last executing test programs: 8.063752565s ago: executing program 0 (id=1243): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001f80)=@bridge_getlink={0x28, 0x12, 0xdba2e9e4846a7f93, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x75800, 0x1}, [@IFLA_CARRIER={0x5, 0x1d, 0x2}]}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001c40)=ANY=[@ANYBLOB="b7000000000000224e00000000000000870a0000000000009500000004000000ba01ecdfd5da990bf0afc3aff996f4fb39214800fb861556e81cb24598f9f9fcddaca12510787d0f28d734dd93fde880c8f9512c89c308bc986666f9593fc6b7ea591be9d3ee46b9e37ecf2630b3d2b2cf047fd306de6da71feddfce1da5c75d44f18c58747bff97144a524fbf39d56de8d41eb15759244348e08c978128664c6a19faefed5cd4b824ba8e17340633"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0', [{}], 0xa, "f920c28cf608c141853890d87c62eee750c1"}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x108, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1000}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0xd0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xca, 0x2, "4305331084e36a7a064d55e7834675403341385886a8b98cd767e217be5715b6f2903506cfe400cd5aaf6e597c0c33df61c0599089ebcdf0e4a7d89267068e1ff640baa4d865c88e418c935efcbd051861a348e6d4f839d6f02b29bbd046a5842594335d563c832741e3cf26c8746f04511b4f16b4c879061ed4f064d5227cbc311e4058bec769092bb8dceaed4d7e5142d16c5a6c3ef7e987996c0be47658a2d9d5fbf3581b84aa2ffef4d0cd5d8e033f4b964229431f6664ac22fbd1fff02f3c2cc821d733"}]}, @NL80211_ATTR_IE={0x4}]]}, 0x108}}, 0x4000000) 7.945687392s ago: executing program 1 (id=1245): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00fdff04000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYRESHEX], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40eff, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x1}}, 0x0, 0x2, 0x66, @void, [{0xdd, 0xe3, "f3f303bf76a9c16c0e43caebc373e58ce649abc6de56a075b8f4b270d4032a91b94f276b0acaf8e456cfd05de89fef41081f70165da27f4c19c06b1c69d6b28f229fdc9ce5949f6f7a52680bedcc344e67dc6e42151076a3f7a6f6f62563fb043ba0a25b66395ed91cbe4f54801dfadbbbf5e579098d824b3afa80baa5f2ffe3c93cbebf6ccd92419e17e05ce8535e39192caef2a5d9e6e53dfd02ca07a010fe38dba8b27fabc12d5c4901869d07c00abfc44d0aa76ca5f6162a787e657df2d7146fb34217d7379aeb2ff1ef9fdda1bfdc313faee37cb5711ae40be6679693d93fd6a6"}, {0xdd, 0xa0, "20d4e4f8d84a15c372bdb04f2b90bd1b15a14054ea0be735deb4373f3167c0bb5eabd230bcdd16a5bbc81499920e79cf1c696dddbc3373f07704831064027ff3eb987fbbeb2e3240a309ce27b006358e694b224a0a4bbdc449a66d8ba07f041b358e599b26b10035dea17a18c9f643c2362bbaebe98ac1a2a3e3b59caa35755ff9c6dfee149b85c1ed44d44c8f1a78eee6295ac036903b1c40a389c25e22413e"}]}, 0x1a5) nanosleep(&(0x7f0000000440)={0x0, 0x3938700}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b960c12182426c944b8fd6b0a6ba0356808cf621ea2d923"], 0x28) 7.848632488s ago: executing program 0 (id=1247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000009511000000000000"], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x3, &(0x7f0000000640)=0x81) (async) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4ea", 0x3d, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = getpid() (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="19b200000400000016000000639e87aaffffff7f88bb2f7c73b834cc8a2bec601d8601c8c2462049460a7cc7c276dd3dbc723cc83ed7123aa7c95b4bb03ae7d274010d6742a5777ecf909c2a12046313dca95c77599e518d70d3fd0e7e46e0f11b30c152575625e4ad4f172057e44786a0a859ba4bba1b679faaf121ba3781aa3204323e04b2878fa61692b0c565b3352ee9e7a99bd2b8f9aa444ddd6c1deeb1f91e8dc138b576adeac6d455e04e181e2d7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000980)=""/206, 0xce}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000300)}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/136, 0x88}], 0x6, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x20) (async, rerun: 32) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x40}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x94}}, 0x0) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000940)=[{0x0}, {0x0}, {&(0x7f0000000800)}, {0x0}], 0x4, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) (async) r7 = openat$uinput(0xffffff9c, &(0x7f0000000700), 0x2, 0x0) (async) r8 = openat$snapshot(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SNAPSHOT_FREE(r8, 0x3305) ioctl$UI_GET_VERSION(r7, 0x405c5503, &(0x7f0000000780)) 7.2667271s ago: executing program 3 (id=1250): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045002, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='tcp_cong_state_set\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0xd4, &(0x7f0000000400)={0x0, 0x3092, 0x200, 0x3}, &(0x7f0000000180), &(0x7f0000000340)) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000040)="e52edf3d17", 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x1, 0x300) syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x0, 0x10000, 0x0, r1}, 0x0, &(0x7f00000002c0)) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07efc84000000000000008000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800820bf034000000000000000000009500000000000000bf7097c217055ca004e2089e780624a55b5c9fc143f7e9fa34aeb20b4696c74424288e49104ff524ccdf2f86c837c71a269af5d49f39f7371eff27ac87921e6364af13765bb0b6180fd580e2d1ea80cbfcab5e974be8ddca7a2c07d42c25a8e272abd8088ddcb32ba336649235e726ee12a96b4c7f70d5995153d700be4d395cc790b56b4f8bb5d39d807e20351bbb081fa9c1c9ff"], &(0x7f0000000240)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r7}, 0x18) r8 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="1207000000000800000c9e10a223010217011900"/36], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000003c0)={0xfffffffffffffe18, &(0x7f0000000600)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) 7.181443041s ago: executing program 0 (id=1251): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 7.045986641s ago: executing program 2 (id=1253): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9aea7ec9, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x33fe0}], 0x1}, 0x4000840) (fail_nth: 6) 6.461925049s ago: executing program 1 (id=1254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0), &(0x7f0000000340)=0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0x40186f40, 0x20000502) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_vmscan_lru_shrink_active\x00', r0, 0x0, 0x5}, 0x18) 6.051463522s ago: executing program 0 (id=1255): socket$inet(0x2, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x20008, 0x2, 0x100, 0x5, 0x1ff, 0x4007}, 0x20) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000002b) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0x101}], 0x1, 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000fd500ef00001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) 5.669506317s ago: executing program 2 (id=1257): timer_create(0x7, 0x0, 0x0) timer_delete(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) close(0xffffffffffffffff) fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x619) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000002800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@generic={0x33, 0x4, 0xa, 0x1, 0xfe6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002340)='GPL\x00', 0x31e9, 0x84, &(0x7f0000002740)=""/132, 0x41000, 0x27, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x4, 0x4, 0x8, 0xc}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002480)=[r4, r4, r4, r4, r3, r4, r4], &(0x7f00000024c0)=[{0x3, 0x5, 0x2000000f, 0x3}, {0x1, 0x4, 0xb, 0xa}], 0x10, 0x3, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="bcea26c5ac32d99fb7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) (async) ptrace$getregset(0x4205, r6, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) openat$cgroup_int(r5, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) (async) r7 = openat$cgroup_int(r5, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000600), 0x12) (async) write$cgroup_int(r7, &(0x7f0000000600), 0x12) socket$nl_sock_diag(0x10, 0x3, 0x4) 5.150911273s ago: executing program 1 (id=1258): ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000640)) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'gre0\x00', 0x2000081}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x80, @mcast1, 0x7}}, {{0xa, 0x4e22, 0x4aa0000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}}, 0x108) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe48) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002205000000075119aa1eb7"], 0x0}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000002700)=0x1d) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) r6 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r6, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c0005001a0608"], 0x15) 4.92953257s ago: executing program 2 (id=1260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x2c00) readv(r1, &(0x7f0000001d40)=[{&(0x7f0000001cc0)=""/2, 0x2}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) r5 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r6, &(0x7f00000000c0)='./file0\x00') openat(r6, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0xffffffffffffff6a) write$FUSE_BMAP(r7, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@delpolicy={0x1200, 0x14, 0x1, 0x70bd2d, 0x40, {{@in=@multicast2, @in=@multicast1, 0x4e20, 0x2, 0x4e20, 0x9, 0xa, 0xa0, 0x0, 0x3a, 0x0, r8}, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in=@remote}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @offload={0xc, 0x1c, {0x0, 0x3}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x7, 0x1000, "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"}}, @lifetime_val={0x24, 0x9, {0xa79, 0x1, 0x40}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @algo_auth_trunc={0x142, 0x14, {{'sha512\x00'}, 0x7b0, 0x40, "16f49d4acebf0ab289ab27b029b48498007c5f3026aa89ba784b5c91e5c6dd08215fe3b210aed00b5bdb5dc697f0d1a821561f57a10fe9c7bfec26b327941b9b3e92b9892374948a264113a9c83b3fcdaed448580c3e90ef329e49f6689bfdb880f13a1952309836d4f170e8cc2a1fb14381d0583945a32ead052f62591597c6f827f95dbaddce98bdc1f0bb84b1b334d0296a7bffe64fd7fbe250d3d4eb390af4438e6a249b25f962f9788658864e49927b04eb2f90e06200972cc37665aee6ed1a0df0bc9be64064b050b1ddaa9739677fad1f65fde47012ac8e1b7b95abf48f22c6cfa44aef8c7948e387afc0479b31ae7176898d"}}]}, 0x1200}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b26, 0x0) syz_io_uring_setup(0x2a20, 0x0, 0x0, &(0x7f00000002c0)) creat(0x0, 0x80) openat$sysfs(0xffffffffffffff9c, 0x0, 0xc10800, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xa, 0x101, 0x4ff, 0x4001, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x1, @void, @value, @void, @value}, 0x50) fremovexattr(r3, 0x0) 4.56706011s ago: executing program 2 (id=1262): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0x40103e05, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e"}) syz_usb_connect$uac1(0x5, 0x93, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x7, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5440, 0x97}, [@processing_unit={0xc, 0x24, 0x7, 0x5, 0x0, 0x0, "2013de5108"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x8, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd1, 0x4, 0x8, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x40, 0xb, 0xd4, {0x7, 0x25, 0x1, 0x81, 0x1, 0xc81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x6, 0x40, {0x7, 0x25, 0x1, 0x80, 0x46}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 4.214567396s ago: executing program 3 (id=1265): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) setuid(0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000340)=[0xee00]) setregid(0x0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r2, 0x504) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 4.153733321s ago: executing program 3 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 3.833425656s ago: executing program 4 (id=1267): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9aea7ec9, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x33fe0}], 0x1}, 0x4000840) (fail_nth: 7) 3.527359655s ago: executing program 4 (id=1268): syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x17da, 0x10100, 0x0, 0x36c}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) sendfile(r3, r4, 0x0, 0x23894) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "a08d78a244c24d14", "b4e91068bf22767d4a6c56cf4bc745b3", '\x00', "0002b3d353dd00"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) sendmsg$IEEE802154_LIST_PHY(r0, 0x0, 0x20000800) syz_genetlink_get_family_id$ieee802154(0x0, r0) unshare(0x68040200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001300010026bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100000002051000008002e000300000008001300", @ANYRES32=0x0, @ANYBLOB="797027c62a9cb74f94c7876e7f75e3f2e1ffe356b8da3297437b532f9d5c2e4d1b6128392710438b03d8a46cfb08132b5bafc464fd402f2554dd58ac0000000054dd951425578abe92ee4e9ee6"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8800) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 3.100432758s ago: executing program 3 (id=1269): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0x5) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='f', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) sendmsg$inet(r3, &(0x7f0000000f00)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x20}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x8c8, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.941784642s ago: executing program 2 (id=1270): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpgid(0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 2.590822821s ago: executing program 1 (id=1271): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) get_robust_list(0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x200, "2224644c23084eadc0dcad06a4954896fb9f2e1cec96d4200f583153efe8f343"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x6, "03aea2e9dd8227baf6c1a8a4de52bc9539d84ff109710109340406f51cb9e552"}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000a00)={0x2020}, 0x2020) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x3, 0x22080) ioperm(0x8, 0x8000, 0x72de) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x48) fcntl$setstatus(r0, 0x4, 0x42000) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 2.217358172s ago: executing program 0 (id=1272): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012030020f003176c400000000001090224726300000000090400001207016080028b01020000000000090582020002"], 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r3) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x3caa4c6d9a6b38ed, 0x2007, @fd_index=0x9, 0xf, &(0x7f0000000540), 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000140)={0x3, 0x88, 0x60000}, 0x20) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x100000001) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r9, 0x4bfa, 0x10000000000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="5aee41dea43e63a3f7fb7f11c771", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_disconnect(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x50000, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000000c0)="bad104b03eee0f23a166f7531466b99008000066b85375000066ba000000000f30b83a0b8ed00f3804fb0f01df6526260fe1c90f0f7283b6baf80c66b85b5ea18e66efbafc0cb000ee", 0x49}], 0x1, 0x0, 0x0, 0x0) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x103801, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r12, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000c0001800800030006000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008090}, 0x8800) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1ff}, &(0x7f0000000480)=0x8) ioctl$KVM_RUN(r11, 0xae80, 0x0) read(r7, 0x0, 0x0) 2.17356481s ago: executing program 4 (id=1273): syz_io_uring_setup(0x5b1e, &(0x7f0000000080)={0x0, 0xeaec, 0x400, 0x3, 0x132}, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000005000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.011177973s ago: executing program 4 (id=1274): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r2, 0x200004) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e8, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 1.841577855s ago: executing program 3 (id=1275): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0x1, @raw_data="7092498c6becf6eb3b6a3306f1b5b5bf00e1722c16c858a4eca35306acccec19e47d4418bcfc88e494be44d3b38c29340332e60bc19666ac348ffcb89382f353774bb17c2a7a80a7ba7649f41025454e4fb515672b15d8024cb49355d370bebc4b872b51dc051a89ad3df09bb32a1819e9d15e2651cd59f63ba9e156d46fd72649e1069a7e68252527d48b45568112571f0d90f423d45dff44a637fd5b6d4cd170c231b81925c0d543e900563a7a16747f4fa6ed878b033ed164cc080e47680ecd9688ec26b069a6"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000340)={0x0, 0x1, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x100008d}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x666) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_io_uring_setup(0x5191, &(0x7f0000000380)={0x0, 0xb4f2, 