last executing test programs: 9.142693632s ago: executing program 3 (id=816): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x8, 0x80, 0x44, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40, 0x8, 0x1, 0xb11}}) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000000ffa70200000000100000000000001c00000000000000100100000d"], 0x38}, 0x0) 9.142436695s ago: executing program 3 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) lseek(r0, 0x5, 0x4) 9.10770757s ago: executing program 3 (id=818): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a0000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) 8.670413301s ago: executing program 0 (id=826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x300, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3fc, 0x7e7, 0x0, 0x9, 0x3, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x8000000000000, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket(0x10, 0x800, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000000000000006c0800040001000000", 0x24) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a"], 0x7c}}, 0x6682dad6279e7a13) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) 7.662564794s ago: executing program 0 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(0x0, 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) lseek(r0, 0x5, 0x4) 7.450830594s ago: executing program 0 (id=829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.506112403s ago: executing program 0 (id=831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3ff, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x10, 0x9}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600080600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r5 = fsopen(&(0x7f0000000240)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 5.334566645s ago: executing program 4 (id=834): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) (async) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x106f) splice(r3, 0x0, r2, 0x0, 0xfdef, 0x2) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x8, 0x4}]}, 0x10) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async) sendmmsg(r7, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="e737", 0x2}], 0x1}}], 0x1, 0x4055) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000100)) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0xa}}, 0x20) (async) write(r1, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r9, 0x505, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44081}, 0x40010) 5.286787013s ago: executing program 2 (id=835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800812014000000006fa0002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e208000140000000000800014000000007ebfd014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb0800014000000003140001800800014000000005080001400000000108000340000000a4"], 0x140}}, 0x0) 5.103294745s ago: executing program 2 (id=836): r0 = io_uring_setup(0x48ac, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1, 0xbd}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000006010010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 4.833761415s ago: executing program 4 (id=837): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, 0x0, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x541200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7868b77f, 0x3a, '[\x1e', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) write$binfmt_misc(r3, &(0x7f0000000240)="8d3684af94a7f3d83d2ce7877a7f0330c68cd35f88", 0x15) close_range(r4, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x21, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff020001001d0e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.650775365s ago: executing program 2 (id=838): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0x9, @mcast1, 0x2}, 0x1c, &(0x7f0000001d40)=[{&(0x7f00000024c0)="af", 0x1}], 0x1, 0x0, 0x0, 0x5dc}}], 0x2, 0x0) 4.364304689s ago: executing program 2 (id=840): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x1, 0x4, "f663299d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x3, "abe763"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.027495837s ago: executing program 3 (id=842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) r4 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsmount(r4, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000004000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000073000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) 2.78003609s ago: executing program 0 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050003000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080021400000000014000000110001"], 0xac}}, 0x0) 2.618235859s ago: executing program 0 (id=846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="08000000ff7f000096f2115855188442c90000000015aa00109500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x4000, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="150016a926acff0010000008003910323030302e75"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r7, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r8 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r11, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0xc38, 0x10d, 0x5, "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"}, {0x10, 0x118, 0x6}], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r8, 0x92, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="9400"]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_usb_disconnect(r1) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r12, 0x0, 0x0) 2.589634657s ago: executing program 3 (id=847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0xc038563b, &(0x7f0000000080)={0x0, 0x3, @start={0x0, 0x1}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d000000ac864070a0fe7c1285cc494189c0e302", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x50) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0xfffffffffffffdad) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000140)={0x2, 0x3, 0x6, {0x4, 0x4, 0x0, 0x6}}) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$clear(0x7, r7) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) listen(0xffffffffffffffff, 0x6) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x1, 0x0, @mcast2}, {0xa, 0x0, 0x1, @empty, 0xffbffffe}, 0x0, {[0x9, 0x0, 0x40000001, 0xfffffffd, 0x0, 0x0, 0x0, 0x7]}}, 0x5c) 2.575280887s ago: executing program 4 (id=848): syz_clone3(0x0, 0xffffffffffffff0b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x6, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x100010, r0, 0x0) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) ioctl$COMEDI_POLL(0xffffffffffffffff, 0x640f) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0xee, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x3, 0xfffffffd, 0x65c, 0x3ff, 0x10000, 0x800, 0xa20, 0x9, 0x4e, 0x4, 0x3, 0x7, 0x5, 0x5]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r3, &(0x7f0000000300)=""/90, 0x5a, 0x20, &(0x7f0000000040)={0x11, 0x2, 0x0, 0x1, 0x40, 0x6, @random="95c7e69baeba"}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x2) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x3e) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) 2.462686191s ago: executing program 1 (id=849): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1}, {}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)}, {0x0}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3, 0x0, 0x0, 0x20}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.462287345s ago: executing program 1 (id=850): ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, 0x0) r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x1000000000002) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x41, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0xffffffffffffffed) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000340)='hybla\x00', 0xfffffee6) getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x57) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004003f0007fdd411efc40800040000000000000000", 0x39}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaac1aaaaaaaaaaaaaaaa86dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e2200109078420f000000000000e15458aa74dd48fd8f550b055bc1e0b2bb91f83a043dbcc5231844189567f70521d4f3e6c04f38b5cb7b675256d2e90fc97480735f83c1d6020108048b7a6f007999a472d57bfacac815121fac31b00f14a2ac07"], 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000002100), 0x404, &(0x7f0000000540)=ANY=[@ANYBLOB="000024c700c0", @ANYRESOCT=r1, @ANYBLOB="2c726f6f746d6f64653d38303030303030303023c0ec38262b8e30303030303030303034303830302c757365725f69643d13f34eb0021cabf3ad16a0ea9f817d08e5000b54c5dd32a895e309b63160e063", @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000001dc0)={0x50, 0xfffffffffffffffe, r8, {0x7, 0x2b, 0x3, 0x2b418842, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) msgsnd(0x0, 0xfffffffffffffffc, 0x0, 0x0) 2.196268622s ago: executing program 1 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="11060000000000000000010003000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 2.162264753s ago: executing program 4 (id=852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40a042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}}, 0x0) 1.822818926s ago: executing program 1 (id=853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000f00000002e00000020000000000000000000000000000000000000000020020"], 0xc4}}, 0x0) 1.237999586s ago: executing program 1 (id=854): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/39, @ANYRES32=0x0], 0x30}], 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x280000b, 0x28011, r4, 0xf45e2000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.231311754s ago: executing program 2 (id=855): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0xffffff80}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) 1.189686863s ago: executing program 4 (id=856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0xffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_TTL={0x5, 0x2, 0x7f}}]}, 0x30}}, 0x44890) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1098d1, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r3, 0x0, 0x160) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x67) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x2b, 0x0, 0xc0c719fe1969ce50, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0xffffffeffffffe00, {0xf0f, 0xfffffffe, 0x0, {0x6, 0x2, 0x80000005, 0xfffffffffffffffe, 0x7, 0x5, 0x3, 0xfffff4f0, 0x9, 0x8000, 0x6, r7, r8, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffdb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) 1.070141927s ago: executing program 2 (id=857): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x10f, 0x1, "dc"}], 0x18}, 0x804) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) syz_usb_connect(0x3, 0xfe9, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xb0, 0x2f, 0xcd, 0x20, 0x499, 0x1034, 0x108d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd7, 0x4, 0x8, 0x4, 0x0, 0x8, [{{0x9, 0x4, 0x62, 0xd, 0x9, 0xd6, 0x2d, 0x2f, 0x30, [@generic={0x94, 0x11, "14ff57a982bc0fd44892bcdf1c2aba1ec9411137cadbd451fb769b1fdaeae62f06f76827d66f96c735a208083fe65e30af079dcaa838d3ffd968e55e7d43d94d54fef0fd81d614c76a27e52f600b91f7ec3d6055a431aacd51242c4c862f90a4f8dcce208fdb81e9dfeafaa6138a32112ba484ab35497c5c75cd15f7d5a2338870d45269928edc618c632e7a530fe2170b05"}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x78, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x34a0}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x2, 0x3d, 0x7, [@generic={0xfc, 0x3, "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"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x81, 0x71, 0x5, [@generic={0xa2, 0x6, "a521627a016a4caa7e6001175b778cd97a8a9e1b472b4f50cb897fb30ec593425f0ad9dd8a3ea857a4578f87203b609b9acea0a5da7806b1aa6127bc819ab4e19a9baff821d940e37f092caba0f9ffcbe089bb1c00ab55b0a0964c1055301dabe4d91e0071147f9d1887fdc45e6ed35ff2f5fa044f9388e088e1afffdd4d2aca05da615614128957e56d506d4db3be485b97de74f2029a6bd273a7062df7dde7"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x0, 0x2, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x71, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x82, 0x9, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0xec, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}, @generic={0x43, 0x23, "e2a8aa77331519bc2c550b7de89e7d832ae145629f8b39e809c2c0b081407fac162369c9275f066b4e49fa99253a79df11f10bde3eb30b4cbb73b256bc2ef96f1a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x2, 0x8, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x80}, @generic={0x2e, 0x9, "52f6b457346193337fa5a11ec9799b37358e8f154146b8b0e7cd5f9ec07412f8c5eda25c09fbf99d0448d57b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x6, 0x0, 0x80, [@generic={0xba, 0x11, "093dbf36f9f39b24dcd2d1bc50c5cb8d9c9367337b3d69c686bd98ec53d37309b80b1eb8425dafc5ade9cd4c37f94ed364c6819a08ef0f611fe6fbc93b29ed8bcb33a198032530ec98f6614baa9491d9377b372ec0572767ff7e9b8558d13b1a15d70350ed0f004cc9fe5f25e8fd0b8669df48d988a2f0ca910867312c6b79d982acf295ebb8086690212c9c53acc166386fd853d3c5a445c0dceab2cdd0c49ae7d864913db72b6d586e2ce967397c81a9c67e2a1b9f666a"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x9, 0x7, 0x9f, [@generic={0x41, 0x4, "7fbc6d8fa462945fa366cc10ab4f03728b11296c5716ac0eb1d13e8f36afad054aafbcda5a0c2da091f5121bbb11c06ec87300ac4a5504ad6d35c987ed0049"}]}}]}}, {{0x9, 0x4, 0xef, 0x2, 0x6, 0xff, 0xff, 0xff, 0xf, [@hid_hid={0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xf8d}}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0xd0, 0x10, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x6, 0x2, 0x6, [@generic={0xd9, 0x24, "eb3b8b30e89d5e3890048043906a64ee814ddd2f0b0ba70bdddab52037c30f2c6588e7a4e26bd40f5cb9a7245e36756007ffe6d96bf8ef070a01b38eb2418f34c475b8bddadb3a0a00a88f3b5f974a651d1c96e78cc0bd0cda01d6d92edb14e41e20dd226f35a949d7c7f9a8d6dd5dc35fbb5cd0e0698fda60991824d3c22908425909d37a6d2a926bde66d1c79eb6d8608cdaf3ec75e955130ba246557e07f7c9370ce439cfd50a2112caeb8d7dd4aace62235c643521ce0c1bb7fcb92a8da0987020335c37d884cb029a2dabbc0812ffbce3bdbe736b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xc}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x2, 0x9, 0x9, [@generic={0x22, 0x31, "66630d7c5db8cc3b49209fc8735996632f09334129c8e1d9dc6ba6c4b21ab175"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x5, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0xc}, @generic={0xc7, 0x3, "245274541e1a5e141b94e9369e931829bcd6740beba1e879da3ce656253e49dd735f40ff238c162c9364072f3f2b13bbfc7cf51187b133ca506dc275237681da11141d80241b89732d501c5eadaddd923ef1e8f8b81a21ec08e248f9dab43f1c5a231f8aed476eb01c67062e5a0f54470ffc3c92e97c9ad9a7a113b249b08f2184d362cf6ded42fee360b789196647641215e8bd8a5069ef268fe0c20cfbc12d393c671f932afd2be7f7f647386929b54d3ef43473e6b32d88a940d83ed37efe8f9e12bab0"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x7, 0x5, 0x1, [@generic={0xbc, 0x21, "e16a60dd3cea1d54308addfc7ebae40398d3ae98f9f01d741a687d46ca46952ee8c85d046cedbe404ac9a665e1a91894d31ceff6cff436472253885320da290738cf059bfaf3302714230c4f73241e4369389bc90d51060624bb92dadab870420e03aab9fd9cd5bd8ea6aed43e25c27d255dee9b7bafca8c13af5adca7c05845f415d97dcb9d0ce5568672d92b1754245352eaeb3c114f6dd93fd58cd1e7604ca0f73edcc3e2bf64678cdaaf610367dd0d755a1a383b541b0075"}]}}]}}, {{0x9, 0x4, 0x17, 0xd1, 0xb, 0xff, 0xff, 0xff, 0x6, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x1, 0xf0, "2cc1023cffed41"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x9, 0x8, "d6c945bc1e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xa}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8d, 0x1, 0x4, 0x3, 'X:', "fd"}, @as_header={0x7, 0x24, 0x1, 0xe4, 0x7, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x8, 0x9, "24341077"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0xa, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x10}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x65, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x19, 0x4, 0x2, [@generic={0xab, 0x23, "a65046a14380f211ba9655883087eaa007cf8355a2d07c1eff2283dec9b2cc62244da003505efe3c24af9a5548874ec1d6fcc72cf5b625d1cb9e58757684973dbfcfbce7a1cef9c99e24ab490f54b2f26d21bd2f576ea93cdfb2a17adabefe36a229921eed7d2d7c7dd95819d9cc41f1133c8137c1cc086066363d22a5a9129a9a10c46a4cb30419f179ce1a59d7f7910da3edb0c5432181611fbab096820e9ba697c0aa629d28a4e7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x3, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x70, 0x7, 0xea, 0x2, [@generic={0x73, 0x9, "989078e806ea4132ae570b36d393e6511799d9b52c6bd29071b1d44ec8518a8c82c32ebb9c691bf6a0495fdbd1e860fec1c9a754ec1982b56da2f0cc301f6a999680ce788fdc73fe38eb66ab0976359c7d8dc5332a4495b7fd0f6c50e7fd694dd7ad8777f6a475a946c1219fe73e0a68e8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x9, 0xf5, [@generic={0xf7, 0x22, "c671f57e5ccf4660b99a08dbe0bb83ee82f1e0e9071f9078d6b25dbe44374d677810b42a90aa34996d555155fc44ec1c44cea18faed1a43f7b3211c613ecfcbff676137ab83bf63a9f5a473e2ad38e71eee1738d9e16bf94561ba22e6a02653918513b200f3b25a4c04380028e10eb4d74c500d27d1906c7643b950cbe8f881dc269b5a4f913dfe0233bd40be20b5e77925b1a7126719085ab6aaf246f6e2485e9c0f0efb4fd344b63e3f3c530e0c35d36278b5ba3cb7e23cc4e9c2ff1708b6d22e137ef3f72e0d26eea4746b38b17783f8bbfc4928819bc9a3a19655ed358d9e5cae71e481009f017d6df9862e005ce451a4f12ae"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x0, 0x7, 0x9, [@generic={0xd9, 0x22, "574ba7abc89180c60f0452ffa3b7b613877159f47eee99ea8f1cf79b18de89528b7099a095d286135fb5ca8298cbe05c5f973c05d3cdc1915fb207fd0e3fa6edd729544bcffdda42eeb011d6537994d95efe6f757b7f931dad0368445d7a235c03c504fe76316ed1bd55336b7ef5bc22f9f7117812ebb0c4cd1a74b1bae94d9277ba7edef627a5e9c72eab84fe526cf84ccb9be3b5f500c642a715a4e16096c4c34be9de07638f1b696dfb1f41f5e317fd827b070282e23c4270aa897accf4a4002987b162aa2b61d71a5da8249149e264ef2632e81340"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x5, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3df, 0x7, 0x80, 0x6, [@generic={0xa3, 0x5, "8803553163cd559f6087e005350652eb5c34ce9918f6e4f16a8cbbbcb3acc8e60b2d612df9ef921391b1551a0042634db3a05ee5e13d233538540bbd24640eaaa73ae1942cedb023ecedbef8a8b2859994ca3abc4a9abee7c313eff906e51b2e19187dc824df07045708444d78eef2b003e06a40783848bc4853928f39978b9fa5a6f815a39c59ad18dfd5346abcc121bebcf28c8319b516f54c131396a10d9929"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x0, 0x1, 0x9, [@generic={0x7a, 