last executing test programs: 1m9.756140449s ago: executing program 1 (id=1691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x2d00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 1m9.546926233s ago: executing program 1 (id=1693): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2000081) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x6, 0x0, 0xa45, 'syz0\x00'}, 0x2, 0x2, 0x8, 0x0, 0x0, 0xff, 'syz1\x00', 0x0}) 1m9.43742235s ago: executing program 1 (id=1695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) 1m9.417040073s ago: executing program 1 (id=1697): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000180)="76389e147583ddd0569ba56a655855", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x28, 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x0, 0xa}}}, 0x24}}, 0x0) 1m9.372534864s ago: executing program 1 (id=1698): unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0x1d}]}, 0x24}], 0x1, 0x0, 0x0, 0x26e81a5eb07859b4}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 1m5.474129509s ago: executing program 1 (id=1705): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002660bd70eb3b02000002000000080001003cde9ee521af200992dbe46ac12ef12230f5baf23cd14c7a29540121b212fecb4b6b76cd295c69f956340fe25d07fb7f65af84ed75b3a7bc49f83fff726f328626c58154652154bd163c", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) mount(0x0, 0x0, 0x0, 0x10f482a, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m2.781279783s ago: executing program 2 (id=1711): close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000007000), 0x0) 1m2.644016155s ago: executing program 2 (id=1712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) 1m2.529314084s ago: executing program 4 (id=1713): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000107d1e222e00000000000109021e000100000002090400000103ff0100000000000001220500090581030004820000"], 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) (async) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) (rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) (async) io_uring_enter(r2, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x49) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="003e06"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m1.413139933s ago: executing program 2 (id=1715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x8, 0x10801) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fedbdf0f3000000008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020052000000ffdadf256bb541fdfd89d800000008000300", @ANYRES32=r10, @ANYBLOB="0a001a000802110000010000"], 0x28}}, 0x0) r11 = ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00) socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000010000000000000005", 0x1d) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r13, @ANYBLOB="05"], 0x0) ioctl$UFFDIO_CONTINUE(r11, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r14 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x51b, 0x0, 0x1, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0xfffffffa, 0x10000001, 0x6, 0x1}, 0x3}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1}}}}]}]}, 0x6c}}, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) 1m1.364524055s ago: executing program 4 (id=1716): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x6300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 1m1.101496843s ago: executing program 4 (id=1717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) 1m1.006008623s ago: executing program 2 (id=1718): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x85, 0xc1, 0x89, 0x10, 0xbb4, 0xa69, 0xbf26, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x87, 0xff, 0x1, 0xa0, 0x5d, 0xae, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x180, 0x2, 0xcef, 0xfe}, [@obex={0x5, 0x24, 0x15, 0x101}, @obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @dmm={0x7, 0x24, 0x14, 0xc, 0x58ec}]}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0xc, 0x6, 0x7}}]}}]}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="2000150000004d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, &(0x7f0000000500)={0x14, &(0x7f0000000080)={0x0, 0x0, 0xd4, {0xd4, 0x4, "651aceabc00e0d0cc3fd8b0fc67032b4c5b7ca1d1f38f877cb392609a5f0c33a35010357b8cff8c483040c121ace5fce0f23ef2c7886411e78551714a6c82bc4e8c685a9f31f1743be20126d5f864befdd49e5e84a5af0a496f08945edfe483dfc047dd2d410618dc69541076e3fbf8c817749752d46d8dfbaca5369ae34b222ea77b38823409865b479005f31f03c48e72ab5ebf021de88156383cde9f5dbb05884ae620a891fb2cef94c31c841e246778b61e145c830a317c648f905d51e81aa8f23f9406107d19f0e5b1c53bffe856d2a"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x6, 0xe, "57dcfdb03ccc591c9b719c73dd3d"}, &(0x7f00000001c0)={0x0, 0xa, 0x762943ed4cc30d8b}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x81, 0x1, '6'}, &(0x7f0000000300)={0x20, 0x82, 0x1, "c6"}, &(0x7f0000000340)={0x20, 0x83, 0x2, '\x00\x00'}, &(0x7f0000000380)={0x20, 0x84, 0x1, 'y'}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "eb0100"}}) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x40, 0xa, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 57.321437708s ago: executing program 4 (id=1722): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_clone(0x40008800, &(0x7f0000000000)="d7643e8920cd5e59a1d39a97", 0xc, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="5073b862c897f36e12d51952c90be86b54cc9287753db7ea066f97dda845c88b2b99525777a8e78b9880bd337b8a21b348996281382de371ca178f19ecc8dd0ae05ee11c7f7c4da98c0715c847b69cf03ccac10e4b3881396c9b1b7caa3292519a4a599d9794535dfb18c350198afddabcfe1f6baf4d7ad58014904caa5aa05734e712e9a28d1c6a1e5f53e5f1cb296129c13cb65905bf135c850540b5f2b908d648729b3f0bd0a20e8c1b14f508dc8bc92a8f038ad6e1f19118367cdc27fc72d9d7e07fd5de5c4f6a91065b085b4fc935a4a5c8084aa1814410fb546651d10b87a278ed97f2d1c5f9dafedcb95a580afaedc54579") syz_open_procfs$pagemap(r2, &(0x7f0000000240)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x495}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x4, 0x296a, 0xf7c, 0xffffffff, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0x8c, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x7c, 0xb1, '\x00', 0x7}, {0xf, 0x2, 0x28, '\x00', 0xaa}, {0x7f, 0xa, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x2}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0x5, 0x5, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x6f, 0x5, 0x5, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x92, '\x00', 0x8}]}}) 57.298695024s ago: executing program 2 (id=1723): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000001ed602, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x40a40, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000380)=0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40140, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004cc0)=ANY=[@ANYBLOB="1c0000001d002100000000000500"/28], 0x1c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_io_uring_setup(0xfb, &(0x7f00000001c0)={0x0, 0x1, 0x10100, 0x3}, &(0x7f00000000c0), &(0x7f0000000100)) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, 0x0, 0xf2, @time={0x6, 0xb}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0xfb, 0x0, 0x1, 0x81, @tick=0x1, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffffe}, {0x8, 0x2, 0x4, 0x1, @time={0x0, 0xf}, {0x6, 0x8}, {0x9, 0x3}, @control={0xd, 0x7, 0x7}}], 0x54) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b010600d101000009030000090000003c000000010000000000000000000000e2a5d6252652e102edf567d03a5cd92fa59c54d93a7ef1189a77243f79d0e4d8af196383b2e2f6bb6808259d4df78981cdfbd9a1a43f4f5160bb3ba5724f871c6951b629e290fa9c9aaccf105e9856f13aef2e17b31f050f7df4aa4adb1a744b37518b29e0f63899e641556b6de55fc42ddc2926d61da295ca99168f63818d8bea4f4e96e44ebbb8e840bc443dc82e6e2dba80a5fb74603bdd2ba5e283487faaccc15562fd5dd89b0d54c2fbd7e77b329b35"], 0xc4) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r5]) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f00000000c0)={0x5, 0xc, 0x3, 0xfffffffffffffff8, 0x7ff}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000040)) 56.789402575s ago: executing program 4 (id=1725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) 56.709456068s ago: executing program 2 (id=1726): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x3113, &(0x7f0000000540)={0x0, 0x20003291, 0x400, 0x0, 0xffeffc01}, &(0x7f0000000480)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r11 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r11, 0x404c534a, &(0x7f0000000180)={0x1f00, 0x0, 0xf7fffff8}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mlockall(0x7) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x19, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x11e357f5638e4c9}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="14000018edde80e994292e0000000000df4737bda183da56a65d6f256e7c63032df54efe5042d90a80955e84038402bb5403a6ea9169ee683a23b1"], 0x14}], 0x1}, 0x0) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r15 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xffffffffffffffc5, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r15, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8084) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="410101", @ANYRES32=r1], 0x4) 55.410432392s ago: executing program 4 (id=1731): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="c93f5b5b3ca2db0bdbe054d8d0e705000000000000000000000000000000776617813e35d6632fb2abfb50c345b8058eb87a74f10e31c5c80a939fbd055d854fa983293dc596be4c5d971e918075cacacc47306516605eec8d0ad2f9815b4328d34a590e2d7c31c6e7c2df1520945d66b2a6ed5c0cec971fc8834d5a1fad58fcad305d92e4ff1a3cb4a65f29f696a0efa57dca66bf744cea03f4e520faff6e4bd77ff00d5f40864478862368c2ffd1c7f12c217f44f4913524e46a5692b234f32e08f5e0732923ebc773fefe9da90096f2192534b84d343ac3eb5a00653505e89ade106d5e0eda2f8c07dd4da6192360036aa2e2"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000080)=0x40, 0x4) r3 = syz_io_uring_setup(0x28f, &(0x7f0000000080)={0x0, 0xb96, 0x13f81, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r3, 0x5c, 0x0, 0x2b, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0f, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0) 50.864497149s ago: executing program 3 (id=1747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x98b, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x400}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) syz_open_procfs(r6, &(0x7f00000000c0)='net/vlan/vlan1\x00') syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x68, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x40000020, 0x1, {0x2}}) io_uring_enter(r2, 0x52de, 0xf62e, 0x8, 0x0, 0x0) 50.175992706s ago: executing program 32 (id=1705): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002660bd70eb3b02000002000000080001003cde9ee521af200992dbe46ac12ef12230f5baf23cd14c7a29540121b212fecb4b6b76cd295c69f956340fe25d07fb7f65af84ed75b3a7bc49f83fff726f328626c58154652154bd163c", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) mount(0x0, 0x0, 0x0, 0x10f482a, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 46.360046192s ago: executing program 3 (id=1751): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9e654d387dbe9abc8ac6f5bec", 0x0, 0x7000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) 46.201349991s ago: executing program 3 (id=1752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r1, 0x0, 0x3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 46.163812965s ago: executing program 3 (id=1753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) 45.009006256s ago: executing program 3 (id=1755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) 44.967915014s ago: executing program 3 (id=1756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='ext4_lazy_itable_init\x00', r0, 0x0, 0x105e661828}, 0xfffffffffffffe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00002a0000/0x4000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = msgget$private(0x0, 0x20) msgsnd(r4, &(0x7f00000000c0)=ANY=[], 0x8, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x4, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, @xdp=0x25, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, 0x0, 0x0) 41.511801641s ago: executing program 33 (id=1726): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x3113, &(0x7f0000000540)={0x0, 0x20003291, 0x400, 0x0, 0xffeffc01}, &(0x7f0000000480)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r11 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r11, 0x404c534a, &(0x7f0000000180)={0x1f00, 0x0, 0xf7fffff8}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mlockall(0x7) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x19, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x11e357f5638e4c9}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="14000018edde80e994292e0000000000df4737bda183da56a65d6f256e7c63032df54efe5042d90a80955e84038402bb5403a6ea9169ee683a23b1"], 0x14}], 0x1}, 0x0) io_uring_enter(r4, 0x351e, 0x483, 0x0, 0x0, 0x0) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r15 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xffffffffffffffc5, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r15, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8084) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r14, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="410101", @ANYRES32=r1], 0x4) 40.211316718s ago: executing program 34 (id=1731): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="c93f5b5b3ca2db0bdbe054d8d0e705000000000000000000000000000000776617813e35d6632fb2abfb50c345b8058eb87a74f10e31c5c80a939fbd055d854fa983293dc596be4c5d971e918075cacacc47306516605eec8d0ad2f9815b4328d34a590e2d7c31c6e7c2df1520945d66b2a6ed5c0cec971fc8834d5a1fad58fcad305d92e4ff1a3cb4a65f29f696a0efa57dca66bf744cea03f4e520faff6e4bd77ff00d5f40864478862368c2ffd1c7f12c217f44f4913524e46a5692b234f32e08f5e0732923ebc773fefe9da90096f2192534b84d343ac3eb5a00653505e89ade106d5e0eda2f8c07dd4da6192360036aa2e2"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) setsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000000080)=0x40, 0x4) r3 = syz_io_uring_setup(0x28f, &(0x7f0000000080)={0x0, 0xb96, 0x13f81, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r3, 0x5c, 0x0, 0x2b, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d0f, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES16=r5, @ANYBLOB="01030000000000000b3e1f"], 0x30}, 0x1, 0x0, 0x0, 0x44005}, 0x0) 29.448672453s ago: executing program 35 (id=1756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='ext4_lazy_itable_init\x00', r0, 0x0, 0x105e661828}, 0xfffffffffffffe7c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00002a0000/0x4000)=nil) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = msgget$private(0x0, 0x20) msgsnd(r4, &(0x7f00000000c0)=ANY=[], 0x8, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x4, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000300), 0x1, 0x80000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7, @xdp=0x25, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, 0x0, 0x0) 17.896570019s ago: executing program 0 (id=1831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) 16.783355417s ago: executing program 0 (id=1832): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="3d7eb1cbb89785f59036d8bb1555e36c1239cc6f80140deba48fcfa80a50734b67317e474559b06683a22e3b89e44361d7efb60d537dabb1d988256ef5594b94f911aeb5de6d6529d0548d172968206aeeaf31876f809d96816f8bf2c697c2ae48e1a2a8cfcb6750a0202ec907baa34da5c7cbb95043885b33f6b2b7eb15f1f4ab43b73d2ae0e611bb8e39c4fc50b90d30b32b3c4b3416b489ceb235d92fb2eedbcc603ffe20ddfc2ecf6a1ffbd3018c60c98c9c91179bc759a1cf748b27d04b34ae5409eab9818d60e6699c8f20b34400a4f755e2a6d163b9af13d0aa65345997d86efefce489822e3e", 0xea, 0x40001, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x5, &(0x7f0000000800)="a7", 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), 0x0, 0x2000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="3d7eb1cbb89785f59036d8bb1555e36c1239cc6f80140deba48fcfa80a50734b67317e474559b06683a22e3b89e44361d7efb60d537dabb1d988256ef5594b94f911aeb5de6d6529d0548d172968206aeeaf31876f809d96816f8bf2c697c2ae48e1a2a8cfcb6750a0202ec907baa34da5c7cbb95043885b33f6b2b7eb15f1f4ab43b73d2ae0e611bb8e39c4fc50b90d30b32b3c4b3416b489ceb235d92fb2eedbcc603ffe20ddfc2ecf6a1ffbd3018c60c98c9c91179bc759a1cf748b27d04b34ae5409eab9818d60e6699c8f20b34400a4f755e2a6d163b9af13d0aa65345997d86efefce489822e3e", 0xea, 0x40001, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x5, &(0x7f0000000800)="a7", 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), 0x0, 0x2000000}, 0x20) (async) 16.689698923s ago: executing program 0 (id=1833): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 16.657897718s ago: executing program 0 (id=1834): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfd, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_wait(r3, &(0x7f0000000280)=[{}], 0x1, 0x4000005) openat$kvm(0xffffffffffffff9c, 0x0, 0x141, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x22882, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="202105000000051146ff44b9c6e397ae9e9a4e4cb6ae52f7b009a9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15.936039259s