591.325990][ T29] usb 2-1: config 0 has no interface number 0 [ 591.332257][ T29] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 591.332976][ T5342] usb usb4-port1: attempt power cycle [ 591.342571][ T29] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 591.360413][ T29] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 591.369930][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.378097][ T29] usb 2-1: Product: syz [ 591.382448][ T29] usb 2-1: Manufacturer: syz [ 591.387280][ T29] usb 2-1: SerialNumber: syz [ 591.393659][ T29] usb 2-1: config 0 descriptor?? [ 591.399121][T11402] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 591.406712][T11402] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 591.580109][ T5815] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 591.619659][T11402] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 591.631892][T11402] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 591.770372][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 591.778753][ T5815] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 591.788819][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.796959][ T5815] usb 3-1: Product: syz [ 591.801305][ T5815] usb 3-1: Manufacturer: syz [ 591.805917][ T5815] usb 3-1: SerialNumber: syz [ 591.813844][ T5815] usb 3-1: config 0 descriptor?? [ 591.830478][ T5815] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 591.846370][ T29] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 591.858664][ T5843] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 592.000102][ T5843] usb 5-1: device descriptor read/64, error -71 [ 592.259814][ T29] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 592.270036][ T5843] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 592.270660][ T5342] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 592.277799][ T29] asix 2-1:0.34: probe with driver asix failed with error -61 [ 592.420076][ T5843] usb 5-1: device descriptor read/64, error -71 [ 592.420098][ T5342] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 592.450583][ T5342] usb 4-1: Using ep0 maxpacket: 8 [ 592.457011][ T5342] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 592.465252][ T5342] usb 4-1: config 0 has no interface number 0 [ 592.471928][ T5342] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 592.482844][ T5342] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 592.494494][ T5342] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 592.505534][ T5342] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 592.518572][ T5342] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 592.527694][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.531910][ T5843] usb usb5-port1: attempt power cycle [ 592.541392][ T5342] usb 4-1: config 0 descriptor?? [ 592.559164][ T5342] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 592.839625][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.848496][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.857866][ T29] usb 3-1: USB disconnect, device number 75 [ 592.880074][ T5843] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 592.901822][ T5843] usb 5-1: device descriptor read/8, error -71 [ 593.140141][ T5843] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 593.160585][ T5843] usb 5-1: device descriptor read/8, error -71 [ 593.270358][ T5843] usb usb5-port1: unable to enumerate USB device [ 593.323401][ T5815] usb 4-1: USB disconnect, device number 57 [ 593.336327][ T5815] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 593.579740][ T5615] Bluetooth: hci3: unexpected event for opcode 0x202d [ 593.819819][ T29] usb 2-1: USB disconnect, device number 86 [ 593.975674][ T5843] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 594.106841][T11441] Invalid ELF header magic: != ELF [ 594.136912][T11441] gadgetfs: bound to dummy_udc driver [ 594.483693][ T5843] usb 4-1: config 100 has an invalid interface number: 124 but max is 0 [ 594.507609][ T5843] usb 4-1: config 100 has no interface number 0 [ 594.633884][ T5843] usb 4-1: config 100 interface 124 has no altsetting 0 [ 594.654423][ T5843] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 594.946168][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.993831][ T5843] usb 4-1: Product: syz [ 595.100064][ T5843] usb 4-1: Manufacturer: syz [ 595.110968][ T5843] usb 4-1: SerialNumber: syz [ 596.294993][ T5843] idmouse 4-1:100.124: Unable to find bulk-in endpoint. [ 596.303854][ T5342] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 596.347413][ T5843] usb 4-1: USB disconnect, device number 58 [ 596.410494][T11445] ieee802154 phy0 wpan0: encryption failed: -22 [ 596.540064][ T5342] usb 5-1: Using ep0 maxpacket: 16 [ 596.550309][ T5342] usb 5-1: config index 0 descriptor too short (expected 21364, got 36) [ 596.570271][ T5342] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.582071][ T5342] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 596.593808][ T5342] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 596.623940][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.660052][ T5815] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 596.676755][ T5342] usb 5-1: config 0 descriptor?? [ 596.798624][T11448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.807302][T11448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.830083][ T5815] usb 3-1: device descriptor read/64, error -71 [ 596.939778][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.970449][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.196582][T11463] overlayfs: failed to resolve './file1/file0': -2 [ 597.255358][ T5815] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 597.366956][ T5843] usb 5-1: USB disconnect, device number 70 [ 597.390549][ T5815] usb 3-1: device descriptor read/64, error -71 [ 597.437830][T11468] vivid-007: ================= START STATUS ================= [ 597.445631][T11468] vivid-007: Enable Output Cropping: true [ 597.453577][T11468] vivid-007: Enable Output Composing: true [ 597.461736][T11468] vivid-007: Enable Output Scaler: true [ 597.467468][T11468] vivid-007: Tx RGB Quantization Range: Automatic [ 597.475166][T11468] vivid-007: Transmit Mode: HDMI [ 597.480497][T11468] vivid-007: Hotplug Present: 0x00000000 [ 597.487907][T11468] vivid-007: RxSense Present: 0x00000000 [ 597.495437][T11468] vivid-007: EDID Present: 0x00000000 [ 597.501813][T11468] vivid-007: ================== END STATUS ================== [ 597.511187][T11470] netlink: 'syz.3.1504': attribute type 4 has an invalid length. [ 597.519410][ T5815] usb usb3-port1: attempt power cycle [ 597.519568][T11470] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1504'. [ 597.554548][T11470] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 597.923200][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 597.952473][T11478] FAULT_INJECTION: forcing a failure. [ 597.952473][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 598.008901][T11478] CPU: 0 UID: 0 PID: 11478 Comm: syz.0.1508 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.008932][T11478] Tainted: [L]=SOFTLOCKUP [ 598.008938][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 598.008944][T11478] Call Trace: [ 598.008949][T11478] [ 598.008956][T11478] dump_stack_lvl+0x100/0x190 [ 598.008975][T11478] should_fail_ex.cold+0x5/0xa [ 598.008989][T11478] should_failslab+0xc2/0x120 [ 598.009005][T11478] __kmalloc_noprof+0xfc/0x820 [ 598.009019][T11478] ? sk_prot_alloc+0x10b/0x2a0 [ 598.009039][T11478] sk_prot_alloc+0x10b/0x2a0 [ 598.009056][T11478] sk_alloc+0x36/0xe80 [ 598.009070][T11478] bpf_prog_test_run_skb+0x4db/0x3540 [ 598.009093][T11478] ? find_held_lock+0x2b/0x80 [ 598.009111][T11478] ? __fget_files+0x130/0x3d0 [ 598.009126][T11478] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 598.009146][T11478] ? fput+0x79/0x100 [ 598.009161][T11478] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 598.009179][T11478] __sys_bpf+0x2a12/0x4e80 [ 598.009195][T11478] ? __pfx___sys_bpf+0x10/0x10 [ 598.009207][T11478] ? find_held_lock+0x2b/0x80 [ 598.009224][T11478] ? get_pid_task+0xfc/0x250 [ 598.009241][T11478] ? get_pid_task+0xfc/0x250 [ 598.009263][T11478] ? find_held_lock+0x2b/0x80 [ 598.009286][T11478] ? rcu_read_lock_any_held+0x6a/0xa0 [ 598.009297][T11478] ? find_held_lock+0x2b/0x80 [ 598.009314][T11478] ? ksys_write+0x190/0x250 [ 598.009331][T11478] ? ksys_write+0x190/0x250 [ 598.009358][T11478] ? fput+0x79/0x100 [ 598.009374][T11478] ? __x64_sys_bpf+0xce/0x140 [ 598.009384][T11478] __x64_sys_bpf+0xce/0x140 [ 598.009396][T11478] ? do_syscall_64+0x90/0x870 [ 598.009410][T11478] do_syscall_64+0x115/0x870 [ 598.009422][T11478] ? clear_bhb_loop+0x40/0x90 [ 598.009437][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.009448][T11478] RIP: 0033:0x7f301a59de99 [ 598.009459][T11478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.009474][T11478] RSP: 002b:00007f301b545028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.009493][T11478] RAX: ffffffffffffffda RBX: 00007f301a825fa0 RCX: 00007f301a59de99 [ 598.009505][T11478] RDX: 0000000000000048 RSI: 0000200000002c00 RDI: 000000000000000a [ 598.009516][T11478] RBP: 00007f301b545090 R08: 0000000000000000 R09: 0000000000000000 [ 598.009524][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.009530][T11478] R13: 00007f301a826038 R14: 00007f301a825fa0 R15: 00007ffcb4a08cf8 [ 598.009544][T11478] [ 598.536307][T11479] team0: Port device team_slave_0 removed [ 598.771426][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.866883][T11494] Invalid ELF header magic: != ELF [ 599.296514][T11494] gadgetfs: bound to dummy_udc driver [ 599.308043][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.353476][ T30] audit: type=1400 audit(1785354981.522:797): avc: denied { listen } for pid=11496 comm="syz.3.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 600.690319][ T5342] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 600.759555][T11508] binder: 11505:11508 ioctl c00c620f 200000000000 returned -22 [ 600.980409][ T5342] usb 4-1: Using ep0 maxpacket: 32 [ 601.001823][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.022040][ T5342] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 601.059499][ T5342] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 601.076795][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.094167][ T5342] usb 4-1: Product: syz [ 601.108429][ T5342] usb 4-1: Manufacturer: syz [ 601.120207][ T5342] usb 4-1: SerialNumber: syz [ 601.145284][ T5342] usb 4-1: config 0 descriptor?? [ 601.146490][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1518'. [ 601.522548][ T5843] usb 4-1: USB disconnect, device number 59 [ 602.329140][T11516] ieee802154 phy0 wpan0: encryption failed: -22 [ 602.347489][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.356301][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.956076][T11539] syzkaller0: entered promiscuous mode [ 604.086472][T11539] syzkaller0: entered allmulticast mode [ 604.123202][T11539] xt_bpf: check failed: parse error [ 604.196121][T11546] Invalid ELF header magic: != ELF [ 604.221142][T11546] gadgetfs: bound to dummy_udc driver [ 605.675491][T11551] netlink: 'syz.2.1524': attribute type 4 has an invalid length. [ 605.684857][T11551] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1524'. [ 605.707998][T11551] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 605.766752][T11553] overlayfs: failed to resolve 'dont_appraise': -2 [ 605.845600][T11555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.891387][T11555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.971580][ T30] audit: type=1400 audit(1785354988.142:798): avc: denied { getopt } for pid=11556 comm="syz.3.