0x8, 0x0, 0x16b}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x43, 0xa0, 0xb8, 0x98, 0x188, 0x178, 0x178, 0x188, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0xff000000, 0x0, 'caif0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9, 0x3}, 0x12a, 0x70, 0xb8, 0x0, {0x0, 0x7a010000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc, {0x7}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0xe, 0x4, 0x1, 0x0, 0x3, 0x4], 0x0, 0x9}, {0x3, [0x0, 0x1, 0x5, 0x7], 0x4, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) getsockopt$inet_mreqn(r1, 0x0, 0x3, 0x0, &(0x7f0000001280)) read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.292214688s ago: executing program 3 (id=1276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x0, 0x6, "4f982237ba41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x1d}, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, 0xee00) r2 = msgget$private(0x0, 0x100) syz_open_dev$sndctrl(&(0x7f0000000280), 0x7, 0x80000) msgrcv(r2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf925}]}, 0x28}}, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f00000005c0)={{0x0, 0xee00, 0x0, 0xffffffffffffffff, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x67}}, './file0\x00'}) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup(r7, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) 1.162602673s ago: executing program 4 (id=1277): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0)='P', 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r1, &(0x7f0000000300)="ba680e688b374f92dd100ceefbd8692ad8b6e4b0b12a92791dd2ace284c1bfd31e6ef71fd3c28ce0edcc7a328d0990871f", &(0x7f0000000140)=""/11, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f00000000c0), 0x0}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r2) r3 = syz_io_uring_setup(0x235, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40800) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 905.773913ms ago: executing program 1 (id=1278): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000840)={{0x400007b, 0x4, 0x4, 0x4, 'syz0\x00', 0x4}, 0x1, 0x30000024, 0xf, r5, 0xfffffffffffffd8a, 0x4, 'syz1\x00', 0x0, 0x53}) 761.747817ms ago: executing program 2 (id=1279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 690.850024ms ago: executing program 1 (id=1280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = timerfd_create(0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000200)) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x1ff}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002201000000a2"], 0x0}, 0x0) 283.508367ms ago: executing program 4 (id=1281): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) syz_open_procfs(r2, &(0x7f00000002c0)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) r5 = dup2(r1, r0) close_range(r5, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x2c00) readv(r1, &(0x7f0000001d40)=[{&(0x7f0000001cc0)=""/2, 0x2}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r4) r5 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r6, &(0x7f00000000c0)='./file0\x00') openat(r6, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004800)={0x2020, 0x0, 0x0, 0x0}, 0xffffffffffffff6a) write$FUSE_BMAP(r7, 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=@delpolicy={0x1200, 0x14, 0x1, 0x70bd2d, 0x40, {{@in=@multicast2, @in=@multicast1, 0x4e20, 0x2, 0x4e20, 0x9, 0xa, 0xa0, 0x0, 0x3a, 0x0, r8}, 0x0, 0x2}, [@srcaddr={0x14, 0xd, @in=@remote}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @offload={0xc, 0x1c, {0x0, 0x3}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x7, 0x1000, "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"}}, @lifetime_val={0x24, 0x9, {0xa79, 0x1, 0x40}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @algo_auth_trunc={0x142, 0x14, {{'sha512\x00'}, 0x7b0, 0x40, "16f49d4acebf0ab289ab27b029b48498007c5f3026aa89ba784b5c91e5c6dd08215fe3b210aed00b5bdb5dc697f0d1a821561f57a10fe9c7bfec26b327941b9b3e92b9892374948a264113a9c83b3fcdaed448580c3e90ef329e49f6689bfdb880f13a1952309836d4f170e8cc2a1fb14381d0583945a32ead052f62591597c6f827f95dbaddce98bdc1f0bb84b1b334d0296a7bffe64fd7fbe250d3d4eb390af4438e6a249b25f962f9788658864e49927b04eb2f90e06200972cc37665aee6ed1a0df0bc9be64064b050b1ddaa9739677fad1f65fde47012ac8e1b7b95abf48f22c6cfa44aef8c7948e387afc0479b31ae7176898d"}}]}, 0x1200}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) syz_io_uring_setup(0x2a20, 0x0, 0x0, 0x0) creat(0x0, 0x80) openat$sysfs(0xffffffffffffff9c, 0x0, 0xc10800, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0xa, 0x101, 0x4ff, 0x4001, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x1, @void, @value, @void, @value}, 0x50) fremovexattr(r3, 0x0) kernel console output (not intermixed with test programs): c000003e syscall=202 compat=0 ip=0x7ff680b7fed9 code=0x7ffc0000 [ 256.188159][ T29] audit: type=1326 audit(1733677048.614:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff680b7fed9 code=0x7ffc0000 [ 256.235338][ T29] audit: type=1326 audit(1733677048.614:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff680b7fed9 code=0x7ffc0000 [ 256.258633][ T29] audit: type=1326 audit(1733677048.614:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff680b7fed9 code=0x7ffc0000 [ 256.281915][ T29] audit: type=1326 audit(1733677048.614:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff680b7fed9 code=0x7ffc0000 [ 256.305163][ T29] audit: type=1326 audit(1733677048.614:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff680b7fed9 code=0x7ffc0000 [ 256.329418][ T29] audit: type=1326 audit(1733677048.614:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff680b7fed9 code=0x7ffc0000 [ 256.357106][ T9] usb 5-1: USB disconnect, device number 53 [ 256.652071][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'. [ 256.841832][ T5866] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 257.018123][ T5866] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 257.058911][ T5866] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.158437][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.180096][ T9758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.189967][ T5866] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.438423][ T9775] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 257.522238][ T8760] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 257.559886][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 257.722337][ T9] usb 5-1: device descriptor read/64, error -71 [ 257.748944][ T8760] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 257.761027][ T8760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 257.787871][ T8760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 257.882023][ T8760] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.895221][ T8760] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.905495][ T8760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.950937][ T8760] usb 1-1: config 0 descriptor?? [ 257.982239][ T9768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 257.991695][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 258.131740][ T9] usb 5-1: device descriptor read/64, error -71 [ 258.242887][ T9] usb usb5-port1: attempt power cycle [ 258.468284][ T8760] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 258.482489][ T8760] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 258.557497][ T8760] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 258.614451][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 258.686232][ T9] usb 5-1: device descriptor read/8, error -71 [ 258.941642][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 258.975843][ T9] usb 5-1: device descriptor read/8, error -71 [ 259.091789][ T9] usb usb5-port1: unable to enumerate USB device [ 259.164414][ T9] usb 4-1: USB disconnect, device number 31 [ 259.261686][ T5946] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 259.412097][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 259.426902][ T5946] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 259.437424][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.445862][ T5946] usb 2-1: Product: syz [ 259.450245][ T5946] usb 2-1: Manufacturer: syz [ 259.467917][ T5946] usb 2-1: SerialNumber: syz [ 259.478775][ T5946] usb 2-1: config 0 descriptor?? [ 259.691653][ T5946] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 260.508926][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.509196][ T8] usb 4-1: [UEAGLE-ATM] firmware is not available [ 260.518946][ T5828] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 260.523829][ T117] usb 4-1: [UEAGLE-ATM] firmware is not available [ 260.571742][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.593798][ T5866] usb 1-1: USB disconnect, device number 37 [ 260.606691][ T5946] usb write operation failed. (-71) [ 260.621455][ T5946] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.643579][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 260.643593][ T29] audit: type=1400 audit(1733677053.084:986): avc: denied { append } for pid=9813 comm="syz.3.906" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 260.686227][ T5946] dvbdev: DVB: registering new adapter (Terratec H7) [ 260.695436][ T5946] usb 2-1: media controller created [ 260.700818][ T29] audit: type=1400 audit(1733677053.124:987): avc: denied { ioctl } for pid=9811 comm="syz.2.907" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 260.700911][ T5946] usb read operation failed. (-71) [ 260.761848][ T5946] usb write operation failed. (-71) [ 260.764940][ T5828] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 260.784497][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.791056][ T5946] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 261.028079][ T29] audit: type=1400 audit(1733677053.334:988): avc: denied { name_connect } for pid=9818 comm="syz.2.909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 261.048110][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.111813][ T5866] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 261.236290][ T5828] usb 5-1: config 0 descriptor?? [ 261.277817][ T29] audit: type=1400 audit(1733677053.384:989): avc: denied { accept } for pid=9818 comm="syz.2.909" lport=60980 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.300594][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.369407][ T5866] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.378386][ T5866] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 261.789544][ T5828] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 261.789620][ T29] audit: type=1400 audit(1733677053.394:990): avc: denied { write } for pid=9818 comm="syz.2.909" lport=60980 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.799640][ T29] audit: type=1400 audit(1733677053.394:991): avc: denied { setopt } for pid=9818 comm="syz.2.909" lport=60980 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 261.873167][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'. [ 261.916724][ T5866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.949677][ T5946] usb 2-1: USB disconnect, device number 22 [ 262.091311][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 262.257598][ T5866] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 262.290905][ T5828] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 262.305534][ T5828] [drm:udl_init] *ERROR* Selecting channel failed [ 262.313269][ T5866] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.337068][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.359486][ T5828] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 262.368993][ T5866] usb 1-1: Product: syz [ 262.377234][ T5866] usb 1-1: Manufacturer: syz [ 262.413635][ T5828] [drm] Initialized udl on minor 2 [ 262.432328][ T5866] cdc_wdm 1-1:1.0: skipping garbage [ 262.548618][ T5828] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 262.556804][ T5866] cdc_wdm 1-1:1.0: skipping garbage [ 262.563782][ T5866] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 262.575655][ T5866] cdc_wdm 1-1:1.0: Unknown control protocol [ 262.737112][ T5828] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 262.764850][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 262.774168][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 262.782427][ T5866] usb 1-1: USB disconnect, device number 38 [ 262.789090][ T5828] usb 5-1: USB disconnect, device number 58 [ 262.831619][ T5946] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 263.013006][ T5946] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 263.024699][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.060671][ T5946] usb 2-1: config 0 descriptor?? [ 263.104047][ T5946] usbtest 2-1:0.0: Linux user mode test driver [ 263.128807][ T5946] usbtest 2-1:0.0: low-speed {control} tests [ 263.303191][ T9837] tap0: tun_chr_ioctl cmd 1074025677 [ 263.308819][ T9837] tap0: linktype set to 780 [ 263.313972][ T9835] tap0: tun_chr_ioctl cmd 1074025677 [ 263.324037][ T9835] tap0: linktype set to 780 [ 263.330256][ T9850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.351816][ T9850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.360600][ T8] usb 2-1: USB disconnect, device number 23 [ 263.388951][ T9850] rdma_op ffff88807cdad9f0 conn xmit_rdma 0000000000000000 [ 263.412359][ T9852] rdma_op ffff8880357f19f0 conn xmit_rdma 0000000000000000 [ 263.562357][ T5946] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 263.711713][ T5946] usb 1-1: device descriptor read/64, error -71 [ 263.869559][ T8] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 263.935955][ T29] audit: type=1400 audit(1733677056.374:992): avc: denied { read } for pid=9868 comm="syz.3.924" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 263.958672][ T29] audit: type=1400 audit(1733677056.374:993): avc: denied { open } for pid=9868 comm="syz.3.924" path="/179/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 263.958836][ T9870] block device autoloading is deprecated and will be removed. [ 263.981460][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.011708][ T5946] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 264.031571][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 264.039954][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 264.049865][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.059148][ T8] usb 5-1: Product: syz [ 264.063620][ T8] usb 5-1: Manufacturer: syz [ 264.068261][ T8] usb 5-1: SerialNumber: syz [ 264.074866][ T8] usb 5-1: config 0 descriptor?? [ 264.141862][ T5946] usb 1-1: device descriptor read/64, error -71 [ 264.166299][ T29] audit: type=1400 audit(1733677056.604:994): avc: denied { write } for pid=9871 comm="syz.1.925" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 264.212368][ T29] audit: type=1400 audit(1733677056.634:995): avc: denied { accept } for pid=9871 comm="syz.1.925" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 264.352886][ T5946] usb usb1-port1: attempt power cycle [ 264.358502][ T8] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 264.711663][ T5946] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 264.732234][ T5946] usb 1-1: device descriptor read/8, error -71 [ 265.164361][ T9860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.172983][ T5946] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 265.183926][ T9860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.192461][ T5946] usb 1-1: device descriptor read/8, error -71 [ 265.206377][ T8] usb write operation failed. (-71) [ 265.217588][ T8] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.228585][ T8] dvbdev: DVB: registering new adapter (Terratec H7) [ 265.236675][ T8] usb 5-1: media controller created [ 265.237714][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 265.257816][ T8] usb read operation failed. (-71) [ 265.265515][ T8] usb write operation failed. (-71) [ 265.276267][ T8] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 265.297506][ T8] usb 5-1: USB disconnect, device number 59 [ 265.306094][ T5946] usb usb1-port1: unable to enumerate USB device [ 265.615399][ T901] usb 3-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 265.637727][ T901] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 265.695959][ T901] usb 3-1: USB disconnect, device number 20 [ 265.891045][ T9899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.912768][ T9901] 9pnet_fd: Insufficient options for proto=fd [ 266.028806][ T9907] macvlan3: entered promiscuous mode [ 266.034835][ T901] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 266.047622][ T9907] team_slave_0: entered promiscuous mode [ 266.053702][ T9907] team_slave_1: entered promiscuous mode [ 266.059404][ T9907] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 266.070715][ T9907] team0: entered promiscuous mode [ 266.076582][ T9907] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 266.089427][ T9907] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 266.328737][ T5946] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 