last executing test programs: 11.616369384s ago: executing program 0 (id=769): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x6) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@redirect_dir_follow}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x5, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000480)=@usbdevfs_driver={0x7cee, 0x0, &(0x7f0000000540)="494f1efca20e60d5e8f5d8b0c9b0f8eabaa2c55777e129d852ce7820fe31b69ec91fa984c7023d960751441d9457ec95047655b67b0bcf9b326ce8d4279d56bd231ea5b41f3df78f8b4263e37cfd0f9a2e6b03fc27bbaf84b4046da161a95824facbc9f0d12728b5eed5ee110939d98fcf3d2ca5bd0d4790db01bed6891b6a7d8a9351338ca0f0543669b42defd4cb76c0527df3a5043d069995da0062f365ab4cd407217c72797724ab1e5b0c204b0d5a044b540d9669af1748f1aeb56f5ba55156cb5d7d39cfdae80a"}) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x2) r2 = socket$inet6(0xa, 0x80001, 0xfffffffe) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f00000003c0)={0x5, {{0xa, 0x0, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x119003) io_getevents(0x0, 0xffffffff, 0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c0, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0xfffffffc, 0xc625982674a91fa4) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_vif\x00') preadv(r0, &(0x7f0000001840), 0x0, 0x140, 0x8001) 8.106416841s ago: executing program 0 (id=778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='scalable', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 7.951604903s ago: executing program 3 (id=781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r6, 0x27}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="82", 0x1}], 0x1, 0x0, 0x0, 0x700}, 0x4040015) 7.950297521s ago: executing program 1 (id=782): socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2005, 0xed, 0x8, 0x80ffa, 0x4, 0x8, 0x8500, 0x102f, 0x1000004, 0xf, 0x9, 0xfff7ffa8, 0x7ffffffd, 0x1ff, 0x9ea, 0x3, 0xb, 0x8, 0x6, 0x1, 0x8, 0x5, 0x8, 0x8, 0x2000006, 0x7ffd]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r5, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 7.606176234s ago: executing program 0 (id=783): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x9}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r2}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x3a) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000080000000", @ANYRES32=0x1], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="00000000001d000800b70500000800000085000000a8000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 7.136586598s ago: executing program 3 (id=784): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000097ff8208582005109bc1000000010902120001000008000f048f0001bf575a00"], 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) (async, rerun: 32) r1 = socket(0x840000000002, 0x3, 0x100) (rerun: 32) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 32) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0xfffe) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) openat$dsp1(0xffffffffffffff9c, 0x0, 0x88a01, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 6.625858415s ago: executing program 1 (id=787): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff07000000000000000000008500000011000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000700000000000000008000008500000075f7a9009500000000f300007cf958a0b55ea80586abcc0560fb077d9a00bfa5d06a9c1f6e93a0a17dc8e4d35d5a5b510127f55239757b45a04e64ff9c54c927fac5d700dfee72484aa59a181cdf325572fc88fea756c8257be4681bb0dff85cd14989a24ccedd2c005e2c407fbef8917508ed9a7a85611f9f84fc205272d28343c635da0adfd40f"], 0x0, 0x7}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) readv(r1, &(0x7f0000000240)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) syz_usb_connect(0x4, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000f958000000000109021b00010000000009047800018fa68d000905bd3185dec507eb0dab0ccd632b68d6b4b6d497a4624909aa45ae7af6a9b6da6aa2c046b7248186f40b2bd2390961ba9a0d0a4426ffeee7dfeae8697fa153dd46b8992fb7c25a004a44d4321048138599464d626c3338f04c8bd8213a19bf4246b9541d12fd49bf304e3b4c0b583c5970db3966f283ce3032b346dfc0a18cec20ed54a403a7c6274656e8889e1e12b028631f671eb7a9addcba478cbe7bc026b08f1574ea8699f2b570703b6706a3e40af7a4d79d07cc0a40bc7394af573cf3a237e93c925f80d4fca0b40bda38880226df8676c5", @ANYRES16, @ANYRES16=r1], 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x24800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20004800) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x80, 0x40, 0xb83, 0x1, {{0x13, 0x4, 0x2, 0x3d, 0x4c, 0x65, 0x0, 0x7e, 0x29, 0x0, @private=0xa010104, @multicast1, {[@cipso={0x86, 0x2b, 0x3, [{0x7, 0x11, "35df5d12f2dcc5f63a7e1ad38f922e"}, {0x0, 0xc, "183657e1d6e11ef07063"}, {0x2, 0x8, "527fbd950907"}]}, @noop, @noop, @rr={0x7, 0x7, 0xe2, [@loopback]}, @noop, @end]}}}}}) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='ext2\x00', 0x800a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) 6.624468595s ago: executing program 3 (id=788): socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x100000000000, 0x0, 0x0, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x100]}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x100010, r5, 0x341a3000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r8, 0x0, r6}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000010000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002"], 0xa0}}, 0x0) 5.710764014s ago: executing program 4 (id=789): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000580)=0x1) close_range(r3, 0xffffffffffffffff, 0x100000000000000) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000150003"], 0xf0}}, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="382d17"], 0x6a) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r9 = dup(r8) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x8007}, {0xeb4, 0x8007}, 0x10000004, 0x7}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000100"/28], 0x50) creat(&(0x7f0000000700)='./file0\x00', 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000002000000000000000000000000000000000000000000000000001504b2f9cdc88bfbbf5aed6769ac4ff686956199d735ec1d227163ea9c2dc52f4a32b33324e21582d21e0300b7aa92481a9c33ee70a56e49c47247696e5cf97ccc1c8d7e8caede881b1b734edbb8503e0a442a937783a36f91b3f1074eb4bf37120500"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740), 0x40c002, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x2}}, './file0\x00'}) pipe2(&(0x7f0000000000), 0x80000) pipe2(&(0x7f0000000040), 0x80) 5.34333328s ago: executing program 0 (id=791): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x4, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x200, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x9}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r4}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r6, @ANYBLOB="1500040004000000030300"], 0x44}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000080000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="00000000001d000800b70500000800000085000000a8000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.423072397s ago: executing program 0 (id=793): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0xf, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31435641, 0x3, @discrete={0x5, 0x8}}) syz_usb_control_io$uac3(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x40, 0x7, 0xcc, {0xcc, 0x2, "fb4f136e22e8a6dd796612ef1105a9991ee60996a0f589c259594d4a9e000897e2477df852e9fed5b1ba229650115158afc3205b264d48d764f75a9859eb7120d94694073d0b3e0f2534727a67533653937e506a96a7cbb052551f8705a8734dbc7a26a789b852ac3f58231d01b6c5866592916a987f2e3e476aabd2a5760ff4d574e93e09ea7ebf1a696e8aec3389ac408259c25c16d51dbc395992f34c55b00ddb015f61a7cd010ea6ddf1903b7ae0c35fbb17fba036269b563d6bf6e4e5acb88d9ba3c46767fd9569"}}, &(0x7f0000000240)={0x0, 0x3, 0x33, @string={0x33, 0x3, "6ab370167f063455391369d12146b50a79f14403d73ee34a17b90da919f5b6f2ff84c444a2c9a2d6f91502bbeeea951455"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x20, 0xe, 0xe0, "7fb678da89fb933de7b7109eb019ebb910eb6ce625ec1444219a26b33ecdaf0f687e82975f48fbc752ad967c1d2e9402a90c5f45fc56219492706a8e3b4588c9494b36b0c90ede906325ade586a747220bf512f9eb5ecdf5981f9f2eec1634eb50ba5053e8e099510f2f79890861ac949f62d0d8633aaa8648afae4ddafc034a3ee54789a90e58f46c2c28ab2fc6cbe55ceb45f9abc6bc8b152b7c44da3b6abb3248647e1784f1c2d33b4d356fea01d6dafbfe8da8d782c89bc1c8d0b55d555a76ac94251d22f6249325e097804b7cef3d82122943c06f26f81b2f6b247abe57"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, "1c"}, &(0x7f0000000540)={0x20, 0x82, 0x2, "5c81"}, &(0x7f0000000580)={0x20, 0x83, 0x1, '\\'}, &(0x7f00000005c0)={0x20, 0x84, 0x1, '('}, &(0x7f0000000600)={0x20, 0x85, 0x3, "030ad2"}}) 4.101662986s ago: executing program 3 (id=795): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010000189d7db0400000000fcdb010000", @ANYRES32=0x0, @ANYBLOB="00000000c0010400280012800b000100697036746e6c0000180002801400020000000000000000000000ffffe000000108000300", @ANYRES32=r5, @ANYBLOB], 0x50}}, 0x24000840) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r6, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x8}}, 0x18) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x6669}, 0x8) 3.786772124s ago: executing program 3 (id=796): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), 0xffffffffffffffff) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) close(0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x20000, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xfffffffffffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.63915503s ago: executing program 4 (id=797): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ioprio_get$pid(0x1, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r5 = syz_open_procfs(r0, &(0x7f0000000080)='mountinfo\x00') pread64(r5, &(0x7f0000000140)=""/116, 0x74, 0x4) (async) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{0x9, 0xffffffff}, {0x6, 0x8}, 0x10, 0x1}) (async) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4118}, 0x1}) (async) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 2.796713531s ago: executing program 2 (id=798): r0 = socket$inet6(0xa, 0x1, 0x100) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x7fffffff, @empty, 0x5}, 0x1c) 2.690916545s ago: executing program 2 (id=799): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800200}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000110000000a000000090002008d"], 0x30}}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 2.646173049s ago: executing program 3 (id=800): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0xf, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31435641, 0x3, @discrete={0x5, 0x8}}) syz_usb_control_io$uac3(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x40, 0x7, 0xcc, {0xcc, 0x2, "fb4f136e22e8a6dd796612ef1105a9991ee60996a0f589c259594d4a9e000897e2477df852e9fed5b1ba229650115158afc3205b264d48d764f75a9859eb7120d94694073d0b3e0f2534727a67533653937e506a96a7cbb052551f8705a8734dbc7a26a789b852ac3f58231d01b6c5866592916a987f2e3e476aabd2a5760ff4d574e93e09ea7ebf1a696e8aec3389ac408259c25c16d51dbc395992f34c55b00ddb015f61a7cd010ea6ddf1903b7ae0c35fbb17fba036269b563d6bf6e4e5acb88d9ba3c46767fd9569"}}, &(0x7f0000000240)={0x0, 0x3, 0x33, @string={0x33, 0x3, "6ab370167f063455391369d12146b50a79f14403d73ee34a17b90da919f5b6f2ff84c444a2c9a2d6f91502bbeeea951455"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x20, 0xe, 0xe0, "7fb678da89fb933de7b7109eb019ebb910eb6ce625ec1444219a26b33ecdaf0f687e82975f48fbc752ad967c1d2e9402a90c5f45fc56219492706a8e3b4588c9494b36b0c90ede906325ade586a747220bf512f9eb5ecdf5981f9f2eec1634eb50ba5053e8e099510f2f79890861ac949f62d0d8633aaa8648afae4ddafc034a3ee54789a90e58f46c2c28ab2fc6cbe55ceb45f9abc6bc8b152b7c44da3b6abb3248647e1784f1c2d33b4d356fea01d6dafbfe8da8d782c89bc1c8d0b55d555a76ac94251d22f6249325e097804b7cef3d82122943c06f26f81b2f6b247abe57"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, "1c"}, &(0x7f0000000540)={0x20, 0x82, 0x2, "5c81"}, &(0x7f0000000580)={0x20, 0x83, 0x1, '\\'}, &(0x7f00000005c0)={0x20, 0x84, 0x1, '('}, &(0x7f0000000600)={0x20, 0x85, 0x3, "030ad2"}}) 2.634019972s ago: executing program 1 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000deffffffffffffff0000000000b0e589a8b261e99961652f5efbcc1b99569f0a300680a18d9839b1cf58e5b26bd6c68436ed969f5618c3e34db7632be8ee7327f28fba8df2146ffd615e22b36ee7665b65f3b8e0aa4c16ab4728d0e99b3f9e235e712e051e60543f8b8f9efbb97b9f20e6789f617dee24036956881b18843acecf05b1fa9b4a66a8d116a64e44f793a79c27510785d233784261854dc118d80dad", @ANYBLOB="38648e3d2b78a4fed3f1796c813991bca703a894abd04ed96580c56e441a40168a1bf7cea6bbcea04cbcc0b6", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) write(r2, &(0x7f0000000000)="f9", 0x1) read$FUSE(r2, &(0x7f0000003480)={0x2020, 0x0, 0x0}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00004000000000000080000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) ptrace(0x10, 0x1) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffe00}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2bd}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8008890}, 0x40000) ioprio_set$uid(0x3, 0xffffffffffffffff, 0x2004) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r10 = syz_ublk_setup_io_uring(0x80001d, &(0x7f0000000040)={0x0, 0x100000, 0x1, 0x3, 0x158, 0x0, r9}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r10, r11, r12, r13, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r9, r14, &(0x7f0000000540)={0x0, 0xd779, 0x0, 0x1, 0x1fffc}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20000002, 0x40, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf37, 0x80, 0xfffffffd, 0x69, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x0, 0x400000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x10, 0x3, 0x0, 0x0, r9}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x25) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x2251024, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) write$FUSE_INTERRUPT(r2, &(0x7f0000000100)={0x10, 0x0, r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.424428204s ago: executing program 1 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xf, 0x1, 0x100, &(0x7f0000000440)="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"}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x3, 0x6, @random="8500"}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff2cbd7000ffdbd52500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) 2.399304968s ago: executing program 2 (id=803): socket$kcm(0x2, 0xa, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b06000004ca3f25f30325c8a21289b428f6516e000000001400028005000100060000001c00110001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) socket$inet(0x10, 0x1, 0xf0f6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r8, 0xc17a) bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="02000000100000000b0000000a000000000a000065576d57c669a7f721fcb586df1234856530aec893582592185b2fb25c2b9e39e8c2cbac090fe30a2a1db69ec3996a1d28ba0678c8198a9d7a560503f59b86b47a289dcfd100fa35a854cd08c6f841d859649546efdc33e1e18f6c69a102ba9b25b2995dd29aa62ffc78eebf2a96602e3eb5258caadaba646de852be84e2d48f4cb2cb3b5ee22906f826cb0cd3b77085754d7900fde29e5aa974892a015e0a2111fb55d54c712d4b40b7a139c78c91fcb0d2e76c5549acbf617d145e882cef00"/226, @ANYRES32=r7, @ANYBLOB="0200"/20, @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="01000000050000000300"/28], 0x50) r9 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_VMA(0x2a, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2.174853163s ago: executing program 1 (id=804): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f00000007c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.138877481s ago: executing program 2 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470"], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) 2.050413485s ago: executing program 2 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x593482, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000ec0)={0x18, 0x0, {0x1, @random="34c2f584311b", 'wg2\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x3}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 1.98709721s ago: executing program 4 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.860234152s ago: executing program 1 (id=808): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000)=0x1d, 0x4) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0xf, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31435641, 0x3, @discrete={0x5, 0x8}}) syz_usb_control_io$uac3(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x40, 0x7, 0xcc, {0xcc, 0x2, "fb4f136e22e8a6dd796612ef1105a9991ee60996a0f589c259594d4a9e000897e2477df852e9fed5b1ba229650115158afc3205b264d48d764f75a9859eb7120d94694073d0b3e0f2534727a67533653937e506a96a7cbb052551f8705a8734dbc7a26a789b852ac3f58231d01b6c5866592916a987f2e3e476aabd2a5760ff4d574e93e09ea7ebf1a696e8aec3389ac408259c25c16d51dbc395992f34c55b00ddb015f61a7cd010ea6ddf1903b7ae0c35fbb17fba036269b563d6bf6e4e5acb88d9ba3c46767fd9569"}}, &(0x7f0000000240)={0x0, 0x3, 0x33, @string={0x33, 0x3, "6ab370167f063455391369d12146b50a79f14403d73ee34a17b90da919f5b6f2ff84c444a2c9a2d6f91502bbeeea951455"}}}, &(0x7f0000000640)={0x44, &(0x7f0000000380)={0x20, 0xe, 0xe0, "7fb678da89fb933de7b7109eb019ebb910eb6ce625ec1444219a26b33ecdaf0f687e82975f48fbc752ad967c1d2e9402a90c5f45fc56219492706a8e3b4588c9494b36b0c90ede906325ade586a747220bf512f9eb5ecdf5981f9f2eec1634eb50ba5053e8e099510f2f79890861ac949f62d0d8633aaa8648afae4ddafc034a3ee54789a90e58f46c2c28ab2fc6cbe55ceb45f9abc6bc8b152b7c44da3b6abb3248647e1784f1c2d33b4d356fea01d6dafbfe8da8d782c89bc1c8d0b55d555a76ac94251d22f6249325e097804b7cef3d82122943c06f26f81b2f6b247abe57"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x81, 