last executing test programs: 11m18.781124933s ago: executing program 4 (id=1794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000ac0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/file0'}}, {@uuid_on}, {@metacopy_on}]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r2, &(0x7f0000000900)='./file0/file0\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0200", "ec094ea7c59700000000070000000000000000000000000000006b00", "cf00", "fffffffffffffffd"}, 0x38) writev(r4, &(0x7f0000000100)=[{&(0x7f0000001480)="acca", 0x2}], 0x1) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x24008804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)='~\r', 0x2, 0xbcff, 0x0, 0x0) writev(r4, &(0x7f0000001300), 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000e00000000000000090000001832000001000000000000000000000018181000", @ANYRES32=r1, @ANYBLOB="0000000000000000184800000500000000000000000000005593f8ffffffffff18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008500000059000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000181c0000", @ANYRES32=r3, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000f7cf00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xcc70, 0x7d, &(0x7f00000002c0)=""/125, 0x40f00, 0x40, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000380)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x6, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r2, r3, r1, r2, r1, r1]}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000740)=r6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x200001, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) syz_clone3(&(0x7f0000000a40)={0x2800000, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800), {0x23}, &(0x7f0000000840)=""/188, 0xbc, &(0x7f0000000940)=""/2, &(0x7f00000009c0)=[0x0, 0x0], 0x2, {r3}}, 0x58) 11m17.483233318s ago: executing program 4 (id=1798): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000140)="84b1") bind$ax25(r0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) 11m17.149814762s ago: executing program 4 (id=1801): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x7, 0x2}) (fail_nth: 5) 11m16.854341991s ago: executing program 4 (id=1803): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x1, 0x0, &(0x7f0000000000)) fsopen(0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)}}, 0x40) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r7, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="8352", 0x2}], 0x1}, 0x49cf75490397e68f) 11m16.277258229s ago: executing program 4 (id=1805): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000100)={0x1d1, 0x6, 0x4, 0x100, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x8001000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880011801"], 0x48) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x2000, 0xfce7d5ef34849b4b) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file1\x00'}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setpgid(0x0, r0) open(&(0x7f0000000180)='./bus\x00', 0x741880, 0x9b) 11m16.21786876s ago: executing program 4 (id=1806): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140a, 0x120, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}}, 0x92) 11m0.964776115s ago: executing program 32 (id=1806): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140a, 0x120, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}}, 0x92) 15.489593505s ago: executing program 2 (id=3705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x68, 0x200}, 0x18}, 0x1, 0x0, 0x0, 0x20040012}, 0x20000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) listen(r9, 0x1) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) 14.552271497s ago: executing program 2 (id=3707): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = getpgrp(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) close(0x3) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) 12.936629476s ago: executing program 5 (id=3712): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x7b, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000000)={0xfeffffff, r5, 0x23, {0x3b4, 0x6d3}, 0x6}, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000200)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x5, '\x00', {0x8, 0x6, "db8603", 0x0, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) 12.897135428s ago: executing program 2 (id=3713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x75}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x80801) userfaultfd(0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffe, 0x80802) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f00000002c0)) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x0, 0x1}, 0x4, 0xc4, &(0x7f00000000c0)={0x67a0442c92ff72d1, 0xd, 0x6, 0x7, 0x2}, 0x57, 0xa867, 0xfffffffd, 0x0, 0x7fffffff, 0x63, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x1ff, 0x103202) ioctl$USBDEVFS_GETDRIVER(r6, 0xc0105502, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r7, 0x29, 0x24, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB='enc=pkcs1 hash='], 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r4, 0x8001}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.946924149s ago: executing program 2 (id=3719): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x20, 0x23, 0x5, {0x5, 0x4, "10150f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) r2 = eventfd(0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, r4}}, './file0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES64=r0], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 9.872247507s ago: executing program 5 (id=3720): syz_open_dev$dri(0x0, 0x0, 0x0) r0 = getpgrp(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r1, 0x0, 0x0) close(0x3) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 8.936850067s ago: executing program 5 (id=3721): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r2 = getuid() quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000300)='./bus\x00') r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000180)=ANY=[], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x1fe, 0x0, 0x10}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000a3a000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/148) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r6], 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000004080331c82b0198189720a7dd1b5dd3"], 0x14}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x8040) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @dccp={{0x8, 0x4, 0x0, 0x3d, 0x30, 0x67, 0x0, 0x9, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x7, 0xbd, [@multicast2]}, @generic={0x94, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, "180f8f", 0x1, "fffb45"}}}}}}, 0x0) 8.914924153s ago: executing program 0 (id=3722): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 8.696914834s ago: executing program 0 (id=3723): r0 = creat(0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000400)=ANY=[], 0x50) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10010, r1, 0x100000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02080000010000000000000100000000"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, &(0x7f0000000100)='barrier') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="040d000000"], 0x9) 7.676352863s ago: executing program 0 (id=3724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040012}, 0x20000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) listen(r10, 0x1) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) setgroups(0xffffffffffffff79, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2606c0c0) close_range(r9, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000140)={0x1, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x9}]}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x823d5a1128175ddd}}, './file0\x00'}) 7.635584617s ago: executing program 1 (id=3725): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d21534081e040c409c1d010203010902120001000000000904"], 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.722498622s ago: executing program 0 (id=3726): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xfe, 0x85, 0x71, 0x8, 0xb48, 0x3007, 0x4f64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x23, 0x52, 0x26}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x500) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x0, 0x81, 0x1, 0x0}) 5.621436164s ago: executing program 2 (id=3727): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x80000) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x4, 0x1, 0x10, 0x400, 0x200001}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x715, 0x8000000000000020, 0x0, 0x82200000000000, 0x48, 0x20000}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f00000003c0)) r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2f, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e"]) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x22) fanotify_mark(r2, 0x20, 0x0, r5, &(0x7f0000000080)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000001400000000630145fcb26a5f14d82c93764a000007e102bc8a2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, r2}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010000000c0000000c00000006000000fcd504ffff00303030"], 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r6, 0x2c}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x4a, 0x0, [{0x40000071, 0x0, 0x9b87593}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x10, 0x700, 0x5, 0x8, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x65, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}}}}}) r11 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$TIOCGSID(r11, 0x5429, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @random="02000000000a"}) 5.568993695s ago: executing program 3 (id=3728): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) prctl$PR_MCE_KILL(0x4e, 0x0, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = socket$kcm(0x10, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@delchain={0x1b24, 0x65, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xe}, {0x7, 0xc07c1d117a59c3ce}, {0xf, 0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x1af0, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x6}, @TCA_FW_POLICE={0x890, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x2000000, 0x0, 0xa, {0x5, 0x0, 0x2, 0x0, 0x7, 0xfffff097}, {0x3, 0xa961f948ff4f8d42, 0x9, 0x5, 0x1}, 0x3ff, 0x1, 0xfffffdda}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x2, 0x41, 0x1, {0x3, 0x0, 0xb4af, 0xfff7, 0x8, 0xffffff66}, {0x40, 0x1, 0x8, 0x2, 0x5, 0x9}, 0x3, 0x3, 0x5}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x0, 0x0, 0x5, 0x80, 0x4, 0x100, 0x8, 0x4, 0x3ff, 0x7, 0x5, 0x10000000, 0x6, 0x0, 0x4, 0x6, 0x2, 0x6, 0x8, 0x38, 0x4, 0xbfda, 0x2, 0x9740, 0x2, 0x3, 0x2f7, 0x4, 0x400, 0x8, 0x477f, 0x6, 0x80000000, 0xf1, 0x9, 0xffffffff, 0xb, 0x8, 0x0, 0xe, 0x4, 0x1, 0x4, 0x4, 0xc23, 0x3ff, 0x1ff, 0x2, 0xf2e8, 0x6, 0x7ff, 0xd261, 0xc, 0x2c, 0x7, 0x5, 0x3, 0xf1, 0x0, 0x8, 0x3, 0x2, 0x3, 0x1, 0x9, 0x105, 0x3, 0x8, 0xc05, 0x7, 0xff, 0xa, 0x200, 0xf03a, 0xbb76, 0x3a69, 0x9, 0x9, 0x7fffffff, 0x101, 0x401, 0x9149, 0x5, 0xfffffff9, 0xca3e, 0xfffffff8, 0xb2, 0x5, 0x9e3, 0xfff, 0x173, 0x2, 0x0, 0x4, 0x6, 0x2, 0x3, 0x9, 0xffff0001, 0x4, 0x200, 0x3, 0x5, 0x9, 0x0, 0x1, 0x5, 0x7, 0x36, 0x7, 0x975, 0x5, 0x25da, 0x0, 0x25, 0x2, 0x700, 0xd, 0x7, 0x2, 0x6, 0x0, 0x2, 0x800, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x0, 0x9ffd, 0x1, 0x3, 0xa51, 0x4, 0xe45, 0x139, 0xfffffff9, 0x401, 0xd, 0x3, 0xc8f6, 0x6, 0x1, 0x2e, 0xb, 0x800, 0x4932, 0x6, 0xfffffffb, 0x8, 0x2, 0x1, 0xfff, 0x0, 0x515, 0x4, 0x0, 0x80, 0xfff, 0xb0, 0xe7, 0x4, 0x5, 0x100, 0x9, 0x7, 0x7f, 0x80, 0x1, 0x1095, 0xfffffff8, 0xffff, 0x7fffffff, 0x8, 0x10000, 0x2, 0x200, 0x4, 0xffff, 0x0, 0x0, 0x8, 0x6, 0x10001, 0xbe85, 0x9, 0x7, 0x7, 0x10, 0x7, 0x6, 0x5, 0x0, 0x4, 0x5, 0x5, 0x3, 0x1, 0xa5, 0xdb6c, 0x28c0, 0xe1f3, 0x5, 0x100000, 0x0, 0x1, 0x8, 0x3, 0x2, 0x1e0b, 0x569ae07e, 0x40, 0x8, 0x1000, 0x3f, 0xe, 0xc, 0x5, 0xff, 0x9, 0x8001, 0x3, 0x2, 0x7f, 0x7, 0x8, 0x8, 0x8, 0x101, 0x0, 0x141520, 0x100, 0x8, 0x8, 0x6, 0x6, 0xffffffff, 0x6, 0x2, 0x4, 0x5, 0x7, 0x7165, 0x8, 0xb5c, 0x6, 0xfffffc01, 0x2, 0x800, 0xac, 0xad538f7b, 0x8, 0xa14, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x6, 0x2, 0xffffffbe, 0x7f, 0x7c8e, 0x80, 0x8, 0x1, 0x6, 0x24d, 0x114d, 0x2, 0x0, 0x7, 0x25c26512, 0x4, 0x40, 0x0, 0xd, 0x83, 0xb, 0x7, 0x8, 0x8, 0x8001, 0x5, 0x10, 0x7, 0x7, 0x5, 0x8001, 0xd49f, 0x0, 0x3, 0x9, 0xfffffff9, 0x5, 0x9, 0x3, 0xc, 0x9, 0x0, 0x1000, 0x3, 0x9, 0xff, 0xbc4f, 0x9, 0x3, 0x4, 0x7, 0x98, 0x5d, 0x10000, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x4, 0x40, 0x5, 0x101, 0x4, 0x6c63, 0x5, 0x9, 0x50, 0x8, 0xfffffffe, 0x1, 0xfffff801, 0xe, 0x80000001, 0xf, 0x1000, 0xffff5f38, 0xd9b, 0x3, 0x1, 0xa3, 0x52, 0x5b2c, 0xdb8, 0xfe, 0xe, 0x2, 0x9, 0x3, 0xffffffff, 0x2, 0x0, 0x9, 0x4, 0x9, 0x4, 0x3d, 0x100, 0x1ff, 0x5d5, 0x4, 0x2, 0x6f0, 0x3, 0x3, 0x6, 0x1, 0xf, 0x3, 0x4174, 0x0, 0x4, 0x7fff, 0x5, 0x37ae, 0xfffffffe, 0x8000, 0x1ff, 0xfffffffa, 0x5, 0x6, 0x5, 0x2, 0x9, 0x3, 0xff, 0x6, 0x7, 0xf, 0x8, 0x6, 0x4a1, 0xde, 0x1, 0x7, 0x8, 0x1000, 0x9a18, 0x4, 0x2, 0xef96, 0x8, 0x1, 0x2, 0xfffffff7, 0x10001, 0x9, 0x7, 0x2, 0x23b0, 0x7, 0x1200000, 0x6, 0x401, 0xfffffff7, 0x6, 0xb, 0x6, 0x9, 0xffffaa5f, 0x5, 0x9, 0x3, 0x0, 0x7, 0x5, 0x40, 0xfb17, 0xe4a, 0x6a, 0xdfa, 0x3, 0x3, 0xff, 0x8000, 0x3, 0x9, 0x8, 0xfffffffd, 0x9, 0x4a, 0x1, 0x4, 0xd1, 0xf77, 0x1, 0xc08c, 0x8000, 0x7, 0x4, 0x5, 0x2543, 0x193, 0xc53a, 0x5, 0x10000, 0x1, 0x6, 0x2, 0x8, 0x7, 0x5, 0x6, 0xa58, 0x5, 0x7f, 0xfffffffa, 0x796, 0x1, 0x7, 0x9280, 0x4, 0xfffffff3, 0x4, 0x9, 0x6, 0x1, 0xd3, 0x80000000, 0x47, 0x3, 0x10, 0xd8, 0x1000, 0xb, 0x22c, 0x8, 0xfffffff8, 0xcd, 0x40, 0x4, 0x7fffffff, 0x9, 0x0, 0x5, 0xe, 0x5, 0x7, 0x0, 0x5, 0x3ff, 0x8, 0x7, 0x8, 0x6, 0x74, 0xf6f7, 0x2, 0x6, 0x9, 0x9, 0x10000, 0x8, 0x7f, 0xffffffc0]}]}, @TCA_FW_MASK={0x8, 0x5, 0x4}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x5}}, @TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x8}}, @TCA_FW_ACT={0x1214, 0x4, [@m_simple={0x10b4, 0x1c, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '{\xbe\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0xffffffff, 0x10000000, 0x4, 0x6}}, @TCA_DEF_DATA={0xb, 0x3, '&-&&#]\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'mq\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x10001, 0x3, 0xffffffffffffffff, 0xdc, 0xf}}, @TCA_DEF_DATA={0x7, 0x3, 'mq\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x1000, 0x7, 0x0, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x4, 0x2, 0x9, 0x101}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbedit={0x98, 0x19, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}]}, {0x5a, 0x6, "8fdcb42a64a6a2dc04ed9f0d04c4cf04016c0b8f6d9015a92f30c786402e8f4a0f1bacab850f1acf8afcb043c06f1171624565bb6b2affe7560d166a201eee6beca97fb16735c66cd8550b2ab1e57ea1ae118a8858e8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0xc4, 0x8, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7fff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}]}, {0x60, 0x6, "cad1f22e8da31366d925bc7f92bdf94e4cffb6fa25b15b028b347f98f40554e157fb681a88424ab7400bb99f6ae50ffdafd531df0826ebaa605ad7e8f4affc1ddcd132572359d5aa38b220e94e4a229409848eabbf821c2a3fa68349"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x1b24}, 0x1, 0x0, 0x0, 0x200048d0}, 0x20000010) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00%'], 0x33fe0) 5.459131879s ago: executing program 1 (id=3729): prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0xe}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x65a9, &(0x7f0000000300)={0x0, 0x8ffb, 0x10000, 0x3, 0x100002cc}, &(0x7f0000000000), &(0x7f0000000040)) r0 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r0, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r6, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x22, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, 0x0, 0x1) 5.34277874s ago: executing program 3 (id=3730): socket$kcm(0x10, 0x2, 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x20, 0x15, 0xa, "5c35c733674746c5c616"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000440)={0x20, 0x8, 0x7e, {0x7e, 0x5, "06710f6d69817582eabd75870cd1d152516e2ae615576bb301605a42331c1dfcc007396ee663815000508ebb32995a480f0a1e1993cf143ed360da2ff723c5fc1f6e8f7e71eb336976ed4f4c2b2a6cfe997b65968a15277a3d31d38cffebfd1a14080bcff6baab4bc97ac5bed98ac486e0d41a1a28585193fe173295"}}, &(0x7f0000000380)={0x0, 0x3, 0x56, @string={0x56, 0x3, "77a1826e111744e54d7c52fcd757878e8d2b462b7d92243b1033912f26a907194e288977dabfcca34ec775d76a8e11d6ee3f8e22e484575508eaa94179621d71277b79fe3c0a5873ed7e46d33034b4667a800b0f"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000500)={0x20, 0x8, 0x68, "cadcdeb92e15be2d7b109c0d277e18863e70a6cd2924f1461bc85ec930c156c5624b842bc74d7d3ce71f4ccdcf0f6b3a3704e4eb6212796dd405aa8a9db2c578453097a13a4b460fe46d9e38edee306acc78677842c8ecbea03fbaa50d942bfc543868c873574674"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000580)={0xc0, 0x5, 0x5, "30c889b9e9"}, &(0x7f00000005c0)=ANY=[@ANYRES16=r2]}) (async) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r5 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0xb39f, 0x800, 