0x13, "c1c9e062f659299373f8aae3024b1e060db3d9b69af3f838c6e82c2f8ea4fb129e4c520ad9214734070bf223ed1cdbe391299e4fe34184f4f0e8bb2b32135ade21ee6865c47fd9f673f7ab2f8ccec78619fb6087ce3dd0acf778dce6b03ba246b2752825fd46d778e49e024bf5b0d2c876ad696ae17eac1d"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xd, 0x6, 0x7, [@generic={0x27, 0x6, "826475857938db1c81c2259f0363081c0c43c4aa5dc46d5813d5be6ef56ab640640ba12547"}]}}]}}, {{0x9, 0x4, 0xa0, 0x7, 0xc, 0x45, 0xa6, 0x2b, 0x4, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7, 0x9, "9b83f155"}]}], [{{0x9, 0x5, 0x1, 0x3, 0x8, 0x2, 0x3, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x4, 0x9, 0x6d, [@generic={0x84, 0x21, "1ea9f349adf977ed841a5de433c4202f063d3638673d94987b39019594e8770b6ffd13a203486e1e01bd0ba97f6e3d9ab8786f2b3e953c076ad75d4caaf5344600caee7d9ef75543a75d314daea35f8ba6abf80cf325dc1b77101992e9fc57def407f4b59a25027f36113d6c84653d497ab1b8b295155e360c8527f81065cc3ef513"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x0, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x1, 0xa2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x40}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xe, 0x3, 0x1, [@generic={0xc6, 0x21, "51484dd268191fae1427168930d0a931112196e39a3f0e486d9e11ff6835d98a3078fdc2fdd0aaf6d17917bcffad773730b8292446baef764844178784bedf655a228857013c533b1609230b80a26b039f5569e93e97328e4a83251bc5b4ec2e760cb2bbd958f0e2ac8a3a8f512a9c51976154e7df4e9ea57acfadbca2316138fd4fd38f7b9650da49cd2cf7b42a1dadec1bee91adf178b33b5135b97540e2040c44b73075551c96d76d1cbf9442ee1e0e9778667add141888df67bbfb0c4130fe9509b2"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x80, 0x8, 0x6, [@generic={0x8c, 0x8, "31731afbd7c446fa20302d5f0cf0a8be857a85d7949cfcd97d4a85627779b89251323173a4468219e3378142f940e5ae425c35d508f75e03c36497c810d47e35484a38287928212d7a93fc10dbafd0a18b62c17bce6cd8dd47a7a2b5e670175b46106041b809a99837d0a2ebd32c1b0555f3222e67b7349d950e70c682d75f1f4742b3ff7d68328d9fcb"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x640, 0x4, 0x9e, 0x3, [@generic={0x8d, 0x1, "806c8867ea91726d531619bd6536124556f540b7e69abfa9af15b92df4812f15ab51f029a055487acfe51f7d1bbe8bf27595f4450b6a0dd6cabc442020c6274836e2c8566b12077f1346964402135802750d096e164cef7a3a82fd77b6c71f17d8b12796d1eeee008c73f112c187ac1f03f2380b3e0d953f394c9739bcb1c112f34bbd212a190fbbd49484"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0x9, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xcd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x2, 0x6, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xc73}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x16}]}}, {{0x9, 0x5, 0x5, 0x82c0ed3f7a687eb9, 0x3ff, 0x80, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x8, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x8, 0x40, 0x1, [@generic={0x81, 0x9, "5d7e7cccafad5ffc13a35478922385dc8383e349ed583b6c6da130e20a1db3418956afef243b6bb07b87348c26d672a343e5776d03fe02b15c6423dfcbdd164d2a634f66f6ab1132211c15efaef2226f2bbc8998e2137eb4d5ed950443cd3ab2c323a262637123b94ddfdc2b5ea20ebd21ac84055cf46995dca4c3f9d47aeb"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x787, 0x7, 0xf9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x9}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x3, 0x6, 0x10, 0x6}, 0x15, &(0x7f0000000180)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x9, 0x0, 0xc, [0xf]}]}, 0x1, [{0xfb, &(0x7f00000013c0)=@string={0xfb, 0x3, "cf6cf55003a877e28873f5ade110cef819d88ff8c24942385e74032ae3db89bf3878468f4d73308ecdcad028e9caa6b8f380dc194af22b97e6205781a43564021576fcc799ff32ad8f07016f79cf8e2eafc1a3202113f40f392d3e007ffcc5b66e60848d8b33752174606bd0714fee0d959fd08b0fd378d6c15eb3ecd047aa6a65917b91402e6b7e50a1951bd29223276cf933ddd243e1a7528896e2706f3fb81da8d47d1140616065b1a5af12b7a705f0beabaa5106ec064e645242a0bc21672f7f441cd35359e2b6765527bf490f40f4b86e16d3afeec05a7d525db74a0d743009855c1d42d8d231a4a21ea8d4ddd24382237869233a7a94"}}]}) (async) r5 = syz_usb_connect(0x3, 0xfe9, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xb0, 0x2f, 0xcd, 0x20, 0x499, 0x1034, 0x108d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd7, 0x4, 0x8, 0x4, 0x0, 0x8, [{{0x9, 0x4, 0x62, 0xd, 0x9, 0xd6, 0x2d, 0x2f, 0x30, [@generic={0x94, 0x11, "14ff57a982bc0fd44892bcdf1c2aba1ec9411137cadbd451fb769b1fdaeae62f06f76827d66f96c735a208083fe65e30af079dcaa838d3ffd968e55e7d43d94d54fef0fd81d614c76a27e52f600b91f7ec3d6055a431aacd51242c4c862f90a4f8dcce208fdb81e9dfeafaa6138a32112ba484ab35497c5c75cd15f7d5a2338870d45269928edc618c632e7a530fe2170b05"}], [{{0x9, 0x5, 0x7, 0x0, 0x200, 0x78, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x34a0}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x2, 0x3d, 0x7, [@generic={0xfc, 0x3, "44d66a5118c26c4a72af6432498180edf69861372290a6125c0f5e990420b499c1a58b6d077f06a4b0d6eace0c7fd65873f6415b86752bf92710badcc789f4467fd0dfac5ac579ae0728a518e73908f8027e71f5da58982eacb42d5859a48363ab069ed4ecf9b3ed89ca27b648208e15a3a5f2c0d0c20de2d2704f29c48405ee0074b120b6fa9597e3060b9b377226459ba4cecf5f27d42801413ba59ffc8e92fcd5674ed0f926cb4a4397251d4e0ce341996bc72ccb3c8259ad7ab2fdccbff83a6a178f150db8d57adba01c2252933aebdb585d01397187d1f6eb52fb9b2323028db2c2166149f3aa0a822c95b39e566d614a30886df7e0eb04"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x81, 0x71, 0x5, [@generic={0xa2, 0x6, "a521627a016a4caa7e6001175b778cd97a8a9e1b472b4f50cb897fb30ec593425f0ad9dd8a3ea857a4578f87203b609b9acea0a5da7806b1aa6127bc819ab4e19a9baff821d940e37f092caba0f9ffcbe089bb1c00ab55b0a0964c1055301dabe4d91e0071147f9d1887fdc45e6ed35ff2f5fa044f9388e088e1afffdd4d2aca05da615614128957e56d506d4db3be485b97de74f2029a6bd273a7062df7dde7"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x0, 0x2, 0xbd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x71, 0x6}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x82, 0x9, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0xec, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x9}, @generic={0x43, 0x23, "e2a8aa77331519bc2c550b7de89e7d832ae145629f8b39e809c2c0b081407fac162369c9275f066b4e49fa99253a79df11f10bde3eb30b4cbb73b256bc2ef96f1a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x2, 0x8, 0xb9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x80}, @generic={0x2e, 0x9, "52f6b457346193337fa5a11ec9799b37358e8f154146b8b0e7cd5f9ec07412f8c5eda25c09fbf99d0448d57b"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x6, 0x0, 0x80, [@generic={0xba, 0x11, "093dbf36f9f39b24dcd2d1bc50c5cb8d9c9367337b3d69c686bd98ec53d37309b80b1eb8425dafc5ade9cd4c37f94ed364c6819a08ef0f611fe6fbc93b29ed8bcb33a198032530ec98f6614baa9491d9377b372ec0572767ff7e9b8558d13b1a15d70350ed0f004cc9fe5f25e8fd0b8669df48d988a2f0ca910867312c6b79d982acf295ebb8086690212c9c53acc166386fd853d3c5a445c0dceab2cdd0c49ae7d864913db72b6d586e2ce967397c81a9c67e2a1b9f666a"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x9, 0x7, 0x9f, [@generic={0x41, 0x4, "7fbc6d8fa462945fa366cc10ab4f03728b11296c5716ac0eb1d13e8f36afad054aafbcda5a0c2da091f5121bbb11c06ec87300ac4a5504ad6d35c987ed0049"}]}}]}}, {{0x9, 0x4, 0xef, 0x2, 0x6, 0xff, 0xff, 0xff, 0xf, [@hid_hid={0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xf8d}}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x1, 0x9, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0xd0, 0x10, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x4}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x6, 0x2, 0x6, [@generic={0xd9, 0x24, "eb3b8b30e89d5e3890048043906a64ee814ddd2f0b0ba70bdddab52037c30f2c6588e7a4e26bd40f5cb9a7245e36756007ffe6d96bf8ef070a01b38eb2418f34c475b8bddadb3a0a00a88f3b5f974a651d1c96e78cc0bd0cda01d6d92edb14e41e20dd226f35a949d7c7f9a8d6dd5dc35fbb5cd0e0698fda60991824d3c22908425909d37a6d2a926bde66d1c79eb6d8608cdaf3ec75e955130ba246557e07f7c9370ce439cfd50a2112caeb8d7dd4aace62235c643521ce0c1bb7fcb92a8da0987020335c37d884cb029a2dabbc0812ffbce3bdbe736b"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xc}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0x2, 0x9, 0x9, [@generic={0x22, 0x31, "66630d7c5db8cc3b49209fc8735996632f09334129c8e1d9dc6ba6c4b21ab175"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x5, 0xf, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0xc}, @generic={0xc7, 0x3, "245274541e1a5e141b94e9369e931829bcd6740beba1e879da3ce656253e49dd735f40ff238c162c9364072f3f2b13bbfc7cf51187b133ca506dc275237681da11141d80241b89732d501c5eadaddd923ef1e8f8b81a21ec08e248f9dab43f1c5a231f8aed476eb01c67062e5a0f54470ffc3c92e97c9ad9a7a113b249b08f2184d362cf6ded42fee360b789196647641215e8bd8a5069ef268fe0c20cfbc12d393c671f932afd2be7f7f647386929b54d3ef43473e6b32d88a940d83ed37efe8f9e12bab0"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0x7, 0x5, 0x1, [@generic={0xbc, 0x21, "e16a60dd3cea1d54308addfc7ebae40398d3ae98f9f01d741a687d46ca46952ee8c85d046cedbe404ac9a665e1a91894d31ceff6cff436472253885320da290738cf059bfaf3302714230c4f73241e4369389bc90d51060624bb92dadab870420e03aab9fd9cd5bd8ea6aed43e25c27d255dee9b7bafca8c13af5adca7c05845f415d97dcb9d0ce5568672d92b1754245352eaeb3c114f6dd93fd58cd1e7604ca0f73edcc3e2bf64678cdaaf610367dd0d755a1a383b541b0075"}]}}]}}, {{0x9, 0x4, 0x17, 0xd1, 0xb, 0xff, 0xff, 0xff, 0x6, [@uac_as={[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x6, 0x1, 0xf0, "2cc1023cffed41"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x4, 0x9, 0x8, "d6c945bc1e"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xa}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8d, 0x1, 0x4, 0x3, 'X:', "fd"}, @as_header={0x7, 0x24, 0x1, 0xe4, 0x7, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x8, 0x9, "24341077"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0xa, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x10}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x7, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x65, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x19, 0x4, 0x2, [@generic={0xab, 0x23, "a65046a14380f211ba9655883087eaa007cf8355a2d07c1eff2283dec9b2cc62244da003505efe3c24af9a5548874ec1d6fcc72cf5b625d1cb9e58757684973dbfcfbce7a1cef9c99e24ab490f54b2f26d21bd2f576ea93cdfb2a17adabefe36a229921eed7d2d7c7dd95819d9cc41f1133c8137c1cc086066363d22a5a9129a9a10c46a4cb30419f179ce1a59d7f7910da3edb0c5432181611fbab096820e9ba697c0aa629d28a4e7"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x3, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x70, 0x7, 0xea, 0x2, [@generic={0x73, 0x9, "989078e806ea4132ae570b36d393e6511799d9b52c6bd29071b1d44ec8518a8c82c32ebb9c691bf6a0495fdbd1e860fec1c9a754ec1982b56da2f0cc301f6a999680ce788fdc73fe38eb66ab0976359c7d8dc5332a4495b7fd0f6c50e7fd694dd7ad8777f6a475a946c1219fe73e0a68e8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x9, 0xf5, [@generic={0xf7, 0x22, "c671f57e5ccf4660b99a08dbe0bb83ee82f1e0e9071f9078d6b25dbe44374d677810b42a90aa34996d555155fc44ec1c44cea18faed1a43f7b3211c613ecfcbff676137ab83bf63a9f5a473e2ad38e71eee1738d9e16bf94561ba22e6a02653918513b200f3b25a4c04380028e10eb4d74c500d27d1906c7643b950cbe8f881dc269b5a4f913dfe0233bd40be20b5e77925b1a7126719085ab6aaf246f6e2485e9c0f0efb4fd344b63e3f3c530e0c35d36278b5ba3cb7e23cc4e9c2ff1708b6d22e137ef3f72e0d26eea4746b38b17783f8bbfc4928819bc9a3a19655ed358d9e5cae71e481009f017d6df9862e005ce451a4f12ae"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x0, 0x7, 0x9, [@generic={0xd9, 0x22, "574ba7abc89180c60f0452ffa3b7b613877159f47eee99ea8f1cf79b18de89528b7099a095d286135fb5ca8298cbe05c5f973c05d3cdc1915fb207fd0e3fa6edd729544bcffdda42eeb011d6537994d95efe6f757b7f931dad0368445d7a235c03c504fe76316ed1bd55336b7ef5bc22f9f7117812ebb0c4cd1a74b1bae94d9277ba7edef627a5e9c72eab84fe526cf84ccb9be3b5f500c642a715a4e16096c4c34be9de07638f1b696dfb1f41f5e317fd827b070282e23c4270aa897accf4a4002987b162aa2b61d71a5da8249149e264ef2632e81340"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x5, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3df, 0x7, 0x80, 0x6, [@generic={0xa3, 0x5, "8803553163cd559f6087e005350652eb5c34ce9918f6e4f16a8cbbbcb3acc8e60b2d612df9ef921391b1551a0042634db3a05ee5e13d233538540bbd24640eaaa73ae1942cedb023ecedbef8a8b2859994ca3abc4a9abee7c313eff906e51b2e19187dc824df07045708444d78eef2b003e06a40783848bc4853928f39978b9fa5a6f815a39c59ad18dfd5346abcc121bebcf28c8319b516f54c131396a10d9929"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x0, 0x1, 0x9, [@generic={0x7a, 0x13, "c1c9e062f659299373f8aae3024b1e060db3d9b69af3f838c6e82c2f8ea4fb129e4c520ad9214734070bf223ed1cdbe391299e4fe34184f4f0e8bb2b32135ade21ee6865c47fd9f673f7ab2f8ccec78619fb6087ce3dd0acf778dce6b03ba246b2752825fd46d778e49e024bf5b0d2c876ad696ae17eac1d"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xd, 0x6, 0x7, [@generic={0x27, 0x6, "826475857938db1c81c2259f0363081c0c43c4aa5dc46d5813d5be6ef56ab640640ba12547"}]}}]}}, {{0x9, 0x4, 0xa0, 0x7, 0xc, 0x45, 0xa6, 0x2b, 0x4, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7, 0x9, "9b83f155"}]}], [{{0x9, 0x5, 0x1, 0x3, 0x8, 0x2, 0x3, 0xc8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x4, 0x9, 0x6d, [@generic={0x84, 0x21, "1ea9f349adf977ed841a5de433c4202f063d3638673d94987b39019594e8770b6ffd13a203486e1e01bd0ba97f6e3d9ab8786f2b3e953c076ad75d4caaf5344600caee7d9ef75543a75d314daea35f8ba6abf80cf325dc1b77101992e9fc57def407f4b59a25027f36113d6c84653d497ab1b8b295155e360c8527f81065cc3ef513"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x0, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x1, 0xa2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x40}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xe, 0x3, 0x1, [@generic={0xc6, 0x21, "51484dd268191fae1427168930d0a931112196e39a3f0e486d9e11ff6835d98a3078fdc2fdd0aaf6d17917bcffad773730b8292446baef764844178784bedf655a228857013c533b1609230b80a26b039f5569e93e97328e4a83251bc5b4ec2e760cb2bbd958f0e2ac8a3a8f512a9c51976154e7df4e9ea57acfadbca2316138fd4fd38f7b9650da49cd2cf7b42a1dadec1bee91adf178b33b5135b97540e2040c44b73075551c96d76d1cbf9442ee1e0e9778667add141888df67bbfb0c4130fe9509b2"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x80, 0x8, 0x6, [@generic={0x8c, 0x8, "31731afbd7c446fa20302d5f0cf0a8be857a85d7949cfcd97d4a85627779b89251323173a4468219e3378142f940e5ae425c35d508f75e03c36497c810d47e35484a38287928212d7a93fc10dbafd0a18b62c17bce6cd8dd47a7a2b5e670175b46106041b809a99837d0a2ebd32c1b0555f3222e67b7349d950e70c682d75f1f4742b3ff7d68328d9fcb"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x640, 0x4, 0x9e, 0x3, [@generic={0x8d, 0x1, "806c8867ea91726d531619bd6536124556f540b7e69abfa9af15b92df4812f15ab51f029a055487acfe51f7d1bbe8bf27595f4450b6a0dd6cabc442020c6274836e2c8566b12077f1346964402135802750d096e164cef7a3a82fd77b6c71f17d8b12796d1eeee008c73f112c187ac1f03f2380b3e0d953f394c9739bcb1c112f34bbd212a190fbbd49484"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x40, 0x9, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xcd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf}]}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x2, 0x6, 0x9d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0xc73}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xb, 0x16}]}}, {{0x9, 0x5, 0x5, 0x82c0ed3f7a687eb9, 0x3ff, 0x80, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x8, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x8, 0x40, 0x1, [@generic={0x81, 0x9, "5d7e7cccafad5ffc13a35478922385dc8383e349ed583b6c6da130e20a1db3418956afef243b6bb07b87348c26d672a343e5776d03fe02b15c6423dfcbdd164d2a634f66f6ab1132211c15efaef2226f2bbc8998e2137eb4d5ed950443cd3ab2c323a262637123b94ddfdc2b5ea20ebd21ac84055cf46995dca4c3f9d47aeb"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x787, 0x7, 0xf9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x9}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x3, 0x6, 0x10, 0x6}, 0x15, &(0x7f0000000180)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x9, 0x0, 0xc, [0xf]}]}, 0x1, [{0xfb, &(0x7f00000013c0)=@string={0xfb, 0x3, "cf6cf55003a877e28873f5ade110cef819d88ff8c24942385e74032ae3db89bf3878468f4d73308ecdcad028e9caa6b8f380dc194af22b97e6205781a43564021576fcc799ff32ad8f07016f79cf8e2eafc1a3202113f40f392d3e007ffcc5b66e60848d8b33752174606bd0714fee0d959fd08b0fd378d6c15eb3ecd047aa6a65917b91402e6b7e50a1951bd29223276cf933ddd243e1a7528896e2706f3fb81da8d47d1140616065b1a5af12b7a705f0beabaa5106ec064e645242a0bc21672f7f441cd35359e2b6765527bf490f40f4b86e16d3afeec05a7d525db74a0d743009855c1d42d8d231a4a21ea8d4ddd24382237869233a7a94"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000300)={0x14, &(0x7f00000014c0)={0x0, 0xb, 0xd4, {0xd4, 0xf, "848420085ad12ff49857d3ce06c9f672da859ba8029ead62deb59c7c11db8927457c7999807a3acba9b7889a543bcfe5162694ce28922b352ef58b3b73a4c2aabfc201b3e1cec5235cc4aca38725212a864bfc5371789c1ade8c8eb524f1444af241085274a6939bef3e07baa9ae9a36dd74b434667a999dd23c6c389cb68c3bca39faabfad05c3d8cc3614a806dff93b88afe4facbf4f0db192a83076ac9656d1953392e11b801af8375f203e8cc353b36d34632c0a4cb314402eabb00023de3d95032fca3626666746e12a51a09a45a6ea"}}, &(0x7f00000015c0)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "c79f11465e357f4ba66c66e5e28bcc9682cc526aa42e7983d7664b5200dfe5fbe359cd91a379d4a6fa598c55d3d89ac0884538ba5116954e59389bb07d516317d62039ec15e30f952a453af9f37b37363e0ba7d5b4c363a67791407f8ec3009b27af7f4c15d892a637366e6897c7ea234a853f7a7b9a74e093b5561809834ec41527043b8f2bfb1bcf0c971af56c490794dd28cec61399f56e2dcdcac88aedec23e9626e9687747fc320a71b6c27e7"}}}, &(0x7f0000001880)={0x44, &(0x7f0000001680)={0x20, 0x8, 0x3e, "fcc070cd23d68bf60eda876e6e0d87182cfe6e636f2ec586b769a3ea96d5cd5aea00429f0ea62bac81949ff794c5025c41f9cbdad8c2e8b9046c0eb410af"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001740)={0x20, 0x81, 0x3, "69bbf8"}, &(0x7f0000001780)={0x20, 0x82, 0x3, "b1be16"}, &(0x7f00000017c0)={0x20, 0x83, 0x2, "9e00"}, &(0x7f0000001800)={0x20, 0x84, 0x1, '\r'}, &(0x7f0000001840)={0x20, 0x85, 0x3, "1e33e9"}}) mremap(&(0x7f000074e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000eb000/0x2000)=nil) (async) mremap(&(0x7f000074e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000eb000/0x2000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) (async) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 751.361574ms ago: executing program 3 (id=858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="df12c9f7b9a6000f000000000000", 0x0, 0x80000084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 322.351µs ago: executing program 1 (id=859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x5000, 0x8, 0xffffffffffffffff, 0x3}) r2 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x3, r2}) r3 = socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r4, 0x409, 0x1) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$afs(0x0, 0x0, &(0x7f0000000100), 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000040)='./file5\x00', 