ago: executing program 0 (id=1835): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipv6_route\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x6e96, 0x10000, 0x2, 0x166, 0x0, r0}, &(0x7f00000003c0), &(0x7f0000001040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x21, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xac}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x85, 0xa1, &(0x7f0000000540)=""/161, 0x0, 0x62, '\x00', r3, 0x0, r0, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x3, 0x1, 0x1fe0}, 0x10, 0x1ee06, r0, 0x5, &(0x7f00000006c0)=[r4, r1, r0], &(0x7f0000000700)=[{0x3, 0x3, 0xa, 0x8}, {0x0, 0x1, 0xf, 0x5}, {0x5, 0x5, 0x1, 0x3}, {0x3, 0x1, 0x10, 0xb}, {0x4, 0x4, 0x6, 0x4}], 0x10, 0x7fff}, 0x94) 15.868246443s ago: executing program 0 (id=1836): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x108001, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000280)) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "e88d7d3b085d5ba40072e825a57c6149e591f6b80e90c16153"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x9}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r7], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syslog(0x9, 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r9, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004854}, 0x4) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000000)='vxfs\x00', 0x928a4, 0x0) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000001) 0s ago: executing program 36 (id=1836): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x108001, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000280)) (async) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x0) (async) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x74, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "e88d7d3b085d5ba40072e825a57c6149e591f6b80e90c16153"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x9}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r7], 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syslog(0x9, 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r9, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004854}, 0x4) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000000)='vxfs\x00', 0x928a4, 0x0) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000001) kernel console output (not intermixed with test programs): ext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 352.682229][T13074] lo speed is unknown, defaulting to 1000 [ 353.035367][ T48] usb 3-1: USB disconnect, device number 51 [ 353.047446][ T48] usblp0: removed [ 353.547484][ T30] audit: type=1400 audit(2000000271.930:1010): avc: denied { getopt } for pid=13126 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 353.789657][ T48] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 353.925914][ T48] usb 5-1: device descriptor read/64, error -71 [ 354.166120][ T48] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 354.325572][ T48] usb 5-1: device descriptor read/64, error -71 [ 354.448234][ T48] usb usb5-port1: attempt power cycle [ 354.502330][ T30] audit: type=1800 audit(2000000272.891:1011): pid=13155 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1155" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 354.557560][ T30] audit: type=1400 audit(2000000272.901:1012): avc: denied { mounton } for pid=13163 comm="syz.2.1157" path="/219/file0" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 354.580781][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.636073][ T30] audit: type=1400 audit(2000000273.031:1013): avc: denied { ioctl } for pid=13169 comm="syz.0.1158" path="socket:[23741]" dev="sockfs" ino=23741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 354.660837][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.705797][ T30] audit: type=1400 audit(2000000273.071:1014): avc: denied { setopt } for pid=13169 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 354.725352][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.741108][ T30] audit: type=1400 audit(2000000273.071:1015): avc: denied { write } for pid=13169 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 354.760572][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.776737][ T5890] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 354.826829][ T48] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 354.846627][ T30] audit: type=1400 audit(2000000273.251:1016): avc: denied { setopt } for pid=13176 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 354.886958][ T48] usb 5-1: device descriptor read/8, error -71 [ 354.968382][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 354.997502][ T5890] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=3d.42 [ 355.021930][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.034341][T13187] FAULT_INJECTION: forcing a failure. [ 355.034341][T13187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.053988][ T5890] usb 3-1: Product: syz [ 355.058918][ T5890] usb 3-1: Manufacturer: syz [ 355.063538][ T5890] usb 3-1: SerialNumber: syz [ 355.075607][T13187] CPU: 0 UID: 0 PID: 13187 Comm: syz.3.1163 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 355.075633][T13187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.075644][T13187] Call Trace: [ 355.075651][T13187] [ 355.075658][T13187] dump_stack_lvl+0x16c/0x1f0 [ 355.075687][T13187] should_fail_ex+0x512/0x640 [ 355.075713][T13187] _copy_from_user+0x2e/0xd0 [ 355.075739][T13187] __sys_bpf+0x21d/0x4d80 [ 355.075766][T13187] ? __pfx___sys_bpf+0x10/0x10 [ 355.075791][T13187] ? ksys_write+0x190/0x250 [ 355.075817][T13187] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 355.075857][T13187] ? fput+0x70/0xf0 [ 355.075872][T13187] ? ksys_write+0x1ac/0x250 [ 355.075892][T13187] ? __pfx_ksys_write+0x10/0x10 [ 355.075918][T13187] __x64_sys_bpf+0x78/0xc0 [ 355.075942][T13187] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.075964][T13187] do_syscall_64+0xcd/0x4c0 [ 355.075989][T13187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.076006][T13187] RIP: 0033:0x7fa23dd8e929 [ 355.076020][T13187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.076035][T13187] RSP: 002b:00007fa23eb9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.076052][T13187] RAX: ffffffffffffffda RBX: 00007fa23dfb5fa0 RCX: 00007fa23dd8e929 [ 355.076064][T13187] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 355.076075][T13187] RBP: 00007fa23eb9a090 R08: 0000000000000000 R09: 0000000000000000 [ 355.076086][T13187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.076097][T13187] R13: 0000000000000000 R14: 00007fa23dfb5fa0 R15: 00007fff2a783f38 [ 355.076122][T13187] [ 355.086036][ T5890] usb 3-1: config 0 descriptor?? [ 355.266819][ T5890] ttusb_dec_send_command: command bulk message failed: error -22 [ 355.281496][ T5890] ttusb-dec 3-1:0.0: probe with driver ttusb-dec failed with error -22 [ 355.326261][ T48] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 355.371637][ T48] usb 5-1: device descriptor read/8, error -71 [ 355.477904][T13164] 8021q: VLANs not supported on ip6tnl0 [ 355.497346][ T48] usb usb5-port1: unable to enumerate USB device [ 355.515581][ T48] usb 3-1: USB disconnect, device number 52 [ 356.144909][ T30] audit: type=1326 audit(2000000274.541:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13221 comm="syz.1.1169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6764f8e929 code=0x0 [ 356.580839][ T30] audit: type=1800 audit(2000000274.971:1018): pid=13230 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1170" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 356.756695][T13244] lo speed is unknown, defaulting to 1000 [ 357.534965][ T30] audit: type=1400 audit(2000000275.071:1019): avc: denied { connect } for pid=13231 comm="syz.3.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 357.575786][ T30] audit: type=1400 audit(2000000275.081:1020): avc: denied { write } for pid=13231 comm="syz.3.1171" path="socket:[23835]" dev="sockfs" ino=23835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 357.618972][ T30] audit: type=1400 audit(2000000275.961:1021): avc: denied { read } for pid=13270 comm="syz.4.1173" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 357.673828][T13278] FAULT_INJECTION: forcing a failure. [ 357.673828][T13278] name failslab, interval 1, probability 0, space 0, times 0 [ 357.747533][T13278] CPU: 1 UID: 0 PID: 13278 Comm: syz.1.1175 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 357.747560][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.747571][T13278] Call Trace: [ 357.747577][T13278] [ 357.747583][T13278] dump_stack_lvl+0x16c/0x1f0 [ 357.747613][T13278] should_fail_ex+0x512/0x640 [ 357.747635][T13278] ? __kmalloc_noprof+0xbf/0x510 [ 357.747660][T13278] ? bpf_test_init.isra.0+0x9e/0x140 [ 357.747683][T13278] should_failslab+0xc2/0x120 [ 357.747709][T13278] __kmalloc_noprof+0xd2/0x510 [ 357.747738][T13278] bpf_test_init.isra.0+0x9e/0x140 [ 357.747765][T13278] bpf_prog_test_run_skb+0x245/0x2280 [ 357.747793][T13278] ? __fget_files+0x204/0x3c0 [ 357.747821][T13278] ? __fget_files+0x20e/0x3c0 [ 357.747844][T13278] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 357.747875][T13278] ? fput+0x70/0xf0 [ 357.747893][T13278] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 357.747921][T13278] __sys_bpf+0x1488/0x4d80 [ 357.747950][T13278] ? __pfx___sys_bpf+0x10/0x10 [ 357.747974][T13278] ? ksys_write+0x190/0x250 [ 357.748000][T13278] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 357.748041][T13278] ? fput+0x70/0xf0 [ 357.748055][T13278] ? ksys_write+0x1ac/0x250 [ 357.748076][T13278] ? __pfx_ksys_write+0x10/0x10 [ 357.748102][T13278] __x64_sys_bpf+0x78/0xc0 [ 357.748126][T13278] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.748149][T13278] do_syscall_64+0xcd/0x4c0 [ 357.748176][T13278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.748193][T13278] RIP: 0033:0x7f6764f8e929 [ 357.748207][T13278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.748223][T13278] RSP: 002b:00007f6765d66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.748240][T13278] RAX: ffffffffffffffda RBX: 00007f67651b5fa0 RCX: 00007f6764f8e929 [ 357.748252][T13278] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 357.748262][T13278] RBP: 00007f6765d66090 R08: 0000000000000000 R09: 0000000000000000 [ 357.748278][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.748288][T13278] R13: 0000000000000000 R14: 00007f67651b5fa0 R15: 00007ffc8d9355b8 [ 357.748312][T13278] [ 357.996438][ T30] audit: type=1400 audit(2000000275.961:1022): avc: denied { open } for pid=13270 comm="syz.4.1173" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 358.020858][ T30] audit: type=1400 audit(2000000275.961:1023): avc: denied { ioctl } for pid=13270 comm="syz.4.1173" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 358.379870][ T48] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 358.422292][ T30] audit: type=1400 audit(2000000276.821:1024): avc: denied { create } for pid=13281 comm="syz.1.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 359.465251][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 359.471933][ T48] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.483777][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.494997][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.504672][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.513077][ T48] usb 5-1: Product: syz [ 359.747765][ T48] usb 5-1: Manufacturer: syz [ 359.752467][ T48] usb 5-1: SerialNumber: syz [ 359.762683][ T30] audit: type=1400 audit(2000000278.161:1025): avc: denied { ioctl } for pid=13281 comm="syz.1.1177" path="socket:[23206]" dev="sockfs" ino=23206 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 359.864666][ T30] audit: type=1400 audit(2000000278.191:1026): avc: denied { bind } for pid=13281 comm="syz.1.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 360.062367][T13311] x_tables: duplicate underflow at hook 1 [ 360.113982][ T48] usb 5-1: USB disconnect, device number 63 [ 360.239214][ T6586] udevd[6586]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.415315][ T5978] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 360.453524][T13352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1190'. [ 360.489975][T13354] ptrace attach of "./syz-executor exec"[5826] was attempted by ""[13354] [ 360.577195][ T5978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 360.596293][ T5978] usb 3-1: not running at top speed; connect to a high speed hub [ 360.610760][ T5978] usb 3-1: config 13 has an invalid interface number: 90 but max is 0 [ 360.647531][ T5978] usb 3-1: config 13 has no interface number 0 [ 360.659909][ T5978] usb 3-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 360.688130][ T5978] usb 3-1: config 13 interface 90 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 360.704566][ T5978] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 360.714155][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.722722][ T5978] usb 3-1: Product: syz [ 360.727473][ T5978] usb 3-1: Manufacturer: syz [ 360.732340][ T5978] usb 3-1: SerialNumber: syz [ 361.488848][ T5978] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.512418][ T5978] snd-usb-audio 3-1:13.90: probe with driver snd-usb-audio failed with error -2 [ 361.533662][ T5978] usb 3-1: USB disconnect, device number 53 [ 361.551837][ T6586] udevd[6586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.929109][T13407] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 361.998281][T13407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.039825][T13400] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1198'. [ 362.059676][ T30] audit: type=1400 audit(2000000280.441:1027): avc: denied { rename } for pid=13399 comm="syz.3.1198" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 362.143346][ T30] audit: type=1400 audit(2000000280.461:1028): avc: denied { write } for pid=13399 comm="syz.3.1198" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 362.370151][T13448] vlan2: entered allmulticast mode [ 362.375478][T13448] veth1: entered allmulticast mode [ 362.382427][T13448] bond2: (slave vlan2): making interface the new active one [ 362.390816][T13448] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 362.982280][T13477] netlink: 'syz.0.1209': attribute type 8 has an invalid length. [ 362.997457][T13480] binder: 13475:13480 ioctl c0306201 200000000640 returned -22 [ 364.624948][ T5978] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 364.795107][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 364.804191][ T5978] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 364.827009][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 364.854742][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 364.877520][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 364.904910][ T5978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 364.928871][ T5978] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 364.980636][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.013591][ T5978] usb 2-1: Product: syz [ 365.029210][ T5978] usb 2-1: Manufacturer: syz [ 365.047374][ T5978] usb 2-1: SerialNumber: syz [ 365.092084][ T30] audit: type=1400 audit(2000000283.491:1029): avc: denied { call } for pid=13526 comm="syz.2.