last executing test programs: 10.881244243s ago: executing program 4 (id=697): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) connect$netlink(r1, 0x0, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000018}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fedbdf250a0000fa04002d0000000000060028000400000008003b000400000008003a000180000001ad15a2a41e2dc38b895cf8a29f1250cbfb93678be150c533dbc16837638957792072fa3d22eb62674cbe543ab02bb89b2800499ca093a7e9b025d88608f614175158ea576bf17199ab0a018de230dcb0157c08be7e7810d21e056fe8c0ee01f711da8d38b5f2ddfcf282673ccfc57fd50768790a85d03594be735dda69b0717644a9d5a59527ce3bca652ec1c757c9c5396cd8720b4b2b5769b9f4c5ecc08456d34fadc85c2da80a5675366ffec052e6d6b17c6881bd8aa923dc38328eb4e8e841bfcd7634f1"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async, rerun: 64) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setitimer(0x2, 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100), 0x10) (async) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffe, 0x8, 0xffffffff, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) (async) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r11, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1e173a7c06ae94d30180c2000003080045b200280065000003069078ac14142eac1e010146254e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2fffd9078fff7"], 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10.373424712s ago: executing program 4 (id=699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4040) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2, 0x80805, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32=0x0], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000001380), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 9.465163356s ago: executing program 4 (id=704): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240)="b6e5cfef4d95eb7133d5038aa01bea6b7275532c76d659761839b8de14d66fddbb2757c01de82fc92282a0bfdd6fe9301e0484651d53035ce4893bae70d833e8ffa27f9d29c4f69c2a0257e6187afd0a424e44690b0e376483e48617f1d4e793f54a2e7e7cbd2d41e045f0c5eebb7330c4fc4d3110", &(0x7f00000000c0)=@udp=r4}, 0x20) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket$key(0xf, 0x3, 0x2) 8.097291797s ago: executing program 4 (id=710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x2d) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) connect$packet(r1, &(0x7f00000002c0)={0x11, 0xf7, r4, 0x1, 0xc9, 0x6, @multicast}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000d90cdd0703b4b605ecfe0200"/39], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/157, 0x9d) timerfd_create(0x2, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r10, 0xc048aec8, &(0x7f00000000c0)={[{0x6, 0x9, 0x7, 0x2, 0xad, 0x9, 0x6, 0x7, 0x4, 0x1, 0xd, 0x36}, {0x9fe8, 0x9, 0x2, 0xeb, 0xf7, 0xa, 0x10, 0x80, 0x1, 0xb1, 0x5, 0x2, 0xf}, {0xbd, 0xb, 0x2, 0x3, 0x81, 0x4, 0x7, 0x0, 0x3, 0x6, 0x4, 0x90}], 0x9}) 7.882986572s ago: executing program 1 (id=714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchdir(r0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) open_by_handle_at(r3, 0x0, 0x478041) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) (async, rerun: 32) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x4, r5, 0x0, 0x1, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r5, r2}}, 0x18) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f01000000000000950000000000000023b5529af540d638c848bcc68f10d49a05fa771db5bb17287ca166db461d0b66dabfa09abdacb45c2b89eb45221f744d5ac26389ba6aaea96db4c330fc2d9d5c0005895af5f58ebbfe713efe96f24e98f7e3bef28dc95727b7c186f02497f723d25681162b3328a2a07e8a4d3fa1301898c0f32adf4dd0765a2372524858709df7446a7053bec01b0e0f19a0dd25348164d5e7c53dc915afc22c2c0c6739f6c9da94c55ee5ce1e14de444de1852c4c2dc109ce47c8851f52f7b1023e09357178a95f7b04306a190d8714bf0a"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$KVM_RUN(r8, 0xae80, 0x0) 7.650395341s ago: executing program 1 (id=717): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7, 0xddff}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x9, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x0, 0x5, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRESHEX=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x529, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB, @ANYRES64=0x0], 0x20) 7.595627736s ago: executing program 2 (id=719): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) inotify_init() r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10000}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x1f00}) 6.514540313s ago: executing program 2 (id=720): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240)="b6e5cfef4d95eb7133d5038aa01bea6b7275532c76d659761839b8de14d66fddbb2757c01de82fc92282a0bfdd6fe9301e0484651d53035ce4893bae70d833e8ffa27f9d29c4f69c2a0257e6187afd0a424e44690b0e376483e48617f1d4e793f54a2e7e7cbd2d41e045f0c5eebb7330c4fc4d3110", &(0x7f00000000c0)=@udp=r4}, 0x20) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) socket$key(0xf, 0x3, 0x2) 6.346035363s ago: executing program 1 (id=722): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffdb8, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'cake\x00', 0x3a, 'cake\x00', 0x3a, './file0', 0x3a, [0x50]}, 0x32) syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') 5.617694507s ago: executing program 2 (id=725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000004c0)='syzkaller\x00', 0xa) 5.570982704s ago: executing program 3 (id=726): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x20003}, [@IFLA_GROUP={0x8, 0x1b, 0x1f00}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xfff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 5.066198196s ago: executing program 3 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40600, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) gettid() creat(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x38}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x20841, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000008e40), 0x40, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000008e80)) 4.756810362s ago: executing program 0 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40600, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010300000000000000000500"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) gettid() creat(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x38}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x5}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x20841, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000008e40), 0x40, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000008e80)) 4.599984182s ago: executing program 3 (id=729): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000f80)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="15d346aac83b8e3435549b268f671cb011de4102030300000000001436"], 0x1c}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x38, 0x140a, 0x300, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4) write$UHID_INPUT(r5, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e08386d090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000040)=0x8, 0x4) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.258125186s ago: executing program 2 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00000109001f0073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 4.152205264s ago: executing program 4 (id=731): syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00#\a'], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000580)={0x0, 0x22, 0xfb, {0xfb, 0xb, "34855181c89e559757a82c49e49c3430679b9ee93ca0ceb538533c127691e7a129efcf7b161c0a9bc1da71f47f964995343c13d3c8e9ec0f37028b586b5428b82324bc2d1af734d7e412591483612569fd6c51bba0c01e077be41f8fdaf0b33e2b1e0ae27c1a9c5ea6f0870dd6f91c6464fe7262a531629a1d8c946b1e0a8efb57560f1f73f95a6bfba585b428408e974b031235c93884f5a418e8b7a9faf9c8c876c2acc8d769809a50409731de77bb96792a50ed23ed033d3298f0802b76a9e5bd32bbe9c30beaa0582cc9b7df58e40c1a20a86bd6c25086d328fe53a6d437426b3d82b5126098255270d950b7da40507a9395d2407bd3e0"}}, &(0x7f00000007c0)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "d6cbc5d703420e479f3b7498313884167c80953b5b165242ee76f061b82f53311d7afa73304af96b0aaabbf90f009dcdcbb78156237ad462c0a8d1f67b443a1763e2b8bfaed2a029a3f2cf9c52dc996d991ed45b9b85c603127f5b8c22c1ca3b60d860c488457e7fb474bad3216add5d3c0404a6ea1c1c20a2d3632f67eeb21f5ac3974b0889dbcdcb4bc43aa76331f3c6b15452be8eb9e8f9ac55fc6770"}}, &(0x7f00000001c0)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xc, 0x2, 0x5, 0xff0f, 0x9, [0xff30, 0xff0000]}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x81, 0x1, 0xac, "cea01ee1", "156c66f8"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0xb6, 0x4, 0x8, 0xfff8, 0x20}}}, &(0x7f0000000c80)={0x84, &(0x7f00000006c0)={0x20, 0x3, 0x77, "1a4ce1294d5797a5d0ef41242606a3c29fe8b1358994e969cce8f8871511394ff23e00dae85e1f36cea326dd63231b9a6a2787d5065efe6cc773feaec5e64d35ecc8f6e697fcc5ff65f4d321003926bb63aed424e785fbb48e00aa1fd172c8dd034d4f9213b859abead51180d986edbfddbfaf11ead1ae"}, &(0x7f0000000400)={0x0, 0xa, 0x1}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x8, {0x8, 0x6, [0xf00]}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "dea8"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @random="fd584a0fda40"}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "c124"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0xc}}) syslog(0x2, 0xffffffffffffffff, 0xffffffffffffffdb) 4.104694792s ago: executing program 1 (id=732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0xd, [0x7ffe, 0x100c95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x21d, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0xffff8be8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0xffff8000, 0x7ff, 0xfffffff9, 0xb8b, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x100009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0xbd9, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x7, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x8, 0xfffff000, 0xfffd, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x9, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 4.082126349s ago: executing program 0 (id=733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x1200}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.018503263s ago: executing program 2 (id=734): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x2}]}, {0x0, [0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000006000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560118008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"]}, 0x296) 3.995326818s ago: executing program 0 (id=735): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x85c) setrlimit(0x3, &(0x7f0000000000)={0x5, 0x6}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@host}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r4 = io_uring_setup(0x17f2, &(0x7f0000000040)={0x0, 0x4965, 0x100, 0x0, 0x225}) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000002bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x0) unshare(0x22060200) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a43, 0x4) ftruncate(r5, 0x6000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x1c, 0x68, 0x300, 0x40000, 0xffffffff, {0x2, 0x0, 0x2, 0x0, 0x25}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.176707231s ago: executing program 1 (id=736): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffdb8, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') write$binfmt_register(r6, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, 'cake\x00', 0x3a, 'cake\x00', 0x3a, './file0', 0x3a, [0x50]}, 0x32) syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') 2.941978364s ago: executing program 0 (id=737): sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f00000023c0)='./binderfs\x00', &(0x7f0000002400), 0x2004000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8e, 0x2}}, {0x8, 0x1b, [0x9, 0x0]}}]}]}, 0x54}}, 0x400000000000000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) mremap(&(0x7f00000ab000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000004000000200000008000300", @ANYRES32=r5, @ANYBLOB="0000000000000000b5ddb368b477e298f56ea416fc20b31fc10000"], 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) shmdt(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.807899397s ago: executing program 3 (id=738): pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0xa) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000a65000/0x3000)=nil, 0x3000, 0x0, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) writev(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x9, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0x6, &(0x7f00000001c0)={0x8, 0x1000000084}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix={0x7, 0x80, 0x80a6510, 0xd, 0x8, 0x7, 0xa, 0x200, 0x1, 0x7, 0x1, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x9d) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) 1.608093122s ago: executing program 3 (id=739): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) 1.558586036s ago: executing program 0 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000063002a3c9960d54f34be11be90e2c19500000000000000000000ffef00", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d3000000000000014001680100001800c0005000500000001000000"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4db5b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x4000, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) r2 = io_uring_setup(0x265b, &(0x7f0000000340)={0x0, 0xe8e2, 0x1, 0x1fffe, 0x200002c6}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) r3 = io_uring_setup(0x407d, &(0x7f0000000500)={0x0, 0x3fbe, 0x800, 0x20000001, 0xef, 0x0, r2}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000280)=[r2], 0x1) lseek(r2, 0x101, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x6dd, 0x4, 0x1ff, 0x1, 0x3, 0x1, 0x1, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) r5 = fsopen(0x0, 0x1) open(0x0, 0x108840, 0x10c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x8, 0x0, 0x0, 0x0, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) 1.077959162s ago: executing program 4 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x2d) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x20000800) connect$packet(r1, &(0x7f00000002c0)={0x11, 0xf7, r4, 0x1, 0xc9, 0x6, @multicast}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000300)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000d90cdd0703b4b605ecfe0200"/39], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000ae00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001180000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/157, 0x9d) timerfd_create(0x2, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r10, 0xc048aec8, &(0x7f00000000c0)={[{0x6, 0x9, 0x7, 0x2, 0xad, 0x9, 0x6, 0x7, 0x4, 0x1, 0xd, 0x36}, {0x9fe8, 0x9, 0x2, 0xeb, 0xf7, 0xa, 0x10, 0x80, 0x1, 0xb1, 0x5, 0x2, 0xf}, {0xbd, 0xb, 0x2, 0x3, 0x81, 0x4, 0x7, 0x0, 0x3, 0x6, 0x4, 0x90}], 0x9}) 1.075595286s ago: executing program 0 (id=742): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) lseek(r1, 0x1, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='fdb_delete\x00', r7}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003800800", @ANYRES64=r8], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004084) 898.436414ms ago: executing program 2 (id=743): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x6, 0x103}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000002240)=0x3) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2002) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0xc0105702, &(0x7f00000000c0)) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x140000, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000380)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000680)=""/133, 0x9000, 0xc00, 0x4, 0x3}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40080) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r1) 542.745779ms ago: executing program 3 (id=744): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) 0s ago: executing program 1 (id=745): mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1) r0 = syz_io_uring_setup(0x1cc1, &(0x7f000000a9c0)={0x0, 0x3448, 0x0, 0x1, 0x392}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f00000000c0)={0x0, 0x1}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpriority(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x8080) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000030000000000000000000000000000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe4]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1403, 