266.352805][ T901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.374040][ T901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.385596][ T901] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 266.451941][ T9917] netlink: 'syz.1.936': attribute type 29 has an invalid length. [ 266.577080][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 266.664450][ T5946] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.804926][ T5946] usb 5-1: config 3 has an invalid interface number: 7 but max is 1 [ 266.898066][ T901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.907792][ T901] usb 3-1: config 0 descriptor?? [ 266.919897][ T5946] usb 5-1: config 3 has no interface number 0 [ 266.930124][ T901] usb 3-1: can't set config #0, error -71 [ 266.942377][ T901] usb 3-1: USB disconnect, device number 21 [ 266.948415][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 266.958657][ T5946] usb 5-1: config 3 interface 7 has no altsetting 0 [ 266.986274][ T5946] usb 5-1: config 3 interface 1 has no altsetting 0 [ 267.170409][ T5946] usb 5-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=e3.e2 [ 267.179813][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.188158][ T5946] usb 5-1: Product: syz [ 267.192832][ T5946] usb 5-1: Manufacturer: syz [ 267.197431][ T5946] usb 5-1: SerialNumber: syz [ 267.237425][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 267.237441][ T29] audit: type=1400 audit(1733677059.674:997): avc: denied { connect } for pid=9922 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 267.294971][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'. [ 267.755625][ T5946] xr_serial 5-1:3.7: xr_serial converter detected [ 267.772883][ T5946] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 267.779258][ T5946] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 267.819912][ T9969] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.941'. [ 267.846141][ T9969] netlink: zone id is out of range [ 267.855543][ T5946] usb 5-1: USB disconnect, device number 60 [ 267.862790][ T5946] xr_serial 5-1:3.7: device disconnected [ 267.875557][ T9969] netlink: zone id is out of range [ 267.880710][ T9969] netlink: zone id is out of range [ 267.905265][ T9969] netlink: zone id is out of range [ 267.919386][ T9969] netlink: zone id is out of range [ 267.925031][ T9969] netlink: zone id is out of range [ 267.930229][ T9969] netlink: zone id is out of range [ 267.940736][ T9969] netlink: zone id is out of range [ 267.947083][ T9969] netlink: zone id is out of range [ 267.961925][ T9969] netlink: zone id is out of range [ 268.062688][ T29] audit: type=1400 audit(1733677060.504:998): avc: denied { map } for pid=9973 comm="syz.2.944" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 268.094167][ T29] audit: type=1400 audit(1733677060.524:999): avc: denied { execute } for pid=9973 comm="syz.2.944" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 268.118409][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.175019][ T5828] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 268.205348][ T901] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 268.457729][ T5946] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 268.468596][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 268.480780][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 268.493142][ T901] usb 1-1: Using ep0 maxpacket: 32 [ 268.536277][ T901] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 268.545339][ T901] usb 1-1: config 0 has no interface number 0 [ 268.664512][ T5828] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 268.671574][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 268.673726][ T901] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.680616][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.708445][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.731713][ T901] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.745336][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.751537][ T5828] usb 4-1: Product: syz [ 268.755396][ T5946] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 268.759502][ T5828] usb 4-1: Manufacturer: syz [ 268.768354][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.773529][ T901] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 268.786503][ T5946] usb 3-1: config 0 descriptor?? [ 268.840547][ T5828] usb 4-1: SerialNumber: syz [ 268.850307][ T901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.861266][ T5828] usb 4-1: config 0 descriptor?? [ 268.867235][ T901] usb 1-1: config 0 descriptor?? [ 269.082520][ T5828] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 269.149961][ T9994] tap0: tun_chr_ioctl cmd 1074025672 [ 269.163815][ T9994] tap0: ignored: set checksum enabled [ 269.342021][ T5946] corsair 0003:1B1C:1B02.0010: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 269.449080][T10001] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 269.458297][T10001] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 269.476008][T10001] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 269.480674][ T901] uclogic 0003:28BD:0094.000F: pen parameters not found [ 269.490625][ T901] uclogic 0003:28BD:0094.000F: interface is invalid, ignoring [ 269.572344][ T9977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.596375][ T9977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.615389][ T5946] corsair 0003:1B1C:1B02.0010: Failed to get K90 initial state (error -71). [ 269.645722][ T5946] usb 3-1: USB disconnect, device number 22 [ 269.700519][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.724150][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.756269][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.773091][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.793827][ T117] usb 1-1: USB disconnect, device number 43 [ 269.830526][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 269.925227][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.934595][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.944363][ T5828] usb write operation failed. (-71) [ 269.950983][ T5828] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 269.964331][ T5828] dvbdev: DVB: registering new adapter (Terratec H7) [ 269.971381][ T5828] usb 4-1: media controller created [ 269.977309][ T5828] usb read operation failed. (-71) [ 269.986152][ T5828] usb write operation failed. (-71) [ 269.993088][ T5828] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 270.014756][ T5828] usb 4-1: USB disconnect, device number 32 [ 270.301693][ T901] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 270.388355][ T29] audit: type=1400 audit(1733677062.824:1000): avc: denied { write } for pid=10010 comm="syz.1.956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 270.471553][ T901] usb 5-1: Using ep0 maxpacket: 32 [ 270.479279][ T901] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 270.487985][ T901] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 270.499408][ T901] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 270.516879][ T901] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 270.531385][ T901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 270.541632][ T901] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 270.550882][ T901] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 270.560042][T10017] mkiss: ax0: crc mode is auto. [ 270.570652][ T901] usb 5-1: Product: syz [ 270.575411][ T901] usb 5-1: Manufacturer: syz [ 270.580184][ T901] usb 5-1: SerialNumber: syz [ 270.601831][ T901] usb 5-1: config 0 descriptor?? [ 270.665510][ T901] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 270.769795][ T901] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 271.100509][ T901] usb 5-1: USB disconnect, device number 61 [ 271.141818][ T901] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 271.183710][ T29] audit: type=1400 audit(1733677063.594:1001): avc: denied { setopt } for pid=10024 comm="syz.0.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 271.242039][T10029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.961'. [ 271.537367][ T117] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 271.579265][T10034] netlink: 'syz.2.963': attribute type 1 has an invalid length. [ 271.658226][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.963'. [ 271.703033][ T117] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 271.729836][ T117] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=51.29 [ 271.752469][ T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.787517][ T117] usb 2-1: Product: syz [ 271.811301][ T117] usb 2-1: Manufacturer: syz [ 271.815980][ T117] usb 2-1: SerialNumber: syz [ 271.864685][T10044] veth0_to_team: entered promiscuous mode [ 271.870489][T10044] veth0_to_team: entered allmulticast mode [ 272.064647][T10027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.080638][T10027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.108107][ T117] bfusb 2-1:252.0: probe with driver bfusb failed with error -5 [ 272.128462][ T117] usb 2-1: USB disconnect, device number 24 [ 272.209166][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 273.003413][ T29] audit: type=1400 audit(1733677065.444:1002): avc: denied { map } for pid=10072 comm="syz.1.973" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 273.084012][T10084] bond0: (slave team0): Error: Device can not be enslaved while up [ 273.232892][ T29] audit: type=1400 audit(1733677065.664:1003): avc: denied { call } for pid=10072 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 273.307930][ T29] audit: type=1400 audit(1733677065.744:1004): avc: denied { map } for pid=10089 comm="syz.2.977" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 273.330902][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.377613][T10091] syzkaller0: entered promiscuous mode [ 273.393367][T10091] syzkaller0: entered allmulticast mode [ 273.598014][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.980'. [ 274.741548][ T29] audit: type=1400 audit(1733677067.174:1005): avc: denied { connect } for pid=10101 comm="syz.4.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 275.017994][ T117] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 275.071247][T10120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 275.192042][ T117] usb 4-1: Using ep0 maxpacket: 16 [ 275.265952][ T117] usb 4-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 275.284531][ T117] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.318494][ T117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 275.331680][ T117] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.346461][ T117] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 275.357533][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.377126][ T117] usb 4-1: config 0 descriptor?? [ 275.385896][ T117] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 275.550315][T10122] usb usb6: usbfs: process 10122 (syz.0.985) did not claim interface 0 before use [ 275.844265][ C0] net_ratelimit: 5 callbacks suppressed [ 275.844277][ C0] bridge0: received packet on gretap1 with own address as source address (addr:0a:a1:68:da:58:43, vlan:0) [ 276.678242][ T29] audit: type=1400 audit(1733677069.114:1006): avc: denied { accept } for pid=10116 comm="syz.3.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 276.697840][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.198965][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 277.636598][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 278.240246][ T117] usb 4-1: USB disconnect, device number 33 [ 279.662239][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.997'. [ 279.891195][T10154] lo speed is unknown, defaulting to 1000 [ 279.954863][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.966208][T10154] lo speed is unknown, defaulting to 1000 [ 279.985224][T10154] lo speed is unknown, defaulting to 1000 [ 279.995156][ T29] audit: type=1400 audit(1733677072.434:1007): avc: denied { write } for pid=10165 comm="syz.3.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 280.015016][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.048424][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.350580][T10176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.359957][ T117] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 280.372595][T10176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.404970][T10166] could not allocate digest TFM handle sha384-ce [ 280.542412][T10182] vti0: entered allmulticast mode [ 280.651007][ T29] audit: type=1400 audit(1733677073.084:1008): avc: denied { create } for pid=10185 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 280.706448][ T29] audit: type=1400 audit(1733677073.124:1009): avc: denied { ioctl } for pid=10185 comm="syz.3.1002" path="socket:[25462]" dev="sockfs" ino=25462 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 281.150475][T10154] infiniband sz1: set active [ 281.180384][T10154] infiniband sz1: added lo [ 281.188395][ T29] audit: type=1400 audit(1733677073.624:1010): avc: denied { remount } for pid=10199 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 281.237916][T10154] sz1: rxe_create_cq: returned err = -12 [ 281.247539][T10154] infiniband sz1: Couldn't create ib_mad CQ [ 281.259274][T10154] infiniband sz1: Couldn't open port 1 [ 281.271399][ T8] lo speed is unknown, defaulting to 1000 [ 281.288382][T10201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1003'. [ 281.306366][ T29] audit: type=1400 audit(1733677073.744:1011): avc: denied { write } for pid=10188 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 281.357647][T10154] RDS/IB: sz1: added [ 281.362437][T10154] smc: adding ib device sz1 with port count 1 [ 281.368867][T10154] smc: ib device sz1 port 1 has pnetid [ 281.377311][T10154] lo speed is unknown, defaulting to 1000 [ 281.403355][ T5866] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 281.565512][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 281.821915][ T9] lo speed is unknown, defaulting to 1000 [ 281.869003][T10154] lo speed is unknown, defaulting to 1000 [ 281.913481][T10154] lo speed is unknown, defaulting to 1000 [ 281.956900][T10154] lo speed is unknown, defaulting to 1000 [ 282.001996][T10154] lo speed is unknown, defaulting to 1000 [ 282.157968][ T117] usb 3-1: config 0 has no interfaces? [ 282.159466][ T117] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 282.159490][ T117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 282.159509][ T117] usb 3-1: Product: syz [ 282.159524][ T117] usb 3-1: Manufacturer: syz [ 282.159538][ T117] usb 3-1: SerialNumber: syz [ 282.160992][ T117] usb 3-1: config 0 descriptor?? [ 282.166485][ T29] audit: type=1400 audit(1733677074.584:1012): avc: denied { ioctl } for pid=10208 comm="syz.0.1010" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 282.194398][T10212] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 282.194418][T10212] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1012'. [ 282.218216][ T5866] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 536 [ 282.228565][ T5866] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 282.228596][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.228618][ T5866] usb 4-1: Product: syz [ 282.228634][ T5866] usb 4-1: Manufacturer: syz [ 282.228650][ T5866] usb 4-1: SerialNumber: syz [ 282.230783][T10198] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 282.232612][ T5866] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 282.241373][ T29] audit: type=1400 audit(1733677074.674:1013): avc: denied { write } for pid=5172 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.241408][ T29] audit: type=1400 audit(1733677074.674:1014): avc: denied { remove_name } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.241438][ T29] audit: type=1400 audit(1733677074.674:1015): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 282.241508][ T29] audit: type=1400 audit(1733677074.674:1016): avc: denied { add_name } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.383123][ T5866] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.404737][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'. [ 282.410864][ T9] usb 3-1: USB disconnect, device number 23 [ 282.482687][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.541599][ T117] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 282.598437][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.931595][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 282.939198][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.962854][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.010113][ T117] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 283.036788][T10227] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 283.043556][T10227] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 283.061695][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.088358][ T117] usb 2-1: config 0 