0x4, 0x14}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000680)=[{0x6, 0x72, 0x0, 0x7fff0000}, {0x6, 0x5, 0xab, 0x4}]}) (async) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) (async) io_uring_enter(r5, 0x3516, 0x71e6, 0x4c, 0x0, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) 4.550443768s ago: executing program 1 (id=3731): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x18, 0x68, 0x200}, 0x18}, 0x1, 0x0, 0x0, 0x20040012}, 0x20000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) r6 = fcntl$dupfd(r5, 0x406, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) listen(r9, 0x1) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) 3.956230804s ago: executing program 0 (id=3732): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setfsgid(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x8, 0x0, 0xfffc, 0x0, 0x10, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60040, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) 3.320992588s ago: executing program 5 (id=3733): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x44840) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000029c0), 0x400006d, 0x20000004) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2, 0xfffffffe}) 2.922043107s ago: executing program 0 (id=3734): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7ffd, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa13, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa1a0000000000000004aa00387b693e00076c8f809c1a2921296da2411daf4ef7a489768413405a2fc0281a5373f543a93b527bc0cb5c928f58f9851b47ed282d1053e191bc07a62a3ea89c016fccc4230f23cab30ea2b0db9500"/104], &(0x7f0000000040)={0x1, 0x5, [0xe5f, 0xe5, 0xef5, 0xee3]}) r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x82140, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff}, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300), 0x3340, 0x0) copy_file_range(r4, &(0x7f00000002c0)=0x3, r5, &(0x7f0000000340)=0x1d9, 0x217a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$revoke(0x3, r8) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) syz_usb_connect(0x0, 0x107, 0x0, 0x0) 2.746859979s ago: executing program 3 (id=3735): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setfsgid(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x8, 0x0, 0xfffc, 0x0, 0x10, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r5}, 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) 2.48672732s ago: executing program 1 (id=3736): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setfsgid(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x8, 0x0, 0xfffc, 0x0, 0x10, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60040, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r6}, 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) 1.952335528s ago: executing program 5 (id=3737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x120, 0x1a, 0x1, 0xfffffffd, 0x25dfdbff, {0x81, 0x7c}, [@typed={0x6, 0xeb, 0x0, 0x0, @str='y\xc2'}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='y\xc2'}]}, @nested={0xf7, 0x20, 0x0, 0x1, [@generic="3fd89d60f8a1e89c1bbacf136071b653243f1f8aacf6a024a9979ce111d152970d0c329de6a4d951e76ce06c123c7ff0507143014f95135e579c8ad87029ab92213e9c106a488d7808c6c3f8ba5380628f75223d16982c5bec6986807e28dc687c197a03e3568cceca4fdd2e26ac5b23d5a06836c8a544e4cde64b9a7fa0ad1e60008b2e909bb89c176ea62dbae40aa4a93ae550d6af8f94ff2aee5fea9182911b74f83a9e105252a7d74152e3e4176bd4b89b4f4234b24009d15556c53241cb760217557ebce7a1eb950157f52e4372756f87b7416272640c98329ef998a6f6eb4b33067913768011828108665dfd7b744d70"]}]}, 0x120}, 0x1, 0x0, 0x0, 0x48815}, 0x4011) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.715078618s ago: executing program 2 (id=3738): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, 0x0, 0x62, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x48242, 0x1) write$cgroup_int(r4, &(0x7f0000000040)=0x922, 0x12) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000200)=0x16, 0x4) connect$bt_l2cap(r5, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r8, @ANYRESHEX=r8], 0x0, 0x0, 0x0}, 0x0) 1.598509646s ago: executing program 5 (id=3739): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x27, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) dup(r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000140)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x41c, 0x2, {}, {}, {0x3, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, "e8b72dc202f2b682"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000090}, 0x40490) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x2002, 0x4) sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r9}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000001180)=""/150) fcntl$setpipe(r4, 0x407, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r5, 0x0, 0xffff, 0x0) sendmmsg$unix(r11, &(0x7f0000008300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)="cd", 0x1}], 0x1}}], 0x2, 0x10) 1.452974554s ago: executing program 3 (id=3740): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_evm(&(0x7f0000000380)='./file0/file1\x00', &(0x7f00000003c0), &(0x7f0000000480)=ANY=[@ANYBLOB="0500"], 0x9, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = socket(0x21, 0x1, 0x101) sendmmsg$inet(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001680)="a905000000017464000100000000000000e5c064", 0x14}, {&(0x7f0000000100)="ca65abd05ca5e7f705719952667e2a50", 0x10}], 0x2}}], 0x1, 0x24040000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="240200000100000000000000dc000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff85000000730000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000001340)=@userptr={0x6, 0xa, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x5, 0x8, 0xd2, 0x9, 0x77, 0x0, "1518818a"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x8}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x80041) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2580000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000d80)={{0x2, 0x4, 0xfffffbdb, 0x4, 'syz0\x00', 0xfffff801}, 0x0, [0x9, 0xd, 0x2, 0x10001, 0x8c08, 0x9, 0x10000, 0x202, 0xf0f3, 0xffff, 0x87, 0x4, 0x6c2b, 0xfffffffffffffffe, 0x98f2, 0x4b05, 0x3ff, 0x400000004, 0x3, 0x8000000000000000, 0x1, 0x8, 0x109, 0x1ff, 0x40000000000001, 0x8, 0x9, 0x8, 0x6, 0x8000, 0x9, 0xfff, 0x3, 0x2, 0x7, 0x8000000000000000, 0x40000000003, 0x4000000000000000, 0x2, 0x0, 0x2, 0x0, 0xdb4, 0x5, 0x16, 0x9, 0xe, 0x5, 0xc, 0x6, 0x0, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x4, 0x7fd, 0x5, 0x0, 0x8000, 0x5, 0x400000000000034b, 0x7, 0x7, 0x4, 0x15af, 0xb79, 0x8, 0xfff, 0x81, 0x0, 0x83, 0x7, 0xf8, 0x0, 0x6, 0x4, 0x5, 0x80, 0x0, 0xd, 0x8, 0xb, 0x8000000000000001, 0x1000, 0x5, 0x4, 0x6, 0x7fffffff, 0x1, 0xa2, 0x10000, 0xeee, 0x2, 0x7, 0xc08e, 0x410, 0x80000001, 0x40, 0x1, 0x7fff, 0x100000001, 0x80000000042, 0x3, 0x3, 0x8, 0x0, 0x2, 0x80003, 0x33, 0x2f6f, 0x7, 0x5a73, 0xfffffffffffffff9, 0x7fffffff, 0x8, 0xa, 0x4, 0xde, 0x6, 0x800000000, 0xfffffffffffffffe, 0x2, 0x105ba93c, 0x400000000000c, 0x7, 0x0, 0x10]}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="31200000600000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000cd55c2322701084bf317a45197a07437716b2a6a3986efc17732509b4fa0f9425abc20792139beb5992354e7f0de2f7ec68262dfa44df6ff792f8af01c922609f05afbb03ff77fe2110470287d209b5019862b35bc20d6b0043c4b22f823a786d1bf20504ac2a9b829de26a1ab9668e204518417120c0c071906de5299f6d1e81bf245f027683c3296c67dcdd74fa2b21ba19e4b3d56b391c7b412c8aab034f93a4822ae0ad08ca4afd603d1d1ef2b70c12385bf8145411a1d602734"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.093598914s ago: executing program 1 (id=3741): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 1.000170426s ago: executing program 3 (id=3742): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003780)=@deltaction={0xac, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) 97.389879ms ago: executing program 3 (id=3743): r0 = socket$inet(0x2, 0x80000, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0xe0}, {0x0, 0x6, 0x2, 0x1}, {0x200, 0xe, 0xb, 0x9}, {0xfff1, 0x6, 0x0, 0x1}, {0x90, 0x4c, 0x6, 0xd56}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x40, 0x6, 0x6}, 0x18, 0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000bc0)) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) fanotify_init(0x0, 0x1000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 0s ago: executing program 1 (id=3744): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setfsgid(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x9002}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x4}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={0x8, 0x0, 0xfffc, 0x0, 0x10, "4feda26323b172e0"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x60040, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): ect_r:device_t tclass=chr_file permissive=1 [ 1031.148083][ T9] kobil_sct 3-1:2.45: device disconnected [ 1031.216268][ T30] audit: type=1400 audit(2000001571.401:908): avc: denied { ioctl } for pid=18587 comm="syz.0.3354" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1031.309007][ T30] audit: type=1400 audit(2000001571.569:909): avc: denied { read } for pid=18571 comm="syz.2.3341" name="demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1032.529490][ T30] audit: type=1400 audit(2000001571.569:910): avc: denied { open } for pid=18571 comm="syz.2.3341" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1033.035514][ T5802] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1033.102414][ T791] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1033.400485][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1033.828171][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1033.838505][ T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1033.851322][ T791] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1033.861123][ T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.872407][ T791] usb 3-1: Product: syz [ 1033.895345][ T791] usb 3-1: Manufacturer: syz [ 1033.906263][ T791] usb 3-1: SerialNumber: syz [ 1033.922070][ T791] usb 3-1: config 0 descriptor?? [ 1034.134092][ T791] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1034.177228][T18620] gfs2: not a GFS2 filesystem [ 1034.199727][T18622] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1034.206238][T18622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1034.234338][T18622] vhci_hcd vhci_hcd.0: Device attached [ 1034.339494][ T791] usb 3-1: USB disconnect, device number 123 [ 1034.426861][T18624] vhci_hcd: connection closed [ 1034.427059][T18177] vhci_hcd vhci_hcd.5: stop threads [ 1034.458598][T18177] vhci_hcd vhci_hcd.5: release socket [ 1034.474905][T18177] vhci_hcd vhci_hcd.5: disconnect device [ 1034.511667][ T9] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 1034.519318][ T9] usb 43-1: enqueue for inactive port 0 [ 1034.587887][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1034.773286][T18633] netlink: 'syz.5.3364': attribute type 4 has an invalid length. [ 1035.313161][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1035.313173][ T30] audit: type=1400 audit(2000001576.021:971): avc: denied { setopt } for pid=18638 comm="syz.1.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1035.725536][ T5802] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1035.744286][ T5802] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1035.759854][ T30] audit: type=1400 audit(2000001576.483:972): avc: denied { write } for pid=18614 comm="syz.0.3361" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1035.792531][ T5802] usb 4-1: can't read configurations, error -71 [ 1035.819252][ T30] audit: type=1400 audit(2000001576.546:973): avc: denied { read write } for pid=18642 comm="syz.3.3366" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1035.917176][ T30] audit: type=1400 audit(2000001576.546:974): avc: denied { open } for pid=18642 comm="syz.3.3366" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1036.126582][T18651] 9pnet_virtio: no channels available for device syz [ 1036.572515][ T30] audit: type=1400 audit(2000001576.577:975): avc: denied { map } for pid=18642 comm="syz.3.3366" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1036.762989][ T30] audit: type=1400 audit(2000001576.577:976): avc: denied { execute } for pid=18642 comm="syz.3.3366" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1036.865472][ T30] audit: type=1400 audit(2000001576.577:977): avc: denied { write } for pid=18642 comm="syz.3.3366" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1036.930202][ T30] audit: type=1400 audit(2000001576.577:978): avc: denied { open } for pid=18642 comm="syz.3.3366" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1036.995745][ T30] audit: type=1400 audit(2000001576.651:979): avc: denied { create } for pid=18644 comm="syz.2.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1037.059847][ T30] audit: type=1400 audit(2000001576.651:980): avc: denied { create } for pid=18644 comm="syz.2.3367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1037.260243][T18663] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3370'. [ 1037.290513][T18663] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3370'. [ 1037.594780][T18671] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3372'. [ 1037.607133][T18671] bridge0: port 3(batadv0) entered disabled state [ 1037.614833][T18671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.622101][T18671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.137778][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1038.150086][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1038.172010][T18671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18671 comm=syz.5.3372 [ 1038.196861][T18177] batman_adv: batadv0: IGMP Querier appeared [ 1038.203004][T18177] batman_adv: batadv0: MLD Querier appeared [ 1038.251908][T18671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18671 comm=syz.5.3372 [ 1038.448136][T18678] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 1038.477589][T18671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18671 comm=syz.5.3372 [ 1039.194139][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1039.872761][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 1039.903620][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3379'. [ 1039.972922][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1039.997699][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.014513][T18169] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.026743][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3379'. [ 1040.036349][T18169] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.045015][T18169] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.053767][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1040.063405][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.072273][T18169] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.104326][ T5873] usb 4-1: config 0 descriptor?? [ 1040.152142][ T5873] hub 4-1:0.0: USB hub found [ 1041.217743][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1041.217776][ T30] audit: type=1400 audit(2000001582.215:992): avc: denied { write } for pid=18695 comm="syz.2.3382" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1041.305742][T18697] FAULT_INJECTION: forcing a failure. [ 1041.305742][T18697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.318956][T18697] CPU: 0 UID: 0 PID: 18697 Comm: syz.2.3382 Tainted: G L syzkaller #0 PREEMPT(full) [ 1041.318982][T18697] Tainted: [L]=SOFTLOCKUP [ 1041.318989][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1041.318999][T18697] Call Trace: [ 1041.319007][T18697] [ 1041.319014][T18697] dump_stack_lvl+0x100/0x190 [ 1041.319046][T18697] should_fail_ex.cold+0x5/0xa [ 1041.319069][T18697] _copy_from_user+0x2e/0xd0 [ 1041.319094][T18697] core_sys_select+0x472/0xbb0 [ 1041.319123][T18697] ? __pfx_core_sys_select+0x10/0x10 [ 1041.319144][T18697] ? find_held_lock+0x2b/0x80 [ 1041.319164][T18697] ? get_pid_task+0xfc/0x250 [ 1041.319211][T18697] ? __pfx_set_user_sigmask+0x10/0x10 [ 1041.319237][T18697] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1041.319264][T18697] ? __fget_files+0x215/0x3d0 [ 1041.319292][T18697] do_pselect.constprop.0+0x238/0x270 [ 1041.319319][T18697] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 1041.319347][T18697] ? ksys_write+0x1ac/0x250 [ 1041.319372][T18697] __x64_sys_pselect6+0x149/0x1c0 [ 1041.319399][T18697] do_syscall_64+0x106/0xf80 [ 1041.319422][T18697] ? clear_bhb_loop+0x40/0x90 [ 1041.319450][T18697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.319468][T18697] RIP: 0033:0x7fe551b9bf79 [ 1041.319484][T18697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.319501][T18697] RSP: 002b:00007fe552aab028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1041.319517][T18697] RAX: ffffffffffffffda RBX: 00007fe551e16090 RCX: 00007fe551b9bf79 [ 1041.319529][T18697] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1041.319539][T18697] RBP: 00007fe552aab090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.319549][T18697] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1041.319560][T18697] R13: 00007fe551e16128 R14: 00007fe551e16090 R15: 00007ffc91849578 [ 1041.319584][T18697] [ 1042.040548][ T5873] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1042.094281][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 1042.100283][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1042.132419][ T5873] usb 4-1: USB disconnect, device number 12 [ 1042.143367][ T30] audit: type=1400 audit(2000001583.192:993): avc: denied { create } for pid=18698 comm="syz.3.