0x200, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c0875}, 0xc000) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x33, 0x1, [{0xfe, 0x80000000}]}}) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000007b8dc3d30bb7bc8e0000000700000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) kernel console output (not intermixed with test programs): fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.336468][ T30] audit: type=1400 audit(1764302548.210:423): avc: denied { open } for pid=7006 comm="syz.4.304" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 152.360200][ T30] audit: type=1400 audit(1764302548.330:424): avc: denied { create } for pid=7004 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 152.428292][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.681114][ T30] audit: type=1400 audit(1764302548.410:425): avc: denied { read write } for pid=7004 comm="syz.1.303" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.061657][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 153.073426][ T7001] nbd: must specify at least one socket [ 153.158373][ T7025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.191890][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.200590][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.210654][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.219135][ T10] usb 5-1: device descriptor read/64, error -71 [ 153.228330][ T7027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.234521][ T7025] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 153.261213][ T7027] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.318530][ T7027] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.403052][ T7025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.421049][ T7027] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.432718][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.441263][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.449982][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.461655][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 153.484829][ T7025] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 153.495887][ T7027] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.509612][ T7027] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 153.522494][ T7025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.528576][ T7027] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.611345][ T10] usb 5-1: device descriptor read/64, error -71 [ 153.721543][ T10] usb usb5-port1: attempt power cycle [ 153.727726][ T7025] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 153.774449][ T7037] ======================================================= [ 153.774449][ T7037] WARNING: The mand mount option has been deprecated and [ 153.774449][ T7037] and is ignored by this kernel. Remove the mand [ 153.774449][ T7037] option from the mount to silence this warning. [ 153.774449][ T7037] ======================================================= [ 153.821571][ T7027] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.835155][ T7027] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.852047][ T7037] nfs: Bad value for 'source' [ 153.879947][ T7025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.887177][ T7027] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.893194][ T7025] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 153.901236][ T7027] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 153.948869][ T7025] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.981709][ T7025] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 154.151366][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 154.232462][ T10] usb 5-1: device descriptor read/8, error -71 [ 154.425408][ T7055] fuse: Bad value for 'fd' [ 154.471523][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.501365][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 154.656569][ T10] usb 5-1: device descriptor read/8, error -71 [ 154.781614][ T10] usb usb5-port1: unable to enumerate USB device [ 155.053897][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 155.301377][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 155.315725][ T5890] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 155.331443][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.360655][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 155.371089][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.384745][ T10] usb 2-1: Product: syz [ 155.388918][ T10] usb 2-1: Manufacturer: syz [ 155.394055][ T10] usb 2-1: SerialNumber: syz [ 155.408011][ T10] usb 2-1: config 0 descriptor?? [ 155.594295][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.609881][ T5890] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 155.626980][ T5890] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 155.639444][ T5890] usb 1-1: config 8 has an invalid descriptor of length 40, skipping remainder of the config [ 155.649932][ T5890] usb 1-1: config 8 has no interface number 0 [ 155.656441][ T5890] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 155.834219][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 155.834249][ T30] audit: type=1400 audit(1764302552.370:446): avc: denied { ioctl } for pid=7071 comm="syz.4.323" path="socket:[13121]" dev="sockfs" ino=13121 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.865549][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.059617][ T5890] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.070748][ T7074] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.089914][ T5890] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 156.099311][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.125140][ T5890] usb 1-1: Product: syz [ 156.129436][ T5890] usb 1-1: Manufacturer: syz [ 156.142178][ T5890] usb 1-1: SerialNumber: syz [ 156.160414][ T30] audit: type=1400 audit(1764302552.610:447): avc: denied { mount } for pid=7069 comm="syz.3.322" name="/" dev="autofs" ino=13173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 156.182717][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.221647][ T30] audit: type=1400 audit(1764302552.610:448): avc: denied { unlink } for pid=7069 comm="syz.3.322" name="#f" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.251443][ T30] audit: type=1400 audit(1764302552.740:449): avc: denied { mount } for pid=7069 comm="syz.3.322" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 156.253805][ T7074] warning: `syz.3.322' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 156.294049][ T10] usb 2-1: probing VID:PID(0424:012C) [ 156.368266][ T10] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 156.408939][ T10] vub300 2-1:0.0: probe with driver vub300 failed with error -22 [ 156.448462][ T5890] usb 1-1: USB disconnect, device number 8 [ 156.451607][ T10] usb 2-1: USB disconnect, device number 13 [ 156.580141][ T7082] input: syz0 as /devices/virtual/input/input14 [ 156.594668][ T30] audit: type=1400 audit(1764302553.140:450): avc: denied { read } for pid=5170 comm="acpid" name="event4" dev="devtmpfs" ino=2923 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.617093][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.626593][ T30] audit: type=1400 audit(1764302553.140:451): avc: denied { open } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2923 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.649977][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.651461][ T1654] net_ratelimit: 1 callbacks suppressed [ 156.651471][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.697583][ T30] audit: type=1400 audit(1764302553.140:452): avc: denied { ioctl } for pid=5170 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2923 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.955848][ T7091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.327'. [ 157.057616][ T30] audit: type=1400 audit(1764302553.290:453): avc: denied { create } for pid=7086 comm="syz.2.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 157.549805][ T30] audit: type=1400 audit(1764302554.090:454): avc: denied { create } for pid=7107 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.712506][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.822038][ T30] audit: type=1400 audit(1764302554.370:455): avc: denied { read } for pid=7101 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 157.983769][ T7109] netlink: 'syz.4.332': attribute type 10 has an invalid length. [ 158.037847][ T7109] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 158.312438][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.372045][ T7102] tc_dump_action: action bad kind [ 158.582160][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.604501][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.839111][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.261220][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.270009][ T6185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.285896][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.296719][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.704320][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.337'. [ 160.101363][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 160.111341][ T5890] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 160.199182][ T7140] SELinux: failed to load policy [ 160.336044][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.507444][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.516711][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.529828][ T5890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.539241][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.541362][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.547523][ T5890] usb 2-1: Product: syz [ 160.560745][ T5890] usb 2-1: Manufacturer: syz [ 160.572465][ T5890] usb 2-1: SerialNumber: syz [ 160.601835][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.619421][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.630226][ T10] usb 3-1: Product: syz [ 160.635299][ T10] usb 3-1: Manufacturer: syz [ 160.640510][ T10] usb 3-1: SerialNumber: syz [ 160.831515][ T5876] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.874121][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 160.874134][ T30] audit: type=1400 audit(1764302557.420:464): avc: denied { write } for pid=7133 comm="syz.1.338" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 160.901834][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.338'. [ 161.011441][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 161.020249][ T5876] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 161.034597][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.043532][ T5876] usb 1-1: Product: syz [ 161.047767][ T5876] usb 1-1: Manufacturer: syz [ 161.052794][ T5876] usb 1-1: SerialNumber: syz [ 161.672515][ T5942] net_ratelimit: 4 callbacks suppressed [ 161.672534][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.811347][ T7134] comedi comedi0: reset error (fatal) [ 161.836728][ T5890] usb 2-1: cannot find UAC_HEADER [ 161.847083][ T5876] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 161.867408][ T5876] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 161.883791][ T5890] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.893643][ T5876] usb 1-1: USB disconnect, device number 9 [ 161.900000][ T10] usb 3-1: cannot find UAC_HEADER [ 161.911578][ T5816] Bluetooth: hci5: command 0x1003 tx timeout [ 161.911861][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.946776][ T5890] usb 2-1: USB disconnect, device number 14 [ 161.986274][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.025310][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 162.034418][ T30] audit: type=1400 audit(1764302558.570:465): avc: denied { append } for pid=7152 comm="syz.3.344" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.082354][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.087077][ T30] audit: type=1400 audit(1764302558.610:466): avc: denied { create } for pid=7152 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 162.118780][ T10] usb 3-1: USB disconnect, device number 10 [ 162.133825][ T30] audit: type=1400 audit(1764302558.610:467): avc: denied { write } for pid=7152 comm="syz.3.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 162.153913][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.401476][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.448972][ T30] audit: type=1400 audit(1764302558.990:468): avc: denied { read } for pid=7157 comm="syz.0.346" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.522046][ T7162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 162.530240][ T30] audit: type=1400 audit(1764302558.990:469): avc: denied { open } for pid=7157 comm="syz.0.346" path="/dev/usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.610733][ T30] audit: type=1400 audit(1764302559.020:470): avc: denied { ioctl } for pid=7157 comm="syz.0.346" path="/dev/usbmon4" dev="devtmpfs" ino=728 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.706617][ T30] audit: type=1400 audit(1764302559.020:471): avc: denied { ioctl } for pid=7157 comm="syz.0.346" path="socket:[14523]" dev="sockfs" ino=14523 ioctlcmd=0x42d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.731257][ T52] Bluetooth: hci6: command 0x1003 tx timeout [ 162.732326][ T5817] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 162.855618][ T30] audit: type=1400 audit(1764302559.190:472): avc: denied { bind } for pid=7159 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 163.431620][ T1654] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.475519][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.647561][ T1654] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 163.666964][ T1654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 163.681720][ T1654] usb 1-1: Product: syz [ 163.685901][ T1654] usb 1-1: Manufacturer: syz [ 163.700051][ T1654] usb 1-1: SerialNumber: syz [ 163.720692][ T1654] usb 1-1: config 0 descriptor?? [ 163.736141][ T1654] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 163.744776][ T1654] dvb-usb: bulk message failed: -22 (2/0) [ 163.769260][ T1654] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.787539][ T1654] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 163.831452][ T1654] usb 1-1: media controller created [ 163.941347][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 163.974306][ T1654] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.006271][ T1654] cxusb: set interface failed [ 164.012898][ T1654] dvb-usb: bulk message failed: -22 (1/0) [ 164.091506][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 164.104256][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 164.551639][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.968847][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.017703][ T1002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.032658][ T1322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.051984][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 165.192220][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.204350][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.212451][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.323201][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.468551][ T10] usb 2-1: config 0 has no interface number 0 [ 165.499282][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.532423][ T30] audit: type=1400 audit(1764302562.070:473): avc: denied { ioctl } for pid=7193 comm="syz.4.355" path="socket:[14657]" dev="sockfs" ino=14657 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.540855][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.557100][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.574233][ T1654] DVB: Unable to find symbol mt352_attach() [ 165.580418][ T1654] dvb-usb: bulk message failed: -22 (5/0) [ 165.591106][ T1654] zl10353_read_register: readreg error (reg=127, ret==-121) [ 165.597601][ T7196] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 165.598667][ T1654] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 165.678837][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 165.702036][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.711059][ T1654] rc_core: IR keymap rc-dvico-mce not found [ 165.718103][ T1654] Registered IR keymap rc-empty [ 165.730098][ T1654] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 165.737753][ T10] usb 2-1: config 0 descriptor?? [ 165.750233][ T7201] bond1: entered promiscuous mode [ 