descriptor?? [ 283.149311][T10227] vhci_hcd vhci_hcd.0: Device attached [ 283.416240][T10229] vhci_hcd: connection closed [ 283.419666][ T7032] vhci_hcd: stop threads [ 283.771800][ T8] usb 34-1: SetAddress Request (2) to port 0 [ 283.778378][ T8] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 283.791898][ T7032] vhci_hcd: release socket [ 283.797155][ T7032] vhci_hcd: disconnect device [ 283.816569][ T117] corsair 0003:1B1C:1B02.0011: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 284.036472][T10213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.049697][T10213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.068825][ T117] corsair 0003:1B1C:1B02.0011: Failed to get K90 initial state (error -71). [ 284.191599][ T117] usb 2-1: USB disconnect, device number 25 [ 284.302812][ T8760] usb 4-1: USB disconnect, device number 34 [ 284.304512][ T5866] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 284.318020][ T5866] ath9k_htc: Failed to initialize the device [ 284.325344][ T8760] usb 4-1: ath9k_htc: USB layer deinitialized [ 284.571893][ T5946] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 284.960869][ T5946] usb 5-1: Using ep0 maxpacket: 16 [ 285.189551][ T5946] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 285.197923][ T5946] usb 5-1: config 0 has no interface number 0 [ 285.204589][ T5946] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 285.216480][ T5946] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 285.226520][ T5946] usb 5-1: config 0 interface 41 has no altsetting 0 [ 285.997825][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1023'. [ 286.006889][T10264] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1023'. [ 286.498837][ T5946] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 286.509244][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.517319][ T5946] usb 5-1: Product: syz [ 286.518928][ T901] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 286.524609][ T5946] usb 5-1: Manufacturer: syz [ 286.536312][T10260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.537220][ T5946] usb 5-1: SerialNumber: syz [ 286.561005][ T5946] usb 5-1: config 0 descriptor?? [ 286.571387][T10248] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.583128][T10248] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.610144][T10260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.673204][T10268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.711580][ T901] usb 3-1: Using ep0 maxpacket: 8 [ 286.719396][ T901] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 286.729929][ T901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.738213][ T901] usb 3-1: Product: syz [ 286.742715][ T901] usb 3-1: Manufacturer: syz [ 286.747327][ T901] usb 3-1: SerialNumber: syz [ 286.763206][ T901] usb 3-1: config 0 descriptor?? [ 286.793724][T10248] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.807366][T10248] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.859473][ T5946] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 286.907118][ T5946] usb 5-1: USB disconnect, device number 62 [ 286.916655][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 286.916668][ T29] audit: type=1400 audit(1733677079.354:1021): avc: denied { create } for pid=10274 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 286.972689][ T29] audit: type=1400 audit(1733677079.394:1022): avc: denied { write } for pid=10274 comm="syz.1.1029" path="socket:[26411]" dev="sockfs" ino=26411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 286.996299][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.996330][ T901] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 287.080505][ T5828] libceph: connect (1)[c::]:6789 error -13 [ 287.087425][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 287.097651][ T5828] libceph: connect (1)[c::]:6789 error -13 [ 287.103554][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 287.396899][ T8760] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 287.421916][ T5828] libceph: connect (1)[c::]:6789 error -13 [ 287.427833][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 287.731611][ T8760] usb 2-1: Using ep0 maxpacket: 8 [ 287.748384][ T8760] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 287.758202][ T8760] usb 2-1: config 0 has no interface number 0 [ 287.774837][ T8760] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 287.789107][ T8760] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 287.805690][ T8760] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.828525][ T8760] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 287.842481][ T8760] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 287.851697][T10277] ceph: No mds server is up or the cluster is laggy [ 287.861723][ T8760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.876515][ T8760] usb 2-1: config 0 descriptor?? [ 287.900027][ T8760] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 287.923433][T10254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.952267][T10254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.973374][ T901] usb write operation failed. (-71) [ 287.980947][ T901] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.994853][ T901] dvbdev: DVB: registering new adapter (Terratec H7) [ 288.003821][ T901] usb 3-1: media controller created [ 288.011255][ T901] usb read operation failed. (-71) [ 288.081583][ T901] usb write operation failed. (-71) [ 288.094728][ T901] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 288.110755][ T901] usb 3-1: USB disconnect, device number 24 [ 288.266706][T10301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 288.633532][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 288.698266][T10305] lo speed is unknown, defaulting to 1000 [ 288.881805][ T8] usb 34-1: device descriptor read/8, error -110 [ 289.274027][ T8] usb usb34-port1: attempt power cycle [ 289.417598][T10321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1041'. [ 289.787634][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 289.833303][ T8] usb usb34-port1: unable to enumerate USB device [ 289.841932][ T117] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 289.889595][ T29] audit: type=1400 audit(1733677082.324:1023): avc: denied { create } for pid=10330 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 289.896047][ T5190] udevd[5190]: worker [6974] terminated by signal 33 (Unknown signal 33) [ 289.917025][ T29] audit: type=1400 audit(1733677082.354:1024): avc: denied { write } for pid=10330 comm="syz.0.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 289.953310][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.963031][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.069883][ T8] usb 2-1: USB disconnect, device number 26 [ 290.081978][ T8] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 290.133518][T10327] hsr_slave_1 (unregistering): left promiscuous mode [ 290.167093][ T29] audit: type=1400 audit(1733677082.604:1025): avc: denied { write } for pid=10341 comm="syz.1.1046" name="fdinfo" dev="proc" ino=26770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 290.189410][ T29] audit: type=1400 audit(1733677082.604:1026): avc: denied { add_name } for pid=10341 comm="syz.1.1046" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 290.189612][ T29] audit: type=1400 audit(1733677082.604:1027): avc: denied { create } for pid=10341 comm="syz.1.1046" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 290.280958][ T29] audit: type=1400 audit(1733677082.604:1028): avc: denied { associate } for pid=10341 comm="syz.1.1046" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 290.281037][ T117] usb 5-1: device not accepting address 63, error -71 [ 290.372081][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.536455][ T29] audit: type=1400 audit(1733677082.974:1029): avc: denied { ioctl } for pid=10351 comm="syz.3.1048" path="socket:[26779]" dev="sockfs" ino=26779 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.578269][T10353] lo speed is unknown, defaulting to 1000 [ 290.784888][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1049'. [ 291.125390][T10362] [U] ^E [ 291.128933][ T29] audit: type=1400 audit(1733677083.484:1030): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.156984][T10367] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 292.239256][ T901] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 292.265697][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 292.265714][ T29] audit: type=1400 audit(1733677084.064:1055): avc: denied { read } for pid=10371 comm="syz.0.1055" dev="nsfs" ino=4026533127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 292.298736][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.326840][ T29] audit: type=1400 audit(1733677084.064:1056): avc: denied { open } for pid=10371 comm="syz.0.1055" path="net:[4026533127]" dev="nsfs" ino=4026533127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 292.407182][ T29] audit: type=1400 audit(1733677084.064:1057): avc: denied { create } for pid=10371 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.433826][ T29] audit: type=1400 audit(1733677084.084:1058): avc: denied { setopt } for pid=10371 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.455278][ T901] usb 2-1: Using ep0 maxpacket: 32 [ 292.476258][ T901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.486731][ T5828] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 292.489641][T10388] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 292.506095][ T901] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.808904][ T901] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 292.810402][ T29] audit: type=1400 audit(1733677084.094:1059): avc: denied { connect } for pid=10371 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.818877][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.854784][ T901] usb 2-1: Product: syz [ 292.858967][ T901] usb 2-1: Manufacturer: syz [ 292.863635][ T901] usb 2-1: SerialNumber: syz [ 292.865013][ T8760] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 292.883685][ T901] usb 2-1: config 0 descriptor?? [ 292.890132][ T901] rndis_host 2-1:0.0: skipping garbage [ 292.896336][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 292.906372][ T29] audit: type=1400 audit(1733677084.094:1060): avc: denied { write } for pid=10371 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 292.909079][ T901] rndis_host 2-1:0.0: skipping garbage [ 292.936988][ T901] usb 2-1: bad CDC descriptors [ 292.942119][ T901] cdc_acm 2-1:0.0: skipping garbage [ 292.947330][ T901] cdc_acm 2-1:0.0: skipping garbage [ 292.951959][ T29] audit: type=1400 audit(1733677084.094:1061): avc: denied { create } for pid=10371 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 292.974221][ T29] audit: type=1400 audit(1733677084.124:1062): avc: denied { listen } for pid=10371 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 292.994792][ T29] audit: type=1400 audit(1733677084.124:1063): avc: denied { shutdown } for pid=10371 comm="syz.0.1055" lport=37162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.015625][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.022073][ T29] audit: type=1400 audit(1733677084.804:1064): avc: denied { create } for pid=10382 comm="syz.2.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 293.061789][ T8760] usb 3-1: Using ep0 maxpacket: 16 [ 293.087359][ T8760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.100226][ T8760] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.101569][ T5828] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 293.119201][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.126238][ T8760] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 293.127966][ T5828] usb 4-1: Product: syz [ 293.136569][ T8760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.140715][ T5828] usb 4-1: Manufacturer: syz [ 293.153622][ T5828] usb 4-1: SerialNumber: syz [ 293.160096][ T8760] usb 3-1: config 0 descriptor?? [ 293.182281][ T5828] usb 4-1: config 0 descriptor?? [ 293.218452][ T117] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 293.249290][T10352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.262342][ T8] usb 2-1: USB disconnect, device number 27 [ 293.371771][ T117] usb 1-1: Using ep0 maxpacket: 32 [ 293.379311][ T117] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.391178][ T117] usb 1-1: New USB device found, idVendor=19d2, idProduct=f2ac, bcdDevice=84.4f [ 293.400599][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.416230][ T117] usb 1-1: Product: syz [ 293.420395][ T117] usb 1-1: Manufacturer: syz [ 293.436751][ T117] usb 1-1: SerialNumber: syz [ 293.446693][ T117] usb 1-1: config 0 descriptor?? [ 293.453672][ T117] usb 1-1: bad CDC descriptors [ 293.491187][ T5828] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 293.584513][ T8760] corsair 0003:1B1C:1B02.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 293.729830][ T901] usb 1-1: USB disconnect, device number 44 [ 293.759208][T10394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'. [ 293.768520][ T5894] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 293.886783][T10387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.947273][ T5894] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 293.995340][ T5894] usb 5-1: config 0 has no interface number 0 [ 293.995541][T10387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.070602][ T5894] usb 5-1: New USB device found, idVendor=050d, idProduct=1203, bcdDevice= 8.17 [ 294.080070][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.160597][ T5894] usb 5-1: Product: syz [ 294.173388][ T5894] usb 5-1: Manufacturer: syz [ 294.209163][ T5894] usb 5-1: SerialNumber: syz [ 294.209703][ T8760] corsair 0003:1B1C:1B02.0012: Failed to get K90 initial state (error -71). [ 294.249677][ T5894] usb 5-1: config 0 descriptor?? [ 294.252131][ T8760] usb 3-1: USB disconnect, device number 25 [ 294.276221][ T5894] belkin_sa 5-1:0.66: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 294.292588][ T5894] usb 5-1: bcdDevice: 0817, bfc: 0 [ 294.298535][ T5894] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 294.360383][T10365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.369198][T10365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.386057][ T5828] usb write operation failed. (-71) [ 294.392675][ T5828] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 294.409701][ T5828] dvbdev: DVB: registering new adapter (Terratec H7) [ 294.416567][ T5828] usb 4-1: media controller created [ 294.428147][ T5828] usb read operation failed. (-71) [ 294.433770][ T5828] usb write operation failed. (-71) [ 294.440463][ T5828] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 294.576504][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1064'. [ 294.662971][ T5828] usb 4-1: USB disconnect, device number 35 [ 294.927624][ T5894] usb 5-1: USB disconnect, device number 65 [ 294.935586][ T5894] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 295.108257][ T5894] belkin_sa 5-1:0.66: device disconnected [ 295.136618][ C1] sd 0:0:1:0: [sda] tag#3330 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 295.147086][ C1] sd 0:0:1:0: [sda] tag#3330 CDB: Write(6) 0a 00 00 00 00 00 00 00 ff 01 00 00 [ 295.239990][T10431] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 295.247855][T10431] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1065'. [ 295.941738][ T901] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 296.068861][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 296.190053][T10455] overlayfs: failed to resolve './file0': -2 [ 296.581715][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 296.704875][ T901] usb 2-1: Using ep0 maxpacket: 8 [ 296.974576][ T901] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 296.981563][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 296.988970][ T901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.998492][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.001419][ T901] usb 2-1: Product: syz [ 297.019268][ T901] usb 2-1: Manufacturer: syz [ 297.019283][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.019336][ T8] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 297.024182][ T901] usb 2-1: SerialNumber: syz [ 297.052711][ T901] usb 2-1: config 0 descriptor?? [ 297.058289][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.072246][ T8] usb 3-1: config 0 descriptor?? [ 297.259959][ T901] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 297.328961][T10465] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 297.501926][ T8] corsair 0003:1B1C:1B02.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 297.618289][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 297.618305][ T29] audit: type=1400 audit(1733677090.054:1126): avc: denied { write } for pid=10466 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.643858][ T29] audit: type=1400 audit(1733677090.054:1127): avc: denied { create } for pid=10466 comm="syz.4.