last executing test programs: 6.599938564s ago: executing program 3 (id=1956): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000b00), 0x2800, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "33e275106ce797ba", "afc000", "1f991d9c", "d570f648c0ec6f65"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x200000000000000) syz_emit_ethernet(0xd4, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x9e, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x89}, @ra={0x5, 0x2, 0xe}, @jumbo={0xc2, 0x4, 0x55}, @pad1]}], "2fe5c8990c551292d24971d1ffd0835f7bf81b63855f8bdebf75fcd533bfc29d23a7f955043d8b772127915647b88a753f97d37fd008d17d73cc12f0a89f4163ae275a02a99c7c6cffb5e90cdaf9"}}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000300)={0x4, 0x5, 0xffffffff, 0x101, 0x5}, 0x14) sendmsg$nl_route(r7, 0x0, 0x4000000) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000100)={0x18, r1, 0x0, 0x0, &(0x7f0000000400)}) 6.152947488s ago: executing program 0 (id=1958): connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, r3, 0xddc4c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 5.898712853s ago: executing program 3 (id=1960): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 5.032002433s ago: executing program 0 (id=1965): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @local, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x7bcb, 0x54, 0x6}, 0x9c) 4.920169573s ago: executing program 0 (id=1969): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[], 0x8c}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) shmget(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x27e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0xfa, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x68e, 0x2, 0x1, {0x22, 0x96f}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x5c, 0xd4, 0x9}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x9, 0x8, 0x4, 0x87, 0x2}, 0x6b, &(0x7f00000000c0)={0x5, 0xf, 0x6b, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x3, 0xf000, 0x5, [0xf, 0x1fe0030, 0x3f00, 0xc03f]}, @ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0xdef, 0xf00f, 0x0, [0xff3f0f, 0xc0, 0xcf, 0xf]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xda, "ffd3cd3f95072252ce9e6636ab733cb3"}, @ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x4, 0xf00, 0x1ff, [0xff000f, 0x3f00]}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3835a8df7d67fb3c}}, {0xf9, &(0x7f0000000180)=@string={0xf9, 0x3, "11621cba0afdfd5a5f3dc69b682f3584bf0495166aeb601dc7b33cb0a0b24a5612589d8018c27f856fcb141f724da9636bdcbf47acdb7e7d67c58dd5ef3cb72b7e0e76669aa07086d78a6744bd90f62699e667fb319c1dbda3ea9a2d5eeeed385272e4e85d8155a2aa592a6f04f3a5ee4cb28e8c15d2835e589d5be841215519d9dacfbb20a50198c33e7003e3396a64b01ae8707ec8e67a7738188b1003fac97791f1da6da4186785e282b275f801ede9cc9161e739590e39d0175077699dcfbf92bbcb8525b3e73465f5d14f6b1b03b6dd8ab7f90f69bd0e12df24562071cc1b78da555ed35ec02188e6c38ec519cc586fb510af5349"}}, {0xe0, &(0x7f0000000280)=@string={0xe0, 0x3, "79ce99dd367c6d155736fc01764725d15ee746144ba10a739b99a2c420c411bc4420ad06e870275b4bd9f04cf484497271518f619262096a28c29c04979f5fa5eb359f0752911d6b03dbdce65966715353442f8bfe30ee7a29af4b4767c9a8c0609d2eeaf6c519cc0c116be132e0fb1a0331f5b68e91b8b9d438ffe1a050585db60b81a07737ccb6ddb5b39bd9732f1deadf70d877893156056f2edc3bdefc3cd0b8576046ee7a74c8bd36c6b0576e767703c2d5769f37b6cb03e8a0d606e03190d3cd0036d7d4f01a722a4bda82afd4365e33dc878e9434f6dbddff916a"}}]}) syz_usb_control_io$printer(r1, 0x0, 0x0) 4.273854751s ago: executing program 1 (id=1975): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x490083) dup(r0) statx(0xffffffffffffffff, 0xfffffffffffffffd, 0x1000, 0x20, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, r3, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e", 0x7a, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) 4.098583616s ago: executing program 4 (id=1977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x20004095}, 0x4000000) 4.014508791s ago: executing program 4 (id=1978): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) 3.331611262s ago: executing program 1 (id=1979): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) r4 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000180)=']@+\x00', 0x0) 2.368733013s ago: executing program 4 (id=1980): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000180)=']@+\x00', 0x0) 2.352216667s ago: executing program 2 (id=1981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x4f91c61b392305d0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0xfffffffffffff000}, 0x8800) 2.349813342s ago: executing program 3 (id=1982): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xecc, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe6c, 0x2, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}, @TCA_PEDIT_KEYS_EX={0x7, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xecc}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/233, 0xe9}], 0x2, 0x800, 0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xecc, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb8, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe6c, 0x2, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}, @TCA_PEDIT_KEYS_EX={0x7, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xecc}}, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') (async) preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/169, 0xa9}, {&(0x7f0000000180)=""/233, 0xe9}], 0x2, 0x800, 0xfffffffd) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff620af0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079101800000000006c440000000000007b0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae563f721c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) 2.214984053s ago: executing program 0 (id=1983): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) listen(0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x1) 2.15956134s ago: executing program 1 (id=1984): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000580)=0x8) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r9, 0x4008ae6a, &(0x7f0000000040)) r10 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000080)={r10, 0x4}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.137051836s ago: executing program 2 (id=1985): socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa6ec}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') pread64(r2, &(0x7f00000000c0)=""/105, 0x69, 0x96) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0x6]}, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400ea93ef2e84160d5f152abc0cc50f03aa0000", @ANYRES16=r5, @ANYBLOB="010028bd7040010001000f00000008000300", @ANYRES32=r6, @ANYBLOB="0800390001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40818) ppoll(&(0x7f00000005c0)=[{r3, 0x400}], 0x1, &(0x7f0000000600)={0x0, 0x3938700}, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x1}, 0x10) 2.006419778s ago: executing program 3 (id=1986): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6000000, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.236632592s ago: executing program 4 (id=1987): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x5b9bc3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0xa) 1.179871371s ago: executing program 2 (id=1988): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffff9c, 0x0, 0x210100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x20000000000028b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x8, 0x4}, 0x8) getpgrp(0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) 1.101404488s ago: executing program 3 (id=1989): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0100000004000000", @ANYRES32, @ANYBLOB="0000000100000000004be79bb3", @ANYBLOB]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x10080, 0x0) getpgrp(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000012}, 0x4000) 1.098434651s ago: executing program 1 (id=1990): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xffffffffffffffac}, 0x94) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) dup(0xffffffffffffffff) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket$netlink(0x10, 0x3, 0x9) io_setup(0x1, &(0x7f0000000200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r7, 0x0}]) 1.062970418s ago: executing program 0 (id=1991): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) 822.493659ms ago: executing program 3 (id=1992): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket(0x10, 0x2, 0x2) syz_emit_ethernet(0xfd6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x1, 0x3, [0x3e9, 0x6b0, 0x584, 0x7f9]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x54, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xf, 0x8f, 0x5}, {0xc, 0x90, 0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)=@mmap={0x800, 0x1, 0x4, 0x100, 0x81, {0x0, 0x2710}, {0x3, 0xc, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 290.346974ms ago: executing program 4 (id=1993): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') close_range(r0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff, 0x8000000}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x2}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r2, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x2090) 226.903344ms ago: executing program 2 (id=1994): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x0, 0x0, 0xfe9, 0x10000000}}, 0x120) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)}, {&(0x7f00000006c0)}], 0x2) 211.162419ms ago: executing program 1 (id=1995): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) listen(r0, 0xfffffffc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00', &(0x7f00000001c0)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40000000008, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000147000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0xffffffff, &(0x7f0000000380)=""/237) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x11d, 0x1b, 0x0, 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, 0x0) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYRES8=r6, @ANYRES16=r2, @ANYRESOCT, @ANYRES32=r7, @ANYBLOB="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"], 0x28}, 0x1, 0xff07}, 0x2000000) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES16=0x0, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000300000000000000000000008500000097000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb707000008000000b7030000feffffff850000000600000095000000000000009861d1b1686ff7415d1a2c97e05901b338e46342d13da596475454002c1276ec326ae1"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000002c0)='btrfs\x00', 0x200000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 132.891505ms ago: executing program 0 (id=1996): socket(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000005c0), 0x80980, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400)) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000003}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010404000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ad9e218cc6ca0af0bd8322"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x8f}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x2, 0x2, 0x14}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00xk', @ANYRES16=r10, @ANYBLOB="170928bd7000000000000100ffff0500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) read$FUSE(r0, &(0x7f0000001500)={0x2020}, 0x2020) 132.486747ms ago: executing program 4 (id=1997): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000040)="0fdddc0f38f134a55f5e000066b82f008ec848b800300000000000000f23c80f21f835000040000f23f82e0f01cf66460fe1e5c7442400ff000000c744240208000000c7442406000000000f011424c403ed699ad0be0000000f984528400f35"}], 0x1, 0x0, 0x0, 0xffec) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) syz_open_procfs$userns(r3, &(0x7f0000000340)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r6, 0x89f0, &(0x7f00000000c0)={0x0, 0x770000, 0x8, 0x0, 0x19, "bb5dee0403081c012083d08600"}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r5, 0x5437, 0x200000000000000) setresuid(0x0, r4, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0xa00) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f0000000200)={0x0, 0x0, 0x0, @lost_msgs}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000280)=0x7, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r9, 0x5603, &(0x7f0000000040)={0xfff9, 0xdf}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="0012190000009c17bf66ac3008c25a4001000000000000805e1b679b8189d23530f9a5317cc2496be074c45fe2c8ffbb46b57d2c0b6d29f8b84d7ab39fe0b734b2e01bf2e0d71cdc22ce6b8237e5cca5b9bbdf7a81ff4cc6a2ec2b735bf9a73985db8f30f3a92ef9290b5dffbb98da1c16a592fbb70585a290d927550fab22ef7e921d7ff87525e1dd6e98478eba18f2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 99.803424ms ago: executing program 2 (id=1998): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = semget$private(0x0, 0x4000000009, 0x668) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00053c7c509fe51fed662b07ddb3655a49187c4ac837c8351df5ebbda3908bdd3d09516d611ed4cf812cf1bddf3d2560778eebcc17302f700148cc3d435f4abb645fbd3933ff3a073348fc2daecd352fe00f7b659c4c6e24e7b0ce67f2baaf2e69c826539ef4a460a4fe1130e12180c9584cd4802b7252b81c2bf9bccb000c093278d2d921a161c1d2e5cbe531a8014087bbcad38e76955f57e9e580b4014d50a7f3ddba2906764176e463", @ANYRES16=r2, @ANYBLOB="010700000000fcdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x24000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x2) finit_module(r3, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x70}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x68, &(0x7f0000000200)}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) semctl$IPC_RMID(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x7) 10.529604ms ago: executing program 1 (id=1999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) (async) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x40000000000001b2}}}}}}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000000)={r1, 0x0, 0x1}) 0s ago: executing program 2 (id=2000): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockname(r0, &(0x7f0000000240)=@l2, &(0x7f00000002c0)=0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000200)=0x382, 0x4) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x1, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x1ff, 0x3, 0x6, 0x4c, 0xb, 0xb, 0x7, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xac, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r7, &(0x7f00000000c0)=""/144, 0x90, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) kernel console output (not intermixed with test programs): __x64_sys_ioctl+0xb7/0x210 [ 498.958346][T11319] do_syscall_64+0x10b/0xf80 [ 498.958370][T11319] ? clear_bhb_loop+0x40/0x90 [ 498.958393][T11319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.958410][T11319] RIP: 0033:0x7f028159cdd9 [ 498.958425][T11319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.958442][T11319] RSP: 002b:00007f02824da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 498.958459][T11319] RAX: ffffffffffffffda RBX: 00007f0281815fa0 RCX: 00007f028159cdd9 [ 498.958470][T11319] RDX: 0000000000000000 RSI: 0000000000002202 RDI: 0000000000000003 [ 498.958480][T11319] RBP: 00007f02824da090 R08: 0000000000000000 R09: 0000000000000000 [ 498.958490][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.958500][T11319] R13: 00007f0281816038 R14: 00007f0281815fa0 R15: 00007ffe7b437788 [ 498.958525][T11319] [ 498.958696][T11319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.398569][ T30] audit: type=1326 audit(1778554221.974:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 499.449100][ T30] audit: type=1326 audit(1778554221.974:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 499.597631][ T30] audit: type=1326 audit(1778554221.974:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 499.629999][ T30] audit: type=1326 audit(1778554221.974:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 499.686002][ T30] audit: type=1326 audit(1778554221.974:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 499.713577][ T30] audit: type=1326 audit(1778554222.004:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 499.827679][ T30] audit: type=1326 audit(1778554222.004:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 