0x1, "1c"}, &(0x7f0000000540)={0x20, 0x82, 0x2, "5c81"}, &(0x7f0000000580)={0x20, 0x83, 0x1, '\\'}, &(0x7f00000005c0)={0x20, 0x84, 0x1, '('}, &(0x7f0000000600)={0x20, 0x85, 0x3, "030ad2"}}) 1.745219896s ago: executing program 2 (id=809): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) getitimer(0x2, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000100)={0xf31, 0x42, 0xa5a, 0x1ba8, 0x7, "f8e59b000000002213c91e00", 0x9, 0x7fffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f00002a7000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f00001d3000/0x1000)=nil) get_robust_list(0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000bff4e740ea8a5ab87b9e0939edad16bdb3061ae39536d158651122d8bc7107288fd80cb2f8f87bb51f099467860777141f1ed60772d19cf8a27fc866d06331dd9d5761f36cfe1a9fde6247091f3197b721dd252d95a9e625461f1376abef9750318d49807fa81819e39795fc414093e78f84fdda1c13261a7221718919112b6d6da3466b236d2db7ecf21d42a4332de296e4c4a8ff72653415f45e3578", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="05005300010000000800050002000000"], 0x2c}}, 0x0) 1.097276145s ago: executing program 4 (id=810): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x818, 0x0, 0x0, 0x0, 0x2, 0x7, 0x9, 0x8, 0x0, 0x8001, 0x6, 0x9, 0x0, 0x3, [0x1, 0x6]}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002180)={0x49, &(0x7f0000000040)=[{0x3, 0x2, 0x6, 0xd}, {0x6, 0x49, 0xc, 0x4}, {0x3a4d, 0x80, 0x4, 0xa0}, {0x8, 0xc4, 0x0, 0x7457}, {0x7, 0x8, 0x9, 0x7fffffff}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000008680)={&(0x7f00000084c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x0, 0xf5f5}, {0x9, 0xffffffffffffffff}, {0x200, 0x6c5}, {0x8d, 0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x101, 0x1}, {0xe}, {0x9, 0x6}, {0x11, 0x101}, {0x6, 0x81}, {0x1, 0x3a}, {0x7, 0x2}, {0x0, 0x8}, {0x2, 0xffffffff}, {0x1ff, 0x8000000000000001}, {0x7, 0x80}, {0x4, 0x1}, {0xd8, 0x6}, {0x3, 0x2}, {0x1, 0x8}, {0xfffffffffffff800, 0x7e6}, {0xe7, 0x8000000000000001}, {0xffff, 0x2}, {0x8974, 0x15938ae6}, {0x8, 0x9}, {0x7ff, 0x1}, {0x7, 0x81}, {0x1, 0x2}, {0x0, 0x2bd5}, {0x10000, 0x2ddc}, {0x8, 0xb}, {0x70, 0x6}, {0x77, 0x3}, {0xfffffffffffffb83, 0x80000001}, {0x8, 0x3}, {0x5, 0x6}, {0x7fffffff, 0x79}, {0x8, 0x3}, {0xc, 0x8001}, {0x8, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x40000000000, 0x1}, {0x40, 0xffffffffffffffff}, {0x4, 0x3}, {0x5, 0xc}, {0xe, 0x7}, {0x800000005, 0x4}, {0xffffffff, 0x9}, {0xffffffffffffffff, 0x3}, {0x6, 0xb846}, {0x4, 0x4}, {0x8, 0x4}, {0xfffffffffffff227, 0x80}, {0x8, 0x8}, {0x5, 0xfffffffffffffffc}, {0x5, 0x8}, {0x4, 0xf975}, {0x1, 0xe7}, {0x5, 0x1f}, {0x0, 0x4}, {0x8, 0xfffffffffffffff7}, {0xba75, 0xa59}, {0x1, 0x6b4}, {0xfff, 0xea27860}, {0x888e, 0x387d6368}, {0x5, 0x8}, {0xf93b, 0xfff}, {0xedd5, 0x810}, {0x1b, 0x1}, {0xf1, 0xffffffffffffff20}, {0x6, 0x8}, {0x8, 0x3}, {0x0, 0xfffffffffffff211}, {0x7, 0x9ef}, {0xffffffffffffffff, 0x6}, {0x9, 0x6}, {0x8001, 0x4e}, {0x3, 0x2}, {0x0, 0x2}, {0x9, 0x6}, {0x5, 0x6}, {0xb, 0x8}, {0x8cd9, 0x86}, {0x3, 0xe}, {0x9, 0xeb}, {0x283, 0x8}, {0x80000001, 0x7f}, {0x0, 0x5}, {0xf6, 0x8}, {0x5, 0x7}, {0x6, 0x2}, {0x6}, {0x52, 0x3d}, {0x7fffffff, 0x1}, {0x8, 0x30e}, {0x3b6, 0x3}, {0x5, 0x1}, {0x4, 0x5}, {0xdd, 0x4}, {0x7f, 0xe}, {0x0, 0xffffffff}, {0x9, 0x8}, {0x1, 0xfff}, {0x4, 0x3}, {0xffffffff00000000, 0x80}, {0x8, 0x81}, {0x8, 0x5}, {0x7, 0x9}, {0x9, 0x8}, {0x5, 0x7}, {0x80000001, 0x401}, {0x3, 0x2}, {0x9, 0x80000000}, {0x9, 0x3ff}, {0x4, 0xcf}, {0x6, 0x5}, {0x1, 0x6a}, {0xfffffffffffffffd, 0x6}, {0x6, 0x3}, {0x1af4148}, {0x66f, 0x3}, {0x4, 0xc}, {0xa1, 0x3}, {0x4, 0xe}, {0x1, 0x800}, {0x6, 0x5}, {0x6, 0xa45d}, {0x9, 0x1}, {0x3, 0x7}, {0x3, 0x65}, {0x6, 0x100}, {0x6, 0x280000}, {0x0, 0x9}, {0x7, 0x5}, {0x7ff, 0x2}, {0x7fff, 0x40}, {0xffffffffffffffae}, {0x6}, {0x0, 0xfffffffffffffffe}, {0x100000000, 0x5}, {0x10000, 0x9}, {0xfffffffffffffff9, 0x6}, {0x39a6, 0x101}, {0x2, 0x4}, {0x2, 0x117}, {0x4, 0x5}, {0xfffffffffffffffe, 0xffff}, {0x10000, 0x8}, {}, {0x4, 0xfffffffffffffbff}, {0xfffffffffffffffa, 0xffffffffffffffff}, {0x3, 0x7f}, {0x9, 0x7ff}, {0x4, 0x1}, {0x3, 0x6}, {0x9, 0x100}, {0xe87, 0x8001}, {0x9, 0x7f}, {0x4, 0x1}, {0xfffffffffffff16e, 0x4}, {0x5, 0x1000000010}, {0xffffffffffffff9d, 0x401}, {0x8000000000000000, 0x5}, {0x9, 0x2}, {0xdb, 0xfffffffffffffff9}, {0x80, 0xfffffffffffffffb}, {0xc1c}, {0x8, 0x100000001}, {0x10001, 0x4}, {0x0, 0xff}, {0x5}, {0x8, 0x101}, {0x1, 0x4000000000}, {0x8, 0x80000000}, {0x8, 0xffff}, {0x7, 0x8}, {0x5, 0xf90}, {0x4, 0x4}, {0x24fe, 0x7f}, {0x8001000, 0x5}, {0x1, 0x4}, {0xfffffffffffffffe, 0x3}, {0x7, 0x7fff}, {0x4, 0x3ff}, {0x1c52d055, 0x3bc}, {0xfffffffffffffffd, 0x9}, {0x3, 0x100000001}, {0x7ff, 0x8001}, {0x9, 0x7e0}, {0xdaa, 0xffffffff}, {0x5, 0x9}, {0xbf89, 0x6}, {0x2, 0x10001}, {0xb, 0x4778653b}, {0xeec5, 0xffffffffffffb3a3}, {0x1, 0xf83}, {0x3, 0x3}, {0x8000000000000001, 0x5}, {0x8, 0x1}, {0x4, 0x80000000}, {0x400, 0x3}, {0x7, 0x7}, {0xa5f, 0x6}, {0xe, 0x8}, {0x1000, 0x6176300}, {0x80000000, 0x55b}, {0xfffffffffffffffb}, {0x401, 0x5}, {0x9ad, 0x4}, {0x66d8, 0x10001}, {0xffffffffffffff80, 0xfffffffffffffffc}, {0x80000001, 0x2}, {0x4, 0xfffffffffffffc00}, {0xfffc, 0x4}, {0x4f, 0x312}, {0x7ff, 0x9}, {0x7f, 0x1}, {0xe3b, 0xf310}, {0x6, 0xffffffffffffffff}, {0x7fff, 0x8}, {0x3, 0x8}, {0x4, 0x4}, {0x54, 0x81}, {0xb563, 0x9}, {0x8, 0xf6}, {0x8001, 0x5}, {0x7, 0x80000000}, {0x6, 0x8}, {0x100}, {0x8, 0x2}, {0x9, 0x9}, {0x8, 0x3}, {0x8}, {0x6, 0x8000000000000000}, {0xa98, 0xf552}, {0x8, 0xf1}, {0x7, 0xf4}, {0xfa, 0xfffffffffffffff8}, {0x8, 0x6}, {0x5f, 0x7}, {0x3, 0xd}, {0x8, 0x400}, {0x6, 0x7}, {0x3, 0x9}, {0x1, 0x14d}, {0x1, 0x7fffffff}, {0xb4ec, 0xf3}, {0x12000, 0x10001}, {0x7fff, 0x9}, {0x1, 0x7ff}, {0x7, 0x8}, {0x2, 0xd49}, {0xc4, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x32}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000019, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setrlimit(0xd, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) getpriority(0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 102.980037ms ago: executing program 4 (id=811): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 81.965315ms ago: executing program 4 (id=812): syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) socket$inet6(0xa, 0x3, 0x2f) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000100)=ANY=[], 0x0) r0 = socket$inet(0x2, 0xa, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000400)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 0s ago: executing program 0 (id=813): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8000, 0x7, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x3, 0x0}}}}}) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}], 0x1, 0x8, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet6(0xa, 0x80002, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdrdstopts={{0x18, 0x29, 0x3e, {0x62}}}], 0x18}}], 0x1, 0x4001c00) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x1000, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x200, @remote}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x802a, 0x0, 0x0, 0x2000000}) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) kernel console output (not intermixed with test programs): descriptors, different from the interface descriptor's value: 1 [ 129.379572][ T29] audit: type=1400 audit(1782228446.310:676): avc: denied { create } for pid=7129 comm="syz.3.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 129.441002][ T5342] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 129.458364][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.481853][ T5342] usb 3-1: Product: syz [ 129.494218][ T5342] usb 3-1: Manufacturer: syz [ 129.507735][ T5342] usb 3-1: SerialNumber: syz [ 129.535931][ T5342] usb 3-1: Fast Track Pro config OK [ 129.689274][ T5819] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 129.741071][ T5342] usb 3-1: 0:2 : does not exist [ 129.766663][ T5342] usb 3-1: unit 5 not found! [ 129.782459][ T5342] usb 3-1: unit 6 not found! [ 129.843793][ T5342] usb 3-1: USB disconnect, device number 22 [ 129.858683][ T5819] usb 1-1: Using ep0 maxpacket: 16 [ 129.869802][ T5819] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.883009][ T5819] usb 1-1: config 204 has an invalid interface number: 8 but max is 1 [ 129.896215][ T5819] usb 1-1: config 204 has an invalid interface number: 8 but max is 1 [ 129.911514][ T5819] usb 1-1: config 204 has 1 interface, different from the descriptor's value: 2 [ 129.954798][ T5819] usb 1-1: config 204 has no interface number 0 [ 129.977699][ T5819] usb 1-1: Duplicate descriptor for config 204 interface 8 altsetting 9, skipping [ 130.006607][ T5819] usb 1-1: config 204 interface 8 has no altsetting 0 [ 130.024926][ T5819] usb 1-1: New USB device found, idVendor=1199, idProduct=9091, bcdDevice=6b.dd [ 130.036240][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.066521][ T5819] usb 1-1: Product: ࠄ [ 130.070959][ T5819] usb 1-1: Manufacturer: ࠬ [ 130.078135][ T5819] usb 1-1: SerialNumber: ࠐ [ 130.159266][ T7146] 0x0000000000d5-0x000800008590 : "" [ 130.171942][ T7146] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ff2b [ 130.200980][ T7146] ftl_cs: FTL header corrupt! [ 130.299071][ T5819] usb 1-1: USB disconnect, device number 21 [ 130.446949][ T5701] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 131.316493][ T5748] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 131.407249][ T5819] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 131.427968][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 131.429894][ T29] audit: type=1400 audit(1782228448.370:677): avc: denied { write } for pid=7165 comm="syz.1.416" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 131.445261][ T5701] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 131.463474][ T7166] binder: 7165:7166 ioctl c0306201 0 returned -14 [ 131.495114][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.501555][ T29] audit: type=1400 audit(1782228448.410:678): avc: denied { call } for pid=7165 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 131.515577][ T5701] usb 4-1: config 0 descriptor?? [ 131.527115][ T5748] usb 1-1: Using ep0 maxpacket: 32 [ 131.546517][ T5748] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 131.547702][ T5701] smsusb:smsusb_probe: board id=8, interface number 0 [ 131.557241][ T5748] usb 1-1: config 0 has no interface number 0 [ 131.575745][ T5701] smsusb:smsusb_probe: Device initialized with return code -19 [ 131.584208][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 131.592921][ T5819] usb 5-1: config 0 has no interfaces? [ 131.598097][ T5748] usb 1-1: config 0 interface 132 altsetting 0 has an endpoint descriptor with address 0x39, changing to 0x9 [ 131.606896][ T5819] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 131.628059][ T5748] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.629845][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.646493][ T5748] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 131.665961][ T5819] usb 5-1: Product: syz [ 131.670818][ T5819] usb 5-1: Manufacturer: syz [ 131.683628][ T7171] batman_adv: batadv0: Adding interface: ip6gretap1 [ 131.690948][ T7171] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 131.691412][ T5748] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 131.722437][ T5819] usb 5-1: SerialNumber: syz [ 131.731789][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.732811][ T7171] batman_adv: batadv0: Interface activated: ip6gretap1 [ 131.741554][ T5748] usb 1-1: Product: syz [ 131.748449][ T5819] usb 5-1: config 0 descriptor?? [ 131.784888][ T5748] usb 1-1: Manufacturer: syz [ 131.793530][ T5748] usb 1-1: SerialNumber: syz [ 131.805127][ T5748] usb 1-1: config 0 descriptor?? [ 131.862654][ T29] audit: type=1326 audit(1782228448.800:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7148 comm="syz.3.410" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe00719ce59 code=0x0 [ 132.206922][ T7160] pimreg: tun_chr_ioctl cmd 2147767517 [ 132.244166][ T191] libceph: connect (1)[c::]:6789 error -101 [ 132.255344][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 132.261517][ T5342] usb 1-1: USB disconnect, device number 22 [ 132.271138][ T7152] vivid-007: ================= START STATUS ================= [ 132.290005][ T191] libceph: connect (1)[c::]:6789 error -101 [ 132.304074][ T7152] vivid-007: Enable Output Cropping: true grabbed [ 132.313277][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 132.328756][ T7152] vivid-007: Enable Output Composing: true grabbed [ 132.343529][ T7152] vivid-007: Enable Output Scaler: true grabbed [ 132.375255][ T7186] netlink: 16 bytes leftover after parsing attributes in process `syz.4.411'. [ 132.400356][ T7152] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 132.421170][ T7152] vivid-007: Transmit Mode: HDMI grabbed [ 132.441664][ T7152] vivid-007: Hotplug Present: 0x00000000 [ 132.447403][ T5748] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 132.466703][ T7152] vivid-007: RxSense Present: 0x00000000 [ 132.491573][ T7152] vivid-007: EDID Present: 0x00000000 [ 132.531897][ T7152] vivid-007: ================== END STATUS ================== [ 132.597414][ T5342] libceph: connect (1)[c::]:6789 error -101 [ 132.605741][ T5342] libceph: mon0 (1)[c::]:6789 connect error [ 132.609481][ T5819] usb 5-1: USB disconnect, device number 26 [ 132.623048][ T5748] usb 3-1: Using ep0 maxpacket: 8 [ 132.635998][ T5748] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 132.646565][ T5748] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.656487][ T5748] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.666393][ T5748] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.696359][ T5748] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.727310][ T5748] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.738986][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.971336][ T5748] usb 3-1: GET_CAPABILITIES returned 0 [ 132.982184][ T5748] usbtmc 3-1:16.0: can't read capabilities [ 133.197030][ T5342] libceph: connect (1)[c::]:6789 error -101 [ 133.214780][ T5342] libceph: mon0 (1)[c::]:6789 connect error [ 133.667208][ T7182] ceph: No mds server is up or the cluster is laggy [ 133.736206][ T5748] usb 3-1: USB disconnect, device number 23 [ 133.745282][ T7199] /dev/nullb0: Can't open blockdev [ 133.767634][ T7199] veth1_macvtap: left promiscuous mode [ 133.786035][ T7199] macsec0: entered allmulticast mode [ 134.013335][ T5701] usb 4-1: USB disconnect, device number 33 [ 135.231417][ T5748] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 135.296699][ T5708] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 135.426665][ T5748] usb 3-1: Using ep0 maxpacket: 8 [ 135.474270][ T5708] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 135.492244][ T5748] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 135.517697][ T5708] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 135.526873][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.550305][ T5748] usb 3-1: Product: syz [ 135.556308][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.570973][ T5748] usb 3-1: Manufacturer: syz [ 135.582085][ T5748] usb 3-1: SerialNumber: syz [ 135.590197][ T5708] usb 5-1: config 0 descriptor?? [ 135.606115][ T5708] smsusb:smsusb_probe: board id=8, interface number 0 [ 135.613710][ T5748] usb 3-1: config 0 descriptor?? [ 135.621800][ T5708] smsusb:smsusb_probe: Device initialized with return code -19 [ 135.632442][ T5748] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 135.644073][ T5748] dvb-usb: bulk message failed: -22 (2/0) [ 135.663030][ T5748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.695932][ T5748] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 135.704966][ T5748] usb 3-1: media controller created [ 135.719759][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.783522][ T29] audit: type=1400 audit(1782228452.720:680): avc: denied { bind } for pid=7235 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 135.846857][ T29] audit: type=1326 audit(1782228452.780:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7219 comm="syz.4.429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592159ce59 code=0x0 [ 136.249909][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 136.256050][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 136.285019][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 136.320178][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 136.417387][ T29] audit: type=1400 audit(1782228453.360:682): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.586817][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 136.593100][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 137.106850][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 137.125172][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 137.893018][ T5342] hid_parser_main: 25 callbacks suppressed [ 137.893038][ T5342] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 137.910487][ T5748] cxusb: set interface failed [ 137.915322][ T5748] dvb-usb: bulk message failed: -22 (1/0) [ 137.936320][ T5342] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.974980][ T29] audit: type=1400 audit(1782228454.910:683): avc: denied { checkpoint_restore } for pid=7270 comm="syz.3.442" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.010747][ T7248] ceph: No mds server is up or the cluster is laggy [ 138.030966][ T5748] DVB: Unable to find symbol mt352_attach() [ 138.044919][ T5748] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 138.137496][ T5748] rc_core: IR keymap rc-dvico-portable not found [ 138.155772][ T5748] Registered IR keymap rc-empty [ 138.187258][ T5748] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 138.293312][ T5342] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 138.303942][ T5748] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input13 [ 138.317290][ T5748] dvb-usb: schedule remote query interval to 100 msecs. [ 138.325368][ T5748] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 138.338118][ T5701] usb 5-1: USB disconnect, device number 27 [ 138.338477][ T5748] usb 3-1: USB disconnect, device number 24 [ 138.594659][ T5708] dvb-usb: bulk message failed: -22 (1/0) [ 138.628103][ T29] audit: type=1400 audit(1782228455.340:684): avc: denied { write } for pid=7285 comm="syz.2.