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 297.663373][ T29] audit: type=1400 audit(1733677090.054:1128): avc: denied { map } for pid=10466 comm="syz.4.1078" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 297.768351][T10451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.777216][T10451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.840275][ T8] corsair 0003:1B1C:1B02.0013: Failed to get K90 initial state (error -71). [ 297.854554][ T29] audit: type=1400 audit(1733677090.294:1129): avc: denied { map_read map_write } for pid=10471 comm="syz.4.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 297.897312][ T8] usb 3-1: USB disconnect, device number 26 [ 298.189514][T10474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.382730][T10438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.677727][T10438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.706267][ T901] usb write operation failed. (-71) [ 298.722117][ T901] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 298.738826][ T901] dvbdev: DVB: registering new adapter (Terratec H7) [ 298.745726][ T901] usb 2-1: media controller created [ 298.752998][ T901] usb read operation failed. (-71) [ 298.815655][ T901] usb write operation failed. (-71) [ 298.845167][ T901] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 298.861080][ T901] usb 2-1: USB disconnect, device number 28 [ 298.877111][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1082'. [ 298.978124][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1082'. [ 299.673491][ T8760] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 300.539526][ T8760] usb 2-1: device descriptor read/64, error -71 [ 300.781587][ T117] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 300.791813][ T8760] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 300.951703][ T8760] usb 2-1: device descriptor read/64, error -71 [ 300.983321][ T117] usb 1-1: unable to get BOS descriptor or descriptor too short [ 301.001649][ T117] usb 1-1: not running at top speed; connect to a high speed hub [ 301.020519][ T117] usb 1-1: config 9 has an invalid interface number: 27 but max is 0 [ 301.033628][ T117] usb 1-1: config 9 has no interface number 0 [ 301.051016][ T117] usb 1-1: config 9 interface 27 has no altsetting 0 [ 301.062142][ T117] usb 1-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=bf.a0 [ 301.081462][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.090000][ T8760] usb usb2-port1: attempt power cycle [ 301.105080][ T117] usb 1-1: Product: syz [ 301.113846][ T117] usb 1-1: Manufacturer: syz [ 301.122799][ T117] usb 1-1: SerialNumber: syz [ 301.461613][ T8760] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 301.493581][ T8760] usb 2-1: device descriptor read/8, error -71 [ 301.683290][ T117] hub 1-1:9.27: bad descriptor, ignoring hub [ 301.689398][ T117] hub 1-1:9.27: probe with driver hub failed with error -5 [ 301.821634][ T8760] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 301.842257][ T8760] usb 2-1: device descriptor read/8, error -71 [ 301.857367][ T29] audit: type=1400 audit(1733677094.294:1130): avc: denied { create } for pid=10499 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.877915][ T29] audit: type=1400 audit(1733677094.314:1131): avc: denied { connect } for pid=10499 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.898012][ T29] audit: type=1400 audit(1733677094.314:1132): avc: denied { connect } for pid=10499 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.908115][ T117] kaweth 1-1:9.27: Firmware present in device. [ 301.930473][ T29] audit: type=1400 audit(1733677094.364:1133): avc: denied { setopt } for pid=10499 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 301.952011][ T8760] usb usb2-port1: unable to enumerate USB device [ 302.101894][ T117] kaweth 1-1:9.27: Statistics collection: 0 [ 302.107982][ T117] kaweth 1-1:9.27: Multicast filter limit: 0 [ 302.114241][ T117] kaweth 1-1:9.27: MTU: 0 [ 302.118716][ T117] kaweth 1-1:9.27: Read MAC address d9:18:17:00:00:00 [ 302.271768][T10485] syz.4.1083 (10485) used greatest stack depth: 20096 bytes left [ 303.773963][ T117] kaweth 1-1:9.27: kaweth interface created at eth1 [ 303.777235][T10512] netlink: 'syz.1.1091': attribute type 10 has an invalid length. [ 303.824251][T10512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.937577][ T29] audit: type=1400 audit(1733677096.374:1134): avc: denied { ioctl } for pid=10521 comm="syz.4.1094" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27033 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 303.963658][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.629812][ T29] audit: type=1400 audit(1733677096.564:1135): avc: denied { create } for pid=10517 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.629896][ T5866] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 304.655681][ T29] audit: type=1400 audit(1733677096.564:1136): avc: denied { bind } for pid=10517 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.676407][ T901] usb 1-1: USB disconnect, device number 45 [ 304.771593][ T29] audit: type=1400 audit(1733677096.564:1137): avc: denied { write } for pid=10517 comm="syz.2.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 305.118730][ T29] audit: type=1400 audit(1733677097.554:1138): avc: denied { setopt } for pid=10511 comm="syz.1.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 305.122572][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 305.144983][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.162520][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.172879][ T5866] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 305.182611][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.191591][ T5866] usb 4-1: config 0 descriptor?? [ 305.230681][ T29] audit: type=1400 audit(1733677097.654:1139): avc: denied { mounton } for pid=10511 comm="syz.1.1091" path="/proc/802/task" dev="proc" ino=28235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 305.268057][ T29] audit: type=1400 audit(1733677097.664:1140): avc: denied { mount } for pid=10511 comm="syz.1.1091" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 305.289890][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.302031][T10512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.478426][ T29] audit: type=1400 audit(1733677097.914:1141): avc: denied { create } for pid=10543 comm="syz.2.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 305.551534][ T29] audit: type=1400 audit(1733677097.954:1142): avc: denied { write } for pid=10543 comm="syz.2.1099" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 305.574410][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.609456][ T5866] corsair 0003:1B1C:1B02.0014: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 305.628231][ T29] audit: type=1400 audit(1733677097.954:1143): avc: denied { append } for pid=10543 comm="syz.2.1099" name="userio" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 305.810077][T10514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.838986][T10514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.283907][ T5866] corsair 0003:1B1C:1B02.0014: Failed to get K90 initial state (error -71). [ 306.333578][ T5866] usb 4-1: USB disconnect, device number 36 [ 308.171685][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 308.200038][T10589] IPVS: length: 108 != 24 [ 308.316066][T10592] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 308.332377][T10592] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 308.396013][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.458151][T10589] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1106'. [ 308.471395][ T8] usb 4-1: config 0 has no interface number 0 [ 308.491122][ T8] usb 4-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=69.f0 [ 308.513857][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.529998][ T8] usb 4-1: config 0 descriptor?? [ 308.540953][ T8] xsens_mt 4-1:0.1: xsens_mt converter detected [ 308.552975][ T8] usb 4-1: xsens_mt converter now attached to ttyUSB0 [ 308.740457][ T5866] usb 4-1: USB disconnect, device number 37 [ 308.753882][ T5866] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 308.765112][ T5866] xsens_mt 4-1:0.1: device disconnected [ 308.841631][ T5894] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 308.993707][ T5894] usb 1-1: device descriptor read/64, error -71 [ 309.027975][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 309.027989][ T29] audit: type=1400 audit(1733677101.464:1218): avc: denied { setopt } for pid=10606 comm="syz.2.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 309.864189][ T5894] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 310.013486][ T5894] usb 1-1: device descriptor read/64, error -71 [ 310.144637][ T5894] usb usb1-port1: attempt power cycle [ 310.172358][ T29] audit: type=1400 audit(1733677102.584:1219): avc: denied { ioctl } for pid=10620 comm="syz.2.1120" path="socket:[28422]" dev="sockfs" ino=28422 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 310.222378][ T117] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 310.271661][ T8] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 310.416424][ T117] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=37.c2 [ 310.431617][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 310.446657][ T8] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 310.466879][ T117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.486545][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.524158][ T117] usb 4-1: config 0 descriptor?? [ 310.543689][ T8] usb 2-1: Product: syz [ 310.579377][ T8] usb 2-1: Manufacturer: syz [ 310.593147][ T117] usbtest 4-1:0.0: Linux user mode test driver [ 310.607027][ T8] usb 2-1: SerialNumber: syz [ 310.611825][ T117] usbtest 4-1:0.0: low-speed {control} tests [ 310.618847][ T8] usb 2-1: config 0 descriptor?? [ 310.626035][ T8] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 310.633897][ T8] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 310.644790][ T29] audit: type=1400 audit(1733677103.084:1220): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=3176 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.668115][ T901] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 310.675911][ T29] audit: type=1400 audit(1733677103.084:1221): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3176 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.699538][ T29] audit: type=1400 audit(1733677103.084:1222): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3176 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 310.802657][ T5866] usb 4-1: USB disconnect, device number 38 [ 310.831333][T10621] workqueue: name exceeds WQ_NAME_LEN. Truncating to: þÜ»}ÆÓž»räءÑV§ïj×ì·Pbô [ 310.856004][ T46] usb 2-1: USB disconnect, device number 33 [ 310.893081][ T901] usb 5-1: Using ep0 maxpacket: 16 [ 310.899823][ T901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.922545][ T901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.932596][ T5894] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 310.940254][ T29] audit: type=1400 audit(1733677103.374:1223): avc: denied { create } for pid=10625 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 310.960106][ T901] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 310.969538][ T901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.981916][ T5894] usb 1-1: device descriptor read/8, error -71 [ 310.990783][ T29] audit: type=1400 audit(1733677103.384:1224): avc: denied { ioctl } for pid=10625 comm="syz.2.1121" path="socket:[28430]" dev="sockfs" ino=28430 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 310.990810][ T901] usb 5-1: config 0 descriptor?? [ 311.029638][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 311.231865][ T5894] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 311.262005][ T5894] usb 1-1: device descriptor read/8, error -71 [ 311.301714][ T5866] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 311.349569][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.358275][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.371981][ T5894] usb usb1-port1: unable to enumerate USB device [ 311.433380][ T901] corsair 0003:1B1C:1B02.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 311.454782][ T29] audit: type=1400 audit(1733677103.894:1225): avc: denied { write } for pid=10632 comm="syz.1.1124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 311.488408][T10633] kvm: pic: non byte write [ 311.505074][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.516329][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.526166][ T5866] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 311.535542][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.549242][ T5866] usb 3-1: config 0 descriptor?? [ 311.598728][ T29] audit: type=1400 audit(1733677104.034:1226): avc: denied { mount } for pid=10635 comm="syz.1.1125" name="/" dev="autofs" ino=28526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 311.621624][ T46] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 311.631404][T10613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.644867][T10613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.661337][ T901] corsair 0003:1B1C:1B02.0015: Failed to get K90 initial state (error -71). [ 311.684142][ T901] usb 5-1: USB disconnect, device number 66 [ 311.772496][ T29] audit: type=1400 audit(1733677104.214:1227): avc: denied { read } for pid=10635 comm="syz.1.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.825932][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 311.841533][ T46] usb 4-1: can't read configurations, error -61 [ 311.968610][ T5866] zydacron 0003:13EC:0006.0016: item fetching failed at offset 1/5 [ 311.977178][ T5866] zydacron 0003:13EC:0006.0016: parse failed [ 311.986958][ T46] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 311.997068][ T5866] zydacron 0003:13EC:0006.0016: probe with driver zydacron failed with error -22 [ 312.163140][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 312.170994][ T46] usb 4-1: can't read configurations, error -61 [ 312.198334][ T46] usb usb4-port1: attempt power cycle [ 312.208724][ T117] usb 3-1: USB disconnect, device number 27 [ 312.561662][ T46] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 312.613613][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 312.635461][ T46] usb 4-1: can't read configurations, error -61 [ 312.781620][ T46] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 312.850895][T10665] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1132'. [ 312.976842][ T46] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 312.984570][ T46] usb 4-1: can't read configurations, error -61 [ 312.991759][ T46] usb usb4-port1: unable to enumerate USB device [ 313.502137][T10672] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 313.509921][T10672] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1131'. [ 314.056830][T10674] bridge0: entered allmulticast mode [ 314.077798][T10676] lo speed is unknown, defaulting to 1000 [ 314.108296][T10678] QAT: Invalid ioctl 1075883590 [ 314.116798][T10674] veth1_virt_wifi: entered promiscuous mode [ 314.121678][T10678] QAT: Invalid ioctl 1075883590 [ 314.128382][T10674] veth1_virt_wifi: entered allmulticast mode [ 314.134090][T10678] QAT: Invalid ioctl 1075883590 [ 314.141711][T10678] QAT: Invalid ioctl 1075883590 [ 314.146633][T10678] QAT: Invalid ioctl 1075883590 [ 314.161776][T10680] QAT: Invalid ioctl -2147191718 [ 314.170693][T10680] QAT: Invalid ioctl 1075883590 [ 314.201511][T10678] QAT: Invalid ioctl 1075883590 [ 314.206462][T10678] QAT: Invalid ioctl 1075883590 [ 314.211372][T10678] QAT: Invalid ioctl 1075883590 [ 314.241082][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 314.241098][ T29] audit: type=1400 audit(1733677106.674:1236): avc: denied { append } for pid=10683 comm="syz.4.1138" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 314.485683][ T29] audit: type=1400 audit(1733677106.924:1237): avc: denied { name_bind } for pid=10691 comm="syz.0.1141" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 314.501545][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 314.681814][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 314.690957][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.706530][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.718744][ T8] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 314.735013][T10699] xt_cluster: you have exceeded the maximum number of cluster nodes (127 > 32) [ 314.751276][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.766232][ T8] usb 3-1: config 0 descriptor?? [ 314.801640][ T5894] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 314.973462][ T5894] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 314.982420][ T117] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 