499.863944][ T30] audit: type=1326 audit(1778554222.004:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 500.176434][ T30] audit: type=1326 audit(1778554222.004:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.4.1359" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7faa1079cdd9 code=0x7ffc0000 [ 500.280227][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1366'. [ 500.289295][T11346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1366'. [ 500.318270][T11346] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 500.462353][ T988] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 500.860774][ T30] audit: type=1400 audit(1778554223.164:590): avc: denied { mounton } for pid=11351 comm="syz.4.1368" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 500.927163][ T5810] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 500.996727][ T988] usb 2-1: config 2 has an invalid interface number: 79 but max is 0 [ 501.014997][ T988] usb 2-1: config 2 has no interface number 0 [ 501.032338][ T988] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 501.043947][ T988] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 501.054548][ T988] usb 2-1: config 2 interface 79 has no altsetting 0 [ 501.082773][ T988] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 501.092237][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.101360][ T988] usb 2-1: Product: syz [ 501.106220][ T988] usb 2-1: Manufacturer: syz [ 501.110886][ T988] usb 2-1: SerialNumber: syz [ 501.133731][T11350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 501.141178][T11350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 501.386485][ T988] esd_usb 2-1:2.79: sending version message failed [ 501.395709][ T988] esd_usb 2-1:2.79: probe with driver esd_usb failed with error -71 [ 501.415107][ T988] usb 2-1: USB disconnect, device number 50 [ 501.501668][ T5729] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 501.521668][ T5708] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 501.531728][ T5730] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 501.681696][ T5730] usb 5-1: Using ep0 maxpacket: 8 [ 501.688615][ T5730] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 501.702221][ T5730] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 501.712488][ T5730] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 501.724406][ T5730] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 501.735134][ T5730] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.749424][ T5730] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 501.753860][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 501.761067][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.770652][ T5729] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 501.787226][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.796126][ T5708] usb 3-1: config 0 has no interfaces? [ 501.802516][ T5708] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 501.812402][ T5729] usb 1-1: config 0 descriptor?? [ 501.820843][ T5729] smsusb:smsusb_probe: board id=8, interface number 0 [ 501.827851][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.837392][ T5729] smsusb:smsusb_probe: Device initialized with return code -19 [ 501.847384][ T5708] usb 3-1: config 0 descriptor?? [ 501.989186][ T5730] usb 5-1: usb_control_msg returned -32 [ 501.996103][ T5730] usbtmc 5-1:16.0: can't read capabilities [ 502.041438][ T5730] usb 1-1: USB disconnect, device number 38 [ 502.062090][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.072529][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.097140][ T5612] usb 3-1: USB disconnect, device number 51 [ 502.784496][T11381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1376'. [ 502.950140][T11383] geneve2: entered promiscuous mode [ 502.955559][T11383] geneve2: entered allmulticast mode [ 503.706301][ T5708] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 504.063089][ T5708] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 504.087192][ T5708] usb 1-1: config 2 has no interface number 0 [ 504.093912][ T5708] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 504.105444][ T5708] usb 1-1: config 2 interface 79 altsetting 13 endpoint 0x82 has invalid wMaxPacketSize 0 [ 504.118602][ T5708] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 0 [ 504.129998][ T5708] usb 1-1: config 2 interface 79 has no altsetting 0 [ 504.139257][ T5708] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 504.150623][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.159119][ T5708] usb 1-1: Product: syz [ 504.164311][ T5708] usb 1-1: Manufacturer: syz [ 504.169102][ T5708] usb 1-1: SerialNumber: syz [ 504.183378][T11389] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 504.867346][ T988] usb 5-1: USB disconnect, device number 39 [ 504.909312][T11406] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 505.031352][ T30] audit: type=1400 audit(1778554227.604:591): avc: denied { open } for pid=11414 comm="syz.1.1386" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 505.197433][ T5708] esd_usb 1-1:2.79: sending version message failed [ 505.215688][ T30] audit: type=1400 audit(1778554227.614:592): avc: denied { ioctl } for pid=11414 comm="syz.1.1386" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 505.216938][ T5708] esd_usb 1-1:2.79: probe with driver esd_usb failed with error -71 [ 505.318755][T11422] dlm: no local IP address has been set [ 505.332477][T11422] dlm: cannot start dlm midcomms -107 [ 505.347159][T11425] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1389'. [ 505.394455][ T5708] usb 1-1: USB disconnect, device number 39 [ 505.442624][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1389'. [ 506.381095][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 506.799359][ T30] audit: type=1400 audit(1778554229.374:593): avc: denied { create } for pid=11434 comm="syz.1.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 507.011168][T11441] FAULT_INJECTION: forcing a failure. [ 507.011168][T11441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.047628][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.3.1393 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.047649][T11441] Tainted: [L]=SOFTLOCKUP [ 507.047655][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.047672][T11441] Call Trace: [ 507.047678][T11441] [ 507.047685][T11441] dump_stack_lvl+0x100/0x190 [ 507.047709][T11441] should_fail_ex.cold+0x5/0xa [ 507.047725][T11441] _copy_from_user+0x2e/0xd0 [ 507.047742][T11441] copy_msghdr_from_user+0x9f/0x4f0 [ 507.047757][T11441] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 507.047774][T11441] ? rcu_is_watching+0x12/0xc0 [ 507.047794][T11441] ___sys_recvmsg+0xdd/0x1a0 [ 507.047808][T11441] ? __pfx____sys_recvmsg+0x10/0x10 [ 507.047828][T11441] ? __pfx___might_resched+0x10/0x10 [ 507.047845][T11441] ? ktime_get_ts64+0x318/0x420 [ 507.047857][T11441] ? ktime_get_ts64+0x257/0x420 [ 507.047871][T11441] do_recvmmsg+0x301/0x760 [ 507.047886][T11441] ? __pfx_do_recvmmsg+0x10/0x10 [ 507.047899][T11441] ? __might_fault+0xc5/0x140 [ 507.047926][T11441] __x64_sys_recvmmsg+0x199/0x280 [ 507.047937][T11441] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 507.047949][T11441] ? rcu_is_watching+0x12/0xc0 [ 507.047966][T11441] do_syscall_64+0x10b/0xf80 [ 507.047982][T11441] ? clear_bhb_loop+0x40/0x90 [ 507.047994][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.048005][T11441] RIP: 0033:0x7f102159cdd9 [ 507.048015][T11441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.048026][T11441] RSP: 002b:00007f10224bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 507.048037][T11441] RAX: ffffffffffffffda RBX: 00007f1021815fa0 RCX: 00007f102159cdd9 [ 507.048043][T11441] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 507.048049][T11441] RBP: 00007f10224bf090 R08: 00002000000001c0 R09: 0000000000000000 [ 507.048055][T11441] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 507.048061][T11441] R13: 00007f1021816038 R14: 00007f1021815fa0 R15: 00007ffe675670e8 [ 507.048074][T11441] [ 509.524106][ T30] audit: type=1400 audit(1778554232.094:594): avc: denied { mount } for pid=11464 comm="syz.3.1401" name="/" dev="ramfs" ino=36330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 509.552488][T11469] dlm: no local IP address has been set [ 509.558281][T11469] dlm: cannot start dlm midcomms -107 [ 509.562231][T11450] Scaler: ================= START STATUS ================= [ 509.599604][T11450] Scaler: ================== END STATUS ================== [ 510.608094][T11476] overlayfs: statfs failed on './file0' [ 510.624397][T11482] zonefs (nullb0) ERROR: Not a zoned block device [ 511.509176][T11493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1408'. [ 512.130969][T11496] libceph: resolve '0..' (ret=-3): failed [ 514.956757][T11515] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 515.925197][ T30] audit: type=1400 audit(1778554238.504:595): avc: denied { write } for pid=11523 comm="syz.2.1418" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 515.950693][T11528] zonefs (nullb0) ERROR: Not a zoned block device [ 515.967151][T11530] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1420'. [ 515.978845][T11530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1420'. [ 515.997160][T11532] netlink: 'syz.2.1418': attribute type 4 has an invalid length. [ 516.005253][T11532] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1418'. [ 516.026027][T11532] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 516.174332][T11522] Scaler: ================= START STATUS ================= [ 516.195770][T11522] Scaler: ================== END STATUS ================== [ 516.227271][T11539] trusted_key: encrypted_key: insufficient parameters specified [ 516.521812][ T30] audit: type=1400 audit(1778554239.074:596): avc: denied { name_connect } for pid=11535 comm="syz.0.1421" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 516.651518][ T30] audit: type=1326 audit(1778554239.214:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.2.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028159cdd9 code=0x7fc00000 [ 516.717457][ T30] audit: type=1326 audit(1778554239.214:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.2.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028159cdd9 code=0x7fc00000 [ 516.748595][ T30] audit: type=1326 audit(1778554239.214:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.2.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028159cdd9 code=0x7fc00000 [ 516.776243][ T30] audit: type=1326 audit(1778554239.214:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11523 comm="syz.2.1418" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028159cdd9 code=0x7fc00000 [ 516.881854][ T988] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 516.987307][T11550] libceph: resolve '0..' (ret=-3): failed [ 517.480502][ T988] usb 4-1: device descriptor read/64, error -71 [ 518.228900][ T30] audit: type=1326 audit(1778554240.804:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028159cdd9 code=0x7ffc0000 [ 518.280295][ T30] audit: type=1326 audit(1778554240.804:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028159cdd9 code=0x7ffc0000 [ 518.433532][ T30] audit: type=1326 audit(1778554240.844:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f028159cdd9 code=0x7ffc0000 [ 518.461511][ T30] audit: type=1326 audit(1778554240.844:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028159cdd9 code=0x7ffc0000 [ 518.491824][ T988] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 518.692135][ T988] usb 4-1: device descriptor read/64, error -71 [ 518.910674][ T5804] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 519.052076][ T988] usb usb4-port1: attempt power cycle [ 519.061717][ T5804] usb 3-1: device descriptor read/64, error -71 [ 519.773600][ T5804] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 519.813147][ T988] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 519.855870][ T988] usb 4-1: device descriptor read/8, error -71 [ 519.895127][T11568] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 519.971682][ T5804] usb 3-1: device descriptor read/64, error -71 [ 520.332923][T11570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.572041][T11573] zonefs (nullb0) ERROR: Not a zoned block device [ 520.598743][T11574] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1432'. [ 520.615879][ T5804] usb usb3-port1: attempt power cycle [ 520.633323][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1432'. [ 520.996615][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 520.996632][ T30] audit: type=1326 audit(1778554243.564:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11552 comm="syz.2.1426" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f028159ca6b code=0x7ffc0000 [ 521.405149][ T5804] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 521.724879][ T988] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 522.026644][ T988] usb 4-1: config 0 has no interfaces? [ 522.045894][ T988] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 522.075008][ T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.139439][ T988] usb 4-1: config 0 descriptor?? [ 522.181755][ T5804] usb 3-1: device not accepting address 54, error -71 [ 522.487595][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.498897][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.520506][ T988] usb 4-1: USB disconnect, device number 51 [ 522.526506][ T9] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 522.921004][T11586] Scaler: ================= START STATUS ================= [ 522.930273][T11586] Scaler: ================== END STATUS ================== [ 523.063554][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.255924][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 523.300178][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 523.353151][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.396759][ T9] usb 5-1: config 0 descriptor?? [ 523.529603][T11610] zonefs (nullb0) ERROR: Not a zoned block device [ 523.565474][T11604] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 523.628508][T11613] libceph: resolve '0..' (ret=-3): failed [ 523.780200][T11611] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1445'. [ 523.881767][T11617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1445'. [ 524.030596][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.121373][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.360664][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 524.463860][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 524.565291][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 524.677231][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 524.793671][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 524.874175][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 524.971403][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 525.058528][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 525.182718][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 525.297728][ T9] aquacomputer_d5next 0003:0C70:F003.0008: unknown main item tag 0x0 [ 525.549533][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1446'. [ 526.215123][ T9] aquacomputer_d5next 0003:0C70:F003.0008: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 526.308883][ T9] usb 5-1: USB disconnect, device number 40 [ 526.373922][T11630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 526.625828][T11628] fido_id[11628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 527.281998][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 527.357309][T11646] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1455'. [ 527.421311][T11640] Scaler: ================= START STATUS ================= [ 527.432114][T11640] Scaler: ================== END STATUS ================== [ 527.463157][ T9] usb 4-1: config 0 has no interfaces? [ 527.475042][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.502015][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.534232][ T9] usb 4-1: config 0 descriptor?? [ 527.755429][T11637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.786543][T11637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.818317][T11637] netlink: 'syz.3.1452': attribute type 24 has an invalid length. [ 527.849896][ T9] usb 