165.759759][ T7201] bond1: entered allmulticast mode [ 165.769989][ T7201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.777844][ T1654] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 166.073013][ T5876] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 166.095902][ T1654] dvb-usb: schedule remote query interval to 100 msecs. [ 166.111610][ T1654] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 166.118407][ T7196] sg_write: data in/out 32732/8 bytes for SCSI command 0x0-- guessing data in; [ 166.118407][ T7196] program syz.0.356 not setting count and/or reply_len properly [ 166.134524][ T1654] usb 1-1: USB disconnect, device number 10 [ 166.164619][ T7202] veth3: entered promiscuous mode [ 166.169798][ T7202] veth3: entered allmulticast mode [ 166.212873][ T1654] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 166.218357][ T7202] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 166.237931][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 166.247078][ T5876] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 166.256183][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.265059][ T5876] usb 3-1: Product: syz [ 166.269271][ T5876] usb 3-1: Manufacturer: syz [ 166.282537][ T5876] usb 3-1: SerialNumber: syz [ 166.289019][ T10] usbhid 2-1:0.1: can't add hid device: -71 [ 166.296313][ T10] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 166.345974][ T10] usb 2-1: USB disconnect, device number 15 [ 166.739469][ T7212] netlink: 428 bytes leftover after parsing attributes in process `syz.0.361'. [ 166.749802][ T7212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.361'. [ 167.086012][ T5876] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 167.111575][ T5876] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 167.152332][ T5876] usb 3-1: USB disconnect, device number 11 [ 167.250366][ T7216] tipc: Failed to obtain node identity [ 167.282412][ T7216] tipc: Enabling of bearer rejected, failed to enable media [ 167.297380][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 167.297394][ T30] audit: type=1400 audit(1764302563.830:476): avc: denied { read write } for pid=7224 comm="syz.3.359" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.330952][ T30] audit: type=1400 audit(1764302563.830:477): avc: denied { open } for pid=7224 comm="syz.3.359" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.354268][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.360820][ T42] net_ratelimit: 2 callbacks suppressed [ 167.360832][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.432434][ T30] audit: type=1400 audit(1764302563.830:478): avc: denied { ioctl } for pid=7224 comm="syz.3.359" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.457209][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.104691][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.272387][ T30] audit: type=1400 audit(1764302564.820:479): avc: denied { write } for pid=7239 comm="syz.2.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 168.335048][ T30] audit: type=1400 audit(1764302564.840:480): avc: denied { append } for pid=7239 comm="syz.2.367" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 168.391510][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.779712][ T30] audit: type=1400 audit(1764302565.320:481): avc: denied { getopt } for pid=7246 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.312369][ T5817] Bluetooth: hci5: command 0x1003 tx timeout [ 169.341510][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 169.521140][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.832267][ T30] audit: type=1400 audit(1764302566.340:482): avc: denied { mount } for pid=7258 comm="syz.4.374" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 170.295094][ T30] audit: type=1400 audit(1764302566.340:483): avc: denied { search } for pid=7258 comm="syz.4.374" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.364661][ T30] audit: type=1400 audit(1764302566.340:484): avc: denied { search } for pid=7258 comm="syz.4.374" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.386570][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.396156][ T30] audit: type=1400 audit(1764302566.350:485): avc: denied { setattr } for pid=7258 comm="syz.4.374" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.556960][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.931373][ T1654] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 170.953068][ T7283] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 170.998837][ T7283] ALSA: mixer_oss: invalid index 1374389 [ 171.056535][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 171.107684][ T1654] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.111735][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.126966][ T1654] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.273748][ T1654] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.294534][ T1654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.321320][ T1654] usb 3-1: SerialNumber: syz [ 171.565048][ T1654] usb 3-1: 0:2 : does not exist [ 171.569964][ T1654] usb 3-1: unit 5 not found! [ 171.581932][ T1654] usb 3-1: USB disconnect, device number 12 [ 171.603891][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.650470][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.731648][ T5942] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 171.881387][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 172.168613][ T5942] usb 5-1: config 150 has an invalid interface descriptor of length 8, skipping [ 172.213519][ T5942] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 172.244696][ T5942] usb 5-1: config 150 has 0 interfaces, different from the descriptor's value: 2 [ 172.256460][ T5942] usb 5-1: New USB device found, idVendor=0572, idProduct=09fe, bcdDevice= 0.00 [ 172.274558][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=35 [ 172.282904][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.292965][ T5942] usb 5-1: Product: syz [ 172.297733][ T5942] usb 5-1: SerialNumber: syz [ 172.986088][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.015357][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 173.015393][ T30] audit: type=1400 audit(1764302569.070:489): avc: denied { read write } for pid=7305 comm="syz.2.389" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 173.056116][ T30] audit: type=1400 audit(1764302569.070:490): avc: denied { open } for pid=7305 comm="syz.2.389" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 173.270220][ T10] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 173.369858][ T10] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 173.394359][ T10] usb 1-1: config 171 has no interface number 0 [ 173.406279][ T10] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 173.448025][ T10] usb 1-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 173.463247][ T30] audit: type=1400 audit(1764302570.010:491): avc: denied { ioctl } for pid=7313 comm="syz.2.392" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14933 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.489073][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.509542][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 173.522225][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.530298][ T10] usb 1-1: Product: syz [ 173.536107][ T10] usb 1-1: Manufacturer: syz [ 173.540775][ T10] usb 1-1: SerialNumber: syz [ 173.850623][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.392'. [ 173.868242][ T7301] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 173.881512][ T5883] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 173.995097][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.044567][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 174.060115][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.074285][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.085326][ T5883] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 174.097706][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.111035][ T10] ath6kl: Failed to submit usb control message: -71 [ 174.119600][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 174.127257][ T10] ath6kl: Unable to send get target info: -71 [ 174.142158][ T5883] usb 2-1: config 0 descriptor?? [ 174.152880][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.167892][ T10] ath6kl: Failed to init ath6kl core: -71 [ 174.179381][ T10] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 174.199228][ T10] usb 1-1: USB disconnect, device number 11 [ 174.352652][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.368775][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.385336][ T30] audit: type=1400 audit(1764302570.930:492): avc: denied { append } for pid=7323 comm="syz.3.394" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 174.419257][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.453919][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.487543][ T5942] usb 5-1: USB disconnect, device number 17 [ 174.552432][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.593175][ T7315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.602893][ T7315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.475689][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.506948][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 175.512928][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 175.531137][ T5883] usb 2-1: USB disconnect, device number 16 [ 175.731870][ T30] audit: type=1400 audit(1764302572.280:493): avc: denied { write } for pid=7341 comm="syz.0.400" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 175.761854][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.398'. [ 176.131564][ T30] audit: type=1400 audit(1764302572.630:494): avc: denied { read write } for pid=7341 comm="syz.0.400" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.154497][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.366754][ T30] audit: type=1400 audit(1764302572.630:495): avc: denied { open } for pid=7341 comm="syz.0.400" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 176.389603][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.532037][ T30] audit: type=1400 audit(1764302573.070:496): avc: denied { connect } for pid=7351 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 176.561771][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.256052][ T5883] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 177.267752][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.321423][ T5942] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 177.412093][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 177.440560][ T5883] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.529785][ T5883] usb 3-1: config 0 has no interface number 0 [ 177.537912][ T5883] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.564708][ T5883] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.574767][ T5942] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 177.584029][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.593651][ T5942] usb 2-1: Product: syz [ 177.598337][ T5883] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 177.611541][ T5942] usb 2-1: Manufacturer: syz [ 177.611828][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.616122][ T5942] usb 2-1: SerialNumber: syz [ 177.618099][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.643885][ T5942] hub 2-1:24.0: bad descriptor, ignoring hub [ 177.661491][ T5942] hub 2-1:24.0: probe with driver hub failed with error -5 [ 177.707061][ T5883] usb 3-1: config 0 descriptor?? [ 177.838709][ T5942] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 177.919807][ T5942] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 177.996796][ T5942] dib0700: firmware download failed at 7 with -22 [ 178.154461][ T5883] usbhid 3-1:0.1: can't add hid device: -71 [ 178.321171][ T5883] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 178.350153][ T5883] usb 3-1: USB disconnect, device number 13 [ 178.832527][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.853296][ T5942] usb 2-1: USB disconnect, device number 17 [ 179.695167][ T30] audit: type=1400 audit(1764302576.240:497): avc: denied { connect } for pid=7383 comm="syz.2.410" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 180.102801][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.335741][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.401383][ T5883] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 180.429789][ T30] audit: type=1400 audit(1764302576.970:498): avc: denied { ioctl } for pid=7397 comm="syz.1.415" path="socket:[15155]" dev="sockfs" ino=15155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.622746][ T5883] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 180.651774][ T5883] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 180.670050][ T5883] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 180.680347][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.821301][ T5883] usb 3-1: Product: syz [ 180.831480][ T5883] usb 3-1: Manufacturer: syz [ 180.836418][ T5883] usb 3-1: SerialNumber: syz [ 180.878854][ T5883] usb 3-1: config 0 descriptor?? [ 180.911654][ T7394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 180.920153][ T7394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.101930][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 181.126218][ T7413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.417'. [ 181.169939][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.185782][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.201864][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.431139][ T7394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.493438][ T7394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 181.672145][ T7415] netlink: 'syz.4.418': attribute type 21 has an invalid length. [ 181.679933][ T7415] netlink: 'syz.4.418': attribute type 6 has an invalid length. [ 181.687695][ T7415] netlink: 132 bytes leftover after parsing attributes in process `syz.4.418'. [ 181.706508][ T10] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 181.722367][ T10] usb 2-1: config 0 has no interface number 0 [ 181.730718][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3f0a, bcdDevice=8a.16 [ 181.739892][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.781681][ T10] usb 2-1: config 0 descriptor?? [ 181.802022][ T10] usb 2-1: unknown interface protocol 0x1c, assuming v1 [ 181.861547][ T10] usb 2-1: cannot find UAC_HEADER [ 181.999031][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.027428][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.037848][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.047869][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.057219][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.066565][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.075618][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.094923][ T10] snd-usb-audio 2-1:0.11: probe with driver snd-usb-audio failed with error -22 [ 182.095900][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 182.138717][ T5883] Error reading MAC address [ 182.148118][ T5883] usb 3-1: USB disconnect, device number 14 [ 182.274641][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.417158][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.459027][ T30] audit: type=1400 audit(1764302579.190:499): avc: denied { ioctl } for pid=7420 comm="syz.3.420" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 183.495650][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.504066][ T5942] usb 2-1: USB disconnect, device number 18 [ 183.648252][ T7433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.656714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.764329][ T7433] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 183.764337][ T30] audit: type=1400 audit(1764302580.310:500): avc: denied { ioctl } for pid=7432 comm="syz.1.425" path="socket:[15827]" dev="sockfs" ino=15827 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.950834][ T30] audit: type=1400 audit(1764302580.490:501): avc: denied { open } for pid=7439 comm="syz.1.428" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 183.974221][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.172499][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.411489][ T5942] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 184.476065][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.622846][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.681488][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.708090][ T5942] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.729715][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.811667][ T5942] usb 1-1: Product: syz [ 184.897569][ T5942] usb 1-1: Manufacturer: syz [ 184.919265][ T5942] usb 1-1: SerialNumber: syz [ 184.949205][ T7431] xt_hashlimit: max too large, truncated to 1048576 [ 184.953376][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.979962][ T7431] xt_limit: Overflow, try lower: 0/0 [ 185.046381][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.061121][ T7458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.200262][ T5942] usb 1-1: cannot find UAC_HEADER [ 185.296364][ T42] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 185.302388][ T5942] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 185.315563][ T5942] usb 1-1: USB disconnect, device number 12 [ 185.523819][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.542024][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 185.551148][ T42] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 185.559397][ T42] usb 2-1: config 0 has no interface number 0 [ 185.565724][ T42] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.576771][ T42] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 185.590536][ T42] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 185.606933][ T42] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 185.628613][ T42] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 185.638881][ T42] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 185.654887][ T42] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 185.664785][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.674595][ T42] usb 2-1: Product: syz [ 185.678772][ T42] usb 2-1: Manufacturer: syz [ 185.683405][ T42] usb 2-1: SerialNumber: syz [ 185.691673][ T42] usb 2-1: config 0 descriptor?? [ 185.697165][ T7457] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 185.704408][ T7457] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 185.749989][ T7462] FAULT_INJECTION: forcing a failure. [ 185.749989][ T7462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.763273][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.0.432 Not tainted syzkaller #0 PREEMPT(full) [ 185.763294][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.763304][ T7462] Call Trace: [ 185.763309][ T7462] [ 185.763316][ T7462] dump_stack_lvl+0x16c/0x1f0 [ 185.763336][ T7462] should_fail_ex+0x512/0x640 [ 185.763352][ T7462] _copy_from_user+0x2e/0xd0 [ 185.763370][ T7462] __sys_bpf+0x248/0x4980 [ 185.763399][ T7462] ? __pfx___sys_bpf+0x10/0x10 [ 185.763421][ T7462] ? find_held_lock+0x2b/0x80 [ 185.763446][ T7462] ? find_held_lock+0x2b/0x80 [ 185.763463][ T7462] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 185.763482][ T7462] ? fput+0x9b/0xd0 [ 185.763496][ T7462] ? ksys_write+0x1ac/0x250 [ 185.763506][ T7462] ? __pfx_ksys_write+0x10/0x10 [ 185.763525][ T7462] __x64_sys_bpf+0x78/0xc0 [ 185.763538][ T7462] ? lockdep_hardirqs_on+0x7c/0x110 [ 185.763553][ T7462] do_syscall_64+0xcd/0xfa0 [ 185.763570][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.763585][ T7462] RIP: 0033:0x7f6caeb8f749 [ 185.763595][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.763606][ T7462] RSP: 002b:00007f6cafab4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.763617][ T7462] RAX: ffffffffffffffda RBX: 00007f6caede5fa0 RCX: 00007f6caeb8f749 [ 185.763623][ T7462] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 185.763629][ T7462] RBP: 00007f6cafab4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.763635][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.763641][ T7462] R13: 00007f6caede6038 R14: 00007f6caede5fa0 R15: 00007ffdb9a22098 [ 185.763657][ T7462] [ 185.914337][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.916496][ T5817] Bluetooth: hci0: command tx timeout [ 185.925653][ T42] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 185.956533][ T7455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.967710][ T42] etas_es58x 2-1:0.219: could not retrieve the product info string [ 185.996988][ T30] audit: type=1400 audit(1764302582.540:502): avc: denied { mount } for pid=7463 comm="syz.0.433" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 185.998943][ T42] usb 2-1: USB disconnect, device number 19 [ 186.032895][ T42] etas_es58x 2-1:0.219: Disconnecting syz syz [ 186.073058][ T5942] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 186.098999][ T30] audit: type=1400 audit(1764302582.640:503): avc: denied { read } for pid=5480 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 186.239982][ T30] audit: type=1400 audit(1764302582.780:504): avc: denied { create } for pid=7471 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 186.264859][ T30] audit: type=1400 audit(1764302582.780:505): avc: denied { bind } for pid=7471 comm="syz.3.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 186.266272][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.285731][ T30] audit: type=1400 audit(1764302582.780:506): avc: denied { read } for pid=7471 comm="syz.3.436" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 186.297902][ T5942] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 186.326676][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.335257][ T5942] usb 3-1: Product: syz [ 186.335336][ T30] audit: type=1400 audit(1764302582.780:507): avc: denied { open } for pid=7471 comm="syz.3.436" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 186.339795][ T5942] usb 3-1: Manufacturer: syz [ 186.385574][ T5942] usb 3-1: SerialNumber: syz [ 186.393984][ T5942] usb 3-1: config 0 descriptor?? [ 186.399266][ T7474] __nla_validate_parse: 36 callbacks suppressed [ 186.399281][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 186.415600][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 186.418734][ T5942] ims_pcu 3-1:0.0: Union descriptor too short (2 vs 5) [ 186.425545][ T7474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 186.431843][ T5942] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 186.491387][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.500187][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.551476][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.559588][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.575688][ T7478] comedi: No check for data length of config insn id 14 is implemented [ 186.584253][ T7478] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 186.594466][ T7478] comedi: Assuming n=57124 is correct [ 186.604971][ T30] audit: type=1326 audit(1764302583.150:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988878f749 code=0x7ffc0000 [ 186.661357][ T30] audit: type=1326 audit(1764302583.150:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7477 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988878f749 code=0x7ffc0000 [ 186.726729][ T5897] usb 3-1: USB disconnect, device number 15 [ 187.049529][ T7486] /dev/nullb0: Can't open blockdev [ 187.069031][ T30] audit: type=1400 audit(1764302583.570:510): avc: denied { create } for pid=7484 comm="syz.0.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 187.115362][ T30] audit: type=1400 audit(1764302583.590:511): avc: denied { read open } for pid=7484 comm="syz.0.442" path="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 187.137518][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.619649][ T7499] netlink: 44 bytes leftover after parsing attributes in process `syz.4.445'. [ 187.668085][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 188.138034][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.162674][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.302018][ T7503] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7503 comm=syz.4.448 [ 188.574693][ T7508] o2cb: This node has not been configured. [ 188.580645][ T7508] o2cb: Cluster check failed. Fix errors before retrying. [ 188.588144][ T7508] (syz.0.450,7508,0):user_dlm_register:674 ERROR: status = -22 [ 188.596347][ T7508] (syz.0.450,7508,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 188.752213][ T5897] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 188.781391][ T5890] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 188.920499][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 188.930906][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.949499][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.094582][ T5890] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 189.167150][ T5897] usb 5-1: config 0 descriptor?? [ 189.199792][ T5897] cp210x 5-1:0.0: cp210x converter detected [ 189.206902][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.235991][ T5890] usb 2-1: Product: syz [ 189.240205][ T5890] usb 2-1: Manufacturer: syz [ 189.257237][ T5890] usb 2-1: SerialNumber: syz [ 189.275683][ T5890] usb 2-1: config 0 descriptor?? [ 189.288797][ T5890] ims_pcu 2-1:0.0: Union descriptor too short (2 vs 5) [ 189.299560][ T5890] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 189.389339][ T5897] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 189.398880][ T5897] cp210x 5-1:0.0: querying part number failed [ 189.423351][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0 [ 189.428196][ T7519] o2cb: This node has not been configured. [ 189.437503][ T7519] o2cb: Cluster check failed. Fix errors before retrying. [ 189.446714][ T7519] (syz.3.453,7519,0):user_dlm_register:674 ERROR: status = -22 [ 189.454526][ T7519] (syz.3.453,7519,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 189.503339][ T5897] usb 2-1: USB disconnect, device number 20 [ 189.590885][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.600278][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.611731][ T5942] net_ratelimit: 3 callbacks suppressed [ 189.611744][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.621165][ T5890] usb 5-1: USB disconnect, device number 18 [ 189.652753][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 189.673999][ T5890] cp210x 5-1:0.0: device disconnected [ 189.828250][ T7539] hugetlbfs: Bad value '' for mount option 'size' [ 189.828250][ T7539] [ 191.120572][ T7542] loop2: detected capacity change from 0 to 7 [ 191.130508][ T7542] Dev loop2: unable to read RDB block 7 [ 191.138860][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.150098][ T7542] loop2: unable to read partition table [ 191.164908][ T7542] loop2: partition table beyond EOD, truncated [ 191.171985][ T7542] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 191.454834][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 191.454846][ T30] audit: type=1400 audit(1764302588.000:530): avc: denied { write } for pid=7531 comm="syz.4.457" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 191.616871][ T7554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.459'. [ 191.655123][ T30] audit: type=1400 audit(1764302588.070:531): avc: denied { unmount } for pid=5822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 191.683826][ T30] audit: type=1400 audit(1764302588.090:532): avc: denied { ioctl } for pid=7547 comm="syz.0.460" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 191.786631][ T30] audit: type=1400 audit(1764302588.090:533): avc: denied { ioctl } for pid=7547 comm="syz.0.460" path="socket:[16458]" dev="sockfs" ino=16458 ioctlcmd=0x8921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 191.965668][ T7559] fuse: Unknown parameter 'grou' [ 192.161917][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.254111][ T7568] comedi: No check for data length of config insn id 14 is implemented [ 192.262876][ T7568] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 192.273633][ T7568] comedi: Assuming n=57122 is correct [ 192.289552][ T30] audit: type=1326 audit(1764302588.830:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657138f749 code=0x7ffc0000 [ 192.553539][ T7581] 9pnet_fd: Insufficient options for proto=fd [ 192.883513][ T52] Bluetooth: hci5: sending frame failed (-49) [ 192.911579][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 192.924097][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.962982][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 193.025631][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 193.035147][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 193.045964][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 193.192692][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.210156][ T30] audit: type=1400 audit(1764302589.750:535): avc: denied { ioctl } for pid=7591 comm="syz.4.472" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 193.234908][ T30] audit: type=1400 audit(1764302589.750:536): avc: denied { mounton } for pid=7591 comm="syz.4.472" path="/107/file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 193.449071][ T30] audit: type=1400 audit(1764302589.990:537): avc: denied { mounton } for pid=7595 comm="syz.4.473" path="mnt:[4026532827]" dev="nsfs" ino=4026532827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 193.542752][ T30] audit: type=1400 audit(1764302590.020:538): avc: denied { create } for pid=7595 comm="syz.4.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 193.755004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.772557][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.778852][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.236871][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.259510][ T30] audit: type=1800 audit(1764302590.800:539): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.476" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 194.676368][ T7618] comedi: No check for data length of config insn id 14 is implemented [ 194.739591][ T7618] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 194.764816][ T42] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 194.807081][ T7618] comedi: Assuming n=57121 is correct [ 194.941629][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 194.948857][ T42] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.957508][ T42] usb 1-1: config 0 has no interface number 0 [ 194.963747][ T42] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.974900][ T42] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.986876][ T42] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 195.017852][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.047250][ T42] usb 1-1: config 0 descriptor?? [ 195.271782][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.556439][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 195.582928][ T7635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.592022][ T7635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.670271][ T42] uclogic 0003:28BD:0094.000C: pen parameters not found [ 195.677345][ T52] Bluetooth: hci5: command 0x1003 tx timeout [ 195.684332][ T42] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring [ 195.687101][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 195.969454][ T10] usb 1-1: USB disconnect, device number 13 [ 196.001390][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.033016][ T5897] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 196.194075][ T5897] usb 3-1: config 15 has an invalid interface number: 41 but max is 0 [ 196.202644][ T5897] usb 3-1: config 15 has no interface number 0 [ 196.209099][ T5897] usb 3-1: config 15 interface 41 has no altsetting 0 [ 196.219056][ T5897] usb 3-1: New USB device found, idVendor=1a72, idProduct=1009, bcdDevice=cf.47 [ 196.228293][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.237071][ T5897] usb 3-1: Product: 、 [ 196.246880][ T5897] usb 3-1: Manufacturer: Џ [ 196.273269][ T5897] usb 3-1: SerialNumber: င [ 196.318951][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.492395][ T42] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 196.651379][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 196.659985][ T42] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 196.669258][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.690807][ T42] usb 5-1: Product: syz [ 196.702760][ T42] usb 5-1: Manufacturer: syz [ 196.715078][ T42] usb 5-1: SerialNumber: syz [ 196.786316][ T5897] ftdi_sio 3-1:15.41: FTDI USB Serial Device converter detected [ 196.795667][ T5897] ftdi_sio ttyUSB0: unknown device type: 0xcf47 [ 196.820695][ T5897] usb 3-1: USB disconnect, device number 16 [ 196.829346][ T5897] ftdi_sio 3-1:15.41: device disconnected [ 197.160003][ T42] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 197.172177][ T42] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 197.196701][ T42] usb 5-1: USB disconnect, device number 19 [ 197.211592][ T5942] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 197.341338][ T5942] usb 1-1: device descriptor read/64, error -71 [ 197.353477][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.520739][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 197.530019][ T7647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.490'. [ 197.541672][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 197.541681][ T30] audit: type=1400 audit(1764302594.090:547): avc: denied { listen } for pid=7646 comm="syz.1.