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 365.092639][ T5978] usb 2-1: config 0 descriptor?? [ 365.129414][T13531] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 365.164148][T13531] lo speed is unknown, defaulting to 1000 [ 365.196146][T13533] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 365.204693][T13539] netlink: 'syz.3.1225': attribute type 4 has an invalid length. [ 365.217551][ T5890] lo speed is unknown, defaulting to 1000 [ 365.229732][T13533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 365.358119][T13559] netlink: 'syz.2.1228': attribute type 4 has an invalid length. [ 365.529102][ T5978] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 365.548183][ T5978] input input19: Device does not respond to id packet M [ 365.595217][ T5978] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 365.601318][ T5978] input input19: Device does not respond to id packet P [ 365.671867][T13581] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 365.679467][ T30] audit: type=1400 audit(2000000284.071:1030): avc: denied { append } for pid=13579 comm="syz.2.1232" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 365.752875][T13581] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 365.817200][ T5978] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 365.833197][ T5978] input input19: Device does not respond to id packet N [ 365.863664][ T5978] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 365.892954][ T5978] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 365.905209][ T5978] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 365.922891][ T5978] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 365.959088][ T5978] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 366.000224][T13581] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 366.025090][ T5978] usb 2-1: USB disconnect, device number 53 [ 366.187664][T13593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13593 comm=syz.3.1235 [ 366.200339][T13593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13593 comm=syz.3.1235 [ 366.246580][T13622] tmpfs: Bad value for 'mpol' [ 367.287536][T13639] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1240'. [ 367.952362][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'. [ 368.112371][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'. [ 368.162852][T13639] netlink: 'syz.1.1240': attribute type 6 has an invalid length. [ 368.178633][T13657] overlayfs: failed to clone upperpath [ 368.624812][ T48] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 368.830185][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 368.902563][T13671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1246'. [ 368.916111][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8244, setting to 1024 [ 368.977681][ T48] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 369.011898][T13671] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 65280 - 0 [ 369.028584][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.057647][ T48] usb 3-1: config 0 descriptor?? [ 369.092660][T13671] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 65280 - 0 [ 369.126811][T13671] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 65280 - 0 [ 369.146049][T13671] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 65280 - 0 [ 369.166346][T13671] geneve2: entered promiscuous mode [ 369.180831][T13671] geneve2: entered allmulticast mode [ 369.371636][ T5946] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 369.477130][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.513724][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.524731][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.542134][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.554802][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 369.573782][ T5946] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 369.583651][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.594721][ T5946] usb 2-1: Product: syz [ 369.594861][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.598884][ T5946] usb 2-1: Manufacturer: syz [ 369.598901][ T5946] usb 2-1: SerialNumber: syz [ 369.625717][ T5946] usb 2-1: config 0 descriptor?? [ 369.647046][ T5946] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 369.799129][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.806806][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.813979][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.821730][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.834237][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.841393][ T48] uclogic 0003:5543:0522.000F: unknown main item tag 0x0 [ 369.854929][ T48] uclogic 0003:5543:0522.000F: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 370.505720][T13649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.531670][T13649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.807559][ T5946] gspca_sonixj: reg_r err -32 [ 370.812331][ T5946] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 371.040670][ T30] audit: type=1400 audit(2000000289.441:1031): avc: denied { name_connect } for pid=13710 comm="syz.0.1252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 371.255076][ T5890] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 371.394678][ T5890] usb 5-1: device descriptor read/64, error -71 [ 371.397674][ T5946] usb 3-1: USB disconnect, device number 54 [ 371.439648][T13735] usb usb8: usbfs: process 13735 (syz.3.1257) did not claim interface 0 before use [ 371.602491][ T5978] usb 2-1: USB disconnect, device number 54 [ 371.654911][ T5890] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 371.795205][ T5890] usb 5-1: device descriptor read/64, error -71 [ 371.857261][ T30] audit: type=1326 audit(2000000290.251:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13770 comm="syz.1.1262" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6764f8e929 code=0x0 [ 371.880510][ T48] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 371.941476][ T30] audit: type=1400 audit(2000000290.312:1033): avc: denied { watch } for pid=13770 comm="syz.1.1262" path="/201" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 371.985506][ T5890] usb usb5-port1: attempt power cycle [ 372.141025][ T30] audit: type=1400 audit(2000000290.312:1034): avc: denied { watch_sb } for pid=13770 comm="syz.1.1262" path="/201" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 372.164756][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 372.171276][ T48] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 372.179603][ T48] usb 4-1: config 0 has no interface number 0 [ 372.188453][ T48] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 372.198062][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.207199][ T48] usb 4-1: Product: syz [ 372.215794][ T48] usb 4-1: Manufacturer: syz [ 372.220451][ T48] usb 4-1: SerialNumber: syz [ 372.274055][T13789] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1261'. [ 372.291843][ T30] audit: type=1400 audit(2000000290.672:1035): avc: denied { bind } for pid=13772 comm="syz.2.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 372.333436][ T48] usb 4-1: config 0 descriptor?? [ 372.498000][ T5890] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 372.609435][ T48] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 372.739327][ T5890] usb 5-1: device descriptor read/8, error -71 [ 372.855523][ T30] audit: type=1400 audit(2000000290.672:1036): avc: denied { name_bind } for pid=13772 comm="syz.2.1261" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 372.950925][ T30] audit: type=1400 audit(2000000290.672:1037): avc: denied { node_bind } for pid=13772 comm="syz.2.1261" saddr=fe80::f src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 373.012303][ T48] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 373.239677][ T5890] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 373.255472][ T48] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 373.272913][ T30] audit: type=1400 audit(2000000290.782:1038): avc: denied { accept } for pid=13772 comm="syz.2.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 373.304990][ T5890] usb 5-1: device descriptor read/8, error -71 [ 373.418349][ T5890] usb usb5-port1: unable to enumerate USB device [ 373.614617][ T48] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 373.625740][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 373.629130][ T10] usb 4-1: USB disconnect, device number 59 [ 373.663767][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 373.699781][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 373.754534][ T10] quatech2 4-1:0.51: device disconnected [ 373.786220][ T48] usb 2-1: device descriptor read/64, error -71 [ 373.844691][ T30] audit: type=1326 audit(2000000292.212:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 373.873244][ T30] audit: type=1326 audit(2000000292.212:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13813 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 374.034544][ T48] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 374.177305][ T48] usb 2-1: device descriptor read/64, error -71 [ 374.294829][ T48] usb usb2-port1: attempt power cycle [ 374.667573][ T48] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 374.696479][ T48] usb 2-1: device descriptor read/8, error -71 [ 374.934423][ T48] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 375.696062][ T48] usb 2-1: device descriptor read/8, error -71 [ 376.018252][ T48] usb usb2-port1: unable to enumerate USB device [ 376.050335][T13864] overlayfs: failed to resolve './file0': -2 [ 376.304656][ T5946] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 376.464545][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 376.507244][ T5946] usb 4-1: unable to get BOS descriptor or descriptor too short [ 376.529552][ T5946] usb 4-1: config 255 has an invalid interface number: 146 but max is 0 [ 376.559276][ T5946] usb 4-1: config 255 has no interface number 0 [ 376.651814][ T5946] usb 4-1: config 255 interface 146 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 376.697937][ T5946] usb 4-1: config 255 interface 146 has no altsetting 0 [ 376.713489][ T5946] usb 4-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=19.d8 [ 376.728907][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.749008][ T5946] usb 4-1: Product: syz [ 376.758246][ T5946] usb 4-1: Manufacturer: syz [ 376.771199][ T5946] usb 4-1: SerialNumber: syz [ 376.804402][ T48] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 376.984134][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 376.984151][ T30] audit: type=1400 audit(2000000295.382:1066): avc: denied { map } for pid=13894 comm="syz.4.1277" path="/proc/832" dev="proc" ino=25668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 377.033018][ T48] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.048593][ T48] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 377.060031][ T48] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 377.094447][ T48] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.103789][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.315034][ T48] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 377.514024][ T30] audit: type=1400 audit(2000000295.912:1067): avc: denied { read } for pid=13912 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 377.882830][ T48] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 377.928253][ T10] usb 2-1: USB disconnect, device number 59 [ 378.089288][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.095727][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.190752][ T30] audit: type=1400 audit(2000000296.592:1068): avc: denied { mount } for pid=13959 comm="syz.1.1284" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 378.249546][ T30] audit: type=1800 audit(2000000296.622:1069): pid=13954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1282" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 378.732072][ T30] audit: type=1326 audit(2000000297.132:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13959 comm="syz.1.1284" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6764f8e929 code=0x0 [ 379.111974][ T5946] HFC-S_USB 4-1:255.146: probe with driver HFC-S_USB failed with error -5 [ 379.168222][ T5946] usb 4-1: USB disconnect, device number 60 [ 379.241171][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1289'. [ 379.293764][ T30] audit: type=1400 audit(2000000297.692:1071): avc: denied { shutdown } for pid=13988 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.374600][T13989] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 55543 - 0 [ 379.390864][ T30] audit: type=1400 audit(2000000297.792:1072): avc: denied { name_bind } for pid=13985 comm="syz.4.1288" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 379.408494][T13989] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 55543 - 0 [ 379.444312][T13989] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 55543 - 0 [ 379.453357][T13989] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 55543 - 0 [ 379.464024][T13989] geneve3: entered promiscuous mode [ 379.473028][T13989] geneve3: entered allmulticast mode [ 379.533460][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 379.585382][T14006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=14006 comm=syz.1.1291 [ 379.614727][T14006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=14006 comm=syz.1.1291 [ 379.637409][T14006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=14006 comm=syz.1.1291 [ 379.664620][T14006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14006 comm=syz.1.1291 [ 379.694785][T14006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=14006 comm=syz.1.1291 [ 379.720142][T14006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14006 comm=syz.1.1291 [ 380.086265][ T30] audit: type=1800 audit(2000000298.492:1073): pid=14023 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1296" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 380.654239][ T93] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 380.806675][ T93] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.838940][ T93] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 380.869816][ T93] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.900196][ T93] usb 5-1: config 0 descriptor?? [ 381.244097][ T30] audit: type=1400 audit(2000000299.622:1074): avc: denied { listen } for pid=14052 comm="syz.2.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.396598][ T93] kye 0003:0458:0153.0010: item fetching failed at offset 5/7 [ 381.453303][ T93] kye 0003:0458:0153.0010: parse failed [ 381.479374][ T93] kye 0003:0458:0153.0010: probe with driver kye failed with error -22 [ 381.584116][ T93] usb 5-1: USB disconnect, device number 68 [ 382.399465][ T30] audit: type=1400 audit(2000000300.802:1075): avc: denied { setopt } for pid=14096 comm="syz.4.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 382.484764][T14102] netlink: 'syz.1.1314': attribute type 2 has an invalid length. [ 383.104085][ T24] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 383.264099][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 383.290937][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 383.310682][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 383.373891][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.403977][ T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.439672][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.490450][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.532553][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 383.573856][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 383.602046][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 383.624550][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 383.663928][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 383.703907][ T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.763908][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 383.835313][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.877427][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 383.923998][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 383.943041][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 383.950553][ T24] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 384.012822][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 384.060183][ T24] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 384.101943][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 384.129109][ T24] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 384.183647][ T24] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 384.246688][ T24] usb 2-1: config 168 interface 0 has no altsetting 0 [ 384.287398][ T24] usb 2-1: string descriptor 0 read error: -22 [ 384.293707][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 384.313456][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.374224][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 384.575573][ T30] audit: type=1800 audit(2000000302.982:1076): pid=14147 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1322" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 384.637540][ T10] usb 2-1: USB disconnect, device number 60 [ 385.001790][ T30] audit: type=1400 audit(2000000303.402:1077): avc: denied { mount } for pid=14162 comm="syz.1.1323" name="/" dev="hugetlbfs" ino=26072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 385.403909][ T48] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 385.595505][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 385.605790][ T48] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 385.637517][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.678019][ T48] usb 3-1: Product: syz [ 385.703765][ T48] usb 3-1: Manufacturer: syz [ 385.716323][ T48] usb 3-1: SerialNumber: syz [ 385.756377][ T48] r8152-cfgselector 3-1: Unknown version 0x0000 [ 385.783753][ T48] r8152-cfgselector 3-1: config 0 descriptor?? [ 385.853479][ T30] audit: type=1400 audit(2000000304.252:1078): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 386.249034][ T48] r8152-cfgselector 3-1: USB disconnect, device number 55 [ 386.335697][T14192] overlayfs: unescaped trailing colons in lowerdir mount option. [ 387.517151][T14208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.524773][T14208] IPv6: NLM_F_CREATE should be set when creating new route [ 387.531996][T14208] IPv6: NLM_F_CREATE should be set when creating new route [ 388.890073][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 388.944392][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 389.274432][ T48] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 389.443776][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 389.525817][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 389.630245][ T48] usb 3-1: config 3 has an invalid interface number: 106 but max is 0 [ 389.667613][ T48] usb 3-1: config 3 has no interface number 0 [ 389.697787][ T48] usb 3-1: config 3 interface 106 has no altsetting 0 [ 389.717876][ T48] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 389.732619][ T30] audit: type=1400 audit(2000000308.132:1079): avc: denied { create } for pid=14282 comm="syz.3.