4-1: USB disconnect, device number 52 [ 527.868107][T11651] zonefs (nullb0) ERROR: Not a zoned block device [ 530.391770][ T5708] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 530.402072][ T803] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 530.598173][ T803] usb 3-1: config 2 has an invalid interface number: 79 but max is 0 [ 530.669023][ T803] usb 3-1: config 2 has no interface number 0 [ 530.746445][ T803] usb 3-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 530.887942][ T803] usb 3-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 531.030182][ T803] usb 3-1: config 2 interface 79 has no altsetting 0 [ 531.131203][ T803] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 531.218218][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.301038][ T803] usb 3-1: Product: syz [ 531.336204][ T803] usb 3-1: Manufacturer: syz [ 531.374989][ T803] usb 3-1: SerialNumber: syz [ 531.458559][T11684] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 531.465104][T11684] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.494735][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 531.510538][T11674] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 531.566912][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.579373][ T5708] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 531.581147][T11674] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 531.588542][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.605785][ T5708] usb 4-1: Product: syz [ 531.610005][ T5708] usb 4-1: Manufacturer: syz [ 531.614725][ T5708] usb 4-1: SerialNumber: syz [ 531.623504][T11683] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 531.630015][T11683] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.642622][ T5708] usb 4-1: config 0 descriptor?? [ 531.649866][ T5708] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 531.682687][T11686] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10) [ 531.689321][T11686] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 531.903063][T11684] vhci_hcd vhci_hcd.0: Device attached [ 532.184784][T11698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.544195][T11683] vhci_hcd vhci_hcd.0: Device attached [ 532.555728][T11686] vhci_hcd vhci_hcd.0: Device attached [ 532.599362][ T803] esd_usb 3-1:2.79: sending version message failed [ 532.625903][ T803] esd_usb 3-1:2.79: probe with driver esd_usb failed with error -71 [ 532.634534][ T5730] usb 33-2: new low-speed USB device number 2 using vhci_hcd [ 532.646152][T11685] vhci_hcd: connection closed [ 532.647740][ T36] vhci_hcd vhci_hcd.0: stop threads [ 532.675656][T11687] vhci_hcd: connection closed [ 532.677403][T11690] vhci_hcd: connection closed [ 532.683947][T11689] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 532.703930][ T36] vhci_hcd vhci_hcd.0: release socket [ 532.749887][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 532.770773][ T803] usb 3-1: USB disconnect, device number 56 [ 532.807294][ T36] vhci_hcd vhci_hcd.0: stop threads [ 532.869636][ T36] vhci_hcd vhci_hcd.0: release socket [ 532.900848][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 533.032898][ T36] vhci_hcd vhci_hcd.0: stop threads [ 533.038930][ T36] vhci_hcd vhci_hcd.0: release socket [ 533.066841][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 534.512078][ T5708] usb 4-1: qt2_attach - failed to power on unit: -71 [ 534.526005][ T5708] quatech2 4-1:0.0: probe with driver quatech2 failed with error -71 [ 534.560097][ T5708] usb 4-1: USB disconnect, device number 53 [ 535.336243][ T30] audit: type=1400 audit(1778554257.914:655): avc: denied { read } for pid=11707 comm="syz.1.1469" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 535.902098][ T5708] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 536.073256][ T5708] usb 3-1: config 0 has no interfaces? [ 536.087914][ T5729] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 536.097157][ T5708] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 536.117014][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.150981][ T5708] usb 3-1: config 0 descriptor?? [ 536.271675][ T5729] usb 5-1: Using ep0 maxpacket: 16 [ 536.306677][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.339800][ T5729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.380266][ T5729] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 536.477160][T11727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.485029][ T5729] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 536.505663][T11727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.570436][ T5729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.612806][T11727] netlink: 'syz.2.1473': attribute type 24 has an invalid length. [ 536.667485][ T5729] usb 5-1: config 0 descriptor?? [ 537.152740][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.184369][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.249921][ T5729] hid_parser_main: 26 callbacks suppressed [ 537.249947][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.279834][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.289347][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.300067][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.307679][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.315606][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.324811][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.332490][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.345411][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 537.806542][ T5730] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 538.436814][ T5729] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 538.454069][ T5729] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input20 [ 539.123801][ T5729] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 539.172730][ T5729] usb 5-1: USB disconnect, device number 41 [ 539.321531][T11747] fido_id[11747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 540.935258][ T5729] usb 3-1: USB disconnect, device number 57 [ 541.148416][T11756] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1482'. [ 541.217473][T11756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1482'. [ 541.297536][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1484'. [ 541.435599][ T5708] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 541.541687][ T5729] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 541.630558][T11766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1486'. [ 541.681838][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 541.689812][ T5708] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 541.698761][ T5708] usb 1-1: config 254 has no interface number 0 [ 541.705606][ T5708] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 541.716211][ T5708] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 541.731918][ T5729] usb 3-1: config 2 has an invalid interface number: 79 but max is 0 [ 541.750219][ T5708] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 541.761709][ T5729] usb 3-1: config 2 has no interface number 0 [ 541.768261][ T5729] usb 3-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 541.778495][ T5708] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0 [ 541.789283][ T5729] usb 3-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 541.799457][ T5708] usb 1-1: config 254 interface 235 has no altsetting 0 [ 541.806509][ T5729] usb 3-1: config 2 interface 79 has no altsetting 0 [ 541.819062][ T5708] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 541.833880][ T5729] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 541.866737][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 541.875152][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.883604][ T5708] usb 1-1: Product: syz [ 541.887823][ T5708] usb 1-1: Manufacturer: syz [ 541.892466][ T5729] usb 3-1: Product: syz [ 541.897065][ T5729] usb 3-1: Manufacturer: syz [ 541.901766][ T5708] usb 1-1: SerialNumber: syz [ 541.907169][ T5729] usb 3-1: SerialNumber: syz [ 541.914014][T11758] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 541.929784][T11754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.019289][T11754] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 542.175702][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.189837][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.204209][ T5708] usbtest 1-1:254.235: couldn't get endpoints, -71 [ 542.216083][ T5708] usbtest 1-1:254.235: probe with driver usbtest failed with error -71 [ 542.245315][ T5708] usb 1-1: USB disconnect, device number 40 [ 542.281200][ T5729] esd_usb 3-1:2.79: sending version message failed [ 542.306153][ T5729] esd_usb 3-1:2.79: probe with driver esd_usb failed with error -71 [ 542.349879][ T5729] usb 3-1: USB disconnect, device number 58 [ 542.666075][T11779] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 543.670599][T11786] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1492'. [ 543.790807][T11791] syzkaller0: entered promiscuous mode [ 543.811122][T11791] syzkaller0: entered allmulticast mode [ 544.154270][T11801] serio: Serial port ptm1 [ 544.261657][ T5729] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 544.401921][ T5729] usb 2-1: device descriptor read/64, error -71 [ 544.468683][ T30] audit: type=1400 audit(1778554267.044:656): avc: denied { connect } for pid=11808 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 544.489417][ T30] audit: type=1400 audit(1778554267.044:657): avc: denied { write } for pid=11808 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 544.661691][ T5729] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 544.791971][ T5729] usb 2-1: device descriptor read/64, error -71 [ 544.954718][T11822] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 545.310854][ T5729] usb usb2-port1: attempt power cycle [ 545.341716][T11706] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 545.710793][T11706] usb 5-1: Using ep0 maxpacket: 8 [ 545.785725][T11706] usb 5-1: unable to get BOS descriptor or descriptor too short [ 545.926022][T11706] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 545.977206][T11706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.018756][T11706] usb 5-1: Product: syz [ 546.100207][T11706] usb 5-1: Manufacturer: syz [ 546.146247][T11706] usb 5-1: SerialNumber: syz [ 547.044371][T11836] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 547.083371][ T5729] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 547.265093][ T5729] usb 2-1: device descriptor read/8, error -71 [ 547.311872][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 547.548777][ T9] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 547.600993][ T9] usb 1-1: config 2 has no interface number 0 [ 547.632723][ T9] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 547.701841][ T9] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 547.827927][ T9] usb 1-1: config 2 interface 79 has no altsetting 0 [ 547.836752][ T9] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 547.846248][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.854533][ T9] usb 1-1: Product: syz [ 547.858745][ T9] usb 1-1: Manufacturer: syz [ 547.858765][ T9] usb 1-1: SerialNumber: syz [ 547.862850][T11829] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 547.878417][T11829] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 548.106321][ T30] audit: type=1400 audit(1778554270.684:658): avc: denied { write } for pid=11823 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 548.136163][ T9] esd_usb 1-1:2.79: sending version message failed [ 548.148869][ T9] esd_usb 1-1:2.79: probe with driver esd_usb failed with error -71 [ 548.166327][ T9] usb 1-1: USB disconnect, device number 41 [ 548.293114][ T5721] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 548.430738][T11706] usb 5-1: USB disconnect, device number 42 [ 548.451705][ T5721] usb 3-1: device descriptor read/64, error -71 [ 548.506719][ T8027] udevd[8027]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.731683][ T5721] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 548.881669][ T5721] usb 3-1: device descriptor read/64, error -71 [ 548.993250][ T5721] usb usb3-port1: attempt power cycle [ 549.039301][T11853] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1508'. [ 549.073232][T11853] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1508'. [ 549.154779][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 549.162917][T11859] zonefs (nullb0) ERROR: Not a zoned block device [ 549.171050][T11855] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1507'. [ 549.361802][ T5721] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 549.415045][ T5804] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 549.452076][ T5721] usb 3-1: device descriptor read/8, error -71 [ 549.614487][T11868] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 549.706432][ T5721] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 549.824883][T11868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.903706][ T5721] usb 3-1: device descriptor read/8, error -71 [ 549.989610][T11871] can: request_module (can-proto-4) failed. [ 550.130619][ T5721] usb usb3-port1: unable to enumerate USB device [ 550.636697][T11888] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 551.347427][T11895] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 551.360614][T11895] qnx6: wrong signature (magic) in superblock #1. [ 551.367112][T11895] qnx6: unable to read the first superblock [ 551.436590][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'. [ 551.529398][T11897] netlink: 'syz.2.1518': attribute type 1 has an invalid length. [ 551.715201][T11907] netlink: 'syz.2.1518': attribute type 10 has an invalid length. [ 551.746545][T11907] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1518'. [ 551.764893][T11907] dummy0: entered promiscuous mode [ 552.034982][T11914] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1523'. [ 552.061100][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1523'. [ 552.166458][T11917] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1522'. [ 552.433630][T11927] No source specified [ 553.543458][ T9] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 553.714871][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.757603][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 553.897906][T11947] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 553.921113][T11948] FAULT_INJECTION: forcing a failure. [ 553.921113][T11948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.047175][T11948] CPU: 1 UID: 0 PID: 11948 Comm: syz.0.1530 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.047206][T11948] Tainted: [L]=SOFTLOCKUP [ 554.047213][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 554.047223][T11948] Call Trace: [ 554.047229][T11948] [ 554.047236][T11948] dump_stack_lvl+0x100/0x190 [ 554.047268][T11948] should_fail_ex.cold+0x5/0xa [ 554.047294][T11948] _copy_from_user+0x2e/0xd0 [ 554.047321][T11948] copy_msghdr_from_user+0x9f/0x4f0 [ 554.047346][T11948] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 554.047374][T11948] ? __pfx__kstrtoull+0x10/0x10 [ 554.047399][T11948] ___sys_sendmsg+0x106/0x1e0 [ 554.047424][T11948] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.047460][T11948] ? find_held_lock+0x2b/0x80 [ 554.047495][T11948] __sys_sendmmsg+0x205/0x430 [ 554.047515][T11948] ? __pfx___sys_sendmmsg+0x10/0x10 [ 554.047541][T11948] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 554.047577][T11948] ? fput+0x79/0x100 [ 554.047602][T11948] ? ksys_write+0x1ac/0x250 [ 554.047621][T11948] ? __pfx_ksys_write+0x10/0x10 [ 554.047646][T11948] __x64_sys_sendmmsg+0x9c/0x100 [ 554.047663][T11948] ? lockdep_hardirqs_on+0x78/0x100 [ 554.047687][T11948] do_syscall_64+0x10b/0xf80 [ 554.047709][T11948] ? clear_bhb_loop+0x40/0x90 [ 554.047731][T11948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.047749][T11948] RIP: 0033:0x7f69fdd9cdd9 [ 554.047764][T11948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.047780][T11948] RSP: 002b:00007f69febcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 554.047798][T11948] RAX: ffffffffffffffda RBX: 00007f69fe016090 RCX: 00007f69fdd9cdd9 [ 554.047810][T11948] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 554.047820][T11948] RBP: 00007f69febcd090 R08: 0000000000000000 