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768b5fa24cef6efd89d5718fc89b68d3ccbb4ca7dc7d615408663367bd98415", @ANYRESHEX=0x0, @ANYRESDEC=r6, @ANYBLOB="000000000200"/28], 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r8 = socket$netlink(0x10, 0x3, 0x5) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x1a870, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x7505, 0x1f49, 0x0, &(0x7f0000000340), 0x8) io_submit(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRES16, @ANYRESDEC=r6, @ANYRES16=r7, @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x4000814) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000461ea784066a8c34b85535abb1204287f029f14c41879e7e8ca77fd7784c4d630ff06e61f7d01ee5806bdd24ea39b791b1c93026580244b3142f53beb86be41c22785573792686def88b317e071cf0ff6e1ae0a256fb395ba1173b1fa2661cfbbfa481694549242de180bd78de6cfc9b0fd22fb306b27dee5bb4c75362ecc0363d8a03b4ba57550a1e2ad3f069da9273001170555f14788ac1b865064f6b43cafd1b0a6ed8c670ea9b63ee4b6e574bc863f0ebe7"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 4 (id=860): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0xe0d6000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): syz1: added [ 180.399538][ T7394] smc: adding ib device syz1 with port count 1 [ 180.419522][ T7394] smc: ib device syz1 port 1 has pnetid [ 181.156778][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 181.205175][ T7459] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 181.682062][ T7478] debugfs: '!' already exists in 'ieee80211' [ 182.209138][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 183.012277][ T7513] netlink: 'syz.1.390': attribute type 10 has an invalid length. [ 184.404258][ T7532] netlink: 'syz.4.395': attribute type 10 has an invalid length. [ 184.431580][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 184.439865][ T5903] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 184.559587][ T7539] openvswitch: netlink: Missing key (keys=40, expected=80) [ 184.572334][ T24] usb 1-1: device descriptor read/64, error -71 [ 184.631430][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 184.638489][ T5903] usb 3-1: config 4 has an invalid interface number: 118 but max is 0 [ 184.655001][ T5903] usb 3-1: config 4 has no interface number 0 [ 184.752244][ T5903] usb 3-1: config 4 interface 118 has no altsetting 0 [ 184.761334][ T5903] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0005, bcdDevice=d2.65 [ 184.779996][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.788427][ T5903] usb 3-1: Product: syz [ 184.792787][ T5903] usb 3-1: Manufacturer: syz [ 184.881254][ T24] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 184.888946][ T5903] usb 3-1: SerialNumber: syz [ 185.042969][ T5903] kvaser_usb 3-1:4.118: error -ENODEV: Cannot get usb endpoint(s) [ 185.152499][ T24] usb 1-1: device descriptor read/64, error -71 [ 185.191307][ T30] audit: type=1326 audit(1758032896.686:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.477051][ T30] audit: type=1326 audit(1758032896.686:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.510131][ T30] audit: type=1326 audit(1758032896.686:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.560355][ T30] audit: type=1326 audit(1758032896.696:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.585131][ T24] usb usb1-port1: attempt power cycle [ 185.610410][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.620233][ T30] audit: type=1326 audit(1758032896.696:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.646225][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.677089][ T30] audit: type=1326 audit(1758032896.696:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.704856][ T30] audit: type=1326 audit(1758032896.976:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.705302][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 185.768775][ T30] audit: type=1326 audit(1758032896.976:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.792272][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 185.798278][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 185.804351][ T5863] Bluetooth: hci1: command 0x0406 tx timeout [ 185.810704][ T30] audit: type=1326 audit(1758032896.976:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.852277][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.883278][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.885014][ T30] audit: type=1326 audit(1758032896.976:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7525 comm="syz.2.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 185.956343][ T5856] usb 3-1: USB disconnect, device number 17 [ 185.961289][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 186.158488][ T24] usb 1-1: device descriptor read/8, error -71 [ 186.743321][ T7562] futex_wake_op: syz.4.403 tries to shift op by -1; fix this program [ 186.761308][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 186.783289][ T24] usb 1-1: device descriptor read/8, error -71 [ 186.904057][ T24] usb usb1-port1: unable to enumerate USB device [ 187.781376][ T5964] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 187.910555][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 189.172838][ T5964] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 189.242381][ T5964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.296815][ T5964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 189.330045][ T5964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 189.375253][ T5964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 189.428141][ T5964] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 189.453095][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 189.484066][ T5964] usb 1-1: Product: syz [ 189.488263][ T5964] usb 1-1: Manufacturer: syz [ 189.671662][ T7624] netlink: 'syz.3.420': attribute type 2 has an invalid length. [ 189.680627][ T7624] netlink: 'syz.3.420': attribute type 11 has an invalid length. [ 189.688501][ T7624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.420'. [ 189.769432][ T7586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 189.826458][ T5964] cdc_wdm 1-1:1.0: skipping garbage [ 189.841285][ T5964] cdc_wdm 1-1:1.0: skipping garbage [ 189.863054][ T5964] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 189.868977][ T5964] cdc_wdm 1-1:1.0: Unknown control protocol [ 189.915954][ T7628] netlink: 20 bytes leftover after parsing attributes in process `syz.3.423'. [ 189.936689][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.423'. [ 190.215778][ C0] wdm_int_callback: 56 callbacks suppressed [ 190.215800][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.228281][ C0] wdm_int_callback: 56 callbacks suppressed [ 190.228296][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.241228][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.247834][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.254430][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.261018][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.267216][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 190.267303][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.279931][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.286192][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.292761][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.298977][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.305541][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.311801][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.318362][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.324571][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.331148][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.338734][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.341479][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 190.345331][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.360925][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 190.367623][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 190.374162][ T5856] usb 1-1: USB disconnect, device number 22 [ 190.380069][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 190.392106][ T30] audit: type=1400 audit(1758032901.736:683): avc: denied { read write } for pid=7585 comm="syz.0.411" name="cdc-wdm0" dev="devtmpfs" ino=3003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 190.423170][ T30] audit: type=1400 audit(1758032901.736:684): avc: denied { open } for pid=7585 comm="syz.0.411" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 190.665034][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 190.696792][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 190.707311][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.751263][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.771323][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.781345][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.808902][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.828760][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.911277][ T5856] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 191.091426][ T5969] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 191.124613][ T5856] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 191.139127][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 191.141230][ T5856] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.160511][ T24] usbtmc 5-1:16.0: can't read capabilities [ 191.168596][ T5856] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 191.189323][ T5856] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.224176][ T5856] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 191.233683][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 191.264335][ T5856] usb 1-1: Product: syz [ 191.268575][ T5856] usb 1-1: Manufacturer: syz [ 191.289013][ T7586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.311746][ T5856] cdc_wdm 1-1:1.0: skipping garbage [ 191.316981][ T5856] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 191.363489][ T5969] usb 3-1: Using ep0 maxpacket: 8 [ 191.493263][ T5969] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 191.510825][ T5969] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.540617][ T5964] usb 1-1: USB disconnect, device number 23 [ 191.541024][ T5969] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.591460][ T5969] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.621251][ T5969] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.658287][ T5969] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.685451][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.998481][ T5969] usb 3-1: GET_CAPABILITIES returned 0 [ 192.004956][ T944] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.014668][ T5969] usbtmc 3-1:16.0: can't read capabilities [ 192.181329][ T944] usb 4-1: Using ep0 maxpacket: 32 [ 192.200177][ T944] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 192.308142][ T944] usb 4-1: config 0 has no interface number 0 [ 192.495758][ T944] usb 4-1: config 0 interface 184 has no altsetting 0 [ 192.508691][ T944] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 192.518711][ T944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.528865][ T944] usb 4-1: Product: syz [ 192.533404][ T944] usb 4-1: Manufacturer: syz [ 192.538047][ T944] usb 4-1: SerialNumber: syz [ 192.540958][ T5964] usb 5-1: USB disconnect, device number 15 [ 192.569121][ T944] usb 4-1: config 0 descriptor?? [ 192.599196][ T944] smsc75xx v1.0.0 [ 192.631884][ T5969] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 192.902847][ T5969] usb 1-1: Using ep0 maxpacket: 8 [ 192.923948][ T5969] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 192.934119][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.942975][ T5969] usb 1-1: Product: syz [ 192.947312][ T5969] usb 1-1: Manufacturer: syz [ 192.952419][ T5969] usb 1-1: SerialNumber: syz [ 193.299144][ T5969] usb 1-1: config 0 descriptor?? [ 193.322813][ T30] audit: type=1400 audit(1758032904.616:685): avc: denied { watch } for pid=7667 comm="syz.4.434" path="/90/file0" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.411932][ T30] audit: type=1400 audit(1758032904.616:686): avc: denied { watch_sb } for pid=7667 comm="syz.4.434" path="/90/file0" dev="tmpfs" ino=478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 193.582735][ T5969] usb 1-1: USB disconnect, device number 24 [ 193.689327][ T5856] usb 3-1: USB disconnect, device number 18 [ 193.863358][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.869656][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.876862][ T944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 193.890953][ T944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 193.901809][ T944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 193.915024][ T944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 193.927365][ T944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 193.941225][ T944] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 193.950966][ T944] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 194.009619][ T30] audit: type=1400 audit(1758032905.526:687): avc: denied { accept } for pid=7675 comm="syz.4.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 194.015048][ T944] usb 4-1: USB disconnect, device number 11 [ 194.528776][ T7694] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.705209][ T5910] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 194.846181][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 194.855191][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 195.299260][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 195.299808][ T6313] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.317021][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 195.326087][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 195.337189][ T5910] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.345345][ T5910] usb 1-1: config 0 has no interface number 0 [ 195.351692][ T6313] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.365253][ T6313] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.434435][ T5910] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.451636][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.460803][ T5910] usb 1-1: Product: syz [ 195.465312][ T5910] usb 1-1: Manufacturer: syz [ 195.469946][ T5910] usb 1-1: SerialNumber: syz [ 195.548862][ T7707] bridge_slave_0: left allmulticast mode [ 195.555157][ T7707] bridge_slave_0: left promiscuous mode [ 195.666297][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.672464][ T5910] usb 1-1: config 0 descriptor?? [ 195.752228][ T5910] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 195.777813][ T7707] bridge_slave_1: left allmulticast mode [ 195.783575][ T7707] bridge_slave_1: left promiscuous mode [ 195.789543][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.878807][ T7707] bond0: (slave bond_slave_0): Releasing backup interface [ 195.909342][ T5910] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.973670][ T5910] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 195.997785][ T7707] team0: Port device team_slave_0 removed [ 196.031486][ T944] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 196.681073][ T7707] team0: Port device team_slave_1 removed [ 196.740672][ T6313] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.794929][ T7704] team0: Mode changed to "loadbalance" [ 196.831446][ T944] usb 5-1: Using ep0 maxpacket: 32 [ 196.896265][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 196.896614][ T5856] usb 1-1: USB disconnect, device number 25 [ 196.915140][ T944] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 196.927606][ T944] usb 5-1: config 0 has no interface number 0 [ 196.962075][ T5856] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 196.986022][ T944] usb 5-1: config 0 interface 89 has no altsetting 0 [ 197.045027][ T5856] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 197.056975][ T5856] quatech2 1-1:0.51: device disconnected [ 197.059209][ T944] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 197.146954][ T944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.190458][ T944] usb 5-1: Product: syz [ 197.205400][ T944] usb 5-1: Manufacturer: syz [ 197.225598][ T944] usb 5-1: SerialNumber: syz [ 197.259327][ T944] usb 5-1: config 0 descriptor?? [ 197.267307][ T944] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 197.280773][ T944] em28xx 5-1:0.89: Video interface 89 found: bulk [ 197.280842][ T30] audit: type=1326 audit(1758032908.766:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 197.328824][ T7729] pim6reg: entered allmulticast mode [ 197.356120][ T30] audit: type=1326 audit(1758032908.766:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 197.380093][ T30] audit: type=1326 audit(1758032908.766:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 197.421865][ T7732] pim6reg: left allmulticast mode [ 197.459358][ T30] audit: type=1326 audit(1758032908.766:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 197.524017][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 197.674853][ T30] audit: type=1326 audit(1758032908.766:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85aef90ac7 code=0x7ffc0000 [ 197.717523][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 197.765150][ T30] audit: type=1326 audit(1758032908.766:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f85aef90a3c code=0x7ffc0000 [ 197.789007][ T30] audit: type=1326 audit(1758032908.766:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f85aef90974 code=0x7ffc0000 [ 197.874030][ T30] audit: type=1326 audit(1758032908.766:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f85aef90974 code=0x7ffc0000 [ 197.974323][ T944] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 197.994342][ T30] audit: type=1326 audit(1758032908.766:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85aef8d80a code=0x7ffc0000 [ 198.133853][ T7744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.454'. [ 198.231414][ T30] audit: type=1326 audit(1758032908.766:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7724 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 198.464217][ T944] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 199.566564][ T944] em28xx 5-1:0.89: board has no eeprom [ 199.630929][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 199.851536][ T7754] tipc: Enabled bearer , priority 0 [ 200.418668][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 200.440203][ T7753] tipc: Disabling bearer [ 200.584532][ T7763] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input30 [ 200.673356][ T944] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 200.752307][ T944] em28xx 5-1:0.89: analog set to bulk mode. [ 200.868197][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 200.893184][ T944] em28xx 5-1:0.89: Registering V4L2 extension [ 201.314035][ T24] usb 5-1: USB disconnect, device number 16 [ 201.367408][ T24] em28xx 5-1:0.89: Disconnecting em28xx [ 201.918470][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.465'. [ 202.642263][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 202.642278][ T30] audit: type=1400 audit(1758032914.166:721): avc: denied { mounton } for pid=7778 comm="syz.4.464" path="/94/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 202.670541][ T944] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 202.682490][ T944] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 202.691473][ T944] em28xx 5-1:0.89: No AC97 audio processor [ 202.700811][ T944] usb 5-1: Decoder not found [ 202.706255][ T944] em28xx 5-1:0.89: failed to create media graph [ 202.734736][ T30] audit: type=1400 audit(1758032914.166:722): avc: denied { mount } for pid=7778 comm="syz.4.464" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 202.758614][ T944] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 202.819829][ T944] em28xx 5-1:0.89: Registering snapshot button... [ 202.839827][ T944] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input32 [ 202.875770][ T944] em28xx 5-1:0.89: Remote control support is not available for this card. [ 202.898290][ T7779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 202.898783][ T30] audit: type=1400 audit(1758032914.416:723): avc: denied { unlink } for pid=7778 comm="syz.4.464" name="#1" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.944146][ T24] em28xx 5-1:0.89: Closing input extension [ 202.965283][ T24] em28xx 5-1:0.89: Deregistering snapshot button [ 204.038041][ T24] em28xx 5-1:0.89: Freeing device [ 204.575849][ T30] audit: type=1400 audit(1758032916.076:724): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 204.660473][ T30] audit: type=1400 audit(1758032916.126:725): avc: denied { write } for pid=7799 comm="syz.1.