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1043.017985][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3385'. [ 1043.063712][T18709] netlink: 'syz.2.3385': attribute type 83 has an invalid length. [ 1043.100624][ T30] audit: type=1400 audit(2000001584.168:994): avc: denied { create } for pid=18708 comm="syz.2.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1043.361851][ T30] audit: type=1400 audit(2000001584.462:995): avc: denied { accept } for pid=18711 comm="syz.1.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1044.047322][T18712] 9pnet_fd: p9_fd_create_tcp (18712): problem connecting socket to 127.0.0.1 [ 1044.173948][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1044.219270][ T30] audit: type=1400 audit(2000001585.187:996): avc: denied { mounton } for pid=18710 comm="syz.2.3387" path="/70/file0" dev="tmpfs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1044.365487][ T30] audit: type=1400 audit(2000001585.502:997): avc: denied { create } for pid=18719 comm="syz.0.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1044.399921][T18707] syzkaller0: entered promiscuous mode [ 1044.408729][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1044.412523][T18707] syzkaller0: entered allmulticast mode [ 1044.422984][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1044.446358][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1044.481344][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1044.508361][T18723] vivid-007: disconnect [ 1044.516782][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1044.539310][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.643359][T18727] vivid-007: reconnect [ 1044.788866][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1044.837131][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.307337][ T30] audit: type=1400 audit(2000001586.457:998): avc: denied { write } for pid=18711 comm="syz.1.3388" name="usbtmc0" dev="devtmpfs" ino=4252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1046.037295][ T30] audit: type=1400 audit(2000001586.478:999): avc: denied { setopt } for pid=18728 comm="syz.0.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1046.326807][ T5873] usb 2-1: USB disconnect, device number 127 [ 1046.539932][ T30] audit: type=1400 audit(2000001587.801:1000): avc: denied { unlink } for pid=18742 comm="syz.2.3389" name="#150" dev="tmpfs" ino=407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1046.564149][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1046.704561][ T30] audit: type=1400 audit(2000001587.822:1001): avc: denied { mount } for pid=18742 comm="syz.2.3389" name="/" dev="overlay" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1047.373754][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.485106][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1047.494910][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.763768][ T9] usb 4-1: config 0 descriptor?? [ 1047.893679][ T30] audit: type=1400 audit(2000001589.218:1002): avc: denied { unmount } for pid=17099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1048.307936][ T9] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 1048.351498][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0013/input/input48 [ 1048.521065][ T30] audit: type=1400 audit(2000001589.880:1003): avc: denied { read } for pid=5159 comm="acpid" name="event4" dev="devtmpfs" ino=4256 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1048.551341][ T9] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1048.588304][ T30] audit: type=1400 audit(2000001589.880:1004): avc: denied { open } for pid=5159 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4256 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1048.627158][T18065] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1048.731628][ T30] audit: type=1400 audit(2000001589.880:1005): avc: denied { ioctl } for pid=5159 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4256 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1048.795128][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3393'. [ 1048.885857][T18763] gfs2: not a GFS2 filesystem [ 1049.621751][T18771] netlink: 'syz.5.3401': attribute type 10 has an invalid length. [ 1049.629749][T18771] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3401'. [ 1049.654259][ T30] audit: type=1400 audit(2000001591.024:1006): avc: denied { write } for pid=18764 comm="syz.5.3401" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1050.519398][ T30] audit: type=1400 audit(2000001591.980:1007): avc: denied { mount } for pid=18777 comm="syz.1.3402" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1051.018180][ T5873] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1051.252357][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 1051.254712][ T30] audit: type=1400 audit(2000001592.746:1008): avc: denied { unmount } for pid=17915 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1051.335955][T18065] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1051.427231][T18065] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1051.434860][T18065] usb 3-1: can't read configurations, error -71 [ 1051.482263][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.503558][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.529238][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1052.352498][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.404845][ T5873] usb 1-1: config 0 descriptor?? [ 1052.476745][ T5873] hub 1-1:0.0: USB hub found [ 1052.715158][ T5873] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1053.155953][ T30] audit: type=1400 audit(2000001594.751:1009): avc: denied { create } for pid=18797 comm="syz.5.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1053.233074][ T30] audit: type=1400 audit(2000001594.751:1010): avc: denied { name_bind } for pid=18797 comm="syz.5.3409" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1053.275100][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1053.594648][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1053.604831][ T9] usb 2-1: config 2 has an invalid interface number: 45 but max is 0 [ 1053.937417][ T30] audit: type=1400 audit(2000001595.203:1011): avc: denied { mount } for pid=18800 comm="syz.5.3411" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1053.965216][ T9] usb 2-1: config 2 has no interface number 0 [ 1053.976702][ T9] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1054.001103][ T9] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1054.032678][ T5873] usbhid 1-1:0.0: can't add hid device: -71 [ 1054.033899][ T9] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1054.061037][ T5873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1054.097876][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.106368][ T5873] usb 1-1: USB disconnect, device number 51 [ 1054.222278][ T9] usb 2-1: Product: syz [ 1054.227128][ T9] usb 2-1: Manufacturer: syz [ 1054.235473][ T9] usb 2-1: SerialNumber: syz [ 1054.245370][ T9] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected [ 1054.263857][ T9] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1054.322874][T18807] FAULT_INJECTION: forcing a failure. [ 1054.322874][T18807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1054.351410][T18807] CPU: 0 UID: 0 PID: 18807 Comm: syz.5.3413 Tainted: G L syzkaller #0 PREEMPT(full) [ 1054.351439][T18807] Tainted: [L]=SOFTLOCKUP [ 1054.351446][T18807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1054.351459][T18807] Call Trace: [ 1054.351466][T18807] [ 1054.351473][T18807] dump_stack_lvl+0x100/0x190 [ 1054.351505][T18807] should_fail_ex.cold+0x5/0xa [ 1054.351528][T18807] _copy_from_user+0x2e/0xd0 [ 1054.351553][T18807] copy_msghdr_from_user+0x9f/0x4f0 [ 1054.351572][T18807] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1054.351602][T18807] ___sys_sendmsg+0x106/0x1e0 [ 1054.351620][T18807] ? __pfx____sys_sendmsg+0x10/0x10 [ 1054.351666][T18807] __sys_sendmsg+0x170/0x220 [ 1054.351689][T18807] ? __pfx___sys_sendmsg+0x10/0x10 [ 1054.351727][T18807] do_syscall_64+0x106/0xf80 [ 1054.351751][T18807] ? clear_bhb_loop+0x40/0x90 [ 1054.351773][T18807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.351791][T18807] RIP: 0033:0x7fb16699bf79 [ 1054.351806][T18807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.351822][T18807] RSP: 002b:00007fb167818028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.351840][T18807] RAX: ffffffffffffffda RBX: 00007fb166c15fa0 RCX: 00007fb16699bf79 [ 1054.351851][T18807] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1054.351862][T18807] RBP: 00007fb167818090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.351872][T18807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.351882][T18807] R13: 00007fb166c16038 R14: 00007fb166c15fa0 R15: 00007fff63f92048 [ 1054.351906][T18807] [ 1054.554832][T18796] binder: 18795:18796 ioctl c040aed5 200000000000 returned -22 [ 1054.635672][ T6184] usb 2-1: USB disconnect, device number 2 [ 1054.727683][ T6184] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1054.761864][ T6184] kobil_sct 2-1:2.45: device disconnected [ 1055.092494][ T30] audit: type=1400 audit(2000001596.778:1012): avc: denied { create } for pid=18808 comm="syz.2.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1055.742408][ T30] audit: type=1400 audit(2000001596.778:1013): avc: denied { bind } for pid=18808 comm="syz.2.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1055.780145][ T30] audit: type=1400 audit(2000001596.778:1014): avc: denied { setopt } for pid=18808 comm="syz.2.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1056.115753][ T30] audit: type=1400 audit(2000001597.859:1015): avc: denied { getopt } for pid=18821 comm="syz.5.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1056.297536][ T30] audit: type=1400 audit(2000001597.859:1016): avc: denied { write } for pid=18821 comm="syz.5.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1057.737802][T18734] syz.3.3393 (18734): drop_caches: 1 [ 1057.792447][ T5873] usb 4-1: USB disconnect, device number 13 [ 1057.871195][ T30] audit: type=1400 audit(2000001599.697:1017): avc: denied { create } for pid=18837 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1057.960275][ T30] audit: type=1400 audit(2000001599.728:1018): avc: denied { setopt } for pid=18837 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1057.990404][ T5893] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1058.000510][ T5956] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1058.021298][ T30] audit: type=1400 audit(2000001599.760:1019): avc: denied { bind } for pid=18837 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1058.167288][ T5893] usb 6-1: too many configurations: 47, using maximum allowed: 8 [ 1058.176220][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 1058.192464][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.213157][ T5893] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1058.228164][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.245600][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.253829][ T30] audit: type=1400 audit(2000001600.095:1020): avc: denied { create } for pid=18841 comm="syz.1.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1058.275629][ T5956] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1058.284672][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.304269][ T5893] usb 6-1: Product: syz [ 1058.309368][ T5893] usb 6-1: Manufacturer: syz [ 1058.313763][ T5873] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1058.323697][ T5893] usb 6-1: SerialNumber: syz [ 1058.331141][ T30] audit: type=1400 audit(2000001600.116:1021): avc: denied { execute } for pid=18841 comm="syz.1.3423" path="/47/cpu.stat" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1058.355516][ T5956] usb 3-1: config 0 descriptor?? [ 1058.376181][ T5893] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1058.390559][ T5956] hub 3-1:0.0: USB hub found [ 1058.425865][T18065] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1058.466608][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 1058.482964][ T5873] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1058.512930][ T5873] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1059.230933][ T5956] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1059.239107][ T30] audit: type=1400 audit(2000001600.116:1022): avc: denied { bind } for pid=18841 comm="syz.1.3423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1059.284828][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1059.304729][ T5873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1059.333540][ T5873] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.371343][ T5873] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1059.389196][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.769965][ T30] audit: type=1400 audit(2000001601.324:1023): avc: denied { shutdown } for pid=18845 comm="syz.0.3416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1059.804221][ T5873] usb 4-1: usb_control_msg returned -32 [ 1059.822196][ T5873] usbtmc 4-1:16.0: can't read capabilities [ 1059.904293][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1060.066324][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 1060.170470][ T30] audit: type=1400 audit(2000001602.111:1024): avc: denied { mount } for pid=18839 comm="syz.3.3422" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1060.182307][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1060.212387][ T5893] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1060.225104][ T5893] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1060.235734][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1060.243811][ T5893] usb 2-1: SerialNumber: syz [ 1060.254714][ T5893] usb 2-1: config 0 descriptor?? [ 1060.269084][ T5893] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1060.281764][ T5893] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1060.306143][T18065] usb 6-1: Service connection timeout for: 256 [ 1060.315054][T18065] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1060.386974][T18065] ath9k_htc: Failed to initialize the device [ 1060.581845][T18065] usb 6-1: ath9k_htc: USB layer deinitialized [ 1060.699519][ T9] usb 2-1: USB disconnect, device number 3 [ 1060.753417][ T5956] usbhid 3-1:0.0: can't add hid device: -71 [ 1060.760014][ T5956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1060.786990][ T5956] usb 3-1: USB disconnect, device number 126 [ 1061.000611][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1061.000626][ T30] audit: type=1400 audit(2000001602.993:1026): avc: denied { write } for pid=18865 comm="syz.0.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1061.027347][T18866] netlink: 344 bytes leftover after parsing attributes in process `syz.0.3428'. [ 1061.052277][ T30] audit: type=1400 audit(2000001603.014:1027): avc: denied { nlmsg_read } for pid=18865 comm="syz.0.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1061.087632][T18065] usb 6-1: USB disconnect, device number 70 [ 1061.128710][ T30] audit: type=1400 audit(2000001603.119:1028): avc: denied { read } for pid=18868 comm="syz.0.3429" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1061.154603][ T30] audit: type=1400 audit(2000001603.119:1029): avc: denied { open } for pid=18868 comm="syz.0.3429" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1061.301182][ T30] audit: type=1400 audit(2000001603.277:1030): avc: denied { listen } for pid=18868 comm="syz.0.3429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1061.447622][T18874] FAULT_INJECTION: forcing a failure. [ 1061.447622][T18874] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.460378][T18874] CPU: 1 UID: 0 PID: 18874 Comm: syz.0.3429 Tainted: G L syzkaller #0 PREEMPT(full) [ 1061.460405][T18874] Tainted: [L]=SOFTLOCKUP [ 1061.460412][T18874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1061.460422][T18874] Call Trace: [ 1061.460429][T18874] [ 1061.460436][T18874] dump_stack_lvl+0x100/0x190 [ 1061.460468][T18874] should_fail_ex.cold+0x5/0xa [ 1061.460492][T18874] should_failslab+0xc2/0x120 [ 1061.460516][T18874] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1061.460536][T18874] ? __d_alloc+0x34/0xa80 [ 1061.460568][T18874] __d_alloc+0x34/0xa80 [ 1061.460598][T18874] d_alloc_parallel+0x111/0x14e0 [ 1061.460627][T18874] ? find_held_lock+0x2b/0x80 [ 1061.460647][T18874] ? __d_lookup+0x25c/0x4a0 [ 1061.460667][T18874] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1061.460692][T18874] ? __d_lookup+0x266/0x4a0 [ 1061.460719][T18874] lookup_open.isra.0+0x57c/0x11b0 [ 1061.460746][T18874] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1061.460783][T18874] ? lookup_fast+0x2da/0x600 [ 1061.460807][T18874] path_openat+0xa98/0x31a0 [ 1061.460840][T18874] ? __pfx_path_openat+0x10/0x10 [ 1061.460874][T18874] do_file_open+0x20e/0x430 [ 1061.460901][T18874] ? __pfx_do_file_open+0x10/0x10 [ 1061.460943][T18874] ? alloc_fd+0x476/0x790 [ 1061.460970][T18874] ? do_getname+0x191/0x390 [ 1061.460990][T18874] do_sys_openat2+0x10d/0x1e0 [ 1061.461018][T18874] ? __pfx_do_sys_openat2+0x10/0x10 [ 1061.461043][T18874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1061.461074][T18874] ? __fget_files+0x21f/0x3d0 [ 1061.461102][T18874] __x64_sys_openat+0x12d/0x210 [ 1061.461130][T18874] ? __pfx___x64_sys_openat+0x10/0x10 [ 1061.461156][T18874] ? ksys_write+0x1ac/0x250 [ 1061.461186][T18874] do_syscall_64+0x106/0xf80 [ 1061.461243][T18874] ? clear_bhb_loop+0x40/0x90 [ 1061.461266][T18874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.461285][T18874] RIP: 0033:0x7faa2899bf79 [ 1061.461301][T18874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.461319][T18874] RSP: 002b:00007faa297b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1061.461337][T18874] RAX: ffffffffffffffda RBX: 00007faa28c16180 RCX: 00007faa2899bf79 [ 1061.461352][T18874] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 1061.461364][T18874] RBP: 00007faa297b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.461375][T18874] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1061.461386][T18874] R13: 00007faa28c16218 R14: 00007faa28c16180 R15: 00007ffd17ff9ac8 [ 1061.461411][T18874] [ 1061.957252][ T5873] usb 4-1: USB disconnect, device number 14 [ 1065.139637][ T30] audit: type=1400 audit(2000001607.329:1031): avc: denied { write } for pid=18910 comm="syz.2.