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 389.756865][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.765567][ T48] usb 3-1: Product: syz [ 389.769751][ T48] usb 3-1: Manufacturer: syz [ 389.776505][ T30] audit: type=1800 audit(2000000308.163:1080): pid=14281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.1342" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 389.798877][ T48] usb 3-1: SerialNumber: syz [ 390.105251][ T48] kobil_sct 3-1:3.106: KOBIL USB smart card terminal converter detected [ 390.131634][ T48] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 390.147418][ T48] usb 3-1: USB disconnect, device number 56 [ 390.159707][ T48] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 390.171833][ T48] kobil_sct 3-1:3.106: device disconnected [ 390.685093][ T93] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 391.833716][ T93] usb 5-1: device descriptor read/64, error -71 [ 392.083672][ T93] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 392.233779][ T93] usb 5-1: device descriptor read/64, error -71 [ 392.240685][T14346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1354'. [ 392.264525][T14351] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1354'. [ 392.321744][ T30] audit: type=1400 audit(2000000310.723:1081): avc: denied { watch_sb watch_reads } for pid=14355 comm="syz.1.1356" path="/227/blkio.throttle.io_serviced" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 392.354975][ T93] usb usb5-port1: attempt power cycle [ 392.433730][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 392.563766][ T10] usb 3-1: device descriptor read/64, error -71 [ 392.703516][ T93] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 392.734245][ T93] usb 5-1: device descriptor read/8, error -71 [ 392.804751][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 392.964324][ T10] usb 3-1: device descriptor read/64, error -71 [ 392.973434][ T93] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 393.003603][ T93] usb 5-1: device descriptor read/8, error -71 [ 393.078259][ T10] usb usb3-port1: attempt power cycle [ 393.115977][ T93] usb usb5-port1: unable to enumerate USB device [ 393.136906][T14369] kvm: MONITOR instruction emulated as NOP! [ 393.508997][ T10] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 394.494233][ T10] usb 3-1: device descriptor read/8, error -71 [ 394.754490][ T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 394.784105][ T10] usb 3-1: device descriptor read/8, error -71 [ 394.956223][ T10] usb usb3-port1: unable to enumerate USB device [ 395.071086][T14401] 9pnet_fd: Insufficient options for proto=fd [ 395.201558][ T24] hid (null): unknown global tag 0xe [ 395.208858][ T24] hid (null): unknown global tag 0xe [ 395.222512][ T24] hid (null): report_id 1217569773 is invalid [ 395.238554][ T24] hid-generic 0003:0002:F823.0011: unknown global tag 0xe [ 395.248690][ T24] hid-generic 0003:0002:F823.0011: item 0 4 1 14 parsing failed [ 395.263545][ T24] hid-generic 0003:0002:F823.0011: probe with driver hid-generic failed with error -22 [ 395.439430][T14425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 395.445983][T14425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.483374][ T48] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 395.484516][T14431] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.499411][T14425] vhci_hcd vhci_hcd.0: Device attached [ 395.568574][T14425] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 395.575131][T14425] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 395.611577][T14425] vhci_hcd vhci_hcd.0: Device attached [ 395.645497][T14431] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 395.652138][T14431] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 395.679400][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.681870][T14438] lo speed is unknown, defaulting to 1000 [ 395.699670][ T48] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 395.710678][T14425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.731282][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.735334][T14448] 9pnet_fd: Insufficient options for proto=fd [ 395.743482][T14431] vhci_hcd vhci_hcd.0: Device attached [ 395.763420][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 395.780716][T14425] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 395.799436][ T48] usb 5-1: config 0 descriptor?? [ 395.880495][ T30] audit: type=1400 audit(2000000314.283:1082): avc: denied { write } for pid=14421 comm="syz.2.1369" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 396.231479][ T48] dragonrise 0003:0079:0006.0012: item fetching failed at offset 4/5 [ 396.244909][ T48] dragonrise 0003:0079:0006.0012: parse failed [ 396.251213][ T48] dragonrise 0003:0079:0006.0012: probe with driver dragonrise failed with error -22 [ 396.268110][T14439] vhci_hcd: connection closed [ 396.268559][T14433] vhci_hcd: connection closed [ 396.273763][ T999] vhci_hcd: stop threads [ 396.274446][T14426] vhci_hcd: connection reset by peer [ 396.284999][ T999] vhci_hcd: release socket [ 396.299613][ T999] vhci_hcd: disconnect device [ 396.313166][ T999] vhci_hcd: stop threads [ 396.320699][ T999] vhci_hcd: release socket [ 396.331578][ T999] vhci_hcd: disconnect device [ 396.337280][ T999] vhci_hcd: stop threads [ 396.341642][ T999] vhci_hcd: release socket [ 396.350404][ T999] vhci_hcd: disconnect device [ 396.583627][ T10] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 396.753330][ T10] usb 2-1: device descriptor read/64, error -71 [ 397.812659][ T30] audit: type=1400 audit(2000000316.213:1083): avc: denied { ioctl } for pid=14520 comm="syz.3.1380" path="socket:[26414]" dev="sockfs" ino=26414 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.873131][ T10] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 398.103154][ T10] usb 2-1: device descriptor read/64, error -71 [ 399.063015][ T30] audit: type=1400 audit(2000000316.563:1084): avc: denied { getopt } for pid=14525 comm="syz.2.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 399.093383][ T5897] usb 5-1: USB disconnect, device number 73 [ 399.139064][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 399.153367][ T10] usb usb2-port1: attempt power cycle [ 399.245975][ T30] audit: type=1400 audit(2000000317.653:1085): avc: denied { bind } for pid=14520 comm="syz.3.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 399.372881][ T30] audit: type=1800 audit(2000000317.773:1086): pid=14558 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1385" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 399.491443][T14573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1388'. [ 399.503299][ T5897] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 399.674298][ T5897] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 400.588685][ T5897] usb 5-1: config 0 has no interface number 0 [ 400.598759][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 400.608052][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.623272][ T5897] usb 5-1: config 0 descriptor?? [ 400.633752][ T30] audit: type=1400 audit(2000000318.143:1087): avc: denied { execute } for pid=14578 comm="syz.2.1387" name="file1" dev="ramfs" ino=26594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 400.639276][ T5897] cp210x 5-1:0.7: cp210x converter detected [ 400.719261][ T30] audit: type=1400 audit(2000000318.143:1088): avc: denied { execute_no_trans } for pid=14578 comm="syz.2.1387" path="/file1" dev="ramfs" ino=26594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 400.836212][ T5897] cp210x 5-1:0.7: failed to get vendor val 0x370b size 1: -32 [ 400.868550][ T30] audit: type=1326 audit(2000000319.113:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14588 comm="syz.0.1390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x0 [ 400.875345][ T5897] cp210x 5-1:0.7: querying part number failed [ 400.942961][ T24] vhci_hcd: vhci_device speed not set [ 400.979837][ T30] audit: type=1326 audit(2000000319.383:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14595 comm="syz.3.1392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x0 [ 400.986735][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0 [ 401.122713][T14599] sctp: [Deprecated]: syz.2.1391 (pid 14599) Use of int in maxseg socket option. [ 401.122713][T14599] Use struct sctp_assoc_value instead [ 401.213531][ T5897] usb 5-1: USB disconnect, device number 74 [ 401.223313][ T5897] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 401.274873][ T5897] cp210x 5-1:0.7: device disconnected [ 401.310250][ T30] audit: type=1400 audit(2000000319.713:1091): avc: denied { bind } for pid=14622 comm="syz.1.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 401.501629][T14646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'. [ 401.529557][ T30] audit: type=1800 audit(2000000319.933:1092): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1398" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 402.675850][ T30] audit: type=1400 audit(2000000320.923:1093): avc: denied { accept } for pid=14657 comm="syz.0.1401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 403.842842][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 403.862252][ T30] audit: type=1400 audit(2000000322.263:1094): avc: denied { write } for pid=14656 comm="syz.2.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 403.932612][T14689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.992987][ T10] usb 2-1: device descriptor read/64, error -71 [ 404.004466][T14695] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1411'. [ 404.233458][ T10] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 404.373168][ T10] usb 2-1: device descriptor read/64, error -71 [ 404.453918][ T30] audit: type=1400 audit(2000000322.863:1095): avc: denied { read } for pid=14712 comm="syz.2.1414" path="socket:[26949]" dev="sockfs" ino=26949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 404.487389][ T10] usb usb2-port1: attempt power cycle [ 404.506244][ T5839] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 404.618493][T14722] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1414'. [ 404.763190][ T5897] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 404.842746][ T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 404.873430][ T10] usb 2-1: device descriptor read/8, error -71 [ 404.922794][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 404.936130][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.952168][ T5897] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 404.962290][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.971019][ T5897] usb 4-1: Product: syz [ 404.975964][ T5897] usb 4-1: Manufacturer: syz [ 404.980599][ T5897] usb 4-1: SerialNumber: syz [ 405.076032][ T5897] usb 4-1: config 0 descriptor?? [ 405.087340][ T5897] mcba_usb 4-1:0.0: Can't find endpoints [ 406.102282][T14734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1418'. [ 406.133563][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 406.196190][ T10] usb 2-1: device descriptor read/8, error -71 [ 406.338474][ T10] usb usb2-port1: unable to enumerate USB device [ 406.534073][ T10] usb 4-1: USB disconnect, device number 61 [ 406.546386][T14748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 406.573386][T14748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 406.796707][T14748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1420'. [ 406.863323][ T30] audit: type=1400 audit(2000000325.273:1096): avc: denied { setattr } for pid=14767 comm="syz.1.1422" name="NETLINK" dev="sockfs" ino=27895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.145025][T14780] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1425'. [ 407.196702][T14781] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1425'. [ 407.243302][T14790] input: syz1 as /devices/virtual/input/input20 [ 407.252630][T14790] input: failed to attach handler leds to device input20, error: -6 [ 407.373617][ T93] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 407.532589][ T93] usb 2-1: Using ep0 maxpacket: 8 [ 407.541590][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 407.563503][ T10] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 407.578379][ T93] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 407.603553][ T93] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 407.613516][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.633158][ T93] usb 2-1: config 0 descriptor?? [ 407.752701][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 407.760450][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 407.770949][ T10] usb 4-1: config 0 has no interface number 0 [ 407.783811][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 407.797602][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 407.818312][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.841365][ T10] usb 4-1: Product: syz [ 408.026587][ T10] usb 4-1: Manufacturer: syz [ 408.031337][ T10] usb 4-1: SerialNumber: syz [ 408.051176][ T10] usb 4-1: config 0 descriptor?? [ 409.332398][ C0] hrtimer: interrupt took 27732 ns [ 409.717243][ T30] audit: type=1400 audit(2000000328.124:1097): avc: denied { create } for pid=14821 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 409.747376][ T30] audit: type=1400 audit(2000000328.144:1098): avc: denied { getopt } for pid=14821 comm="syz.0.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 410.253593][ T10] ipheth 4-1:0.196: Unable to find endpoints [ 410.287141][ T10] usb 4-1: USB disconnect, device number 62 [ 410.530631][ T93] usbhid 2-1:0.0: can't add hid device: -71 [ 410.685141][ T93] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 410.697688][ T93] usb 2-1: USB disconnect, device number 68 [ 410.817259][T14869] overlayfs: failed to clone lowerpath [ 410.890634][T14871] overlayfs: failed to clone upperpath [ 411.283299][T14857] ip6tnl1: entered promiscuous mode [ 412.295790][T14901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1441'. [ 412.620442][ T30] audit: type=1400 audit(2000000331.024:1099): avc: denied { ioctl } for pid=14897 comm="syz.2.1445" path="socket:[28045]" dev="sockfs" ino=28045 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 412.758759][ T30] audit: type=1400 audit(2000000331.024:1100): avc: denied { write } for pid=14897 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 413.707635][ T30] audit: type=1400 audit(2000000332.114:1101): avc: denied { read } for pid=14921 comm="syz.4.1449" path="socket:[28087]" dev="sockfs" ino=28087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 413.811724][ T30] audit: type=1800 audit(2000000332.174:1102): pid=14930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1451" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 413.994930][T14941] overlayfs: failed to resolve './file1': -2 [ 414.049853][ T30] audit: type=1400 audit(2000000332.454:1103): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 414.113699][ T30] audit: type=1400 audit(2000000332.524:1104): avc: denied { listen } for pid=14956 comm="syz.1.