R09: 0000000000000000 [ 554.047831][T11948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.047841][T11948] R13: 00007f69fe016128 R14: 00007f69fe016090 R15: 00007ffc719d2a78 [ 554.047864][T11948] [ 554.065754][ T5729] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 555.036859][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.044977][ T9] usb 2-1: Product: syz [ 555.049139][ T9] usb 2-1: Manufacturer: syz [ 555.053757][ T9] usb 2-1: SerialNumber: syz [ 555.067757][ T9] usb 2-1: config 0 descriptor?? [ 555.078527][ T9] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 555.219840][ T5729] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 555.229310][ T5729] usb 5-1: config 2 has no interface number 0 [ 555.241439][ T5729] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 555.277663][ T5729] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 555.350435][ T5729] usb 5-1: config 2 interface 79 has no altsetting 0 [ 555.416076][ T5729] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 555.479680][ T9] usb 2-1: USB disconnect, device number 56 [ 555.500572][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.602552][ T5729] usb 5-1: Product: syz [ 555.637618][ T5729] usb 5-1: Manufacturer: syz [ 555.697618][ T5729] usb 5-1: SerialNumber: syz [ 555.781022][T11940] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 555.821331][T11940] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 555.829976][ T30] audit: type=1400 audit(1778554278.394:659): avc: denied { append } for pid=11954 comm="syz.2.1532" name="sg0" dev="devtmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 555.970541][ T988] IPVS: starting estimator thread 0... [ 556.101711][T11957] IPVS: using max 76 ests per chain, 182400 per kthread [ 556.216563][ T5729] esd_usb 5-1:2.79: sending version message failed [ 556.228054][ T5729] esd_usb 5-1:2.79: probe with driver esd_usb failed with error -71 [ 556.292635][ T5729] usb 5-1: USB disconnect, device number 43 [ 557.189454][T11971] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1537'. [ 557.262172][T11971] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1537'. [ 557.323804][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.331941][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.741656][ T5729] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 557.903382][ T5729] usb 2-1: Using ep0 maxpacket: 16 [ 557.912666][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 557.936970][ T5729] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 557.966513][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.996003][ T5729] usb 2-1: Product: syz [ 558.014860][ T5729] usb 2-1: Manufacturer: syz [ 558.099488][ T5729] usb 2-1: SerialNumber: syz [ 558.928862][ T5729] usb 2-1: config 0 descriptor?? [ 558.946181][ T5729] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 558.955948][ T5729] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 559.403377][ T988] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 559.552806][ T5729] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 559.564796][ T988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 559.579564][ T988] usb 3-1: not running at top speed; connect to a high speed hub [ 559.598092][ T988] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.612986][ T988] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 559.645942][ T988] usb 3-1: string descriptor 0 read error: -22 [ 559.667186][ T988] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 559.697473][ T988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.742163][ T988] usb 3-1: 0:2 : does not exist [ 560.036857][ T30] audit: type=1400 audit(1778554282.614:660): avc: denied { connect } for pid=12009 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 560.069015][ T30] audit: type=1400 audit(1778554282.634:661): avc: denied { write } for pid=12009 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 560.140755][ T5614] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 560.151043][ T5614] CPU: 0 UID: 0 PID: 5614 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.151075][ T5614] Tainted: [L]=SOFTLOCKUP [ 560.151081][ T5614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.151095][ T5614] Workqueue: hci1 hci_rx_work [ 560.151127][ T5614] Call Trace: [ 560.151133][ T5614] [ 560.151140][ T5614] dump_stack_lvl+0x100/0x190 [ 560.151165][ T5614] sysfs_warn_dup.cold+0x1c/0x28 [ 560.151193][ T5614] sysfs_create_dir_ns+0x24b/0x2b0 [ 560.151216][ T5614] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 560.151243][ T5614] ? find_held_lock+0x2b/0x80 [ 560.151263][ T5614] ? kobject_add_internal+0x25f/0x930 [ 560.151294][ T5614] ? kobject_add_internal+0x25f/0x930 [ 560.151328][ T5614] ? do_raw_spin_unlock+0x145/0x1e0 [ 560.151360][ T5614] kobject_add_internal+0x2c8/0x930 [ 560.151391][ T5614] kobject_add+0x16a/0x1e0 [ 560.151407][ T5614] ? __pfx_kobject_add+0x10/0x10 [ 560.151421][ T5614] ? class_to_subsys+0x10f/0x150 [ 560.151446][ T5614] ? kobject_put+0xb9/0x640 [ 560.151470][ T5614] ? _raw_spin_unlock+0x28/0x50 [ 560.151500][ T5614] device_add+0x294/0x1950 [ 560.151521][ T5614] ? __pfx_dev_set_name+0x10/0x10 [ 560.151547][ T5614] ? __pfx_device_add+0x10/0x10 [ 560.151566][ T5614] ? mgmt_send_event_skb+0x2fb/0x460 [ 560.151594][ T5614] hci_conn_add_sysfs+0x1a3/0x260 [ 560.151619][ T5614] le_conn_complete_evt+0x11eb/0x1f60 [ 560.151650][ T5614] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 560.151681][ T5614] hci_le_conn_complete_evt+0x23c/0x3a0 [ 560.151707][ T5614] ? skb_pull_data+0x15f/0x1e0 [ 560.151733][ T5614] hci_le_meta_evt+0x34a/0x5f0 [ 560.151759][ T5614] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 560.151786][ T5614] hci_event_packet+0x51c/0xcd0 [ 560.151810][ T5614] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 560.151835][ T5614] ? __pfx_hci_event_packet+0x10/0x10 [ 560.151862][ T5614] ? kcov_remote_start+0x374/0x660 [ 560.151886][ T5614] ? lockdep_hardirqs_on+0x78/0x100 [ 560.151917][ T5614] hci_rx_work+0x451/0xfc0 [ 560.151946][ T5614] process_one_work+0xa0e/0x1980 [ 560.151984][ T5614] ? __pfx_process_one_work+0x10/0x10 [ 560.152015][ T5614] ? __pfx_hci_rx_work+0x10/0x10 [ 560.152040][ T5614] worker_thread+0x5ef/0xe50 [ 560.152077][ T5614] ? kthread+0x13a/0x450 [ 560.152098][ T5614] ? __pfx_worker_thread+0x10/0x10 [ 560.152120][ T5614] kthread+0x370/0x450 [ 560.152137][ T5614] ? __pfx_kthread+0x10/0x10 [ 560.152158][ T5614] ret_from_fork+0x72b/0xd50 [ 560.152180][ T5614] ? __pfx_ret_from_fork+0x10/0x10 [ 560.152204][ T5614] ? __switch_to+0x800/0x1100 [ 560.152231][ T5614] ? __pfx_kthread+0x10/0x10 [ 560.152260][ T5614] ret_from_fork_asm+0x1a/0x30 [ 560.152295][ T5614] [ 560.416306][ T30] audit: type=1400 audit(1778554282.714:662): avc: denied { listen } for pid=12009 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 560.436376][ T5614] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 560.476016][ T5614] Bluetooth: hci1: failed to register connection device [ 560.674985][ T988] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 560.731017][ T988] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 560.766982][ T988] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 560.803119][ T988] usb 3-1: USB disconnect, device number 63 [ 560.812566][ T5729] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 560.849539][ T5729] em28xx 2-1:0.0: board has no eeprom [ 560.885954][ T8027] udevd[8027]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.921713][ T5729] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 560.953862][ T5729] em28xx 2-1:0.0: dvb set to bulk mode. [ 560.979994][ T5708] em28xx 2-1:0.0: Binding DVB extension [ 561.003821][ T5729] usb 2-1: USB disconnect, device number 57 [ 561.030178][ T5729] em28xx 2-1:0.0: Disconnecting em28xx [ 561.430924][ T5708] em28xx 2-1:0.0: Registering input extension [ 561.448531][ T5729] em28xx 2-1:0.0: Closing input extension [ 561.732050][ T5708] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 561.975466][ T5708] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 562.089145][ T5708] usb 1-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 562.212858][ T5708] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 562.505713][ T5708] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.604568][ T5729] em28xx 2-1:0.0: Freeing device [ 562.632524][ T5708] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 562.671393][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 562.726006][ T5708] usb 1-1: Product: syz [ 562.745470][ T5708] usb 1-1: Manufacturer: syz [ 562.797582][ T5708] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 563.098382][T12047] dummy0: entered allmulticast mode [ 564.149943][T12057] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 564.371181][T12061] libceph: resolve '0..' (ret=-3): failed [ 565.922288][ T5804] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 566.134454][ T5612] usb 1-1: USB disconnect, device number 42 [ 566.192491][ T5804] usb 5-1: Using ep0 maxpacket: 32 [ 566.255795][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.393577][ T5804] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 566.515824][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.558536][ T5804] usb 5-1: config 0 descriptor?? [ 566.603099][ T5804] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 566.831770][ T5612] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 567.369067][T11259] Bluetooth: hci1: command 0x0406 tx timeout [ 568.120694][ T5612] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 568.155755][ T5612] usb 1-1: config 2 has no interface number 0 [ 568.173790][ T5612] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 568.201181][ T5612] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 569.275197][ T5612] usb 1-1: config 2 interface 79 has no altsetting 0 [ 569.503936][T12091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1571'. [ 569.697025][ T5612] usb 1-1: string descriptor 0 read error: -71 [ 569.719400][ T5612] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 569.739138][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.915277][ T5612] usb 1-1: can't set config #2, error -71 [ 569.961214][ T5612] usb 1-1: USB disconnect, device number 43 [ 570.035260][T12108] No source specified [ 570.387779][ T30] audit: type=1400 audit(1778554292.964:663): avc: denied { write } for pid=12100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.533299][ T5708] usb 5-1: USB disconnect, device number 44 [ 570.618420][T12126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 570.665390][T12130] input: syz1 as /devices/virtual/input/input22 [ 570.690647][ T30] audit: type=1400 audit(1778554293.264:664): avc: denied { write } for pid=12129 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.727298][T12126] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 571.099109][T12138] geneve2: entered promiscuous mode [ 571.129842][T12138] geneve2: entered allmulticast mode [ 571.913184][ T30] audit: type=1400 audit(1778554294.474:665): avc: denied { write } for pid=12134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.984152][ T30] audit: type=1400 audit(1778554294.564:666): avc: denied { bind } for pid=12148 comm="syz.2.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 572.043281][ T30] audit: type=1400 audit(1778554294.624:667): avc: denied { write } for pid=12172 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.486117][T12183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1588'. [ 572.984433][T12188] No source specified [ 574.426042][T12194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 575.143271][ T30] audit: type=1400 audit(1778554297.724:668): avc: denied { mounton } for pid=12199 comm="syz.4.1594" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 575.145472][T12205] 9p: Bad value for 'rfdno' [ 575.581237][T12230] tc_dump_action: action bad kind [ 575.951702][ T5729] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 576.115279][ T5729] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 576.180525][ T5729] usb 1-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 576.197654][ T5729] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 576.213601][ T5729] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 576.252157][ T5729] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 576.263344][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 576.272580][ T5729] usb 1-1: Product: syz [ 576.278127][ T5729] usb 1-1: Manufacturer: syz [ 576.306673][ T5729] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 576.331409][T12242] syzkaller0: entered promiscuous mode [ 576.340059][T12242] syzkaller0: entered allmulticast mode [ 576.678320][ T30] audit: type=1400 audit(1778554299.254:669): avc: denied { read } for pid=12247 comm="syz.1.1606" lport=49567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 576.960977][T12256] libceph: resolve '0..' (ret=-3): failed [ 576.971794][ T5612] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 578.723162][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.885005][ T5729] usb 1-1: USB disconnect, device number 44 [ 579.311974][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.322699][ T5612] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 579.331867][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.343156][ T5612] usb 4-1: config 0 descriptor?? [ 579.401303][T12264] netlink: 'syz.4.1611': attribute type 21 has an invalid length. [ 579.422619][T12264] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1611'. [ 579.441809][T12264] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1611'. [ 579.467303][T12273] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.529569][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1613'. [ 579.802246][ T5804] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 579.836849][ T5612] hid_parser_main: 5 callbacks suppressed [ 579.836931][ T5612] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 579.873712][ T5612] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 579.881165][ T5612] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 579.898014][ T5612] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0 [ 579.941681][ T5612] arvo 0003:1E7D:30D4.000A: item fetching failed at offset 5/7 [ 580.000615][ T5612] arvo 0003:1E7D:30D4.000A: parse failed [ 580.046609][ T5612] arvo 0003:1E7D:30D4.000A: probe with driver arvo failed with error -22 [ 580.088234][ T5804] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 580.124333][ T5804] usb 5-1: config 2 has no interface number 0 [ 580.172922][ T5804] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 580.194730][ T5612] usb 4-1: USB disconnect, device number 54 [ 580.327306][ T5804] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 580.481480][ T5804] usb 5-1: config 2 interface 79 has no altsetting 0 [ 580.612757][ T5804] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 580.689368][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.824015][ T5804] usb 5-1: Product: syz [ 580.885287][ T5804] usb 5-1: Manufacturer: syz [ 580.944151][ T5804] usb 5-1: SerialNumber: syz [ 581.090022][T12281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 581.114690][T12281] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 581.164332][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 581.387873][ T30] audit: type=1400 audit(1778554303.944:670): avc: denied { shutdown } for pid=12299 comm="syz.2.