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 204.687220][ T30] audit: type=1400 audit(1758032916.206:726): avc: denied { write } for pid=7814 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 204.808735][ T30] audit: type=1400 audit(1758032916.286:727): avc: denied { read } for pid=5206 comm="acpid" name="event8" dev="devtmpfs" ino=3043 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 205.136207][ T30] audit: type=1400 audit(1758032916.286:728): avc: denied { open } for pid=5206 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3043 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 205.175583][ T30] audit: type=1400 audit(1758032916.286:729): avc: denied { ioctl } for pid=5206 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3043 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 205.710134][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.473'. [ 205.719448][ T7831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.927254][ T7845] netlink: 268 bytes leftover after parsing attributes in process `syz.3.481'. [ 206.559244][ T7857] FAULT_INJECTION: forcing a failure. [ 206.559244][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 206.574008][ T30] audit: type=1400 audit(1758032918.076:730): avc: denied { shutdown } for pid=7852 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.581535][ T7857] CPU: 1 UID: 0 PID: 7857 Comm: syz.1.485 Not tainted syzkaller #0 PREEMPT(full) [ 206.581556][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.581565][ T7857] Call Trace: [ 206.581571][ T7857] [ 206.581578][ T7857] dump_stack_lvl+0x16c/0x1f0 [ 206.581603][ T7857] should_fail_ex+0x512/0x640 [ 206.581626][ T7857] should_failslab+0xc2/0x120 [ 206.581645][ T7857] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 206.581662][ T7857] ? skb_clone+0x190/0x3f0 [ 206.581685][ T7857] skb_clone+0x190/0x3f0 [ 206.581704][ T7857] netlink_deliver_tap+0xabd/0xd30 [ 206.581729][ T7857] netlink_unicast+0x71f/0x870 [ 206.581753][ T7857] ? __pfx_netlink_unicast+0x10/0x10 [ 206.581776][ T7857] ? __pfx_nf_tables_abort+0x10/0x10 [ 206.581799][ T7857] netlink_ack+0x696/0xb80 [ 206.581827][ T7857] nfnetlink_rcv_batch+0x1423/0x2330 [ 206.581853][ T7857] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 206.581883][ T7857] ? avc_has_perm_noaudit+0x149/0x3b0 [ 206.581923][ T7857] ? __nla_parse+0x40/0x60 [ 206.581948][ T7857] nfnetlink_rcv+0x3c1/0x430 [ 206.581963][ T7857] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 206.581984][ T7857] netlink_unicast+0x5a7/0x870 [ 206.582007][ T7857] ? __pfx_netlink_unicast+0x10/0x10 [ 206.582027][ T7857] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 206.582053][ T7857] netlink_sendmsg+0x8d1/0xdd0 [ 206.582077][ T7857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.582106][ T7857] ____sys_sendmsg+0xa95/0xc70 [ 206.582129][ T7857] ? copy_msghdr_from_user+0x10a/0x160 [ 206.582148][ T7857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.582181][ T7857] ___sys_sendmsg+0x134/0x1d0 [ 206.582201][ T7857] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.582247][ T7857] __sys_sendmsg+0x16d/0x220 [ 206.582266][ T7857] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.582299][ T7857] do_syscall_64+0xcd/0x4e0 [ 206.582321][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.582337][ T7857] RIP: 0033:0x7f85aef8eba9 [ 206.582350][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.582364][ T7857] RSP: 002b:00007f85afd37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.582380][ T7857] RAX: ffffffffffffffda RBX: 00007f85af1d5fa0 RCX: 00007f85aef8eba9 [ 206.582390][ T7857] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 206.582399][ T7857] RBP: 00007f85afd37090 R08: 0000000000000000 R09: 0000000000000000 [ 206.582408][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.582417][ T7857] R13: 00007f85af1d6038 R14: 00007f85af1d5fa0 R15: 00007ffe0a0cdc48 [ 206.582438][ T7857] [ 207.322932][ T5957] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 207.396878][ T7878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 207.504593][ T5957] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 207.513370][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.524986][ T5957] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 207.564721][ T5957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 207.681427][ T5957] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 207.759284][ T5957] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 207.768791][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 207.777208][ T5957] usb 3-1: Product: syz [ 207.792633][ T5957] usb 3-1: Manufacturer: syz [ 208.196939][ T7868] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.205395][ T5957] cdc_wdm 3-1:1.0: skipping garbage [ 208.214716][ T5957] cdc_wdm 3-1:1.0: skipping garbage [ 208.240191][ T5957] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 208.255959][ T5957] cdc_wdm 3-1:1.0: Unknown control protocol [ 208.381258][ T5910] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 208.534697][ T30] audit: type=1400 audit(1758032919.976:731): avc: denied { execute } for pid=7885 comm="syz.3.492" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 208.563528][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 208.584640][ T5910] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 208.593836][ T5910] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.603730][ T5910] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.627915][ T5910] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.660023][ T5910] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.689271][ C1] wdm_int_callback: 3 callbacks suppressed [ 208.689287][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.701648][ C1] wdm_int_callback: 3 callbacks suppressed [ 208.701660][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.715326][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.721932][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.728175][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.734754][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.740998][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.747567][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.754421][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.761057][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.768059][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.774639][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.781399][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.787983][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.794272][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.800849][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.807068][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.813639][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.819852][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 208.826433][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 208.859082][ T5910] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.870277][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.942188][ T944] usb 3-1: USB disconnect, device number 19 [ 208.948104][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 209.090703][ T5910] usb 5-1: GET_CAPABILITIES returned 0 [ 209.096576][ T5910] usbtmc 5-1:16.0: can't read capabilities [ 209.228397][ T7904] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 209.240694][ T7905] netlink: 165 bytes leftover after parsing attributes in process `syz.0.496'. [ 209.318113][ T7904] bond1: entered promiscuous mode [ 209.327912][ T7904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.450147][ T7907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.470879][ T7907] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 209.488031][ T7907] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 209.512363][ T30] audit: type=1400 audit(1758032921.026:732): avc: denied { setopt } for pid=7911 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.541263][ T7907] bond1: (slave vcan1): making interface the new active one [ 209.550525][ T7907] vcan1: entered promiscuous mode [ 209.559132][ T7907] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 209.582107][ T30] audit: type=1400 audit(1758032921.106:733): avc: denied { ioctl } for pid=7911 comm="syz.3.499" path="socket:[15363]" dev="sockfs" ino=15363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.610198][ T30] audit: type=1400 audit(1758032921.106:734): avc: denied { bind } for pid=7911 comm="syz.3.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.687631][ T7914] netlink: 'syz.1.500': attribute type 4 has an invalid length. [ 210.906465][ T944] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 211.177290][ T7926] vlan2: entered promiscuous mode [ 211.211509][ T7926] vlan2: entered allmulticast mode [ 211.216661][ T7926] hsr_slave_1: entered allmulticast mode [ 211.281259][ T944] usb 3-1: Using ep0 maxpacket: 32 [ 211.290049][ T5957] usb 5-1: USB disconnect, device number 17 [ 211.300151][ T944] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 211.341648][ T944] usb 3-1: config 0 has no interface number 0 [ 211.347780][ T944] usb 3-1: config 0 interface 184 has no altsetting 0 [ 211.390539][ T944] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 211.402150][ T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.410561][ T944] usb 3-1: Product: syz [ 211.419107][ T944] usb 3-1: Manufacturer: syz [ 211.424815][ T944] usb 3-1: SerialNumber: syz [ 211.435337][ T944] usb 3-1: config 0 descriptor?? [ 211.471462][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.472940][ T944] smsc75xx v1.0.0 [ 211.621247][ T5856] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 211.639412][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 211.639440][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 211.639462][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 211.639483][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 211.642875][ T9] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 211.703004][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.703058][ T9] usb 2-1: Product: syz [ 211.703186][ T9] usb 2-1: Manufacturer: syz [ 211.703201][ T9] usb 2-1: SerialNumber: syz [ 211.706134][ T9] usb 2-1: config 0 descriptor?? [ 211.735555][ T9] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 211.793042][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 211.799160][ T5856] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 211.799188][ T5856] usb 4-1: config 0 has no interface number 0 [ 211.799221][ T5856] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.799246][ T5856] usb 4-1: config 0 interface 85 has no altsetting 0 [ 211.806145][ T5856] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 211.806173][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.806187][ T5856] usb 4-1: Product: syz [ 211.806210][ T5856] usb 4-1: Manufacturer: syz [ 211.806219][ T5856] usb 4-1: SerialNumber: syz [ 211.819451][ T5856] usb 4-1: config 0 descriptor?? [ 211.874736][ T5910] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 212.021310][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 212.032848][ T5910] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 212.040981][ T5910] usb 1-1: config 0 has no interface number 0 [ 212.061419][ T5910] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 40936, setting to 1024 [ 212.190841][ T5910] usb 1-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 212.202632][ T5910] usb 1-1: config 0 interface 89 has no altsetting 0 [ 212.209484][ T30] audit: type=1400 audit(1758032923.726:735): avc: denied { getopt } for pid=7931 comm="syz.3.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.277390][ T5910] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 212.287342][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.295537][ T5910] usb 1-1: Product: syz [ 212.299833][ T5910] usb 1-1: Manufacturer: syz [ 212.304750][ T5910] usb 1-1: SerialNumber: syz [ 212.312735][ T5910] usb 1-1: config 0 descriptor?? [ 212.318509][ T7939] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 212.329334][ T5910] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 212.349646][ T5910] em28xx 1-1:0.89: Video interface 89 found: bulk [ 212.391258][ T944] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 212.427378][ T944] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 212.470273][ T944] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 212.515804][ T9] scsi host1: usb-storage 2-1:0.0 [ 212.651877][ T944] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 212.662957][ T944] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 212.673770][ T944] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 212.685470][ T944] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 212.879701][ T30] audit: type=1400 audit(1758032924.376:736): avc: denied { shutdown } for pid=7938 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 213.277963][ T9] usb 2-1: USB disconnect, device number 13 [ 213.298586][ T944] usb 3-1: USB disconnect, device number 20 [ 213.431673][ T5910] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 213.449929][ T7952] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 213.456607][ T7952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 213.531120][ T7952] vhci_hcd vhci_hcd.0: Device attached [ 213.569358][ T5910] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 213.604376][ T7953] vhci_hcd: connection closed [ 213.606776][ T5910] em28xx 1-1:0.89: board has no eeprom [ 213.625417][ T1164] vhci_hcd: stop threads [ 213.662513][ T1164] vhci_hcd: release socket [ 213.683864][ T1164] vhci_hcd: disconnect device [ 213.701346][ T5957] vhci_hcd: vhci_device speed not set [ 213.814536][ T5910] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 213.822648][ T5910] em28xx 1-1:0.89: analog set to bulk mode. [ 213.828638][ T944] em28xx 1-1:0.89: Registering V4L2 extension [ 214.392525][ T944] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 214.417097][ T944] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 214.560865][ T7970] pim6reg: entered allmulticast mode [ 214.573483][ T7970] pim6reg: left allmulticast mode [ 214.592324][ T30] audit: type=1326 audit(1758032925.996:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 214.687324][ T24] usb 1-1: USB disconnect, device number 26 [ 214.719113][ T944] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 214.730443][ T24] em28xx 1-1:0.89: Disconnecting em28xx [ 214.739376][ T944] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 214.760961][ T5856] appletouch 4-1:0.85: Failed to read mode from device. [ 214.764747][ T944] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 214.801266][ T30] audit: type=1326 audit(1758032925.996:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 214.836341][ T5856] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 214.844803][ T944] em28xx 1-1:0.89: No AC97 audio processor [ 214.851928][ T944] usb 1-1: Decoder not found [ 214.867142][ T944] em28xx 1-1:0.89: failed to create media graph [ 214.875699][ T944] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 214.882499][ T30] audit: type=1326 audit(1758032926.006:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 214.907298][ T944] em28xx 1-1:0.89: Registering snapshot button... [ 214.943111][ T944] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input35 [ 214.984507][ T5856] usb 4-1: USB disconnect, device number 12 [ 215.490650][ T30] audit: type=1326 audit(1758032926.006:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 215.519293][ T30] audit: type=1326 audit(1758032926.006:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa08f8eba9 code=0x7ffc0000 [ 215.556849][ T30] audit: type=1326 audit(1758032926.006:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa08f90ac7 code=0x7ffc0000 [ 215.703990][ T944] em28xx 1-1:0.89: Remote control support is not available for this card. [ 215.762534][ T30] audit: type=1326 audit(1758032926.006:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ffa08f90a3c code=0x7ffc0000 [ 215.808717][ T30] audit: type=1326 audit(1758032926.006:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ffa08f90974 