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 414.133455][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.202387][ T93] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 414.352306][ T93] usb 5-1: Using ep0 maxpacket: 16 [ 414.369055][ T93] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 414.392332][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 414.466741][ T93] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 414.648271][ T93] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.662378][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 414.731503][ T10] usb 2-1: config index 0 descriptor too short (expected 4495, got 71) [ 414.797953][ T93] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.839434][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 414.896479][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.971575][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.993322][ T93] usb 5-1: Product: syz [ 415.007882][ T93] usb 5-1: Manufacturer: syz [ 415.013155][ T10] usb 2-1: config 0 has no interface number 0 [ 415.030034][ T93] usb 5-1: SerialNumber: syz [ 415.046738][ T10] usb 2-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 415.097098][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.120240][ T10] usb 2-1: Product: syz [ 415.128323][ T10] usb 2-1: Manufacturer: syz [ 415.153369][ T10] usb 2-1: SerialNumber: syz [ 415.166967][ T10] usb 2-1: config 0 descriptor?? [ 415.607938][ T10] usb 2-1: USB disconnect, device number 69 [ 415.871935][T14992] Invalid/unusable pipe [ 415.917737][ T30] audit: type=1400 audit(2000000334.294:1105): avc: denied { read } for pid=14985 comm="syz.2.1464" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 415.982109][ T30] audit: type=1400 audit(2000000334.294:1106): avc: denied { open } for pid=14985 comm="syz.2.1464" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 416.010786][ T30] audit: type=1400 audit(2000000334.294:1107): avc: denied { ioctl } for pid=14985 comm="syz.2.1464" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 416.035972][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.043434][ T30] audit: type=1800 audit(2000000334.414:1108): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1465" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 416.065067][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.443120][ T93] usb 5-1: 0:2 : does not exist [ 416.620397][ T93] usb 5-1: USB disconnect, device number 75 [ 416.669466][ T6586] udevd[6586]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.008430][T15046] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1470'. [ 417.008627][T15048] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1470'. [ 417.349430][T15045] can: request_module (can-proto-0) failed. [ 417.522096][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 417.723658][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.759173][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 417.794263][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.823732][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.846174][ T24] usb 2-1: Product: syz [ 417.884114][ T24] usb 2-1: Manufacturer: syz [ 417.919481][ T24] usb 2-1: SerialNumber: syz [ 418.349743][ T30] audit: type=1400 audit(2000000336.754:1109): avc: denied { write } for pid=15050 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 418.593747][T15099] netlink: 'syz.2.1478': attribute type 39 has an invalid length. [ 419.426227][ T30] audit: type=1400 audit(2000000336.944:1110): avc: denied { accept } for pid=15086 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 419.468671][ T30] audit: type=1400 audit(2000000337.864:1111): avc: denied { read open } for pid=15103 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.627608][T15063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 419.648027][ T24] cdc_ncm 2-1:1.0: bind() failure [ 419.671964][T15063] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 419.676789][ T30] audit: type=1400 audit(2000000337.904:1112): avc: denied { getattr } for pid=15103 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1844 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.713973][T15063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.740859][ T24] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 419.752828][T15063] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 419.760709][ T24] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 419.774665][ T24] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 419.788195][T15063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.817037][T15063] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 419.866156][ T24] usb 2-1: USB disconnect, device number 70 [ 419.890967][T15063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 419.902357][T15063] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 420.061829][ T30] audit: type=1400 audit(2000000338.464:1113): avc: denied { add_name } for pid=15092 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.112138][ T30] audit: type=1400 audit(2000000338.464:1114): avc: denied { create } for pid=15092 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.191705][ T30] audit: type=1400 audit(2000000338.464:1115): avc: denied { write } for pid=15092 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=6531 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.271833][ T30] audit: type=1400 audit(2000000338.464:1116): avc: denied { append } for pid=15092 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6531 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.361885][ T30] audit: type=1400 audit(2000000338.744:1117): avc: denied { remove_name } for pid=15143 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6531 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.410855][ T30] audit: type=1400 audit(2000000338.754:1118): avc: denied { unlink } for pid=15143 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6531 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 420.434095][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.782284][T15187] netlink: 'syz.0.1490': attribute type 1 has an invalid length. [ 422.044747][T15187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.306958][T15244] fuse: Bad value for 'user_id' [ 422.319055][T15244] fuse: Bad value for 'user_id' [ 423.498230][T15296] tipc: Enabling of bearer rejected, failed to enable media [ 424.845665][T15313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 425.044039][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 425.044050][ T30] audit: type=1400 audit(2000000343.454:1120): avc: denied { write } for pid=15357 comm="syz.2.1506" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 425.432592][T15367] 9pnet_fd: Insufficient options for proto=fd [ 427.142024][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 428.243108][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 428.433761][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.484874][ T10] usb 3-1: config 0 descriptor?? [ 428.783835][ T10] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 428.854161][ T10] usb 3-1: USB disconnect, device number 61 [ 429.121331][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 429.201138][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 429.254150][ T30] audit: type=1400 audit(2000000347.655:1121): avc: denied { write } for pid=15482 comm="syz.4.1523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 429.292152][ T24] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 429.336634][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 429.363361][ T24] usb 2-1: can't read configurations, error -61 [ 429.531386][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 429.578416][ T48] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 429.714249][ T24] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 429.755733][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 429.782029][ T48] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 429.794347][ T24] usb 2-1: can't read configurations, error -61 [ 429.813207][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.838248][ T24] usb usb2-port1: attempt power cycle [ 429.853288][ T48] usb 3-1: Product: syz [ 429.870562][ T48] usb 3-1: Manufacturer: syz [ 429.895613][ T48] usb 3-1: SerialNumber: syz [ 429.963427][ T48] usb 3-1: config 0 descriptor?? [ 429.989554][ T48] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 062 [ 430.283007][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 430.314383][ T24] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 431.289378][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 431.297128][ T24] usb 2-1: can't read configurations, error -61 [ 431.599894][ T48] (null): failure reading functionality [ 431.608132][ T48] i2c i2c-1: failure reading functionality [ 431.624200][ T48] i2c i2c-1: connected i2c-tiny-usb device [ 431.642153][ T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 431.655213][ T48] usb 3-1: USB disconnect, device number 62 [ 431.672327][ T24] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 431.710897][ T24] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 431.748280][ T24] usb 2-1: can't read configurations, error -61 [ 431.780745][ T24] usb usb2-port1: unable to enumerate USB device [ 432.913331][T15551] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 432.921136][ T30] audit: type=1400 audit(2000000351.325:1122): avc: denied { connect } for pid=15550 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 433.075128][T15551] bond2: entered promiscuous mode [ 433.108760][T15551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.419566][T15575] bond2: (slave veth3): making interface the new active one [ 433.461100][T15575] veth3: entered promiscuous mode [ 433.491536][T15575] bond2: (slave veth3): Enslaving as an active interface with an up link [ 433.535459][T15618] 9pnet_fd: Insufficient options for proto=fd [ 433.814113][T15637] netlink: 'syz.0.1537': attribute type 4 has an invalid length. [ 433.953350][T15643] tmpfs: Bad value for 'mpol' [ 434.101435][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 434.410739][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 434.489483][ T24] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 434.524180][ T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=60.93 [ 434.566824][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.123143][T15639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.141805][T15639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.317594][ T24] usb 3-1: string descriptor 0 read error: -71 [ 435.348103][ T24] peak_usb 3-1:2.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 435.356099][ T24] peak_usb 3-1:2.0: unable to read PCAN-USB serial number (err -22) [ 435.578520][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1544'. [ 435.661470][ T30] audit: type=1400 audit(2000000354.065:1123): avc: denied { bind } for pid=15687 comm="syz.4.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 435.680810][ C0] vkms_vblank_simulate: vblank timer overrun [ 436.150430][ T30] audit: type=1400 audit(2000000354.555:1124): avc: denied { setopt } for pid=15697 comm="syz.1.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 436.190261][T15701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.234214][T15701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.258493][ T30] audit: type=1400 audit(2000000354.585:1125): avc: denied { write } for pid=15697 comm="syz.1.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 436.297587][T15701] 9pnet_fd: Insufficient options for proto=fd [ 436.371214][ T24] peak_usb 3-1:2.0: probe with driver peak_usb failed with error -22 [ 436.396370][ T24] usb 3-1: USB disconnect, device number 63 [ 439.157364][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 439.400740][ T48] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 439.515139][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.521566][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.079535][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.087126][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.094659][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.102262][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.109768][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.118606][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.130993][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.138750][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.152956][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.160535][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.172486][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.180258][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.189347][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.199238][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.211094][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.220929][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 440.346424][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.481057][ T48] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 440.519907][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.667961][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.721945][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 440.948922][ T48] usb 2-1: Product: syz [ 440.979361][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.091122][ T48] usb 2-1: Manufacturer: syz [ 441.233458][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.265811][ T48] usb 2-1: SerialNumber: syz [ 441.428986][ T30] audit: type=1326 audit(2000000359.765:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 441.456064][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.495329][ T48] usb 2-1: config 0 descriptor?? [ 441.524146][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.543302][ T48] usb 2-1: can't set config #0, error -71 [ 441.560118][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.573167][ T48] usb 2-1: USB disconnect, device number 75 [ 441.583451][T15771] ubi31: attaching mtd0 [ 441.587155][ T30] audit: type=1326 audit(2000000359.765:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 441.603321][T15771] ubi31: scanning is finished [ 441.611509][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.627714][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.635297][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.648387][T15771] ubi31: empty MTD device detected [ 441.649210][ T30] audit: type=1326 audit(2000000359.765:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 441.823948][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.832077][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.839637][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.847777][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.855347][ T30] audit: type=1326 audit(2000000359.765:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 441.879136][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.886713][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.894194][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.902024][ T30] audit: type=1326 audit(2000000359.765:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 441.968104][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 441.988447][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.009720][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.054643][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.080206][ T30] audit: type=1326 audit(2000000359.765:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 442.118273][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.130426][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.149889][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.159256][ T30] audit: type=1326 audit(2000000359.775:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 442.263189][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.331867][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.396213][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.430464][ T30] audit: type=1326 audit(2000000359.775:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 442.542076][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.559526][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.567413][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.577257][ T30] audit: type=1326 audit(2000000359.775:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 442.603034][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.610440][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.618410][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.644530][ T30] audit: type=1326 audit(2000000359.775:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15749 comm="syz.3.1554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa23dd8e929 code=0x7fc00000 [ 442.677154][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.874603][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.882829][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.887593][T15771] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 442.892735][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.955309][T15771] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 442.968205][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.976062][T15771] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 442.983522][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 442.998589][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.029836][T15771] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 443.051735][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.059316][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.080679][T15771] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 443.087645][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.101378][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.108800][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.121196][T15771] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 443.146942][T15771] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2298058258 [ 443.169666][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.189557][T15771] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 443.219253][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.233830][T15791] ubi31: background thread "ubi_bgt31d" started, PID 15791 [ 