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.664034][ T5342] usb 1-1: device descriptor read/64, error -71 [ 138.722943][ T5748] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 138.818788][ T7277] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 138.833820][ T7293] netlink: 'syz.3.448': attribute type 10 has an invalid length. [ 138.892566][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 138.926607][ T5342] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 139.066509][ T5342] usb 1-1: device descriptor read/64, error -71 [ 139.117051][ T5701] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 139.176713][ T5342] usb usb1-port1: attempt power cycle [ 139.297730][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 139.316510][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 139.336750][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.357922][ T5701] usb 5-1: config 0 descriptor?? [ 139.370769][ T5701] smsusb:smsusb_probe: board id=8, interface number 0 [ 139.386793][ T5701] smsusb:smsusb_probe: Device initialized with return code -19 [ 139.516585][ T5342] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 139.536900][ T5342] usb 1-1: device descriptor read/8, error -71 [ 139.630152][ T29] audit: type=1326 audit(1782228456.570:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.4.447" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592159ce59 code=0x0 [ 139.786766][ T5342] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 139.816717][ T5748] libceph: connect (1)[c::]:6789 error -101 [ 139.824920][ T5748] libceph: mon0 (1)[c::]:6789 connect error [ 139.832059][ T5342] usb 1-1: device descriptor read/8, error -71 [ 139.839026][ T5748] libceph: connect (1)[c::]:6789 error -101 [ 139.845356][ T5748] libceph: mon0 (1)[c::]:6789 connect error [ 139.955995][ T5342] usb usb1-port1: unable to enumerate USB device [ 140.107857][ T5342] libceph: connect (1)[c::]:6789 error -101 [ 141.078317][ T5342] libceph: mon0 (1)[c::]:6789 connect error [ 141.607500][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 141.860718][ T7304] ceph: No mds server is up or the cluster is laggy [ 141.897637][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 142.186544][ T5748] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 142.197219][ T5708] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 142.347664][ T5748] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.358070][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 142.376689][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 142.407760][ T5708] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 142.418846][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 142.438057][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.456620][ T5708] usb 2-1: Product: syz [ 142.460871][ T5748] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 142.477087][ T5708] usb 2-1: Manufacturer: syz [ 142.483439][ T5708] usb 2-1: SerialNumber: syz [ 142.496761][ T5748] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.510295][ T5708] usb 2-1: config 0 descriptor?? [ 142.525831][ T5748] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.544163][ T5748] usb 3-1: Manufacturer: syz [ 142.557573][ T5748] usb 3-1: config 0 descriptor?? [ 142.711641][ T24] usb 5-1: USB disconnect, device number 28 [ 142.812016][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.833453][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.874496][ T7325] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 142.944971][ T5708] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 142.961784][ T5708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.985165][ T5708] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 143.008046][ T5708] usb 2-1: media controller created [ 143.036947][ T5748] rc_core: IR keymap rc-hauppauge not found [ 143.044802][ T5708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.057942][ T5748] Registered IR keymap rc-empty [ 143.078296][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.111537][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.138490][ T5748] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 143.156055][ T5708] zl10353_read_register: readreg error (reg=127, ret==0) [ 143.156834][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 143.172360][ T5748] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 143.185328][ T5708] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 143.196188][ T5708] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 143.214949][ T5708] usb 2-1: USB disconnect, device number 15 [ 143.222791][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.267078][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.281903][ T7338] netlink: 'syz.0.459': attribute type 1 has an invalid length. [ 143.290853][ T5708] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 143.302036][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 143.312439][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.338147][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.346921][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 143.356913][ T24] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 143.380654][ T24] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 143.380979][ T7338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.459'. [ 143.401358][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.415060][ T24] usb 5-1: config 0 has no interface number 0 [ 143.428314][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.429510][ T24] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 143.449569][ T24] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 143.462121][ T24] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 143.472940][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 143.482573][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.490677][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 143.490697][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.499892][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.516762][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.533999][ T24] usb 5-1: config 0 descriptor?? [ 143.536709][ T5748] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 143.577723][ T5748] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 143.883455][ T24] usb 5-1: USB disconnect, device number 29 [ 143.887367][ T5748] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 143.937551][ T5748] usb 3-1: USB disconnect, device number 25 [ 145.206449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 145.327064][ T29] audit: type=1326 audit(1782228462.260:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.4.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592159ce59 code=0x0 [ 145.406360][ T29] audit: type=1326 audit(1782228462.260:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7357 comm="syz.4.464" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f592159ce59 code=0x0 [ 145.505455][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 145.538724][ T7366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 145.545271][ T7366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.573010][ T7366] vhci_hcd vhci_hcd.0: Device attached [ 145.643169][ T29] audit: type=1400 audit(1782228462.580:688): avc: denied { ioctl } for pid=7346 comm="syz.0.461" path="socket:[16762]" dev="sockfs" ino=16762 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 145.806588][ T5748] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 145.816505][ T5708] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 145.919767][ T29] audit: type=1400 audit(1782228462.860:689): avc: denied { connect } for pid=7377 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 145.947808][ T5708] usb 4-1: device descriptor read/64, error -71 [ 146.260440][ T5708] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 146.406496][ T5708] usb 4-1: device descriptor read/64, error -71 [ 146.537703][ T5708] usb usb4-port1: attempt power cycle [ 146.906652][ T5708] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 146.938264][ T5708] usb 4-1: device descriptor read/8, error -71 [ 147.059475][ T7402] IPVS: Unknown mcast interface: vcan0 [ 147.088451][ T7403] FAULT_INJECTION: forcing a failure. [ 147.088451][ T7403] name failslab, interval 1, probability 0, space 0, times 0 [ 147.114595][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.2.479 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.114622][ T7403] Tainted: [L]=SOFTLOCKUP [ 147.114628][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 147.114638][ T7403] Call Trace: [ 147.114643][ T7403] [ 147.114649][ T7403] dump_stack_lvl+0x100/0x190 [ 147.114676][ T7403] should_fail_ex.cold+0x5/0xa [ 147.114695][ T7403] ? fs_reclaim_acquire+0x70/0x100 [ 147.114718][ T7403] should_failslab+0xc2/0x120 [ 147.114738][ T7403] __kmalloc_noprof+0xfc/0x820 [ 147.114755][ T7403] ? tomoyo_encode2+0xfb/0x3c0 [ 147.114775][ T7403] tomoyo_encode2+0xfb/0x3c0 [ 147.114793][ T7403] tomoyo_encode+0x29/0x50 [ 147.114811][ T7403] tomoyo_realpath_from_path+0x18c/0x690 [ 147.114832][ T7403] tomoyo_path_number_perm+0x23c/0x580 [ 147.114858][ T7403] ? tomoyo_path_number_perm+0x22e/0x580 [ 147.114884][ T7403] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 147.114928][ T7403] ? preempt_count_add+0x76/0x150 [ 147.114953][ T7403] ? rcu_is_watching+0x12/0xc0 [ 147.114983][ T7403] ? __fget_files+0x215/0x3d0 [ 147.114998][ T7403] ? hook_file_ioctl_common+0x140/0x440 [ 147.115020][ T7403] ? lock_release+0x24d/0x310 [ 147.115040][ T7403] ? __fget_files+0x21f/0x3d0 [ 147.115056][ T7403] security_file_ioctl+0xd3/0x230 [ 147.115072][ T7403] __x64_sys_ioctl+0xb7/0x210 [ 147.115094][ T7403] do_syscall_64+0x115/0x870 [ 147.115116][ T7403] ? clear_bhb_loop+0x40/0x90 [ 147.115134][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.115151][ T7403] RIP: 0033:0x7f0730f9ce59 [ 147.115164][ T7403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.115180][ T7403] RSP: 002b:00007f072f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.115197][ T7403] RAX: ffffffffffffffda RBX: 00007f0731216090 RCX: 00007f0730f9ce59 [ 147.115208][ T7403] RDX: 0000000000000000 RSI: 00000000000089ec RDI: 0000000000000005 [ 147.115217][ T7403] RBP: 00007f072f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.115226][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.115236][ T7403] R13: 00007f0731216128 R14: 00007f0731216090 R15: 00007ffc34056078 [ 147.115252][ T7403] [ 147.115263][ T7403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.161207][ T7407] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 147.244161][ T5708] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 147.293063][ T7407] netlink: 216 bytes leftover after parsing attributes in process `syz.1.482'. [ 147.816921][ T5708] usb 4-1: device descriptor read/8, error -71 [ 147.896507][ T5342] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 147.929339][ T5708] usb usb4-port1: unable to enumerate USB device [ 148.057622][ T5342] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 148.066801][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.097048][ T5342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1279, setting to 1024 [ 148.108516][ T11] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 148.180312][ T5342] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 148.222665][ T5342] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.267448][ T5342] usb 2-1: Manufacturer: syz [ 148.287725][ T11] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 148.297747][ T5342] usb 2-1: config 0 descriptor?? [ 148.307215][ T11] usb 1-1: config 0 has no interface number 0 [ 148.325601][ T7413] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.327510][ T11] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 12320, setting to 64 [ 148.356043][ T5342] igorplugusb 2-1:0.0: endpoint incorrect [ 148.374224][ T11] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 148.385522][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.394393][ T11] usb 1-1: Product: syz [ 148.402835][ T11] usb 1-1: Manufacturer: syz [ 148.409433][ T11] usb 1-1: SerialNumber: syz [ 148.419787][ T11] usb 1-1: config 0 descriptor?? [ 148.461079][ T7436] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 148.517409][ T7368] vhci_hcd: connection reset by peer [ 148.543375][ T64] vhci_hcd vhci_hcd.3: stop threads [ 148.552288][ T191] usb 2-1: USB disconnect, device number 16 [ 148.587913][ T64] vhci_hcd vhci_hcd.3: release socket [ 148.610167][ T64] vhci_hcd vhci_hcd.3: disconnect device [ 148.641986][ T11] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 148.680917][ T11] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 148.705675][ T29] audit: type=1400 audit(1782228465.640:690): avc: denied { ioctl } for pid=7441 comm="syz.3.492" path="socket:[16107]" dev="sockfs" ino=16107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.730959][ T11] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 148.744924][ T7442] syzkaller0: entered promiscuous mode [ 148.749464][ T11] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 148.759715][ T11] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 148.760192][ T7442] syzkaller0: entered allmulticast mode [ 148.916104][ T29] audit: type=1400 audit(1782228465.850:691): avc: denied { mount } for pid=7427 comm="syz.0.486" name="/" dev="autofs" ino=17018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 149.218274][ T29] audit: type=1400 audit(1782228466.090:692): avc: denied { read append } for pid=7427 comm="syz.0.486" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 149.506627][ T29] audit: type=1400 audit(1782228466.090:693): avc: denied { open } for pid=7427 comm="syz.0.486" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 149.530473][ T29] audit: type=1400 audit(1782228466.440:694): avc: denied { map } for pid=7453 comm="syz.3.496" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 149.556201][ T29] audit: type=1400 audit(1782228466.440:695): avc: denied { execute } for pid=7453 comm="syz.3.496" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 149.757504][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 150.871401][ T7428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.877896][ T7428] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 150.885304][ T7428] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.026448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 151.037234][ T5748] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 151.047928][ T7428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.054858][ T7428] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.062513][ T7428] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.070294][ T7428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.076665][ T7428] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.084079][ T7428] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.091720][ T7428] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.098210][ T7428] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.105645][ T7428] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.201343][ T11] usb 1-1: USB disconnect, device number 27 [ 151.216296][ T11] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 151.232595][ T11] keyspan 1-1:0.133: device disconnected [ 151.356540][ T191] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 151.364351][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.776489][ T191] usb 2-1: Using ep0 maxpacket: 16 [ 151.788711][ T191] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.813119][ T191] usb 2-1: config 0 interface 0 has no altsetting 0 [ 151.860580][ T191] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 151.890304][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.898421][ T191] usb 2-1: Product: syz [ 151.902627][ T191] usb 2-1: Manufacturer: syz [ 151.907261][ T191] usb 2-1: SerialNumber: syz [ 151.913312][ T191] usb 2-1: config 0 descriptor?? [ 151.929571][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 151.929585][ T29] audit: type=1400 audit(1782228468.870:699): avc: denied { append } for pid=7502 comm="syz.2.507" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.230208][ T3531] Bluetooth: hci5: Frame reassembly failed (-84) [ 152.284856][ T191] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 152.656452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 152.765274][ T7478] netlink: 76 bytes leftover after parsing attributes in process `syz.1.500'. [ 152.766549][ T29] audit: type=1400 audit(1782228469.700:700): avc: denied { bind } for pid=7477 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.815953][ T7478] nbd: illegal input index 65508 [ 152.913093][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 152.932275][ T191] rc_core: IR keymap rc-imon-pad not found [ 152.947257][ T191] Registered IR keymap rc-empty [ 152.953049][ T191] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 152.967909][ T191] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 153.116514][ T4927] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.122569][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.128591][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.196879][ T7528] netlink: 'syz.3.513': attribute type 11 has an invalid length. [ 153.281777][ T29] audit: type=1400 audit(1782228470.130:701): avc: denied { write } for pid=7524 comm="syz.3.