code=0x7ffc0000 [ 215.832238][ T5856] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 215.844360][ T24] em28xx 1-1:0.89: Closing input extension [ 215.858611][ T7991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 215.869797][ T7991] netlink: 'syz.0.521': attribute type 5 has an invalid length. [ 215.879769][ T24] em28xx 1-1:0.89: Deregistering snapshot button [ 215.986551][ T30] audit: type=1326 audit(1758032926.006:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ffa08f90974 code=0x7ffc0000 [ 216.010425][ T30] audit: type=1326 audit(1758032926.006:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffa08f8d80a code=0x7ffc0000 [ 216.033461][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.079639][ T7996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.520'. [ 216.151511][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 216.439642][ T24] em28xx 1-1:0.89: Freeing device [ 216.453643][ T6317] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.487523][ T5856] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 216.508662][ T6317] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.525086][ T5856] usb 4-1: config 0 has no interface number 0 [ 216.540759][ T5856] usb 4-1: config 0 interface 184 has no altsetting 0 [ 216.548806][ T6317] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.565685][ T5856] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 216.576408][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.590810][ T5856] usb 4-1: Product: syz [ 216.596471][ T5856] usb 4-1: Manufacturer: syz [ 216.601129][ T6317] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.611062][ T5856] usb 4-1: SerialNumber: syz [ 216.617922][ T5856] usb 4-1: config 0 descriptor?? [ 216.630325][ T7999] tipc: Enabled bearer , priority 0 [ 216.641404][ T5856] smsc75xx v1.0.0 [ 216.658568][ T7997] tipc: Disabling bearer [ 216.699341][ T8001] FAULT_INJECTION: forcing a failure. [ 216.699341][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.727523][ T8001] CPU: 0 UID: 0 PID: 8001 Comm: syz.0.523 Not tainted syzkaller #0 PREEMPT(full) [ 216.727551][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.727562][ T8001] Call Trace: [ 216.727569][ T8001] [ 216.727579][ T8001] dump_stack_lvl+0x16c/0x1f0 [ 216.727608][ T8001] should_fail_ex+0x512/0x640 [ 216.727635][ T8001] _copy_to_user+0x32/0xd0 [ 216.727668][ T8001] simple_read_from_buffer+0xcb/0x170 [ 216.727690][ T8001] proc_fail_nth_read+0x197/0x240 [ 216.727712][ T8001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.727735][ T8001] ? rw_verify_area+0xcf/0x6c0 [ 216.727761][ T8001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.727782][ T8001] vfs_read+0x1e4/0xcf0 [ 216.727803][ T8001] ? __pfx___mutex_lock+0x10/0x10 [ 216.727827][ T8001] ? __pfx_vfs_read+0x10/0x10 [ 216.727852][ T8001] ? __fget_files+0x20e/0x3c0 [ 216.727880][ T8001] ksys_read+0x12a/0x250 [ 216.727898][ T8001] ? __pfx_ksys_read+0x10/0x10 [ 216.727924][ T8001] do_syscall_64+0xcd/0x4e0 [ 216.727948][ T8001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.727966][ T8001] RIP: 0033:0x7fcd2498d5bc [ 216.727981][ T8001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 216.727998][ T8001] RSP: 002b:00007fcd25832030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.728016][ T8001] RAX: ffffffffffffffda RBX: 00007fcd24bd5fa0 RCX: 00007fcd2498d5bc [ 216.728028][ T8001] RDX: 000000000000000f RSI: 00007fcd258320a0 RDI: 0000000000000004 [ 216.728039][ T8001] RBP: 00007fcd25832090 R08: 0000000000000000 R09: 0000000000000000 [ 216.728049][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.728060][ T8001] R13: 00007fcd24bd6038 R14: 00007fcd24bd5fa0 R15: 00007ffcc447f528 [ 216.728085][ T8001] [ 217.775564][ T5856] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 218.269557][ T5856] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 218.358413][ T5856] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 218.413605][ T5856] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 218.692481][ T5856] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 218.783961][ T5856] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 218.833638][ T5856] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 218.891394][ T5856] usb 4-1: USB disconnect, device number 13 [ 219.251254][ T5957] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 219.367069][ T8057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.536'. [ 219.754407][ T8058] usb usb8: usbfs: process 8058 (syz.2.535) did not claim interface 0 before use [ 219.866007][ T5957] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 219.906067][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.060551][ T5957] usb 5-1: Product: syz [ 220.070207][ T5957] usb 5-1: Manufacturer: syz [ 220.083943][ T5957] usb 5-1: SerialNumber: syz [ 220.344870][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.538'. [ 221.351314][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 221.383156][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 221.811707][ T5957] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 221.825185][ T5957] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 221.876303][ T5957] usb 5-1: USB disconnect, device number 18 [ 222.831271][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 222.901457][ T5957] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 223.417275][ T5957] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.432449][ T5957] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.444556][ T5957] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.455658][ T5957] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 223.473065][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 223.492211][ T5957] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 223.494738][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.507554][ T5957] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.574195][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.597117][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.597229][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.642161][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 223.658734][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 223.659242][ T5957] usb 1-1: Product: syz [ 223.687840][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.687895][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.777802][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.787212][ T5957] usb 1-1: Manufacturer: syz [ 223.812736][ T24] usb 2-1: Product: syz [ 223.812988][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.822126][ T24] usb 2-1: Manufacturer: syz [ 223.956035][ T8085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 223.971524][ T8087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 223.972835][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 223.984481][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 223.990220][ T5957] cdc_wdm 1-1:1.0: skipping garbage [ 223.990852][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 223.996345][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 224.022709][ T5957] cdc_wdm 1-1:1.0: skipping garbage [ 224.030699][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 224.042447][ T5957] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 224.048344][ T5957] cdc_wdm 1-1:1.0: Unknown control protocol [ 224.054831][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 224.061365][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 224.129077][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 224.143708][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 224.184280][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 224.224780][ T9] usb 3-1: Product: syz [ 224.228994][ T9] usb 3-1: Manufacturer: syz [ 224.254153][ T8089] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 224.272618][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 224.297285][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 224.310467][ T9] cdc_wdm 3-1:1.0: cdc-wdm2: USB WDM device [ 224.334989][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 224.418402][ C1] wdm_int_callback: 551 callbacks suppressed [ 224.418417][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.431061][ C1] wdm_int_callback: 551 callbacks suppressed [ 224.431085][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.444056][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.450676][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.457523][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.464134][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.470519][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.477130][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.483447][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.490042][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.496539][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.503132][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.509410][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.516004][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.522420][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.529018][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.535396][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.541989][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.549318][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 224.550830][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.555933][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 224.626270][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.726549][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.774123][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.849239][ T5910] usb 3-1: USB disconnect, device number 21 [ 224.870115][ T9] usb 2-1: USB disconnect, device number 14 [ 224.870173][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 225.047854][ T5957] usb 1-1: USB disconnect, device number 27 [ 225.505888][ T8124] netlink: 'syz.3.555': attribute type 1 has an invalid length. [ 225.514774][ T8124] netlink: 'syz.3.555': attribute type 2 has an invalid length. [ 226.014722][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 226.014740][ T30] audit: type=1400 audit(1758032937.536:785): avc: denied { create } for pid=8126 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.117321][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'. [ 226.134383][ T30] audit: type=1400 audit(1758032937.576:786): avc: denied { setopt } for pid=8126 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 226.897945][ T30] audit: type=1400 audit(1758032938.416:787): avc: denied { bind } for pid=8150 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.919781][ T30] audit: type=1400 audit(1758032938.426:788): avc: denied { listen } for pid=8150 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 227.044731][ T8154] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=327683 (655366 ns) > initial count (7684 ns). Using initial count to start timer. [ 227.121321][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 227.142891][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 227.283806][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 227.323409][ T5910] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 227.377519][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 227.435877][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.489339][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'. [ 227.498820][ T24] usb 3-1: config 0 has no interface number 0 [ 227.509088][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 227.534230][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 227.584092][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 227.621527][ T5910] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 227.658572][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.685872][ T5910] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 227.716504][ T24] usb 3-1: Product: syz [ 227.728803][ T24] usb 3-1: Manufacturer: syz [ 227.733652][ T24] usb 3-1: SerialNumber: syz [ 227.739782][ T5910] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 227.751262][ T30] audit: type=1400 audit(1758032939.256:789): avc: denied { bind } for pid=8160 comm="syz.4.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.771784][ T24] usb 3-1: config 0 descriptor?? [ 227.780615][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 227.791448][ T5910] usb 4-1: Product: syz [ 227.796800][ T24] smsc75xx v1.0.0 [ 227.800963][ T5910] usb 4-1: Manufacturer: syz [ 227.809160][ T8153] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 227.822376][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 227.828813][ T5910] cdc_wdm 4-1:1.0: skipping garbage [ 227.836440][ T5910] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 227.855716][ T5910] cdc_wdm 4-1:1.0: Unknown control protocol [ 228.033505][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 228.573474][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 228.589818][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.605189][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 228.630502][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 228.665300][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 228.692799][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 228.713754][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 228.734668][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.849769][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.889342][ T24] usb 3-1: USB disconnect, device number 22 [ 228.967698][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.580'. [ 228.976975][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 229.091563][ T24] usb 4-1: USB disconnect, device number 14 [ 229.351358][ T944] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.620285][ T8208] No source specified [ 229.658026][ T944] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 229.668499][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.676625][ T944] usb 2-1: Product: syz [ 229.680835][ T944] usb 2-1: Manufacturer: syz [ 229.686331][ T944] usb 2-1: SerialNumber: syz [ 229.858000][ T8216] overlay: ./file0 is not a directory [ 229.891309][ T5957] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 230.135399][ T8222] FAULT_INJECTION: forcing a failure. [ 230.135399][ T8222] name failslab, interval 1, probability 0, space 0, times 0 [ 230.149237][ T8222] CPU: 1 UID: 0 PID: 8222 Comm: syz.3.586 Not tainted syzkaller #0 PREEMPT(full) [ 230.149263][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 230.149273][ T8222] Call Trace: [ 230.149280][ T8222] [ 230.149287][ T8222] dump_stack_lvl+0x16c/0x1f0 [ 230.149315][ T8222] should_fail_ex+0x512/0x640 [ 230.149337][ T8222] ? __kmalloc_noprof+0xbf/0x510 [ 230.149357][ T8222] ? io_alloc_file_tables+0x4c/0xb0 [ 230.149382][ T8222] should_failslab+0xc2/0x120 [ 230.149402][ T8222] __kmalloc_noprof+0xd2/0x510 [ 230.149427][ T8222] io_alloc_file_tables+0x4c/0xb0 [ 230.149451][ T8222] ? __lock_acquire+0xb97/0x1ce0 [ 230.149486][ T8222] io_sqe_files_register+0x186/0x960 [ 230.149511][ T8222] ? get_pid_task+0xd0/0x250 [ 230.149530][ T8222] ? __pfx_io_sqe_files_register+0x10/0x10 [ 230.149555][ T8222] ? __mutex_trylock_common+0xe9/0x250 [ 230.149583][ T8222] ? __pfx___mutex_trylock_common+0x10/0x10 [ 230.149614][ T8222] __io_uring_register+0x130a/0x2440 [ 230.149637][ T8222] ? trace_contention_end+0xdd/0x130 [ 230.149655][ T8222] ? __pfx___io_uring_register+0x10/0x10 [ 230.149684][ T8222] ? __pfx___mutex_lock+0x10/0x10 [ 230.149714][ T8222] ? __fget_files+0x20e/0x3c0 [ 230.149742][ T8222] __x64_sys_io_uring_register+0x169/0x280 [ 230.149768][ T8222] do_syscall_64+0xcd/0x4e0 [ 230.149793][ T8222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.149811][ T8222] RIP: 0033:0x7f448a78eba9 [ 230.149826][ T8222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.149842][ T8222] RSP: 002b:00007f44889d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 230.149861][ T8222] RAX: ffffffffffffffda RBX: 00007f448a9d6180 RCX: 00007f448a78eba9 [ 230.149872][ T8222] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000006 [ 230.149883][ T8222] RBP: 00007f44889d5090 R08: 0000000000000000 R09: 0000000000000000 [ 230.149893][ T8222] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 230.149903][ T8222] R13: 00007f448a9d6218 R14: 00007f448a9d6180 R15: 00007ffcb5cec918 [ 230.149928][ T8222] [ 230.381216][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 230.388094][ T5957] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 230.641286][ T5957] usb 5-1: config 0 has no interface number 0 [ 230.715926][ T5957] usb 5-1: config 0 interface 89 has no altsetting 0 [ 230.986217][ T8233] usb usb8: usbfs: process 8233 (syz.0.588) did not claim interface 0 before use [ 231.119106][ T5965] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 231.600491][ T5957] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 231.613041][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.621131][ T5957] usb 5-1: Product: syz [ 231.646125][ T5957] usb 5-1: Manufacturer: syz [ 231.657085][ T5957] usb 5-1: SerialNumber: syz [ 231.675895][ T944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 231.677904][ T5957] usb 5-1: config 0 descriptor?? [ 231.700885][ T5965] usb 3-1: config 0 has no interfaces? [ 231.710682][ T5965] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 231.710752][ T944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 231.719875][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.719901][ T5965] usb 3-1: Product: syz [ 231.719915][ T5965] usb 3-1: Manufacturer: syz [ 231.719929][ T5965] usb 3-1: SerialNumber: syz [ 231.753196][ T5965] usb 3-1: config 0 descriptor?? [ 231.833683][ T5957] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 231.843369][ T5957] em28xx 5-1:0.89: Video interface 89 found: bulk [ 232.009779][ T944] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 232.024907][ T944] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 232.041618][ T944] usb 2-1: USB disconnect, device number 15 [ 232.105092][ T8241] netlink: 165 bytes leftover after parsing attributes in process `syz.3.590'. [ 232.448647][ T5957] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 232.685104][ T5965] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 232.842206][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 