443.242936][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.254576][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.280061][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.300563][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.318204][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.329534][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.339441][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.375415][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.393351][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.401971][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.410234][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.426227][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.434451][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.445234][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.459457][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.470175][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 443.492805][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.510606][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 444.527941][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.569855][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.664431][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.689635][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 444.695012][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.712215][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13760, setting to 64 [ 444.726697][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.783104][T15817] pim6reg: entered allmulticast mode [ 444.792661][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 444.802473][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 444.812273][ T10] usb 4-1: Manufacturer: syz [ 444.815086][T15817] pim6reg: left allmulticast mode [ 444.840708][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.843143][ T10] usb 4-1: config 0 descriptor?? [ 444.858841][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.877327][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.966519][ T93] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 444.970441][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 444.980630][ T10] rc_core: IR keymap rc-hauppauge not found [ 445.041010][ T10] Registered IR keymap rc-empty [ 445.041313][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.056630][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 445.066774][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.066798][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.066817][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.066836][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.066855][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.066873][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.066891][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.066909][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.066929][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.101033][ T93] usb 5-1: device descriptor read/64, error -71 [ 445.160954][ T5897] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 445.171870][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input23 [ 445.250858][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.277944][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.311036][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.344457][ T5897] usb 3-1: config 4 has an invalid interface number: 48 but max is 0 [ 445.354599][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.354610][ T5897] usb 3-1: config 4 has no interface number 0 [ 445.418629][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.461083][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.468718][ T5897] usb 3-1: too many endpoints for config 4 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 445.501405][ T5897] usb 3-1: config 4 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 445.524951][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.550445][ T5897] usb 3-1: config 4 interface 48 has no altsetting 0 [ 445.592276][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.598038][ T5897] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 445.640502][ T93] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 445.648672][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 445.674796][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.721037][ T5897] usb 3-1: Product: syz [ 445.740937][ T5897] usb 3-1: Manufacturer: syz [ 445.743866][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.760491][ T5897] usb 3-1: SerialNumber: syz [ 445.780474][ T93] usb 5-1: device descriptor read/64, error -71 [ 445.799102][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.835549][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.890838][ T93] usb usb5-port1: attempt power cycle [ 445.924320][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.943804][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.955398][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.963585][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.974184][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.982621][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 445.991686][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 446.002842][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 446.012723][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 446.033782][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 446.043242][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 446.053982][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 446.230422][ T93] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 446.244159][ T24] hid-generic 007F:0007:27D1.0013: unknown main item tag 0x0 [ 446.251383][ T93] usb 5-1: device descriptor read/8, error -71 [ 446.318193][ T24] hid-generic 007F:0007:27D1.0013: hidraw0: HID v0.04 Device [syz0] on syz1 [ 446.409990][ T5897] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 446.448882][T15878] fido_id[15878]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 446.479331][ T5897] vp7045: USB control message 'out' went wrong. [ 446.510960][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 446.561774][ T5897] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 446.571399][ T93] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 446.660353][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 446.660405][ T30] audit: type=1400 audit(2000000365.066:1194): avc: denied { read } for pid=15889 comm="syz.1.1568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 446.670830][ T5897] usb 3-1: USB disconnect, device number 64 [ 446.697708][ T93] usb 5-1: device descriptor read/8, error -71 [ 446.972211][ T93] usb usb5-port1: unable to enumerate USB device [ 447.044147][ T48] usb 4-1: USB disconnect, device number 63 [ 447.490140][ T30] audit: type=1400 audit(2000000365.886:1195): avc: denied { watch } for pid=15919 comm="syz.2.1571" path="/proc/1037/fdinfo" dev="proc" ino=29337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 447.936811][T15940] syzkaller1: entered promiscuous mode [ 447.996239][T15940] syzkaller1: entered allmulticast mode [ 448.950963][ T93] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 449.143247][ T93] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 449.161343][ T93] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 449.188235][ T93] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 449.217686][ T93] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 449.258415][ T93] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 449.272547][T15986] input: syz1 as /devices/virtual/input/input24 [ 449.343740][ T93] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 449.361639][ T93] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 449.421132][ T93] usb 5-1: Product: syz [ 449.425339][ T93] usb 5-1: Manufacturer: syz [ 449.473054][ T93] cdc_wdm 5-1:1.0: skipping garbage [ 449.487707][ T30] audit: type=1400 audit(2000000367.896:1196): avc: denied { ioctl } for pid=16004 comm="syz.0.1584" path="socket:[30440]" dev="sockfs" ino=30440 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 449.501583][ T93] cdc_wdm 5-1:1.0: skipping garbage [ 449.669753][ T93] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 449.680292][ T93] cdc_wdm 5-1:1.0: Unknown control protocol [ 449.752477][ T30] audit: type=1400 audit(2000000368.166:1197): avc: denied { name_bind } for pid=16023 comm="syz.0.1586" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 449.782479][ T30] audit: type=1400 audit(2000000368.186:1198): avc: denied { name_connect } for pid=16023 comm="syz.0.1586" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 449.826445][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1586'. [ 450.017884][ T30] audit: type=1400 audit(2000000368.426:1199): avc: denied { write } for pid=16029 comm="syz.1.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 450.360596][ T30] audit: type=1400 audit(2000000368.516:1200): avc: denied { read write } for pid=15960 comm="syz.4.1578" name="cdc-wdm0" dev="devtmpfs" ino=3421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 451.008432][ T30] audit: type=1400 audit(2000000368.516:1201): avc: denied { open } for pid=15960 comm="syz.4.1578" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 451.223673][ T30] audit: type=1400 audit(2000000368.826:1202): avc: denied { connect } for pid=15960 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 451.235939][T16051] overlayfs: failed to clone upperpath [ 451.262955][ T30] audit: type=1400 audit(2000000369.276:1203): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 451.806093][T16059] netlink: 'syz.1.1592': attribute type 75 has an invalid length. [ 454.189128][ T93] usb 5-1: USB disconnect, device number 80 [ 454.346449][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 454.346464][ T30] audit: type=1400 audit(2000000372.756:1205): avc: denied { append } for pid=16082 comm="syz.4.1598" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 454.577985][ T30] audit: type=1400 audit(2000000372.986:1206): avc: denied { shutdown } for pid=16103 comm="syz.1.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 454.681513][ T93] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 454.901434][ T93] usb 5-1: Using ep0 maxpacket: 16 [ 455.081184][ T93] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 455.188336][ T93] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 455.242267][ T93] usb 5-1: Manufacturer: syz [ 455.261107][ T93] usb 5-1: config 0 descriptor?? [ 455.488643][ T93] usb 5-1: Limiting number of CPorts to U8_MAX [ 456.149479][ T93] usb 5-1: Not enough endpoints found in device, aborting! [ 457.576130][ T93] usb 5-1: USB disconnect, device number 81 [ 459.183866][T16181] misc userio: Invalid payload size [ 459.213263][T16181] input: syz1 as /devices/virtual/input/input25 [ 460.403870][ T5978] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 460.577827][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 460.600303][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 460.623473][ T5978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 460.633668][ T5978] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 460.642718][ T5978] usb 2-1: can't read configurations, error -71 [ 460.918157][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 460.925192][ T10] usb 3-1: config 0 has an invalid interface number: 193 but max is 0 [ 460.934961][ T10] usb 3-1: config 0 has no interface number 0 [ 460.943283][ T10] usb 3-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=f2.70 [ 460.952543][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.960686][ T10] usb 3-1: Product: syz [ 460.964855][ T10] usb 3-1: Manufacturer: syz [ 460.969454][ T10] usb 3-1: SerialNumber: syz [ 460.981885][ T10] usb 3-1: config 0 descriptor?? [ 461.955021][ T10] usb 3-1: selecting invalid altsetting 1 [ 461.962777][ T10] catc 3-1:0.193: Can't set altsetting 1. [ 461.968594][ T10] catc 3-1:0.193: probe with driver catc failed with error -5 [ 462.207210][ T10] usb 3-1: USB disconnect, device number 65 [ 464.842735][T16324] x_tables: duplicate underflow at hook 1 [ 466.113110][ T5842] Bluetooth: hci5: command 0x1003 tx timeout [ 466.120525][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 467.910236][ T5978] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 467.961709][ T93] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 468.060335][ T5978] usb 3-1: Using ep0 maxpacket: 16 [ 468.074643][ T5978] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 468.074693][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.074735][ T5978] usb 3-1: Product: syz [ 468.074771][ T5978] usb 3-1: Manufacturer: syz [ 468.074808][ T5978] usb 3-1: SerialNumber: syz [ 468.112948][ T5978] usb 3-1: config 0 descriptor?? [ 468.130203][ T93] usb 5-1: Using ep0 maxpacket: 8 [ 468.141992][ T93] usb 5-1: unable to get BOS descriptor or descriptor too short [ 468.147630][ T5978] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 468.153934][ T93] usb 5-1: config 249 has an invalid interface number: 144 but max is 0 [ 468.153983][ T93] usb 5-1: config 249 has no interface number 0 [ 468.154187][ T93] usb 5-1: config 249 interface 144 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 468.154223][ T93] usb 5-1: config 249 interface 144 has no altsetting 0 [ 468.316859][ T5978] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 468.325739][ T93] usb 5-1: New USB device found, idVendor=099e, idProduct=0052, bcdDevice=5f.88 [ 468.352673][ T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.367751][T16373] 8021q: VLANs not supported on ipvlan1 [ 468.407809][ T5978] visor 3-1:0.0: probe with driver visor failed with error -5 [ 468.415485][ T93] usb 5-1: Product: syz [ 468.415505][ T93] usb 5-1: Manufacturer: syz [ 468.415519][ T93] usb 5-1: SerialNumber: syz [ 468.565328][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.632332][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.674560][ T93] usb 5-1: USB disconnect, device number 82 [ 468.704590][T16354] netlink: 'syz.2.1641': attribute type 10 has an invalid length. [ 468.790050][T16354] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 468.957273][ T93] usb 3-1: USB disconnect, device number 66 [ 469.115610][ T30] audit: type=1400 audit(2000000387.526:1207): avc: denied { create } for pid=16404 comm="syz.3.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 470.736049][ T30] audit: type=1400 audit(2000000389.146:1208): avc: denied { listen } for pid=16421 comm="syz.2.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 473.757203][T16486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1664'. [ 473.762571][ T30] audit: type=1326 audit(2000000392.166:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 473.885574][ T30] audit: type=1326 audit(2000000392.166:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 473.999672][ T30] audit: type=1326 audit(2000000392.166:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 474.032862][T16503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.077439][T16503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.107917][ T30] audit: type=1326 audit(2000000392.166:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 474.185518][ T30] audit: type=1326 audit(2000000392.166:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 474.212907][ T30] audit: type=1326 audit(2000000392.166:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 474.243763][ T93] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 474.288376][ T30] audit: type=1326 audit(2000000392.166:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 474.312072][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 474.362921][ T30] audit: type=1326 audit(2000000392.166:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 474.437659][ T30] audit: type=1326 audit(2000000392.216:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 474.461403][ T24] usb 4-1: device descriptor read/64, error -71 [ 474.504097][ T30] audit: type=1326 audit(2000000392.216:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16484 comm="syz.2.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe90d8e929 code=0x7ffc0000 [ 474.530092][ T30] audit: type=1400 audit(2000000392.486:1219): avc: denied { read } for pid=16504 comm="syz.3.1668" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 474.557822][ T30] audit: type=1400 audit(2000000392.486:1220): avc: denied { open } for pid=16504 comm="syz.3.1668" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 474.586630][ T30] audit: type=1400 audit(2000000392.486:1221): avc: denied { ioctl } for pid=16504 comm="syz.3.1668" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 474.616999][ T30] audit: type=1400 audit(2000000392.806:1222): avc: denied { getopt } for pid=16528 comm="syz.2.