314.992067][ T5894] usb 4-1: config 0 has no interface number 0 [ 315.010254][ T5894] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.056468][ T5894] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 58112, setting to 1024 [ 315.097524][ T5894] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 315.125997][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.137573][ T117] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 315.153563][ T5894] usb 4-1: config 0 descriptor?? [ 315.177505][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.188985][ T8] corsair 0003:1B1C:1B02.0017: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 315.218114][ T117] usb 1-1: config 0 descriptor?? [ 315.376896][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.386316][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.399765][ T8] corsair 0003:1B1C:1B02.0017: Failed to get K90 initial state (error -71). [ 315.421152][ T8] usb 3-1: USB disconnect, device number 28 [ 315.427314][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 315.512530][ T5946] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 315.588322][T10690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.591547][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 315.600790][T10690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.618519][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 315.637837][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.638083][ T5894] uclogic 0003:256C:006D.0018: No inputs registered, leaving [ 315.655736][ T9] usb 2-1: Product: syz [ 315.659897][ T5894] uclogic 0003:256C:006D.0018: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 315.687523][ T9] usb 2-1: Manufacturer: syz [ 315.692594][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 315.703874][ T9] usb 2-1: SerialNumber: syz [ 315.711135][ T5946] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 315.731331][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.739894][ T9] usb 2-1: config 0 descriptor?? [ 315.745102][ T5946] usb 5-1: Product: syz [ 315.749316][ T5946] usb 5-1: Manufacturer: syz [ 315.753991][ T5946] usb 5-1: SerialNumber: syz [ 315.762716][ T5946] usb 5-1: config 0 descriptor?? [ 315.883222][ T8] usb 4-1: USB disconnect, device number 43 [ 315.977890][ T9] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 315.987569][ T5946] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 316.517214][ T46] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 316.821239][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.827749][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.843332][ T5946] usb write operation failed. (-71) [ 316.856840][ T5946] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 316.867696][ T9] usb write operation failed. (-71) [ 316.875750][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.891984][ T5946] dvbdev: DVB: registering new adapter (Terratec H7) [ 316.898752][ T5946] usb 5-1: media controller created [ 316.905591][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 316.909011][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.931826][ T5946] usb read operation failed. (-71) [ 316.937072][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.941715][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 316.969817][ T46] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 316.971970][ T9] usb 2-1: media controller created [ 316.984376][ T5946] usb write operation failed. (-71) [ 316.989682][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.995263][ T5946] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 317.013583][ T46] usb 3-1: config 0 descriptor?? [ 317.017284][ T9] usb read operation failed. (-71) [ 317.029990][ T5946] usb 5-1: USB disconnect, device number 67 [ 317.042090][ T9] usb write operation failed. (-71) [ 317.070919][ T9] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 317.101789][ T9] usb 2-1: USB disconnect, device number 34 [ 317.177524][ T29] audit: type=1400 audit(1733677109.614:1238): avc: denied { bind } for pid=10718 comm="syz.3.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.261669][ T29] audit: type=1400 audit(1733677109.644:1239): avc: denied { name_bind } for pid=10718 comm="syz.3.1150" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 317.289997][ T29] audit: type=1400 audit(1733677109.644:1240): avc: denied { node_bind } for pid=10718 comm="syz.3.1150" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 317.408190][ T29] audit: type=1400 audit(1733677109.844:1241): avc: denied { watch watch_reads } for pid=10725 comm="syz.3.1152" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 317.450327][ T46] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0019/input/input27 [ 317.483667][ T46] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0019/input/input28 [ 317.505598][ T46] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0019/input/input29 [ 317.516405][ T29] audit: type=1400 audit(1733677109.954:1242): avc: denied { create } for pid=10730 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 317.547863][ T46] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0019/input/input30 [ 317.551834][ T29] audit: type=1400 audit(1733677109.954:1243): avc: denied { setopt } for pid=10730 comm="syz.4.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 317.612841][ T46] hid-udraw 0003:20D6:CB17.0019: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 317.630132][ T117] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 317.640873][ T117] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 317.650795][ T117] [drm:udl_init] *ERROR* Selecting channel failed [ 317.677490][ T29] audit: type=1400 audit(1733677110.114:1244): avc: denied { append } for pid=10737 comm="syz.3.1155" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.694508][ T117] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 317.720643][ T117] [drm] Initialized udl on minor 2 [ 317.750433][ T117] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 317.889120][ T117] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 317.967314][ T5946] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 317.993205][ T5946] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 318.014165][ T117] usb 1-1: USB disconnect, device number 50 [ 318.722637][ T5866] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 318.733301][ T29] audit: type=1400 audit(1733677111.174:1245): avc: denied { ioctl } for pid=10753 comm="syz.1.1161" path="socket:[27593]" dev="sockfs" ino=27593 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 318.759801][T10758] FAULT_INJECTION: forcing a failure. [ 318.759801][T10758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.773235][T10758] CPU: 0 UID: 0 PID: 10758 Comm: syz.4.1160 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 318.784010][T10758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.794071][T10758] Call Trace: [ 318.797350][T10758] [ 318.800281][T10758] dump_stack_lvl+0x16c/0x1f0 [ 318.804968][T10758] should_fail_ex+0x497/0x5b0 [ 318.809649][T10758] _copy_from_user+0x2e/0xd0 [ 318.814243][T10758] __sys_bpf+0x21c/0x49c0 [ 318.818581][T10758] ? __pfx_lock_release+0x10/0x10 [ 318.823618][T10758] ? __pfx___sys_bpf+0x10/0x10 [ 318.828385][T10758] ? vfs_write+0x306/0x1150 [ 318.832896][T10758] ? __mutex_unlock_slowpath+0x164/0x690 [ 318.838549][T10758] ? fput+0x67/0x440 [ 318.842451][T10758] ? ksys_write+0x1ba/0x250 [ 318.846954][T10758] ? __pfx_ksys_write+0x10/0x10 [ 318.851812][T10758] __x64_sys_bpf+0x78/0xc0 [ 318.856236][T10758] ? lockdep_hardirqs_on+0x7c/0x110 [ 318.861440][T10758] do_syscall_64+0xcd/0x250 [ 318.865949][T10758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.871847][T10758] RIP: 0033:0x7fc10b37fed9 [ 318.876260][T10758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.895880][T10758] RSP: 002b:00007fc10c221058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.904300][T10758] RAX: ffffffffffffffda RBX: 00007fc10b545fa0 RCX: 00007fc10b37fed9 [ 318.912269][T10758] RDX: 0000000000000048 RSI: 000000002000e000 RDI: 0000000000000005 [ 318.920244][T10758] RBP: 00007fc10c2210a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.928214][T10758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.936183][T10758] R13: 0000000000000000 R14: 00007fc10b545fa0 R15: 00007ffec0920628 [ 318.944166][T10758] [ 318.947210][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.291605][ T117] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 319.341765][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 319.341781][ T29] audit: type=1400 audit(1733677111.774:1247): avc: denied { setopt } for pid=10770 comm="syz.2.1165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 319.389968][ T29] audit: type=1400 audit(1733677111.804:1248): avc: denied { map } for pid=10770 comm="syz.2.1165" path="socket:[29719]" dev="sockfs" ino=29719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 319.413369][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.460650][ T29] audit: type=1400 audit(1733677111.804:1249): avc: denied { read write } for pid=10770 comm="syz.2.1165" path="socket:[29719]" dev="sockfs" ino=29719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 319.531631][ T117] usb 1-1: Using ep0 maxpacket: 8 [ 319.540988][ T117] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 319.552112][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.560172][ T117] usb 1-1: Product: syz [ 319.564979][ T117] usb 1-1: Manufacturer: syz [ 319.569635][ T117] usb 1-1: SerialNumber: syz [ 319.576956][ T117] usb 1-1: config 0 descriptor?? [ 319.588694][ T29] audit: type=1400 audit(1733677112.024:1250): avc: denied { read append } for pid=10776 comm="syz.1.1167" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 319.637067][ T29] audit: type=1400 audit(1733677112.024:1251): avc: denied { open } for pid=10776 comm="syz.1.1167" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 319.661970][ T29] audit: type=1400 audit(1733677112.024:1252): avc: denied { ioctl } for pid=10776 comm="syz.1.1167" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 319.797314][ T117] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 320.184717][T10764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1163'. [ 320.297190][ T5866] usb 3-1: device descriptor read/64, error -71 [ 320.743221][ T5866] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 320.851232][ T29] audit: type=1400 audit(1733677113.284:1253): avc: denied { connect } for pid=10806 comm="syz.1.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 320.881830][ T29] audit: type=1400 audit(1733677113.284:1254): avc: denied { name_connect } for pid=10806 comm="syz.1.1175" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 320.905391][ T29] audit: type=1400 audit(1733677113.314:1255): avc: denied { connect } for pid=10810 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 320.911648][ T5866] usb 3-1: device descriptor read/64, error -71 [ 320.987617][ T117] usb write operation failed. (-71) [ 320.994684][ T117] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 321.005261][ T117] dvbdev: DVB: registering new adapter (Terratec H7) [ 321.025413][ T117] usb 1-1: media controller created [ 321.040225][ T117] usb read operation failed. (-71) [ 321.053686][ T117] usb write operation failed. (-71) [ 321.069393][ T117] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 321.080456][ T117] usb 1-1: USB disconnect, device number 51 [ 321.191766][ T5866] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 321.231942][ T5866] usb 3-1: device descriptor read/8, error -71 [ 321.470767][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 321.488450][ T29] audit: type=1400 audit(1733677113.924:1256): avc: denied { read } for pid=10822 comm="syz.4.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 321.628295][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 321.639040][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.651815][ T5866] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 321.657185][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 321.671930][ T5866] usb 3-1: device descriptor read/8, error -71 [ 321.678638][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.686074][T10830] netlink: 'syz.1.1183': attribute type 8 has an invalid length. [ 321.696113][T10830] netlink: 163260 bytes leftover after parsing attributes in process `syz.1.1183'. [ 321.784532][ T9] usb 4-1: config 0 descriptor?? [ 321.785623][ T46] usb 3-1: USB disconnect, device number 29 [ 321.930970][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1184'. [ 322.309921][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.001A/input/input31 [ 322.386285][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.001A/input/input32 [ 322.451690][ T5946] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 322.460710][ T46] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 322.466538][ T9] kye 0003:0458:5013.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 322.513185][ T9] usb 4-1: USB disconnect, device number 44 [ 322.572888][ T117] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 322.605484][ T5946] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 322.626331][ T5946] usb 1-1: config 0 has no interface number 0 [ 322.655047][ T5946] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 322.779790][ T5946] usb 1-1: config 0 interface 3 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 322.815296][ T117] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.872238][ T117] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 322.896822][ T5946] usb 1-1: New USB device found, idVendor=19d2, idProduct=0017, bcdDevice=65.23 [ 322.943706][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.974306][ T117] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.988379][ T5946] usb 1-1: Product: syz [ 322.992916][ T117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.001116][ T5946] usb 1-1: Manufacturer: syz [ 323.009029][ T117] usb 5-1: Product: syz [ 323.013424][ T5946] usb 1-1: SerialNumber: syz [ 323.018418][ T117] usb 5-1: Manufacturer: syz [ 323.023977][ T5946] usb 1-1: config 0 descriptor?? [ 323.029004][ T117] usb 5-1: SerialNumber: syz [ 323.249831][T10847] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 323.265874][ T5946] usb 1-1: USB disconnect, device number 52 [ 323.869936][T10847] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 324.011690][ T46] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 324.334582][T10879] netlink: 'syz.0.1199': attribute type 8 has an invalid length. [ 324.342734][T10879] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1199'. [ 324.426502][ T117] cdc_ncm 5-1:1.0: failed to get mac address [ 324.437733][ T117] cdc_ncm 5-1:1.0: bind() failure [ 324.454256][ T117] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 324.471562][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 324.485477][ T46] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.496470][ T46] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.496940][ T117] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 324.508057][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 324.521322][ T117] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 324.524772][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 324.524783][ T29] audit: type=1400 audit(1733677116.964:1264): avc: denied { append } for pid=10882 comm="syz.0.1200" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 324.757050][ T117] usb 5-1: USB disconnect, device number 68 [ 325.118847][ T46] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 325.225292][ T46] usb 3-1: Product: syz [ 325.229497][ T46] usb 3-1: Manufacturer: syz [ 325.237099][ T46] hub 3-1:4.0: USB hub found [ 325.628124][ T46] hub 3-1:4.0: 2 ports detected [ 325.641671][ T29] audit: type=1400 audit(1733677118.054:1265): avc: denied { bind } for pid=10890 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 325.667683][T10894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.681903][T10891] netlink: 4884 bytes leftover after parsing attributes in process `syz.4.1203'. [ 325.691242][ T29] audit: type=1400 audit(1733677118.064:1266): avc: denied { read append } for pid=10890 comm="syz.4.1203" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 325.738501][T10894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.754864][ T29] audit: type=1400 audit(1733677118.064:1267): avc: denied { open } for pid=10890 comm="syz.4.1203" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 325.788176][ T29] audit: type=1400 audit(1733677118.064:1268): avc: denied { map } for pid=10890 comm="syz.4.1203" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 325.821805][ T29] audit: type=1400 audit(1733677118.064:1269): avc: denied { write execute } for pid=10890 comm="syz.4.1203" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 325.868260][ T46] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 325.886980][ T46] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 325.914490][ T29] audit: type=1400 audit(1733677118.354:1270): avc: denied { create } for pid=10898 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 325.935333][ T46] usb 3-1: USB disconnect, device number 31 [ 325.944799][T10897] netlink: 'syz.0.1204': attribute type 8 has an invalid length. [ 325.952943][T10897] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1204'. [ 326.030636][T10900] sctp: [Deprecated]: syz.1.1205 (pid 10900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.030636][T10900] Use struct sctp_sack_info instead [ 327.096044][T10914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1209'. [ 327.116196][ T29] audit: type=1400 audit(1733677119.514:1271): avc: denied { setcurrent } for pid=10911 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 327.229755][ T29] audit: type=1401 audit(1733677119.514:1272): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 327.266271][T10921] netlink: 'syz.4.1212': attribute type 4 has an invalid length. [ 327.322579][T10921] infiniband sz1: set down [ 327.340037][ T5946] lo speed is unknown, defaulting to 1000 [ 327.352169][T10921] netlink: 'syz.4.1212': attribute type 4 has an invalid length. [ 327.361739][ T5946] lo speed is unknown, defaulting to 1000 [ 327.388242][ T29] audit: type=1400 audit(1733677119.824:1273): avc: denied { bind } for pid=10925 comm="syz.2.