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 581.420912][ T5804] esd_usb 5-1:2.79: sending version message failed [ 581.434308][ T5804] esd_usb 5-1:2.79: probe with driver esd_usb failed with error -71 [ 581.634405][ T5804] usb 5-1: USB disconnect, device number 45 [ 581.837711][T12307] netem: change failed [ 581.891967][ T5708] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 581.992125][ T5729] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 582.059243][ T5708] usb 3-1: config 0 has no interfaces? [ 582.081042][ T5708] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 582.093576][T12315] libceph: resolve '0..' (ret=-3): failed [ 582.118692][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.160037][ T5729] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 582.230635][ T5729] usb 1-1: config 2 has no interface number 0 [ 582.245671][ T5708] usb 3-1: config 0 descriptor?? [ 582.308654][ T5729] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 582.411455][ T5729] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 582.503513][ T5729] usb 1-1: config 2 interface 79 has no altsetting 0 [ 582.591477][ T5729] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 582.650009][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.683998][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.747604][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.760073][ T5729] usb 1-1: Product: syz [ 582.782952][ T5729] usb 1-1: Manufacturer: syz [ 582.826321][ T5729] usb 1-1: SerialNumber: syz [ 582.971454][T12305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 583.048388][T12305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 583.119606][T12303] netlink: 'syz.2.1620': attribute type 25 has an invalid length. [ 583.250229][ T5815] usb 3-1: USB disconnect, device number 64 [ 583.895792][ T5729] esd_usb 1-1:2.79: sending version message failed [ 583.964317][ T5729] esd_usb 1-1:2.79: probe with driver esd_usb failed with error -71 [ 584.176798][ T5729] usb 1-1: USB disconnect, device number 45 [ 585.511458][ T5612] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 585.519313][ T5804] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 585.711662][ T5612] usb 3-1: Using ep0 maxpacket: 8 [ 585.718999][ T5612] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 585.733452][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 585.747661][ T5612] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 585.758349][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.758614][ T5804] usb 2-1: config 2 has an invalid interface number: 79 but max is 0 [ 585.775517][ T5612] usb 3-1: Product: syz [ 585.782747][ T5612] usb 3-1: Manufacturer: syz [ 585.787441][ T5612] usb 3-1: SerialNumber: syz [ 585.792236][ T5804] usb 2-1: config 2 has no interface number 0 [ 585.808129][ T5804] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 585.822353][ T5804] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 586.345569][ T5612] usb 3-1: config 0 descriptor?? [ 586.371460][ T5612] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 586.408999][ T5804] usb 2-1: config 2 interface 79 has no altsetting 0 [ 586.433902][ T5804] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 586.459935][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.486471][ T5804] usb 2-1: Product: syz [ 586.498465][ T5804] usb 2-1: Manufacturer: syz [ 586.511517][ T5804] usb 2-1: SerialNumber: syz [ 586.628644][T12340] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 586.670692][T11706] usb 3-1: USB disconnect, device number 65 [ 586.677702][T12340] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 586.781513][ T30] audit: type=1400 audit(1778554309.354:671): avc: denied { setopt } for pid=12364 comm="syz.3.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 586.869820][ T30] audit: type=1400 audit(1778554309.434:672): avc: denied { ioctl } for pid=12364 comm="syz.3.1639" path="socket:[43287]" dev="sockfs" ino=43287 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 587.061894][ T5804] esd_usb 2-1:2.79: sending version message failed [ 587.069267][ T5804] esd_usb 2-1:2.79: probe with driver esd_usb failed with error -71 [ 587.100374][ T5804] usb 2-1: USB disconnect, device number 58 [ 587.365750][T12378] libceph: resolve '0..' (ret=-3): failed [ 589.559796][ T5614] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 589.600701][T12391] syzkaller0: entered promiscuous mode [ 589.606418][T12391] syzkaller0: entered allmulticast mode [ 589.981822][ T5708] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 589.995755][T12403] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 590.002270][T12403] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 590.014332][T12403] vhci_hcd vhci_hcd.0: Device attached [ 590.115608][T12401] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 590.161672][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 590.212632][ T5612] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 590.234893][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.263539][ T5708] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 590.297342][ T5612] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 590.665920][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.673035][T12401] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1650'. [ 590.673970][ T5708] usb 3-1: Product: syz [ 590.687203][ T5708] usb 3-1: Manufacturer: syz [ 590.691862][ T5708] usb 3-1: SerialNumber: syz [ 590.701199][ T5708] usb 3-1: config 0 descriptor?? [ 590.736819][ T5708] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 591.057355][T12404] vhci_hcd: connection reset by peer [ 591.064970][ T1036] vhci_hcd vhci_hcd.0: stop threads [ 591.089467][ T1036] vhci_hcd vhci_hcd.0: release socket [ 591.118344][ T1036] vhci_hcd vhci_hcd.0: disconnect device [ 591.566832][ T36] usb 3-1: Failed to submit usb control message: -71 [ 591.567063][ T5708] usb 3-1: USB disconnect, device number 66 [ 591.609449][ T36] usb 3-1: unable to send the bmi data to the device: -71 [ 591.638694][ T36] usb 3-1: unable to get target info from device [ 591.659080][ T36] usb 3-1: could not get target info (-71) [ 591.693906][ T36] usb 3-1: could not probe fw (-71) [ 591.852176][ T5815] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 591.882218][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 591.895636][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 591.911753][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 591.921991][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 591.970187][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 591.987464][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 592.000123][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 592.004716][ T5815] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 592.007782][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 592.018491][ T5815] usb 5-1: config 2 has no interface number 0 [ 592.023321][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 592.036812][ T5804] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 592.181668][ T5815] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 592.191776][ T5815] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 592.192199][ T5804] hid-generic 0000:0000:0000.000B: hidraw0: HID vf.e9 Device [syz1] on syz1 [ 592.202301][ T5815] usb 5-1: config 2 interface 79 has no altsetting 0 [ 592.220771][ T5815] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 592.251212][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.667906][ T5815] usb 5-1: Product: syz [ 592.711832][ T5815] usb 5-1: Manufacturer: syz [ 592.723033][ T5815] usb 5-1: SerialNumber: syz [ 592.741983][T12425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 592.754372][T12438] syzkaller0: entered promiscuous mode [ 592.761892][T12425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 592.767786][T12433] fido_id[12433]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 592.787730][T12438] syzkaller0: entered allmulticast mode [ 593.025460][T12445] libceph: resolve '0..' (ret=-3): failed [ 595.231048][ T5815] esd_usb 5-1:2.79: sending version message failed [ 595.329819][T12459] fuse: Unknown parameter 'nfsd' [ 595.341641][ T30] audit: type=1400 audit(1778554317.894:673): avc: denied { mount } for pid=12456 comm="syz.3.1664" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 595.450194][T12461] nfs4: Unknown parameter '' [ 595.455926][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1664'. [ 595.735063][ T5815] esd_usb 5-1:2.79: probe with driver esd_usb failed with error -71 [ 595.746937][ T5815] usb 5-1: USB disconnect, device number 46 [ 595.794490][ T6014] udevd[6014]: setting owner of /dev/bus/usb/005/046 to uid=0, gid=0 failed: No such file or directory [ 595.822796][ T5612] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 595.979759][T12463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 596.007721][T12463] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1665'. [ 596.381683][ T5815] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 596.717263][ T5815] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 596.893647][ T5815] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 596.935878][ T5815] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 596.992120][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.034198][T12466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 597.335566][ T5815] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.680147][T12484] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1671'. [ 597.741539][T12483] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 598.019062][ T30] audit: type=1400 audit(1778554320.594:674): avc: denied { setopt } for pid=12480 comm="syz.4.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 598.494902][ T30] audit: type=1400 audit(1778554321.074:675): avc: denied { read } for pid=12487 comm="syz.0.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 599.696601][T12504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.069984][T12513] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 600.076604][T12513] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 600.084322][T12513] vhci_hcd vhci_hcd.0: Device attached [ 600.104512][ T5815] usb 4-1: USB disconnect, device number 55 [ 600.607315][T12517] vhci_hcd: connection closed [ 600.651861][ T6824] vhci_hcd vhci_hcd.4: stop threads [ 600.818011][ T6824] vhci_hcd vhci_hcd.4: release socket [ 600.832089][ T6824] vhci_hcd vhci_hcd.4: disconnect device [ 600.886326][ T5708] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 600.906458][ T5612] usb 42-1: enqueue for inactive port 0 [ 601.163172][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 601.210131][ T5708] usb 1-1: config 255 has an invalid interface number: 240 but max is 3 [ 601.347629][ T5708] usb 1-1: config 255 has an invalid interface association descriptor of length 7, skipping [ 601.519499][ T5708] usb 1-1: config 255 has an invalid interface number: 253 but max is 3 [ 601.679738][ T5708] usb 1-1: config 255 has an invalid interface number: 184 but max is 3 [ 601.750924][ T5708] usb 1-1: config 255 has an invalid interface number: 141 but max is 3 [ 601.784470][T12523] Scaler: ================= START STATUS ================= [ 601.830990][T12523] Scaler: ================== END STATUS ================== [ 601.868529][ T5708] usb 1-1: config 255 has no interface number 0 [ 601.874890][ T5708] usb 1-1: config 255 has no interface number 1 [ 601.881166][ T5708] usb 1-1: config 255 has no interface number 2 [ 601.887634][ T5708] usb 1-1: config 255 has no interface number 3 [ 601.894337][ T5708] usb 1-1: config 255 interface 240 altsetting 3 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 601.905819][ T5708] usb 1-1: config 255 interface 240 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 601.918034][ T5708] usb 1-1: config 255 interface 240 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 601.940451][ T5708] usb 1-1: config 255 interface 240 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 601.951312][ T5612] usb usb42-port1: attempt power cycle [ 601.994236][ T5708] usb 1-1: config 255 interface 240 altsetting 3 endpoint 0x1 has an invalid bInterval 235, changing to 11 [ 602.032826][ T5708] usb 1-1: config 255 interface 240 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 602.052687][T12535] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1685'. [ 602.064917][ T5708] usb 1-1: config 255 interface 240 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 602.084861][T12535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1685'. [ 602.101675][ T5708] usb 1-1: config 255 interface 240 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 602.125267][ T5708] usb 1-1: config 255 interface 240 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 602.165768][ T5708] usb 1-1: config 255 interface 240 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 602.255514][ T5708] usb 1-1: config 255 interface 253 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 602.582216][ T5612] usb usb42-port1: unable to enumerate USB device [ 602.734921][ T5708] usb 1-1: config 255 interface 253 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 602.746106][ T5708] usb 1-1: config 255 interface 184 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 602.757709][ T5708] usb 1-1: config 255 interface 184 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 602.769812][ T5708] usb 1-1: config 255 interface 141 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 602.781028][ T5708] usb 1-1: config 255 interface 141 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 602.819396][ T5708] usb 1-1: config 255 interface 141 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 602.830769][ T5708] usb 1-1: config 255 interface 141 altsetting 13 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 602.846057][ T5708] usb 1-1: config 255 interface 240 has no altsetting 0 [ 602.853710][ T5708] usb 1-1: config 255 interface 253 has no altsetting 0 [ 602.860766][ T5708] usb 1-1: config 255 interface 184 has no altsetting 0 [ 602.867898][ T5708] usb 1-1: config 255 interface 141 has no altsetting 0 [ 602.878189][ T5708] usb 1-1: New USB device found, idVendor=3285, idProduct=07e9, bcdDevice=35.6d [ 602.897868][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.916854][ T5708] usb 1-1: Product: 䗦闟㖵梒䊾鳄䉝怗ç鬸ℂ굼銌㽰騂辀Ꞻ횮䶍䀆杓痭僾쵽铝萻엋瀌䵽磳깩ᴮ澵됂ᚅ間疰줿춦葼컍㉽敷骥삇芠Ο됢䞅抯ꬒ╳藃蛴ﮤ褌긝牠롲׍堒ꭀꕍ쎔柆뷙፡鍣粐㉲잍兄扒厥奙纮Ὓ暐뭉ﳁ⫨톽ߏ鼗⾇变辕⍟寭⎔ꔽ㦩뫔ṑ椵㰘栛▛硐 [ 603.001637][ T5708] usb 1-1: Manufacturer: 巇裁縱ㆤ䕡ᩲ뷷兌错뤴퇍ៃ꨷⢓ア⋔䂎蓸툵닿⓷垁迍̋肢鴊熐剅粼땍⹎䜎ۨ休䉆◰ႝ贂﴿잒斛䂓⬗憣ᐲ䍗೷ퟖ飋藃픃뤙탆谗鏏涵㷟韁걐㭳甤砯䘅䇸ፍ䰾깹莁쏽醸䘖䐋긼嗮剳ᵻ۩櫢싡䕰럭殺鱑荬˃쒊㈫팙層₸㍂蛝‚ [ 603.046283][ T5708] usb 1-1: SerialNumber: syz [ 603.092247][ T988] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 603.223975][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 603.283879][ T988] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.596385][ T5708] usb 1-1: USB disconnect, device number 47 [ 603.603404][ T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 603.626129][ T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 603.638483][ T988] usb 4-1: New USB device found, idVendor=0582, idProduct=d728, bcdDevice=a0.a7 [ 603.657436][ T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.685862][ T988] usb 4-1: config 0 descriptor?? [ 603.693677][T12544] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 603.951647][ T5708] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 603.977154][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'. [ 604.047762][T12544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.067841][T12544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.125767][ T5708] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 604.148685][ T5708] usb 1-1: config 2 has no interface number 0 [ 604.177368][ T5708] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 604.214884][ T5708] usb 1-1: config 2 interface 79 altsetting 13 endpoint 0x82 has invalid wMaxPacketSize 0 [ 604.227298][T12571] libceph: resolve '0..' (ret=-3): failed [ 604.274442][ T5708] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 0 [ 604.350527][ T5708] usb 1-1: config 2 interface 79 has no altsetting 0 [ 604.427915][ T5708] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 604.502967][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.567293][ T5708] usb 1-1: Product: syz [ 604.605302][ T5708] usb 1-1: Manufacturer: syz [ 604.645848][ T5708] usb 1-1: SerialNumber: syz [ 604.791749][T12558] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 606.507902][ T5708] esd_usb 1-1:2.79: sending version message failed [ 606.519704][T12580] nfs4: Unknown parameter 'no' [ 606.552553][ T5708] esd_usb 1-1:2.79: probe with driver esd_usb failed with error -71 [ 606.597094][ T5708] usb 1-1: USB disconnect, device number 48 [ 606.649752][ T5815] usb 4-1: USB disconnect, device number 56 [ 606.968255][T12578] Scaler: ================= START STATUS ================= [ 607.002716][T12578] Scaler: ================== END STATUS ================== [ 607.564942][T12605] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 