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 474.645688][T16542] cgroup: No subsys list or none specified [ 474.679667][T16543] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 474.713659][T16544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16544 comm=syz.1.1675 [ 475.546885][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 475.935153][ T24] usb 4-1: device descriptor read/64, error -71 [ 476.062723][ T24] usb usb4-port1: attempt power cycle [ 476.440151][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 477.870299][ T24] usb 4-1: device descriptor read/8, error -71 [ 478.379763][T16589] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 478.432349][T16590] netlink: 'syz.3.1684': attribute type 39 has an invalid length. [ 478.449224][T16589] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1682'. [ 478.722871][T16593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.793067][T16593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.922538][ T48] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 480.174337][T16636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 480.191124][T16640] nfs4: Bad value for 'source' [ 480.340694][ T93] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 480.473538][T16659] lo speed is unknown, defaulting to 1000 [ 480.481252][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 480.510464][ T93] usb 5-1: Using ep0 maxpacket: 16 [ 480.527260][ T93] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 480.551549][ T93] usb 5-1: config 0 has no interface number 0 [ 480.570888][ T93] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 480.602477][ T93] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 480.656276][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 480.677343][ T93] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 480.742843][ T10] usb 4-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.756683][ T93] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 480.770431][ T93] usb 5-1: Product: syz [ 480.775055][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 480.782797][ T93] usb 5-1: SerialNumber: syz [ 480.790104][T16689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1696'. [ 480.799359][T16689] openvswitch: netlink: Flow key attr not present in new flow. [ 480.848647][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.40 [ 480.863658][ T93] usb 5-1: config 0 descriptor?? [ 480.900092][ T48] usb 2-1: device descriptor read/64, error -71 [ 480.924442][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.978171][ T93] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 480.992877][ T10] usb 4-1: Product: Й [ 481.002880][ T10] usb 4-1: Manufacturer: Б [ 481.023265][ T10] usb 4-1: SerialNumber: ࠓ [ 481.100801][ T93] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input26 [ 481.139559][T16694] overlayfs: failed to clone upperpath [ 481.145750][T16695] overlayfs: failed to clone upperpath [ 481.159843][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 481.173416][ T48] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 481.403257][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.410062][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 481.410739][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.422654][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.429761][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.437276][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.444711][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.451820][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.458941][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.466072][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.473499][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.494501][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 481.503882][ T93] usb 5-1: USB disconnect, device number 83 [ 482.396303][ T48] usb 2-1: config 0 has no interfaces? [ 482.404126][ T48] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 482.417178][ T48] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 482.425780][ T48] usb 2-1: Manufacturer: syz [ 482.436694][ T93] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 482.437470][ T48] usb 2-1: config 0 descriptor?? [ 482.470363][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 482.488379][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 482.527152][ T10] usb 4-1: USB disconnect, device number 68 [ 482.687242][T16659] netlink: 'syz.1.1698': attribute type 29 has an invalid length. [ 483.691942][ T48] usb 2-1: USB disconnect, device number 79 [ 484.316123][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 484.316137][ T30] audit: type=1400 audit(2000000402.726:1225): avc: denied { load_policy } for pid=16735 comm="syz.4.1702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 484.332031][T16737] SELinux: policydb version -845211227 does not match my version range 15-34 [ 484.343029][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.368138][T16737] SELinux: failed to load policy [ 484.616767][T16759] netlink: 'syz.3.1703': attribute type 21 has an invalid length. [ 484.624720][T16759] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1703'. [ 484.634129][T16759] netlink: 'syz.3.1703': attribute type 4 has an invalid length. [ 484.641981][T16759] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1703'. [ 484.659726][T16759] hfsplus: unable to find HFS+ superblock [ 484.928593][ T48] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 485.106635][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 485.149240][ T48] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 485.586135][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.599573][ T48] usb 3-1: Product: syz [ 485.605917][ T48] usb 3-1: Manufacturer: syz [ 485.611479][ T48] usb 3-1: SerialNumber: syz [ 485.638528][ T48] usb 3-1: config 0 descriptor?? [ 486.249506][ T30] audit: type=1400 audit(2000000404.616:1226): avc: denied { write } for pid=16760 comm="syz.4.1707" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 486.253749][T16755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.319810][T16755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.378794][ T48] usb 3-1: USB disconnect, device number 68 [ 486.720848][T16791] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 487.675458][ T5897] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 488.394851][ T5946] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 488.522452][T16827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'. [ 488.562502][ T5897] usb 4-1: config 0 has an invalid interface number: 250 but max is 0 [ 488.600182][ T5897] usb 4-1: config 0 has no interface number 0 [ 488.617883][ T5897] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 488.633909][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.650954][ T5897] usb 4-1: Product: syz [ 488.670660][ T5897] usb 4-1: Manufacturer: syz [ 488.684487][ T5897] usb 4-1: SerialNumber: syz [ 488.702265][ T5897] usb 4-1: config 0 descriptor?? [ 488.945088][ T5897] usb-storage 4-1:0.250: USB Mass Storage device detected [ 489.140111][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 489.175984][T16807] bridge_slave_0: left allmulticast mode [ 489.181813][T16807] bridge_slave_0: left promiscuous mode [ 489.187580][T16807] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.195576][ T5946] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 489.207980][T16807] bridge_slave_1: left allmulticast mode [ 489.213774][T16807] bridge_slave_1: left promiscuous mode [ 489.219801][T16807] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.232457][T16807] bond0: (slave bond_slave_0): Releasing backup interface [ 489.245748][T16807] bond0: (slave bond_slave_1): Releasing backup interface [ 489.270972][T16807] team0: Port device team_slave_0 removed [ 489.284696][T16807] team0: Port device team_slave_1 removed [ 489.291754][T16807] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.299892][T16807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.308710][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 489.315494][ T24] usb 3-1: config 0 has an invalid interface number: 135 but max is 0 [ 489.326898][T16807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.342520][ T24] usb 3-1: config 0 has no interface number 0 [ 489.349025][T16807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.362434][ T24] usb 3-1: config 0 interface 135 altsetting 255 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 489.366794][T16807] batman_adv: batadv0: Interface deactivated: vlan1 [ 489.376536][ T24] usb 3-1: config 0 interface 135 has no altsetting 0 [ 489.382415][T16807] batman_adv: batadv0: Removing interface: vlan1 [ 489.411481][ T24] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a69, bcdDevice=bf.26 [ 489.437474][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.447408][ T24] usb 3-1: Product: syz [ 489.458016][ T24] usb 3-1: Manufacturer: syz [ 490.375436][T16807] bond0: (slave wlan1): Releasing backup interface [ 490.407376][ T5946] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 490.412651][ T24] usb 3-1: SerialNumber: syz [ 490.427513][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.427604][ T24] usb 3-1: config 0 descriptor?? [ 490.806392][ T5946] usb 5-1: config 0 descriptor?? [ 490.806966][T16844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.816557][ T5946] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 490.838588][T16844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.857596][T16866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.867552][T16866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.015407][ T5946] gspca_sunplus: reg_w_riv err -71 [ 491.032003][ T5946] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 491.055222][ T5946] usb 5-1: USB disconnect, device number 85 [ 492.468686][ T5890] usb 4-1: USB disconnect, device number 69 [ 492.498439][ T5946] usb 3-1: USB disconnect, device number 69 [ 492.585875][ T30] audit: type=1400 audit(2000000410.996:1227): avc: denied { append } for pid=16895 comm="syz.2.1723" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 492.674437][ T30] audit: type=1400 audit(2000000411.086:1228): avc: denied { name_bind 0x1000000 } for pid=16904 comm="syz.3.1724" path="socket:[31345]" dev="sockfs" ino=31345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 492.924217][T16911] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 493.531968][T16904] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 494.713820][ T30] audit: type=1400 audit(2000000413.126:1229): avc: denied { getopt } for pid=16951 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 495.454556][ T30] audit: type=1400 audit(2000000413.866:1230): avc: denied { setopt } for pid=16957 comm="syz.0.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 497.082004][T16974] SELinux: failed to load policy [ 497.430204][ T30] audit: type=1400 audit(2000000415.796:1231): avc: denied { create } for pid=16980 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 497.451634][ T30] audit: type=1400 audit(2000000415.806:1232): avc: denied { write } for pid=16980 comm="syz.0.1743" path="socket:[32473]" dev="sockfs" ino=32473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 498.019891][T16999] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 498.027764][T16999] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1746'. [ 498.036897][T16999] netlink: 'syz.3.1746': attribute type 1 has an invalid length. [ 498.044695][T16999] netlink: 'syz.3.1746': attribute type 2 has an invalid length. [ 498.052472][T16999] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1746'. [ 498.069872][T16999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1746'. [ 498.098996][T16999] syz.3.1746: attempt to access beyond end of device [ 498.098996][T16999] nbd3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 498.112281][T16999] hfs: can't find a HFS filesystem on dev nbd3 [ 498.171595][ T30] audit: type=1400 audit(2000000416.576:1233): avc: denied { read } for pid=16996 comm="syz.3.1746" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 500.987407][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.980174][ T30] audit: type=1400 audit(2000000421.386:1234): avc: denied { ioctl } for pid=17014 comm="syz.0.1750" path="socket:[32506]" dev="sockfs" ino=32506 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 505.021360][ T30] audit: type=1800 audit(2000000423.436:1235): pid=17038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1756" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 505.046827][T17038] Can't find a SQUASHFS superblock on nullb0 [ 505.686723][T17064] 9pnet_fd: Insufficient options for proto=fd [ 507.159249][T17081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1767'. [ 508.331318][T17091] TCP: TCP_TX_DELAY enabled [ 509.779804][ T30] audit: type=1326 audit(2000000428.186:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 509.803628][ T30] audit: type=1326 audit(2000000428.186:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 509.827061][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.833868][ T30] audit: type=1326 audit(2000000428.186:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 509.857260][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.864046][ T30] audit: type=1326 audit(2000000428.186:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 509.887919][ T30] audit: type=1326 audit(2000000428.186:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 509.911401][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.922375][ T30] audit: type=1326 audit(2000000428.186:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 509.945820][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.953499][ T30] audit: type=1326 audit(2000000428.186:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 509.976941][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.983928][ T30] audit: type=1326 audit(2000000428.186:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.007423][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.017350][ T30] audit: type=1326 audit(2000000428.186:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.041335][ T30] audit: type=1326 audit(2000000428.186:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.065545][ T30] audit: type=1326 audit(2000000428.186:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.089495][ T30] audit: type=1326 audit(2000000428.186:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.112852][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.119214][ T30] audit: type=1326 audit(2000000428.186:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.142717][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.149450][ T30] audit: type=1326 audit(2000000428.186:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.182772][ T30] audit: type=1326 audit(2000000428.186:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.210480][ T30] audit: type=1326 audit(2000000428.216:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.279571][ T30] audit: type=1326 audit(2000000428.216:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.314267][ T30] audit: type=1326 audit(2000000428.216:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.348926][ T30] audit: type=1326 audit(2000000428.246:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17104 comm="syz.0.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x7ffc0000 [ 510.969297][T17110] lo speed is unknown, defaulting to 1000 [ 512.737053][T17146] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 513.582410][T17150] lo speed is unknown, defaulting to 1000 [ 514.852516][T17183] lo speed is unknown, defaulting to 1000 [ 514.858491][T17183] lo speed is unknown, defaulting to 1000 [ 514.868249][T17183] lo speed is unknown, defaulting to 1000 [ 514.913540][T17183] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 515.018851][T17183] lo speed is unknown, defaulting to 1000 [ 515.031211][T17183] lo speed is unknown, defaulting to 1000 [ 515.042135][T17183] lo speed is unknown, defaulting to 1000 [ 515.054384][T17183] lo speed is unknown, defaulting to 1000 [ 515.066579][T17183] lo speed is unknown, defaulting to 1000 [ 517.025146][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 517.025203][ T30] audit: type=1400 audit(2000000435.436:1266): avc: denied { read } for pid=17198 comm="syz.0.