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 606.030309][ T5843] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 606.220300][ T5843] usb 5-1: Using ep0 maxpacket: 32 [ 606.227844][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.238453][ T5843] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 606.250582][ T5843] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 606.261439][ T5843] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.273587][ T5843] usb 5-1: config 1 interface 1 has no altsetting 0 [ 606.284761][ T5843] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.294220][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.314880][ T5843] usb 5-1: Product: syz [ 606.324461][ T5843] usb 5-1: Manufacturer: syz [ 606.334647][ T5843] usb 5-1: SerialNumber: syz [ 606.340612][ T29] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 606.365711][ T5843] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 606.385112][ T5843] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 606.501936][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.523104][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.540704][ T29] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 606.550311][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 606.558659][ T29] usb 4-1: SerialNumber: syz [ 606.598607][T11565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.654265][T11565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.692175][ T5843] usb 5-1: USB disconnect, device number 71 [ 606.837050][ T29] usb 4-1: 0:2 : does not exist [ 606.848475][ T29] usb 4-1: unit 5 not found! [ 606.914126][ T29] usb 4-1: USB disconnect, device number 60 [ 606.949522][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 608.576037][T11591] Invalid ELF header magic: != ELF [ 608.600973][T11591] gadgetfs: bound to dummy_udc driver [ 608.703690][T11592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.786812][T11592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.861662][ T29] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 608.912459][ C1] gadgetfs: connected [ 608.917654][ T29] gadgetfs: disconnected [ 608.919713][ T5815] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 608.972445][T11584] ftl_cs: FTL header not found. [ 609.099371][ C1] gadgetfs: connected [ 609.107194][ T29] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 609.158125][T11580] gadgetfs: suspended from state 3 [ 609.163514][T11580] gadgetfs: disconnected [ 609.501956][ T29] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 609.699511][ T5815] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.714014][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.714980][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.762781][ T5815] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 609.766714][ T29] usb 2-1: can't set config #1, error -71 [ 609.922860][ T5815] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 609.938588][ T5815] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 609.957423][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 609.967394][ T5815] usb 4-1: Product: syz [ 609.988164][ T5815] usb 4-1: Manufacturer: syz [ 609.990775][ T29] usb 2-1: USB disconnect, device number 89 [ 610.053940][ T5815] usb_debug 4-1:1.0: debug converter detected [ 610.088238][ T5815] usb 4-1: debug converter now attached to ttyUSB0 [ 610.101048][T11584] block2mtd: mtd1: [/dev/loop0] erase_size = 1KiB [1310] [ 610.233650][ T30] audit: type=1400 audit(1785354992.402:799): avc: denied { cmd } for pid=11608 comm="iou-wrk-11609" path="socket:[37420]" dev="sockfs" ino=37420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 610.509420][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1538'. [ 610.538610][T11579] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1538'. [ 610.600153][ T29] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 610.674314][ T5342] usb 4-1: USB disconnect, device number 61 [ 610.712062][ T5342] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 610.737661][ T5342] usb_debug 4-1:1.0: device disconnected [ 610.770325][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 610.777809][ T29] usb 2-1: unable to get BOS descriptor or descriptor too short [ 610.789870][ T29] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 610.800154][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.826209][ T29] usb 2-1: config 0 has no interface number 0 [ 610.834732][ T29] usb 2-1: config 0 interface 49 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.840420][ T5815] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 610.848485][ T29] usb 2-1: config 0 interface 49 has no altsetting 0 [ 610.866375][ T29] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 610.876377][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.894133][ T5843] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 610.910517][ T29] usb 2-1: Product: syz [ 610.914888][ T29] usb 2-1: Manufacturer: syz [ 610.919602][ T29] usb 2-1: SerialNumber: syz [ 610.932731][ T29] usb 2-1: config 0 descriptor?? [ 611.030218][ T5815] usb 5-1: device descriptor read/64, error -71 [ 611.059629][ T5843] usb 3-1: device descriptor read/64, error -71 [ 611.069015][ T30] audit: type=1400 audit(1785354993.232:800): avc: denied { write } for pid=11620 comm="syz.0.1548" name="functions" dev="configfs" ino=10612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 611.131607][ T30] audit: type=1400 audit(1785354993.272:801): avc: denied { write } for pid=11620 comm="syz.0.1548" name="extensions" dev="configfs" ino=37450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 611.169288][ T29] rtsx_usb 2-1:0.49: probe with driver rtsx_usb failed with error -22 [ 611.196262][ T29] usb 2-1: USB disconnect, device number 90 [ 611.270161][ T5815] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 611.350076][ T5843] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 611.500256][ T5843] usb 3-1: device descriptor read/64, error -71 [ 611.522263][T11628] netlink: 'syz.0.1550': attribute type 4 has an invalid length. [ 611.547381][T11628] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1550'. [ 611.557889][T11628] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 611.621323][ T5843] usb usb3-port1: attempt power cycle [ 611.991263][ T5843] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 612.298353][ T5843] usb 3-1: device descriptor read/8, error -71 [ 612.470060][ T5815] usb 5-1: device descriptor read/64, error -71 [ 612.570362][ T5843] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 612.581758][ T5815] usb usb5-port1: attempt power cycle [ 612.810272][ T30] audit: type=1800 audit(1785354994.612:802): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1549" name="bus" dev="ramfs" ino=36480 res=0 errno=0 [ 612.841852][ T5843] usb 3-1: device descriptor read/8, error -71 [ 613.000266][ T5843] usb usb3-port1: unable to enumerate USB device [ 613.401895][T11648] SELinux: policydb magic number 0x13 does not match expected magic number 0xf97cff8c [ 613.411932][T11648] SELinux: failed to load policy [ 613.420211][ T7224] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 613.450267][ T5843] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 613.618368][ T5843] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 613.639453][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.686527][ T5843] usb 3-1: Product: syz [ 613.706368][ T5843] usb 3-1: Manufacturer: syz [ 613.725680][ T5843] usb 3-1: SerialNumber: syz [ 613.786237][ T5843] usb 3-1: config 0 descriptor?? [ 614.090637][T11644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.185175][T11644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.309602][ T5843] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 614.483868][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202d [ 614.493395][T11644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 614.516434][T11644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 614.559238][T11644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 614.599130][T11644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 614.640281][ T7224] usb 2-1: Using ep0 maxpacket: 16 [ 614.649549][T11644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 614.672085][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202a [ 614.677107][ T7224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.714235][T11644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 615.293480][T11665] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 615.361766][T11644] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 615.419290][ T5843] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 615.454384][T11663] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 615.536982][ T7224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.546905][ T7224] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 615.556042][ T7224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.566159][T11667] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 615.578038][ T7224] usb 2-1: config 0 descriptor?? [ 615.665102][T11644] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=34064 sclass=netlink_xfrm_socket pid=11644 comm=syz.2.1557 [ 615.732868][ T30] audit: type=1400 audit(1785354997.902:803): avc: denied { write } for pid=11643 comm="syz.2.1557" name="functions" dev="configfs" ino=10612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 615.767075][T11663] file system registered [ 615.815428][ T30] audit: type=1400 audit(1785354997.972:804): avc: denied { write } for pid=11643 comm="syz.2.1557" name="c.1" dev="configfs" ino=14499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 615.842748][ T30] audit: type=1400 audit(1785354997.972:805): avc: denied { write } for pid=11643 comm="syz.2.1557" name="c.1" dev="configfs" ino=14499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 615.846203][T11675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.907183][T11675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.090498][T11677] netlink: 'syz.4.1564': attribute type 4 has an invalid length. [ 616.098445][T11677] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1564'. [ 616.110214][T11677] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 616.122045][ T30] audit: type=1400 audit(1785354998.282:806): avc: denied { execute } for pid=11641 comm="syz.1.1556" path="/dev/audio1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 616.313414][ T30] audit: type=1400 audit(1785354998.482:807): avc: denied { setopt } for pid=11641 comm="syz.1.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 616.640090][ T5843] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 616.800070][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 616.822200][T11689] netlink: 'syz.0.1570': attribute type 2 has an invalid length. [ 616.830285][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1570'. [ 616.873425][ T5843] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 616.906341][ T5843] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 616.951586][ T5843] usb 4-1: Product: syz [ 616.974007][ T5843] usb 4-1: Manufacturer: syz [ 616.996622][ T5843] usb 4-1: SerialNumber: syz [ 617.130885][ T5843] usb 4-1: config 0 descriptor?? [ 617.211502][ T29] usb 3-1: USB disconnect, device number 83 [ 617.443724][ T5843] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 618.076176][ T7224] usbhid 2-1:0.0: can't add hid device: -71 [ 618.083844][ T7224] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 618.298444][ T5843] gspca_zc3xx: reg_r err -110 [ 618.303613][ T5843] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 618.554682][ T7224] usb 2-1: USB disconnect, device number 91 [ 618.624229][ T5815] usb 4-1: USB disconnect, device number 62 [ 618.848298][T11701] SELinux: policydb magic number 0x13 does not match expected magic number 0xf97cff8c [ 618.858598][T11701] SELinux: failed to load policy [ 619.608050][ T7224] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 620.680268][T11711] syzkaller0: entered promiscuous mode [ 620.690125][T11711] syzkaller0: entered allmulticast mode [ 620.942931][ T7224] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.967529][ T7224] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 620.981582][ T7224] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 620.986663][T11719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.001461][ T7224] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 621.004880][T11719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.019430][ T7224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.064347][T11698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 621.086181][ T7224] hub 2-1:1.0: bad descriptor, ignoring hub [ 621.122590][ T7224] hub 2-1:1.0: probe with driver hub failed with error -5 [ 621.145626][ T7224] cdc_wdm 2-1:1.0: skipping garbage [ 621.159186][ T7224] cdc_wdm 2-1:1.0: skipping garbage [ 621.181307][ T7224] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 621.196621][ T7224] cdc_wdm 2-1:1.0: Unknown control protocol [ 621.460095][ T5843] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 621.612893][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.634604][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.656207][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 621.685239][ T5843] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 621.706040][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.728757][ T5843] usb 5-1: config 0 descriptor?? [ 622.316070][ T30] audit: type=1400 audit(1785355004.482:808): avc: denied { remount } for pid=11722 comm="syz.4.1581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 622.542917][ T7233] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 622.784750][T11723] ip6erspan0: entered allmulticast mode [ 622.907649][T11723] overlay: Unknown parameter 'userxattr:xino' [ 622.940048][ T7233] usb 3-1: Using ep0 maxpacket: 16 [ 622.952029][ T5843] usbhid 5-1:0.0: can't add hid device: -71 [ 