232.851638][ T5965] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 232.860571][ T5965] usb 2-1: config 0 has no interface number 0 [ 232.867345][ T5965] usb 2-1: config 0 interface 184 has no altsetting 0 [ 232.874206][ T5957] em28xx 5-1:0.89: AC97 command still being executed: not handled properly! [ 232.886559][ T5965] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 232.896835][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.908356][ T5965] usb 2-1: Product: syz [ 232.912771][ T5965] usb 2-1: Manufacturer: syz [ 232.920927][ T5965] usb 2-1: SerialNumber: syz [ 232.939342][ T5965] usb 2-1: config 0 descriptor?? [ 232.953782][ T5965] smsc75xx v1.0.0 [ 233.062176][ T5957] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 233.070665][ T5957] em28xx 5-1:0.89: board has no eeprom [ 233.235372][ T944] usb 3-1: USB disconnect, device number 23 [ 233.351284][ T5957] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 233.359518][ T5957] em28xx 5-1:0.89: analog set to bulk mode. [ 233.368316][ T9] em28xx 5-1:0.89: Registering V4L2 extension [ 233.591294][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 233.746982][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.761845][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 233.776865][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 233.793766][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 233.805070][ T5965] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 233.842394][ T5965] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 233.888632][ T5965] usb 2-1: USB disconnect, device number 16 [ 233.938751][ T9] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 233.949447][ T5910] usb 5-1: USB disconnect, device number 19 [ 233.956553][ T5910] em28xx 5-1:0.89: Disconnecting em28xx [ 233.974154][ T9] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 233.988139][ T9] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 234.231816][ T9] em28xx 5-1:0.89: No AC97 audio processor [ 234.246002][ T9] usb 5-1: Decoder not found [ 234.271092][ T9] em28xx 5-1:0.89: failed to create media graph [ 234.319193][ T9] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 234.326021][ T5957] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 234.394914][ T9] em28xx 5-1:0.89: Registering snapshot button... [ 234.461895][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input38 [ 234.552228][ T9] em28xx 5-1:0.89: Remote control support is not available for this card. [ 234.640678][ T5957] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 234.684765][ T5910] em28xx 5-1:0.89: Closing input extension [ 234.690560][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.707434][ T5910] em28xx 5-1:0.89: Deregistering snapshot button [ 234.835494][ T5957] usb 3-1: config 0 descriptor?? [ 234.978514][ T5910] em28xx 5-1:0.89: Freeing device [ 235.406575][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 235.436322][ T8272] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 235.443852][ T5957] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 235.467905][ T8272] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 235.528858][ T5857] Bluetooth: hci3: Malformed LE Event: 0x02 [ 235.614688][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 235.623861][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.633172][ T9] usb 1-1: Product: syz [ 235.715537][ T9] usb 1-1: Manufacturer: syz [ 235.738204][ T9] usb 1-1: SerialNumber: syz [ 235.781247][ T5965] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 236.283909][ T30] audit: type=1326 audit(1758032947.766:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 236.309219][ T5965] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 236.318119][ T5965] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 236.332364][ T5965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 236.342123][ T5965] usb 4-1: config 1 has no interface number 0 [ 236.348287][ T5965] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 236.359694][ T5965] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 236.379131][ T8286] pim6reg: entered allmulticast mode [ 236.394419][ T8286] pim6reg: left allmulticast mode [ 236.453025][ T5965] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 236.461367][ T30] audit: type=1326 audit(1758032947.766:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 236.499636][ T30] audit: type=1326 audit(1758032947.766:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 236.619973][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.630177][ T30] audit: type=1326 audit(1758032947.766:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 236.661063][ T5965] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 236.801247][ T30] audit: type=1326 audit(1758032947.766:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85aef90ac7 code=0x7ffc0000 [ 236.831778][ T30] audit: type=1326 audit(1758032947.766:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f85aef90a3c code=0x7ffc0000 [ 236.845992][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 236.884117][ T30] audit: type=1326 audit(1758032947.766:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f85aef90974 code=0x7ffc0000 [ 236.909880][ T30] audit: type=1326 audit(1758032947.766:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f85aef90974 code=0x7ffc0000 [ 236.910850][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 236.953745][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 236.970824][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 237.033658][ T9] usb 1-1: USB disconnect, device number 28 [ 237.040744][ T30] audit: type=1326 audit(1758032947.766:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85aef8d80a code=0x7ffc0000 [ 237.082281][ T30] audit: type=1326 audit(1758032947.776:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8283 comm="syz.1.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 237.275710][ T5965] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 237.518180][ T5910] usb 4-1: USB disconnect, device number 15 [ 237.525295][ T5910] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 237.571259][ T944] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 237.650006][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'. [ 237.659118][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 237.721335][ T944] usb 2-1: Using ep0 maxpacket: 32 [ 237.731090][ T944] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 237.740929][ T5957] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 237.750285][ T944] usb 2-1: config 0 has no interface number 0 [ 237.756561][ T5957] asix 3-1:0.0: probe with driver asix failed with error -71 [ 237.772586][ T944] usb 2-1: config 0 interface 184 has no altsetting 0 [ 237.779918][ T5957] usb 3-1: USB disconnect, device number 24 [ 237.782997][ T944] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 237.797044][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.805292][ T944] usb 2-1: Product: syz [ 237.809455][ T944] usb 2-1: Manufacturer: syz [ 237.815955][ T944] usb 2-1: SerialNumber: syz [ 237.829583][ T944] usb 2-1: config 0 descriptor?? [ 237.850436][ T944] smsc75xx v1.0.0 [ 238.106102][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 238.254398][ T8333] pim6reg: entered allmulticast mode [ 238.324720][ T8333] pim6reg: left allmulticast mode [ 239.116692][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 239.133583][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 239.176737][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 239.357786][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 239.397463][ T8347] binder: 8346:8347 ioctl c0306201 200000000080 returned -14 [ 239.436850][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 239.457083][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 239.477317][ T944] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 239.557045][ T944] usb 2-1: USB disconnect, device number 17 [ 239.603399][ T8347] binder: BINDER_SET_CONTEXT_MGR already set [ 239.610598][ T8347] binder: 8346:8347 ioctl 4018620d 200000000040 returned -16 [ 240.937080][ T8364] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 241.335032][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 241.335044][ T30] audit: type=1400 audit(1758032952.856:871): avc: denied { append } for pid=8373 comm="syz.4.633" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 241.577808][ T8383] program syz.4.633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.702145][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 242.034038][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 242.499431][ T30] audit: type=1400 audit(1758032953.996:872): avc: denied { append } for pid=8388 comm="syz.0.635" name="nbd0" dev="devtmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.607584][ T30] audit: type=1400 audit(1758032954.006:873): avc: denied { getopt } for pid=8388 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 242.855339][ T8404] netlink: 'syz.0.640': attribute type 4 has an invalid length. [ 242.931291][ T944] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 243.121428][ T944] usb 2-1: Using ep0 maxpacket: 32 [ 243.148749][ T8421] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 243.168229][ T8420] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 243.453628][ T944] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 243.462729][ T944] usb 2-1: config 0 has no interface number 0 [ 243.484612][ T944] usb 2-1: config 0 interface 184 has no altsetting 0 [ 243.503512][ T944] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.524527][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.541646][ T944] usb 2-1: Product: syz [ 243.545832][ T944] usb 2-1: Manufacturer: syz [ 243.550425][ T944] usb 2-1: SerialNumber: syz [ 243.650684][ T30] audit: type=1400 audit(1758032955.166:874): avc: denied { name_bind } for pid=8432 comm="syz.3.647" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 243.652130][ T944] usb 2-1: config 0 descriptor?? [ 243.814087][ T944] smsc75xx v1.0.0 [ 243.981369][ T30] audit: type=1400 audit(1758032955.426:875): avc: denied { connect } for pid=8429 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 244.223955][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.650'. [ 244.267745][ T30] audit: type=1400 audit(1758032955.776:876): avc: denied { map } for pid=8399 comm="syz.2.639" path="/proc/372/net/fib_trie" dev="proc" ino=4026533098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 244.298893][ T8446] Invalid source name [ 244.562723][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 244.595156][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 244.707825][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 244.722246][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 244.757966][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 245.190814][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 245.217999][ T944] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 245.251362][ T5965] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 245.304204][ T944] usb 2-1: USB disconnect, device number 18 [ 246.042668][ T5965] usb 5-1: config 0 has no interfaces? [ 246.067064][ T8467] ceph: No mds server is up or the cluster is laggy [ 246.075441][ T24] libceph: connect (1)[c::]:6789 error -101 [ 246.087750][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 246.098367][ T5965] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.131048][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.164880][ T5965] usb 5-1: Product: syz [ 246.169088][ T5965] usb 5-1: Manufacturer: syz [ 246.194559][ T5965] usb 5-1: SerialNumber: syz [ 246.222714][ T5965] usb 5-1: config 0 descriptor?? [ 246.350706][ T8478] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.656'. [ 246.551298][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 246.571238][ T5965] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 246.721252][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 246.729498][ T24] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 246.742156][ T5965] usb 4-1: Using ep0 maxpacket: 8 [ 246.742846][ T24] usb 1-1: config 0 has no interface number 0 [ 246.754398][ T24] usb 1-1: config 0 interface 89 has no altsetting 0 [ 246.764986][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.765336][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 246.776188][ T5965] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 246.804395][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.813419][ T24] usb 1-1: Product: syz [ 246.813747][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.817759][ T24] usb 1-1: Manufacturer: syz [ 246.831575][ T24] usb 1-1: SerialNumber: syz [ 246.839403][ T5965] usb 4-1: config 0 descriptor?? [ 246.846145][ T24] usb 1-1: config 0 descriptor?? [ 246.865022][ T24] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 246.877132][ T24] em28xx 1-1:0.89: Video interface 89 found: bulk [ 247.264597][ T5965] hid_parser_main: 73 callbacks suppressed [ 247.264611][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.312612][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.372209][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.380774][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.396424][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.411227][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.428145][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.435846][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.443734][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.456500][ T5965] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 247.501433][ T5910] usb 5-1: USB disconnect, device number 20 [ 247.647997][ T24] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 248.058888][ T5965] megaworld 0003:07B5:0312.0003: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 248.070419][ T5965] megaworld 0003:07B5:0312.0003: no inputs found [ 248.103537][ T5965] usb 4-1: USB disconnect, device number 16 [ 248.197686][ T8503] fido_id[8503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 248.526895][ T8512] F2FS-fs: Conflicting test_dummy_encryption options [ 248.587460][ T8516] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 248.596890][ T8517] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 248.637345][ T8510] pim6reg: entered allmulticast mode [ 248.643646][ T30] audit: type=1326 audit(1758032960.136:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 248.673096][ T8510] pim6reg: left allmulticast mode [ 248.769104][ T30] audit: type=1326 audit(1758032960.136:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 248.792390][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.841293][ T24] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 248.858018][ T24] em28xx 1-1:0.89: board has no eeprom [ 248.940663][ T30] audit: type=1326 audit(1758032960.136:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 248.993359][ T30] audit: type=1326 audit(1758032960.136:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 249.021203][ T24] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 249.051930][ T8524] netlink: 188 bytes leftover after parsing attributes in process `syz.3.670'. [ 249.075456][ T24] em28xx 1-1:0.89: analog set to bulk mode. [ 249.234865][ T5910] em28xx 1-1:0.89: Registering V4L2 extension [ 249.342703][ T24] usb 1-1: USB disconnect, device number 29 [ 249.408214][ T30] audit: type=1326 audit(1758032960.136:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85aef8eba9 code=0x7ffc0000 [ 249.477151][ T24] em28xx 1-1:0.89: Disconnecting em28xx [ 249.577408][ T30] audit: type=1326 audit(1758032960.136:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85aef90ac7 code=0x7ffc0000 [ 249.775629][ T8538] usb usb8: usbfs: process 8538 (syz.3.672) did not claim interface 0 before use [ 249.806121][ T30] audit: type=1326 audit(1758032960.136:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f85aef90a3c code=0x7ffc0000 [ 249.838792][ T5910] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 250.095968][ T5910] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 250.208730][ T5910] em28xx 1-1:0.89: No AC97 audio processor [ 250.253940][ T30] audit: type=1326 audit(1758032960.136:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f85aef90974 code=0x7ffc0000 [ 250.330872][ T30] audit: type=1326 audit(1758032960.136:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f85aef90974 code=0x7ffc0000 [ 250.354513][ T5957] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 250.384919][ T5910] usb 1-1: Decoder not found [ 250.389704][ T5910] em28xx 1-1:0.89: failed to create media graph [ 250.396451][ T5910] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 250.450905][ T5910] em28xx 1-1:0.89: Registering snapshot button... [ 250.465063][ T30] audit: type=1326 audit(1758032960.136:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8505 comm="syz.1.