607.628370][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 608.111931][ T5815] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 608.238514][T12616] comedi comedi3: comedi_config --init_data is deprecated [ 608.450753][ T5815] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 608.487098][ T5815] usb 5-1: config 2 has no interface number 0 [ 608.501692][ T5815] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 608.620003][ T5815] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 608.649005][ T5815] usb 5-1: config 2 interface 79 has no altsetting 0 [ 608.673477][ T5815] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 608.694405][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.723588][ T5815] usb 5-1: Product: syz [ 608.737987][ T5815] usb 5-1: Manufacturer: syz [ 608.752870][ T5815] usb 5-1: SerialNumber: syz [ 608.784405][T12613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 608.810400][T12613] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.013856][T12629] xt_ecn: cannot match TCP bits for non-tcp packets [ 609.193585][T12634] libceph: resolve '0..' (ret=-3): failed [ 609.226153][ T5815] esd_usb 5-1:2.79: sending version message failed [ 609.316147][ T5815] esd_usb 5-1:2.79: probe with driver esd_usb failed with error -71 [ 609.765809][ T5815] usb 5-1: USB disconnect, device number 47 [ 611.004056][ T988] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 611.163990][ T988] usb 4-1: device descriptor read/64, error -71 [ 611.452658][ T988] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 611.602661][T12639] Scaler: ================= START STATUS ================= [ 611.620393][ T988] usb 4-1: device descriptor read/64, error -71 [ 611.629212][T12639] Scaler: ================== END STATUS ================== [ 611.732387][ T988] usb usb4-port1: attempt power cycle [ 612.073993][ T988] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 612.109063][T12648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 612.119614][ T988] usb 4-1: device descriptor read/8, error -71 [ 612.133532][T12648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'. [ 612.225247][ T5815] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 612.362314][ T988] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 612.394502][ T5815] usb 3-1: config 2 has an invalid interface number: 79 but max is 0 [ 612.406233][ T988] usb 4-1: device descriptor read/8, error -71 [ 612.413141][ T5815] usb 3-1: config 2 has no interface number 0 [ 612.419430][ T5815] usb 3-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 612.430598][ T5815] usb 3-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 612.451708][ T5815] usb 3-1: config 2 interface 79 has no altsetting 0 [ 612.461479][ T5815] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 612.470992][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.479481][ T5815] usb 3-1: Product: syz [ 612.495657][ T5815] usb 3-1: Manufacturer: syz [ 612.507558][ T5815] usb 3-1: SerialNumber: syz [ 612.522589][ T988] usb usb4-port1: unable to enumerate USB device [ 612.531371][T12646] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 612.549461][T12646] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 612.590801][T12666] zonefs (nullb0) ERROR: Not a zoned block device [ 612.598148][ T30] audit: type=1400 audit(1778554335.174:676): avc: denied { shutdown } for pid=12659 comm="syz.4.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 612.734894][ T5614] Bluetooth: hci3: unexpected event for opcode 0x0c13 [ 612.784112][ T5815] esd_usb 3-1:2.79: sending version message failed [ 612.802250][ T5815] esd_usb 3-1:2.79: probe with driver esd_usb failed with error -71 [ 612.823578][ T5815] usb 3-1: USB disconnect, device number 67 [ 613.490583][ T30] audit: type=1400 audit(1778554336.044:677): avc: denied { accept } for pid=12672 comm="syz.1.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 613.666851][ T30] audit: type=1400 audit(1778554336.064:678): avc: denied { read } for pid=12672 comm="syz.1.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 613.996876][ T30] audit: type=1400 audit(1778554336.344:679): avc: denied { append } for pid=12677 comm="syz.0.1728" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 614.038539][ T30] audit: type=1400 audit(1778554336.454:680): avc: denied { listen } for pid=12677 comm="syz.0.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 614.124655][T12685] libceph: resolve '0..' (ret=-3): failed [ 615.703115][T12691] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 615.709655][T12691] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 615.804665][T12691] vhci_hcd vhci_hcd.0: Device attached [ 615.924763][ T30] audit: type=1400 audit(1778554338.504:681): avc: denied { create } for pid=12690 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 615.970256][ T30] audit: type=1400 audit(1778554338.544:682): avc: denied { getopt } for pid=12690 comm="syz.0.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 615.971782][ T5612] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 616.202296][ T5612] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 616.519599][T12692] vhci_hcd: connection reset by peer [ 616.533887][ T6823] vhci_hcd vhci_hcd.0: stop threads [ 616.582005][ T6823] vhci_hcd vhci_hcd.0: release socket [ 616.597444][ T6823] vhci_hcd vhci_hcd.0: disconnect device [ 618.763529][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 618.769899][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.979727][T12722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.462746][ T5804] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 619.633277][ T5804] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 619.664927][ T5804] usb 4-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 619.672692][ T5815] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 619.898959][ T5804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 619.920728][T12737] libceph: resolve '0..' (ret=-3): failed [ 619.949299][ T5804] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.028598][ T5804] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 620.110196][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 620.171847][ T5804] usb 4-1: Product: syz [ 620.248845][ T5804] usb 4-1: Manufacturer: syz [ 620.556971][ T5804] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 620.928375][ T5804] usb 4-1: USB disconnect, device number 61 [ 621.403933][ T5612] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 621.461699][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 621.480234][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.504551][ T5815] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.533078][ T5815] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 621.547643][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.567085][ T5815] usb 5-1: config 0 descriptor?? [ 621.845643][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1746'. [ 622.327227][T12744] trusted_key: encrypted_key: key user:syz not found [ 623.012865][ T5815] usbhid 5-1:0.0: can't add hid device: -71 [ 623.036682][ T5815] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 623.056429][ T5815] usb 5-1: USB disconnect, device number 48 [ 623.139648][ T30] audit: type=1400 audit(1778554345.714:683): avc: denied { wake_alarm } for pid=12765 comm="syz.1.1750" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 623.164634][ T5729] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 623.271336][T12777] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1751'. [ 623.282803][ T30] audit: type=1400 audit(1778554345.864:684): avc: denied { write } for pid=12758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.366439][ T30] audit: type=1400 audit(1778554345.944:685): avc: denied { write } for pid=12783 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.485725][ T5729] usb 4-1: unable to get BOS descriptor or descriptor too short [ 623.519865][ T5729] usb 4-1: not running at top speed; connect to a high speed hub [ 623.558540][ T5729] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 623.606774][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.638895][ T5729] usb 4-1: Product: syz [ 623.652705][ T5729] usb 4-1: Manufacturer: syz [ 623.662392][ T5729] usb 4-1: SerialNumber: syz [ 623.755777][ T30] audit: type=1400 audit(1778554346.334:686): avc: denied { create } for pid=12800 comm="syz.0.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 624.066411][ T30] audit: type=1400 audit(1778554346.644:687): avc: denied { mount } for pid=12808 comm="syz.0.1759" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 624.137008][ T30] audit: type=1400 audit(1778554346.714:688): avc: denied { watch } for pid=12808 comm="syz.0.1759" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 624.183599][ T30] audit: type=1400 audit(1778554346.714:689): avc: denied { watch_sb watch_reads } for pid=12808 comm="syz.0.1759" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 624.246715][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 624.264407][ T30] audit: type=1400 audit(1778554346.744:690): avc: denied { write } for pid=12787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.693667][ T30] audit: type=1400 audit(1778554346.884:691): avc: denied { read } for pid=5721 comm="kworker/1:5" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45976 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 625.048473][ T30] audit: type=1400 audit(1778554347.304:692): avc: denied { write } for pid=12818 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.826933][ T5729] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 625.905281][ T5729] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 625.962863][ T5729] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 625.982202][T12834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1763'. [ 627.561773][T11706] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 627.637496][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 627.654399][ T5729] usb 4-1: USB disconnect, device number 62 [ 627.787181][T11706] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.926487][T11706] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 627.947774][ T8027] udevd[8027]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 627.989441][T11706] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 628.037384][T11706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.073554][T12837] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 628.106511][T11706] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 628.351029][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 628.351044][ T30] audit: type=1400 audit(1778554350.924:694): avc: denied { getopt } for pid=12855 comm="syz.1.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 628.383074][ T30] audit: type=1400 audit(1778554350.964:695): avc: denied { read } for pid=12855 comm="syz.1.1771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 628.507682][T12859] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 628.697233][T12870] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 628.699302][ T30] audit: type=1400 audit(1778554351.274:696): avc: denied { write } for pid=12850 comm="syz.4.1770" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 628.699325][T12870] random: crng reseeded on system resumption [ 628.699347][ T30] audit: type=1400 audit(1778554351.274:697): avc: denied { open } for pid=12850 comm="syz.4.1770" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 628.787114][ T5614] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 629.756046][T12888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.487739][T11706] usb 1-1: USB disconnect, device number 49 [ 630.489727][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1781'. [ 630.690284][T12897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1782'. [ 631.035645][T12906] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1784'. [ 631.253268][T12909] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.311659][T11706] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 631.473294][T11706] usb 1-1: Using ep0 maxpacket: 16 [ 631.484871][T11706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 631.499425][T11706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 631.510977][T11706] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 631.524485][T11706] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 631.534101][T11706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.555810][T11706] usb 1-1: config 0 descriptor?? [ 631.592499][T12906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 631.851769][ T5708] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 632.015923][ T5708] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 632.033834][T12906] netlink: 'syz.0.1784': attribute type 21 has an invalid length. [ 632.049240][ T5708] usb 5-1: config 2 has no interface number 0 [ 632.061659][T12906] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1784'. [ 632.075149][ T5708] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 632.091855][T12906] netlink: 'syz.0.1784': attribute type 4 has an invalid length. [ 632.105916][ T5708] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 632.126253][T12906] netlink: 'syz.0.1784': attribute type 5 has an invalid length. [ 632.132358][ T5708] usb 5-1: config 2 interface 79 has no altsetting 0 [ 632.136026][T11706] hid_parser_main: 73 callbacks suppressed [ 632.136044][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x2 [ 632.156309][T12906] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1784'. [ 632.181379][ T5708] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 632.196027][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.217239][ T5708] usb 5-1: Product: syz [ 632.224654][ T5708] usb 5-1: Manufacturer: syz [ 632.226021][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.236640][ T5708] usb 5-1: SerialNumber: syz [ 632.262018][T12912] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 632.279523][T12912] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 632.287988][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.310187][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.331877][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.349125][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.366686][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1788'. [ 632.377779][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.394378][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.408966][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.423589][T11706] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 632.458359][T11706] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000C/input/input23 [ 632.523179][ T5708] esd_usb 5-1:2.79: sending version message failed [ 632.531698][ T5708] esd_usb 5-1:2.79: probe with driver esd_usb failed with error -71 [ 632.570195][ T5708] usb 5-1: USB disconnect, device number 49 [ 632.649579][T11706] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 632.678754][T11706] usb 1-1: USB disconnect, device number 50 [ 632.803896][T12927] fido_id[12927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 632.942305][ T988] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 632.967008][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1794'. [ 633.103452][ T988] usb 4-1: config 2 has an invalid interface number: 79 but max is 0 [ 633.112843][ T988] usb 4-1: config 2 has no interface number 0 [ 633.120760][ T988] usb 4-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 633.149513][ T988] usb 4-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 633.173279][ T988] usb 4-1: config 2 interface 79 has no altsetting 0 [ 633.184907][ T988] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 633.194932][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.205046][ T988] usb 4-1: Product: syz [ 633.210538][ T988] usb 4-1: Manufacturer: syz [ 633.216500][ T988] usb 4-1: SerialNumber: syz [ 633.230506][T12924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.239533][T12924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 633.292851][T12940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.500746][ T988] esd_usb 4-1:2.79: sending version message failed [ 633.510860][ T988] esd_usb 4-1:2.79: probe with driver esd_usb failed with error -71 [ 633.536118][ T988] usb 4-1: USB disconnect, device number 63 [ 635.491775][T11706] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 635.884718][T11706] usb 4-1: Using ep0 maxpacket: 16 [ 636.723987][T11706] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 636.733229][T11706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.741294][T11706] usb 4-1: Product: syz [ 636.779895][T11706] usb 4-1: Manufacturer: syz [ 636.784992][T11706] usb 4-1: SerialNumber: syz [ 636.792096][T11706] usb 4-1: config 0 descriptor?? [ 636.800266][T11706] gspca_main: spca508-2.14.0 probing 041e:4018 [ 637.131468][T12998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.226900][T11706] gspca_spca508: reg_read err -71 [ 637.379655][ T5721] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 637.393339][T11706] gspca_spca508: reg_read err -71 [ 637.405132][T11706] gspca_spca508: reg_read err -71 [ 637.418538][T11706] gspca_spca508: reg_read err -71 [ 637.427981][T11706] gspca_spca508: reg write: error -71 [ 637.436196][T11706] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 637.468579][T11706] usb 4-1: USB disconnect, device number 64 [ 637.570392][ T5721] usb 1-1: config 0 has no interfaces? [ 637.585923][ T5721] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 637.603249][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.618153][ T5721] usb 1-1: config 0 descriptor?? [ 637.820366][T13010] FAULT_INJECTION: forcing a failure. [ 637.820366][T13010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.833749][T13010] CPU: 1 UID: 0 PID: 13010 Comm: syz.4.