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 153.282475][ T191] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 153.340345][ T7527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.512'. [ 153.405891][ T191] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 153.431418][ T191] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:17> initialized [ 153.440145][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.593753][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 153.607384][ T191] usb 2-1: USB disconnect, device number 17 [ 153.716946][ T5793] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 153.856509][ T5708] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 153.866696][ T5793] usb 4-1: Using ep0 maxpacket: 32 [ 153.873012][ T5793] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 153.882624][ T5793] usb 4-1: config 0 has no interface number 0 [ 153.886493][ T5748] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 153.889046][ T5793] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 153.907135][ T5793] usb 4-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 153.918890][ T5793] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 153.928725][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.937013][ T5793] usb 4-1: Product: syz [ 153.941268][ T5793] usb 4-1: Manufacturer: syz [ 153.945927][ T5793] usb 4-1: SerialNumber: syz [ 153.951683][ T5793] usb 4-1: config 0 descriptor?? [ 153.960407][ T5793] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 153.970546][ T5793] em28xx 4-1:0.132: Video interface 132 found: bulk [ 154.017588][ T5708] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 154.026695][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.035735][ T5708] usb 5-1: config 0 descriptor?? [ 154.057588][ T5748] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 255, using maximum allowed: 30 [ 154.068622][ T5748] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 154.081835][ T5748] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.088767][ T5748] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 154.097986][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.107229][ T5748] usb 3-1: config 0 descriptor?? [ 154.163426][ T7532] pimreg: tun_chr_ioctl cmd 2147767517 [ 154.227681][ T5793] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 154.236888][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 154.411445][ T5793] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 154.420723][ T5793] em28xx 4-1:0.132: board has no eeprom [ 154.618951][ T5748] smartjoyplus 0003:6666:8804.000D: unknown main item tag 0x2 [ 154.651094][ T5748] smartjoyplus 0003:6666:8804.000D: unknown main item tag 0x6 [ 154.665084][ T5793] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 154.673519][ T5793] em28xx 4-1:0.132: analog set to bulk mode. [ 154.680218][ T5819] em28xx 4-1:0.132: Registering V4L2 extension [ 154.707116][ T5793] usb 4-1: USB disconnect, device number 38 [ 154.708550][ T5748] smartjoyplus 0003:6666:8804.000D: ignoring exceeding usage max [ 154.714722][ T5793] em28xx 4-1:0.132: Disconnecting em28xx [ 154.778165][ T5748] smartjoyplus 0003:6666:8804.000D: hidraw0: USB HID v0.81 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0 [ 154.867552][ T5748] smartjoyplus 0003:6666:8804.000D: no output reports found [ 154.868342][ T7538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.128466][ T7538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.223123][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.223124][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.223163][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.567929][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.885523][ T5819] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 155.902307][ T5819] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 155.917334][ T5819] em28xx 4-1:0.132: No AC97 audio processor [ 155.932672][ T5819] usb 4-1: Decoder not found [ 155.947234][ T5819] em28xx 4-1:0.132: failed to create media graph [ 155.967215][ T5819] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 155.996161][ T5819] em28xx 4-1:0.132: Remote control support is not available for this card. [ 156.026920][ T5793] em28xx 4-1:0.132: Closing input extension [ 156.063179][ T5793] em28xx 4-1:0.132: Freeing device [ 156.640048][ T5708] usb 5-1: Cannot read MAC address [ 156.655544][ T5708] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 157.006851][ T5708] usb 5-1: USB disconnect, device number 30 [ 157.025686][ T5819] usb 3-1: USB disconnect, device number 26 [ 157.287875][ T5621] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.287876][ T5620] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.287929][ T5621] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.626922][ T7582] netlink: 'syz.4.527': attribute type 4 has an invalid length. [ 157.677604][ T7581] netlink: 'syz.4.527': attribute type 4 has an invalid length. [ 158.055885][ T29] audit: type=1400 audit(1782228474.990:702): avc: denied { setopt } for pid=7604 comm="syz.1.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 158.136499][ T5342] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 158.191052][ T7610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.299185][ T5342] usb 3-1: Using ep0 maxpacket: 32 [ 158.316948][ T5342] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 158.338211][ T5342] usb 3-1: config 0 has no interface number 0 [ 158.348790][ T5342] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.360905][ T7612] pim6reg: entered allmulticast mode [ 158.399533][ T5342] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 158.422912][ T5342] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 158.440443][ T5342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.455675][ T7612] team0: entered allmulticast mode [ 158.461890][ T5342] usb 3-1: Product: syz [ 158.467860][ T7612] team_slave_0: entered allmulticast mode [ 158.497672][ T5342] usb 3-1: Manufacturer: syz [ 158.502511][ T5342] usb 3-1: SerialNumber: syz [ 158.509004][ T5342] usb 3-1: config 0 descriptor?? [ 158.519880][ T5342] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 158.529937][ T5342] em28xx 3-1:0.132: Video interface 132 found: bulk [ 158.550594][ T7612] team_slave_1: entered allmulticast mode [ 158.588214][ T7614] team0: left allmulticast mode [ 158.621250][ T7614] team_slave_0: left allmulticast mode [ 158.656963][ T7614] team_slave_1: left allmulticast mode [ 158.707647][ T7614] pim6reg: left allmulticast mode [ 158.892800][ T7593] pimreg: tun_chr_ioctl cmd 2147767517 [ 158.968169][ T5342] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 159.041910][ T5342] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 159.063232][ T5342] em28xx 3-1:0.132: board has no eeprom [ 159.137338][ T5342] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 159.158015][ T5342] em28xx 3-1:0.132: analog set to bulk mode. [ 159.181140][ T5708] em28xx 3-1:0.132: Registering V4L2 extension [ 159.194067][ T5342] usb 3-1: USB disconnect, device number 27 [ 159.221079][ T5342] em28xx 3-1:0.132: Disconnecting em28xx [ 159.248733][ T5701] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 159.421477][ T5708] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 159.429715][ T5701] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 159.442842][ T5708] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 159.442860][ T5708] em28xx 3-1:0.132: No AC97 audio processor [ 159.446065][ T5708] usb 3-1: Decoder not found [ 159.446084][ T5708] em28xx 3-1:0.132: failed to create media graph [ 159.446102][ T5708] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 159.446966][ T5708] em28xx 3-1:0.132: Remote control support is not available for this card. [ 159.447418][ T5342] em28xx 3-1:0.132: Closing input extension [ 159.450599][ T5342] em28xx 3-1:0.132: Freeing device [ 159.468169][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.472454][ T5701] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 159.472506][ T5701] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 159.472539][ T5701] usb 4-1: Manufacturer: syz [ 159.485418][ T5701] usb 4-1: config 0 descriptor?? [ 159.617426][ T5701] rc_core: IR keymap rc-hauppauge not found [ 159.617455][ T5701] Registered IR keymap rc-empty [ 159.618168][ T5701] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 159.629446][ T5701] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 159.961783][ T7625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.971419][ T7625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.119146][ T5701] usb 4-1: USB disconnect, device number 39 [ 160.146738][ T29] audit: type=1400 audit(1782228477.080:703): avc: denied { cmd } for pid=7638 comm="syz.0.541" path="socket:[18635]" dev="sockfs" ino=18635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 160.720368][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 160.814104][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.544'. [ 160.863042][ T29] audit: type=1400 audit(1782228477.800:704): avc: denied { setopt } for pid=7658 comm="syz.2.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.911559][ T29] audit: type=1400 audit(1782228477.850:705): avc: denied { watch } for pid=7656 comm="syz.4.544" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.960656][ T29] audit: type=1400 audit(1782228477.850:706): avc: denied { watch_sb watch_reads } for pid=7656 comm="syz.4.544" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 161.017971][ T5748] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 161.178129][ T5748] usb 2-1: Using ep0 maxpacket: 16 [ 161.270688][ T5748] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 161.292988][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.481928][ T5748] usb 2-1: Product: syz [ 161.492220][ T5748] usb 2-1: Manufacturer: syz [ 161.501925][ T5748] usb 2-1: SerialNumber: syz [ 161.522855][ T5748] usb 2-1: config 0 descriptor?? [ 161.671506][ T7675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 161.678052][ T7675] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 161.691806][ T7675] vhci_hcd vhci_hcd.0: Device attached [ 161.778965][ T29] audit: type=1326 audit(1782228478.720:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7678 comm="syz.2.551" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0730f9ce59 code=0x0 [ 161.934720][ T5748] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 161.942428][ T5708] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 161.956825][ T5342] usb 34-1: SetAddress Request (2) to port 0 [ 161.969855][ T5748] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.984699][ T5342] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 162.001610][ T5748] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 162.014255][ T5748] usb 2-1: media controller created [ 162.025270][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.117532][ T5708] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.164347][ T5748] zl10353_read_register: readreg error (reg=127, ret==0) [ 162.178863][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.339728][ T5748] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 162.358641][ T5708] usb 1-1: Product: syz [ 162.405720][ T5708] usb 1-1: Manufacturer: syz [ 162.412220][ T5748] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 162.428280][ T5708] usb 1-1: SerialNumber: syz [ 162.444115][ T5708] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.455309][ T5748] usb 2-1: USB disconnect, device number 18 [ 162.475106][ T11] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 162.535898][ T5748] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 162.664336][ T29] audit: type=1400 audit(1782228479.600:708): avc: denied { create } for pid=7687 comm="syz.4.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 162.693184][ T7688] faux_driver vkms: [drm] Unknown color mode 11173; guessing buffer size. [ 162.722609][ T29] audit: type=1400 audit(1782228479.630:709): avc: denied { ioctl } for pid=7687 comm="syz.4.554" path="socket:[18881]" dev="sockfs" ino=18881 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 162.758008][ T7690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.188544][ T29] audit: type=1400 audit(1782228480.130:710): avc: denied { read } for pid=7674 comm="syz.0.550" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 163.226640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 163.579638][ T11] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 163.587594][ T11] ath9k_htc: Failed to initialize the device [ 163.588331][ T29] audit: type=1400 audit(1782228480.530:711): avc: denied { mount } for pid=7700 comm="syz.3.558" name="/" dev="rpc_pipefs" ino=17858 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 163.610073][ T11] usb 1-1: ath9k_htc: USB layer deinitialized [ 163.736665][ T7698] /dev/nullb0: Can't open blockdev [ 163.742021][ T29] audit: type=1400 audit(1782228480.670:712): avc: denied { mounton } for pid=7697 comm="syz.4.557" path="/syzcgroup/unified/syz4" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 163.860776][ T5701] usb 1-1: USB disconnect, device number 28 [ 163.867166][ T5819] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 163.898326][ T7676] vhci_hcd: connection reset by peer [ 163.903902][ T3531] vhci_hcd vhci_hcd.0: stop threads [ 163.909561][ T3531] vhci_hcd vhci_hcd.0: release socket [ 163.915063][ T3531] vhci_hcd vhci_hcd.0: disconnect device [ 164.069332][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 164.233167][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 164.245546][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.262887][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 164.274817][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 164.287424][ T5819] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 164.296800][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.304995][ T5819] usb 4-1: Product: syz [ 164.309813][ T5819] usb 4-1: Manufacturer: syz [ 164.314604][ T5819] usb 4-1: SerialNumber: syz [ 164.327628][ T5819] usb 4-1: config 0 descriptor?? [ 164.337106][ T5819] iguanair 4-1:0.0: probe with driver iguanair failed with error -12 [ 164.735060][ T7714] /dev/nullb0: Can't open blockdev [ 165.900786][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'. [ 166.296789][ T5793] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 166.838565][ T5701] usb 4-1: USB disconnect, device number 40 [ 167.036545][ T5342] usb 34-1: device descriptor read/8, error -110 [ 167.125819][ T7746] tipc: Cannot configure node identity twice [ 167.201254][ T191] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 167.203043][ T5793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 167.295327][ T5793] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 167.348216][ T29] audit: type=1400 audit(1782228484.270:713): avc: denied { mounton } for pid=7737 comm="syz.3.569" path="/proc/349/task" dev="proc" ino=17950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 167.383967][ T5793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.498523][ T29] audit: type=1400 audit(1782228484.420:714): avc: denied { associate } for pid=7748 comm="syz.3.569" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 167.542333][ T5342] usb usb34-port1: attempt power cycle [ 167.578563][ T191] usb 2-1: Using ep0 maxpacket: 32 [ 167.579889][ T5793] usb 5-1: config 0 descriptor?? [ 167.675715][ T7733] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.701353][ T191] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 167.774596][ T191] usb 2-1: config 0 has no interface number 0 [ 167.791131][ T191] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.808661][ T191] usb 2-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 167.828413][ T191] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 167.843845][ T191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.860315][ T191] usb 2-1: Product: syz [ 167.869293][ T191] usb 2-1: Manufacturer: syz [ 167.879045][ T191] usb 2-1: SerialNumber: syz [ 167.894307][ T191] usb 2-1: config 0 descriptor?? [ 167.915933][ T191] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 167.938088][ T191] em28xx 2-1:0.132: Video interface 132 found: bulk [ 168.117459][ T7742] pimreg: tun_chr_ioctl cmd 2147767517 [ 168.136186][ T29] audit: type=1400 audit(1782228485.070:715): avc: denied { read write } for pid=5613 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.162991][ T29] audit: type=1400 audit(1782228485.070:716): avc: denied { open } for pid=5613 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.189307][ T29] audit: type=1400 audit(1782228485.070:717): avc: denied { ioctl } for pid=5613 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.224705][ T191] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 168.256967][ T5342] usb usb34-port1: unable to enumerate USB device [ 168.298583][ T191] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 168.307586][ T191] em28xx 2-1:0.132: board has no eeprom [ 168.342499][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.350090][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.357598][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.364573][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.372661][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.376952][ T191] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 168.379784][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.387674][ T191] em28xx 2-1:0.132: analog set to bulk mode. [ 168.394649][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.401163][ T5342] em28xx 2-1:0.132: Registering V4L2 extension [ 168.408129][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.660294][ T42] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 168.676746][ T191] usb 2-1: USB disconnect, device number 19 [ 168.686575][ T191] em28xx 2-1:0.132: Disconnecting em28xx [ 168.691868][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.708492][ T5793] asus 0003:0B05:1ABE.000E: unknown main item tag 0x0 [ 168.785945][ T5793] asus 0003:0B05:1ABE.000E: reserved main item tag 0xd [ 168.805580][ T5793] asus 0003:0B05:1ABE.000E: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.4-1/input0 [ 168.818602][ T5793] asus 0003:0B05:1ABE.000E: Asus handshake 5a failed to send: -71 [ 168.828984][ T5793] asus 0003:0B05:1ABE.000E: Failed to initialize 0x5a: -71. [ 168.832325][ T5342] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 168.839693][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 168.854190][ T5342] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 168.854273][ T5793] usb 5-1: USB disconnect, device number 31 [ 168.869249][ T42] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 168.870574][ T5342] em28xx 2-1:0.132: No AC97 audio processor [ 168.893050][ T42] usb 3-1: config 0 has no interface number 0 [ 168.905149][ T5342] usb 2-1: Decoder not found [ 168.907438][ T42] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.910805][ T7764] fido_id[7764]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 168.935379][ T5342] em28xx 2-1:0.132: failed to create media graph [ 168.939992][ T42] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 168.941811][ T5342] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 168.942401][ T5342] em28xx 2-1:0.132: Remote control support is not available for this card. [ 168.966144][ T42] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 168.973661][ T191] em28xx 2-1:0.132: Closing input extension [ 168.983524][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.985245][ T191] em28xx 2-1:0.132: Freeing device [ 168.998432][ T42] usb 3-1: Product: syz [ 169.002824][ T42] usb 3-1: Manufacturer: syz [ 169.008496][ T42] usb 3-1: SerialNumber: syz [ 169.026974][ T5708] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 169.045849][ T42] usb 3-1: config 0 descriptor?? [ 169.142585][ T42] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 169.153491][ T42] em28xx 3-1:0.132: Video interface 132 found: bulk [ 169.261884][ T5708] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 169.326828][ T7751] pimreg: tun_chr_ioctl cmd 2147767517 [ 169.360193][ T5708] usb 1-1: config 0 has no interface number 0 [ 169.408228][ T5708] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 169.471525][ T42] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 169.479260][ T5708] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 169.504682][ T5708] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 169.533939][ T5708] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 169.544774][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 169.557568][ T5708] usb 1-1: Product: syz [ 169.560121][ T42] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 169.595184][ T42] em28xx 3-1:0.132: board has no eeprom [ 169.609843][ T5708] usb 1-1: SerialNumber: syz [ 169.626216][ T5708] usb 1-1: config 0 descriptor?? [ 169.659493][ T5708] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 169.670824][ T5708] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input20 [ 169.685575][ T42] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 169.715016][ T42] em28xx 3-1:0.132: analog set to bulk mode. [ 169.733471][ T5793] em28xx 3-1:0.132: Registering V4L2 extension [ 169.767147][ T42] usb 3-1: USB disconnect, device number 28 [ 169.791725][ T42] em28xx 3-1:0.132: Disconnecting em28xx [ 169.893033][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 169.893736][ T5701] usb 1-1: USB disconnect, device number 29 [ 169.900027][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 169.957107][ T5701] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 169.972261][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 170.013576][ T5793] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 170.022226][ T5793] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 170.039169][ T5793] em28xx 3-1:0.132: No AC97 audio processor [ 170.046383][ T7781] batman_adv: batadv0: Interface deactivated: dummy0 [ 170.057166][ T5793] usb 3-1: Decoder not found [ 170.063031][ T5793] em28xx 3-1:0.132: failed to create media graph [ 170.070764][ T7781] batman_adv: batadv0: Removing interface: dummy0 [ 170.089079][ T7781] Bluetooth: MGMT ver 1.23 [ 170.090364][ T5793] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 170.095334][ T7781] binder: BINDER_SET_CONTEXT_MGR already set [ 170.107337][ T5793] em28xx 3-1:0.132: Remote control support is not available for this card. [ 170.116356][ T7781] binder: 7779:7781 ioctl 4018620d 2000000002c0 returned -16 [ 170.116996][ T42] em28xx 3-1:0.132: Closing input extension [ 170.132910][ T7781] netlink: 'syz.4.580': attribute type 10 has an invalid length. [ 170.132961][ T42] em28xx 3-1:0.132: Freeing device [ 170.141417][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.4.580'. [ 170.141541][ T7781] dummy0: entered promiscuous mode [ 170.196624][ T191] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 170.248863][ T7786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.582'. [ 170.372063][ T191] usb 2-1: device descriptor read/64, error -71 [ 170.696669][ T191] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 170.921612][ T191] usb 2-1: device descriptor read/64, error -71 [ 170.937733][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'. [ 171.057469][ T191] usb usb2-port1: attempt power cycle [ 171.160178][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.584'. [ 171.428255][ T191] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 171.569091][ T191] usb 2-1: device descriptor read/8, error -71 [ 171.589331][ T7804] could not open pipe file descriptor [ 171.621205][ T29] audit: type=1400 audit(1782228488.560:718): avc: denied { write } for pid=7803 comm="syz.3.587" path="socket:[18012]" dev="sockfs" ino=18012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.659171][ T29] audit: type=1400 audit(1782228488.600:719): avc: denied { getopt } for pid=7808 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.702221][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.590'. [ 171.756316][ T7812] can0: slcan on ptm0. [ 171.775624][ T29] audit: type=1400 audit(1782228488.710:720): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 171.803491][ T29] audit: type=1400 audit(1782228488.740:721): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.832994][ T29] audit: type=1400 audit(1782228488.740:722): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.860655][ T191] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 171.986831][ T42] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 172.036917][ T191] usb 2-1: device descriptor read/8, error -71 [ 172.072819][ T29] audit: type=1400 audit(1782228488.740:723): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.106182][ T7822] can0 (unregistered): slcan off ptm0. [ 172.151001][ T191] usb usb2-port1: unable to enumerate USB device [ 172.189994][ T29] audit: type=1400 audit(1782228488.740:724): avc: denied { read } for pid=5271 comm="dhcpcd" name="n30" dev="tmpfs" ino=5260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 172.271324][ T42] usb 1-1: config 0 interface 0 has no altsetting 0 [ 172.281779][ T7839] tmpfs: Bad value for 'mpol' [ 172.288069][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 172.305867][ T29] audit: type=1400 audit(1782228488.740:725): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=5260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 172.335878][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.356209][ T42] usb 1-1: config 0 descriptor?? [ 172.367566][ T29] audit: type=1400 audit(1782228488.740:726): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=5260 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 172.410105][ T191] libceph: connect (1)[c::]:6789 error -101 [ 172.421139][ T29] audit: type=1400 audit(1782228489.070:727): avc: denied { read } for pid=7826 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.441535][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 172.637183][ T7842] ceph: No mds server is up or the cluster is laggy [ 172.646360][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.646793][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.597'. [ 172.659614][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.733605][ T7852] netlink: 44 bytes leftover after parsing attributes in process `syz.4.598'. [ 172.819100][ T5621] Bluetooth: hci0: adv larger than maximum supported [ 172.819217][ T5621] Bluetooth: hci0: Malformed LE Event: 0x0d [ 172.820742][ T7809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.871937][ T7809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.892376][ T42] usbhid 1-1:0.0: can't add hid device: -71 [ 172.898900][ T42] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 172.921277][ T42] usb 1-1: USB disconnect, device number 30 [ 174.377846][ T5793] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 174.548649][ T5793] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 174.576141][ T5793] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 174.614918][ T5793] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 174.806513][ T191] IPVS: starting estimator thread 0... [ 174.916703][ T7898] IPVS: using max 60 ests per chain, 144000 per kthread [ 174.942419][ T7902] netlink: 'syz.3.609': attribute type 21 has an invalid length. [ 174.982213][ T7902] netlink: 'syz.3.609': attribute type 5 has an invalid length. [ 174.992867][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 175.075430][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.611'. [ 177.128505][ T5793] usb 5-1: string descriptor 0 read error: -71 [ 177.149782][ T5793] usb 5-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice= 0.40 [ 177.171841][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.196548][ T5621] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 177.197225][ T5793] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 177.202789][ T5620] Bluetooth: hci5: command 0x1003 tx timeout [ 177.222946][ T5793] usb 5-1: no configuration chosen from 1 choice [ 177.302725][ T7946] syz.4.622 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 177.307200][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 177.307224][ T29] audit: type=1400 audit(1782228494.250:743): avc: denied { name_bind } for pid=7954 comm="syz.2.625" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 177.344366][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 177.356285][ T5793] usb 5-1: USB disconnect, device number 32 [ 177.363834][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 177.373999][ T7957] "syz.0.623" (7957) uses obsolete ecb(arc4) skcipher [ 177.385021][ T7958] FAULT_INJECTION: forcing a failure. [ 177.385021][ T7958] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.423033][ T7958] CPU: 0 UID: 0 PID: 7958 Comm: syz.3.624 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.423062][ T7958] Tainted: [L]=SOFTLOCKUP [ 177.423068][ T7958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.423076][ T7958] Call Trace: [ 177.423081][ T7958] [ 177.423086][ T7958] dump_stack_lvl+0x100/0x190 [ 177.423108][ T7958] should_fail_ex.cold+0x5/0xa [ 177.423128][ T7958] _copy_from_iter+0x1f4/0x1690 [ 177.423156][ T7958] ? __pfx__copy_from_iter+0x10/0x10 [ 177.423181][ T7958] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 177.423203][ T7958] ? rcu_is_watching+0x12/0xc0 [ 177.423229][ T7958] copy_page_from_iter+0x238/0x300 [ 177.423262][ T7958] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 177.423282][ T7958] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 177.423298][ T7958] ? unwind_get_return_address+0x59/0xa0 [ 177.423314][ T7958] ? arch_stack_walk+0xa6/0xf0 [ 177.423332][ T7958] ? _kstrtoull+0x13c/0x1f0 [ 177.423347][ T7958] ? __pfx__kstrtoull+0x10/0x10 [ 177.423365][ T7958] tun_get_user+0x16d6/0x3c20 [ 177.423386][ T7958] ? __pfx_tun_get_user+0x10/0x10 [ 177.423402][ T7958] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 177.423421][ T7958] ? tun_get+0x191/0x370 [ 177.423434][ T7958] ? rcu_is_watching+0x12/0xc0 [ 177.423456][ T7958] ? tun_get+0x191/0x370 [ 177.423468][ T7958] ? lock_release+0x24d/0x310 [ 177.423489][ T7958] tun_chr_write_iter+0xdc/0x200 [ 177.423507][ T7958] vfs_write+0x6ac/0x1050 [ 177.423530][ T7958] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 177.423546][ T7958] ? __pfx_vfs_write+0x10/0x10 [ 177.423568][ T7958] ? lock_release+0x24d/0x310 [ 177.423592][ T7958] ksys_write+0x12a/0x250 [ 177.423614][ T7958] ? __pfx_ksys_write+0x10/0x10 [ 177.423637][ T7958] ? rcu_is_watching+0x12/0xc0 [ 177.423661][ T7958] do_syscall_64+0x115/0x870 [ 177.423688][ T7958] ? clear_bhb_loop+0x40/0x90 [ 177.423706][ T7958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.423722][ T7958] RIP: 0033:0x7fe00715d68e [ 177.423735][ T7958] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 177.423751][ T7958] RSP: 002b:00007fe008027fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 177.423768][ T7958] RAX: ffffffffffffffda RBX: 00007fe0080286c0 RCX: 00007fe00715d68e [ 177.423779][ T7958] RDX: 000000000000004a RSI: 0000200000000300 RDI: 00000000000000c8 [ 177.423789][ T7958] RBP: 00007fe008028090 R08: 0000000000000000 R09: 0000000000000000 [ 177.423799][ T7958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.423809][ T7958] R13: 00007fe007416128 R14: 00007fe007416090 R15: 00007ffcf69de8b8 [ 177.423825][ T7958] [ 177.695127][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 177.707255][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 177.720098][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.757247][ T24] usb 2-1: config 0 descriptor?? [ 177.790409][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 177.817438][ T24] smsusb:smsusb_probe: Device initialized with return code -19 [ 178.180528][ T29] audit: type=1400 audit(1782228495.120:744): avc: denied { create } for pid=7941 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 178.238958][ T191] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 178.312396][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 178.320371][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 178.406496][ T191] usb 5-1: Using ep0 maxpacket: 16 [ 178.417498][ T191] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 178.426920][ T191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.435101][ T191] usb 5-1: Product: syz [ 178.439562][ T191] usb 5-1: Manufacturer: syz [ 178.444392][ T191] usb 5-1: SerialNumber: syz [ 178.465095][ T191] usb 5-1: config 0 descriptor?? [ 178.587297][ T5342] libceph: connect (1)[c::]:6789 error -101 [ 178.596492][ T5342] libceph: mon0 (1)[c::]:6789 connect error [ 178.868609][ T5708] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 178.972459][ T191] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 178.987214][ T191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.997647][ T191] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 179.005635][ T191] usb 5-1: media controller created [ 179.018554][ T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.106912][ T5748] libceph: connect (1)[c::]:6789 error -101 [ 179.116471][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 179.122781][ T5748] libceph: mon0 (1)[c::]:6789 connect error [ 179.138117][ T5708] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 179.155681][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.174726][ T191] zl10353_read_register: readreg error (reg=127, ret==0) [ 179.183209][ T5708] usb 1-1: Product: syz [ 179.191246][ T5708] usb 1-1: Manufacturer: syz [ 179.191257][ T29] audit: type=1400 audit(1782228496.130:745): avc: denied { ioctl } for pid=7987 comm="syz.3.632" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 179.195946][ T191] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 179.195960][ T191] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 179.200651][ T191] usb 5-1: USB disconnect, device number 33 [ 179.226489][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 179.232642][ T5708] usb 1-1: SerialNumber: syz [ 179.273118][ T5708] usb 1-1: config 0 descriptor?? [ 179.323550][ T191] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 179.366955][ T24] usb 3-1: device descriptor read/64, error -71 [ 179.518921][ T5708] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 179.528950][ T5708] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 179.577524][ T5708] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 179.589688][ T5708] usb 1-1: USB disconnect, device number 31 [ 179.606976][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 179.737087][ T24] usb 3-1: device descriptor read/64, error -71 [ 179.739960][ T7997] veth0: entered promiscuous mode [ 179.750372][ T7997] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 179.848120][ T24] usb usb3-port1: attempt power cycle [ 179.864385][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.871867][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.958281][ T8000] geneve2: left promiscuous mode [ 179.963417][ T8000] geneve2: left allmulticast mode [ 179.972318][ T8000] bridge1: left promiscuous mode [ 179.990125][ T8000] bridge1: left allmulticast mode [ 180.006943][ T53] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.025523][ T53] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.038752][ T53] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.048531][ T53] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.099388][ T7942] ceph: No mds server is up or the cluster is laggy [ 180.160395][ T5708] usb 2-1: USB disconnect, device number 24 [ 180.216622][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 180.257913][ T24] usb 3-1: device descriptor read/8, error -71 [ 180.380091][ T29] audit: type=1400 audit(1782228497.320:746): avc: denied { name_bind } for pid=8018 comm="syz.4.642" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 180.419791][ T8019] SELinux: syz.4.642 (8019) wrote to user. This is no longer supported. [ 180.496505][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 180.512824][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.643'. [ 180.527075][ T24] usb 3-1: device descriptor read/8, error -71 [ 180.649715][ T24] usb usb3-port1: unable to enumerate USB device [ 181.496565][ T5701] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 181.659345][ T5701] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 181.686110][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'. [ 181.695163][ T5701] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 181.695205][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.714952][ T5701] usb 2-1: config 0 descriptor?? [ 181.739462][ T5701] smsusb:smsusb_probe: board id=8, interface number 0 [ 181.763841][ T5701] smsusb:smsusb_probe: Device initialized with return code -19 [ 182.010825][ T8046] overlayfs: overlapping lowerdir path [ 182.127281][ T5701] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 182.170510][ T191] libceph: connect (1)[c::]:6789 error -101 [ 182.179118][ T8056] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 182.197592][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 182.217315][ T8056] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.250540][ T8056] team0: Port device netdevsim1 added [ 182.280814][ T8060] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 182.290711][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 182.326202][ T5701] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 182.405699][ T8060] team0: Port device netdevsim1 removed [ 182.431985][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.443111][ T8060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.451858][ T8056] netlink: 100 bytes leftover after parsing attributes in process `syz.0.650'. [ 182.467936][ T5701] usb 4-1: config 0 descriptor?? [ 182.484997][ T5701] smsusb:smsusb_probe: board id=8, interface number 0 [ 182.499899][ T191] libceph: connect (1)[c::]:6789 error -101 [ 182.506085][ T8060] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 182.515455][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 182.533635][ T5701] smsusb:smsusb_probe: Device initialized with return code -19 [ 182.677285][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.655'. [ 182.851056][ T5748] libceph: connect (1)[c::]:6789 error -101 [ 182.881297][ T5748] libceph: mon0 (1)[c::]:6789 connect error [ 182.951799][ T5748] libceph: connect (1)[c::]:6789 error -101 [ 182.956548][ T5701] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 183.028972][ T5748] libceph: mon0 (1)[c::]:6789 connect error [ 183.069385][ T191] libceph: connect (1)[c::]:6789 error -101 [ 183.084740][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 183.176532][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 183.202048][ T5701] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.225876][ T5701] usb 3-1: config 0 has no interfaces? [ 183.235779][ T5701] usb 3-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=e8.32 [ 183.247238][ T5701] usb 3-1: New USB device strings: Mfr=218, Product=177, SerialNumber=95 [ 183.256087][ T5701] usb 3-1: Product: syz [ 183.261234][ T5701] usb 3-1: Manufacturer: syz [ 183.266218][ T5701] usb 3-1: SerialNumber: syz [ 183.318057][ T5701] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 183.347485][ T191] libceph: connect (1)[c::]:6789 error -101 [ 183.368854][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 183.456871][ T5793] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 183.616566][ T5793] usb 1-1: Using ep0 maxpacket: 32 [ 183.624398][ T5793] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 183.634501][ T5793] usb 1-1: config 0 has no interface number 0 [ 183.641686][ T5793] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 183.653869][ T5793] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 183.669204][ T5793] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 183.683302][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.692150][ T5793] usb 1-1: Product: syz [ 183.697391][ T5793] usb 1-1: Manufacturer: syz [ 183.702366][ T5793] usb 1-1: SerialNumber: syz [ 183.734225][ T5793] usb 1-1: config 0 descriptor?? [ 183.792978][ T29] audit: type=1400 audit(1782228500.730:747): avc: denied { create } for pid=8080 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.813921][ T29] audit: type=1400 audit(1782228500.730:748): avc: denied { bind } for pid=8080 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.835144][ T29] audit: type=1400 audit(1782228500.730:749): avc: denied { setopt } for pid=8080 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.857783][ T29] audit: type=1400 audit(1782228500.730:750): avc: denied { write } for pid=8080 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.896896][ T191] libceph: connect (1)[c::]:6789 error -101 [ 183.906838][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 183.951745][ T8076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.971022][ T8076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.044993][ T8083] FAULT_INJECTION: forcing a failure. [ 184.044993][ T8083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.058220][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.0.657 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.058246][ T8083] Tainted: [L]=SOFTLOCKUP [ 184.058252][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.058261][ T8083] Call Trace: [ 184.058268][ T8083] [ 184.058275][ T8083] dump_stack_lvl+0x100/0x190 [ 184.058300][ T8083] should_fail_ex.cold+0x5/0xa [ 184.058332][ T8083] _copy_from_user+0x2e/0xd0 [ 184.058355][ T8083] kstrtouint_from_user+0xd6/0x1d0 [ 184.058373][ T8083] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 184.058393][ T8083] ? rhashtable_insert_slow+0x990/0x1e40 [ 184.058416][ T8083] ? rcu_is_watching+0x12/0xc0 [ 184.058442][ T8083] proc_fail_nth_write+0x83/0x220 [ 184.058465][ T8083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 184.058486][ T8083] ? __pfx___might_resched+0x10/0x10 [ 184.058507][ T8083] vfs_write+0x2aa/0x1050 [ 184.058529][ T8083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 184.058551][ T8083] ? __pfx_vfs_write+0x10/0x10 [ 184.058573][ T8083] ? rcu_is_watching+0x12/0xc0 [ 184.058598][ T8083] ? __fget_files+0x21f/0x3d0 [ 184.058615][ T8083] ksys_write+0x12a/0x250 [ 184.058637][ T8083] ? __pfx_ksys_write+0x10/0x10 [ 184.058659][ T8083] ? rcu_is_watching+0x12/0xc0 [ 184.058682][ T8083] do_syscall_64+0x115/0x870 [ 184.058706][ T8083] ? clear_bhb_loop+0x40/0x90 [ 184.058724][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.058741][ T8083] RIP: 0033:0x7ff02a95d68e [ 184.058753][ T8083] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.058769][ T8083] RSP: 002b:00007ff02b871fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.058786][ T8083] RAX: ffffffffffffffda RBX: 00007ff02b8726c0 RCX: 00007ff02a95d68e [ 184.058797][ T8083] RDX: 0000000000000001 RSI: 00007ff02b8720a0 RDI: 000000000000000a [ 184.058806][ T8083] RBP: 00007ff02b872090 R08: 0000000000000000 R09: 0000000000000000 [ 184.058816][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.058826][ T8083] R13: 00007ff02ac16128 R14: 00007ff02ac16090 R15: 00007fff725869f8 [ 184.058842][ T8083] [ 184.285792][ T5793] radio-si470x 1-1:0.35: this is not a si470x device. [ 184.330681][ T5793] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 184.389570][ T8051] ceph: No mds server is up or the cluster is laggy [ 184.537297][ T5793] usb 1-1: USB disconnect, device number 32 [ 184.558399][ T5708] libceph: connect (1)[c::]:6789 error -101 [ 184.565819][ T5708] libceph: mon0 (1)[c::]:6789 connect error [ 184.589297][ T5701] usb 2-1: USB disconnect, device number 25 [ 184.654186][ T8087] Invalid option length (1151) for dns_resolver key [ 184.683629][ T29] audit: type=1400 audit(1782228501.620:751): avc: denied { map } for pid=8086 comm="syz.1.661" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 184.778101][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 184.793696][ T8092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8092 comm=syz.4.663 [ 184.828521][ T8044] ceph: No mds server is up or the cluster is laggy [ 184.856551][ T5793] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 184.886314][ T5708] usb 4-1: USB disconnect, device number 41 [ 185.023622][ T5793] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 185.169813][ T29] audit: type=1400 audit(1782228502.080:752): avc: denied { bind } for pid=8096 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.299717][ T29] audit: type=1400 audit(1782228502.140:753): avc: denied { getopt } for pid=8096 comm="syz.3.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.767341][ T5793] usb 1-1: config 0 has no interface number 0 [ 185.770194][ T191] apple-mfi-fastcharge 3-1: USB disconnect, device number 33 [ 185.774158][ T5793] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 185.797715][ T5793] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 185.807422][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.815826][ T5793] usb 1-1: Product: syz [ 185.820226][ T5793] usb 1-1: Manufacturer: syz [ 185.825433][ T5793] usb 1-1: SerialNumber: syz [ 185.842117][ T5793] usb 1-1: config 0 descriptor?? [ 186.054788][ T8085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.660'. [ 186.065544][ T8085] netlink: 'syz.0.660': attribute type 7 has an invalid length. [ 186.076225][ T8085] netlink: 'syz.0.660': attribute type 8 has an invalid length. [ 186.087322][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 186.118082][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.127076][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.140729][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.149405][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.165865][ T8085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.177948][ T8085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.200830][ T5793] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 186.211780][ T8119] binder_alloc: binder_alloc_mmap_handler: 8115 200000ffe000-200001000000 already mapped failed -16 [ 186.227838][ T5793] keyspan 1-1:0.133: unsupported endpoint type 0 [ 186.235940][ T5793] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 186.247199][ T5793] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 186.255421][ T5793] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 186.277147][ T5793] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 186.290946][ T5793] usb 1-1: USB disconnect, device number 33 [ 186.310545][ T5793] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 186.321158][ T5793] keyspan 1-1:0.133: device disconnected [ 186.821684][ T8125] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 186.837015][ T8125] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 186.855487][ T8125] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 186.871382][ T8125] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 187.712298][ T29] audit: type=1400 audit(1782228503.830:754): avc: denied { lock } for pid=8120 comm="syz.1.672" path="socket:[20076]" dev="sockfs" ino=20076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 187.739249][ T29] audit: type=1400 audit(1782228504.620:755): avc: denied { create } for pid=8127 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 188.160742][ T8130] vlan1: entered promiscuous mode [ 188.168842][ T8130] bridge0: entered promiscuous mode [ 188.416597][ T5708] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 188.596571][ T5342] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 188.632414][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.654292][ T5708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.688094][ T5708] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 188.732614][ T5708] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.756876][ T5342] usb 1-1: Using ep0 maxpacket: 32 [ 188.767403][ T5342] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 188.781187][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.800303][ T5342] usb 1-1: config 0 has no interface number 0 [ 188.800569][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.815071][ T5342] usb 1-1: too many endpoints for config 0 interface 52 altsetting 10: 254, using maximum allowed: 30 [ 188.841814][ T5708] usb 3-1: config 0 descriptor?? [ 188.894177][ T5342] usb 1-1: config 0 interface 52 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.932499][ T5342] usb 1-1: config 0 interface 52 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.975559][ T5342] usb 1-1: config 0 interface 52 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 189.023796][ T5342] usb 1-1: config 0 interface 52 has no altsetting 0 [ 189.046063][ T5342] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 189.071579][ T29] audit: type=1400 audit(1782228506.000:756): avc: denied { shutdown } for pid=8150 comm="syz.4.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 189.111029][ T5342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.149571][ T5708] usb 3-1: string descriptor 0 read error: -71 [ 189.162228][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.170912][ T5342] usb 1-1: config 0 descriptor?? [ 189.214655][ T5708] usbhid 3-1:0.0: can't add hid device: -71 [ 189.268724][ T5708] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 189.315148][ T5708] usb 3-1: USB disconnect, device number 34 [ 189.391634][ T29] audit: type=1400 audit(1782228506.330:757): avc: denied { getopt } for pid=8155 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 189.398736][ T8154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.684'. [ 189.451916][ T29] audit: type=1400 audit(1782228506.370:758): avc: denied { connect } for pid=8155 comm="syz.4.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.580634][ T8165] trusted_key: encrypted_key: master key parameter '' is invalid [ 190.635256][ T5342] uclogic 0003:5543:0522.000F: item fetching failed at offset 2/40 [ 190.660263][ T5342] uclogic 0003:5543:0522.000F: parse failed [ 190.675157][ T5342] uclogic 0003:5543:0522.000F: probe with driver uclogic failed with error -22 [ 190.690431][ T5748] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 190.723604][ T29] audit: type=1400 audit(1782228507.660:759): avc: denied { map } for pid=8170 comm="syz.2.690" path="/dev/usbmon0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 190.812336][ T29] audit: type=1400 audit(1782228507.750:760): avc: denied { append } for pid=8174 comm="syz.3.692" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 190.889357][ T5748] usb 5-1: config 185 has an invalid interface number: 95 but max is 0 [ 190.894933][ T5701] usb 1-1: USB disconnect, device number 34 [ 190.897810][ T5748] usb 5-1: config 185 contains an unexpected descriptor of type 0x1, skipping [ 190.897831][ T5748] usb 5-1: config 185 has no interface number 0 [ 190.953464][ T5748] usb 5-1: config 185 interface 95 altsetting 30 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 190.978533][ T5748] usb 5-1: config 185 interface 95 altsetting 30 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 191.282334][ T5748] usb 5-1: config 185 interface 95 altsetting 30 has a duplicate endpoint with address 0xF, skipping [ 191.293303][ T5748] usb 5-1: config 185 interface 95 altsetting 30 endpoint 0x3 has an invalid bInterval 253, changing to 7 [ 191.304642][ T5748] usb 5-1: config 185 interface 95 altsetting 30 has an invalid descriptor for endpoint zero, skipping [ 191.315772][ T5748] usb 5-1: config 185 interface 95 altsetting 30 has an invalid descriptor for endpoint zero, skipping [ 191.339785][ T5748] usb 5-1: config 185 interface 95 altsetting 30 bulk endpoint 0x1 has invalid maxpacket 64 [ 191.360880][ T5748] usb 5-1: config 185 interface 95 altsetting 30 has a duplicate endpoint with address 0x1, skipping [ 191.383035][ T5748] usb 5-1: config 185 interface 95 altsetting 30 has an invalid descriptor for endpoint zero, skipping [ 191.406391][ T5748] usb 5-1: config 185 interface 95 has no altsetting 0 [ 191.422281][ T5748] usb 5-1: New USB device found, idVendor=0681, idProduct=004a, bcdDevice=41.bd [ 191.434371][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.462367][ T5748] usb 5-1: Product: 덯纴瓌異᧧鄷ꢘ脼歽擅ᗔ啐띭➾餇킬꒻ꖻ㯆贜齃澛䛑樐ℶ⋸↟ᠩ鶜ㄜꅻ秝꼽∖ㅒꮜ꽹粔蜉蘁턇ꮄ [ 191.492296][ T5748] usb 5-1: Manufacturer: И [ 191.499525][ T5748] usb 5-1: SerialNumber: 뵋㠱㷋扒ᇀ⡢咵辀⍓旪⒴堁쪌퀜ଳᬶె唾勭ĝٹ᎛臾圭鶵풼⤔ΐꁾࡸ亘瑩庣莹Ꮪ숄璮岪夫 [ 191.571511][ T8189] netlink: 1852 bytes leftover after parsing attributes in process `syz.3.694'. [ 191.705094][ T8157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 191.713313][ T8157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 