622.964302][ T5843] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 622.972348][ T7233] usb 3-1: config index 0 descriptor too short (expected 21364, got 36) [ 622.986745][ T7233] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.004831][ T7233] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 623.017634][ T5843] usb 5-1: USB disconnect, device number 75 [ 623.032523][ T7233] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 623.088679][ T7233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.107895][ T7233] usb 3-1: config 0 descriptor?? [ 623.157887][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202d [ 623.200365][T11753] netlink: 'syz.3.1586': attribute type 4 has an invalid length. [ 623.224824][T11753] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1586'. [ 623.242610][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202a [ 623.251604][T11753] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 623.340321][T11741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.364824][T11741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.372893][T11757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.396292][T11757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.530303][ T5843] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 623.762587][ T7224] usb 3-1: USB disconnect, device number 84 [ 623.851618][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.866171][ T5843] usb 5-1: config 0 has no interfaces? [ 623.875578][ T5843] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 623.890932][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.904982][ T5843] usb 5-1: Product: syz [ 623.912445][ T5843] usb 5-1: Manufacturer: syz [ 623.920441][ T5843] usb 5-1: SerialNumber: syz [ 623.931201][ T5843] usb 5-1: config 0 descriptor?? [ 623.972818][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.151428][ T5843] usb 5-1: USB disconnect, device number 76 [ 624.350034][ T7233] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 624.502722][ T7233] usb 4-1: Using ep0 maxpacket: 16 [ 624.520632][ T7233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 624.543430][ T7233] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 624.559563][ T7233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.579363][ T7233] usb 4-1: Product: syz [ 624.590438][ T7233] usb 4-1: Manufacturer: syz [ 624.598222][ T7233] usb 4-1: SerialNumber: syz [ 624.616807][ T7233] usb 4-1: config 0 descriptor?? [ 624.631298][ T7233] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 624.646203][ T7233] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 624.973628][T11698] cdc_wdm 2-1:1.0: Error autopm - -16 [ 624.973890][ T29] usb 2-1: USB disconnect, device number 92 [ 625.041273][ T5843] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 625.050116][ T7224] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 625.240094][ T7224] usb 5-1: device descriptor read/64, error -71 [ 625.240175][ T7233] em28xx 4-1:0.0: chip ID is em2765 [ 625.500484][ T7224] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 625.866672][ T5843] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.911641][ T5843] usb 3-1: config 0 has no interfaces? [ 625.959772][ T5843] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 625.990125][ T7224] usb 5-1: device descriptor read/64, error -71 [ 626.013777][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.064754][ T5843] usb 3-1: config 0 descriptor?? [ 626.100233][ T7224] usb usb5-port1: attempt power cycle [ 626.103830][ T7233] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 626.120078][T11780] IPVS: Error connecting to the multicast addr [ 626.128574][ T7233] em28xx 4-1:0.0: board has no eeprom [ 626.260175][ T7233] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 626.982216][ T7224] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 627.010097][ T7233] em28xx 4-1:0.0: dvb set to bulk mode. [ 627.072611][ T5843] em28xx 4-1:0.0: Binding DVB extension [ 627.075584][ T7224] usb 5-1: device descriptor read/8, error -71 [ 627.122180][ T7233] usb 4-1: USB disconnect, device number 63 [ 627.150728][ T7233] em28xx 4-1:0.0: Disconnecting em28xx [ 627.305839][ T5843] em28xx 4-1:0.0: Registering input extension [ 627.319465][ T7233] em28xx 4-1:0.0: Closing input extension [ 627.360294][ T7224] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 627.521644][ T7224] usb 5-1: device descriptor read/8, error -71 [ 628.128905][ T7224] usb usb5-port1: unable to enumerate USB device [ 628.181196][T11795] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 628.191788][T11795] SELinux: failed to load policy [ 630.033407][ T5843] usb 3-1: USB disconnect, device number 85 [ 630.181062][ T7233] em28xx 4-1:0.0: Freeing device [ 630.510106][ T7233] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 631.148844][T11817] Invalid ELF header magic: != ELF [ 631.157953][T11817] gadgetfs: bound to dummy_udc driver [ 631.738379][ T7233] usb 4-1: Using ep0 maxpacket: 16 [ 632.032745][ T7233] usb 4-1: config index 0 descriptor too short (expected 21364, got 36) [ 632.098266][ T7233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.212798][ T7233] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 632.235259][ T7233] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 632.288735][ T7233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.967565][ T7233] usb 4-1: config 0 descriptor?? [ 633.586695][ T7233] usb 4-1: can't set config #0, error -71 [ 633.600177][ T7233] usb 4-1: USB disconnect, device number 64 [ 633.656811][T11837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.676823][T11837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.601111][ T30] audit: type=1400 audit(1785355017.642:809): avc: denied { setopt } for pid=11848 comm="syz.4.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 635.662293][T11864] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 635.681052][T11864] SELinux: failed to load policy [ 635.710013][T11866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.735193][T11866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.800509][T11866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1619'. [ 636.392193][T11866] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1619'. [ 637.140080][ T7233] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 637.300016][ T7233] usb 2-1: Using ep0 maxpacket: 16 [ 637.321792][ T7233] usb 2-1: config index 0 descriptor too short (expected 21364, got 36) [ 637.346757][ T7233] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.374058][ T7233] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 637.384979][ T7233] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 637.394541][ T7233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.451767][ T7233] usb 2-1: config 0 descriptor?? [ 637.943310][ T7233] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 637.956928][T11879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.151112][ T7233] usb 4-1: device descriptor read/64, error -71 [ 638.170615][T11879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.488550][ T7233] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 638.727764][ T7224] usb 2-1: USB disconnect, device number 93 [ 638.925165][ T7233] usb 4-1: device descriptor read/64, error -71 [ 639.050352][ T7233] usb usb4-port1: attempt power cycle [ 639.077158][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.086089][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.413283][ T7233] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 639.491745][ T7233] usb 4-1: device descriptor read/8, error -71 [ 639.523321][T11908] netlink: 'syz.2.1630': attribute type 4 has an invalid length. [ 639.556998][T11908] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1630'. [ 639.567167][T11908] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 639.668273][T11912] syzkaller0: entered promiscuous mode [ 639.697379][T11913] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 639.726262][T11912] syzkaller0: entered allmulticast mode [ 639.730231][ T7233] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 639.741365][T11913] SELinux: failed to load policy [ 639.765985][ T7233] usb 4-1: device descriptor read/8, error -71 [ 639.893804][ T7233] usb usb4-port1: unable to enumerate USB device [ 640.230110][ T7233] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 640.380100][ T7233] usb 2-1: Using ep0 maxpacket: 16 [ 640.390795][ T7233] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.404257][ T7233] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.414412][ T7233] usb 2-1: config 0 interface 0 has no altsetting 0 [ 640.421258][ T7233] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 640.430752][ T7233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.465751][ T7233] usb 2-1: config 0 descriptor?? [ 640.580344][ T7224] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 640.754552][T11930] netlink: 'syz.0.1639': attribute type 4 has an invalid length. [ 640.765340][T11930] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1639'. [ 640.775661][ T7224] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.786593][T11930] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 640.802307][ T7224] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.816098][ T7224] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 640.826031][ T7224] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.841592][ T7224] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 640.894466][ T7233] hid (null): unknown global tag 0xd [ 640.909326][ T7233] hid (null): unknown global tag 0xe [ 640.910000][ T7224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 640.922798][ T5815] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 640.932097][ T7224] usb 3-1: Product: syz [ 640.936726][ T7224] usb 3-1: Manufacturer: syz [ 640.957843][ T7224] usb_debug 3-1:1.0: debug converter detected [ 640.966276][ T7224] usb 3-1: debug converter now attached to ttyUSB0 [ 641.070053][ T5815] usb 4-1: device descriptor read/64, error -71 [ 641.150058][ T5342] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 641.168178][T11916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1634'. [ 641.179585][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1636'. [ 641.195079][T11920] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1636'. [ 641.273829][ T7233] usb 3-1: USB disconnect, device number 86 [ 641.294746][ T7233] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 641.316602][ T7233] usb_debug 3-1:1.0: device disconnected [ 641.322103][ T5342] usb 5-1: Using ep0 maxpacket: 16 [ 641.332434][ T5342] usb 5-1: config index 0 descriptor too short (expected 21364, got 36) [ 641.341185][ T5815] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 641.352512][ T5342] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.364043][ T5342] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 641.364782][ T7224] usb 2-1: USB disconnect, device number 94 [ 641.380584][ T5342] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 641.400422][ T5342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.415426][ T5342] usb 5-1: config 0 descriptor?? [ 641.490209][ T5815] usb 4-1: device descriptor read/64, error -71 [ 641.518193][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.527232][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.538347][T11937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.547117][T11937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.602881][ T5815] usb usb4-port1: attempt power cycle [ 642.081891][ T5815] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 642.110696][ T5815] usb 4-1: device descriptor read/8, error -71 [ 642.136265][ T5342] usb 5-1: USB disconnect, device number 81 [ 642.268178][T11948] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 642.278785][T11948] SELinux: failed to load policy [ 642.500044][ T7233] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 642.596401][ T5815] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 642.672751][ T7233] usb 2-1: Using ep0 maxpacket: 8 [ 642.698173][ T7233] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 642.742240][ T7233] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 642.792408][ T7233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.841366][ T7233] usb 2-1: Product: syz [ 642.876386][ T7233] usb 2-1: Manufacturer: syz [ 642.913948][ T7233] usb 2-1: SerialNumber: syz [ 642.978321][ T7233] usb 2-1: config 0 descriptor?? [ 643.124346][ T7233] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 643.255870][ T7233] usb 2-1: setting power ON [ 643.338064][T11955] Invalid ELF header magic: != ELF [ 643.362264][T11955] gadgetfs: bound to dummy_udc driver [ 643.912641][ T7233] dvb-usb: bulk message failed: -22 (2/0) [ 644.262163][ T7233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 