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.833776][T13010] Tainted: [L]=SOFTLOCKUP [ 637.833782][T13010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.833791][T13010] Call Trace: [ 637.833797][T13010] [ 637.833803][T13010] dump_stack_lvl+0x100/0x190 [ 637.833831][T13010] should_fail_ex.cold+0x5/0xa [ 637.833856][T13010] _copy_from_iter+0x1f4/0x1690 [ 637.833884][T13010] ? __asan_memset+0x23/0x50 [ 637.833909][T13010] ? __pfx__copy_from_iter+0x10/0x10 [ 637.833932][T13010] ? __pfx___alloc_skb+0x10/0x10 [ 637.833958][T13010] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 637.833990][T13010] netlink_sendmsg+0x808/0xda0 [ 637.834018][T13010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.834037][T13010] ? __might_fault+0x50/0x140 [ 637.834080][T13010] ____sys_sendmsg+0x9e1/0xb70 [ 637.834099][T13010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.834122][T13010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.834153][T13010] ___sys_sendmsg+0x190/0x1e0 [ 637.834176][T13010] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.834226][T13010] __sys_sendmsg+0x170/0x220 [ 637.834243][T13010] ? __pfx___sys_sendmsg+0x10/0x10 [ 637.834269][T13010] ? rcu_is_watching+0x12/0xc0 [ 637.834297][T13010] do_syscall_64+0x10b/0xf80 [ 637.834320][T13010] ? clear_bhb_loop+0x40/0x90 [ 637.834341][T13010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.834358][T13010] RIP: 0033:0x7faa1079cdd9 [ 637.834373][T13010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.834388][T13010] RSP: 002b:00007faa11576028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.834404][T13010] RAX: ffffffffffffffda RBX: 00007faa10a15fa0 RCX: 00007faa1079cdd9 [ 637.834415][T13010] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 637.834424][T13010] RBP: 00007faa11576090 R08: 0000000000000000 R09: 0000000000000000 [ 637.834433][T13010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.834443][T13010] R13: 00007faa10a16038 R14: 00007faa10a15fa0 R15: 00007fff79dde798 [ 637.834466][T13010] [ 637.837065][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.078071][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.164087][T12991] netlink: 'syz.0.1812': attribute type 25 has an invalid length. [ 638.187189][T11706] usb 1-1: USB disconnect, device number 51 [ 638.923893][T13033] netlink: 'syz.1.1827': attribute type 6 has an invalid length. [ 638.953510][T13033] netlink: 'syz.1.1827': attribute type 6 has an invalid length. [ 639.349806][T13042] binder: 13041:13042 ioctl c0306201 0 returned -14 [ 639.379125][T13042] binder: 13041:13042 ioctl c0306201 200000000140 returned -11 [ 639.521387][T13042] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1830'. [ 641.490686][T13071] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1835'. [ 641.981444][ T5612] libceph: connect (1)[c::]:6789 error -101 [ 641.988743][ T5612] libceph: mon0 (1)[c::]:6789 connect error [ 642.000691][ T5612] libceph: connect (1)[c::]:6789 error -101 [ 642.006831][T11706] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 642.023934][ T5612] libceph: mon0 (1)[c::]:6789 connect error [ 642.048378][T13071] ceph: No mds server is up or the cluster is laggy [ 642.243021][T11706] usb 1-1: config 2 has an invalid interface number: 79 but max is 0 [ 642.253747][T11706] usb 1-1: config 2 has no interface number 0 [ 642.268102][T11706] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 642.305664][T11706] usb 1-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 642.332410][T11706] usb 1-1: config 2 interface 79 has no altsetting 0 [ 642.360017][T11706] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 642.369506][T11706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.401721][T11706] usb 1-1: Product: syz [ 642.421888][T11706] usb 1-1: Manufacturer: syz [ 642.435400][T11706] usb 1-1: SerialNumber: syz [ 642.507819][T13082] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1839'. [ 643.314328][T13086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=13086 comm=syz.2.1842 [ 643.426833][T13064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 643.454383][T13064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 643.550319][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 643.793435][T13095] fuse: Unknown parameter 'nfsd' [ 644.423720][T13099] nfs4: Unknown parameter '' [ 644.430049][T13099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1843'. [ 644.872650][T11706] esd_usb 1-1:2.79: sending version message failed [ 644.906989][T11706] esd_usb 1-1:2.79: probe with driver esd_usb failed with error -71 [ 644.917855][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1846'. [ 644.978569][T11706] usb 1-1: USB disconnect, device number 52 [ 645.202842][T13107] libceph: resolve '0..' (ret=-3): failed [ 647.015849][T13120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=13120 comm=syz.1.1852 [ 647.281008][ T30] audit: type=1400 audit(1778554369.734:698): avc: denied { setopt } for pid=13121 comm="syz.2.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 647.901686][ T5721] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 648.065933][ T5721] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 648.093318][ T5721] usb 4-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 648.120937][ T5721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 648.136657][ T5721] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.484053][ T5721] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 648.513884][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 648.558520][ T5721] usb 4-1: Product: syz [ 648.574009][ T5721] usb 4-1: Manufacturer: syz [ 648.603292][ T5721] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 648.649015][T13152] 9p: Bad value for 'wfdno' [ 648.775696][T13154] fuse: Unknown parameter 'nfsd' [ 648.911386][T13156] nfs4: Unknown parameter '' [ 648.924518][T13156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1862'. [ 649.215115][ T5729] usb 4-1: USB disconnect, device number 65 [ 649.452288][T13148] Scaler: ================= START STATUS ================= [ 649.471709][T13148] Scaler: ================== END STATUS ================== [ 650.671764][T13161] syzkaller0: entered promiscuous mode [ 650.692168][T13161] syzkaller0: entered allmulticast mode [ 651.269959][ T988] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 651.555976][ T988] usb 4-1: config 2 has an invalid interface number: 79 but max is 0 [ 651.556004][ T988] usb 4-1: config 2 has no interface number 0 [ 651.556037][ T988] usb 4-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 651.556059][ T988] usb 4-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 651.556081][ T988] usb 4-1: config 2 interface 79 has no altsetting 0 [ 651.557854][ T988] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 651.557880][ T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.557897][ T988] usb 4-1: Product: syz [ 651.557911][ T988] usb 4-1: Manufacturer: syz [ 651.557924][ T988] usb 4-1: SerialNumber: syz [ 651.565496][T13174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.565580][T13174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 653.410167][T13195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1871'. [ 653.919574][ T988] esd_usb 4-1:2.79: sending version message failed [ 653.936427][ T988] esd_usb 4-1:2.79: probe with driver esd_usb failed with error -71 [ 653.976161][ T988] usb 4-1: USB disconnect, device number 66 [ 654.000448][T13201] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 654.037649][T13201] CIFS mount error: No usable UNC path provided in device string! [ 654.037649][T13201] [ 654.361468][T13201] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 654.489127][T13206] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1874'. [ 654.621657][ T988] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 654.784908][ T988] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 654.820286][ T988] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 654.867376][ T988] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 654.890408][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.933424][T13201] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 654.973189][ T988] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.134422][ T30] audit: type=1400 audit(1778554377.704:699): avc: denied { watch } for pid=13216 comm="syz.1.1877" path="/378" dev="tmpfs" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 655.281951][ T988] usb 1-1: USB disconnect, device number 53 [ 655.701628][ T5804] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 655.873234][ T5804] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 655.906414][ T5804] usb 2-1: config 1 has an invalid descriptor of length 234, skipping remainder of the config [ 655.981856][ T5804] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 656.045251][ T5804] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 656.076590][ T5804] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 656.089475][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 656.124791][ T5804] usb 2-1: Product: syz [ 656.146115][ T5804] usb 2-1: Manufacturer: syz [ 656.173939][ T5804] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 657.275916][T13236] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1883'. [ 658.766517][ T5721] usb 2-1: USB disconnect, device number 59 [ 658.940170][T13245] comedi comedi3: No hardware detected at I/O base 0x3c4 [ 659.011635][ T5804] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 659.731752][ T5804] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 660.463917][ T5804] usb 5-1: config 2 has no interface number 0 [ 660.471182][ T5804] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 660.485313][ T5804] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 660.495741][ T5804] usb 5-1: config 2 interface 79 has no altsetting 0 [ 660.504836][ T5804] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 660.515594][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.523647][ T5804] usb 5-1: Product: syz [ 660.527813][ T5804] usb 5-1: Manufacturer: syz [ 660.532484][ T5804] usb 5-1: SerialNumber: syz [ 660.543050][T13238] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 660.550346][T13238] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 660.711894][T13257] fuse: Unknown parameter 'nfsd' [ 660.838703][T13260] nfs4: Unknown parameter '' [ 660.847595][T13260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 661.843023][ T5804] esd_usb 5-1:2.79: sending version message failed [ 661.849807][ T5804] esd_usb 5-1:2.79: probe with driver esd_usb failed with error -71 [ 661.897876][ T5804] usb 5-1: USB disconnect, device number 50 [ 662.306931][T13270] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1893'. [ 662.462600][T13249] Scaler: ================= START STATUS ================= [ 662.491752][T13249] Scaler: ================== END STATUS ================== [ 662.524107][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 662.540131][T13279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13279 comm=syz.2.1896 [ 662.683971][T13282] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1897'. [ 662.711690][ T5804] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 662.889196][ T5804] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 663.008104][ T5804] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 663.085028][ T5804] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.135509][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.249316][T13277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 663.468038][ T5804] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 664.936324][T13301] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1901'. [ 665.592446][ T5708] usb 5-1: USB disconnect, device number 51 [ 667.312099][ T5804] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 667.334575][T13329] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1909'. [ 667.472108][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 667.493499][ T5804] usb 2-1: config 1 interface 0 altsetting 24 bulk endpoint 0x82 has invalid maxpacket 64 [ 667.529277][ T5804] usb 2-1: config 1 interface 0 altsetting 24 bulk endpoint 0x3 has invalid maxpacket 64 [ 667.568367][ T5804] usb 2-1: config 1 interface 0 has no altsetting 0 [ 667.592734][ T5804] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 667.613414][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.638178][ T5804] usb 2-1: Product: syz [ 667.652274][ T5804] usb 2-1: Manufacturer: І [ 667.667662][ T5804] usb 2-1: SerialNumber: syz [ 667.691384][T13325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 667.710779][T13325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 667.994668][ T5804] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 668.035096][ T5804] usb 2-1: USB disconnect, device number 60 [ 668.366949][T13338] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1912'. [ 668.387053][T13334] Scaler: ================= START STATUS ================= [ 668.398292][T13334] Scaler: ================== END STATUS ================== [ 668.727966][T13348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1915'. [ 668.943756][T13359] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 669.098523][ T5804] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 669.238867][T13359] 8021q: adding VLAN 0 to HW filter on device bond8 [ 669.383091][ T5804] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 669.481651][ T5804] usb 5-1: config 2 has no interface number 0 [ 669.492266][ T5804] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 669.493029][T13367] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1920'. [ 669.502953][ T5804] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 669.938522][ T5804] usb 5-1: config 2 interface 79 has no altsetting 0 [ 669.947171][ T5804] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 669.956301][ T5804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.969207][ T5804] usb 5-1: Product: syz [ 669.988416][ T5804] usb 5-1: Manufacturer: syz [ 670.001263][ T5804] usb 5-1: SerialNumber: syz [ 670.018272][T13354] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 670.052100][T13354] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 670.331739][ T988] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 670.358920][ T5804] esd_usb 5-1:2.79: sending version message failed [ 670.464380][ T5804] esd_usb 5-1:2.79: probe with driver esd_usb failed with error -71 [ 670.477623][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 670.497017][ T5804] usb 5-1: USB disconnect, device number 52 [ 670.898441][ T988] usb 2-1: config 2 has an invalid