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85aef8d80a code=0x7ffc0000 [ 250.555629][ T5910] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input41 [ 250.571318][ T5957] usb 3-1: Using ep0 maxpacket: 32 [ 250.586801][ T5957] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 250.607972][ T5957] usb 3-1: config 0 has no interface number 0 [ 250.625938][ T5957] usb 3-1: config 0 interface 89 has no altsetting 0 [ 250.626056][ T5910] em28xx 1-1:0.89: Remote control support is not available for this card. [ 250.691263][ T24] em28xx 1-1:0.89: Closing input extension [ 250.699275][ T24] em28xx 1-1:0.89: Deregistering snapshot button [ 250.702177][ T5957] usb 3-1: New USB device found, idVendor=56cd, idProduct=10af, bcdDevice=38.4e [ 250.719450][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.817817][ T24] em28xx 1-1:0.89: Freeing device [ 250.921442][ T944] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 251.264237][ T5957] usb 3-1: Product: syz [ 251.268436][ T5957] usb 3-1: Manufacturer: syz [ 251.273729][ T5957] usb 3-1: SerialNumber: syz [ 251.284052][ T5957] usb 3-1: config 0 descriptor?? [ 251.431232][ T944] usb 5-1: device descriptor read/64, error -71 [ 251.684974][ T944] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 251.847065][ T944] usb 5-1: device descriptor read/64, error -71 [ 252.011800][ T944] usb usb5-port1: attempt power cycle [ 252.398890][ T8577] Invalid source name [ 252.421251][ T944] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.441698][ T944] usb 5-1: device descriptor read/8, error -71 [ 252.615804][ T8580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32794 sclass=netlink_route_socket pid=8580 comm=syz.1.683 [ 252.690445][ T944] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 252.754364][ T944] usb 5-1: device descriptor read/8, error -71 [ 253.270558][ T944] usb usb5-port1: unable to enumerate USB device [ 253.293698][ T944] usb 3-1: USB disconnect, device number 25 [ 254.745967][ T8600] netlink: 'syz.0.689': attribute type 4 has an invalid length. [ 255.155535][ T8601] netlink: 'syz.2.688': attribute type 2 has an invalid length. [ 255.164179][ T8601] netlink: 'syz.2.688': attribute type 11 has an invalid length. [ 255.281359][ T8601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.688'. [ 255.295605][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.302260][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.405301][ T8605] tipc: Started in network mode [ 255.410201][ T8605] tipc: Node identity 62f1b6efd122, cluster identity 4711 [ 255.432066][ T8605] tipc: Enabled bearer , priority 0 [ 255.512148][ T8604] tipc: Disabling bearer [ 257.486031][ T8636] vlan2: entered promiscuous mode [ 257.497866][ T8636] vlan2: entered allmulticast mode [ 257.536900][ T8636] hsr_slave_1: entered allmulticast mode [ 258.327970][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.703'. [ 258.338315][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 258.660619][ T8648] SELinux: failed to load policy [ 259.042283][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 259.042300][ T30] audit: type=1400 audit(1758032970.566:921): avc: denied { create } for pid=8658 comm="syz.1.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 259.314735][ T8668] binder: 8666:8668 ioctl c0306201 200000000080 returned -14 [ 259.362899][ T30] audit: type=1400 audit(1758032970.886:922): avc: denied { write } for pid=8670 comm="syz.3.710" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 259.385692][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.582079][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 259.724894][ T8646] NILFS (loop4): device size too small [ 260.411355][ T944] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 260.561275][ T944] usb 2-1: Using ep0 maxpacket: 32 [ 260.568115][ T944] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 260.576801][ T944] usb 2-1: config 0 has no interface number 0 [ 260.638937][ T944] usb 2-1: config 0 interface 184 has no altsetting 0 [ 260.664598][ T944] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 260.682949][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 260.702621][ T944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.710697][ T944] usb 2-1: Product: syz [ 260.745228][ T944] usb 2-1: Manufacturer: syz [ 261.085899][ T944] usb 2-1: SerialNumber: syz [ 261.109307][ T944] usb 2-1: config 0 descriptor?? [ 261.129563][ T944] smsc75xx v1.0.0 [ 261.141225][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 261.152259][ T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 261.161258][ T24] usb 5-1: config 0 has no interface number 0 [ 261.167458][ T24] usb 5-1: config 0 interface 89 has no altsetting 0 [ 261.191477][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 261.209271][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.231519][ T24] usb 5-1: Product: syz [ 261.242028][ T24] usb 5-1: Manufacturer: syz [ 261.381221][ T24] usb 5-1: SerialNumber: syz [ 261.402249][ T24] usb 5-1: config 0 descriptor?? [ 261.440642][ T24] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 261.467026][ T24] em28xx 5-1:0.89: Video interface 89 found: bulk [ 261.791232][ T5964] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 261.811973][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 261.824989][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.943869][ T5964] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 261.954279][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.971123][ T5964] usb 1-1: config 0 descriptor?? [ 262.013124][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 262.027646][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 262.037760][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 262.048218][ T944] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 262.060886][ T944] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 262.167997][ T24] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 262.181567][ T944] usb 2-1: USB disconnect, device number 19 [ 262.202144][ T5964] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 263.008758][ T8726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.726'. [ 263.025605][ T8726] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000007ÿÿÿÿ' [ 263.281241][ T24] em28xx 5-1:0.89: write to i2c device at 0xa0 failed with unknown error (status=1) [ 263.291245][ T5957] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 263.292082][ T24] em28xx 5-1:0.89: failed to read eeprom (err=-5) [ 263.307879][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 263.315577][ T24] em28xx 5-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 263.408688][ T8731] bond0: (slave bond_slave_1): Releasing backup interface [ 263.562640][ T5957] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 263.571023][ T5957] usb 3-1: config 0 has no interface number 0 [ 263.577264][ T5957] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.589042][ T5957] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 263.600240][ T5957] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 263.998920][ T5957] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 264.016423][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.031695][ T5957] usb 3-1: config 0 descriptor?? [ 264.067881][ T5957] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input44 [ 264.373609][ T30] audit: type=1400 audit(1758032975.886:923): avc: denied { append } for pid=8723 comm="syz.2.726" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 264.406445][ T24] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 264.434446][ T24] em28xx 5-1:0.89: analog set to bulk mode. [ 264.449937][ T944] em28xx 5-1:0.89: Registering V4L2 extension [ 264.481592][ T5964] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 264.523470][ T5910] usb 5-1: USB disconnect, device number 25 [ 264.531055][ T5910] em28xx 5-1:0.89: Disconnecting em28xx [ 264.549315][ T5964] asix 1-1:0.0: probe with driver asix failed with error -71 [ 264.610242][ T944] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 264.618070][ T944] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 264.628997][ T944] em28xx 5-1:0.89: No AC97 audio processor [ 264.675838][ T5964] usb 1-1: USB disconnect, device number 30 [ 264.725125][ T944] usb 5-1: Decoder not found [ 264.730121][ T944] em28xx 5-1:0.89: failed to create media graph [ 264.737684][ T944] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 264.747396][ T944] em28xx 5-1:0.89: Registering snapshot button... [ 264.754512][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 264.768879][ T944] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input45 [ 264.786999][ T944] em28xx 5-1:0.89: Remote control support is not available for this card. [ 264.796965][ T5910] em28xx 5-1:0.89: Closing input extension [ 264.805191][ T5910] em28xx 5-1:0.89: Deregistering snapshot button [ 265.028402][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.037218][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.049533][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.049579][ T30] audit: type=1326 audit(1758032976.506:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d78eba9 code=0x7ffc0000 [ 265.065032][ T8752] pim6reg: entered allmulticast mode [ 265.090235][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 265.125416][ T8752] pim6reg: left allmulticast mode [ 265.217178][ T5910] em28xx 5-1:0.89: Freeing device [ 265.226791][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 265.297993][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.323970][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.340305][ T24] usb 2-1: Product: syz [ 265.348350][ T24] usb 2-1: Manufacturer: syz [ 265.355440][ T30] audit: type=1326 audit(1758032976.506:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d78eba9 code=0x7ffc0000 [ 265.383964][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.733'. [ 265.440358][ T8741] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 265.447622][ T30] audit: type=1326 audit(1758032976.506:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f344d78eba9 code=0x7ffc0000 [ 265.450163][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 265.470887][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.672560][ T30] audit: type=1326 audit(1758032976.506:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d78eba9 code=0x7ffc0000 [ 265.696536][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 265.711273][ T30] audit: type=1326 audit(1758032976.506:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d78eba9 code=0x7ffc0000 [ 265.734519][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.755519][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 265.761724][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 265.782321][ T5964] usb 3-1: USB disconnect, device number 26 [ 265.849717][ T8766] netlink: 'syz.3.734': attribute type 2 has an invalid length. [ 265.858010][ T8766] netlink: 'syz.3.734': attribute type 11 has an invalid length. [ 265.865942][ T8766] netlink: 132 bytes leftover after parsing attributes in process `syz.3.734'. [ 266.077940][ T30] audit: type=1326 audit(1758032976.506:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f344d78d510 code=0x7ffc0000 [ 266.101167][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.204153][ T30] audit: type=1326 audit(1758032976.506:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d78eba9 code=0x7ffc0000 [ 266.366828][ T8779] netlink: 'syz.3.735': attribute type 9 has an invalid length. [ 266.374672][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.735'. [ 266.541251][ T30] audit: type=1326 audit(1758032976.506:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f344d78eba9 code=0x7ffc0000 [ 266.571363][ T30] audit: type=1326 audit(1758032976.506:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8746 comm="syz.4.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f344d78eba9 code=0x7ffc0000 [ 267.391782][ T8782] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 267.398405][ T8782] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 267.481624][ T8783] vhci_hcd: connection closed [ 267.486363][ T5964] usb 2-1: USB disconnect, device number 20 [ 267.504104][ T8782] vhci_hcd vhci_hcd.0: Device attached [ 267.518197][ T1164] vhci_hcd: stop threads [ 267.524807][ T1164] vhci_hcd: release socket [ 267.530806][ T1164] vhci_hcd: disconnect device [ 268.537261][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 268.902225][ T8823] netlink: 48 bytes leftover after parsing attributes in process `syz.3.745'. [ 269.112702][ T8821] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 269.593035][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 269.766614][ T8823] syz.3.745 (8823) used greatest stack depth: 19208 bytes left [ 270.227072][ T8848] netlink: 220 bytes leftover after parsing attributes in process `syz.1.750'. [ 271.251321][ T5965] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 271.450446][ T8875] netlink: 268 bytes leftover after parsing attributes in process `syz.2.757'. [ 271.564558][ T5965] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.586399][ T5965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.606746][ T5965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.632481][ T5965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 271.654226][ T5965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 271.677270][ T5965] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.754027][ T5910] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 271.764193][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 271.781304][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.809419][ T5965] usb 4-1: Product: syz [ 271.814025][ T5965] usb 4-1: Manufacturer: syz [ 272.269060][ T8853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 272.279168][ T5965] cdc_wdm 4-1:1.0: skipping garbage [ 272.291365][ T5965] cdc_wdm 4-1:1.0: skipping garbage [ 272.292212][ T5910] usb 2-1: device descriptor read/64, error -32 [ 272.301585][ T5965] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 272.313465][ T5965] cdc_wdm 4-1:1.0: Unknown control protocol [ 272.739483][ T5910] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 272.994503][ T24] usb 4-1: USB disconnect, device number 17 [ 273.146974][ T8881] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 273.202562][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 273.265825][ T5910] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 273.278633][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 273.361289][ T5910] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.371049][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.432493][ T5910] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.480525][ T5910] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.533432][ T5910] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.543348][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.570831][ T8905] tmpfs: Bad value for 'mpol' [ 274.301288][ T5910] usb 2-1: can't set config #16, error -71 [ 274.320611][ T5910] usb 2-1: USB disconnect, device number 22 [ 274.386797][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 274.386812][ T30] audit: type=1400 audit(1758032985.906:957): avc: denied { append } for pid=8914 comm="syz.4.768" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.000915][ T8925] netlink: 'syz.3.772': attribute type 11 has an invalid length. [ 275.041548][ T8925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.772'. [ 275.477449][ T30] audit: type=1326 audit(1758032986.986:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a78eba9 code=0x7ffc0000 [ 275.503330][ T8923] netlink: 'syz.1.771': attribute type 2 has an invalid length. [ 275.511213][ T8923] netlink: 'syz.1.771': attribute type 11 has an invalid length. [ 275.518917][ T8923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.771'. [ 275.599942][ T30] audit: type=1326 audit(1758032986.986:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f448a78eba9 code=0x7ffc0000 [ 275.658956][ T30] audit: type=1326 audit(1758032986.986:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a78eba9 code=0x7ffc0000 [ 275.735044][ T30] audit: type=1326 audit(1758032986.986:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a78eba9 code=0x7ffc0000 [ 275.749789][ T8941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.777'. [ 275.760069][ T30] audit: type=1326 audit(1758032986.986:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f448a78eba9 code=0x7ffc0000 [ 276.021347][ T5910] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 276.050348][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.777'. [ 276.210040][ T30] audit: type=1326 audit(1758032987.096:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a78eba9 code=0x7ffc0000 [ 276.233580][ T30] audit: type=1326 audit(1758032987.096:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8929 comm="syz.3.773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a78eba9 code=0x7ffc0000 [ 276.394267][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.777'. [ 276.457269][ T5910] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 276.466832][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.479387][ T5910] usb 3-1: config 0 descriptor?? [ 276.905050][ T30] audit: type=1400 audit(1758032988.426:965): avc: denied { bind } for pid=8953 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 277.198465][ T5910] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 277.325154][ T8968] Invalid source name [ 277.471206][ T5969] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 277.531337][ T5957] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 277.622549][ T5969] usb 2-1: not running at top speed; connect to a high speed hub [ 277.633956][ T5969] usb 2-1: config 1 has an invalid interface number: 25 but max is 0 [ 277.643321][ T5969] usb 2-1: config 1 has no interface number 0 [ 277.653917][ T5969] usb 2-1: config 1 interface 25 has no altsetting 0 [ 277.665172][ T5969] usb 2-1: New USB device found, idVendor=0856, idProduct=ac26, bcdDevice=ce.4d [ 277.674362][ T5969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.683362][ T5957] usb 1-1: device descriptor read/64, error -71 [ 277.683815][ T5969] usb 2-1: Product: syz [ 277.693970][ T5969] usb 2-1: Manufacturer: syz [ 277.698683][ T5969] usb 2-1: SerialNumber: syz [ 277.741276][ T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 277.895720][ T24] usb 5-1: config 0 has no interfaces? [ 277.918312][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 277.927801][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.936662][ T24] usb 5-1: Product: syz [ 277.940983][ T24] usb 5-1: Manufacturer: syz [ 277.945542][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.783'. [ 277.955651][ T24] usb 5-1: SerialNumber: syz [ 277.963848][ T5969] ftdi_sio 2-1:1.25: FTDI USB Serial Device converter detected [ 277.973839][ T24] usb 5-1: config 0 descriptor?? [ 277.981461][ T5957] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 277.982881][ T5969] ftdi_sio ttyUSB0: unknown device type: 0xce4d [ 278.053114][ T5969] usb 2-1: USB disconnect, device number 23 [ 278.060887][ T5969] ftdi_sio 2-1:1.25: device disconnected [ 278.083719][ T8980] debugfs: '!' already exists in 'ieee80211' [ 278.152031][ T30] audit: type=1326 audit(1758032989.596:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8977 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448a78eba9 code=0x7ffc0000 [ 278.231384][ T5957] usb 1-1: device descriptor read/64, error -71 [ 278.341578][ T5957] usb usb1-port1: attempt power cycle [ 278.881291][ T5957] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 279.112035][ T5957] usb 1-1: device descriptor read/8, error -71 [ 279.157498][ T8985] pim6reg: entered allmulticast mode [ 279.164279][ T8985] pim6reg: left allmulticast mode [ 279.336232][ T5910] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 279.346717][ T5910] asix 3-1:0.0: probe with driver asix failed with error -71 [ 279.359323][ T5910] usb 3-1: USB disconnect, device number 27 [ 279.381420][ T5957] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 279.403144][ T5957] usb 1-1: device descriptor read/8, error -71 [ 279.512636][ T5957] usb usb1-port1: unable to enumerate USB device [ 280.794874][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 280.794890][ T30] audit: type=1400 audit(1758032992.316:1020): avc: denied { ioctl } for pid=8993 comm="syz.1.792" path="socket:[17404]" dev="sockfs" ino=17404 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 280.825860][ T8998] : renamed from bridge_slave_0 (while UP) [ 280.891092][ T5969] usb 5-1: USB disconnect, device number 26 [ 282.554998][ T9030] usb usb8: usbfs: process 9030 (syz.2.801) did not claim interface 0 before use [ 283.706428][ T9045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.807'. [ 284.706889][ T30] audit: type=1400 audit(1758032996.226:1021): avc: denied { mount } for pid=9053 comm="syz.1.810" name="/" dev="hugetlbfs" ino=18493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 284.840970][ T9062] netlink: 48 bytes leftover after parsing attributes in process `syz.4.813'. [ 285.023200][ T30] audit: type=1400 audit(1758032996.226:1022): avc: denied { create } for pid=9053 comm="syz.1.