644.381502][ T7233] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 644.413175][T11958] ip6erspan0: left allmulticast mode [ 644.475720][ T7233] usb 2-1: media controller created [ 645.066125][ T7233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 645.077748][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.130239][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.150935][ T7233] usb 2-1: selecting invalid altsetting 6 [ 645.189308][ T7233] usb 2-1: digital interface selection failed (-22) [ 645.241585][ T7233] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 645.266118][ T7233] usb 2-1: setting power OFF [ 645.293231][ T7233] dvb-usb: bulk message failed: -22 (2/0) [ 645.309994][ T7233] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 645.320061][ T5815] usb 4-1: device not accepting address 72, error -71 [ 645.327204][ T5815] usb usb4-port1: unable to enumerate USB device [ 645.335366][T11975] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 645.354822][ T7233] (NULL device *): no alternate interface [ 645.369157][T11975] SELinux: failed to load policy [ 645.408278][ T7233] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 645.839610][ T5815] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 646.703659][ T7233] usb 2-1: USB disconnect, device number 95 [ 647.088538][ T30] audit: type=1800 audit(1785355029.092:810): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1652" name="bus" dev="ramfs" ino=38584 res=0 errno=0 [ 647.197410][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 647.618629][ T5815] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 647.687974][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.704634][ T5815] usb 5-1: Product: syz [ 647.732757][ T5815] usb 5-1: Manufacturer: syz [ 647.743037][ T5815] usb 5-1: SerialNumber: syz [ 647.773622][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.800522][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.819284][ T5815] usb 5-1: config 0 descriptor?? [ 647.913434][ T7233] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 648.176707][ T5815] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 648.313947][ T7233] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 648.332410][ T7233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.356612][ T7233] usb 2-1: Product: syz [ 648.369692][ T7233] usb 2-1: Manufacturer: syz [ 648.386118][ T7233] usb 2-1: SerialNumber: syz [ 648.528269][ T5843] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 648.710299][ T5815] gspca_sonixj: reg_w1 err -110 [ 648.715320][ T5815] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 648.724365][T12002] netlink: 'syz.2.1658': attribute type 4 has an invalid length. [ 648.732475][T12002] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1658'. [ 648.743304][T12002] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 648.820006][ T5815] usb 5-1: USB disconnect, device number 82 [ 648.868537][ T7233] usb 2-1: USB disconnect, device number 96 [ 649.301368][T12004] netlink: 'syz.3.1659': attribute type 4 has an invalid length. [ 649.320299][T12004] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1659'. [ 649.378168][T12004] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 649.632923][T12017] Invalid ELF header magic: != ELF [ 649.657717][T12017] gadgetfs: bound to dummy_udc driver [ 649.699179][ T5843] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 650.031464][ T5815] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 650.046996][ T5843] ath9k_htc: Failed to initialize the device [ 650.088166][ T7233] usb 2-1: ath9k_htc: USB layer deinitialized [ 650.190027][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 650.214462][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.227604][ T5815] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 650.250851][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.327932][ T5815] usb 5-1: config 0 descriptor?? [ 650.819205][ T5815] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 651.121123][T12034] netlink: 'syz.1.1667': attribute type 4 has an invalid length. [ 651.149805][T12034] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1667'. [ 651.172301][T12034] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 651.331571][ T29] usb 5-1: USB disconnect, device number 83 [ 651.760066][ T5815] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 651.917437][ T5815] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 651.952564][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.988353][ T5815] usb 3-1: Product: syz [ 652.000971][ T5815] usb 3-1: Manufacturer: syz [ 652.018471][ T5815] usb 3-1: SerialNumber: syz [ 652.055276][ T5342] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 652.344944][ T29] usb 3-1: USB disconnect, device number 87 [ 652.530174][T12026] Bluetooth: hci5: command 0x1003 tx timeout [ 652.534812][ T5615] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 652.664372][T12046] syzkaller0: entered promiscuous mode [ 652.682622][T12046] syzkaller0: entered allmulticast mode [ 652.959132][ T30] audit: type=1400 audit(1785355035.122:811): avc: denied { write } for pid=12047 comm="syz.3.1672" name="target" dev="configfs" ino=3463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 653.022392][ T30] audit: type=1400 audit(1785355035.152:812): avc: denied { write } for pid=12047 comm="syz.3.1672" name="usb_gadget" dev="configfs" ino=38909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 653.099476][ T30] audit: type=1400 audit(1785355035.152:813): avc: denied { write } for pid=12047 comm="syz.3.1672" name="naa.1234567890abcdef" dev="configfs" ino=38911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 653.338892][ T5342] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 653.360408][ T5342] ath9k_htc: Failed to initialize the device [ 653.378800][ T29] usb 3-1: ath9k_htc: USB layer deinitialized [ 653.469392][ T5615] Bluetooth: hci2: unexpected event for opcode 0x202d [ 653.664031][T12064] Invalid ELF header magic: != ELF [ 653.693870][T12064] gadgetfs: bound to dummy_udc driver [ 653.970261][ T9947] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 654.048322][ C1] gadgetfs: connected [ 654.053101][ T9947] gadgetfs: disconnected [ 654.053144][ T5615] Bluetooth: hci2: unexpected event for opcode 0x202a [ 654.157291][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.181849][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.295352][T12055] gadgetfs: suspended from state 2 [ 654.319207][ T9947] usb 2-1: device descriptor read/all, error -71 [ 655.028712][T12080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12080 comm=syz.4.1684 [ 655.120800][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 655.202120][T12088] netlink: 'syz.1.1687': attribute type 2 has an invalid length. [ 655.284369][T12093] netlink: 'syz.4.1689': attribute type 16 has an invalid length. [ 655.298436][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'. [ 655.316373][T12093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.546788][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202d [ 655.663178][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202a [ 655.713450][ T5615] Bluetooth: hci4: unexpected event for opcode 0x202d [ 655.930125][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202d [ 656.075511][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.084417][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.120068][ T9947] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 656.372010][ T9947] usb 3-1: config 100 has an invalid interface number: 124 but max is 0 [ 656.380703][ T9947] usb 3-1: config 100 has no interface number 0 [ 656.387169][ T9947] usb 3-1: config 100 interface 124 has no altsetting 0 [ 656.397091][ T9947] usb 3-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 656.406573][ T9947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.414716][ T9947] usb 3-1: Product: syz [ 656.419256][ T9947] usb 3-1: Manufacturer: syz [ 656.969139][ T9947] usb 3-1: SerialNumber: syz [ 657.225934][ T9947] idmouse 3-1:100.124: Unable to find bulk-in endpoint. [ 657.254403][ T9947] usb 3-1: USB disconnect, device number 88 [ 657.261726][T12130] syzkaller0: entered promiscuous mode [ 657.283893][T12130] syzkaller0: entered allmulticast mode [ 657.512032][T12138] netlink: 'syz.4.1702': attribute type 4 has an invalid length. [ 657.523983][T12138] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1702'. [ 657.537638][T12138] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 657.692998][T12142] netlink: 'syz.0.1705': attribute type 9 has an invalid length. [ 657.894296][ T5615] Bluetooth: hci4: unexpected event for opcode 0x202d [ 657.980094][ T9947] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 658.142139][ T9947] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 658.154493][ T9947] usb 4-1: config 0 has no interface number 0 [ 658.165316][ T9947] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.179274][ T9947] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.190285][ T9947] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 658.203943][ T9947] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 658.220514][ T9947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.261141][ T5342] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 658.325157][ T9947] usb 4-1: config 0 descriptor?? [ 658.431615][ T5342] usb 3-1: config 100 has an invalid interface number: 124 but max is 0 [ 658.443065][T12149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.463599][ T5342] usb 3-1: config 100 has no interface number 0 [ 658.480252][ T5342] usb 3-1: config 100 interface 124 has no altsetting 0 [ 658.500825][ T5342] usb 3-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 658.520253][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.537487][T12149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.538193][ T5342] usb 3-1: Product: syz [ 658.576800][ T5342] usb 3-1: Manufacturer: syz [ 658.590860][ T5342] usb 3-1: SerialNumber: syz [ 658.934117][ T5342] idmouse 3-1:100.124: Unable to find bulk-in endpoint. [ 658.966725][ T5342] usb 3-1: USB disconnect, device number 89 [ 658.981737][ T29] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 659.166581][ T9947] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0008/input/input22 [ 659.178703][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.275586][ T29] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.311691][ T29] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 659.321894][ T29] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 659.429547][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 659.946249][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 659.954341][ T29] usb 2-1: Product: syz [ 659.958501][ T29] usb 2-1: Manufacturer: syz [ 659.965161][ T9947] uclogic 0003:28BD:0042.0008: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 660.006369][ T29] usb_debug 2-1:1.0: debug converter detected [ 660.024905][ T9947] usb 4-1: USB disconnect, device number 73 [ 660.041356][ T29] usb 2-1: debug converter now attached to ttyUSB0 [ 660.088056][T12169] FAULT_INJECTION: forcing a failure. [ 660.088056][T12169] name failslab, interval 1, probability 0, space 0, times 0 [ 660.110489][T12169] CPU: 1 UID: 0 PID: 12169 Comm: syz.4.