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 327.421013][T10921] infiniband sz1: set active [ 327.439639][ T117] lo speed is unknown, defaulting to 1000 [ 327.469814][ T117] lo speed is unknown, defaulting to 1000 [ 328.109755][T10938] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1216'. [ 328.241200][T10938] netlink: 'syz.3.1216': attribute type 1 has an invalid length. [ 328.277170][T10938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.582748][T10952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.690375][T10938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.706453][T10938] bond2: (slave bond3): making interface the new active one [ 328.739377][T10938] bond2: (slave bond3): Enslaving as an active interface with an up link [ 329.202849][T10961] netlink: 558 bytes leftover after parsing attributes in process `syz.3.1223'. [ 329.235431][T10967] fuse: Bad value for 'fd' [ 329.245066][T10967] netlink: 'syz.0.1224': attribute type 8 has an invalid length. [ 329.253155][T10967] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.1224'. [ 329.380693][ T46] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 330.396572][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 330.408265][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 330.419694][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 330.430891][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.466518][ T46] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.491507][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.511713][ T5866] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 330.559608][ T46] usb 2-1: config 0 descriptor?? [ 330.684993][T10958] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.969935][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 330.990642][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.005545][ T5866] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 331.029047][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.038498][ T5866] usb 5-1: Product: syz [ 331.042799][ T5866] usb 5-1: Manufacturer: syz [ 331.047560][ T5866] usb 5-1: SerialNumber: syz [ 331.066783][ T5866] usb 5-1: config 0 descriptor?? [ 331.081160][ T5866] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 331.223460][ T46] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 331.231133][ T46] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.241177][ T46] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 331.271796][ T46] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 331.291405][ T46] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 331.493305][T11008] FAULT_INJECTION: forcing a failure. [ 331.493305][T11008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.506639][T11008] CPU: 1 UID: 0 PID: 11008 Comm: syz.0.1235 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 331.517409][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.527469][T11008] Call Trace: [ 331.530745][T11008] [ 331.533677][T11008] dump_stack_lvl+0x16c/0x1f0 [ 331.538366][T11008] should_fail_ex+0x497/0x5b0 [ 331.543049][T11008] _copy_from_user+0x2e/0xd0 [ 331.547644][T11008] pppol2tp_setsockopt+0x28e/0x620 [ 331.552755][T11008] ? __pfx_pppol2tp_setsockopt+0x10/0x10 [ 331.558390][T11008] ? selinux_socket_setsockopt+0x6a/0x80 [ 331.564002][T11008] ? __pfx_pppol2tp_setsockopt+0x10/0x10 [ 331.569617][T11008] do_sock_setsockopt+0x222/0x480 [ 331.574629][T11008] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 331.580171][T11008] ? lock_acquire+0x2f/0xb0 [ 331.584658][T11008] __sys_setsockopt+0x1a0/0x230 [ 331.589486][T11008] __x64_sys_setsockopt+0xbd/0x160 [ 331.594577][T11008] ? do_syscall_64+0x91/0x250 [ 331.599249][T11008] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.604437][T11008] do_syscall_64+0xcd/0x250 [ 331.608930][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.614813][T11008] RIP: 0033:0x7f8e1e37fed9 [ 331.619230][T11008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.638856][T11008] RSP: 002b:00007f8e1f0e0058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 331.647278][T11008] RAX: ffffffffffffffda RBX: 00007f8e1e545fa0 RCX: 00007f8e1e37fed9 [ 331.655246][T11008] RDX: 0000000000000003 RSI: 0000000000000111 RDI: 0000000000000003 [ 331.663207][T11008] RBP: 00007f8e1f0e00a0 R08: 0000000000000004 R09: 0000000000000000 [ 331.671166][T11008] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.679123][T11008] R13: 0000000000000000 R14: 00007f8e1e545fa0 R15: 00007ffc58b05ff8 [ 331.687111][T11008] [ 331.716653][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 331.716669][ T29] audit: type=1400 audit(1733677124.154:1281): avc: denied { connect } for pid=11010 comm="syz.2.1236" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.732316][ T46] usb 2-1: USB disconnect, device number 35 [ 332.020176][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 332.217453][T11024] netlink: 'syz.0.1239': attribute type 4 has an invalid length. [ 332.301794][ T29] audit: type=1400 audit(1733677124.644:1282): avc: denied { lock } for pid=11020 comm="syz.0.1239" path="socket:[29583]" dev="sockfs" ino=29583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 332.325718][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.330390][T11026] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1239'. [ 332.341574][T11024] netlink: 'syz.0.1239': attribute type 6 has an invalid length. [ 332.349496][T11024] IPv6: NLM_F_CREATE should be specified when creating new route [ 332.428277][ T117] usb 5-1: USB disconnect, device number 69 [ 332.635828][T11039] netlink: 'syz.0.1243': attribute type 29 has an invalid length. [ 332.640416][T11031] ebtables: ebtables: counters copy to user failed while replacing table [ 332.672519][T11043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.699511][ T29] audit: type=1400 audit(1733677125.134:1283): avc: denied { create } for pid=11042 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 332.755216][T11043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.844437][T11048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.862883][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 334.165029][T11071] ubi0: attaching mtd0 [ 334.191685][ T5894] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 334.207835][ T29] audit: type=1400 audit(1733677126.634:1284): avc: denied { mount } for pid=11065 comm="syz.4.1252" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 334.208613][T11072] FAULT_INJECTION: forcing a failure. [ 334.208613][T11072] name failslab, interval 1, probability 0, space 0, times 0 [ 334.234176][T11071] ubi0: scanning is finished [ 334.381681][ T5894] usb 4-1: device descriptor read/64, error -71 [ 334.491159][T11071] ubi0: empty MTD device detected [ 334.496374][T11072] CPU: 1 UID: 0 PID: 11072 Comm: syz.2.1253 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 334.496401][T11072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.496413][T11072] Call Trace: [ 334.496419][T11072] [ 334.496428][T11072] dump_stack_lvl+0x16c/0x1f0 [ 334.528039][T11072] should_fail_ex+0x497/0x5b0 [ 334.532727][T11072] ? fs_reclaim_acquire+0xae/0x150 [ 334.537859][T11072] should_failslab+0xc2/0x120 [ 334.542539][T11072] __kmalloc_noprof+0xcb/0x510 [ 334.547297][T11072] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 334.554396][T11072] ? cred_has_capability.isra.0+0x192/0x2f0 [ 334.560281][T11072] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 334.565728][T11072] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 334.571787][T11072] ? bpf_lsm_capable+0x9/0x10 [ 334.576446][T11072] ? security_capable+0x7e/0x260 [ 334.581372][T11072] genl_rcv_msg+0x565/0x800 [ 334.585862][T11072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.590870][T11072] ? __pfx_ila_xlat_nl_cmd_del_mapping+0x10/0x10 [ 334.597190][T11072] netlink_rcv_skb+0x16b/0x440 [ 334.601946][T11072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 334.606955][T11072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 334.612260][T11072] ? down_read+0xc9/0x330 [ 334.616580][T11072] ? __pfx_down_read+0x10/0x10 [ 334.621336][T11072] ? netlink_deliver_tap+0x1ae/0xd30 [ 334.626612][T11072] genl_rcv+0x28/0x40 [ 334.630579][T11072] netlink_unicast+0x53c/0x7f0 [ 334.635352][T11072] ? __pfx_netlink_unicast+0x10/0x10 [ 334.640639][T11072] ? const_folio_flags.constprop.0+0x56/0x150 [ 334.646720][T11072] netlink_sendmsg+0x8b8/0xd70 [ 334.651493][T11072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.656785][T11072] ____sys_sendmsg+0xaaf/0xc90 [ 334.661541][T11072] ? copy_msghdr_from_user+0x10b/0x160 [ 334.666986][T11072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.672271][T11072] ___sys_sendmsg+0x135/0x1e0 [ 334.676941][T11072] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.682132][T11072] ? __pfx_lock_release+0x10/0x10 [ 334.687144][T11072] ? trace_lock_acquire+0x14e/0x1f0 [ 334.692344][T11072] ? __fget_files+0x206/0x3a0 [ 334.697021][T11072] __sys_sendmsg+0x16e/0x220 [ 334.701608][T11072] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.706724][T11072] do_syscall_64+0xcd/0x250 [ 334.711220][T11072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.717105][T11072] RIP: 0033:0x7ff680b7fed9 [ 334.721516][T11072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.741119][T11072] RSP: 002b:00007ff6819f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.749521][T11072] RAX: ffffffffffffffda RBX: 00007ff680d45fa0 RCX: 00007ff680b7fed9 [ 334.757478][T11072] RDX: 0000000004000840 RSI: 0000000020000000 RDI: 0000000000000003 [ 334.765435][T11072] RBP: 00007ff6819f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 334.773392][T11072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.781361][T11072] R13: 0000000000000000 R14: 00007ff680d45fa0 R15: 00007ffc3779a1f8 [ 334.789331][T11072] [ 334.792427][ C1] vkms_vblank_simulate: vblank timer overrun [ 334.931650][ T5894] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 334.971369][ T29] audit: type=1400 audit(1733677127.404:1285): avc: denied { mount } for pid=11077 comm="syz.2.1257" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 335.024838][T11071] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 335.048811][T11071] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 335.065846][T11071] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 335.073037][ T5894] usb 4-1: device descriptor read/64, error -71 [ 335.096773][T11071] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 335.143422][T11071] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 335.191890][ T5894] usb usb4-port1: attempt power cycle [ 335.251528][T11071] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 335.266994][T11071] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 734129043 [ 335.286259][T11071] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 335.321091][T11084] ubi0: background thread "ubi_bgt0d" started, PID 11084 [ 335.551574][ T5894] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 335.551686][ T5946] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 335.572142][ T5894] usb 4-1: device descriptor read/8, error -71 [ 335.605597][ T29] audit: type=1400 audit(1733677128.044:1286): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 335.734019][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 335.853470][ T117] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 335.998740][ T5946] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 336.080126][ T5946] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 336.097061][ T5946] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 336.106419][ T5946] usb 1-1: Product: syz [ 336.110603][ T5946] usb 1-1: Manufacturer: syz [ 336.117746][ T5946] usb 1-1: SerialNumber: syz [ 336.129857][T11108] bridge0: port 4(syz_tun) entered disabled state [ 336.132108][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 336.136743][T11108] bridge0: port 3(gretap1) entered disabled state [ 336.148643][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.155809][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.163198][ T5894] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 336.166020][T11108] bridge0: entered allmulticast mode [ 336.181377][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.195379][ T117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.208882][ T117] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 336.220698][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.230486][ T117] usb 2-1: config 0 descriptor?? [ 336.239109][T11108] syz_tun: left allmulticast mode [ 336.244415][T11108] syz_tun: left promiscuous mode [ 336.249516][T11108] bridge0: port 4(syz_tun) entered disabled state [ 336.260221][ T5894] usb 4-1: device descriptor read/8, error -71 [ 336.261909][ T8760] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 336.266996][T11108] gretap1: left promiscuous mode [ 336.279199][T11108] bridge0: port 3(gretap1) entered disabled state [ 336.288373][T11108] bridge_slave_1: left allmulticast mode [ 336.294223][T11108] bridge_slave_1: left promiscuous mode [ 336.300460][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.310261][T11108] bridge_slave_0: left allmulticast mode [ 336.316023][T11108] bridge_slave_0: left promiscuous mode [ 336.323676][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.333392][ T5946] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 336.342758][ T5946] usb 1-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 336.350881][ T5946] usb 1-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 336.375903][ T5946] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 336.397683][ T5894] usb usb4-port1: unable to enumerate USB device [ 336.423953][ T8760] usb 3-1: Using ep0 maxpacket: 8 [ 336.435472][ T8760] usb 3-1: unable to get BOS descriptor or descriptor too short [ 336.446696][ T8760] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.483561][ T8760] usb 3-1: config 1 has no interface number 1 [ 336.521820][ T8760] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 336.675611][ T117] corsair 0003:1B1C:1B02.001C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 336.683419][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.688976][ T8760] usb 3-1: string descriptor 0 read error: -22 [ 336.701610][ T8760] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.710741][ T8760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.715848][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.719725][ T5946] usb 1-1: palm_os_3_probe - error -110 getting bytes available request [ 336.735212][ T5946] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 336.760681][T11119] netlink: 'syz.4.1267': attribute type 8 has an invalid length. [ 336.768649][T11119] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.1267'. [ 336.778402][ T5946] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 336.782800][T11119] FAULT_INJECTION: forcing a failure. [ 336.782800][T11119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.789801][ T8760] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 336.812945][T11119] CPU: 1 UID: 0 PID: 11119 Comm: syz.4.1267 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 336.813089][ T5946] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 336.823709][T11119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 336.823722][T11119] Call Trace: [ 336.823728][T11119] [ 336.823737][T11119] dump_stack_lvl+0x16c/0x1f0 [ 336.823767][T11119] should_fail_ex+0x497/0x5b0 [ 336.857623][T11119] _copy_to_user+0x32/0xd0 [ 336.862034][T11119] simple_read_from_buffer+0xd0/0x160 [ 336.867401][T11119] proc_fail_nth_read+0x198/0x270 [ 336.872415][T11119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.877971][T11119] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.883512][T11119] vfs_read+0x1df/0xbe0 [ 336.887660][T11119] ? __fget_files+0x1fc/0x3a0 [ 336.892342][T11119] ? __pfx___mutex_lock+0x10/0x10 [ 336.897372][T11119] ? __pfx_vfs_read+0x10/0x10 [ 336.902046][T11119] ? __fget_files+0x206/0x3a0 [ 336.906723][T11119] ksys_read+0x12b/0x250 [ 336.910953][T11119] ? __pfx_ksys_read+0x10/0x10 [ 336.915736][T11119] do_syscall_64+0xcd/0x250 [ 336.920240][T11119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.926132][T11119] RIP: 0033:0x7fc10b37e8ec [ 336.930530][T11119] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 336.950129][T11119] RSP: 002b:00007fc10c221050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.958541][T11119] RAX: ffffffffffffffda RBX: 00007fc10b545fa0 RCX: 00007fc10b37e8ec [ 336.966513][T11119] RDX: 000000000000000f RSI: 00007fc10c2210b0 RDI: 0000000000000004 [ 336.974479][T11119] RBP: 00007fc10c2210a0 R08: 0000000000000000 R09: 0000000000000000 [ 336.982441][T11119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.990419][T11119] R13: 0000000000000000 R14: 00007fc10b545fa0 R15: 00007ffec0920628 [ 336.998400][T11119] [ 337.001569][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.013851][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.023102][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.039330][ T8760] usb 3-1: USB disconnect, device number 32 [ 337.061260][ T117] corsair 0003:1B1C:1B02.001C: Failed to get K90 initial state (error -71). [ 337.076340][ T117] usb 2-1: USB disconnect, device number 36 [ 337.483608][T11122] lo speed is unknown, defaulting to 1000 [ 337.627792][ T117] usb 1-1: USB disconnect, device number 53 [ 337.639939][ T117] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 337.652810][ T117] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 337.662501][ T117] visor 1-1:1.0: device disconnected [ 338.007710][T11133] netlink: 'syz.1.1271': attribute type 15 has an invalid length. [ 338.015824][T11133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1271'. [ 338.091610][ T8760] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 338.149277][ T29] audit: type=1400 audit(1733677130.584:1287): avc: denied { getopt } for pid=11132 comm="syz.1.