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 285.224926][ T9071] overlayfs: failed to resolve './file1': -2 [ 285.323342][ T9075] netlink: 'syz.4.814': attribute type 3 has an invalid length. [ 285.501300][ T5964] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 285.677019][ T5964] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 285.697284][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.721294][ T5964] usb 4-1: Product: syz [ 285.725486][ T5964] usb 4-1: Manufacturer: syz [ 285.744386][ T5964] usb 4-1: SerialNumber: syz [ 285.991726][ T5957] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 286.813387][ T5957] usb 5-1: Using ep0 maxpacket: 8 [ 286.885298][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.896031][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 286.969001][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 287.020314][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 287.061529][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 287.684348][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.726175][ T5957] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 287.762184][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.896381][ T5957] usb 5-1: Product: syz [ 288.011538][ T5957] usb 5-1: Manufacturer: syz [ 288.023578][ T5957] usb 5-1: SerialNumber: syz [ 288.040115][ T5957] usb 5-1: config 0 descriptor?? [ 288.112200][ T9116] FAULT_INJECTION: forcing a failure. [ 288.112200][ T9116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.125751][ T9116] CPU: 1 UID: 0 PID: 9116 Comm: syz.2.830 Not tainted syzkaller #0 PREEMPT(full) [ 288.125775][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.125785][ T9116] Call Trace: [ 288.125791][ T9116] [ 288.125797][ T9116] dump_stack_lvl+0x16c/0x1f0 [ 288.125825][ T9116] should_fail_ex+0x512/0x640 [ 288.125851][ T9116] _copy_from_user+0x2e/0xd0 [ 288.125876][ T9116] copy_msghdr_from_user+0x98/0x160 [ 288.125898][ T9116] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 288.125930][ T9116] ___sys_sendmsg+0xfe/0x1d0 [ 288.125953][ T9116] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.126004][ T9116] __sys_sendmsg+0x16d/0x220 [ 288.126025][ T9116] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.126061][ T9116] do_syscall_64+0xcd/0x4e0 [ 288.126086][ T9116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.126104][ T9116] RIP: 0033:0x7ffa08f8eba9 [ 288.126118][ T9116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.126134][ T9116] RSP: 002b:00007ffa09d81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.126151][ T9116] RAX: ffffffffffffffda RBX: 00007ffa091d6180 RCX: 00007ffa08f8eba9 [ 288.126164][ T9116] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 288.126174][ T9116] RBP: 00007ffa09d81090 R08: 0000000000000000 R09: 0000000000000000 [ 288.126185][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.126194][ T9116] R13: 00007ffa091d6218 R14: 00007ffa091d6180 R15: 00007fffbe952838 [ 288.126217][ T9116] [ 288.560460][ T5957] usb 5-1: can't set config #0, error -71 [ 288.593485][ T9120] openvswitch: netlink: Message has 4 unknown bytes. [ 288.602487][ T30] audit: type=1400 audit(1758033000.099:1023): avc: denied { bind } for pid=9113 comm="syz.0.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.647374][ T5957] usb 5-1: USB disconnect, device number 27 [ 289.206725][ T9129] netlink: 208 bytes leftover after parsing attributes in process `syz.2.835'. [ 290.341229][ T5964] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 290.373818][ T9140] netlink: 'syz.4.837': attribute type 2 has an invalid length. [ 290.807963][ T9140] netlink: 'syz.4.837': attribute type 11 has an invalid length. [ 290.815794][ T9140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.837'. [ 290.881211][ T5969] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 291.144283][ T5964] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 291.164159][ T5964] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 291.489935][ T5969] usb 3-1: Using ep0 maxpacket: 32 [ 291.505557][ T5969] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 291.517124][ T5969] usb 3-1: config 0 has no interface number 0 [ 291.525584][ T5969] usb 3-1: config 0 interface 184 has no altsetting 0 [ 291.540148][ T5964] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 291.585281][ T5964] usb 4-1: USB disconnect, device number 18 [ 291.587377][ T5969] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 291.633576][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.645635][ T5969] usb 3-1: Product: syz [ 291.655051][ T5969] usb 3-1: Manufacturer: syz [ 291.659727][ T5969] usb 3-1: SerialNumber: syz [ 291.673327][ T5969] usb 3-1: config 0 descriptor?? [ 291.685802][ T5969] smsc75xx v1.0.0 [ 291.800382][ T9161] tipc: Enabling of bearer rejected, failed to enable media [ 292.102547][ T5964] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 292.145261][ T9174] netlink: 'syz.1.850': attribute type 4 has an invalid length. [ 292.230613][ T9175] block nbd3: Attempted send on invalid socket [ 292.237262][ T9175] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 292.264544][ T9175] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 292.285615][ T5964] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 292.296707][ T5964] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.308024][ T5964] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 292.393665][ T5969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 292.405316][ T5969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 292.463459][ T5964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 292.898530][ T5969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 292.913502][ T5969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 292.974205][ T5964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 292.981996][ T5969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 292.987592][ T5964] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 293.019726][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.853'. [ 293.028756][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 293.036933][ T5969] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 293.039552][ T5964] usb 1-1: Product: syz [ 293.055388][ T5969] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 293.066125][ T5964] usb 1-1: Manufacturer: syz [ 293.151593][ T9165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 293.167052][ T5969] usb 3-1: USB disconnect, device number 28 [ 293.206410][ T5964] cdc_wdm 1-1:1.0: skipping garbage [ 293.226981][ T5964] cdc_wdm 1-1:1.0: skipping garbage [ 293.265676][ T5964] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 293.291698][ T5964] cdc_wdm 1-1:1.0: Unknown control protocol [ 293.455931][ T9194] __vm_enough_memory: pid: 9194, comm: syz.4.856, bytes: 21200303190016 not enough memory for the allocation [ 293.624525][ C0] wdm_int_callback: 3161 callbacks suppressed [ 293.624541][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.637182][ C0] wdm_int_callback: 3161 callbacks suppressed [ 293.637195][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.649664][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.656240][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.662670][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.669255][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.675742][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.682325][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.688850][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.695426][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.701842][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.708406][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.714768][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.721351][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.727669][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.734246][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.740598][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.747171][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.753492][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 293.760073][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 293.972211][ T24] usb 1-1: USB disconnect, device number 35 [ 293.972303][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 294.321236][ T5969] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 294.480370][ T30] audit: type=1400 audit(1758033005.989:1024): avc: denied { create } for pid=9213 comm="syz.1.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 294.529795][ T9214] smc: removing ib device syz1 [ 294.944109][ T9214] ------------[ cut here ]------------ [ 294.949591][ T9214] WARNING: CPU: 0 PID: 9214 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 294.960310][ T9214] Modules linked in: [ 294.964486][ T9214] CPU: 0 UID: 0 PID: 9214 Comm: syz.1.859 Not tainted syzkaller #0 PREEMPT(full) [ 294.973785][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.983877][ T9214] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 294.989639][ T9214] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 f5 c3 fc f8 e8 f0 c3 fc f8 90 <0f> 0b 90 5b e9 e6 c3 fc f8 e8 51 23 63 f9 eb da 66 66 2e 0f 1f 84 [ 295.009305][ T9214] RSP: 0018:ffffc9001be371c8 EFLAGS: 00010246 [ 295.015388][ T9214] RAX: 0000000000080000 RBX: ffff8880343fd358 RCX: ffffc900051e9000 [ 295.023375][ T9214] RDX: 0000000000080000 RSI: ffffffff88bed950 RDI: ffff8880343fd3d8 [ 295.031342][ T9214] RBP: ffffffff88bd3df0 R08: 0000000000000005 R09: 0000000000000001 [ 295.039312][ T9214] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880343fc698 [ 295.047293][ T9214] R13: ffff8880343fbfe0 R14: ffff8880343fbfe0 R15: ffff8880343fd0b8 [ 295.055282][ T9214] FS: 00007f85afd376c0(0000) GS:ffff8881246b2000(0000) knlGS:0000000000000000 [ 295.064228][ T9214] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.070804][ T9214] CR2: 0000001b32212ff8 CR3: 0000000079efb000 CR4: 00000000003526f0 [ 295.078797][ T9214] Call Trace: [ 295.082108][ T9214] [ 295.085023][ T9214] rxe_dealloc+0x25/0xc0 [ 295.089247][ T9214] ib_dealloc_device+0x49/0x230 [ 295.094426][ T9214] __ib_unregister_device+0x396/0x480 [ 295.099806][ T9214] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 295.105818][ T9214] ib_unregister_device_and_put+0x5a/0x80 [ 295.111540][ T9214] nldev_dellink+0x21f/0x320 [ 295.116110][ T9214] ? __pfx_nldev_dellink+0x10/0x10 [ 295.121263][ T9214] ? cap_capable+0xb3/0x250 [ 295.125754][ T9214] ? bpf_lsm_capable+0x9/0x10 [ 295.130414][ T9214] ? security_capable+0x7e/0x260 [ 295.135403][ T9214] ? ns_capable+0xd7/0x110 [ 295.139803][ T9214] ? __pfx_nldev_dellink+0x10/0x10 [ 295.144934][ T9214] rdma_nl_rcv_msg+0x387/0x6e0 [ 295.149766][ T9214] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 295.155057][ T9214] ? __lock_acquire+0x62e/0x1ce0 [ 295.159984][ T9214] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 295.166428][ T9214] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 295.173407][ T9214] ? netlink_deliver_tap+0x1ae/0xd30 [ 295.178695][ T9214] ? selinux_netlink_send+0x578/0x830 [ 295.184104][ T9214] ? is_vmalloc_addr+0x86/0xa0 [ 295.188859][ T9214] netlink_unicast+0x5a7/0x870 [ 295.194040][ T9214] ? __pfx_netlink_unicast+0x10/0x10 [ 295.199345][ T9214] netlink_sendmsg+0x8d1/0xdd0 [ 295.204191][ T9214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.209931][ T9214] ____sys_sendmsg+0xa95/0xc70 [ 295.214712][ T9214] ? copy_msghdr_from_user+0x10a/0x160 [ 295.220159][ T9214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.225573][ T9214] ? __pfx_futex_wake_mark+0x10/0x10 [ 295.230879][ T9214] ___sys_sendmsg+0x134/0x1d0 [ 295.235589][ T9214] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.240788][ T9214] __sys_sendmsg+0x16d/0x220 [ 295.245426][ T9214] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.250553][ T9214] ? __x64_sys_futex+0x1e0/0x4c0 [ 295.255701][ T9214] do_syscall_64+0xcd/0x4e0 [ 295.260206][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.266145][ T9214] RIP: 0033:0x7f85aef8eba9 [ 295.270562][ T9214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.290332][ T9214] RSP: 002b:00007f85afd37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.299052][ T9214] RAX: ffffffffffffffda RBX: 00007f85af1d5fa0 RCX: 00007f85aef8eba9 [ 295.307053][ T9214] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 295.315120][ T9214] RBP: 00007f85af011e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.323183][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.331212][ T9214] R13: 00007f85af1d6038 R14: 00007f85af1d5fa0 R15: 00007ffe0a0cdc48 [ 295.339176][ T9214] [ 295.342194][ T9214] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.349445][ T9214] CPU: 0 UID: 0 PID: 9214 Comm: syz.1.859 Not tainted syzkaller #0 PREEMPT(full) [ 295.358620][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.368667][ T9214] Call Trace: [ 295.371940][ T9214] [ 295.374849][ T9214] dump_stack_lvl+0x3d/0x1f0 [ 295.379424][ T9214] vpanic+0x6e8/0x7a0 [ 295.383387][ T9214] ? __pfx_vpanic+0x10/0x10 [ 295.387871][ T9214] ? rxe_pool_cleanup+0x41/0x60 [ 295.392699][ T9214] panic+0xca/0xd0 [ 295.396406][ T9214] ? __pfx_panic+0x10/0x10 [ 295.400819][ T9214] check_panic_on_warn+0xab/0xb0 [ 295.405756][ T9214] __warn+0xf6/0x3c0 [ 295.409652][ T9214] ? rxe_pool_cleanup+0x41/0x60 [ 295.414491][ T9214] report_bug+0x3c3/0x580 [ 295.418798][ T9214] ? rxe_pool_cleanup+0x41/0x60 [ 295.423643][ T9214] handle_bug+0x184/0x210 [ 295.428145][ T9214] exc_invalid_op+0x17/0x50 [ 295.432626][ T9214] asm_exc_invalid_op+0x1a/0x20 [ 295.437540][ T9214] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 295.442981][ T9214] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 f5 c3 fc f8 e8 f0 c3 fc f8 90 <0f> 0b 90 5b e9 e6 c3 fc f8 e8 51 23 63 f9 eb da 66 66 2e 0f 1f 84 [ 295.462577][ T9214] RSP: 0018:ffffc9001be371c8 EFLAGS: 00010246 [ 295.468651][ T9214] RAX: 0000000000080000 RBX: ffff8880343fd358 RCX: ffffc900051e9000 [ 295.476607][ T9214] RDX: 0000000000080000 RSI: ffffffff88bed950 RDI: ffff8880343fd3d8 [ 295.484557][ T9214] RBP: ffffffff88bd3df0 R08: 0000000000000005 R09: 0000000000000001 [ 295.492522][ T9214] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880343fc698 [ 295.500480][ T9214] R13: ffff8880343fbfe0 R14: ffff8880343fbfe0 R15: ffff8880343fd0b8 [ 295.508586][ T9214] ? __pfx_rxe_dealloc+0x10/0x10 [ 295.513509][ T9214] ? rxe_pool_cleanup+0x40/0x60 [ 295.518340][ T9214] ? rxe_pool_cleanup+0x40/0x60 [ 295.523176][ T9214] rxe_dealloc+0x25/0xc0 [ 295.527405][ T9214] ib_dealloc_device+0x49/0x230 [ 295.532247][ T9214] __ib_unregister_device+0x396/0x480 [ 295.537601][ T9214] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 295.543475][ T9214] ib_unregister_device_and_put+0x5a/0x80 [ 295.549212][ T9214] nldev_dellink+0x21f/0x320 [ 295.553801][ T9214] ? __pfx_nldev_dellink+0x10/0x10 [ 295.558950][ T9214] ? cap_capable+0xb3/0x250 [ 295.563451][ T9214] ? bpf_lsm_capable+0x9/0x10 [ 295.568120][ T9214] ? security_capable+0x7e/0x260 [ 295.573042][ T9214] ? ns_capable+0xd7/0x110 [ 295.577433][ T9214] ? __pfx_nldev_dellink+0x10/0x10 [ 295.582523][ T9214] rdma_nl_rcv_msg+0x387/0x6e0 [ 295.587278][ T9214] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 295.592542][ T9214] ? __lock_acquire+0x62e/0x1ce0 [ 295.597468][ T9214] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 295.603861][ T9214] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 295.610787][ T9214] ? netlink_deliver_tap+0x1ae/0xd30 [ 295.616081][ T9214] ? selinux_netlink_send+0x578/0x830 [ 295.621454][ T9214] ? is_vmalloc_addr+0x86/0xa0 [ 295.626208][ T9214] netlink_unicast+0x5a7/0x870 [ 295.630963][ T9214] ? __pfx_netlink_unicast+0x10/0x10 [ 295.636230][ T9214] netlink_sendmsg+0x8d1/0xdd0 [ 295.640988][ T9214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.646253][ T9214] ____sys_sendmsg+0xa95/0xc70 [ 295.651010][ T9214] ? copy_msghdr_from_user+0x10a/0x160 [ 295.656445][ T9214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.661727][ T9214] ? __pfx_futex_wake_mark+0x10/0x10 [ 295.666986][ T9214] ___sys_sendmsg+0x134/0x1d0 [ 295.671639][ T9214] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.676831][ T9214] __sys_sendmsg+0x16d/0x220 [ 295.681412][ T9214] ? __pfx___sys_sendmsg+0x10/0x10 [ 295.686520][ T9214] ? __x64_sys_futex+0x1e0/0x4c0 [ 295.691440][ T9214] do_syscall_64+0xcd/0x4e0 [ 295.695926][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.701818][ T9214] RIP: 0033:0x7f85aef8eba9 [ 295.706209][ T9214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.725793][ T9214] RSP: 002b:00007f85afd37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.734180][ T9214] RAX: ffffffffffffffda RBX: 00007f85af1d5fa0 RCX: 00007f85aef8eba9 [ 295.742181][ T9214] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 295.750134][ T9214] RBP: 00007f85af011e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.758088][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.766052][ T9214] R13: 00007f85af1d6038 R14: 00007f85af1d5fa0 R15: 00007ffe0a0cdc48 [ 295.774102][ T9214] [ 295.777349][ T9214] Kernel Offset: disabled [ 295.781657][ T9214] Rebooting in 86400 seconds..