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.110518][T12169] Tainted: [L]=SOFTLOCKUP [ 660.110524][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 660.110533][T12169] Call Trace: [ 660.110539][T12169] [ 660.110547][T12169] dump_stack_lvl+0x100/0x190 [ 660.110574][T12169] should_fail_ex.cold+0x5/0xa [ 660.110596][T12169] should_failslab+0xc2/0x120 [ 660.110619][T12169] __kmalloc_noprof+0xfc/0x820 [ 660.110639][T12169] ? rcu_is_watching+0x12/0xc0 [ 660.110666][T12169] ? tomoyo_realpath_from_path+0xb6/0x690 [ 660.110690][T12169] tomoyo_realpath_from_path+0xb6/0x690 [ 660.110715][T12169] tomoyo_path_number_perm+0x23c/0x580 [ 660.110739][T12169] ? tomoyo_path_number_perm+0x22e/0x580 [ 660.110764][T12169] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 660.110814][T12169] ? find_held_lock+0x2b/0x80 [ 660.110840][T12169] ? __fget_files+0x215/0x3d0 [ 660.110858][T12169] ? hook_file_ioctl_common+0x140/0x440 [ 660.110877][T12169] ? __fget_files+0x215/0x3d0 [ 660.110899][T12169] ? __fget_files+0x21f/0x3d0 [ 660.110920][T12169] security_file_ioctl+0xd3/0x230 [ 660.110948][T12169] __x64_sys_ioctl+0xb7/0x210 [ 660.110974][T12169] do_syscall_64+0x115/0x870 [ 660.110993][T12169] ? clear_bhb_loop+0x40/0x90 [ 660.111016][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.111034][T12169] RIP: 0033:0x7fe7ee99de99 [ 660.111049][T12169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.111065][T12169] RSP: 002b:00007fe7ef824028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.111083][T12169] RAX: ffffffffffffffda RBX: 00007fe7eec25fa0 RCX: 00007fe7ee99de99 [ 660.111095][T12169] RDX: 0000200000000200 RSI: 000000000000460f RDI: 0000000000000003 [ 660.111105][T12169] RBP: 00007fe7ef824090 R08: 0000000000000000 R09: 0000000000000000 [ 660.111115][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.111124][T12169] R13: 00007fe7eec26038 R14: 00007fe7eec25fa0 R15: 00007ffe8914bf78 [ 660.111147][T12169] [ 660.112377][T12169] ERROR: Out of memory at tomoyo_realpath_from_path. [ 660.234176][T12167] fido_id[12167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 660.380788][T12153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1711'. [ 660.390585][T12153] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1711'. [ 660.604428][ T5815] usb 2-1: USB disconnect, device number 99 [ 660.712128][ T5815] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 660.723456][ T5815] usb_debug 2-1:1.0: device disconnected [ 660.902374][ T7224] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 661.070046][ T7224] usb 5-1: Using ep0 maxpacket: 16 [ 661.081490][ T7224] usb 5-1: config index 0 descriptor too short (expected 21364, got 36) [ 661.094451][ T7224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.105343][ T7224] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 661.114695][ T7224] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 661.125300][ T7224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.136514][ T7224] usb 5-1: config 0 descriptor?? [ 662.143663][T12174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.382854][T12174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.773746][ T5815] usb 5-1: USB disconnect, device number 84 [ 662.860286][ T7224] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 663.101478][ T7224] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.159340][ T7224] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 663.169767][ T7224] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 663.246062][ T7224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 663.256376][ T7224] usb 2-1: SerialNumber: syz [ 663.299153][T12204] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.530276][ T7224] usb 2-1: invalid UAC_HEADER (v1) [ 663.544159][T12203] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.668588][T12215] binder: 12211:12215 ioctl c00c620f 200000000000 returned -22 [ 663.826760][ T30] audit: type=1400 audit(1785355045.992:814): avc: denied { ioctl } for pid=12216 comm="syz.4.1732" path="socket:[40969]" dev="sockfs" ino=40969 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 663.838438][ T7224] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 663.860922][ T5815] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 663.955211][ T7224] usb 2-1: USB disconnect, device number 100 [ 663.968554][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 664.010142][ T5342] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 664.391961][ T30] audit: type=1400 audit(1785355046.232:815): avc: denied { setopt } for pid=12216 comm="syz.4.1732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 664.450238][ T5815] usb 4-1: device descriptor read/64, error -71 [ 664.560680][ T5342] usb 3-1: device descriptor read/64, error -71 [ 664.712309][ T5615] Bluetooth: hci2: unexpected event for opcode 0x202d [ 664.719244][ T5815] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 664.850046][ T5342] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 664.860064][ T5815] usb 4-1: device descriptor read/64, error -71 [ 664.970708][ T5815] usb usb4-port1: attempt power cycle [ 664.980035][ T5342] usb 3-1: device descriptor read/64, error -71 [ 665.030040][ T7224] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 665.090429][ T5342] usb usb3-port1: attempt power cycle [ 665.191545][ T7224] usb 2-1: config 100 has an invalid interface number: 124 but max is 0 [ 665.199978][ T7224] usb 2-1: config 100 has no interface number 0 [ 665.206267][ T7224] usb 2-1: config 100 interface 124 has no altsetting 0 [ 665.215459][ T7224] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 665.224545][ T7224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.232615][ T7224] usb 2-1: Product: syz [ 665.236789][ T7224] usb 2-1: Manufacturer: syz [ 665.241493][ T7224] usb 2-1: SerialNumber: syz [ 665.310047][ T5815] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 665.331445][ T5815] usb 4-1: device descriptor read/8, error -71 [ 665.440099][ T5342] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 665.457550][ T7224] idmouse 2-1:100.124: Unable to find bulk-in endpoint. [ 665.466199][ T5342] usb 3-1: device descriptor read/8, error -71 [ 665.479855][ T7224] usb 2-1: USB disconnect, device number 101 [ 665.570064][ T5815] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 665.590709][ T5815] usb 4-1: device descriptor read/8, error -71 [ 665.700476][ T5815] usb usb4-port1: unable to enumerate USB device [ 665.710062][ T5342] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 665.730767][ T5342] usb 3-1: device descriptor read/8, error -71 [ 665.840518][ T5342] usb usb3-port1: unable to enumerate USB device [ 666.678967][T12242] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 666.689481][T12242] SELinux: failed to load policy [ 667.314938][T12237] ieee802154 phy0 wpan0: encryption failed: -22 [ 667.387858][ T9947] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 667.597647][ T29] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 667.625905][ T9947] usb 3-1: Using ep0 maxpacket: 16 [ 667.662784][ T9947] usb 3-1: config index 0 descriptor too short (expected 21364, got 36) [ 667.685072][ T9947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.720353][ T9947] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.740048][ T9947] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 667.760064][ T29] usb 4-1: device descriptor read/64, error -71 [ 667.771566][ T9947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.790032][ T5815] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 667.814627][ T9947] usb 3-1: config 0 descriptor?? [ 667.957063][ T5815] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 667.976371][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.990247][ T5815] usb 2-1: Product: syz [ 668.001531][ T29] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 668.005073][ T5815] usb 2-1: Manufacturer: syz [ 668.020663][ T5815] usb 2-1: SerialNumber: syz [ 668.300656][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.325197][ T5342] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 668.335878][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.350074][ T29] usb 4-1: device descriptor read/64, error -71 [ 668.681475][ T29] usb usb4-port1: attempt power cycle [ 668.738326][ T5815] usb 3-1: USB disconnect, device number 94 [ 668.817789][ T9947] usb 2-1: USB disconnect, device number 102 [ 669.040053][ T29] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 669.040133][ T7224] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 669.060549][ T29] usb 4-1: device descriptor read/8, error -71 [ 669.210005][ T7224] usb 5-1: Using ep0 maxpacket: 16 [ 669.219697][ T7224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.240780][ T7224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.250717][ T7224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 669.270446][ T7224] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 669.286902][ T7224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.300088][ T29] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 669.317025][ T7224] usb 5-1: config 0 descriptor?? [ 669.396484][ T29] usb 4-1: device descriptor read/8, error -71 [ 669.411418][ T5342] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 669.484981][ T5342] ath9k_htc: Failed to initialize the device [ 669.699503][ T30] audit: type=1400 audit(1785355051.782:816): avc: denied { getopt } for pid=12265 comm="syz.2.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 669.711721][ T9947] usb 2-1: ath9k_htc: USB layer deinitialized [ 669.982929][T12269] netlink: 'syz.4.1744': attribute type 4 has an invalid length. [ 670.259104][T12269] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1744'. [ 670.433017][T12256] xt_connbytes: Forcing CT accounting to be enabled [ 670.508547][T12256] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 670.578927][T12274] gadgetfs: bound to dummy_udc driver [ 670.601377][ T29] usb usb4-port1: unable to enumerate USB device [ 670.777596][ T7224] usbhid 5-1:0.0: can't add hid device: -71 [ 670.796797][ T7224] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 670.830032][ T7224] usb 5-1: USB disconnect, device number 85 [ 671.014288][ T29] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 671.188789][T12277] ieee802154 phy0 wpan0: encryption failed: -22 [ 671.236985][ T29] usb 4-1: too many endpoints for config 252 interface 0 altsetting 213: 172, using maximum allowed: 30 [ 671.243432][T12283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41232 sclass=netlink_route_socket pid=12283 comm=syz.0.1753 [ 671.280071][ T29] usb 4-1: config 252 interface 0 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 172 [ 671.281562][T12283] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1753'. [ 671.305749][ T29] usb 4-1: config 252 interface 0 has no altsetting 0 [ 671.319380][ T29] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 671.329344][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.383688][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 671.395951][ T29] pvrusb2: ********** [ 671.417074][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 671.453898][ T29] pvrusb2: Important functionality might not be entirely working. [ 671.463341][ T9947] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 671.486907][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 671.500928][ T29] pvrusb2: ********** [ 671.507449][T12286] bond0: (slave bond_slave_0): Releasing backup interface [ 671.521592][ T29] usb 4-1: selecting invalid altsetting 0 [ 671.547850][ T2362] pvrusb2: Invalid write control endpoint [ 671.555378][T12286] bond0: (slave bond_slave_1): Releasing backup interface [ 671.601971][ T9947] usb 2-1: device descriptor read/64, error -71 [ 671.621290][T12286] team0: Port device team_slave_0 removed [ 671.641795][T12286] team0: Port device team_slave_1 removed [ 671.662839][T12286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.683394][T12286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.719657][T12286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 671.789758][ T2362] pvrusb2: Invalid write control endpoint [ 671.806740][ T2362] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 671.820511][ T2362] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 672.042539][ T2362] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 672.097410][ T2362] pvrusb2: Device being rendered inoperable [ 672.462410][ T2362] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 672.502990][ T2362] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 672.618817][T12302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.627636][T12302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.640777][ T9947] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 673.108672][ T2362] pvrusb2: Attached sub-driver cx25840 [ 673.114606][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 673.125816][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 673.210325][ T9947] usb 2-1: device descriptor read/64, error -71 [ 673.244661][T12308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.282145][T12308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.330375][ T9947] usb usb2-port1: attempt power cycle [ 673.347864][T12308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1761'. [ 673.374953][T12308] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1761'. [ 673.690058][ T9947] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 673.730637][ T9947] usb 2-1: device descriptor read/8, error -71 [ 673.785042][T12313] netlink: 'syz.4.1762': attribute type 4 has an invalid length. [ 673.797449][T12313] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1762'. [ 673.826195][T12313] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 674.309126][T12321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.318554][T12321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.339971][ T7224] usb 4-1: USB disconnect, device number 82 [ 674.920226][ T9947] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 674.997118][ T9947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.022833][ T9947] usb 2-1: config 0 has no interfaces? [ 675.049158][ T9947] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 675.065880][ T9947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.097980][ T9947] usb 2-1: Product: syz [ 675.117044][ T9947] usb 2-1: Manufacturer: syz [ 675.131752][ T9947] usb 2-1: SerialNumber: syz [ 675.231249][ T9947] usb 2-1: config 0 descriptor?? [ 675.343371][T12340] Invalid ELF header magic: != ELF [ 675.370495][T12340] gadgetfs: bound to dummy_udc driver [ 675.630636][ T29] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 675.698350][ T9947] usb 2-1: USB disconnect, device number 106 [ 675.711498][ C1] gadgetfs: connected [ 675.723283][ T29] gadgetfs: disconnected [ 675.881480][T12344] netlink: 'syz.2.1772': attribute type 4 has an invalid length. [ 675.891473][ C1] gadgetfs: connected [ 675.896309][T12344] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1772'. [ 675.896900][ T29] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 675.926627][T12344] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 675.928905][ T29] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 675.964371][T12335] gadgetfs: suspended from state 3 [ 675.969520][T12335] gadgetfs: disconnected [ 676.036315][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.073210][ T29] usb 3-1: can't set config #1, error -71 [ 676.092758][ T29] usb 3-1: USB disconnect, device number 95 [ 676.369441][ T30] audit: type=1400 audit(1785355058.532:817): avc: denied { accept } for pid=12349 comm="syz.4.