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1065.402099][T18920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1065.542385][T18065] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1065.609542][ T5956] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1065.716495][T18065] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 1065.769742][T18065] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1065.790322][ T5956] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 1065.810184][T18065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.834505][T18065] usb 4-1: Product: syz [ 1065.845266][T18065] usb 4-1: Manufacturer: syz [ 1065.862236][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1065.883143][T18065] usb 4-1: SerialNumber: syz [ 1065.903338][ T5956] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1065.923933][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.949501][T18065] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1065.969922][ T5956] usb 1-1: Product: syz [ 1066.019768][ T5956] usb 1-1: Manufacturer: syz [ 1066.040417][ T5893] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1066.066777][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1066.083063][ T5956] usb 1-1: SerialNumber: syz [ 1066.112103][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1066.190751][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1066.298475][ T5956] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1066.502616][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1066.513519][ T5938] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1066.561547][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1066.600246][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.625535][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1066.635849][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.819099][ T5802] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1066.845563][ T9] usb 2-1: usb_control_msg returned -32 [ 1066.853569][ T9] usbtmc 2-1:16.0: can't read capabilities [ 1066.885867][ T5956] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1066.964618][ T5802] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.974992][ T5802] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1066.989231][ T5802] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1066.998442][ T5802] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1067.007304][ T5802] usb 6-1: Manufacturer: syz [ 1067.013978][ T5802] usb 6-1: config 0 descriptor?? [ 1067.022158][ T5802] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1067.044285][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.055949][ T5956] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1067.065186][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.076692][ T5956] usb 3-1: config 0 descriptor?? [ 1067.355653][ T30] audit: type=1400 audit(2000001609.660:1032): avc: denied { create } for pid=18926 comm="syz.5.3446" name="#154" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1067.397985][ T30] audit: type=1400 audit(2000001609.660:1033): avc: denied { link } for pid=18926 comm="syz.5.3446" name="#154" dev="tmpfs" ino=1865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1067.443715][ T30] audit: type=1400 audit(2000001609.660:1034): avc: denied { rename } for pid=18926 comm="syz.5.3446" name="#155" dev="tmpfs" ino=1865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1067.481582][T18929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.491870][T18929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.514007][ T5956] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 1067.539418][ T5956] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0014/input/input50 [ 1067.553138][ T5893] usb 4-1: Service connection timeout for: 256 [ 1067.566992][ T5893] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1067.598662][ T5893] ath9k_htc: Failed to initialize the device [ 1067.626789][ T5893] usb 4-1: ath9k_htc: USB layer deinitialized [ 1067.671711][ T5956] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1067.696590][ T5938] usb 1-1: Service connection timeout for: 256 [ 1067.734207][ T5938] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1067.792688][ T5938] ath9k_htc: Failed to initialize the device [ 1067.795807][ T5938] usb 1-1: ath9k_htc: USB layer deinitialized [ 1067.950999][ T5873] usb 4-1: USB disconnect, device number 15 [ 1068.193445][ T5956] usb 1-1: USB disconnect, device number 52 [ 1068.275079][ T30] audit: type=1400 audit(2000001610.616:1035): avc: denied { read append } for pid=18943 comm="syz.0.3449" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1068.634618][ T5938] usb 2-1: USB disconnect, device number 4 [ 1069.179177][ T30] audit: type=1400 audit(2000001611.571:1036): avc: denied { name_connect } for pid=18954 comm="syz.0.3452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1069.235751][ T30] audit: type=1400 audit(2000001611.634:1037): avc: denied { create } for pid=18954 comm="syz.0.3452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1069.447267][T18957] omfs: Invalid superblock (0) [ 1069.671294][ T5802] usb 3-1: USB disconnect, device number 127 [ 1069.952044][T18963] geneve2: entered promiscuous mode [ 1069.976915][ T30] audit: type=1400 audit(2000001612.411:1038): avc: denied { ioctl } for pid=18962 comm="syz.1.3454" path="socket:[62347]" dev="sockfs" ino=62347 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1070.006723][T18963] geneve2: entered allmulticast mode [ 1070.034644][T18169] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1070.082681][T18169] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1070.140337][T18169] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1070.171615][T18169] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1070.209095][ T30] audit: type=1400 audit(2000001612.652:1039): avc: denied { sys_module } for pid=18964 comm="syz.2.3453" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1070.255137][T18973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1070.300762][ T30] audit: type=1400 audit(2000001612.694:1040): avc: denied { write } for pid=18964 comm="syz.2.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1070.320461][T18966] syzkaller0: entered promiscuous mode [ 1070.320483][T18966] syzkaller0: entered allmulticast mode [ 1070.400492][T18966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18966 comm=syz.2.3453 [ 1070.863305][T18983] gfs2: not a GFS2 filesystem [ 1072.181805][ T6184] usb 6-1: USB disconnect, device number 71 [ 1073.050070][T18990] 9pnet_fd: p9_fd_create_tcp (18990): problem connecting socket to 127.0.0.1 [ 1073.607315][T18993] gfs2: not a GFS2 filesystem [ 1074.433806][T19000] syzkaller0: entered promiscuous mode [ 1074.440202][T19000] syzkaller0: entered allmulticast mode [ 1076.046697][T19025] batadv_slave_0: entered promiscuous mode [ 1076.085691][T19025] batman_adv: batadv0: Adding interface: macsec1 [ 1076.115600][T19025] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.182295][T19025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1076.182340][T19025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1076.182376][T19025] batman_adv: batadv0: Interface activated: macsec1 [ 1076.821599][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1077.362896][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1078.344434][T19045] syzkaller0: entered promiscuous mode [ 1078.363735][T19045] syzkaller0: entered allmulticast mode [ 1078.363753][ T30] audit: type=1400 audit(2000001621.209:1041): avc: denied { create } for pid=19046 comm="syz.1.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1078.528552][ T30] audit: type=1400 audit(2000001621.220:1042): avc: denied { create } for pid=19046 comm="syz.1.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1078.550399][ T30] audit: type=1400 audit(2000001621.241:1043): avc: denied { setopt } for pid=19046 comm="syz.1.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1078.572145][ T30] audit: type=1400 audit(2000001621.251:1044): avc: denied { create } for pid=19046 comm="syz.1.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1078.618233][ T30] audit: type=1400 audit(2000001621.482:1045): avc: denied { read } for pid=19046 comm="syz.1.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1078.799226][ T30] audit: type=1400 audit(2000001621.545:1046): avc: denied { setopt } for pid=19046 comm="syz.1.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1078.830260][ T5893] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1078.916391][ T30] audit: type=1400 audit(2000001621.556:1047): avc: denied { write } for pid=19046 comm="syz.1.3478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1078.978853][T19052] netlink: 'syz.1.3478': attribute type 2 has an invalid length. [ 1079.020782][ T5893] usb 1-1: Using ep0 maxpacket: 8 [ 1079.032159][ T5893] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1079.041097][ T5893] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1079.061684][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1079.084340][ T5893] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1079.121966][ T5893] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.134964][T15989] Bluetooth: hci4: command 0x0406 tx timeout [ 1079.163046][ T5893] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1079.172190][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.366067][T19056] input: syz1 as /devices/virtual/input/input51 [ 1079.475872][T19059] netlink: 'syz.3.3481': attribute type 10 has an invalid length. [ 1079.483844][T19059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3481'. [ 1079.492902][T19059] batadv0: entered promiscuous mode [ 1079.498628][T19059] batadv0: entered allmulticast mode [ 1079.505942][T19059] bridge0: port 3(batadv0) entered blocking state [ 1079.512933][T19059] bridge0: port 3(batadv0) entered disabled state [ 1079.526511][T19059] bridge0: port 3(batadv0) entered blocking state [ 1079.532995][T19059] bridge0: port 3(batadv0) entered forwarding state [ 1079.706637][ T8855] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1079.715917][ T8855] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1079.858069][ T5893] usb 1-1: usb_control_msg returned -32 [ 1080.093006][ T5893] usbtmc 1-1:16.0: can't read capabilities [ 1080.419500][T19066] x_tables: duplicate underflow at hook 3 [ 1080.750140][T19066] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1080.839158][ T30] audit: type=1400 audit(2000001623.813:1048): avc: denied { create } for pid=19065 comm="syz.3.3483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1080.962437][ T30] audit: type=1400 audit(2000001623.918:1049): avc: denied { write } for pid=19065 comm="syz.3.3483" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1081.023528][ T30] audit: type=1400 audit(2000001623.918:1050): avc: denied { open } for pid=19065 comm="syz.3.3483" path="/55/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1081.287812][ T6184] usb 1-1: USB disconnect, device number 53 [ 1081.402888][T19083] FAULT_INJECTION: forcing a failure. [ 1081.402888][T19083] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.459150][T19083] CPU: 1 UID: 0 PID: 19083 Comm: syz.0.3486 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.459179][T19083] Tainted: [L]=SOFTLOCKUP [ 1081.459186][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1081.459196][T19083] Call Trace: [ 1081.459202][T19083] [ 1081.459208][T19083] dump_stack_lvl+0x100/0x190 [ 1081.459241][T19083] should_fail_ex.cold+0x5/0xa [ 1081.459268][T19083] should_failslab+0xc2/0x120 [ 1081.459290][T19083] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1081.459316][T19083] ? nf_tables_newtable+0xcff/0x19f0 [ 1081.459349][T19083] nf_tables_newtable+0xcff/0x19f0 [ 1081.459383][T19083] ? __pfx_nf_tables_newtable+0x10/0x10 [ 1081.459417][T19083] ? __nla_parse+0x40/0x60 [ 1081.459439][T19083] nfnetlink_rcv_batch+0x1418/0x2880 [ 1081.459473][T19083] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1081.459493][T19083] ? find_held_lock+0x2b/0x80 [ 1081.459526][T19083] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1081.459575][T19083] ? __nla_parse+0x40/0x60 [ 1081.459596][T19083] nfnetlink_rcv+0x3bd/0x440 [ 1081.459616][T19083] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1081.459642][T19083] netlink_unicast+0x5aa/0x870 [ 1081.459671][T19083] ? __pfx_netlink_unicast+0x10/0x10 [ 1081.459706][T19083] netlink_sendmsg+0x8b0/0xda0 [ 1081.459736][T19083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.459760][T19083] ? __might_fault+0x70/0x140 [ 1081.459788][T19083] ____sys_sendmsg+0xa54/0xc30 [ 1081.459818][T19083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1081.459857][T19083] ___sys_sendmsg+0x190/0x1e0 [ 1081.459878][T19083] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.459926][T19083] __sys_sendmsg+0x170/0x220 [ 1081.459949][T19083] ? __pfx___sys_sendmsg+0x10/0x10 [ 1081.459987][T19083] do_syscall_64+0x106/0xf80 [ 1081.460012][T19083] ? clear_bhb_loop+0x40/0x90 [ 1081.460034][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.460058][T19083] RIP: 0033:0x7faa2899bf79 [ 1081.460074][T19083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.460091][T19083] RSP: 002b:00007faa297f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.460109][T19083] RAX: ffffffffffffffda RBX: 00007faa28c15fa0 RCX: 00007faa2899bf79 [ 1081.460121][T19083] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1081.460132][T19083] RBP: 00007faa297f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.460142][T19083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.460153][T19083] R13: 00007faa28c16038 R14: 00007faa28c15fa0 R15: 00007ffd17ff9ac8 [ 1081.460178][T19083] [ 1082.568546][T19089] 9pnet_fd: p9_fd_create_tcp (19089): problem connecting socket to 127.0.0.1 [ 1082.896791][ T6184] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1083.139699][ T6184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.485158][ T6184] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=f4.8b [ 1083.511901][ T6184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.535812][ T6184] usb 1-1: Product: syz [ 1083.554634][ T6184] usb 1-1: Manufacturer: syz [ 1083.574801][ T6184] usb 1-1: SerialNumber: syz [ 1083.599558][ T6184] usb 1-1: config 0 descriptor?? [ 1083.687737][ T5880] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1083.705232][ T6184] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1083.893110][ T6184] gspca_t613: unknown sensor 0000 [ 1085.082735][ T6184] t613 1-1:0.0: probe with driver t613 failed with error -22 [ 1085.136746][ T6184] usb 1-1: USB disconnect, device number 54 [ 1085.703741][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1085.703756][ T30] audit: type=1400 audit(2000001628.916:1054): avc: denied { execute_no_trans } for pid=19120 comm="syz.3.3491" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1085.745867][ T5956] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1085.996235][ T6184] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1086.879083][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1086.893566][ T5880] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1086.901498][ T5880] usb 3-1: can't read configurations, error -71 [ 1087.002079][ T6184] usb 1-1: Using ep0 maxpacket: 8 [ 1087.019728][ T6184] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1087.029356][ T6184] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1087.268731][ T6184] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1087.280723][ T6184] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1087.297107][ T6184] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1087.317837][ T6184] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1087.328339][ T6184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.345012][ T5956] usb 6-1: Using ep0 maxpacket: 32 [ 1087.352259][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.390083][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.419101][ T5956] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1087.591715][ T5880] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1088.170929][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.181806][ T5956] usb 6-1: config 0 descriptor?? [ 1088.203560][T19136] vivid-006: kernel_thread() failed [ 1088.212028][T19138] vivid-006: kernel_thread() failed [ 1088.277629][ T6184] usb 1-1: usb_control_msg returned -32 [ 1088.294959][ T5956] usb 6-1: can't set config #0, error -71 [ 1088.300788][ T6184] usbtmc 1-1:16.0: can't read capabilities [ 1088.317929][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 1088.329594][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.330324][ T5956] usb 6-1: USB disconnect, device number 72 [ 1088.354714][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.382671][ T30] audit: type=1400 audit(2000001631.729:1055): avc: denied { relabelfrom } for pid=19141 comm="syz.5.