interface number: 79 but max is 0 [ 670.906616][ T988] usb 2-1: config 2 has no interface number 0 [ 670.913189][ T988] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 670.923728][ T988] usb 2-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 670.934173][ T988] usb 2-1: config 2 interface 79 has no altsetting 0 [ 670.943826][ T988] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 671.045216][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.059560][ T988] usb 2-1: Product: syz [ 671.069527][ T988] usb 2-1: Manufacturer: syz [ 671.085974][ T988] usb 2-1: SerialNumber: syz [ 671.101048][T13374] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 671.530114][T13374] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 671.868068][ T988] esd_usb 2-1:2.79: sending version message failed [ 671.882209][ T988] esd_usb 2-1:2.79: probe with driver esd_usb failed with error -71 [ 671.914088][ T988] usb 2-1: USB disconnect, device number 61 [ 671.985761][T13394] Scaler: ================= START STATUS ================= [ 671.993257][T13394] Scaler: ================== END STATUS ================== [ 672.700389][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1929'. [ 673.943704][ T5804] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 674.111656][ T5804] usb 4-1: Using ep0 maxpacket: 16 [ 674.131632][T11706] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 674.146231][ T30] audit: type=1400 audit(1778554396.724:700): avc: denied { remount } for pid=13436 comm="syz.1.1938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 674.146943][ T5804] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 674.237179][T13437] capability: warning: `syz.1.1938' uses deprecated v2 capabilities in a way that may be insecure [ 674.276908][ T5804] usb 4-1: config 0 has no interface number 0 [ 674.298635][ T5804] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.337717][T11706] usb 5-1: config 2 has an invalid interface number: 79 but max is 0 [ 674.348457][T11706] usb 5-1: config 2 has no interface number 0 [ 674.407461][ T5804] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.422560][T11706] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 674.434223][T13446] overlayfs: failed to clone upperpath [ 674.446977][ T5804] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 674.467749][T11706] usb 5-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 255 [ 674.486053][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.494363][T11706] usb 5-1: config 2 interface 79 has no altsetting 0 [ 674.506284][ T5804] usb 4-1: config 0 descriptor?? [ 674.514519][T11706] usb 5-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 674.529857][T11706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.538245][T11706] usb 5-1: Product: syz [ 674.542710][T11706] usb 5-1: Manufacturer: syz [ 674.548103][T11706] usb 5-1: SerialNumber: syz [ 674.579880][T13431] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 674.608714][T13431] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 674.842110][ T988] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 674.899073][T11706] esd_usb 5-1:2.79: sending version message failed [ 674.911036][T11706] esd_usb 5-1:2.79: probe with driver esd_usb failed with error -71 [ 674.934513][T11706] usb 5-1: USB disconnect, device number 53 [ 674.992867][ T988] usb 2-1: Using ep0 maxpacket: 16 [ 675.010229][ T988] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 675.033739][ T988] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 675.058435][ T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.069380][ T988] usb 2-1: Product: syz [ 675.077219][ T988] usb 2-1: Manufacturer: syz [ 675.082729][ T988] usb 2-1: SerialNumber: syz [ 675.095709][ T988] r8152-cfgselector 2-1: Unknown version 0x0000 [ 675.105042][ T988] r8152-cfgselector 2-1: config 0 descriptor?? [ 675.170390][ T5804] uclogic 0003:28BD:0071.000D: pen parameters not found [ 675.181452][ T5804] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 675.203800][ T5804] usb 4-1: USB disconnect, device number 67 [ 675.894903][ T30] audit: type=1400 audit(1778554398.314:701): avc: denied { setopt } for pid=13451 comm="syz.1.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 676.489485][ T30] audit: type=1400 audit(1778554398.314:702): avc: denied { write } for pid=13451 comm="syz.1.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 676.741653][T13483] libceph: resolve '0..' (ret=-3): failed [ 677.112285][T13485] Scaler: ================= START STATUS ================= [ 677.120041][T13485] Scaler: ================== END STATUS ================== [ 677.647130][ T988] r8152-cfgselector 2-1: Unknown version 0x0000 [ 677.882369][ T988] r8152-cfgselector 2-1: No union descriptors [ 677.926775][ T988] r8152-cfgselector 2-1: USB disconnect, device number 62 [ 678.121316][T13500] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1959'. [ 679.346820][T13540] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1972'. [ 679.421630][ T5729] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 679.448352][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 679.574800][ T5729] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 679.585223][ T5729] usb 1-1: config 0 has no interface number 0 [ 679.591330][ T5729] usb 1-1: config 0 interface 41 has no altsetting 0 [ 679.651215][ T5729] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 679.660603][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.670013][ T5729] usb 1-1: Product: syz [ 679.674304][ T5729] usb 1-1: Manufacturer: syz [ 679.676890][T13547] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1973'. [ 679.688823][ T5729] usb 1-1: SerialNumber: syz [ 679.696845][ T5729] usb 1-1: config 0 descriptor?? [ 679.870896][T13553] libceph: resolve '0..' (ret=-3): failed [ 679.914062][T13533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.925487][T13533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.004281][T13556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1977'. [ 680.171078][ T5729] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 680.183943][ T5729] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 680.205343][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 680.212136][ T5729] usb 1-1: USB disconnect, device number 54 [ 680.218056][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.842328][T11259] Bluetooth: hci5: command 0x1003 tx timeout [ 680.846710][ T5614] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 681.951223][T13577] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1983'. [ 682.626758][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 684.030671][T13627] ------------[ cut here ]------------ [ 684.038219][T13627] 1 [ 684.038231][T13627] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2b/0x150, CPU#0: syz.1.1999/13627 [ 684.049960][T13627] Modules linked in: [ 684.055769][T13627] CPU: 0 UID: 0 PID: 13627 Comm: syz.1.1999 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.066781][T13627] Tainted: [L]=SOFTLOCKUP [ 684.071108][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.081222][T13627] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 684.086225][T13627] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc e1 19 f8 66 90 e8 b5 e1 19 f8 ba 02 00 00 00 48 89 de 31 ff e8 16 25 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 d3 f5 9e 01 e8 8e e1 19 [ 684.105896][T13627] RSP: 0018:ffffc90008317380 EFLAGS: 00010293 [ 684.111990][T13627] RAX: 0000000000000000 RBX: ffff888028b1b8c0 RCX: 0000000000000004 [ 684.119965][T13627] RDX: ffff888067e90000 RSI: ffffffff895aeb64 RDI: ffffffff8c1c3800 [ 684.127999][T13627] RBP: ffff888028b1b8c0 R08: 0000000000000001 R09: 0000000000000000 [ 684.136045][T13627] R10: 0000000000000001 R11: ffffffff81000130 R12: ffff8880755d26c0 [ 684.144066][T13627] R13: ffff88801cb73480 R14: 0000000000000000 R15: ffff888028b1b918 [ 684.152080][T13627] FS: 00007f2c636696c0(0000) GS:ffff888124372000(0000) knlGS:0000000000000000 [ 684.161023][T13627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 684.167668][T13627] CR2: 00007f2c63668ff8 CR3: 000000003560d000 CR4: 00000000003526f0 [ 684.175690][T13627] Call Trace: [ 684.178970][T13627] [ 684.181928][T13627] ? __pfx_ip_rt_bug+0x10/0x10 [ 684.186708][T13627] ip_push_pending_frames+0x29e/0x300 [ 684.192147][T13627] icmp_push_reply+0x30e/0x450 [ 684.196932][T13627] __icmp_send+0x11b4/0x2c70 [ 684.201585][T13627] ? __pfx___icmp_send+0x10/0x10 [ 684.206539][T13627] ? __pfx_ip_route_input_slow+0x10/0x10 [ 684.212217][T13627] ? __lock_acquire+0x4a5/0x2630 [ 684.217189][T13627] ? __ip_options_compile+0x604/0x16a0 [ 684.222729][T13627] ? ip_route_input_noref+0x15f/0x2e0 [ 684.228177][T13627] ip_options_compile+0xb6/0x100 [ 684.233177][T13627] ? __pfx_ip_options_compile+0x10/0x10 [ 684.238742][T13627] ? __pfx_ip_rcv_finish+0x10/0x10 [ 684.243931][T13627] ip_rcv_finish_core+0x693/0x2c30 [ 684.249087][T13627] ip_rcv+0x1c0/0x3c0 [ 684.253140][T13627] ? __pfx_ip_rcv+0x10/0x10 [ 684.257651][T13627] __netif_receive_skb_one_core+0x197/0x1e0 [ 684.263613][T13627] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 684.270039][T13627] ? lock_acquire+0x1b1/0x370 [ 684.274786][T13627] __netif_receive_skb+0x1f/0x120 [ 684.279823][T13627] netif_receive_skb+0x13b/0x7f0 [ 684.284827][T13627] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 684.290731][T13627] ? __pfx_netif_receive_skb+0x10/0x10 [ 684.296276][T13627] tun_rx_batched.isra.0+0x3f6/0x750 [ 684.301607][T13627] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 684.307470][T13627] ? rcu_is_watching+0x12/0xc0 [ 684.312310][T13627] ? tun_get_user+0x1cc8/0x3c20 [ 684.317182][T13627] tun_get_user+0x1e31/0x3c20 [ 684.321950][T13627] ? __pfx_tun_get_user+0x10/0x10 [ 684.327003][T13627] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 684.332545][T13627] ? find_held_lock+0x2b/0x80 [ 684.337237][T13627] ? tun_get+0x191/0x370 [ 684.341503][T13627] ? tun_get+0x191/0x370 [ 684.345817][T13627] tun_chr_write_iter+0xdc/0x200 [ 684.350779][T13627] vfs_write+0x6ac/0x1070 [ 684.355184][T13627] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 684.360760][T13627] ? __pfx_vfs_write+0x10/0x10 [ 684.365587][T13627] ? find_held_lock+0x2b/0x80 [ 684.370291][T13627] ksys_write+0x12a/0x250 [ 684.374692][T13627] ? __pfx_ksys_write+0x10/0x10 [ 684.379556][T13627] ? rcu_is_watching+0x12/0xc0 [ 684.384395][T13627] do_syscall_64+0x10b/0xf80 [ 684.388998][T13627] ? clear_bhb_loop+0x40/0x90 [ 684.393754][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.399657][T13627] RIP: 0033:0x7f2c6275d60e [ 684.404137][T13627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 684.423812][T13627] RSP: 002b:00007f2c63668fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 684.432285][T13627] RAX: ffffffffffffffda RBX: 00007f2c636696c0 RCX: 00007f2c6275d60e [ 684.440265][T13627] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 684.448305][T13627] RBP: 00007f2c62832d69 R08: 0000000000000000 R09: 0000000000000000 [ 684.456319][T13627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.464349][T13627] R13: 00007f2c62a16128 R14: 00007f2c62a16090 R15: 00007ffc3eeb4918 [ 684.472630][T13627] [ 684.475657][T13627] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 684.482940][T13627] CPU: 0 UID: 0 PID: 13627 Comm: syz.1.1999 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.493885][T13627] Tainted: [L]=SOFTLOCKUP [ 684.498197][T13627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.508238][T13627] Call Trace: [ 684.511503][T13627] [ 684.514433][T13627] dump_stack_lvl+0x100/0x190 [ 684.519098][T13627] vpanic+0x552/0x970 [ 684.523062][T13627] ? __pfx_vpanic+0x10/0x10 [ 684.527550][T13627] panic+0xd1/0xe0 [ 684.531255][T13627] ? __pfx_panic+0x10/0x10 [ 684.535657][T13627] ? check_panic_on_warn+0x1f/0x90 [ 684.540752][T13627] check_panic_on_warn.cold+0x19/0x34 [ 684.546106][T13627] ? ip_rt_bug+0x2b/0x150 [ 684.550423][T13627] __warn.cold+0x191/0x328 [ 684.554820][T13627] __report_bug+0x296/0x3d0 [ 684.559308][T13627] ? ip_rt_bug+0x2b/0x150 [ 684.563621][T13627] ? __pfx___report_bug+0x10/0x10 [ 684.568660][T13627] ? ip_rt_bug+0x2b/0x150 [ 684.572995][T13627] report_bug+0xb2/0x220 [ 684.577233][T13627] ? ip_rt_bug+0x2b/0x150 [ 684.581555][T13627] handle_bug+0x16a/0x2a0 [ 684.585880][T13627] exc_invalid_op+0x17/0x50 [ 684.590372][T13627] asm_exc_invalid_op+0x1a/0x20 [ 684.595204][T13627] RIP: 0010:ip_rt_bug+0x2b/0x150 [ 684.600130][T13627] Code: 0f 1e fa 41 54 55 53 48 89 d3 48 83 ec 08 e8 bc e1 19 f8 66 90 e8 b5 e1 19 f8 ba 02 00 00 00 48 89 de 31 ff e8 16 25 6c ff 90 <0f> 0b 90 48 83 c4 08 31 c0 5b 5d 41 5c e9 d3 f5 9e 01 e8 8e e1 19 [ 684.619730][T13627] RSP: 0018:ffffc90008317380 EFLAGS: 00010293 [ 684.625790][T13627] RAX: 0000000000000000 RBX: ffff888028b1b8c0 RCX: 0000000000000004 [ 684.633763][T13627] RDX: ffff888067e90000 RSI: ffffffff895aeb64 RDI: ffffffff8c1c3800 [ 684.641718][T13627] RBP: ffff888028b1b8c0 R08: 0000000000000001 R09: 0000000000000000 [ 684.649670][T13627] R10: 0000000000000001 R11: ffffffff81000130 R12: ffff8880755d26c0 [ 684.657618][T13627] R13: ffff88801cb73480 R14: 0000000000000000 R15: ffff888028b1b918 [ 684.665573][T13627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.671671][T13627] ? sk_skb_reason_drop+0x114/0x1b0 [ 684.676859][T13627] ? __pfx_ip_rt_bug+0x10/0x10 [ 684.681612][T13627] ip_push_pending_frames+0x29e/0x300 [ 684.686983][T13627] icmp_push_reply+0x30e/0x450 [ 684.691733][T13627] __icmp_send+0x11b4/0x2c70 [ 684.696318][T13627] ? __pfx___icmp_send+0x10/0x10 [ 684.701241][T13627] ? __pfx_ip_route_input_slow+0x10/0x10 [ 684.706860][T13627] ? __lock_acquire+0x4a5/0x2630 [ 684.711805][T13627] ? __ip_options_compile+0x604/0x16a0 [ 684.717262][T13627] ? ip_route_input_noref+0x15f/0x2e0 [ 684.722617][T13627] ip_options_compile+0xb6/0x100 [ 684.727536][T13627] ? __pfx_ip_options_compile+0x10/0x10 [ 684.733063][T13627] ? __pfx_ip_rcv_finish+0x10/0x10 [ 684.738162][T13627] ip_rcv_finish_core+0x693/0x2c30 [ 684.743262][T13627] ip_rcv+0x1c0/0x3c0 [ 684.747228][T13627] ? __pfx_ip_rcv+0x10/0x10 [ 684.751718][T13627] __netif_receive_skb_one_core+0x197/0x1e0 [ 684.757598][T13627] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 684.764268][T13627] ? lock_acquire+0x1b1/0x370 [ 684.768935][T13627] __netif_receive_skb+0x1f/0x120 [ 684.773948][T13627] netif_receive_skb+0x13b/0x7f0 [ 684.778879][T13627] ? tun_build_skb.constprop.0+0x9b5/0x18f0 [ 684.784762][T13627] ? __pfx_netif_receive_skb+0x10/0x10 [ 684.790220][T13627] tun_rx_batched.isra.0+0x3f6/0x750 [ 684.795501][T13627] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 684.801299][T13627] ? rcu_is_watching+0x12/0xc0 [ 684.806050][T13627] ? tun_get_user+0x1cc8/0x3c20 [ 684.810900][T13627] tun_get_user+0x1e31/0x3c20 [ 684.815601][T13627] ? __pfx_tun_get_user+0x10/0x10 [ 684.820645][T13627] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 684.826111][T13627] ? find_held_lock+0x2b/0x80 [ 684.830779][T13627] ? tun_get+0x191/0x370 [ 684.835008][T13627] ? tun_get+0x191/0x370 [ 684.839242][T13627] tun_chr_write_iter+0xdc/0x200 [ 684.844177][T13627] vfs_write+0x6ac/0x1070 [ 684.848493][T13627] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 684.854037][T13627] ? __pfx_vfs_write+0x10/0x10 [ 684.858779][T13627] ? find_held_lock+0x2b/0x80 [ 684.863451][T13627] ksys_write+0x12a/0x250 [ 684.867770][T13627] ? __pfx_ksys_write+0x10/0x10 [ 684.872605][T13627] ? rcu_is_watching+0x12/0xc0 [ 684.877364][T13627] do_syscall_64+0x10b/0xf80 [ 684.881937][T13627] ? clear_bhb_loop+0x40/0x90 [ 684.886600][T13627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.892473][T13627] RIP: 0033:0x7f2c6275d60e [ 684.896871][T13627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 684.916471][T13627] RSP: 002b:00007f2c63668fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 684.924865][T13627] RAX: ffffffffffffffda RBX: 00007f2c636696c0 RCX: 00007f2c6275d60e [ 684.932818][T13627] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 684.940770][T13627] RBP: 00007f2c62832d69 R08: 0000000000000000 R09: 0000000000000000 [ 684.948719][T13627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.956758][T13627] R13: 00007f2c62a16128 R14: 00007f2c62a16090 R15: 00007ffc3eeb4918 [ 684.964718][T13627] [ 684.968140][T13627] Kernel Offset: disabled [ 684.972441][T13627] Rebooting in 86400 seconds..