191.742920][ T29] audit: type=1326 audit(1782228508.680:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.689" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 191.791995][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 191.826721][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 191.843232][ T29] audit: type=1326 audit(1782228508.710:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.689" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 191.873626][ T8188] netlink: 'syz.1.689': attribute type 12 has an invalid length. [ 191.907269][ T29] audit: type=1326 audit(1782228508.710:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.689" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 191.946743][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.696'. [ 191.957019][ T29] audit: type=1326 audit(1782228508.710:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.689" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 191.991358][ T29] audit: type=1326 audit(1782228508.710:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8187 comm="syz.1.689" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 192.019985][ T5748] option 5-1:185.95: GSM modem (1-port) converter detected [ 192.405392][ T5748] usb 5-1: USB disconnect, device number 34 [ 192.413471][ T5748] option 5-1:185.95: device disconnected [ 192.674880][ T8222] trusted_key: encrypted_key: insufficient parameters specified [ 192.804964][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 192.814735][ T8228] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.253905][ T8243] netlink: 1852 bytes leftover after parsing attributes in process `syz.1.709'. [ 195.250460][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 195.250478][ T29] audit: type=1400 audit(1782228512.190:790): avc: denied { create } for pid=8252 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 195.364729][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 195.396699][ T8260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.716'. [ 195.419495][ T8260] team0: No ports can be present during mode change [ 197.467697][ T5793] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 197.556874][ T5819] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 197.652869][ T8299] netlink: 1852 bytes leftover after parsing attributes in process `syz.3.722'. [ 198.073631][ T5793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 198.085169][ T5793] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 198.095089][ T5793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.110929][ T5819] usb 5-1: device descriptor read/64, error -71 [ 198.128721][ T5793] usb 2-1: config 0 descriptor?? [ 198.139114][ T5793] smsusb:smsusb_probe: board id=8, interface number 0 [ 198.147091][ T5793] smsusb:smsusb_probe: Device initialized with return code -19 [ 198.338363][ T5342] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 198.418781][ T5819] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 198.455214][ T29] audit: type=1326 audit(1782228515.390:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.1.721" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x0 [ 198.517110][ T5342] usb 1-1: Using ep0 maxpacket: 16 [ 198.525469][ T5342] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 198.535246][ T5342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.543498][ T5342] usb 1-1: Product: syz [ 198.548301][ T5342] usb 1-1: Manufacturer: syz [ 198.552923][ T5342] usb 1-1: SerialNumber: syz [ 198.563808][ T5342] usb 1-1: config 0 descriptor?? [ 198.566878][ T5819] usb 5-1: device descriptor read/64, error -71 [ 198.606845][ T5748] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 198.641731][ T191] libceph: connect (1)[c::]:6789 error -101 [ 198.648643][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 198.656173][ T191] libceph: connect (1)[c::]:6789 error -101 [ 198.663247][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 198.687000][ T5819] usb usb5-port1: attempt power cycle [ 198.769523][ T5748] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 198.789428][ T5748] usb 3-1: config 127 has an invalid descriptor of length 174, skipping remainder of the config [ 198.806165][ T5748] usb 3-1: config 127 has no interface number 0 [ 198.812841][ T5748] usb 3-1: config 127 interface 57 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.830951][ T5748] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 198.840806][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.849290][ T5748] usb 3-1: Product: syz [ 198.869667][ T5748] usb 3-1: Manufacturer: syz [ 198.883804][ T5748] usb 3-1: SerialNumber: syz [ 198.927182][ T191] libceph: connect (1)[c::]:6789 error -101 [ 199.043422][ T5342] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 199.051211][ T191] libceph: mon0 (1)[c::]:6789 connect error [ 199.059405][ T5342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.070468][ T5342] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 199.076586][ T5819] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 199.078982][ T5342] usb 1-1: media controller created [ 199.118443][ T5342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.552948][ T5819] usb 5-1: device descriptor read/8, error -71 [ 199.567510][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.576836][ T11] libceph: connect (1)[c::]:6789 error -101 [ 199.578042][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.584620][ T11] libceph: mon0 (1)[c::]:6789 connect error [ 199.597086][ T5342] zl10353_read_register: readreg error (reg=127, ret==0) [ 199.604431][ T5342] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 199.613757][ T5342] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 199.630775][ T5748] asix 3-1:127.57: probe with driver asix failed with error -22 [ 199.651913][ T5342] usb 1-1: USB disconnect, device number 35 [ 199.669017][ T5748] usb 3-1: USB disconnect, device number 35 [ 199.706318][ T5342] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 199.796526][ T5819] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 199.837093][ T5819] usb 5-1: device descriptor read/8, error -71 [ 199.956929][ T5819] usb usb5-port1: unable to enumerate USB device [ 200.354607][ T8337] netlink: 72 bytes leftover after parsing attributes in process `syz.3.734'. [ 200.594159][ T5748] libceph: connect (1)[c::]:6789 error -101 [ 200.616609][ T5748] libceph: mon0 (1)[c::]:6789 connect error [ 201.017119][ T5342] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 201.106043][ T8320] ceph: No mds server is up or the cluster is laggy [ 201.172512][ T5748] usb 2-1: USB disconnect, device number 26 [ 201.196469][ T5342] usb 4-1: Using ep0 maxpacket: 8 [ 201.215473][ T5342] usb 4-1: unable to get BOS descriptor or descriptor too short [ 201.239221][ T5342] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 201.253878][ T5342] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 107, changing to 10 [ 201.283637][ T5342] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 201.294299][ T29] audit: type=1400 audit(1782228518.220:792): avc: denied { setopt } for pid=8347 comm="syz.4.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 201.313611][ T5342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.322436][ T5342] usb 4-1: Product: syz [ 201.326878][ T5342] usb 4-1: Manufacturer: syz [ 201.331490][ T5342] usb 4-1: SerialNumber: syz [ 201.338724][ T5819] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 201.351267][ T8337] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 201.396515][ T11] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 201.423586][ T8355] input: syz0 as /devices/virtual/input/input21 [ 201.434950][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 201.546599][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 201.554591][ T5819] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 201.555763][ T11] usb 1-1: config 251 has an invalid interface number: 202 but max is 0 [ 201.564904][ T5819] usb 3-1: config 0 has no interface number 0 [ 201.576322][ T11] usb 1-1: config 251 has no interface number 0 [ 201.591412][ T5819] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 201.606626][ T11] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 201.619439][ T11] usb 1-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 201.634668][ T5819] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 201.635845][ T5342] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.646594][ T5819] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 201.653838][ T11] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 201.665285][ T5819] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 201.674121][ T5342] usb 4-1: MIDIStreaming interface descriptor not found [ 201.674144][ T5342] usb 4-1: too many endpoints [ 201.675492][ T11] usb 1-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 201.687272][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 201.693557][ T11] usb 1-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.696276][ T5819] usb 3-1: Product: syz [ 201.708769][ T11] usb 1-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 201.718586][ T5819] usb 3-1: SerialNumber: syz [ 201.728932][ T11] usb 1-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.772701][ T5342] usb 4-1: USB disconnect, device number 42 [ 201.779760][ T11] usb 1-1: config 251 interface 202 has no altsetting 0 [ 201.788888][ T11] usb 1-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 201.798685][ T11] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 201.807134][ T11] usb 1-1: Product: syz [ 201.811446][ T11] usb 1-1: SerialNumber: syz [ 201.833657][ T8342] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 201.841835][ T5819] usb 3-1: config 0 descriptor?? [ 201.847363][ T6545] udevd[6545]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.881220][ T5819] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 201.890564][ T5819] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input22 [ 202.049046][ T11] cxacru 1-1:251.202: submit of read urb for cm 0x90 failed (-90) [ 202.056959][ T11] cxacru 1-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 202.064396][ T11] cxacru 1-1:251.202: probe with driver cxacru failed with error -22 [ 202.078737][ T11] usb 1-1: USB disconnect, device number 36 [ 202.100806][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 202.787605][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.796624][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.132529][ T8367] netlink: 'syz.3.744': attribute type 11 has an invalid length. [ 203.587731][ T8374] netlink: 'syz.4.747': attribute type 3 has an invalid length. [ 203.699499][ T11] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 204.141243][ T11] usb 2-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 204.212842][ T5342] usb 3-1: USB disconnect, device number 36 [ 204.235085][ T8377] syzkaller0: entered promiscuous mode [ 204.262935][ T5342] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 204.286312][ T11] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8 [ 204.297845][ T8377] syzkaller0: entered allmulticast mode [ 204.321446][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.365346][ T11] usb 2-1: Product: syz [ 204.377392][ T11] usb 2-1: Manufacturer: syz [ 204.392942][ T11] usb 2-1: SerialNumber: syz [ 204.621792][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.013956][ T8393] overlayfs: failed to resolve './file1': -2 [ 205.223487][ T5342] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 205.231693][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.449805][ T5342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 205.465762][ T5342] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 205.478880][ T5342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.497641][ T5342] usb 3-1: config 0 descriptor?? [ 205.511359][ T5342] smsusb:smsusb_probe: board id=8, interface number 0 [ 205.932488][ T5342] smsusb:smsusb_probe: Device initialized with return code -19 [ 206.080126][ T29] audit: type=1326 audit(1782228523.020:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.2.750" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0730f9ce59 code=0x0 [ 206.258937][ T5819] libceph: connect (1)[c::]:6789 error -101 [ 206.284583][ T5819] libceph: mon0 (1)[c::]:6789 connect error [ 206.306536][ T191] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 206.523052][ T191] usb 5-1: device descriptor read/64, error -71 [ 206.577209][ T5701] libceph: connect (1)[c::]:6789 error -101 [ 207.063838][ T5701] libceph: mon0 (1)[c::]:6789 connect error [ 207.117867][ T11] usbsevseg 2-1:219.0: USB 7 Segment device now attached [ 207.132762][ T11] usb 2-1: USB disconnect, device number 27 [ 207.157646][ T11] usbsevseg 2-1:219.0: USB 7 Segment now disconnected [ 207.198110][ T191] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 207.211840][ T29] audit: type=1400 audit(1782228524.150:794): avc: denied { accept } for pid=8426 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.319524][ T29] audit: type=1400 audit(1782228524.260:795): avc: denied { map } for pid=8426 comm="syz.1.761" path="socket:[21476]" dev="sockfs" ino=21476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.346050][ T8416] ceph: No mds server is up or the cluster is laggy [ 207.366626][ T191] usb 5-1: device descriptor read/64, error -71 [ 207.373739][ T29] audit: type=1400 audit(1782228524.260:796): avc: denied { read } for pid=8426 comm="syz.1.761" path="socket:[21476]" dev="sockfs" ino=21476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 207.494712][ T191] usb usb5-port1: attempt power cycle [ 207.637705][ T8437] binder: 8435:8437 ioctl c038563c 200000000180 returned -22 [ 207.836663][ T191] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 207.867569][ T191] usb 5-1: device descriptor read/8, error -71 [ 207.960148][ T5793] usb 3-1: USB disconnect, device number 37 [ 208.215770][ T191] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 208.228895][ T8449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.440475][ T191] usb 5-1: device descriptor read/8, error -71 [ 208.498864][ T29] audit: type=1400 audit(1782228525.440:797): avc: denied { connect } for pid=8419 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.528771][ T29] audit: type=1400 audit(1782228525.440:798): avc: denied { setopt } for pid=8419 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.560419][ T191] usb usb5-port1: unable to enumerate USB device [ 208.643042][ T8455] overlayfs: failed to resolve './file2': -2 [ 208.816520][ T5793] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 208.906565][ T5819] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 209.098099][ T8460] capability: warning: `syz.1.770' uses 32-bit capabilities (legacy support in use) [ 209.150210][ T8459] syzkaller0: entered promiscuous mode [ 209.161313][ T5819] usb 1-1: device descriptor read/64, error -71 [ 209.196675][ T8459] syzkaller0: entered allmulticast mode [ 209.296589][ T29] audit: type=1400 audit(1782228526.150:799): avc: denied { getopt } for pid=8452 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 209.459968][ T8465] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.475097][ T8465] veth0: left promiscuous mode [ 209.956753][ T5819] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 210.008668][ T29] audit: type=1326 audit(1782228526.940:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.1.770" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 210.098126][ T29] audit: type=1326 audit(1782228526.940:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.1.770" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 210.186644][ T29] audit: type=1326 audit(1782228526.940:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.1.770" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 210.259451][ T29] audit: type=1326 audit(1782228526.940:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8456 comm="syz.1.770" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27a59ce59 code=0x7ffc0000 [ 210.376349][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.383595][ T7125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.578488][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.585810][ T7125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.729902][ T5819] usb 1-1: device descriptor read/64, error -71 [ 210.887159][ T5819] usb usb1-port1: attempt power cycle [ 211.721361][ T5819] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 211.730299][ T5793] usb 4-1: unable to get BOS descriptor or descriptor too short [ 211.739830][ T5793] usb 4-1: no configurations [ 211.744689][ T5793] usb 4-1: can't read configurations, error -22 [ 212.058455][ T5819] usb 1-1: device descriptor read/8, error -71 [ 212.213579][ T8487] netlink: 204 bytes leftover after parsing attributes in process `syz.1.779'. [ 212.233142][ T8487] netlink: 84 bytes leftover after parsing attributes in process `syz.1.779'. [ 212.579876][ T8493] syzkaller0: entered promiscuous mode [ 212.599463][ T8493] syzkaller0: entered allmulticast mode [ 212.671899][ T8500] tipc: Started in network mode [ 212.677721][ T8500] tipc: Node identity 7f000001, cluster identity 4711 [ 212.685159][ T8500] tipc: Enabled bearer , priority 10 [ 213.450785][ T5793] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 213.788589][ T8518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.983596][ T42] tipc: Node number set to 2130706433 [ 214.898637][ T8528] netlink: 'syz.2.790': attribute type 29 has an invalid length. [ 214.964195][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 214.964211][ T29] audit: type=1400 