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1088.421163][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1088.440487][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.456335][ T30] audit: type=1400 audit(2000001631.729:1056): avc: denied { relabelto } for pid=19141 comm="syz.5.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1088.488889][ T5880] usb 3-1: config 0 descriptor?? [ 1088.498750][ T5880] hub 3-1:0.0: USB hub found [ 1088.770672][ T5880] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1088.792506][T15989] Bluetooth: hci6: command 0x0406 tx timeout [ 1088.867477][T19144] ceph: No mds server is up or the cluster is laggy [ 1089.009010][ T5880] usbhid 3-1:0.0: can't add hid device: -71 [ 1090.118877][ T5880] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1090.168222][ T5956] usb 1-1: USB disconnect, device number 55 [ 1090.195049][ T5880] usb 3-1: USB disconnect, device number 3 [ 1090.738176][T19170] netlink: 'syz.0.3510': attribute type 11 has an invalid length. [ 1090.764564][T19170] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3510'. [ 1090.940252][ T5956] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1091.269033][ T5880] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1091.430828][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 1091.437519][ T5880] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1091.446071][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.460966][ T5880] usb 1-1: config 0 has no interface number 0 [ 1091.469230][ T5880] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1091.478453][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.486429][ T5880] usb 1-1: Product: syz [ 1091.490836][ T5880] usb 1-1: Manufacturer: syz [ 1091.495417][ T5880] usb 1-1: SerialNumber: syz [ 1091.507962][ T5880] usb 1-1: config 0 descriptor?? [ 1091.516355][ T5880] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1091.524314][ T5880] uvcvideo 1-1:0.105: No valid video chain found. [ 1091.602769][ T30] audit: type=1400 audit(2000001635.121:1057): avc: denied { create } for pid=19180 comm="syz.1.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1091.650912][ T30] audit: type=1400 audit(2000001635.152:1058): avc: denied { connect } for pid=19180 comm="syz.1.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1091.698867][ T30] audit: type=1400 audit(2000001635.194:1059): avc: denied { bind } for pid=19180 comm="syz.1.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1091.726399][ T30] audit: type=1400 audit(2000001635.205:1060): avc: denied { listen } for pid=19180 comm="syz.1.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1091.732062][ T5880] usb 1-1: USB disconnect, device number 56 [ 1091.746895][ T30] audit: type=1400 audit(2000001635.205:1061): avc: denied { accept } for pid=19180 comm="syz.1.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1091.783690][ T30] audit: type=1400 audit(2000001635.310:1062): avc: denied { write } for pid=19180 comm="syz.1.3505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 1091.804794][ T5956] usb 6-1: device descriptor read/64, error -71 [ 1092.050154][ T5956] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1092.131637][T19191] gfs2: not a GFS2 filesystem [ 1092.259455][ T5880] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1092.421323][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 1092.455840][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 64 [ 1092.477239][ T5880] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1092.502299][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.520376][ T5880] usb 4-1: Product: syz [ 1092.525054][ T5880] usb 4-1: Manufacturer: syz [ 1092.530728][ T5880] usb 4-1: SerialNumber: syz [ 1092.604671][ T5956] usb 6-1: device descriptor read/64, error -71 [ 1092.657603][ T5880] usb 4-1: config 0 descriptor?? [ 1092.717482][ T5956] usb usb6-port1: attempt power cycle [ 1093.134930][T19189] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3514'. [ 1093.354876][T18065] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1093.518523][ T5880] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input52 [ 1093.535771][ T5956] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1094.510271][ T5956] usb 6-1: device not accepting address 75, error -71 [ 1094.545682][T18065] usb 1-1: Using ep0 maxpacket: 8 [ 1094.555677][T18065] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1094.563846][T18065] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1094.573562][T18065] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1094.589617][ T5893] usb 4-1: USB disconnect, device number 16 [ 1094.609726][T18065] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1094.718750][T19207] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 1094.889719][ T30] audit: type=1400 audit(2000001638.302:1063): avc: denied { read } for pid=19203 comm="syz.5.3517" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1094.889800][T18065] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1094.967142][T18065] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1094.977688][T18065] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.013793][ T30] audit: type=1400 audit(2000001638.302:1064): avc: denied { open } for pid=19203 comm="syz.5.3517" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1096.619050][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1096.625487][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1096.703291][ T5880] usb 1-1: USB disconnect, device number 57 [ 1097.028073][ T30] audit: type=1400 audit(2000001640.811:1065): avc: denied { mount } for pid=19227 comm="syz.0.3523" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1097.788357][T19242] omfs: Invalid superblock (0) [ 1099.784176][ T5853] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1100.843055][T19261] 9pnet_fd: p9_fd_create_tcp (19261): problem connecting socket to 127.0.0.1 [ 1101.774690][ T5880] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1102.044143][ T5880] usb 2-1: too many configurations: 47, using maximum allowed: 8 [ 1102.082654][ T5880] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1102.092027][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.100070][ T5880] usb 2-1: Product: syz [ 1102.104296][ T5880] usb 2-1: Manufacturer: syz [ 1102.108913][ T5880] usb 2-1: SerialNumber: syz [ 1102.118970][ T5880] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1102.135766][ T5873] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1102.411091][ T5853] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1102.420546][ T5853] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1102.428577][ T5853] usb 1-1: can't read configurations, error -71 [ 1102.546584][T19271] gfs2: not a GFS2 filesystem [ 1102.964034][T19274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1103.422446][ T5873] usb 2-1: Service connection timeout for: 256 [ 1103.429297][ T5873] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1103.755165][ T5873] ath9k_htc: Failed to initialize the device [ 1103.788089][ T5873] usb 2-1: ath9k_htc: USB layer deinitialized [ 1103.898980][ T30] audit: type=1400 audit(2000001648.024:1066): avc: denied { write } for pid=19283 comm="syz.0.3540" path="socket:[63610]" dev="sockfs" ino=63610 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1104.617235][ T5956] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1104.753667][T19294] netlink: 'syz.3.3539': attribute type 10 has an invalid length. [ 1104.761574][T19294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3539'. [ 1104.850925][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 1104.914419][ T5956] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1104.922150][T18065] usb 2-1: USB disconnect, device number 5 [ 1104.941539][T19291] input: syz1 as /devices/virtual/input/input53 [ 1104.976941][ T5956] usb 1-1: config 255 has an invalid interface number: 81 but max is 0 [ 1105.009219][ T5956] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.220100][ T5956] usb 1-1: config 255 has no interface number 0 [ 1105.234743][ T5956] usb 1-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1105.403767][ T5956] usb 1-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1105.472872][ T5956] usb 1-1: config 255 interface 81 has no altsetting 0 [ 1105.503733][ T5956] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 1105.527304][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.547567][ T5956] usb 1-1: Product: syz [ 1105.555172][ T5956] usb 1-1: Manufacturer: syz [ 1105.560095][ T5956] usb 1-1: SerialNumber: syz [ 1105.852556][ T5956] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:255.81/input/input54 [ 1105.956171][ T5956] usb 1-1: USB disconnect, device number 60 [ 1105.962089][ C0] usbtouchscreen 1-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1106.996736][T19325] omfs: Invalid superblock (0) [ 1107.496097][ T30] audit: type=1400 audit(2000001651.804:1067): avc: denied { read } for pid=5469 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1107.657058][T19329] xt_hashlimit: size too large, truncated to 1048576 [ 1107.846667][ T30] audit: type=1400 audit(2000001651.961:1068): avc: denied { search } for pid=5469 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.213263][ T5873] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1108.289567][ T30] audit: type=1400 audit(2000001651.961:1069): avc: denied { search } for pid=5469 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.447915][ T30] audit: type=1400 audit(2000001651.961:1070): avc: denied { search } for pid=5469 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.486418][ T5873] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1108.527627][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.621680][ T30] audit: type=1400 audit(2000001651.961:1071): avc: denied { read } for pid=5469 comm="dhcpcd" name="n129" dev="tmpfs" ino=13324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1108.654041][ T5873] usb 2-1: config 0 descriptor?? [ 1108.731133][ T30] audit: type=1400 audit(2000001651.961:1072): avc: denied { open } for pid=5469 comm="dhcpcd" path="/run/udev/data/n129" dev="tmpfs" ino=13324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1108.819860][ T5873] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1108.847486][ T30] audit: type=1400 audit(2000001651.961:1073): avc: denied { getattr } for pid=5469 comm="dhcpcd" path="/run/udev/data/n129" dev="tmpfs" ino=13324 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1109.814480][ T5873] gp8psk: usb in 128 operation failed. [ 1110.442078][ T30] audit: type=1400 audit(2000001653.095:1074): avc: denied { read open } for pid=19343 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.483305][ T5873] gp8psk: usb in 137 operation failed. [ 1110.488771][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1110.549327][ T5873] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1110.561192][ T30] audit: type=1400 audit(2000001653.095:1075): avc: denied { getattr } for pid=19343 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1110.620107][ T5873] usb 2-1: media controller created [ 1110.653911][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1110.747539][ T5873] gp8psk_fe: Frontend attached [ 1110.796317][ T5873] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1110.909391][ T5873] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1111.990510][ T30] audit: type=1400 audit(2000001656.518:1076): avc: denied { add_name } for pid=19339 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1112.413661][ T5853] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1112.937510][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 1112.952585][ T30] audit: type=1400 audit(2000001656.518:1077): avc: denied { create } for pid=19339 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1113.052142][ T5873] gp8psk: usb in 138 operation failed. [ 1113.070791][ T5853] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1113.109964][ T5873] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1113.187219][ T5853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1113.226100][ T5873] gp8psk: found Genpix USB device pID = 203 (hex) [ 1113.245679][ T30] audit: type=1400 audit(2000001656.518:1078): avc: denied { write } for pid=19339 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.cfptm0.link" dev="tmpfs" ino=13358 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1113.309077][ T5853] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1113.407707][T19396] netlink: 'syz.0.3561': attribute type 11 has an invalid length. [ 1113.471766][ T5873] usb 2-1: USB disconnect, device number 6 [ 1113.496096][T19396] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3561'. [ 1113.515370][ T30] audit: type=1400 audit(2000001656.518:1079): avc: denied { append } for pid=19339 comm="dhcpcd-run-hook" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=13358 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1113.633298][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.709412][ T5938] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1113.736895][ T5853] usb 4-1: Product: syz [ 1113.775884][ T30] audit: type=1400 audit(2000001657.956:1080): avc: denied { remove_name } for pid=19393 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=13358 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1113.801880][ T5853] usb 4-1: Manufacturer: syz [ 1113.831988][ T5853] usb 4-1: SerialNumber: syz [ 1113.843605][T19403] tmpfs: Bad value for 'nr_blocks' [ 1113.915496][ T5853] usb 4-1: config 0 descriptor?? [ 1113.954179][ T5853] usb 4-1: can't set config #0, error -71 [ 1114.011595][ T30] audit: type=1400 audit(2000001657.956:1081): avc: denied { unlink } for pid=19393 comm="rm" name="resolv.conf.cfptm0.link" dev="tmpfs" ino=13358 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1114.038152][ T5873] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1114.050612][ T5853] usb 4-1: USB disconnect, device number 17 [ 1114.080745][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 1114.127613][ T5938] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1114.189012][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.348630][ T5938] usb 1-1: config 0 has no interface number 0 [ 1114.397330][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1114.495009][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.565424][ T5938] usb 1-1: Product: syz [ 1114.597652][ T5938] usb 1-1: Manufacturer: syz [ 1114.613757][ T5873] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1114.642209][ T5938] usb 1-1: SerialNumber: syz [ 1114.763208][ T5938] usb 1-1: config 0 descriptor?? [ 1114.798638][ T5938] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1114.960731][ T5938] uvcvideo 1-1:0.105: No valid video chain found. [ 1115.043620][ T5873] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1115.072727][ T5938] usb 1-1: USB disconnect, device number 61 [ 1115.122657][ T5873] usb 4-1: config 0 has no interface number 0 [ 1115.184012][ T5873] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1115.241898][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.351363][ T5873] usb 4-1: Product: syz [ 1115.418589][ T5873] usb 4-1: Manufacturer: syz [ 1115.426666][ T5873] usb 4-1: SerialNumber: syz [ 1115.610795][ T5873] usb 4-1: config 0 descriptor?? [ 1115.823562][ T6184] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1116.251108][ T6184] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1116.341940][ T6184] usb 2-1: config 0 has no interface number 0 [ 1116.751870][ T6184] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1116.771990][ T6184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.820384][ T5956] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1116.858577][ T6184] usb 2-1: Product: syz [ 1116.918592][ T6184] usb 2-1: Manufacturer: syz [ 1116.923210][ T6184] usb 2-1: SerialNumber: syz [ 1117.034304][ T6184] usb 2-1: config 0 descriptor?? [ 1117.070044][ T5956] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 1117.096649][ T5873] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1117.109951][ T5873] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1117.127622][ T5956] usb 1-1: config 0 has no interface number 0 [ 1117.196521][ T5873] asix 4-1:0.251: probe with driver asix failed with error -71 [ 1117.256231][ T5873] usb 4-1: USB disconnect, device number 18 [ 1117.295125][ T5956] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1117.332884][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.375850][ T5956] usb 1-1: Product: syz [ 1117.400188][ T5956] usb 1-1: Manufacturer: syz [ 1117.452255][ T5956] usb 1-1: SerialNumber: syz [ 1117.477837][ T5956] usb 1-1: config 0 descriptor?? [ 1117.754132][ T6184] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1117.827399][ T6184] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61 [ 1117.985801][ T6184] asix 2-1:0.251: probe with driver asix failed with error -61 [ 1118.080753][ T6184] usb 2-1: USB disconnect, device number 7 [ 1118.099658][T18065] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1118.300004][T18065] usb 3-1: Using ep0 maxpacket: 32 [ 1118.341698][ T5956] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1118.586851][ T5956] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1118.620055][ T5956] asix 1-1:0.251: probe with driver asix failed with error -71 [ 1118.653807][T18065] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 1118.681167][ T5956] usb 1-1: USB disconnect, device number 62 [ 1118.687141][T18065] usb 3-1: config 2 has no interface number 0 [ 1119.124185][T18065] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1119.168834][T18065] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1119.242370][T18065] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1119.269128][T18065] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.314645][T18065] usb 3-1: Product: syz [ 1119.347480][T18065] usb 3-1: Manufacturer: syz [ 1119.352085][T18065] usb 3-1: SerialNumber: syz [ 1119.586534][T18065] kobil_sct 3-1:2.45: KOBIL USB smart card terminal converter detected [ 1119.710549][T18065] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1119.765063][T19433] binder: 19432:19433 ioctl c040aed5 200000000000 returned -22 [ 1119.879548][T18065] usb 3-1: USB disconnect, device number 4 [ 1120.241056][ T30] audit: type=1400 audit(2000001665.074:1082): avc: denied { setattr } for pid=19448 comm="syz.0.3573" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1120.773578][ T30] audit: type=1400 audit(2000001665.085:1083): avc: denied { create } for pid=19448 comm="syz.0.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1120.935571][ T30] audit: type=1400 audit(2000001665.095:1084): avc: denied { getopt } for pid=19448 comm="syz.0.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1120.948018][T18065] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1121.201719][T19465] gfs2: not a GFS2 filesystem [ 1121.217692][T18065] kobil_sct 3-1:2.45: device disconnected [ 1122.251559][ T30] audit: type=1400 audit(2000001667.269:1085): avc: denied { write } for pid=19470 comm="syz.3.3578" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1122.418281][T19474] netlink: 'syz.3.3578': attribute type 39 has an invalid length. [ 1124.041149][ T5938] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1124.100581][T18065] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1124.343104][T18065] usb 6-1: Using ep0 maxpacket: 8 [ 1124.362169][T18065] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1124.798905][T18065] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1124.985737][T18065] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1125.415470][ T30] audit: type=1400 audit(2000001670.272:1086): avc: denied { append } for pid=19487 comm="syz.0.3583" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1125.493926][T18065] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1125.538652][ T6184] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1125.573207][T18065] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1125.630361][T18065] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1125.676712][T18065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.695130][ T6184] usb 1-1: Using ep0 maxpacket: 16 [ 1125.712011][ T6184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.747985][ T5853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1125.778123][ T6184] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.832574][ T6184] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1125.887447][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1125.895262][ T6184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.910027][ T5853] usb 3-1: Using ep0 maxpacket: 8 [ 1125.925346][ T5938] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1125.952276][ T5853] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1125.989943][ T6184] usb 1-1: config 0 descriptor?? [ 1126.005526][ T5853] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1126.024315][T18065] usb 6-1: usb_control_msg returned -71 [ 1126.030556][ T5938] usb 2-1: can't read configurations, error -71 [ 1126.048193][T18065] usbtmc 6-1:16.0: can't read capabilities [ 1126.097359][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1126.122347][T18065] usb 6-1: USB disconnect, device number 77 [ 1126.155676][ T5853] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1126.210535][ T5853] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1126.276164][ T5853] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1126.319334][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.386243][ T5938] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1126.397110][ T6184] apple 0003:05AC:024B.0015: unknown global tag 0xe [ 1126.403701][ T6184] apple 0003:05AC:024B.0015: item 0 1 1 14 parsing failed [ 1126.434638][ T6184] apple 0003:05AC:024B.0015: parse failed [ 1126.453200][ T6184] apple 0003:05AC:024B.0015: probe with driver apple failed with error -22 [ 1126.538889][T18065] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1126.574726][ T30] audit: type=1400 audit(2000001671.825:1087): avc: denied { nlmsg_write } for pid=19487 comm="syz.0.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1126.603717][ T5853] usb 3-1: usb_control_msg returned -32 [ 1126.605119][ T5938] usb 2-1: Using ep0 maxpacket: 8 [ 1126.609386][ T5853] usbtmc 3-1:16.0: can't read capabilities [ 1126.620543][ T30] audit: type=1400 audit(2000001671.825:1088): avc: denied { shutdown } for pid=19487 comm="syz.0.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1126.674746][ T5938] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 1126.782883][ T5938] usb 2-1: config 0 has no interface number 0 [ 1126.791050][T18065] usb 6-1: Using ep0 maxpacket: 32 [ 1126.829088][T18065] usb 6-1: config 2 has an invalid interface number: 45 but max is 0 [ 1127.267787][T19502] can0: slcan on ttyS3. [ 1127.290109][ T30] audit: type=1400 audit(2000001672.560:1089): avc: denied { read } for pid=19500 comm="syz.3.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1127.291477][ T5938] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1127.329559][T19503] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 1127.339166][ T30] audit: type=1400 audit(2000001672.634:1090): avc: denied { read } for pid=19493 comm="syz.2.3584" dev="sockfs" ino=64570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1127.500367][ T30] audit: type=1400 audit(2000001672.697:1091): avc: denied { connect } for pid=19500 comm="syz.3.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1127.636015][T19502] can0 (unregistered): slcan off ttyS3. [ 1127.692089][T19504] can0: slcan on ttyS3. [ 1127.776661][T18065] usb 6-1: config 2 has no interface number 0 [ 1127.814829][T18065] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1127.827336][ T5853] usb 3-1: USB disconnect, device number 5 [ 1127.827634][ T791] usb 1-1: USB disconnect, device number 63 [ 1127.849009][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.884492][T18065] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1127.886911][T19505] can0 (unregistered): slcan off ttyS3. [ 1127.943816][ T5938] usb 2-1: Product: syz [ 1127.947969][ T5938] usb 2-1: Manufacturer: syz [ 1127.984863][T18065] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1127.996432][ T5938] usb 2-1: SerialNumber: syz [ 1128.036241][ T5938] usb 2-1: config 0 descriptor?? [ 1128.041977][T18065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.052664][ T5938] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1128.870725][T19513] gfs2: not a GFS2 filesystem [ 1129.068533][T19496] FAULT_INJECTION: forcing a failure. [ 1129.068533][T19496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.240262][T19514] 9pnet_fd: p9_fd_create_tcp (19514): problem connecting socket to 127.0.0.1 [ 1129.287240][T19496] CPU: 1 UID: 0 PID: 19496 Comm: syz.1.3585 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.287269][T19496] Tainted: [L]=SOFTLOCKUP [ 1129.287275][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1129.287286][T19496] Call Trace: [ 1129.287292][T19496] [ 1129.287299][T19496] dump_stack_lvl+0x100/0x190 [ 1129.287331][T19496] should_fail_ex.cold+0x5/0xa [ 1129.287354][T19496] _copy_to_user+0x32/0xd0 [ 1129.287380][T19496] simple_read_from_buffer+0xcb/0x170 [ 1129.287405][T19496] proc_fail_nth_read+0x1af/0x230 [ 1129.287433][T19496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.287466][T19496] ? rw_verify_area+0xce/0x6d0 [ 1129.287485][T19496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1129.287511][T19496] vfs_read+0x1e4/0xb30 [ 1129.287535][T19496] ? __pfx_vfs_read+0x10/0x10 [ 1129.287554][T19496] ? __fget_files+0x215/0x3d0 [ 1129.287584][T19496] ? __fget_files+0x21f/0x3d0 [ 1129.287618][T19496] ksys_read+0x12a/0x250 [ 1129.287638][T19496] ? __pfx_ksys_read+0x10/0x10 [ 1129.287659][T19496] ? __x64_sys_ioctl+0x1cb/0x210 [ 1129.287684][T19496] do_syscall_64+0x106/0xf80 [ 1129.287706][T19496] ? clear_bhb_loop+0x40/0x90 [ 1129.287728][T19496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.287746][T19496] RIP: 0033:0x7fbffd35c84e [ 1129.287761][T19496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1129.287777][T19496] RSP: 002b:00007fbffb5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1129.287794][T19496] RAX: ffffffffffffffda RBX: 00007fbffb5f66c0 RCX: 00007fbffd35c84e [ 1129.287805][T19496] RDX: 000000000000000f RSI: 00007fbffb5f60a0 RDI: 0000000000000004 [ 1129.287816][T19496] RBP: 00007fbffb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.287826][T19496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.287836][T19496] R13: 00007fbffd616038 R14: 00007fbffd615fa0 R15: 00007ffee0cfc3c8 [ 1129.287863][T19496] [ 1129.320155][T18065] usb 6-1: Product: syz [ 1129.491449][ T5938] pctv452e: pctv452e_power_ctrl: 1 [ 1129.491449][ T5938] [ 1129.501065][ T5938] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1129.501065][ T5938] [ 1129.539101][ T5938] dvb-usb: bulk message failed: -22 (5/0) [ 1130.049320][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1130.072388][ T5938] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1130.177146][T18065] usb 6-1: Manufacturer: syz [ 1130.201559][T18065] usb 6-1: SerialNumber: syz [ 1130.206233][ T5938] usb 2-1: media controller created [ 1130.251079][ T5938] dvb-usb: bulk message failed: -22 (8/0) [ 1130.257011][T18065] usb 6-1: can't set config #2, error -71 [ 1130.275436][ T5938] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1130.291645][T18065] usb 6-1: USB disconnect, device number 78 [ 1130.320402][ T5938] dvb-usb: MAC address reading failed. [ 1130.409460][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1131.239324][ T5938] DVB: Unable to find symbol stb0899_attach() [ 1131.303781][ T5938] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1131.510457][T18065] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1131.568456][ T5938] rc_core: IR keymap rc-tt-1500 not found [ 1131.574200][ T5938] Registered IR keymap rc-empty [ 1131.630649][ T5956] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1131.644353][ T5938] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1131.706926][ T5938] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input56 [ 1131.729962][T18065] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.761577][T18065] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1131.774133][ T5938] dvb-usb: schedule remote query interval to 100 msecs. [ 1131.791009][ T5938] pctv452e: pctv452e_power_ctrl: 0 [ 1131.791009][ T5938] [ 1131.799401][T18065] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.815213][ T5938] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1131.833946][T18065] usb 3-1: config 0 descriptor?? [ 1131.900789][ T791] dvb-usb: bulk message failed: -22 (4/0) [ 1131.906735][ T791] dvb-usb: error -22 while querying for an remote control event. [ 1131.982467][T18065] pwc: Askey VC010 type 2 USB webcam detected. [ 1132.002543][ T5938] usb 2-1: USB disconnect, device number 9 [ 1132.559406][T19523] gfs2: not a GFS2 filesystem [ 1132.611944][ T5938] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1132.716290][T18065] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1132.734187][T18065] pwc: recv_control_msg error -32 req 02 val 2700 [ 1132.746317][T18065] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1133.964993][T19554] netlink: 'syz.1.3597': attribute type 10 has an invalid length. [ 1133.972998][T19554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3597'. [ 1133.982510][T19554] batadv0: entered promiscuous mode [ 1133.987915][T19554] batadv0: entered allmulticast mode [ 1134.005260][T19554] bridge0: port 3(batadv0) entered blocking state [ 1134.012707][T19554] bridge0: port 3(batadv0) entered disabled state [ 1134.035973][T19554] bridge0: port 3(batadv0) entered blocking state [ 1134.042450][T19554] bridge0: port 3(batadv0) entered forwarding state [ 1134.498706][ T8855] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1134.507981][ T8855] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1135.031628][ T5956] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1135.061360][ T5956] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1135.087939][ T5956] usb 6-1: can't read configurations, error -71 [ 1135.355155][T19567] omfs: Invalid superblock (0) [ 1137.589677][T18065] pwc: recv_control_msg error -110 req 04 val 1000 [ 1137.663642][T18065] pwc: recv_control_msg error -32 req 04 val 1300 [ 1137.692100][T18065] pwc: recv_control_msg error -32 req 04 val 1400 [ 1137.730332][T18065] pwc: recv_control_msg error -32 req 02 val 2000 [ 1137.747306][T18065] pwc: recv_control_msg error -32 req 02 val 2100 [ 1137.776664][T18065] pwc: recv_control_msg error -32 req 04 val 1500 [ 1137.816185][T18065] pwc: recv_control_msg error -32 req 02 val 2500 [ 1137.842546][T18065] pwc: recv_control_msg error -32 req 02 val 2400 [ 1137.874182][T18065] pwc: recv_control_msg error -32 req 02 val 2600 [ 1137.917365][T18065] pwc: recv_control_msg error -71 req 02 val 2900 [ 1137.940034][T18065] pwc: recv_control_msg error -71 req 02 val 2800 [ 1137.966429][T18065] pwc: recv_control_msg error -71 req 04 val 1100 [ 1137.968437][ T5915] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1137.978371][T18065] pwc: recv_control_msg error -71 req 04 val 1200 [ 1138.032862][T18065] pwc: Registered as video103. [ 1138.139722][T18065] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 1138.187662][ T5915] usb 1-1: Using ep0 maxpacket: 32 [ 1138.198586][ T5915] usb 1-1: config 2 has an invalid interface number: 45 but max is 0 [ 1138.281584][ T5915] usb 1-1: config 2 has no interface number 0 [ 1138.386779][ T5915] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1138.585325][ T5915] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1138.893755][ T5915] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1139.049133][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.141207][T18065] usb 3-1: USB disconnect, device number 6 [ 1139.166308][ T5915] usb 1-1: Product: syz [ 1139.185811][ T5915] usb 1-1: Manufacturer: syz [ 1139.504658][ T5915] usb 1-1: SerialNumber: syz [ 1139.536751][ T5915] kobil_sct 1-1:2.45: KOBIL USB smart card terminal converter detected [ 1139.594741][ T5915] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1139.852837][T19574] binder: 19573:19574 ioctl c040aed5 200000000000 returned -22 [ 1140.026692][ T5915] usb 1-1: USB disconnect, device number 64 [ 1140.103118][ T5915] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1140.142312][ T5915] kobil_sct 1-1:2.45: device disconnected [ 1140.567254][ T5915] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1140.703006][T19599] gfs2: not a GFS2 filesystem [ 1140.739738][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 1140.750786][ T5915] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 1140.771946][ T5915] usb 2-1: config 0 has no interface number 0 [ 1140.832691][ T5915] usb 2-1: New USB device found, idVendor=0bc8, idProduct=3007, bcdDevice=4f.64 [ 1140.861899][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.905572][ T5915] usb 2-1: Product: syz [ 1140.953345][ T5915] usb 2-1: Manufacturer: syz [ 1140.975533][ T5915] usb 2-1: SerialNumber: syz [ 1141.041211][ T5915] usb 2-1: config 0 descriptor?? [ 1142.844408][ T30] audit: type=1400 audit(2000001688.907:1092): avc: denied { mount } for pid=19592 comm="syz.1.3609" name="/" dev="ramfs" ino=64034 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1143.016572][ T30] audit: type=1400 audit(2000001689.002:1093): avc: denied { bind } for pid=19600 comm="syz.0.