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 676.482393][ T30] audit: type=1400 audit(1785355058.622:818): avc: denied { write } for pid=12349 comm="syz.4.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 676.522101][T12359] netlink: 'syz.0.1775': attribute type 4 has an invalid length. [ 676.571969][T12359] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1775'. [ 676.610269][T12359] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 676.940049][ T7224] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 677.090095][ T7224] usb 2-1: Using ep0 maxpacket: 8 [ 677.101874][ T7224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 677.143066][ T7224] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 677.179777][ T7224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.223905][ T7224] usb 2-1: config 0 descriptor?? [ 677.360075][ T5342] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 677.461660][ T7224] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 677.520141][ T5342] usb 3-1: Using ep0 maxpacket: 16 [ 677.520431][ T29] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 677.549062][ T5342] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 677.575001][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.593979][ T5342] usb 3-1: config 0 descriptor?? [ 677.605808][ T5342] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 677.680117][ T29] usb 5-1: device descriptor read/64, error -71 [ 677.821096][ T7224] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 677.891424][T12363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.903045][ T5815] usb 2-1: USB disconnect, device number 107 [ 677.930078][ T29] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 677.980012][ T7224] usb 4-1: Using ep0 maxpacket: 8 [ 677.986712][ T7224] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 677.999369][ T7224] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 678.009352][ T7224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.017956][ T7224] usb 4-1: Product: syz [ 678.022424][ T7224] usb 4-1: Manufacturer: syz [ 678.027049][ T7224] usb 4-1: SerialNumber: syz [ 678.036069][ T7224] usb 4-1: config 0 descriptor?? [ 678.049302][ T7224] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 678.070066][ T29] usb 5-1: device descriptor read/64, error -71 [ 678.180418][ T29] usb usb5-port1: attempt power cycle [ 678.520504][ T29] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 678.540625][ T29] usb 5-1: device descriptor read/8, error -71 [ 678.664003][T12387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.672885][T12387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.720133][ T9947] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 678.790062][ T29] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 678.810571][ T29] usb 5-1: device descriptor read/8, error -71 [ 678.870026][ T9947] usb 2-1: Using ep0 maxpacket: 32 [ 678.876938][ T9947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 678.885851][ T9947] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 678.897690][ T9947] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 678.906795][ T9947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.914811][ T9947] usb 2-1: Product: syz [ 678.919005][ T9947] usb 2-1: Manufacturer: syz [ 678.924035][ T29] usb usb5-port1: unable to enumerate USB device [ 678.930445][ T9947] usb 2-1: SerialNumber: syz [ 679.144667][ T9947] usb 2-1: Cannot retrieve CPort count: 0 [ 679.150726][ T9947] usb 2-1: Cannot retrieve CPort count: -5 [ 679.156568][ T9947] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 679.349517][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.359312][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.363957][ T9947] usb 2-1: USB disconnect, device number 108 [ 679.581715][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.590961][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.624315][ T5342] gspca_sonixj: reg_r err -32 [ 679.629827][ T5342] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 679.640141][ T5342] usb 3-1: USB disconnect, device number 96 [ 680.060194][ T7224] gspca_zc3xx: reg_r err -32 [ 681.271190][ T7224] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 681.277536][ T7224] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 681.517268][ T30] audit: type=1326 audit(1785355063.682:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ee99de99 code=0x7ffc0000 [ 681.602307][ T9947] usb 4-1: USB disconnect, device number 83 [ 681.636146][ T30] audit: type=1326 audit(1785355063.792:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ee99de99 code=0x7ffc0000 [ 681.678514][ T30] audit: type=1326 audit(1785355063.802:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fe7ee99de99 code=0x7ffc0000 [ 681.736301][ T30] audit: type=1326 audit(1785355063.802:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ee99de99 code=0x7ffc0000 [ 681.770622][ T30] audit: type=1326 audit(1785355063.802:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ee99de99 code=0x7ffc0000 [ 681.800235][ T30] audit: type=1326 audit(1785355063.802:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7ee95e6ce code=0x7ffc0000 [ 681.829361][ T30] audit: type=1326 audit(1785355063.802:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7ee99db2b code=0x7ffc0000 [ 681.875924][ T30] audit: type=1326 audit(1785355063.802:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7ee99db2b code=0x7ffc0000 [ 681.900053][ T7224] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 681.903371][ T30] audit: type=1326 audit(1785355063.852:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7ee99db2b code=0x7ffc0000 [ 681.951518][T12411] netlink: 'syz.2.1795': attribute type 4 has an invalid length. [ 681.959643][ T30] audit: type=1326 audit(1785355063.852:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12404 comm="syz.4.1794" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe7ee99db2b code=0x7ffc0000 [ 681.980079][T12411] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1795'. [ 681.996488][T12411] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 682.050038][ T29] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 682.090007][ T7224] usb 5-1: Using ep0 maxpacket: 16 [ 682.101690][ T7224] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 682.114741][ T7224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.122826][ T7224] usb 5-1: Product: syz [ 682.127193][ T7224] usb 5-1: Manufacturer: syz [ 682.131861][ T7224] usb 5-1: SerialNumber: syz [ 682.140050][ T9947] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 682.143787][ T7224] usb 5-1: config 0 descriptor?? [ 682.158652][ T7224] usb 5-1: selecting invalid altsetting 1 [ 682.164964][ T7224] technisat-usb2: could not set alternate setting to 0 [ 682.231703][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.259491][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.275521][ T29] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 682.294917][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 682.303788][ T29] usb 2-1: SerialNumber: syz [ 682.322866][ T9947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.333322][ T9947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.345582][ T9947] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 682.366040][ T7224] technisat-usb2: firmware version: 176.224 [ 682.372104][ T9947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 682.380847][ T9947] usb 4-1: SerialNumber: syz [ 682.411068][ T7224] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 682.435203][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.447909][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.571003][ T29] usb 2-1: 0:2 : does not exist [ 682.640777][T12423] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 682.651472][T12423] SELinux: failed to load policy [ 682.795072][ T29] usb 2-1: USB disconnect, device number 109 [ 682.802136][ T9947] usb 4-1: 0:2 : does not exist [ 683.028479][T12405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.092562][T12405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.413273][ T9947] usb 4-1: USB disconnect, device number 84 [ 683.642024][ T7224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 683.649205][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.793411][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.174718][ T7224] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 684.185539][ T7224] usb 5-1: media controller created [ 684.191367][ T7224] technisat-usb2: i2c-error: out failed 53 = -22 [ 684.202630][ T7224] dvb-usb: MAC address reading failed. [ 684.221171][ T7224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.259111][T12432] syzkaller0: entered promiscuous mode [ 684.268077][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 684.296418][T12432] syzkaller0: entered allmulticast mode [ 684.324287][T12436] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.355040][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 684.435430][ T7224] DVB: Unable to find symbol stv090x_attach() [ 684.444671][ T7224] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 685.530001][ T7224] rc_core: IR keymap rc-technisat-usb2 not found [ 685.536362][ T7224] Registered IR keymap rc-empty [ 685.542211][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.546940][ T9947] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 685.583768][ T7224] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 685.611964][ T7224] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input23 [ 685.824416][ T7224] dvb-usb: schedule remote query interval to 100 msecs. [ 685.857745][ T7224] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 685.899917][T12454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=12454 comm=syz.2.1807 [ 685.913758][ T7224] usb 5-1: USB disconnect, device number 90 [ 685.948657][ T9947] usb 4-1: device descriptor read/64, error -71 [ 685.960345][T12454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=12454 comm=syz.2.1807 [ 686.029262][T12454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=12454 comm=syz.2.1807 [ 686.032969][ T7224] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 686.240239][ T9947] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 686.421520][T12464] netlink: 'syz.0.1809': attribute type 4 has an invalid length. [ 686.429493][T12464] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1809'. [ 686.440413][T12464] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 686.544636][ T9947] usb 4-1: device descriptor read/64, error -71 [ 686.691476][ T9947] usb usb4-port1: attempt power cycle [ 686.740042][ T7224] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 686.951633][ T7224] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.972980][ T7224] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.006394][ T7224] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 687.028474][ T7224] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.119161][ T7224] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 687.141778][ T7224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 687.158113][ T7224] usb 5-1: Product: syz [ 687.162682][ T7224] usb 5-1: Manufacturer: syz [ 687.183418][ T7224] usb_debug 5-1:1.0: debug converter detected [ 687.185093][ T9947] usb usb4-port1: Cannot enable. Maybe the USB cable is bad? [ 687.203991][ T7224] usb 5-1: debug converter now attached to ttyUSB0 [ 687.220705][T12475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.247704][T12475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.360775][ T9947] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 687.391830][ T9947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.406334][T12452] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1808'. [ 687.416958][ T9947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.444923][T12452] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1808'. [ 687.456770][ T9947] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 687.482630][ T9947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 687.500071][ T9947] usb 4-1: SerialNumber: syz [ 687.542276][ T7224] usb 5-1: USB disconnect, device number 91 [ 687.565076][ T7224] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 687.610576][ T7224] usb_debug 5-1:1.0: device disconnected [ 687.739652][ T9947] usb 4-1: 0:2 : does not exist [ 687.809585][ T9947] usb 4-1: USB disconnect, device number 88 [ 688.232512][T12483] vlan3: entered allmulticast mode [ 688.237936][T12483] bond0: entered allmulticast mode [ 690.174603][T12494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.211872][T12494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.498974][ T9947] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 690.751327][ T9947] usb 4-1: config 1 has an invalid interface number: 133 but max is 0 [ 690.759580][ T9947] usb 4-1: config 1 has no interface number 0 [ 690.781175][ T9947] usb 4-1: config 1 interface 133 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 690.810548][ T9947] usb 4-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=1c.9f [ 690.829898][ T9947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.851596][ T9947] usb 4-1: Product: syz [ 690.861466][ T9947] usb 4-1: Manufacturer: syz [ 690.871920][ T9947] usb 4-1: SerialNumber: syz [ 691.099470][T12492] netlink: 'syz.3.1818': attribute type 6 has an invalid length. [ 691.107282][T12492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1818'. [ 691.203372][ T9947] sierra 4-1:1.133: Sierra USB modem converter detected [ 691.221880][ T9947] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 691.244965][ T9947] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 691.352895][ T9947] usb 4-1: USB disconnect, device number 89 [ 691.473466][T12513] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.505062][ T9947] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 691.537169][T12518] netlink: 'syz.0.1823': attribute type 4 has an invalid length. [ 691.547941][ T9947] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 691.558142][T12518] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1823'. [ 691.567584][ T9947] sierra 4-1:1.133: device disconnected [ 691.574221][T12518] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 691.800071][ T29] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 691.930255][ T7224] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 691.930288][ T29] usb 3-1: device descriptor read/64, error -71 [ 692.068741][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.081179][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.111474][ T7224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.122305][ T7224] usb 2-1: config 0 has no interfaces? [ 692.130083][ T7224] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 692.139368][ T7224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.148247][ T7224] usb 2-1: Product: syz [ 692.152638][ T7224] usb 2-1: Manufacturer: syz [ 692.157303][ T7224] usb 2-1: SerialNumber: syz [ 692.165130][ T7224] usb 2-1: config 0 descriptor?? [ 692.210175][ T29] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 693.155918][ T7224] usb 2-1: USB disconnect, device number 110 [ 693.190097][ T29] usb 3-1: device descriptor read/64, error -71 [ 693.301412][ T29] usb usb3-port1: attempt power cycle [ 693.390176][ T9947] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 693.551506][ T9947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.564585][ T9947] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.578444][ T9947] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 693.588778][ T9947] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.623394][ T9947] usb 4-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 693.660245][ T29] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 693.891946][ T9947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 693.901605][ T9947] usb 4-1: Product: syz [ 693.905836][ T9947] usb 4-1: Manufacturer: syz [ 693.924897][ T29] usb 3-1: device descriptor read/8, error -71 [ 693.972578][ T9947] usb_debug 4-1:1.0: debug converter detected [ 694.003746][ T9947] usb 4-1: debug converter now attached to ttyUSB0 [ 694.177340][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 694.199702][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 694.214742][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 694.262265][T12545] binder: 12542:12545 ioctl c00c620f 200000000000 returned -22 [ 694.320373][ T7224] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 694.345982][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 694.356048][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 694.669443][ T7224] usb 2-1: Using ep0 maxpacket: 16 [ 694.706119][ T7224] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 694.756196][ T7224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.887121][ T7224] usb 2-1: config 0 descriptor?? [ 694.976022][ T7224] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 695.195557][ T5342] usb 4-1: USB disconnect, device number 90 [ 695.213222][ T5342] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 695.234082][ T5342] usb_debug 4-1:1.0: device disconnected [ 696.150399][ T5342] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 696.165946][T12566] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 696.176531][T12566] SELinux: failed to load policy [ 696.377346][ T5342] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 696.421355][ T5342] usb 4-1: config index 0 descriptor too short (expected 29164, got 36) [ 696.446848][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.477031][ T5342] usb 4-1: config 0 has no interfaces? [ 696.497586][ T5342] usb 4-1: config index 1 descriptor too short (expected 29164, got 36) [ 696.520223][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.575625][ T5342] usb 4-1: config 0 has no interfaces? [ 696.604988][ T5342] usb 4-1: config index 2 descriptor too short (expected 29164, got 36) [ 696.636592][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.672536][ T5342] usb 4-1: config 0 has no interfaces? [ 696.701584][ T5342] usb 4-1: config index 3 descriptor too short (expected 29164, got 36) [ 696.735584][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.802388][ T5342] usb 4-1: config 0 has no interfaces? [ 696.847370][ T5342] usb 4-1: config index 4 descriptor too short (expected 29164, got 36) [ 696.894922][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.948308][ T5342] usb 4-1: config 0 has no interfaces? [ 697.054327][ T5342] usb 4-1: config index 5 descriptor too short (expected 29164, got 36) [ 697.095656][ T7224] gspca_sonixj: reg_r err -32 [ 697.103987][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.132526][ T7224] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 697.154214][ T5342] usb 4-1: config 0 has no interfaces? [ 697.199766][ T7224] usb 2-1: USB disconnect, device number 111 [ 697.244601][ T5342] usb 4-1: config index 6 descriptor too short (expected 29164, got 36) [ 697.254954][ T5815] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 697.316940][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.373447][ T5342] usb 4-1: config 0 has no interfaces? [ 697.382564][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.407305][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.416587][ T5342] usb 4-1: config index 7 descriptor too short (expected 29164, got 36) [ 697.425384][ T5342] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.435720][ T5342] usb 4-1: config 0 has no interfaces? [ 697.441276][ T5342] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 697.450511][ T5342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.460418][ T5342] usb 4-1: config 0 descriptor?? [ 697.492395][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 697.498983][ T5815] usb 5-1: config index 0 descriptor too short (expected 21364, got 36) [ 697.514072][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.524519][ T5815] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 697.540092][ T5815] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 697.558104][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.581889][ T5815] usb 5-1: config 0 descriptor?? [ 698.228237][T12572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.249871][T12572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.257891][ T9947] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 698.487628][ T9947] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 698.536253][ T9947] usb 2-1: config 0 has no interfaces? [ 698.536440][T12561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.572050][ T9947] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 698.655710][ T9947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.701267][ T9947] usb 2-1: Product: syz [ 698.707736][T12561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.708456][ T9947] usb 2-1: Manufacturer: syz [ 698.730226][ T9947] usb 2-1: SerialNumber: syz [ 698.826810][ T9947] usb 2-1: config 0 descriptor?? [ 698.895530][ T5815] usb 5-1: USB disconnect, device number 92 [ 699.061839][T12594] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 699.072573][T12594] SELinux: failed to load policy [ 699.320045][ T9947] usb 2-1: USB disconnect, device number 112 [ 700.521411][ T9947] usb 4-1: USB disconnect, device number 91 [ 700.810688][ T5815] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 700.870026][ T5342] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 700.971623][ T5815] usb 2-1: Using ep0 maxpacket: 16 [ 700.979087][ T5815] usb 2-1: config index 0 descriptor too short (expected 21364, got 36) [ 700.989591][T12602] trusted_key: syz.0.1850 sent an empty control message without MSG_MORE. [ 700.999098][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.017806][ T5815] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 701.027091][ T5815] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 701.110796][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.120688][ T5342] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.131047][ T5342] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.143164][ T5815] usb 2-1: config 0 descriptor?? [ 701.148859][ T5342] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 701.322673][ T5342] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.574979][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.584460][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.595872][ T5342] usb 5-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 701.605007][ T5342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 701.699813][ T5342] usb 5-1: Product: syz [ 701.707867][ T5342] usb 5-1: Manufacturer: syz [ 701.754698][ T5342] usb_debug 5-1:1.0: debug converter detected [ 701.763435][ T5342] usb 5-1: debug converter now attached to ttyUSB0 [ 701.786547][T12609] binder: 12607:12609 ioctl c00c620f 200000000000 returned -22 [ 702.131906][T12599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1848'. [ 702.153207][T12599] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1848'. [ 702.216374][ T5342] usb 2-1: USB disconnect, device number 113 [ 702.254731][ T5815] usb 5-1: USB disconnect, device number 93 [ 702.273586][ T5815] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 702.324815][ T5815] usb_debug 5-1:1.0: device disconnected [ 702.349317][T12614] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 702.359689][T12614] SELinux: failed to load policy [ 702.400011][ T29] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 703.340097][ T29] usb 4-1: device descriptor read/64, error -71 [ 703.480041][ T5815] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 703.571560][T12624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.581175][ T29] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 703.589628][T12624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 704.109416][ T5815] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.120948][ T5815] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.134451][ T5815] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 704.144839][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 704.150105][ T29] usb 4-1: device descriptor read/64, error -71 [ 704.155939][ T5815] usb 5-1: SerialNumber: syz [ 704.280320][ T29] usb usb4-port1: attempt power cycle [ 704.420401][ T5815] usb 5-1: 0:2 : does not exist [ 704.427356][ T5815] usb 5-1: unit 5 not found! [ 704.510437][ T5815] usb 5-1: USB disconnect, device number 94 [ 704.696819][T12636] Invalid ELF header magic: != ELF [ 704.721653][T12636] gadgetfs: bound to dummy_udc driver [ 705.390296][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 705.390340][ T30] audit: type=1400 audit(1785355087.552:880): avc: denied { read } for pid=12633 comm="syz.2.1859" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 705.423799][ T30] audit: type=1400 audit(1785355087.562:881): avc: denied { open } for pid=12633 comm="syz.2.1859" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 705.496343][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 705.695241][ T30] audit: type=1400 audit(1785355087.862:882): avc: denied { ioctl } for pid=12633 comm="syz.2.1859" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 706.774267][ T30] audit: type=1400 audit(1785355088.372:883): avc: denied { write } for pid=12649 comm="syz.2.1865" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 706.890092][ T30] audit: type=1400 audit(1785355088.402:884): avc: denied { audit_write } for pid=12649 comm="syz.2.1865" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 707.097050][T12660] netlink: 'syz.1.1863': attribute type 4 has an invalid length. [ 707.138151][T12660] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1863'. [ 707.211893][T12660] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 708.208318][ T30] audit: type=1400 audit(1785355090.372:885): avc: denied { execute } for pid=12668 comm="syz.3.1870" path="/selinux/avc/cache_threshold" dev="selinuxfs" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 709.398908][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202d [ 709.420653][ T29] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 709.469565][ T5615] Bluetooth: hci0: unexpected event for opcode 0x202a [ 709.589872][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 709.615124][ T29] usb 3-1: config index 0 descriptor too short (expected 21364, got 36) [ 709.645899][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.666140][ T29] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 709.675758][ T9947] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 709.695635][ T29] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 709.716753][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.812967][ T29] usb 3-1: config 0 descriptor?? [ 709.846419][ T9947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.946703][ T9947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.716437][ T9947] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 710.752154][ T9947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 710.761842][ T9947] usb 4-1: SerialNumber: syz [ 711.213692][ T9947] usb 4-1: 0:2 : does not exist [ 711.225163][ T9947] usb 4-1: unit 5 not found! [ 711.409382][ T5815] usb 3-1: USB disconnect, device number 101 [ 714.207043][ T9947] usb 4-1: USB disconnect, device number 95 [ 714.656717][T12724] binder: 12720:12724 ioctl c00c620f 200000000000 returned -22 [ 715.199867][T12731] syzkaller0: entered promiscuous mode [ 715.205614][T12731] syzkaller0: entered allmulticast mode [ 715.230172][ T29] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 715.370148][ T29] usb 2-1: device descriptor read/64, error -71 [ 715.395612][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.410198][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.609993][ T29] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 715.751078][ T29] usb 2-1: device descriptor read/64, error -71 [ 716.764795][ T29] usb usb2-port1: attempt power cycle [ 717.872073][ T29] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 717.923048][ T29] usb 2-1: device descriptor read/8, error -71 [ 718.135169][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 718.160991][T12761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1897'. [ 718.185929][T12761] netlink: 'syz.1.1897': attribute type 11 has an invalid length. [ 718.222841][T12761] netlink: 'syz.1.1897': attribute type 13 has an invalid length. [ 718.734816][ T5615] Bluetooth: hci2: unexpected event for opcode 0x202d [ 718.930036][ T5815] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 718.960064][ T9947] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 719.081550][ T5815] usb 4-1: device descriptor read/64, error -71 [ 719.120167][ T9947] usb 5-1: Using ep0 maxpacket: 16 [ 719.134356][ T9947] usb 5-1: config index 0 descriptor too short (expected 21364, got 36) [ 719.160073][ T9947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.171847][ T9947] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.190871][ T29] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 719.199783][ T9947] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.00 [ 719.215482][ T9947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.228634][ T9947] usb 5-1: config 0 descriptor?? [ 719.320019][ T5815] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 719.363315][ T29] usb 2-1: config 100 has an invalid interface number: 124 but max is 0 [ 719.376028][ T29] usb 2-1: config 100 has no interface number 0 [ 719.386734][ T29] usb 2-1: config 100 interface 124 has no altsetting 0 [ 719.401261][ T29] usb 2-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 719.411650][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.420054][ T29] usb 2-1: Product: syz [ 719.426147][ T29] usb 2-1: Manufacturer: syz [ 719.433864][ T29] usb 2-1: SerialNumber: syz [ 719.482269][ T5815] usb 4-1: device descriptor read/64, error -71 [ 719.714072][ T5342] usb 5-1: USB disconnect, device number 95 [ 719.820211][ T5815] usb usb4-port1: attempt power cycle [ 721.380807][ T5815] [ 721.383158][ T5815] ============================================ [ 721.389292][ T5815] WARNING: possible recursive locking detected [ 721.395423][ T5815] syzkaller #0 Tainted: G L [ 721.401373][ T5815] -------------------------------------------- [ 721.407513][ T5815] kworker/0:9/5815 is trying to acquire lock: [ 721.413558][ T5815] ffff8880337ad928 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 721.423299][ T5815] [ 721.423299][ T5815] but task is already holding lock: [ 721.430649][ T5815] ffff8880774d9128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 721.440377][ T5815] [ 721.440377][ T5815] other info that might help us debug this: [ 721.448411][ T5815] Possible unsafe locking scenario: [ 721.448411][ T5815] [ 721.455842][ T5815] CPU0 [ 721.459099][ T5815] ---- [ 721.462354][ T5815] lock(&grp->list_lock); [ 721.466765][ T5815] lock(&grp->list_lock); [ 721.471168][ T5815] [ 721.471168][ T5815] *** DEADLOCK *** [ 721.471168][ T5815] [ 721.479285][ T5815] May be due to missing lock nesting notation [ 721.479285][ T5815] [ 721.487578][ T5815] 3 locks held by kworker/0:9/5815: [ 721.492751][ T5815] #0: ffff88801bc0f140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 721.503186][ T5815] #1: ffffc90004307d08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 721.515075][ T5815] #2: ffff8880774d9128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 721.525239][ T5815] [ 721.525239][ T5815] stack backtrace: [ 721.531109][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.531129][ T5815] Tainted: [L]=SOFTLOCKUP [ 721.531135][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 721.531145][ T5815] Workqueue: events snd_rawmidi_input_event_work [ 721.531168][ T5815] Call Trace: [ 721.531174][ T5815] [ 721.531180][ T5815] dump_stack_lvl+0x100/0x190 [ 721.531198][ T5815] print_deadlock_bug.cold+0xbd/0xca [ 721.531220][ T5815] __lock_acquire+0x1256/0x1a40 [ 721.531240][ T5815] lock_acquire+0x1b9/0x370 [ 721.531256][ T5815] ? snd_seq_deliver_event+0x230/0x860 [ 721.531278][ T5815] ? do_raw_read_unlock+0x3f/0x70 [ 721.531299][ T5815] _raw_read_lock+0x5f/0x70 [ 721.531312][ T5815] ? snd_seq_deliver_event+0x230/0x860 [ 721.531332][ T5815] snd_seq_deliver_event+0x230/0x860 [ 721.531351][ T5815] ? do_raw_spin_lock+0x128/0x260 [ 721.531372][ T5815] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 721.531392][ T5815] ? mark_held_locks+0x40/0x70 [ 721.531408][ T5815] ? lockdep_hardirqs_on+0x78/0x100 [ 721.531423][ T5815] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 721.531437][ T5815] ? client_use_ptr+0x107/0x4b0 [ 721.531455][ T5815] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 721.531478][ T5815] queue_broadcast_event.isra.0+0x143/0x1b0 [ 721.531493][ T5815] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 721.531508][ T5815] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 721.531522][ T5815] ? snd_seq_timer_start+0x1f0/0x2a0 [ 721.531540][ T5815] snd_seq_control_queue+0x709/0xb70 [ 721.531555][ T5815] ? __pfx_event_input_timer+0x10/0x10 [ 721.531578][ T5815] __snd_seq_deliver_single_event+0x127/0x1c0 [ 721.531600][ T5815] snd_seq_deliver_single_event+0x31f/0x8c0 [ 721.531621][ T5815] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 721.531642][ T5815] ? __lock_acquire+0x49f/0x1a40 [ 721.531661][ T5815] snd_seq_deliver_event+0x44b/0x860 [ 721.531681][ T5815] ? do_raw_spin_lock+0x128/0x260 [ 721.531701][ T5815] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 721.531721][ T5815] ? mark_held_locks+0x40/0x70 [ 721.531737][ T5815] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 721.531750][ T5815] ? lockdep_hardirqs_on+0x78/0x100 [ 721.531765][ T5815] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 721.531778][ T5815] ? client_use_ptr+0x107/0x4b0 [ 721.531797][ T5815] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 721.531819][ T5815] send_timer_event.isra.0+0x130/0x190 [ 721.531840][ T5815] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 721.531861][ T5815] ? lockdep_hardirqs_on+0x78/0x100 [ 721.531876][ T5815] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 721.531892][ T5815] snd_seq_oss_timer_start+0x1db/0x320 [ 721.531914][ T5815] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 721.531935][ T5815] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 721.531953][ T5815] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 721.531967][ T5815] ? find_slot+0x166/0x1b0 [ 721.531980][ T5815] snd_seq_oss_midi_input+0x467/0xa30 [ 721.531997][ T5815] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 721.532014][ T5815] ? find_held_lock+0x2b/0x80 [ 721.532035][ T5815] ? snd_seq_port_use_ptr+0x128/0x190 [ 721.532054][ T5815] snd_seq_oss_event_input+0x194/0x250 [ 721.532076][ T5815] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 721.532099][ T5815] __snd_seq_deliver_single_event+0x127/0x1c0 [ 721.532121][ T5815] snd_seq_deliver_single_event+0x31f/0x8c0 [ 721.532142][ T5815] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 721.532163][ T5815] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 721.532176][ T5815] ? lockdep_hardirqs_on+0x78/0x100 [ 721.532191][ T5815] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 721.532204][ T5815] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 721.532223][ T5815] snd_seq_deliver_event+0x2c1/0x860 [ 721.532245][ T5815] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 721.532265][ T5815] ? mark_held_locks+0x40/0x70 [ 721.532281][ T5815] ? lockdep_hardirqs_on+0x78/0x100 [ 721.532296][ T5815] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 721.532309][ T5815] ? client_use_ptr+0x107/0x4b0 [ 721.532327][ T5815] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 721.532350][ T5815] snd_midi_input_event+0x32f/0x470 [ 721.532369][ T5815] ? __pfx_snd_midi_input_event+0x10/0x10 [ 721.532389][ T5815] ? __pfx_snd_midi_input_event+0x10/0x10 [ 721.532407][ T5815] snd_rawmidi_input_event_work+0x61/0x80 [ 721.532429][ T5815] process_one_work+0xa23/0x1940 [ 721.532447][ T5815] ? __pfx_process_one_work+0x10/0x10 [ 721.532464][ T5815] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 721.532486][ T5815] worker_thread+0x5ef/0xe50 [ 721.532504][ T5815] ? kthread+0x13a/0x450 [ 721.532516][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 721.532530][ T5815] kthread+0x370/0x450 [ 721.532543][ T5815] ? __pfx_kthread+0x10/0x10 [ 721.532556][ T5815] ret_from_fork+0x72b/0xd50 [ 721.532582][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 721.532601][ T5815] ? __switch_to+0x800/0x10f0 [ 721.532615][ T5815] ? __pfx_kthread+0x10/0x10 [ 721.532628][ T5815] ret_from_fork_asm+0x1a/0x30 [ 721.532652][ T5815] [ 722.271323][ T29] idmouse 2-1:100.124: Unable to find bulk-in endpoint. [ 722.285141][ T30] audit: type=1400 audit(1785355104.242:886): avc: denied { create } for pid=12792 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 722.311683][ T30] audit: type=1400 audit(1785355104.242:887): avc: denied { ioctl } for pid=12792 comm="syz.3.1904" path="socket:[42723]" dev="sockfs" ino=42723 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 722.380493][ T29] usb 2-1: USB disconnect, device number 119