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 338.245925][ T8760] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 338.255635][ T8760] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 338.268410][ T8760] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 338.277946][ T8760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 338.303770][ T8760] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 338.384852][ T8760] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 338.404606][ T8760] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 338.422024][ T8760] usb 3-1: Product: syz [ 338.428418][ T8760] usb 3-1: Manufacturer: syz [ 338.439448][ T8760] cdc_wdm 3-1:1.0: skipping garbage [ 338.445026][ T8760] cdc_wdm 3-1:1.0: skipping garbage [ 338.451053][ T8760] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 338.464148][ T8760] cdc_wdm 3-1:1.0: Unknown control protocol [ 338.671599][ T5894] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 338.706555][ T29] audit: type=1400 audit(1733677131.144:1288): avc: denied { create } for pid=11140 comm="syz.4.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 338.778019][T11141] infiniband sz1: set down [ 338.821971][ T29] audit: type=1400 audit(1733677131.254:1289): avc: denied { write } for pid=11140 comm="syz.4.1274" path="socket:[30414]" dev="sockfs" ino=30414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 338.849140][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 338.868451][ T5894] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 338.886896][ T5894] usb 1-1: config 0 has too many interfaces: 99, using maximum allowed: 32 [ 338.916483][ T5866] usb 3-1: USB disconnect, device number 33 [ 338.931257][ T5894] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 339.019573][T11145] Cannot find del_set index 3 as target [ 339.243282][ T46] lo speed is unknown, defaulting to 1000 [ 339.295727][ T5894] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 99 [ 339.306469][ T5864] lo speed is unknown, defaulting to 1000 [ 339.314076][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 339.327863][ T5894] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 339.357713][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.387515][ T5894] usb 1-1: config 0 descriptor?? [ 339.516544][ T29] audit: type=1400 audit(1733677131.954:1290): avc: denied { write } for pid=11148 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 339.641597][ T117] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 339.781229][T11137] block nbd0: shutting down sockets [ 339.805543][ T5894] usb 1-1: string descriptor 0 read error: -71 [ 339.820700][ T5894] usb 1-1: USB disconnect, device number 54 [ 339.821561][ T117] usb 4-1: Using ep0 maxpacket: 8 [ 339.855361][ T117] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 339.868525][ T117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.887042][ T117] usb 4-1: Product: syz [ 339.994986][ T117] usb 4-1: Manufacturer: syz [ 339.999852][ T117] usb 4-1: SerialNumber: syz [ 340.006332][ T117] usb 4-1: config 0 descriptor?? [ 340.215046][ T117] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 340.231643][ T5866] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 340.381583][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 340.390184][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.402364][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.412656][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 340.422268][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.432775][ T5866] usb 2-1: config 0 descriptor?? [ 340.438710][ T5866] hub 2-1:0.0: USB hub found [ 445.741432][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 445.748398][ C0] rcu: 1-...!: (1 GPs behind) idle=3e04/1/0x4000000000000002 softirq=40680/40681 fqs=2 [ 445.759172][ C0] rcu: (detected by 0, t=10502 jiffies, g=35381, q=42 ncpus=2) [ 445.766805][ C0] Sending NMI from CPU 0 to CPUs 1: [ 445.766829][ C1] NMI backtrace for cpu 1 [ 445.766838][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 445.766853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 445.766860][ C1] RIP: 0010:lock_release+0x1b/0x6f0 [ 445.766880][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 41 55 41 54 49 89 fc 55 53 <48> 81 ec 90 00 00 00 48 8d 5c 24 10 48 89 74 24 08 48 c7 44 24 10 [ 445.766892][ C1] RSP: 0018:ffffc90000a18de0 EFLAGS: 00000086 [ 445.766904][ C1] RAX: dffffc0000000000 RBX: ffff8880b872ca00 RCX: ffffffff81872631 [ 445.766914][ C1] RDX: 1ffff110065dd46d RSI: ffffffff81873b1d RDI: ffff8880b872ca18 [ 445.766924][ C1] RBP: 0000000000000046 R08: 0000000000000005 R09: 0000000000000000 [ 445.766933][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880b872ca18 [ 445.766942][ C1] R13: ffff8880b872cb00 R14: ffff8880b872ca00 R15: ffffffff8941eaf0 [ 445.766952][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 445.766966][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.766976][ C1] CR2: 0000000020020000 CR3: 000000005f9dc000 CR4: 00000000003526f0 [ 445.766985][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.766993][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.767001][ C1] Call Trace: [ 445.767007][ C1] [ 445.767014][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 445.767030][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 445.767044][ C1] ? nmi_handle+0x1ac/0x5d0 [ 445.767059][ C1] ? lock_release+0x1b/0x6f0 [ 445.767073][ C1] ? default_do_nmi+0x6a/0x160 [ 445.767086][ C1] ? exc_nmi+0x170/0x1e0 [ 445.767100][ C1] ? end_repeat_nmi+0xf/0x53 [ 445.767117][ C1] ? __pfx_advance_sched+0x10/0x10 [ 445.767133][ C1] ? __remove_hrtimer+0x141/0x290 [ 445.767150][ C1] ? __hrtimer_run_queues+0x53d/0xae0 [ 445.767173][ C1] ? lock_release+0x1b/0x6f0 [ 445.767186][ C1] ? lock_release+0x1b/0x6f0 [ 445.767200][ C1] ? lock_release+0x1b/0x6f0 [ 445.767214][ C1] [ 445.767218][ C1] [ 445.767224][ C1] ? __pfx_advance_sched+0x10/0x10 [ 445.767237][ C1] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 445.767254][ C1] __hrtimer_run_queues+0x53d/0xae0 [ 445.767273][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 445.767291][ C1] ? read_tsc+0x9/0x20 [ 445.767308][ C1] ? rcu_is_watching+0x12/0xc0 [ 445.767327][ C1] hrtimer_interrupt+0x392/0x8e0 [ 445.767349][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 445.767365][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 445.767382][ C1] [ 445.767386][ C1] [ 445.767391][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 445.767409][ C1] RIP: 0010:finish_task_switch.isra.0+0x220/0xcc0 [ 445.767427][ C1] Code: a9 0a 00 00 44 8b 0d 93 73 f6 0e 45 85 c9 0f 85 c0 01 00 00 48 89 df e8 ae f8 ff ff e8 a9 e8 38 00 fb 65 48 8b 1d c0 09 9b 7e <48> 8d bb f8 15 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 445.767439][ C1] RSP: 0018:ffffc900001a7c00 EFLAGS: 00000206 [ 445.767450][ C1] RAX: 00000000009559a3 RBX: ffff88801d294880 RCX: 1ffffffff20bd9a9 [ 445.767459][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cd840 RDI: ffffffff8bd1b560 [ 445.767468][ C1] RBP: ffffc900001a7c48 R08: 0000000000000001 R09: 0000000000000001 [ 445.767477][ C1] R10: ffffffff905f0f97 R11: 0000000000000000 R12: ffff8880b873f9e0 [ 445.767486][ C1] R13: ffff88802852c880 R14: 0000000000000000 R15: ffff8880b873ebc0 [ 445.767501][ C1] ? __switch_to+0x749/0x1190 [ 445.767520][ C1] __schedule+0xe60/0x5ad0 [ 445.767541][ C1] ? __pfx___schedule+0x10/0x10 [ 445.767555][ C1] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 445.767571][ C1] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 445.767585][ C1] ? trace_csd_function_exit+0x17f/0x1f0 [ 445.767606][ C1] schedule_idle+0x5c/0x90 [ 445.767620][ C1] do_idle+0x284/0x3f0 [ 445.767635][ C1] ? __pfx_do_idle+0x10/0x10 [ 445.767651][ C1] cpu_startup_entry+0x4f/0x60 [ 445.767664][ C1] start_secondary+0x222/0x2b0 [ 445.767676][ C1] ? __pfx_start_secondary+0x10/0x10 [ 445.767697][ C1] common_startup_64+0x13e/0x148 [ 445.767717][ C1] [ 445.767825][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g35381 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 446.189274][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 446.199235][ C0] rcu: RCU grace-period kthread stack dump: [ 446.205111][ C0] task:rcu_preempt state:R running task stack:28424 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 446.216859][ C0] Call Trace: [ 446.220132][ C0] [ 446.223059][ C0] __schedule+0xe58/0x5ad0 [ 446.227486][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 446.232697][ C0] ? __pfx___schedule+0x10/0x10 [ 446.237546][ C0] ? schedule+0x298/0x350 [ 446.241871][ C0] ? __pfx_lock_release+0x10/0x10 [ 446.246892][ C0] ? lock_acquire+0x2f/0xb0 [ 446.251387][ C0] ? schedule+0x1fd/0x350 [ 446.255716][ C0] schedule+0xe7/0x350 [ 446.259782][ C0] schedule_timeout+0x124/0x280 [ 446.264628][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 446.269995][ C0] ? __pfx_process_timeout+0x10/0x10 [ 446.275283][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 446.281084][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 446.286541][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 446.291300][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 446.296577][ C0] ? rcu_gp_init+0xc82/0x1630 [ 446.301251][ C0] ? lock_acquire+0x2f/0xb0 [ 446.305744][ C0] ? finish_swait+0xc5/0x280 [ 446.310332][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 446.316135][ C0] rcu_gp_kthread+0x271/0x380 [ 446.320812][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 446.326006][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 446.331203][ C0] ? __kthread_parkme+0x148/0x220 [ 446.336229][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 446.341430][ C0] kthread+0x2c1/0x3a0 [ 446.345495][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.350687][ C0] ? __pfx_kthread+0x10/0x10 [ 446.355275][ C0] ret_from_fork+0x45/0x80 [ 446.359683][ C0] ? __pfx_kthread+0x10/0x10 [ 446.364270][ C0] ret_from_fork_asm+0x1a/0x30 [ 446.369043][ C0] [ 446.372051][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 446.378360][ C0] CPU: 0 UID: 0 PID: 7102 Comm: kworker/u8:23 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 446.389281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 446.399326][ C0] Workqueue: events_unbound toggle_allocation_gate [ 446.405830][ C0] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 446.412505][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0d 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 446.432105][ C0] RSP: 0018:ffffc9001c0b7998 EFLAGS: 00000293 [ 446.438165][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a40 RCX: ffffffff818df8bc [ 446.446125][ C0] RDX: ffff888060c82440 RSI: ffffffff818df896 RDI: 0000000000000005 [ 446.454086][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 446.462047][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8949 [ 446.470007][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 446.477971][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 446.486893][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.493471][ C0] CR2: 0000000000000000 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 446.501434][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 446.509396][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 446.517365][ C0] Call Trace: [ 446.520631][ C0] [ 446.523471][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 446.529798][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 446.534995][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 446.540460][ C0] ? timekeeping_advance+0x70a/0xa60 [ 446.545740][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 446.551375][ C0] ? __asan_memcpy+0x3c/0x60 [ 446.555969][ C0] ? rcu_is_watching+0x12/0xc0 [ 446.560735][ C0] ? update_process_times+0x178/0x2d0 [ 446.566101][ C0] ? __pfx_update_process_times+0x10/0x10 [ 446.571815][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 446.577273][ C0] ? update_wall_time+0x1c/0x40 [ 446.582118][ C0] ? tick_nohz_handler+0x376/0x530 [ 446.587233][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 446.592688][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 446.598064][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 446.603778][ C0] ? read_tsc+0x9/0x20 [ 446.607853][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 446.612978][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 446.619128][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 446.624930][ C0] [ 446.627857][ C0] [ 446.630779][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 446.636942][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 446.643006][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 446.649071][ C0] ? smp_call_function_many_cond+0x458/0x1300 [ 446.655136][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 446.661199][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 446.666228][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 446.671249][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 446.676360][ C0] text_poke_bp_batch+0x22b/0x760 [ 446.681387][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 446.686925][ C0] ? __jump_label_patch+0x1db/0x400 [ 446.692132][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 446.698377][ C0] text_poke_finish+0x30/0x40 [ 446.703052][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 446.709029][ C0] jump_label_update+0x1d7/0x400 [ 446.713970][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 446.719862][ C0] static_key_enable+0x1a/0x20 [ 446.724623][ C0] toggle_allocation_gate+0xfc/0x260 [ 446.729903][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 446.735793][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 446.740990][ C0] ? process_one_work+0x921/0x1ba0 [ 446.746096][ C0] ? lock_acquire+0x2f/0xb0 [ 446.750590][ C0] ? process_one_work+0x921/0x1ba0 [ 446.755695][ C0] process_one_work+0x9c5/0x1ba0 [ 446.760634][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 446.766263][ C0] ? __pfx_process_one_work+0x10/0x10 [ 446.771626][ C0] ? rcu_is_watching+0x12/0xc0 [ 446.776392][ C0] ? assign_work+0x1a0/0x250 [ 446.780977][ C0] worker_thread+0x6c8/0xf00 [ 446.785570][ C0] ? __pfx_worker_thread+0x10/0x10 [ 446.790675][ C0] kthread+0x2c1/0x3a0 [ 446.794740][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 446.799931][ C0] ? __pfx_kthread+0x10/0x10 [ 446.804521][ C0] ret_from_fork+0x45/0x80 [ 446.808930][ C0] ? __pfx_kthread+0x10/0x10 [ 446.813520][ C0] ret_from_fork_asm+0x1a/0x30 [ 446.818296][ C0]