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1143.131626][ T5893] usb 2-1: USB disconnect, device number 10 [ 1143.168780][T18065] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1143.340071][T18065] usb 4-1: Using ep0 maxpacket: 32 [ 1143.351037][T18065] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.373643][T18065] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.393263][T18065] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1143.416564][T18065] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.465180][T18065] usb 4-1: config 0 descriptor?? [ 1143.553925][T18065] hub 4-1:0.0: USB hub found [ 1144.368690][ T5853] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1144.560368][ T5853] usb 2-1: config 0 has no interfaces? [ 1144.568203][ T5853] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1144.577757][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.586367][ T5853] usb 2-1: Product: syz [ 1144.590850][ T5853] usb 2-1: Manufacturer: syz [ 1144.595482][ T5853] usb 2-1: SerialNumber: syz [ 1144.678281][ T5853] usb 2-1: config 0 descriptor?? [ 1145.607135][T19625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.979303][T18065] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1146.001563][T18065] usbhid 4-1:0.0: can't add hid device: -71 [ 1146.010196][T18065] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1146.055575][ T5853] usb 2-1: USB disconnect, device number 11 [ 1146.062923][T18065] usb 4-1: USB disconnect, device number 19 [ 1146.275738][ T5915] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1146.550043][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 1146.563146][ T5915] usb 3-1: config 2 has an invalid interface number: 45 but max is 0 [ 1146.728243][ T5915] usb 3-1: config 2 has no interface number 0 [ 1146.745834][ T5915] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1146.778391][ T5915] usb 3-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1146.788012][ T5893] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1147.677950][ T5915] usb 3-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1147.699000][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.728639][ T5915] usb 3-1: Product: syz [ 1147.742602][ T5915] usb 3-1: Manufacturer: syz [ 1147.750710][ T5893] usb 1-1: too many configurations: 47, using maximum allowed: 8 [ 1147.760846][ T5915] usb 3-1: SerialNumber: syz [ 1147.802465][ T5915] kobil_sct 3-1:2.45: KOBIL USB smart card terminal converter detected [ 1147.802701][ T5893] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1147.855074][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.855597][ T5915] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1147.988969][ T5893] usb 1-1: Product: syz [ 1147.996007][T19639] binder: 19638:19639 ioctl c040aed5 200000000000 returned -22 [ 1148.007635][ T5893] usb 1-1: Manufacturer: syz [ 1148.012221][ T5893] usb 1-1: SerialNumber: syz [ 1148.136690][ T30] audit: type=1400 audit(2000001694.440:1094): avc: denied { sqpoll } for pid=19653 comm="syz.1.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1148.443282][ T5893] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1148.444026][ T5915] usb 3-1: USB disconnect, device number 7 [ 1148.457192][ T5956] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1148.475203][ T30] audit: type=1400 audit(2000001694.451:1095): avc: denied { setopt } for pid=19653 comm="syz.1.3625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1148.548393][ T5915] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1148.558710][ T5915] kobil_sct 3-1:2.45: device disconnected [ 1150.011149][ T5956] usb 1-1: Service connection timeout for: 256 [ 1150.017464][ T5956] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1150.081089][ T5956] ath9k_htc: Failed to initialize the device [ 1150.122865][ T5956] usb 1-1: ath9k_htc: USB layer deinitialized [ 1150.257769][T19667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'. [ 1151.002073][T12693] Bluetooth: hci4: unexpected event for opcode 0x0040 [ 1151.084306][ T5938] usb 1-1: USB disconnect, device number 65 [ 1152.750286][ T5938] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1154.188856][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 1154.199055][ T5938] usb 4-1: device descriptor read/all, error -71 [ 1155.341988][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1155.348282][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1155.570478][ T30] audit: type=1326 audit(2000001702.283:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19699 comm="syz.2.3638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe551b9bf79 code=0x0 [ 1155.646372][T19701] loop7: detected capacity change from 0 to 7 [ 1155.653948][ T30] audit: type=1400 audit(2000001702.346:1097): avc: denied { mounton } for pid=19699 comm="syz.2.3638" path="/proc/409/task/410/fd" dev="proc" ino=65041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1155.715061][T19701] Dev loop7: unable to read RDB block 7 [ 1155.758407][T19701] loop7: unable to read partition table [ 1155.780018][T19701] loop7: partition table beyond EOD, truncated [ 1155.788438][ T30] audit: type=1400 audit(2000001702.346:1098): avc: denied { mount } for pid=19699 comm="syz.2.3638" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1155.862187][T19701] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 1158.202483][T19722] gfs2: not a GFS2 filesystem [ 1159.922430][ T5915] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1160.106933][ T5915] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1160.170142][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.211710][ T5915] usb 3-1: Product: syz [ 1160.215873][ T5915] usb 3-1: Manufacturer: syz [ 1160.274953][ T5915] usb 3-1: SerialNumber: syz [ 1160.422492][ T5915] usb 3-1: config 0 descriptor?? [ 1160.689642][T19724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.698251][T19724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.728286][T19724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.736941][T19724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.764569][T12693] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 1160.764626][T12693] Bluetooth: hci4: unknown advertising packet type: 0x5f [ 1160.772886][T12693] Bluetooth: hci4: Dropping invalid advertising data [ 1160.787434][T12693] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1160.793931][ T5915] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1160.944067][ T5915] usb 3-1: USB disconnect, device number 8 [ 1160.970151][ T791] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1161.160829][ T5853] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1162.141209][ T791] usb 4-1: too many configurations: 47, using maximum allowed: 8 [ 1162.332117][T12693] Bluetooth: hci5: unexpected event for opcode 0x0040 [ 1162.651233][ T791] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1162.665930][ T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.679559][ T791] usb 4-1: Product: syz [ 1162.683760][ T791] usb 4-1: Manufacturer: syz [ 1162.698446][ T791] usb 4-1: SerialNumber: syz [ 1162.804170][ T791] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1162.835446][ T5893] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1163.183579][ T30] audit: type=1400 audit(2000001710.273:1099): avc: denied { setopt } for pid=19753 comm="syz.2.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1164.420093][ T5893] usb 4-1: Service connection timeout for: 256 [ 1164.426548][ T5893] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1164.473003][ T5853] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1164.503914][ T5853] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1164.532250][ T5853] usb 2-1: can't read configurations, error -71 [ 1164.571367][ T5893] ath9k_htc: Failed to initialize the device [ 1164.587592][ T5893] usb 4-1: ath9k_htc: USB layer deinitialized [ 1164.641080][T19765] netlink: 'syz.2.3651': attribute type 11 has an invalid length. [ 1164.666399][T19765] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3651'. [ 1165.058072][ T5915] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1165.351555][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 1165.362003][ T5915] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1165.370384][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.381041][ T5915] usb 3-1: config 0 has no interface number 0 [ 1165.389000][ T5915] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1165.399167][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.407249][ T5915] usb 3-1: Product: syz [ 1165.412008][ T5915] usb 3-1: Manufacturer: syz [ 1165.416675][ T5915] usb 3-1: SerialNumber: syz [ 1165.513775][T19774] gfs2: not a GFS2 filesystem [ 1165.616813][ T5915] usb 3-1: config 0 descriptor?? [ 1165.677345][ T5915] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1165.708484][ T5915] uvcvideo 3-1:0.105: No valid video chain found. [ 1165.915285][ T5915] usb 3-1: USB disconnect, device number 9 [ 1165.963195][ T5873] usb 4-1: USB disconnect, device number 22 [ 1166.051865][T19778] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3650'. [ 1166.278536][T19778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1166.494936][T19779] omfs: Invalid superblock (0) [ 1166.603011][ T30] audit: type=1400 audit(2000001713.864:1100): avc: denied { ioctl } for pid=19786 comm="syz.2.3656" path="socket:[65234]" dev="sockfs" ino=65234 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1166.684789][ T30] audit: type=1400 audit(2000001713.937:1101): avc: denied { mount } for pid=19777 comm="syz.5.3650" name="/" dev="autofs" ino=64298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1166.707692][ T5938] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1166.761449][ T30] audit: type=1400 audit(2000001713.937:1102): avc: denied { mounton } for pid=19777 comm="syz.5.3650" path="/342/file1" dev="autofs" ino=64298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1167.085461][ T30] audit: type=1400 audit(2000001713.937:1103): avc: denied { read write } for pid=19777 comm="syz.5.3650" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1167.145063][ T30] audit: type=1400 audit(2000001713.937:1104): avc: denied { open } for pid=19777 comm="syz.5.3650" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1167.169284][ T5938] usb 2-1: Using ep0 maxpacket: 32 [ 1167.189647][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1167.200264][ T5938] usb 2-1: config 16 has an invalid interface number: 175 but max is 0 [ 1167.209132][ T5938] usb 2-1: config 16 has no interface number 0 [ 1167.217189][ T5938] usb 2-1: New USB device found, idVendor=05d1, idProduct=9007, bcdDevice=12.00 [ 1167.235196][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.254854][ T30] audit: type=1400 audit(2000001713.937:1105): avc: denied { ioctl } for pid=19777 comm="syz.5.3650" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1167.283010][ T5938] usb 2-1: Product: syz [ 1167.287687][ T5938] usb 2-1: Manufacturer: syz [ 1167.292389][ T5938] usb 2-1: SerialNumber: syz [ 1167.415476][ T30] audit: type=1400 audit(2000001714.714:1106): avc: denied { unmount } for pid=12692 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1167.964975][T19804] omfs: Invalid superblock (0) [ 1168.152049][T19806] syzkaller0: entered promiscuous mode [ 1168.167191][T19806] syzkaller0: entered allmulticast mode [ 1168.333657][T12693] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 1169.572740][ T5938] ftdi_sio 2-1:16.175: FTDI USB Serial Device converter detected [ 1169.609668][ T5938] ftdi_sio ttyUSB0: unknown device type: 0x1200 [ 1169.648200][ T5938] usb 2-1: USB disconnect, device number 14 [ 1169.676548][ T5938] ftdi_sio 2-1:16.175: device disconnected [ 1170.508720][T12693] Bluetooth: hci4: unexpected event for opcode 0x0040 [ 1170.885171][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1171.075585][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 1171.174239][ T5893] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1171.190082][ T5893] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1171.229896][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1171.277318][ T5893] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1171.315817][ T5893] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1171.374451][ T5893] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1171.414343][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.466562][ T5938] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1171.567979][ T30] audit: type=1400 audit(2000001719.071:1107): avc: denied { ioctl } for pid=19813 comm="syz.0.3663" path="socket:[64423]" dev="sockfs" ino=64423 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1171.662738][ T30] audit: type=1400 audit(2000001719.166:1108): avc: denied { module_load } for pid=19834 comm="syz.5.3669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1171.685654][T19836] Invalid ELF header type: 2 != 1 [ 1171.711850][ T5893] usb 2-1: usb_control_msg returned -71 [ 1171.717543][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 1171.754252][ T5938] usb 4-1: descriptor type invalid, skip [ 1171.761474][ T5893] usbtmc 2-1:16.0: can't read capabilities [ 1171.771721][ T5938] usb 4-1: descriptor type invalid, skip [ 1171.803631][ T5938] usb 4-1: config 1 interface 0 altsetting 164 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1171.819503][ T5893] usb 2-1: USB disconnect, device number 15 [ 1171.877715][ T5938] usb 4-1: config 1 interface 0 altsetting 164 bulk endpoint 0x82 has invalid maxpacket 64 [ 1171.941441][ T5938] usb 4-1: config 1 interface 0 altsetting 164 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1172.041316][ T5938] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1172.070146][ T5938] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1172.164836][T12693] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1172.170227][T19843] omfs: Invalid superblock (0) [ 1172.174414][T12693] Bluetooth: hci5: Injecting HCI hardware error event [ 1172.402049][T15989] Bluetooth: hci5: hardware error 0x00 [ 1172.402183][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.466643][ T5938] usb 4-1: Product: syz [ 1172.470819][ T5938] usb 4-1: Manufacturer: syz [ 1172.475404][ T5938] usb 4-1: SerialNumber: syz [ 1172.553326][ T5938] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 1172.595985][ T5938] usb 4-1: no configuration chosen from 1 choice [ 1173.162889][T19846] omfs: Invalid superblock (0) [ 1173.555741][T19856] gfs2: not a GFS2 filesystem [ 1174.611439][T15989] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1174.620175][ T5853] usb 4-1: USB disconnect, device number 23 [ 1175.325582][T19866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3674'. [ 1176.153396][ T791] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1176.873855][ T791] usb 3-1: Using ep0 maxpacket: 8 [ 1177.000127][ T791] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1177.025441][ T791] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1177.492282][ T791] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1177.571742][ T791] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1177.596715][ T791] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1177.676595][ T791] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1177.685686][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.014429][T19900] loop4: detected capacity change from 0 to 7 [ 1179.029927][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.047996][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.055831][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.083620][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.103299][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.112980][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.132618][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.152301][T19900] ldm_validate_partition_table(): Disk read failed. [ 1179.159228][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.186413][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.198002][ T30] audit: type=1400 audit(2000001727.082:1109): avc: denied { append } for pid=19905 comm="syz.0.3681" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1179.201075][T19900] Buffer I/O error on dev loop4, logical block 0, async page read [ 1179.230696][T19900] Dev loop4: unable to read RDB block 0 [ 1179.267211][T19900] loop4: unable to read partition table [ 1179.334197][ T791] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1179.493704][T19900] loop4: partition table beyond EOD, truncated [ 1179.507501][T19900] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 1179.689910][ T791] usb 2-1: Using ep0 maxpacket: 16 [ 1179.921972][ T791] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1179.931255][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.939791][ T791] usb 2-1: Product: syz [ 1179.945163][ T791] usb 2-1: Manufacturer: syz [ 1179.947872][ T5853] usb 3-1: USB disconnect, device number 10 [ 1179.955075][ T791] usb 2-1: SerialNumber: syz [ 1180.030574][ T791] usb 2-1: config 0 descriptor?? [ 1180.464125][ T791] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1180.637472][ T791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1180.748361][ T791] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1180.778257][ T791] usb 2-1: media controller created [ 1180.823137][ T791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1180.870836][ T791] zl10353_read_register: readreg error (reg=127, ret==0) [ 1180.889889][ T791] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1180.898201][ T791] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1180.927002][ T791] usb 2-1: USB disconnect, device number 16 [ 1181.541997][ T791] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1181.944438][ T30] audit: type=1400 audit(2000001729.959:1110): avc: denied { ioctl } for pid=19939 comm="syz.3.3697" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1182.969976][T19936] omfs: Invalid superblock (0) [ 1183.260047][ T791] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1183.660246][ T791] usb 4-1: Using ep0 maxpacket: 8 [ 1183.669594][ T791] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1183.693868][ T791] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1183.721982][ T791] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1183.772491][ T791] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1183.791186][ T791] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.814508][ T791] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1183.840269][ T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.173646][ T791] usb 4-1: usb_control_msg returned -32 [ 1184.228049][ T791] usbtmc 4-1:16.0: can't read capabilities [ 1185.074817][T19974] omfs: Invalid superblock (0) [ 1185.164413][ T30] audit: type=1400 audit(2000001733.340:1111): avc: denied { lock } for pid=19951 comm="syz.5.3702" path="socket:[65528]" dev="sockfs" ino=65528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1185.423591][T19976] 9pnet_fd: p9_fd_create_tcp (19976): problem connecting socket to 127.0.0.1 [ 1185.768340][T19981] gfs2: not a GFS2 filesystem [ 1186.108578][ T5873] usb 4-1: USB disconnect, device number 24 [ 1186.272174][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3708'. [ 1188.019093][T20005] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1188.079432][ T30] audit: type=1400 audit(2000001736.405:1112): avc: denied { getopt } for pid=20001 comm="syz.2.3713" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1188.235971][T20008] overlayfs: failed to resolve './file2': -2 [ 1191.429193][ T5956] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 1191.468450][T20032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'. [ 1191.669783][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1191.716819][ T5956] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1191.826536][T20039] gfs2: not a GFS2 filesystem [ 1191.972772][ T5915] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1192.167492][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.197124][ T5956] usb 3-1: config 0 descriptor?? [ 1192.216684][T20026] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1192.306948][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 1192.368816][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.396351][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.440305][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1192.467922][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.556192][ T5915] usb 4-1: config 0 descriptor?? [ 1192.584400][ T5915] hub 4-1:0.0: USB hub found [ 1192.634973][ T5956] elan 0003:04F3:0755.0016: unknown main item tag 0x1 [ 1192.690274][ T5956] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1193.487290][ T5915] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1193.620561][ T5853] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1193.774000][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 1193.797456][ T5853] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=1d.9c [ 1193.831218][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.849034][ T5938] usb 3-1: reset full-speed USB device number 11 using dummy_hcd [ 1193.858289][ T5853] usb 2-1: Product: syz [ 1193.877891][ T5853] usb 2-1: Manufacturer: syz [ 1193.896363][ T5853] usb 2-1: SerialNumber: syz [ 1193.918532][ T5853] usb 2-1: config 0 descriptor?? [ 1193.942399][ T5853] pwc: Creative Labs Webcam 5 detected. [ 1194.141218][T20043] netlink: 'syz.1.3725': attribute type 1 has an invalid length. [ 1194.166792][T20043] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1194.202051][ T5853] pwc: Failed to set LED on/off time (-71) [ 1194.225946][ T5853] pwc: send_video_command error -71 [ 1194.243154][ T5853] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1194.269908][ T5853] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1194.304753][ T5853] usb 2-1: USB disconnect, device number 17 [ 1194.493669][T20055] netlink: 'syz.5.3721': attribute type 11 has an invalid length. [ 1194.512682][T20055] netlink: 199828 bytes leftover after parsing attributes in process `syz.5.3721'. [ 1194.641677][ T6184] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1194.675715][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 1194.698346][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1194.737199][ T5915] usb 4-1: USB disconnect, device number 25 [ 1194.757134][T20060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29037 sclass=netlink_route_socket pid=20060 comm=syz.3.3728 [ 1194.784582][ T5873] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1194.817527][ T6184] usb 1-1: Using ep0 maxpacket: 8 [ 1194.824315][ T6184] usb 1-1: config 0 has an invalid interface number: 56 but max is 0 [ 1194.840517][ T6184] usb 1-1: config 0 has no interface number 0 [ 1194.878163][ T6184] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1194.893022][ T6184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.901442][ T6184] usb 1-1: Product: syz [ 1194.905781][ T6184] usb 1-1: Manufacturer: syz [ 1194.910590][ T6184] usb 1-1: SerialNumber: syz [ 1194.918247][ T6184] usb 1-1: config 0 descriptor?? [ 1194.926731][ T6184] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1194.934737][ T6184] pctv452e: pctv452e_power_ctrl: 1 [ 1194.934737][ T6184] [ 1194.942946][ T6184] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1194.942946][ T6184] [ 1194.958422][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 1194.968343][ T6184] dvb-usb: bulk message failed: -22 (5/0) [ 1194.976904][ T5873] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1194.985509][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.998842][ T6184] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1195.009309][ T5873] usb 6-1: config 0 has no interface number 0 [ 1195.019807][ T6184] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1195.032878][ T6184] usb 1-1: media controller created [ 1195.038715][ T6184] dvb-usb: bulk message failed: -22 (8/0) [ 1195.045104][ T6184] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1195.053118][ T5873] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1195.067200][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.077558][ T6184] dvb-usb: MAC address reading failed. [ 1195.083847][ T5873] usb 6-1: Product: syz [ 1195.104691][ T5873] usb 6-1: Manufacturer: syz [ 1195.586558][ T5956] usb 3-1: USB disconnect, device number 11 [ 1195.609881][ T6184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1195.619383][ T5873] usb 6-1: SerialNumber: syz [ 1195.629321][T20053] dvb-usb: bulk message failed: -22 (8/0) [ 1195.638478][ T5873] usb 6-1: config 0 descriptor?? [ 1195.701355][T20053] pctv452e: I2C error -22; AA 02 00 01 00 -> aa 02 31 04 00 01 00 [ 1195.732061][ T5873] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1195.745235][ T5880] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1195.763895][ T5873] uvcvideo 6-1:0.105: No valid video chain found. [ 1195.806293][ T6184] DVB: Unable to find symbol stb0899_attach() [ 1195.816087][ T6184] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1195.859208][ T5956] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1195.916272][ T6184] rc_core: IR keymap rc-tt-1500 not found [ 1195.926061][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 1195.945278][ T6184] Registered IR keymap rc-empty [ 1195.951051][ T5880] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1195.971205][ T6184] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1195.985015][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.015181][ T791] usb 6-1: USB disconnect, device number 81 [ 1196.028140][ T6184] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input59 [ 1196.043280][ T5956] usb 3-1: too many configurations: 47, using maximum allowed: 8 [ 1196.051160][ T5880] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1196.052697][ T6184] dvb-usb: schedule remote query interval to 100 msecs. [ 1196.105325][ T6184] pctv452e: pctv452e_power_ctrl: 0 [ 1196.105325][ T6184] [ 1196.146686][ T6184] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1196.157167][ T5956] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1196.178835][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.186948][ T5956] usb 3-1: Product: syz [ 1196.187391][ T6184] usb 1-1: USB disconnect, device number 66 [ 1196.191179][ T5956] usb 3-1: Manufacturer: syz [ 1196.201933][ T5956] usb 3-1: SerialNumber: syz [ 1196.203449][ T5873] dvb-usb: bulk message failed: -22 (4/0) [ 1196.231612][ T5956] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1196.240633][ T5873] dvb-usb: error -22 while querying for an remote control event. [ 1196.257525][ T5938] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1196.356029][ T6184] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1196.959209][ T5873] usb 4-1: USB disconnect, device number 26 [ 1197.043233][T20079] omfs: Invalid superblock (0) [ 1197.458825][ T5938] usb 3-1: Service connection timeout for: 256 [ 1198.038532][ T5938] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1198.097577][ T30] audit: type=1400 audit(2000001746.915:1113): avc: denied { ioctl } for pid=20091 comm="syz.0.3734" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1198.403391][T20102] omfs: Invalid superblock (0) [ 1198.444674][ T5938] ath9k_htc: Failed to initialize the device [ 1198.457404][ T5938] usb 3-1: ath9k_htc: USB layer deinitialized [ 1198.495498][T20101] omfs: Invalid superblock (0) [ 1198.505420][ T5956] usb 3-1: USB disconnect, device number 12 [ 1198.880027][ T5938] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1199.211419][ T5956] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1200.125986][ T5938] usb 6-1: too many configurations: 39, using maximum allowed: 8 [ 1200.146562][ T5938] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1200.156124][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.182939][ T5938] usb 6-1: Product: syz [ 1200.191348][ T5938] usb 6-1: Manufacturer: syz [ 1200.198708][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 1200.205928][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1200.216974][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1200.228926][ T5938] usb 6-1: SerialNumber: syz [ 1200.234199][ T5956] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1200.244837][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.255772][ T5938] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1200.273622][ T5893] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1200.307233][ T5956] usb 3-1: config 0 descriptor?? [ 1200.337025][ T5956] hub 3-1:0.0: USB hub found [ 1200.718596][ T5956] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1200.948744][ C1] INFO: trying to register non-static key. [ 1200.954570][ C1] The code is fine but needs lockdep annotation, or maybe [ 1200.961659][ C1] you didn't initialize this object before use? [ 1200.967877][ C1] turning off the locking correctness validator. [ 1200.974186][ C1] CPU: 1 UID: 0 PID: 20129 Comm: syz.5.3739 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.974212][ C1] Tainted: [L]=SOFTLOCKUP [ 1200.974218][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1200.974233][ C1] Call Trace: [ 1200.974241][ C1] [ 1200.974248][ C1] dump_stack_lvl+0x100/0x190 [ 1200.974278][ C1] register_lock_class+0x549/0x560 [ 1200.974302][ C1] ? rcu_is_watching+0x12/0xc0 [ 1200.974321][ C1] __lock_acquire+0x3cb/0x2630 [ 1200.974349][ C1] lock_acquire+0x17c/0x330 [ 1200.974372][ C1] ? bcm_can_tx.part.0+0x79/0x890 [ 1200.974403][ C1] _raw_spin_lock_bh+0x33/0x40 [ 1200.974423][ C1] ? bcm_can_tx.part.0+0x79/0x890 [ 1200.974447][ C1] bcm_can_tx.part.0+0x79/0x890 [ 1200.974471][ C1] ? hrtimer_active+0x1c5/0x240 [ 1200.974497][ C1] ? __pfx_bcm_can_tx.part.0+0x10/0x10 [ 1200.974523][ C1] ? hrtimer_try_to_cancel+0x3a/0x2f0 [ 1200.974549][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 1200.974572][ C1] bcm_rx_handler+0x6fa/0x880 [ 1200.974599][ C1] ? __pfx_bcm_rx_handler+0x10/0x10 [ 1200.974624][ C1] can_rcv_filter+0x2a4/0x900 [ 1200.974646][ C1] can_receive+0x2cb/0x500 [ 1200.974668][ C1] ? __pfx_can_rcv+0x10/0x10 [ 1200.974688][ C1] can_rcv+0x29e/0x300 [ 1200.974709][ C1] __netif_receive_skb_one_core+0x1b2/0x1e0 [ 1200.974729][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1200.974748][ C1] ? lock_acquire+0x17c/0x330 [ 1200.974770][ C1] ? process_backlog+0x32a/0x1580 [ 1200.974788][ C1] ? process_backlog+0x32a/0x1580 [ 1200.974806][ C1] __netif_receive_skb+0x1f/0x120 [ 1200.974824][ C1] process_backlog+0x37a/0x1580 [ 1200.974845][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 1200.974865][ C1] net_rx_action+0xa40/0xf20 [ 1200.974887][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1200.974905][ C1] ? __pfx_mark_held_locks+0x10/0x10 [ 1200.974928][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1200.974949][ C1] ? sched_clock+0x38/0x60 [ 1200.974971][ C1] ? sched_clock_cpu+0x6c/0x570 [ 1200.975000][ C1] handle_softirqs+0x1ea/0x910 [ 1200.975021][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1200.975042][ C1] ? __dev_queue_xmit+0x7dc/0x46f0 [ 1200.975060][ C1] do_softirq+0xac/0xe0 [ 1200.975077][ C1] [ 1200.975082][ C1] [ 1200.975088][ C1] __local_bh_enable_ip+0xf8/0x120 [ 1200.975107][ C1] ? __dev_queue_xmit+0x7dc/0x46f0 [ 1200.975123][ C1] __dev_queue_xmit+0x7f1/0x46f0 [ 1200.975144][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1200.975171][ C1] ? __skb_clone+0x570/0x760 [ 1200.975192][ C1] can_send+0x5d7/0xbd0 [ 1200.975213][ C1] ? __pfx_can_send+0x10/0x10 [ 1200.975239][ C1] raw_sendmsg+0xdf9/0x1480 [ 1200.975263][ C1] ? __pfx_raw_sendmsg+0x10/0x10 [ 1200.975288][ C1] ? __pfx_raw_sendmsg+0x10/0x10 [ 1200.975312][ C1] ____sys_sendmsg+0xa54/0xc30 [ 1200.975340][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1200.975368][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 1200.975386][ C1] ___sys_sendmsg+0x190/0x1e0 [ 1200.975402][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.975431][ C1] __sys_sendmsg+0x170/0x220 [ 1200.975452][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 1200.975473][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 1200.975503][ C1] do_syscall_64+0x106/0xf80 [ 1200.975526][ C1] ? clear_bhb_loop+0x40/0x90 [ 1200.975545][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.975563][ C1] RIP: 0033:0x7fb16699bf79 [ 1200.975578][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.975595][ C1] RSP: 002b:00007fb1677d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.975613][ C1] RAX: ffffffffffffffda RBX: 00007fb166c16180 RCX: 00007fb16699bf79 [ 1200.975626][ C1] RDX: 0000000020044850 RSI: 0000200000000240 RDI: 000000000000000b [ 1200.975638][ C1] RBP: 00007fb166a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1200.975649][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.975660][ C1] R13: 00007fb166c16218 R14: 00007fb166c16180 R15: 00007fff63f92048 [ 1200.975678][ C1] [ 1201.829772][ T5893] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1201.841827][ T30] audit: type=1400 audit(2000001749.907:1114): avc: denied { ioctl } for pid=20109 comm="syz.5.3739" path="socket:[66872]" dev="sockfs" ino=66872 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1201.866766][ T5893] ath9k_htc: Failed to initialize the device [ 1201.874668][ T30] audit: type=1400 audit(2000001749.907:1115): avc: denied { connect } for pid=20109 comm="syz.5.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1201.961727][T20124] omfs: Invalid superblock (0) [ 1201.993985][ T5893] usb 6-1: ath9k_htc: USB layer deinitialized [ 1201.995880][ T30] audit: type=1400 audit(2000001749.918:1116): avc: denied { setopt } for pid=20109 comm="syz.5.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1202.826077][ T5956] usbhid 3-1:0.0: can't add hid device: -71 [ 1202.855137][ T5956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1202.943047][ T5938] usb 6-1: USB disconnect, device number 82 [ 1202.956181][ T5956] usb 3-1: USB disconnect, device number 13