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 517.225783][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 519.319107][T17235] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1795'. [ 519.328730][T17235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.345437][ T30] audit: type=1326 audit(2000000437.756:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17234 comm="syz.0.1795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f5d78e929 code=0x0 [ 519.421540][ T30] audit: type=1400 audit(2000000437.836:1268): avc: denied { lock } for pid=17236 comm="syz.0.1796" path="socket:[32738]" dev="sockfs" ino=32738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 519.444730][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.352151][T17241] sctp: [Deprecated]: syz.0.1798 (pid 17241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.352151][T17241] Use struct sctp_sack_info instead [ 520.506235][T17245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 520.516314][T17245] netlink: 'syz.0.1800': attribute type 15 has an invalid length. [ 520.542903][T17245] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 768 - 0 [ 520.551878][T17245] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 768 - 0 [ 520.560725][T17245] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 768 - 0 [ 520.569331][T17245] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 768 - 0 [ 520.580218][T17245] vxlan1: entered promiscuous mode [ 523.964533][T17292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1814'. [ 524.116921][ T30] audit: type=1400 audit(2000000442.526:1269): avc: denied { map } for pid=17295 comm="syz.0.1816" path="socket:[31703]" dev="sockfs" ino=31703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 524.140236][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.213256][T17331] overlayfs: failed to resolve './file1': -2 [ 533.094097][T17359] overlayfs: failed to clone lowerpath [ 533.105910][T17359] overlayfs: failed to clone upperpath [ 533.905432][T17371] 9pnet_fd: Insufficient options for proto=fd [ 533.918080][T17371] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1835'. [ 534.019573][T17373] netlink: 'syz.0.1836': attribute type 12 has an invalid length. [ 534.027624][T17373] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1836'. [ 562.401852][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.834116][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.600326][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 629.607917][ T31] Not tainted 6.16.0-rc5-syzkaller #0 [ 629.614592][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 629.623439][ T31] task:kworker/0:1 state:D stack:21512 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 629.635668][ T31] Workqueue: events rfkill_sync_work [ 629.640984][ T31] Call Trace: [ 629.644263][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 629.647178][ T31] __schedule+0x116a/0x5de0 [ 629.651750][ T31] ? __pfx___schedule+0x10/0x10 [ 629.656714][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 629.662879][ T30] audit: type=1400 audit(2000000548.066:1270): avc: denied { write } for pid=5814 comm="syz-executor" path="pipe:[4307]" dev="pipefs" ino=4307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 629.685974][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.692608][ T31] ? find_held_lock+0x2b/0x80 [ 629.697689][ T31] ? schedule+0x2d7/0x3a0 [ 629.706836][ T31] schedule+0xe7/0x3a0 [ 629.710990][ T31] schedule_preempt_disabled+0x13/0x30 [ 629.716476][ T31] __mutex_lock+0x6c7/0xb90 [ 629.741959][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 629.747023][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 629.757637][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 629.762776][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 629.767911][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 629.772656][ T31] ? mark_held_locks+0x49/0x80 [ 629.777440][ T31] nfc_dev_down+0x2d/0x2e0 [ 629.781907][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 629.786931][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 629.792789][ T31] rfkill_set_block+0x1fb/0x550 [ 629.797664][ T31] rfkill_sync+0x10a/0x1c0 [ 629.802136][ T31] rfkill_sync_work+0x27/0x40 [ 629.806809][ T31] process_one_work+0x9cf/0x1b70 [ 629.811817][ T31] ? __pfx_process_one_work+0x10/0x10 [ 629.817188][ T31] ? assign_work+0x1a0/0x250 [ 629.821825][ T31] worker_thread+0x6c8/0xf10 [ 629.826414][ T31] ? __kthread_parkme+0x19e/0x250 [ 629.831721][ T31] ? __pfx_worker_thread+0x10/0x10 [ 629.836828][ T31] kthread+0x3c5/0x780 [ 629.840949][ T31] ? __pfx_kthread+0x10/0x10 [ 629.845549][ T31] ? rcu_is_watching+0x12/0xc0 [ 629.850572][ T31] ? __pfx_kthread+0x10/0x10 [ 629.855156][ T31] ret_from_fork+0x5d4/0x6f0 [ 629.859742][ T31] ? __pfx_kthread+0x10/0x10 [ 629.864390][ T31] ret_from_fork_asm+0x1a/0x30 [ 629.869171][ T31] [ 629.872315][ T31] INFO: task kworker/0:2:93 blocked for more than 143 seconds. [ 629.879947][ T31] Not tainted 6.16.0-rc5-syzkaller #0 [ 629.885837][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 629.894585][ T31] task:kworker/0:2 state:D stack:21096 pid:93 tgid:93 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 629.906625][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 629.913729][ T31] Call Trace: [ 629.917003][ T31] [ 629.919978][ T31] __schedule+0x116a/0x5de0 [ 629.924482][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 629.929400][ T31] ? __pfx___schedule+0x10/0x10 [ 629.934335][ T31] ? find_held_lock+0x2b/0x80 [ 629.939027][ T31] ? schedule+0x2d7/0x3a0 [ 629.943393][ T31] schedule+0xe7/0x3a0 [ 629.947458][ T31] schedule_preempt_disabled+0x13/0x30 [ 629.953063][ T31] __mutex_lock+0x6c7/0xb90 [ 629.957565][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 629.964054][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 629.969080][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 629.974956][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 629.980822][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 629.987135][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 629.993453][ T31] process_one_work+0x9cf/0x1b70 [ 629.998407][ T31] ? __pfx_process_one_work+0x10/0x10 [ 630.003844][ T31] ? assign_work+0x1a0/0x250 [ 630.008438][ T31] worker_thread+0x6c8/0xf10 [ 630.013119][ T31] ? __pfx_worker_thread+0x10/0x10 [ 630.018227][ T31] kthread+0x3c5/0x780 [ 630.022339][ T31] ? __pfx_kthread+0x10/0x10 [ 630.026924][ T31] ? rcu_is_watching+0x12/0xc0 [ 630.031761][ T31] ? __pfx_kthread+0x10/0x10 [ 630.036350][ T31] ret_from_fork+0x5d4/0x6f0 [ 630.040980][ T31] ? __pfx_kthread+0x10/0x10 [ 630.045564][ T31] ret_from_fork_asm+0x1a/0x30 [ 630.050440][ T31] [ 630.053547][ T31] INFO: task syz.1.1705:16744 blocked for more than 143 seconds. [ 630.061323][ T31] Not tainted 6.16.0-rc5-syzkaller #0 [ 630.067200][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.076042][ T31] task:syz.1.1705 state:D stack:26280 pid:16744 tgid:16744 ppid:5828 task_flags:0x400040 flags:0x00004004 [ 630.089221][ T31] Call Trace: [ 630.092587][ T31] [ 630.095512][ T31] __schedule+0x116a/0x5de0 [ 630.100082][ T31] ? finish_task_switch.isra.0+0x21c/0xc10 [ 630.105896][ T31] ? __lock_acquire+0x622/0x1c90 [ 630.110911][ T31] ? __pfx___schedule+0x10/0x10 [ 630.115774][ T31] ? find_held_lock+0x2b/0x80 [ 630.120502][ T31] ? schedule+0x2d7/0x3a0 [ 630.124845][ T31] schedule+0xe7/0x3a0 [ 630.128917][ T31] schedule_timeout+0x257/0x290 [ 630.133857][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 630.139244][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.144499][ T31] __wait_for_common+0x2ff/0x4e0 [ 630.149436][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 630.155027][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 630.160619][ T31] ? __flush_work+0x4d0/0xcc0 [ 630.165300][ T31] __flush_work+0x7d7/0xcc0 [ 630.169783][ T31] ? preempt_schedule_common+0x41/0xc0 [ 630.175331][ T31] ? __pfx___flush_work+0x10/0x10 [ 630.180481][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 630.185757][ T31] ? __pfx___might_resched+0x10/0x10 [ 630.191171][ T31] __cancel_work_sync+0x10c/0x130 [ 630.196195][ T31] rfkill_unregister+0x95/0x2c0 [ 630.201077][ T31] nfc_unregister_device+0x94/0x330 [ 630.206280][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 630.212056][ T31] virtual_ncidev_close+0x4b/0xa0 [ 630.217077][ T31] __fput+0x3ff/0xb70 [ 630.221089][ T31] task_work_run+0x14d/0x240 [ 630.225676][ T31] ? __pfx_task_work_run+0x10/0x10 [ 630.230957][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 630.236681][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 630.242013][ T31] do_syscall_64+0x3f6/0x4c0 [ 630.246603][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.252569][ T31] RIP: 0033:0x7f6764f8e929 [ 630.256983][ T31] RSP: 002b:00007ffc8d935718 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 630.265457][ T31] RAX: 0000000000000000 RBX: 00007f67651b7ba0 RCX: 00007f6764f8e929 [ 630.273479][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 630.281491][ T31] RBP: 00007f67651b7ba0 R08: 00000000000000f0 R09: 0000000d8d935a0f [ 630.289453][ T31] R10: 00000000003ffcec R11: 0000000000000246 R12: 0000000000076756 [ 630.297588][ T31] R13: 00007f67651b6080 R14: ffffffffffffffff R15: 00007ffc8d935830 [ 630.306845][ T31] [ 630.309989][ T31] [ 630.309989][ T31] Showing all locks held in the system: [ 630.317688][ T31] 4 locks held by kworker/0:1/10: [ 630.325923][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 630.336410][ T31] #1: ffffc900000f7d10 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 630.348230][ T31] #2: ffffffff908039c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_sync_work+0x1b/0x40 [ 630.358196][ T31] #3: ffff888029f2c100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 630.367232][ T31] 1 lock held by khungtaskd/31: [ 630.372183][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 630.382119][ T31] 3 locks held by kworker/0:2/93: [ 630.387139][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 630.397697][ T31] #1: ffffc9000215fd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 630.411406][ T31] #2: ffffffff908039c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 630.423557][ T31] 2 locks held by kworker/u8:7/4540: [ 630.428829][ T31] #0: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 630.438859][ T31] #1: ffff8880b8424088 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 630.450337][ T31] 2 locks held by getty/5594: [ 630.454987][ T31] #0: ffff88814cd190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 630.464753][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 630.474922][ T31] 1 lock held by syz.1.1048/12534: [ 630.480051][ T31] #0: ffffffff908039c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 630.490250][ T31] 1 lock held by syz.1.1705/16744: [ 630.495339][ T31] #0: ffff888029f2c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 630.505119][ T31] 3 locks held by syz.2.1726/16919: [ 630.510418][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.518873][ T31] #1: ffff88805832e100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 630.528680][ T31] #2: ffffffff908039c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 630.538707][ T31] 1 lock held by syz.2.1726/16926: [ 630.543870][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.552462][ T31] 1 lock held by syz.4.1731/16948: [ 630.557595][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.566123][ T31] 1 lock held by syz-executor/17017: [ 630.571514][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.580150][ T31] 1 lock held by syz.3.1756/17037: [ 630.585252][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.593801][ T31] 1 lock held by syz.3.1756/17038: [ 630.598900][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.607375][ T31] 1 lock held by syz-executor/17097: [ 630.612698][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.621176][ T31] 1 lock held by syz-executor/17103: [ 630.626456][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.635107][ T31] 1 lock held by syz-executor/17248: [ 630.641623][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.650176][ T31] 3 locks held by syz.0.1836/17373: [ 630.655357][ T31] #0: ffffffff90406730 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 630.663624][ T31] #1: ffffffff904067e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 630.672684][ T31] #2: ffffffff908039c8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 630.682716][ T31] 2 locks held by syz.0.1836/17374: [ 630.687914][ T31] #0: ffffffff90406730 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 630.696140][ T31] #1: ffffffff904067e8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 630.705166][ T31] 1 lock held by syz-executor/17382: [ 630.710758][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.719210][ T31] 1 lock held by syz-executor/17387: [ 630.724578][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.733058][ T31] 1 lock held by syz-executor/17389: [ 630.738316][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.746931][ T31] 1 lock held by syz-executor/17391: [ 630.752312][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.762156][ T31] 1 lock held by syz-executor/17393: [ 630.767424][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.775921][ T31] 1 lock held by syz-executor/17395: [ 630.781246][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.789665][ T31] 1 lock held by syz-executor/17400: [ 630.795097][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.804167][ T31] 1 lock held by syz-executor/17402: [ 630.809449][ T31] #0: ffffffff8f3028a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 630.817975][ T31] [ 630.820480][ T31] ============================================= [ 630.820480][ T31] [ 630.828874][ T31] NMI backtrace for cpu 0 [ 630.828883][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 630.828896][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.828902][ T31] Call Trace: [ 630.828906][ T31] [ 630.828911][ T31] dump_stack_lvl+0x116/0x1f0 [ 630.828930][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 630.828942][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 630.828959][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 630.828972][ T31] watchdog+0xf70/0x12c0 [ 630.828988][ T31] ? __pfx_watchdog+0x10/0x10 [ 630.828998][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.829014][ T31] ? __kthread_parkme+0x19e/0x250 [ 630.829031][ T31] ? __pfx_watchdog+0x10/0x10 [ 630.829042][ T31] kthread+0x3c5/0x780 [ 630.829053][ T31] ? __pfx_kthread+0x10/0x10 [ 630.829064][ T31] ? rcu_is_watching+0x12/0xc0 [ 630.829078][ T31] ? __pfx_kthread+0x10/0x10 [ 630.829088][ T31] ret_from_fork+0x5d4/0x6f0 [ 630.829104][ T31] ? __pfx_kthread+0x10/0x10 [ 630.829114][ T31] ret_from_fork_asm+0x1a/0x30 [ 630.829133][ T31] [ 630.829136][ T31] Sending NMI from CPU 0 to CPUs 1: [ 630.946201][ C1] NMI backtrace for cpu 1 [ 630.946214][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 630.946230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.946239][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 630.946261][ C1] Code: eb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f0 21 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 630.946275][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 630.946287][ C1] RAX: 00000000016076c3 RBX: 0000000000000001 RCX: ffffffff8b881c69 [ 630.946296][ C1] RDX: 0000000000000000 RSI: ffffffff8de3106c RDI: ffffffff8c158660 [ 630.946305][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 630.946314][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 630.946322][ C1] R13: ffff88801e2b2440 R14: ffffffff90a97350 R15: 0000000000000000 [ 630.946331][ C1] FS: 0000000000000000(0000) GS:ffff888124818000(0000) knlGS:0000000000000000 [ 630.946345][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.946353][ C1] CR2: 00007f287cee7d60 CR3: 000000000e382000 CR4: 00000000003526f0 [ 630.946372][ C1] DR0: fffffffffffffff7 DR1: 0000000000000651 DR2: 0000000000000006 [ 630.946381][ C1] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 630.946389][ C1] Call Trace: [ 630.946394][ C1] [ 630.946398][ C1] default_idle+0x13/0x20 [ 630.946418][ C1] default_idle_call+0x6d/0xb0 [ 630.946436][ C1] do_idle+0x391/0x510 [ 630.946455][ C1] ? __pfx_do_idle+0x10/0x10 [ 630.946471][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 630.946492][ C1] cpu_startup_entry+0x4f/0x60 [ 630.946508][ C1] start_secondary+0x21d/0x2b0 [ 630.946527][ C1] ? __pfx_start_secondary+0x10/0x10 [ 630.946546][ C1] common_startup_64+0x13e/0x148 [ 630.946564][ C1] [ 630.947192][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 631.140052][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 631.150106][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 631.160150][ T31] Call Trace: [ 631.163419][ T31] [ 631.166336][ T31] dump_stack_lvl+0x3d/0x1f0 [ 631.170922][ T31] panic+0x71c/0x800 [ 631.174814][ T31] ? __pfx_panic+0x10/0x10 [ 631.179223][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 631.184586][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 631.190562][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 631.195922][ T31] ? watchdog+0xdda/0x12c0 [ 631.200325][ T31] ? watchdog+0xdcd/0x12c0 [ 631.204731][ T31] watchdog+0xdeb/0x12c0 [ 631.208968][ T31] ? __pfx_watchdog+0x10/0x10 [ 631.213650][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 631.218840][ T31] ? __kthread_parkme+0x19e/0x250 [ 631.223854][ T31] ? __pfx_watchdog+0x10/0x10 [ 631.228516][ T31] kthread+0x3c5/0x780 [ 631.232570][ T31] ? __pfx_kthread+0x10/0x10 [ 631.237142][ T31] ? rcu_is_watching+0x12/0xc0 [ 631.241895][ T31] ? __pfx_kthread+0x10/0x10 [ 631.246469][ T31] ret_from_fork+0x5d4/0x6f0 [ 631.251048][ T31] ? __pfx_kthread+0x10/0x10 [ 631.255647][ T31] ret_from_fork_asm+0x1a/0x30 [ 631.260427][ T31] [ 631.263657][ T31] Kernel Offset: disabled [ 631.267965][ T31] Rebooting in 86400 seconds..