audit(1782228531.900:872): avc: denied { mounton } for pid=8520 comm="syz.1.787" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 214.964572][ T8534] EXT4-fs (loop1): unable to read superblock [ 215.186785][ T42] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 215.389612][ T42] usb 5-1: config 0 has no interfaces? [ 215.400844][ T42] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 215.419010][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.434030][ T42] usb 5-1: config 0 descriptor?? [ 215.674980][ T42] usb 5-1: USB disconnect, device number 43 [ 215.724589][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 216.386487][ T191] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 216.637936][ T191] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.366897][ T191] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 217.376354][ T191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.385779][ T191] usb 1-1: config 0 descriptor?? [ 217.402951][ T191] pwc: Askey VC010 type 2 USB webcam detected. [ 217.506557][ T5793] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 217.617930][ T191] pwc: send_video_command error -71 [ 217.626191][ T191] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 217.635143][ T191] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 217.651454][ T191] usb 1-1: USB disconnect, device number 41 [ 217.658180][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 217.668580][ T8579] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5612] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[8579] [ 217.696973][ T5793] usb 5-1: Using ep0 maxpacket: 32 [ 217.703588][ T5793] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 217.718091][ T5793] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 217.730474][ T5793] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 217.743244][ T29] audit: type=1400 audit(1782228534.690:873): avc: denied { remount } for pid=8578 comm="syz.1.801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 217.743320][ T5793] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 217.777575][ T5793] usb 5-1: config 0 interface 0 has no altsetting 0 [ 217.795186][ T5793] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 217.805619][ T5793] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 217.814686][ T5793] usb 5-1: Product: syz [ 217.819504][ T5793] usb 5-1: Manufacturer: syz [ 217.824320][ T5793] usb 5-1: SerialNumber: syz [ 217.835239][ T5793] usb 5-1: config 0 descriptor?? [ 217.850665][ T5793] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 217.867946][ T5793] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 217.890283][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.803'. [ 217.912461][ T8584] veth0: entered promiscuous mode [ 217.926495][ T5708] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 217.950718][ T8585] netlink: 14 bytes leftover after parsing attributes in process `syz.2.803'. [ 217.965089][ T8585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.976242][ T8585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.987683][ T8585] bond0 (unregistering): Released all slaves [ 217.996258][ T8583] veth0: left promiscuous mode [ 218.098203][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.118649][ T191] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 218.138628][ T5708] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 218.159573][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.178021][ T5708] usb 4-1: config 0 descriptor?? [ 218.188194][ T5793] usb 5-1: USB disconnect, device number 44 [ 218.193219][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 218.217053][ T5793] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 218.307965][ T191] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.326545][ T191] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 218.345951][ T191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.384600][ T191] usb 1-1: config 0 descriptor?? [ 218.402479][ T5708] pwc: send_video_command error -71 [ 218.416201][ T191] pwc: Askey VC010 type 2 USB webcam detected. [ 218.423458][ T5708] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 218.432776][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 218.432781][ T5708] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 218.438238][ T8600] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 218.445426][ T5708] usb 4-1: USB disconnect, device number 46 [ 218.802670][ T11] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 218.821107][ T191] pwc: recv_control_msg error -32 req 02 val 2b00 [ 218.828530][ T191] pwc: recv_control_msg error -32 req 02 val 2700 [ 218.835641][ T191] pwc: recv_control_msg error -32 req 02 val 2c00 [ 218.842983][ T191] pwc: recv_control_msg error -32 req 04 val 1000 [ 218.850264][ T191] pwc: recv_control_msg error -32 req 04 val 1300 [ 218.857460][ T191] pwc: recv_control_msg error -32 req 04 val 1400 [ 218.864529][ T191] pwc: recv_control_msg error -32 req 02 val 2000 [ 218.871675][ T191] pwc: recv_control_msg error -32 req 02 val 2100 [ 218.879103][ T191] pwc: recv_control_msg error -32 req 04 val 1500 [ 218.886312][ T191] pwc: recv_control_msg error -32 req 02 val 2500 [ 218.896530][ T191] pwc: recv_control_msg error -32 req 02 val 2400 [ 218.957683][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.967998][ T11] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 218.977242][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.986747][ T11] usb 2-1: config 0 descriptor?? [ 218.994758][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 219.056474][ T5708] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 219.115073][ T191] pwc: recv_control_msg error -32 req 02 val 2900 [ 219.236979][ T11] pwc: send_video_command error -71 [ 219.246354][ T11] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 219.254639][ T11] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 219.269180][ T11] usb 2-1: USB disconnect, device number 28 [ 219.542499][ T5708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.553919][ T5708] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 219.563091][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.572349][ T5708] usb 4-1: config 0 descriptor?? [ 219.579828][ T5708] pwc: Askey VC010 type 2 USB webcam detected. [ 219.666975][ T191] pwc: recv_control_msg error -71 req 04 val 1200 [ 219.674946][ T191] pwc: Registered as video103. [ 219.682502][ T191] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input25 [ 219.701494][ T191] usb 1-1: USB disconnect, device number 42 [ 219.826456][ T11] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 219.977589][ T11] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.989121][ T11] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 219.998379][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00 [ 220.004847][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.013367][ T5708] pwc: recv_control_msg error -32 req 02 val 2700 [ 220.020949][ T5708] pwc: recv_control_msg error -32 req 02 val 2c00 [ 220.027513][ T11] usb 2-1: config 0 descriptor?? [ 220.079510][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 220.086007][ T5708] pwc: recv_control_msg error -32 req 04 val 1000 [ 220.093015][ T5708] pwc: recv_control_msg error -32 req 04 val 1300 [ 220.099988][ T5708] pwc: recv_control_msg error -32 req 04 val 1400 [ 220.106912][ T5708] pwc: recv_control_msg error -32 req 02 val 2000 [ 220.114506][ T5708] pwc: recv_control_msg error -32 req 02 val 2100 [ 220.124678][ T5708] pwc: recv_control_msg error -32 req 04 val 1500 [ 220.131740][ T5708] pwc: recv_control_msg error -32 req 02 val 2500 [ 220.139909][ T5708] pwc: recv_control_msg error -32 req 02 val 2400 [ 220.348081][ T5708] pwc: recv_control_msg error -32 req 02 val 2900 [ 325.406380][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 325.413348][ C0] rcu: 1-...!: (0 ticks this GP) idle=d8fc/1/0x4000000000000000 softirq=34424/34424 fqs=0 [ 325.423315][ C0] rcu: (detected by 0, t=10506 jiffies, g=31825, q=292 ncpus=2) [ 325.431015][ C0] Sending NMI from CPU 0 to CPUs 1: [ 325.431038][ C1] NMI backtrace for cpu 1 [ 325.431052][ C1] CPU: 1 UID: 0 PID: 8620 Comm: syz.0.813 Tainted: G L syzkaller #0 PREEMPT(full) [ 325.431071][ C1] Tainted: [L]=SOFTLOCKUP [ 325.431076][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.431084][ C1] RIP: 0010:taprio_set_budgets+0x63/0x310 [ 325.431104][ C1] Code: 02 00 0f 85 bf 02 00 00 48 8b 44 24 18 48 8b 68 08 48 b8 00 00 00 00 00 fc ff df 48 8d 7d 40 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 8d 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6d 40 48 89 [ 325.431117][ C1] RSP: 0018:ffffc90000a08d78 EFLAGS: 00000046 [ 325.431129][ C1] RAX: dffffc0000000000 RBX: ffff8880302f7280 RCX: 1ffff1100a8f06a6 [ 325.431138][ C1] RDX: 1ffff1100605ee08 RSI: ffffffff89a8b182 RDI: ffff8880302f7040 [ 325.431147][ C1] RBP: ffff8880302f7000 R08: 0000000000000005 R09: 0000000000000000 [ 325.431155][ C1] R10: 0000000000000000 R11: ffffc90000a08ff8 R12: 0000000000000000 [ 325.431164][ C1] R13: ffff8880547aac00 R14: ffff8880547aac00 R15: ffff8880547aac00 [ 325.431173][ C1] FS: 00007ff02b8936c0(0000) GS:ffff8881243ef000(0000) knlGS:0000000000000000 [ 325.431187][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.431196][ C1] CR2: 00007ff02b871ff8 CR3: 00000000748df000 CR4: 00000000003526f0 [ 325.431205][ C1] Call Trace: [ 325.431210][ C1] [ 325.431220][ C1] advance_sched+0x66e/0xd20 [ 325.431238][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 325.431257][ C1] ? __pfx_advance_sched+0x10/0x10 [ 325.431271][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 325.431294][ C1] hrtimer_interrupt+0x3e5/0x940 [ 325.431311][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 325.431333][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 325.431354][ C1] [ 325.431359][ C1] [ 325.431364][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.431379][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 325.431399][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 4d 47 f6 48 89 df e8 de 9c 47 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 ae 36 f6 65 8b 05 ae 48 75 08 85 c0 74 16 5b [ 325.431412][ C1] RSP: 0018:ffffc9000f037d78 EFLAGS: 00000246 [ 325.431422][ C1] RAX: 0000000000000046 RBX: ffffffff9b22b3d8 RCX: ffffffff8211cc5f [ 325.431431][ C1] RDX: 0000000000000000 RSI: ffffffff8c1e6000 RDI: ffffffff8b9dc792 [ 325.431439][ C1] RBP: 0000000000000287 R08: 0000000000000000 R09: fffffbfff21b6932 [ 325.431448][ C1] R10: 0000000000000000 R11: ffffffffffffffff R12: 1ffff92001e06fb6 [ 325.431457][ C1] R13: 000000000cfaedc6 R14: 000000000cfaedc6 R15: 0000000000000000 [ 325.431469][ C1] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 325.431487][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 325.431506][ C1] do_settimeofday64+0x326/0x4d0 [ 325.431523][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 325.431537][ C1] ? security_capable+0x80/0x260 [ 325.431555][ C1] ? siw_tx_hdt+0x291c/0x2ea0 [ 325.431568][ C1] ? capable+0xd3/0xf0 [ 325.431585][ C1] do_sys_settimeofday64+0x1dc/0x260 [ 325.431603][ C1] __x64_sys_clock_settime+0x1c1/0x2a0 [ 325.431617][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 325.431631][ C1] ? rcu_is_watching+0x12/0xc0 [ 325.431652][ C1] do_syscall_64+0x115/0x870 [ 325.431676][ C1] ? clear_bhb_loop+0x40/0x90 [ 325.431692][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.431705][ C1] RIP: 0033:0x7ff02a99ce59 [ 325.431717][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.431730][ C1] RSP: 002b:00007ff02b893028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 325.431743][ C1] RAX: ffffffffffffffda RBX: 00007ff02ac15fa0 RCX: 00007ff02a99ce59 [ 325.431752][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 325.431760][ C1] RBP: 00007ff02aa32e6f R08: 0000000000000000 R09: 0000000000000000 [ 325.431769][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.431777][ C1] R13: 00007ff02ac16038 R14: 00007ff02ac15fa0 R15: 00007fff725869f8 [ 325.431790][ C1] [ 325.432033][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g31825 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 325.845277][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 325.855236][ C0] rcu: RCU grace-period kthread stack dump: [ 325.861105][ C0] task:rcu_preempt state:R running task stack:29168 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 325.874582][ C0] Call Trace: [ 325.877845][ C0] [ 325.880767][ C0] __schedule+0x125c/0x6730 [ 325.885270][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.890028][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 325.896092][ C0] ? __pfx___schedule+0x10/0x10 [ 325.900935][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.905711][ C0] ? schedule+0x2bf/0x390 [ 325.910032][ C0] ? lock_release+0x24d/0x310 [ 325.914700][ C0] schedule+0xdd/0x390 [ 325.918764][ C0] schedule_timeout+0x127/0x280 [ 325.923603][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 325.928965][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 325.934415][ C0] ? __pfx_process_timeout+0x10/0x10 [ 325.939695][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 325.945492][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 325.950945][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 325.955700][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 325.960974][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 325.965900][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 325.971089][ C0] ? rcu_is_watching+0x12/0xc0 [ 325.975849][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 325.981911][ C0] rcu_gp_kthread+0x179/0x230 [ 325.986578][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 325.991764][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 325.997824][ C0] ? __kthread_parkme+0x18c/0x230 [ 326.002933][ C0] ? kthread+0x13a/0x450 [ 326.007183][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 326.012370][ C0] kthread+0x370/0x450 [ 326.016423][ C0] ? __pfx_kthread+0x10/0x10 [ 326.020998][ C0] ret_from_fork+0x72b/0xd50 [ 326.025583][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 326.030683][ C0] ? __switch_to+0x800/0x10f0 [ 326.035348][ C0] ? __pfx_kthread+0x10/0x10 [ 326.039922][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.044675][ C0] [ 326.047680][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 326.053990][ C0] CPU: 0 UID: 0 PID: 6512 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 326.064999][ C0] Tainted: [L]=SOFTLOCKUP [ 326.069319][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.079361][ C0] Workqueue: events_unbound toggle_allocation_gate [ 326.085855][ C0] RIP: 0010:smp_call_function_many_cond+0x589/0x16c0 [ 326.092520][ C0] Code: b8 00 00 00 00 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 b9 95 0c 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 2c 0f 00 00 8b 45 08 31 [ 326.112110][ C0] RSP: 0018:ffffc9000322f878 EFLAGS: 00000293 [ 326.118172][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fce98d [ 326.126129][ C0] RDX: ffff8880358a0000 RSI: ffffffff81fce967 RDI: ffff8880358a0000 [ 326.134086][ C0] RBP: ffff8880b85410c0 R08: 0000000000000005 R09: 0000000000000000 [ 326.142041][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 326.149996][ C0] R13: ffffed10170a8219 R14: 0000000000000001 R15: ffff8880b843c700 [ 326.157951][ C0] FS: 0000000000000000(0000) GS:ffff8881242ef000(0000) knlGS:0000000000000000 [ 326.166870][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.173441][ C0] CR2: 00007ff02b872d58 CR3: 000000000e592000 CR4: 00000000003526f0 [ 326.181397][ C0] Call Trace: [ 326.184661][ C0] [ 326.187578][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 326.192598][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 326.198915][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 326.204283][ C0] ? __pfx___text_poke+0x10/0x10 [ 326.209206][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 326.214230][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 326.219334][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 326.225216][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 326.230930][ C0] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 326.236812][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 326.243042][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 326.249277][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 326.255244][ C0] jump_label_update+0x37a/0x550 [ 326.260171][ C0] static_key_enable_cpuslocked+0x1bc/0x270 [ 326.266052][ C0] static_key_enable+0x1a/0x20 [ 326.270806][ C0] toggle_allocation_gate+0xfe/0x2d0 [ 326.276080][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 326.282058][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 326.287939][ C0] ? rcu_is_watching+0x12/0xc0 [ 326.292699][ C0] ? lock_acquire+0x301/0x370 [ 326.297363][ C0] ? rcu_is_watching+0x12/0xc0 [ 326.302121][ C0] ? rcu_is_watching+0x12/0xc0 [ 326.306881][ C0] process_one_work+0xa23/0x1940 [ 326.311810][ C0] ? __pfx_process_one_work+0x10/0x10 [ 326.317173][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 326.323056][ C0] worker_thread+0x5ef/0xe50 [ 326.327634][ C0] ? __pfx_worker_thread+0x10/0x10 [ 326.332732][ C0] ? kthread+0x13a/0x450 [ 326.336964][ C0] ? __pfx_worker_thread+0x10/0x10 [ 326.342060][ C0] kthread+0x370/0x450 [ 326.346116][ C0] ? __pfx_kthread+0x10/0x10 [ 326.350689][ C0] ret_from_fork+0x72b/0xd50 [ 326.355269][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 326.360370][ C0] ? rcu_is_watching+0x12/0xc0 [ 326.365124][ C0] ? __switch_to+0x800/0x10f0 [ 326.369787][ C0] ? __pfx_kthread+0x10/0x10 [ 326.374364][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.379117][ C0]