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.671587][ T5942] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 197.811359][ T5942] usb 1-1: device descriptor read/64, error -71 [ 197.866754][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 197.887182][ T7652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.492'. [ 197.921703][ T5942] usb usb1-port1: attempt power cycle [ 198.083091][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.493'. [ 198.203875][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 198.251596][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.271421][ T5942] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 198.293935][ T5942] usb 1-1: device descriptor read/8, error -71 [ 198.361545][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 198.369478][ T10] usb 3-1: config 150 has an invalid interface descriptor of length 8, skipping [ 198.378601][ T10] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 198.389127][ T10] usb 3-1: config 150 has 0 interfaces, different from the descriptor's value: 2 [ 198.401512][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.429013][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.494'. [ 198.444117][ T10] usb 3-1: New USB device found, idVendor=0572, idProduct=09fe, bcdDevice= 0.00 [ 198.453469][ T10] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=35 [ 198.468899][ T10] usb 3-1: Product: syz [ 198.476434][ T10] usb 3-1: SerialNumber: syz [ 198.531344][ T5942] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.551840][ T5942] usb 1-1: device descriptor read/8, error -71 [ 198.859512][ T5942] usb usb1-port1: unable to enumerate USB device [ 198.997127][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.005397][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.472561][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.116005][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.500'. [ 200.198755][ T7678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.211362][ T7678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.571880][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.927645][ T10] usb 3-1: USB disconnect, device number 17 [ 200.968893][ T7690] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 201.231471][ T5942] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 201.243365][ T30] audit: type=1400 audit(1764302597.790:548): avc: denied { mounton } for pid=7694 comm="syz.3.506" path="/115/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 201.267510][ T30] audit: type=1326 audit(1764302597.790:549): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.506" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f657138f749 code=0x0 [ 201.384043][ T5942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.394566][ T5942] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 201.410113][ T5942] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.430119][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 201.447824][ T5942] usb 2-1: SerialNumber: syz [ 201.476139][ T5942] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 201.601515][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.708615][ T24] usb 2-1: USB disconnect, device number 21 [ 201.777604][ T30] audit: type=1400 audit(1764302598.320:550): avc: denied { mount } for pid=7699 comm="syz.2.507" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 201.847893][ T30] audit: type=1400 audit(1764302598.350:551): avc: denied { mounton } for pid=7699 comm="syz.2.507" path="/92/file0" dev="tmpfs" ino=510 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 202.072745][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.093379][ T30] audit: type=1400 audit(1764302598.640:552): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 202.237912][ T30] audit: type=1400 audit(1764302598.780:553): avc: denied { listen } for pid=7716 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.331331][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 202.341177][ T30] audit: type=1400 audit(1764302598.830:554): avc: denied { nlmsg_read } for pid=7716 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.531466][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 202.649255][ T24] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 203.134576][ T24] usb 1-1: config 0 has no interface number 0 [ 203.143822][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.152712][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 203.164110][ T24] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 203.176024][ T24] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 203.188819][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 203.199325][ T24] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 203.209813][ T24] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.242567][ T24] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 203.254669][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.263561][ T24] usb 1-1: Product: syz [ 203.268105][ T24] usb 1-1: Manufacturer: syz [ 203.272790][ T24] usb 1-1: SerialNumber: syz [ 203.336506][ T24] usb 1-1: config 0 descriptor?? [ 203.354364][ T7713] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.418226][ T5883] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 203.434158][ T7713] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.570928][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.516'. [ 203.660201][ T5883] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 203.678141][ T5883] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 203.927889][ T24] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 203.947618][ T24] etas_es58x 1-1:0.219: could not retrieve the product info string [ 203.955715][ T5883] usb 5-1: config 8 has an invalid descriptor of length 40, skipping remainder of the config [ 203.994685][ T5883] usb 5-1: config 8 has no interface number 0 [ 204.007839][ T24] usb 1-1: USB disconnect, device number 18 [ 204.008016][ T5883] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 204.045123][ T24] etas_es58x 1-1:0.219: Disconnecting syz syz [ 204.054459][ T5883] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.072550][ T5883] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 204.085229][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.093539][ T5883] usb 5-1: Product: syz [ 204.113566][ T5883] usb 5-1: Manufacturer: syz [ 204.119066][ T5883] usb 5-1: SerialNumber: syz [ 204.155463][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.171568][ T10] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 204.244619][ T52] Bluetooth: hci5: sending frame failed (-49) [ 204.254830][ T5817] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 204.323018][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.353108][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.364636][ T5942] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 204.427987][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.455840][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.468815][ T10] usb 3-1: Product: syz [ 204.475396][ T10] usb 3-1: Manufacturer: syz [ 204.482434][ T10] usb 3-1: SerialNumber: syz [ 204.521436][ T5883] usb 5-1: USB disconnect, device number 20 [ 204.531560][ T5942] usb 2-1: device descriptor read/64, error -71 [ 204.776897][ T10] usb 3-1: cannot find UAC_HEADER [ 204.782532][ T5942] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.914393][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 204.928696][ T10] usb 3-1: USB disconnect, device number 18 [ 205.389224][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.397364][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.441362][ T5942] usb 2-1: device descriptor read/64, error -71 [ 205.520548][ T30] audit: type=1400 audit(1764302602.060:555): avc: denied { mount } for pid=7745 comm="syz.4.521" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 205.551646][ T5942] usb usb2-port1: attempt power cycle [ 205.981491][ T5942] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 206.001846][ T5942] usb 2-1: device descriptor read/8, error -71 [ 206.097652][ T30] audit: type=1400 audit(1764302602.640:556): avc: denied { connect } for pid=7754 comm="syz.3.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.390604][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 206.405881][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.406094][ T30] audit: type=1400 audit(1764302602.740:557): avc: denied { getopt } for pid=7754 comm="syz.3.525" laddr=fe80::a8aa:aaff:feaa:aaaa lport=17547 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.451385][ T5942] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 206.471935][ T5942] usb 2-1: device descriptor read/8, error -71 [ 206.799936][ T5942] usb usb2-port1: unable to enumerate USB device [ 206.808945][ T10] usb 3-1: config 15 has an invalid interface number: 41 but max is 0 [ 206.820998][ T10] usb 3-1: config 15 has no interface number 0 [ 206.828379][ T10] usb 3-1: config 15 interface 41 has no altsetting 0 [ 206.866119][ T10] usb 3-1: New USB device found, idVendor=1a72, idProduct=1009, bcdDevice=cf.47 [ 206.876390][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.892105][ T10] usb 3-1: Product: 、 [ 206.906237][ T10] usb 3-1: Manufacturer: Џ [ 206.916487][ T10] usb 3-1: SerialNumber: င [ 207.302768][ T30] audit: type=1400 audit(1764302603.840:558): avc: denied { create } for pid=7737 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 207.407660][ T7772] (syz.0.530,7772,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 207.416361][ T7772] (syz.0.530,7772,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 207.491389][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.052925][ T30] audit: type=1400 audit(1764302603.840:559): avc: denied { bind } for pid=7737 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 208.394611][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.446784][ T30] audit: type=1400 audit(1764302604.990:560): avc: denied { write } for pid=7779 comm="syz.4.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.482530][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.490664][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.837367][ T7787] : entered promiscuous mode [ 208.860932][ T7787] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 208.940665][ T7792] netlink: 'syz.4.537': attribute type 10 has an invalid length. [ 208.949017][ T7787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.957872][ T10] ftdi_sio 3-1:15.41: FTDI USB Serial Device converter detected [ 208.967613][ T10] ftdi_sio ttyUSB0: unknown device type: 0xcf47 [ 208.976657][ T10] usb 3-1: USB disconnect, device number 19 [ 208.979846][ T7792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.537'. [ 208.983802][ T10] ftdi_sio 3-1:15.41: device disconnected [ 209.011608][ T5942] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 209.032813][ T7793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.041134][ T7793] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.052244][ T7793] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 209.084151][ T7794] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 209.096303][ T7794] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 209.117445][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.126757][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.140294][ T7792] batman_adv: batadv0: Adding interface: virt_wifi0 [ 209.153254][ T7792] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.179829][ T7792] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 209.199891][ T5942] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.210186][ T5942] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.220901][ T5942] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.230294][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.241464][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.536'. [ 209.250618][ T5942] usb 2-1: Product: syz [ 209.268646][ T5942] usb 2-1: Manufacturer: syz [ 209.273555][ T5942] usb 2-1: SerialNumber: syz [ 209.689026][ T30] audit: type=1400 audit(1764302606.020:561): avc: denied { bind } for pid=7799 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.744003][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.784875][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 209.799600][ T5942] usb 2-1: cannot find UAC_HEADER [ 209.838708][ T5942] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 209.867811][ T5942] usb 2-1: USB disconnect, device number 26 [ 210.033740][ T30] audit: type=1400 audit(1764302606.570:562): avc: denied { create } for pid=7806 comm="syz.0.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 210.054876][ T5883] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 210.153599][ T7812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.322535][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 210.332570][ T5883] usb 5-1: config 150 has an invalid interface descriptor of length 8, skipping [ 210.341813][ T5883] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 210.353064][ T5883] usb 5-1: config 150 has 0 interfaces, different from the descriptor's value: 2 [ 210.473423][ T5883] usb 5-1: New USB device found, idVendor=0572, idProduct=09fe, bcdDevice= 0.00 [ 210.791972][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.829415][ T42] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 210.956811][ T7828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 211.003120][ T42] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.021598][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.038873][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.061532][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=35 [ 211.061558][ T5883] usb 5-1: Product: syz [ 211.061572][ T5883] usb 5-1: SerialNumber: syz [ 211.099147][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.099190][ T42] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.099208][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.130488][ T42] usb 3-1: config 0 descriptor?? [ 212.196069][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.213429][ T30] audit: type=1400 audit(1764302608.760:563): avc: denied { ioctl } for pid=7819 comm="syz.2.545" path="socket:[17655]" dev="sockfs" ino=17655 ioctlcmd=0x942b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.241204][ C1] vkms_vblank_simulate: vblank timer overrun [ 212.245805][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.327370][ T42] usbhid 3-1:0.0: can't add hid device: -71 [ 212.327447][ T42] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 212.329663][ T42] usb 3-1: USB disconnect, device number 20 [ 212.541528][ T7840] netlink: 'syz.1.552': attribute type 39 has an invalid length. [ 212.680358][ T7845] trusted_key: syz.0.554 sent an empty control message without MSG_MORE. [ 212.738313][ T7847] comedi: No check for data length of config insn id 14 is implemented [ 212.748414][ T7847] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 212.770743][ T7847] comedi: Assuming n=57115 is correct [ 212.852419][ T7849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.554'. [ 213.077257][ T30] audit: type=1326 audit(1764302609.420:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657138f749 code=0x7ffc0000 [ 213.119823][ T30] audit: type=1326 audit(1764302609.420:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657138f749 code=0x7ffc0000 [ 213.216007][ T5883] usb 5-1: USB disconnect, device number 21 [ 213.338561][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.440776][ T7857] netlink: 44 bytes leftover after parsing attributes in process `syz.3.556'. [ 213.571380][ T5943] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 214.407496][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.571360][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 214.580423][ T5943] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 214.590325][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.599029][ T5943] usb 3-1: Product: syz [ 214.666909][ T5942] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 214.701440][ T5943] usb 3-1: Manufacturer: syz [ 214.786998][ T7876] (syz.3.562,7876,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 214.795572][ T7876] (syz.3.562,7876,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 215.151109][ T7874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.561'. [ 215.162058][ T5943] usb 3-1: SerialNumber: syz [ 215.255982][ T5943] usb 3-1: config 0 descriptor?? [ 215.271946][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.283956][ T5943] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 215.403047][ T5942] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 215.526729][ T7880] (syz.4.563,7880,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 215.535449][ T7880] (syz.4.563,7880,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 215.848788][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.857071][ T5942] usb 2-1: Product: syz [ 215.861249][ T5942] usb 2-1: Manufacturer: syz [ 215.876910][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.982534][ T5942] usb 2-1: SerialNumber: syz [ 216.063258][ T5942] hub 2-1:24.0: bad descriptor, ignoring hub [ 216.072645][ T5942] hub 2-1:24.0: probe with driver hub failed with error -5 [ 216.462618][ T5943] gspca_sonixj: reg_r err -32 [ 216.467341][ T5943] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 216.482611][ T5942] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 216.496064][ T5942] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 216.507672][ T5942] dib0700: firmware download failed at 7 with -22 [ 216.541399][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.549925][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.951819][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.065295][ T7897] SET target dimension over the limit! [ 217.124579][ T5942] usb 2-1: USB disconnect, device number 27 [ 217.424472][ T7906] fuse: Bad value for 'fd' [ 218.097387][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.117498][ T5942] usb 3-1: USB disconnect, device number 21 [ 218.256226][ T30] audit: type=1400 audit(1764302614.710:566): avc: denied { read } for pid=7908 comm="syz.3.572" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 218.355659][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.827465][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.147838][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.174263][ T30] audit: type=1400 audit(1764302614.710:567): avc: denied { open } for pid=7908 comm="syz.3.572" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 219.384159][ T30] audit: type=1400 audit(1764302614.710:568): avc: denied { ioctl } for pid=7908 comm="syz.3.572" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 219.780666][ T30] audit: type=1400 audit(1764302614.830:569): avc: denied { connect } for pid=7908 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.181350][ T30] audit: type=1400 audit(1764302614.830:570): avc: denied { write } for pid=7908 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.202842][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.227303][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.576'. [ 220.484185][ T30] audit: type=1400 audit(1764302615.110:571): avc: denied { shutdown } for pid=7908 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 220.615746][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 220.663769][ T7935] comedi: No check for data length of config insn id 14 is implemented [ 220.673173][ T7935] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 220.684724][ T7935] comedi: Assuming n=57113 is correct [ 220.695494][ T30] audit: type=1326 audit(1764302617.240:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7934 comm="syz.3.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f657138f749 code=0x7ffc0000 [ 220.826141][ T7942] syzkaller0: entered promiscuous mode [ 220.831764][ T7942] syzkaller0: entered allmulticast mode [ 220.917373][ T7944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.267810][ T5943] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 221.281637][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.331982][ T5942] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 221.422789][ T5943] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 221.431062][ T5943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.441476][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.456210][ T5943] usb 3-1: config 0 has no interface number 0 [ 221.478005][ T5943] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 221.495731][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 221.548654][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.566164][ T5942] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 221.582479][ T5943] usb 3-1: Product: syz [ 221.590291][ T5943] usb 3-1: Manufacturer: syz [ 221.595378][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.618398][ T5943] usb 3-1: SerialNumber: syz [ 221.629335][ T5942] usb 1-1: Product: syz [ 221.642591][ T5943] usb 3-1: config 0 descriptor?? [ 221.647755][ T5942] usb 1-1: Manufacturer: syz [ 221.652716][ T5942] usb 1-1: SerialNumber: syz [ 221.732428][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.743579][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.871327][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 222.034261][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 222.052244][ T24] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 222.060458][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.074498][ T30] audit: type=1400 audit(1764302618.620:573): avc: denied { setopt } for pid=7960 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 222.082000][ T24] usb 5-1: config 0 has no interface number 0 [ 222.121372][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 222.130754][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.145630][ T30] audit: type=1400 audit(1764302618.640:574): avc: denied { create } for pid=7960 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 222.195520][ T24] usb 5-1: Product: syz [ 222.199795][ T24] usb 5-1: Manufacturer: syz [ 222.214776][ T24] usb 5-1: SerialNumber: syz [ 222.281359][ T24] usb 5-1: config 0 descriptor?? [ 222.323227][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.368025][ T24] uvcvideo 5-1:0.105: Found Unit with invalid ID 0 [ 222.426309][ T24] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 222.467857][ T24] uvcvideo 5-1:0.105: No valid video chain found. [ 222.535984][ T5942] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 222.544799][ T5942] mxuport 1-1:254.0: probe with driver mxuport failed with error -5 [ 222.559419][ T5942] usb 1-1: USB disconnect, device number 19 [ 222.698262][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 222.707245][ T30] audit: type=1400 audit(1764302619.240:575): avc: denied { setopt } for pid=7932 comm="syz.2.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.763250][ T5943] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 222.788691][ T5943] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 82 [ 222.825243][ T5943] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 222.848967][ T5943] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 222.941917][ T5943] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 222.954174][ T5943] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 222.965562][ T5943] usb 3-1: USB disconnect, device number 22 [ 222.975335][ T5943] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 222.986271][ T5943] keyspan 3-1:0.133: device disconnected [ 223.020112][ T24] usb 5-1: USB disconnect, device number 22 [ 223.787180][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.979525][ T7992] netlink: 'syz.4.598': attribute type 1 has an invalid length. [ 224.092293][ T5943] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 224.120660][ T7992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.136931][ T7994] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 224.282975][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 224.299033][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 224.320738][ T5943] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 224.406881][ T8007] netlink: 44 bytes leftover after parsing attributes in process `syz.2.599'. [ 224.435003][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 224.581378][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 224.581409][ T30] audit: type=1400 audit(1764302621.040:577): avc: denied { listen } for pid=8006 comm="syz.4.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.699003][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.707624][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.715916][ T5943] usb 1-1: Product: syz [ 224.720150][ T5943] usb 1-1: Manufacturer: syz [ 224.735414][ T5943] usb 1-1: SerialNumber: syz [ 224.763238][ T5943] usb 1-1: config 0 descriptor?? [ 224.780784][ T5943] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0207 [ 224.877443][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.463591][ T30] audit: type=1400 audit(1764302622.010:578): avc: denied { ioctl } for pid=8016 comm="syz.4.605" path="/dev/ptyqd" dev="devtmpfs" ino=132 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 225.527325][ T30] audit: type=1400 audit(1764302622.060:579): avc: denied { setopt } for pid=7989 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 225.607467][ T30] audit: type=1400 audit(1764302622.110:580): avc: denied { view } for pid=7989 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 225.628835][ T30] audit: type=1400 audit(1764302622.130:581): avc: denied { ioctl } for pid=7989 comm="syz.0.597" path="socket:[18063]" dev="sockfs" ino=18063 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.678335][ T42] usb 1-1: USB disconnect, device number 20 [ 225.787960][ T30] audit: type=1400 audit(1764302622.320:582): avc: denied { block_suspend } for pid=8026 comm="syz.2.609" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.911815][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.034241][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 226.076584][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 226.086383][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 226.287881][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 226.492495][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 226.523550][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 226.608542][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'. [ 227.491590][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.527013][ T30] audit: type=1400 audit(1764302623.150:583): avc: denied { write } for pid=8046 comm="syz.0.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 227.844525][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.321844][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.473405][ T8064] comedi: No check for data length of config insn id 14 is implemented [ 228.483371][ T8064] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 228.528380][ T8064] comedi: Assuming n=57111 is correct [ 228.564632][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.659012][ T30] audit: type=1326 audit(1764302625.180:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7c58f749 code=0x7ffc0000 [ 228.773752][ T30] audit: type=1326 audit(1764302625.180:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8060 comm="syz.2.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7c58f749 code=0x7ffc0000 [ 229.023601][ T8079] kvm: apic: phys broadcast and lowest prio [ 229.410036][ T8081] can0: slcan on ptm0. [ 229.602079][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.270949][ T8085] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 230.320733][ T8076] can0 (unregistered): slcan off ptm0. [ 230.485781][ T8085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.533929][ T8087] bond1: (slave geneve2): making interface the new active one [ 230.764702][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.882286][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.990607][ T8087] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 231.869949][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.138915][ T30] audit: type=1800 audit(1764302628.680:586): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.628" name="bus" dev="overlay" ino=788 res=0 errno=0 [ 232.765758][ T30] audit: type=1400 audit(1764302629.230:587): avc: denied { write } for pid=8119 comm="syz.3.631" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 233.140399][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.741931][ T5883] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 234.110190][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.154003][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.513139][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.523575][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.534711][ T5883] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.545536][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.554102][ T5883] usb 5-1: Product: syz [ 234.558236][ T5883] usb 5-1: Manufacturer: syz [ 234.563195][ T5883] usb 5-1: SerialNumber: syz [ 234.909838][ T5883] usb 5-1: cannot find UAC_HEADER [ 234.966779][ T5883] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 235.036808][ T5883] usb 5-1: USB disconnect, device number 23 [ 235.220273][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.408100][ T8154] 9pnet_fd: Insufficient options for proto=fd [ 235.414838][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 235.482859][ T30] audit: type=1400 audit(1764302631.940:588): avc: denied { read } for pid=8149 comm="syz.3.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 235.531096][ T30] audit: type=1400 audit(1764302631.940:589): avc: denied { read write } for pid=8149 comm="syz.3.637" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 235.558095][ T30] audit: type=1400 audit(1764302631.940:590): avc: denied { open } for pid=8149 comm="syz.3.637" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 235.581058][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.598284][ T8157] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.859852][ T30] audit: type=1400 audit(1764302631.940:591): avc: denied { ioctl } for pid=8149 comm="syz.3.637" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 235.884283][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.049429][ T30] audit: type=1400 audit(1764302631.950:592): avc: denied { read } for pid=8149 comm="syz.3.637" dev="sockfs" ino=18829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.243477][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.251709][ T1654] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 236.429743][ T1654] usb 2-1: not running at top speed; connect to a high speed hub [ 236.438466][ T1654] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.458737][ T1654] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.841381][ T5883] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 237.132287][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.157220][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.167534][ T5883] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 237.178351][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.200348][ T5883] usb 5-1: config 0 descriptor?? [ 237.211349][ T5943] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 237.285020][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.371391][ T5943] usb 1-1: Using ep0 maxpacket: 32 [ 237.378828][ T5943] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.387086][ T5943] usb 1-1: config 0 has no interface number 0 [ 237.393239][ T5943] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.404523][ T5943] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.414363][ T5943] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 237.423562][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.433544][ T5943] usb 1-1: config 0 descriptor?? [ 237.571346][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 237.618233][ T5883] logitech-djreceiver 0003:046D:C71F.000D: unbalanced collection at end of report description [ 237.628990][ T5883] logitech-djreceiver 0003:046D:C71F.000D: logi_dj_probe: parse failed [ 237.637315][ T5883] logitech-djreceiver 0003:046D:C71F.000D: probe with driver logitech-djreceiver failed with error -22 [ 237.704916][ T24] usb 3-1: device descriptor read/64, error -71 [ 237.823559][ T42] usb 5-1: USB disconnect, device number 24 [ 237.830731][ T8181] FAULT_INJECTION: forcing a failure. [ 237.830731][ T8181] name failslab, interval 1, probability 0, space 0, times 0 [ 237.843468][ T8181] CPU: 0 UID: 0 PID: 8181 Comm: syz.3.647 Not tainted syzkaller #0 PREEMPT(full) [ 237.843489][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.843498][ T8181] Call Trace: [ 237.843503][ T8181] [ 237.843511][ T8181] dump_stack_lvl+0x16c/0x1f0 [ 237.843534][ T8181] should_fail_ex+0x512/0x640 [ 237.843550][ T8181] ? __kmalloc_cache_noprof+0x5f/0x780 [ 237.843567][ T8181] should_failslab+0xc2/0x120 [ 237.843580][ T8181] __kmalloc_cache_noprof+0x72/0x780 [ 237.843595][ T8181] ? alloc_ucounts+0x13d/0x440 [ 237.843613][ T8181] ? alloc_ucounts+0x13d/0x440 [ 237.843627][ T8181] alloc_ucounts+0x13d/0x440 [ 237.843647][ T8181] ? __pfx_alloc_ucounts+0x10/0x10 [ 237.843678][ T8181] set_cred_ucounts+0xcd/0x200 [ 237.843703][ T8181] __sys_setresuid+0x67c/0x1160 [ 237.843722][ T8181] do_syscall_64+0xcd/0xfa0 [ 237.843733][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.843743][ T8181] RIP: 0033:0x7f657138f749 [ 237.843752][ T8181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.843762][ T8181] RSP: 002b:00007f6572214038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 237.843773][ T8181] RAX: ffffffffffffffda RBX: 00007f65715e5fa0 RCX: 00007f657138f749 [ 237.843779][ T8181] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 000000000000ee01 [ 237.843788][ T8181] RBP: 00007f6572214090 R08: 0000000000000000 R09: 0000000000000000 [ 237.843797][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.843811][ T8181] R13: 00007f65715e6038 R14: 00007f65715e5fa0 R15: 00007fffb692dcc8 [ 237.843834][ T8181] [ 238.015208][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.027313][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.081368][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 238.200898][ T5943] uclogic 0003:28BD:0094.000E: pen parameters not found [ 238.207938][ T5943] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring [ 238.211335][ T24] usb 3-1: device descriptor read/64, error -71 [ 238.311617][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.371565][ T24] usb usb3-port1: attempt power cycle [ 238.407543][ T42] usb 1-1: USB disconnect, device number 21 [ 238.750449][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 238.750881][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.649'. [ 238.795884][ T24] usb 3-1: device descriptor read/8, error -71 [ 239.045305][ T1654] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.165167][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 239.173430][ T1654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.206444][ T1654] usb 2-1: Product: Щ [ 239.212219][ T24] usb 3-1: device descriptor read/8, error -71 [ 239.365632][ T8200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.396914][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.417316][ T1654] usb 2-1: can't set config #1, error -71 [ 239.426442][ T1654] usb 2-1: USB disconnect, device number 28 [ 239.568729][ T24] usb usb3-port1: unable to enumerate USB device [ 240.151458][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.381550][ T1654] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 240.423832][ T30] audit: type=1400 audit(1764302636.970:593): avc: denied { mount } for pid=8209 comm="syz.3.655" name="/" dev="ramfs" ino=18996 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 240.435293][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.475729][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.561827][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.607426][ T1654] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.624101][ T1654] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.761049][ T1654] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.781765][ T1654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.300034][ T1654] usb 2-1: Product: syz [ 241.307724][ T1654] usb 2-1: Manufacturer: syz [ 241.316471][ T1654] usb 2-1: SerialNumber: syz [ 241.536180][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.607009][ T8221] overlayfs: failed lookup in lower (newroot/125, name='file1', err=-40): overlapping layers [ 241.969851][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.980091][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.566177][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.606921][ T8205] comedi comedi0: reset error (fatal) [ 243.201670][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.410917][ T1654] usb 2-1: cannot find UAC_HEADER [ 243.692997][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 243.702632][ T8246] unsupported nlmsg_type 40 [ 243.998669][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.046936][ T30] audit: type=1400 audit(1764302639.970:594): avc: denied { listen } for pid=8239 comm="syz.2.663" lport=44422 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.069136][ T1654] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 244.079055][ T30] audit: type=1400 audit(1764302639.970:595): avc: denied { accept } for pid=8239 comm="syz.2.663" lport=44422 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 244.128778][ T30] audit: type=1400 audit(1764302640.350:596): avc: denied { map } for pid=8241 comm="syz.0.664" path="socket:[19051]" dev="sockfs" ino=19051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 244.137490][ T1654] usb 2-1: USB disconnect, device number 29 [ 244.173158][ T30] audit: type=1400 audit(1764302640.580:597): avc: denied { read write } for pid=5809 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.389510][ T8252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'. [ 244.694158][ T30] audit: type=1400 audit(1764302640.580:598): avc: denied { open } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.718945][ T30] audit: type=1400 audit(1764302640.580:599): avc: denied { ioctl } for pid=5809 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 244.721501][ T8254] binder_alloc: binder_alloc_mmap_handler: 8253 200000ffe000-200000fff000 already mapped failed -16 [ 244.761976][ T30] audit: type=1400 audit(1764302640.660:600): avc: denied { prog_load } for pid=8241 comm="syz.0.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 244.975987][ T30] audit: type=1400 audit(1764302640.660:601): avc: denied { bpf } for pid=8241 comm="syz.0.664" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.039602][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.112880][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.132602][ T30] audit: type=1400 audit(1764302640.670:602): avc: denied { perfmon } for pid=8241 comm="syz.0.664" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 245.170864][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.182826][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.191431][ T1654] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 245.192309][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.343418][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 245.522117][ T8266] netlink: 44 bytes leftover after parsing attributes in process `syz.2.668'. [ 245.551562][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 245.551592][ T30] audit: type=1400 audit(1764302642.010:643): avc: denied { mounton } for pid=8260 comm="syz.2.668" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.667349][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 245.811386][ T1654] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.821649][ T1654] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.832799][ T30] audit: type=1400 audit(1764302642.020:644): avc: denied { mount } for pid=8260 comm="syz.2.668" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 245.864493][ T1654] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 245.875732][ T1654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.884048][ T1654] usb 2-1: Product: syz [ 245.888246][ T1654] usb 2-1: Manufacturer: syz [ 245.893868][ T1654] usb 2-1: SerialNumber: syz [ 245.918620][ T8270] ip6erspan0: entered promiscuous mode [ 245.925766][ T8270] ip6erspan0: entered allmulticast mode [ 245.965179][ T30] audit: type=1400 audit(1764302642.510:645): avc: denied { name_bind } for pid=8271 comm="syz.4.671" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 245.968536][ T8272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.671'. [ 245.994292][ T30] audit: type=1400 audit(1764302642.510:646): avc: denied { node_bind } for pid=8271 comm="syz.4.671" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 245.998191][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.671'. [ 246.026317][ T8272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.671'. [ 246.035666][ T8272] netlink: 36 bytes leftover after parsing attributes in process `syz.4.671'. [ 246.048363][ T30] audit: type=1400 audit(1764302642.590:647): avc: denied { read write } for pid=8273 comm="syz.0.672" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 246.053949][ T8275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.672'. [ 246.073008][ T30] audit: type=1400 audit(1764302642.590:648): avc: denied { open } for pid=8273 comm="syz.0.672" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 246.086244][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.210197][ T30] audit: type=1400 audit(1764302642.590:649): avc: denied { create } for pid=8273 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.231689][ T30] audit: type=1400 audit(1764302642.590:650): avc: denied { write } for pid=8273 comm="syz.0.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 246.232483][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.293361][ T1654] usb 2-1: cannot find UAC_HEADER [ 246.322191][ T1654] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 246.351556][ T1654] usb 2-1: USB disconnect, device number 30 [ 246.357570][ T30] audit: type=1400 audit(1764302642.900:651): avc: denied { ioctl } for pid=8282 comm="syz.0.675" path="socket:[19189]" dev="sockfs" ino=19189 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.603523][ T30] audit: type=1400 audit(1764302643.150:652): avc: denied { write } for pid=8288 comm="syz.0.676" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.234840][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.283954][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.309311][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.483958][ T8297] block device autoloading is deprecated and will be removed. [ 247.514326][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.293545][ T8317] openvswitch: netlink: IP tunnel dst address not specified [ 248.336581][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.521696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.581436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.661513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.510170][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.055049][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 251.055063][ T30] audit: type=1400 audit(1764302647.600:703): avc: denied { create } for pid=8359 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 251.249465][ T8366] __nla_validate_parse: 3 callbacks suppressed [ 251.249494][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.694'. [ 251.276485][ T30] audit: type=1400 audit(1764302647.600:704): avc: denied { connect } for pid=8359 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 251.298129][ T30] audit: type=1400 audit(1764302647.600:705): avc: denied { write } for pid=8359 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 251.318031][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.324363][ T42] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 251.335956][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 251.335972][ T30] audit: type=1400 audit(1764302647.630:706): avc: denied { create } for pid=8359 comm="syz.4.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.110968][ T5897] net_ratelimit: 4 callbacks suppressed [ 252.110978][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.221576][ T30] audit: type=1400 audit(1764302648.730:707): avc: denied { setopt } for pid=8375 comm="syz.1.701" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.381462][ T30] audit: type=1400 audit(1764302648.770:708): avc: denied { ioctl } for pid=8375 comm="syz.1.701" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19793 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 252.407316][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.414911][ T30] audit: type=1400 audit(1764302648.770:709): avc: denied { setopt } for pid=8375 comm="syz.1.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.434650][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.569463][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.571666][ T30] audit: type=1400 audit(1764302649.060:710): avc: denied { ioctl } for pid=8378 comm="syz.2.702" path="/dev/binderfs/binder0" dev="binder" ino=28 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 252.602935][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.720792][ T30] audit: type=1400 audit(1764302649.060:711): avc: denied { set_context_mgr } for pid=8378 comm="syz.2.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 252.793855][ T8388] netlink: 'syz.0.705': attribute type 39 has an invalid length. [ 252.911646][ T8392] netlink: 44 bytes leftover after parsing attributes in process `syz.3.703'. [ 252.983942][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 253.384976][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.404474][ T30] audit: type=1400 audit(1764302649.580:712): avc: denied { create } for pid=8389 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 254.012518][ T8414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.022405][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 254.044910][ T8414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.281347][ T5943] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 255.025157][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.197760][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.204368][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.295403][ T5943] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 255.307049][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.315741][ T5943] usb 5-1: Product: syz [ 255.319966][ T5943] usb 5-1: Manufacturer: syz [ 255.324608][ T5943] usb 5-1: SerialNumber: syz [ 255.337806][ T5943] hub 5-1:24.0: bad descriptor, ignoring hub [ 255.361786][ T5943] hub 5-1:24.0: probe with driver hub failed with error -5 [ 255.986873][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.012129][ T5943] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 256.034632][ T5943] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 256.045295][ T5943] dib0700: firmware download failed at 7 with -22 [ 256.057629][ T8449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.721'. [ 256.082498][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.188805][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.722'. [ 256.708636][ T5897] usb 5-1: USB disconnect, device number 26 [ 256.884168][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.727'. [ 257.117490][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.125632][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.320591][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.728'. [ 258.449371][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 258.449388][ T30] audit: type=1400 audit(1764302654.610:734): avc: denied { write } for pid=8478 comm="syz.1.732" name="route" dev="proc" ino=4026532969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 258.451593][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.451909][ T42] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 258.615068][ T30] audit: type=1400 audit(1764302655.150:735): avc: denied { bind } for pid=8486 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 258.666603][ T42] usb 5-1: device descriptor read/64, error -71 [ 258.981320][ T42] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 259.010924][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.736'. [ 259.033348][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.215824][ T42] usb 5-1: device descriptor read/64, error -71 [ 259.313787][ T8503] netlink: 44 bytes leftover after parsing attributes in process `syz.0.737'. [ 259.359503][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 259.663404][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.913708][ T30] audit: type=1400 audit(1764302656.240:736): avc: denied { ioctl } for pid=8501 comm="syz.3.738" path="/dev/video3" dev="devtmpfs" ino=934 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 259.940405][ T30] audit: type=1400 audit(1764302656.340:737): avc: denied { write } for pid=8483 comm="syz.2.734" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 260.284309][ T42] usb usb5-port1: attempt power cycle [ 260.393529][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.394278][ T8510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25344 sclass=netlink_route_socket pid=8510 comm=syz.0.740 [ 260.427708][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.492497][ T8512] 9pnet_virtio: no channels available for device syz [ 260.671364][ T42] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 260.813438][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.021465][ T42] usb 5-1: device not accepting address 29, error -71 [ 261.104740][ T8524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.121302][ T30] audit: type=1400 audit(1764302657.640:738): avc: denied { create } for pid=8516 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 261.384277][ T8526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.401544][ T8526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.470723][ T30] audit: type=1400 audit(1764302658.010:739): avc: denied { read write } for pid=8521 comm="syz.2.743" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.521490][ T42] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 261.824410][ T31] INFO: task kworker/0:6:5931 blocked for more than 143 seconds. [ 261.854061][ T31] Not tainted syzkaller #0 [ 261.859023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.867793][ T30] audit: type=1400 audit(1764302658.010:740): avc: denied { open } for pid=8521 comm="syz.2.743" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.892267][ T31] task:kworker/0:6 state:D stack:18184 pid:5931 tgid:5931 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 261.910823][ T42] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 261.926904][ T31] Workqueue: usb_hub_wq hub_event [ 261.926922][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.926946][ T42] usb 5-1: Product: syz [ 261.944450][ T1654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.968704][ T31] [ 261.969839][ T42] usb 5-1: Manufacturer: syz [ 261.971083][ T31] Call Trace: [ 261.975929][ T42] usb 5-1: SerialNumber: syz [ 261.985934][ T30] audit: type=1400 audit(1764302658.040:741): avc: denied { ioctl } for pid=8521 comm="syz.2.743" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 ioctlcmd=0x4b68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 261.991018][ T42] hub 5-1:24.0: bad descriptor, ignoring hub [ 262.019472][ T42] hub 5-1:24.0: probe with driver hub failed with error -5 [ 262.027823][ T31] [ 262.030772][ T31] __schedule+0x1190/0x5de0 [ 262.047808][ T31] ? finish_task_switch.isra.0+0x22a/0xc10 [ 262.054029][ T31] ? __lock_acquire+0x622/0x1c90 [ 262.061543][ T31] ? __pfx___schedule+0x10/0x10 [ 262.066643][ T31] ? find_held_lock+0x2b/0x80 [ 262.071468][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.072214][ T31] ? schedule+0x2d7/0x3a0 [ 262.084314][ T31] schedule+0xe7/0x3a0 [ 262.089544][ T31] schedule_timeout+0x257/0x290 [ 262.094617][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 262.100067][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 262.107500][ T31] __wait_for_common+0x2fc/0x4e0 [ 262.112512][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 262.118136][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 262.123690][ T31] ? __pfx_device_del+0x10/0x10 [ 262.128685][ T31] ? kobject_put+0xab/0x5a0 [ 262.133254][ T31] i2c_del_adapter+0x546/0x6f0 [ 262.138078][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 262.144618][ T31] ? kfree+0x2b8/0x6d0 [ 262.151383][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 262.157060][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 262.162483][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 262.167601][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 262.172980][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 262.178945][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 262.184665][ T31] usb_probe_interface+0x303/0xa40 [ 262.190002][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 262.195812][ T42] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 262.207438][ T31] really_probe+0x241/0xa90 [ 262.213639][ T31] __driver_probe_device+0x1de/0x440 [ 262.219748][ T42] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 262.227850][ T31] driver_probe_device+0x4c/0x1b0 [ 262.233159][ T42] dib0700: firmware download failed at 7 with -22 [ 262.241307][ T31] __device_attach_driver+0x1df/0x310 [ 262.248277][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 262.257241][ T31] bus_for_each_drv+0x159/0x1e0 [ 262.262202][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 262.267798][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.274789][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 262.293034][ T31] __device_attach+0x1e4/0x4b0 [ 262.298953][ T31] ? __pfx___device_attach+0x10/0x10 [ 262.304418][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 262.309666][ T31] bus_probe_device+0x17f/0x1c0 [ 262.320359][ T31] device_add+0x1148/0x1aa0 [ 262.324939][ T31] ? __pfx_device_add+0x10/0x10 [ 262.329923][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 262.335436][ T31] usb_set_configuration+0x1187/0x1e20 [ 262.341045][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 262.347314][ T31] usb_generic_driver_probe+0xb1/0x110 [ 262.354216][ T31] usb_probe_device+0xef/0x3e0 [ 262.361355][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 262.366882][ T31] really_probe+0x241/0xa90 [ 262.371584][ T31] __driver_probe_device+0x1de/0x440 [ 262.378116][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 262.402595][ T31] driver_probe_device+0x4c/0x1b0 [ 262.414762][ T31] __device_attach_driver+0x1df/0x310 [ 262.426931][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 262.433246][ T31] bus_for_each_drv+0x159/0x1e0 [ 262.438159][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 262.443794][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.449029][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 262.455412][ T31] __device_attach+0x1e4/0x4b0 [ 262.460187][ T31] ? __pfx___device_attach+0x10/0x10 [ 262.465721][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 262.470931][ T31] bus_probe_device+0x17f/0x1c0 [ 262.476011][ T31] device_add+0x1148/0x1aa0 [ 262.480538][ T31] ? __pfx_device_add+0x10/0x10 [ 262.485567][ T31] ? add_device_randomness+0xb7/0xf0 [ 262.490835][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 262.497719][ T31] usb_new_device+0xd07/0x1a60 [ 262.503430][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 262.508552][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 262.513857][ T31] ? mark_held_locks+0x49/0x80 [ 262.518613][ T31] hub_event+0x2f34/0x4fe0 [ 262.523089][ T31] ? __pfx_hub_event+0x10/0x10 [ 262.527851][ T31] ? interval_tree_remove+0x7e0/0xee0 [ 262.533282][ T31] ? rcu_is_watching+0x12/0xc0 [ 262.538048][ T31] process_one_work+0x9cf/0x1b70 [ 262.543020][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 262.548317][ T31] ? __pfx_process_one_work+0x10/0x10 [ 262.553741][ T31] ? assign_work+0x1a0/0x250 [ 262.558335][ T31] worker_thread+0x6c8/0xf10 [ 262.562954][ T31] ? __pfx_worker_thread+0x10/0x10 [ 262.568056][ T31] kthread+0x3c5/0x780 [ 262.572212][ T31] ? __pfx_kthread+0x10/0x10 [ 262.576795][ T31] ? rcu_is_watching+0x12/0xc0 [ 262.581594][ T31] ? __pfx_kthread+0x10/0x10 [ 262.586178][ T31] ret_from_fork+0x675/0x7d0 [ 262.590762][ T31] ? __pfx_kthread+0x10/0x10 [ 262.595539][ T31] ret_from_fork_asm+0x1a/0x30 [ 262.600320][ T31] [ 262.603515][ T31] [ 262.603515][ T31] Showing all locks held in the system: [ 262.611681][ T31] 2 locks held by kworker/u8:0/12: [ 262.616828][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 262.621038][ T8530] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 262.638611][ T30] audit: type=1400 audit(1764302659.180:742): avc: denied { firmware_load } for pid=8528 comm="syz.1.745" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 262.641641][ T8530] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 262.660011][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 262.676182][ T31] 3 locks held by kworker/u8:1/13: [ 262.681514][ T31] #0: ffff888146ab3948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 262.687625][ T8531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36219 sclass=netlink_route_socket pid=8531 comm=syz.1.745 [ 262.694682][ T31] #1: ffffc90000127d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 262.717724][ T31] #2: ffffffff8e3cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 262.730590][ T31] 1 lock held by khungtaskd/31: [ 262.735719][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 262.746253][ T31] 2 locks held by getty/5570: [ 262.750960][ T31] #0: ffff888035e320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 262.760888][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 262.771085][ T31] 4 locks held by udevd/5829: [ 262.775827][ T31] #0: ffff88807c1eb540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 262.784812][ T31] #1: ffff888057a64488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 262.794473][ T31] #2: ffff88807cc4ae18 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 262.804081][ T31] #3: ffff8880236db198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 262.813477][ T31] 5 locks held by kworker/0:6/5931: [ 262.818659][ T31] #0: ffff888020eccd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 262.830608][ T31] #1: ffffc900049efd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 262.842724][ T31] #2: ffff888029a75198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 262.851853][ T31] #3: ffff8880236db198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 262.861228][ T31] #4: ffff888028e10160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 262.875075][ T31] 1 lock held by syz.4.741/8513: [ 262.880016][ T31] #0: ffffffff8e3cfbc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 262.889944][ T31] 2 locks held by syz.2.743/8521: [ 262.894963][ T31] #0: ffff88802c192160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_close_device+0x21/0xd0 [ 262.905225][ T31] #1: ffff88802b7912c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x46/0x2a0 [ 262.914913][ T31] 1 lock held by syz.1.745/8528: [ 262.919820][ T31] #0: ffffffff8e3cfbc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 262.930493][ T31] 2 locks held by syz.1.745/8529: [ 262.935565][ T31] #0: ffffffff8e446128 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register_prio_may_exist+0x9a/0x100 [ 262.947523][ T31] #1: ffffffff8e3cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 262.957689][ T31] 2 locks held by syz.1.745/8530: [ 262.963479][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.963753][ T31] #0: ffff888078511250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_compat_flash_update+0xaf/0x360 [ 262.983065][ T31] #1: ffffffff8e2772b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xa9/0x250 [ 262.993647][ T31] [ 263.044789][ T31] ============================================= [ 263.044789][ T31] [ 263.055402][ T31] NMI backtrace for cpu 1 [ 263.055416][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 263.055435][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.055444][ T31] Call Trace: [ 263.055448][ T31] [ 263.055454][ T31] dump_stack_lvl+0x116/0x1f0 [ 263.055474][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 263.055494][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 263.055520][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.055544][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 263.055568][ T31] watchdog+0xf3f/0x1170 [ 263.055594][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.055617][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.055641][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.055656][ T31] ? __kthread_parkme+0x19e/0x250 [ 263.055680][ T31] ? __pfx_watchdog+0x10/0x10 [ 263.055701][ T31] kthread+0x3c5/0x780 [ 263.055719][ T31] ? __pfx_kthread+0x10/0x10 [ 263.055738][ T31] ? rcu_is_watching+0x12/0xc0 [ 263.055759][ T31] ? __pfx_kthread+0x10/0x10 [ 263.055776][ T31] ret_from_fork+0x675/0x7d0 [ 263.055791][ T31] ? __pfx_kthread+0x10/0x10 [ 263.055808][ T31] ret_from_fork_asm+0x1a/0x30 [ 263.055844][ T31] [ 263.055851][ T31] Sending NMI from CPU 1 to CPUs 0: [ 263.141680][ T5943] usb 5-1: USB disconnect, device number 30 [ 263.143291][ C0] NMI backtrace for cpu 0 [ 263.143303][ C0] CPU: 0 UID: 0 PID: 5943 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 263.143320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.143329][ C0] Workqueue: usb_hub_wq hub_event [ 263.143350][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 263.143370][ C0] Code: 62 93 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c e9 8d 51 3a 06 e8 e8 04 fc fc eb a2 e8 71 05 [ 263.143383][ C0] RSP: 0018:ffffc90004a4f2f8 EFLAGS: 00000002 [ 263.143393][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 263.143408][ C0] RDX: 00000000000003fd RSI: ffffffff852985e0 RDI: ffffffff9addb7c0 [ 263.143416][ C0] RBP: ffffffff9addb780 R08: 0000000000000001 R09: 000000000000001f [ 263.143428][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 263.143436][ C0] R13: 0000000000000020 R14: fffffbfff35bb74a R15: dffffc0000000000 [ 263.143445][ C0] FS: 0000000000000000(0000) GS:ffff888124a05000(0000) knlGS:0000000000000000 [ 263.143459][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.143467][ C0] CR2: 00007f2b7c7b6ad8 CR3: 000000007cdd1000 CR4: 00000000003526f0 [ 263.143476][ C0] Call Trace: [ 263.143480][ C0] [ 263.143486][ C0] wait_for_lsr+0x13a/0x210 [ 263.143508][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 263.143525][ C0] serial8250_console_write+0xf81/0x1890 [ 263.143542][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 263.143557][ C0] ? lock_acquire+0x179/0x350 [ 263.143574][ C0] console_flush_all+0x801/0xc60 [ 263.143593][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 263.143609][ C0] ? __lock_acquire+0x622/0x1c90 [ 263.143623][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 263.143642][ C0] console_unlock+0xd8/0x210 [ 263.143657][ C0] ? __pfx_console_unlock+0x10/0x10 [ 263.143676][ C0] vprintk_emit+0x3d7/0x680 [ 263.143693][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 263.143712][ C0] dev_printk_emit+0xfa/0x140 [ 263.143732][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 263.143752][ C0] ? lock_acquire+0x179/0x350 [ 263.143765][ C0] ? __virt_addr_valid+0x31c/0x610 [ 263.143788][ C0] __dev_printk+0xf5/0x270 [ 263.143808][ C0] _dev_info+0xe4/0x120 [ 263.143820][ C0] ? __pfx__dev_info+0x10/0x10 [ 263.143831][ C0] ? find_held_lock+0x2b/0x80 [ 263.143852][ C0] usb_disconnect+0xec/0x9c0 [ 263.143870][ C0] hub_event+0x1c81/0x4fe0 [ 263.143894][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 263.143907][ C0] ? __pfx_hub_event+0x10/0x10 [ 263.143922][ C0] ? interval_tree_remove+0x7e0/0xee0 [ 263.143945][ C0] ? rcu_is_watching+0x12/0xc0 [ 263.143963][ C0] process_one_work+0x9cf/0x1b70 [ 263.143981][ C0] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 263.143997][ C0] ? __pfx_process_one_work+0x10/0x10 [ 263.144014][ C0] ? assign_work+0x1a0/0x250 [ 263.144027][ C0] worker_thread+0x6c8/0xf10 [ 263.144044][ C0] ? __kthread_parkme+0x19e/0x250 [ 263.144064][ C0] ? __pfx_worker_thread+0x10/0x10 [ 263.144078][ C0] kthread+0x3c5/0x780 [ 263.144091][ C0] ? __pfx_kthread+0x10/0x10 [ 263.144104][ C0] ? rcu_is_watching+0x12/0xc0 [ 263.144120][ C0] ? __pfx_kthread+0x10/0x10 [ 263.144133][ C0] ret_from_fork+0x675/0x7d0 [ 263.144145][ C0] ? __pfx_kthread+0x10/0x10 [ 263.144158][ C0] ret_from_fork_asm+0x1a/0x30 [ 263.144181][ C0] [ 263.991748][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.041946][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.111503][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.081721][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.549142][ T5185] udevd[5185]: worker [5829] /devices/platform/dummy_hcd.3/usb4/4-1 is taking a long time [ 266.711691][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.112028][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.151469][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.159573][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.191536][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.231481][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.196038][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.281913][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog