last executing test programs: 6m26.013747711s ago: executing program 0 (id=187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x3a) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0x4d0d) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 6m24.52322166s ago: executing program 0 (id=196): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0x3a) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0x11, 0x3, 0x300) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_add_dev(r0, r2, r1, r3, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r7, r8, &(0x7f0000000180)={0x0, 0x8427, 0x500, 0xffffffff, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6m24.103810438s ago: executing program 0 (id=200): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000700)={@dev={0xfe, 0x80, '\x00', 0xf}, 0x8, 0x0, 0x1, 0x0, 0x1ff, 0x9}, 0x20) syz_usb_connect$uac2(0x5, 0x9e, 0x0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$midi(0x6, 0x0, 0x0, &(0x7f0000000b00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x5, 0x2, 0xff, 0x8, 0x1}, 0x2f, &(0x7f0000000900)={0x5, 0xf, 0x2f, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x6, 0xf, 0x1c23, [0xd8, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0x0, 0x22, 0x1, 0xf1, 0xfff9, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x73, 0x81, 0xa}]}, 0x2, [{0x8b, &(0x7f0000000940)=@string={0x8b, 0x3, "9f0cbb300d9be3c7fef9345b0cec2310a4c42554443dd1481d93f4ab498663bbbf916d783b617de6ae01a117d1730e8f78580338eb7172910f11d1032b03a716c195498f1e922fc6d8b6322de2c2c3da465a0a75692c58a7f9a5ba205722bf5567e88f15f66689af4a7938951d4aaabc7a19d15f97bb817cd573e4cb6c80988a68e98db723b09709e5"}}, {0x2, &(0x7f0000000a00)=@string={0x2}}]}) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x60, 0x21, 0xaa, {0xaa, 0x22, "d53dc52c2ac8e2cb797f71fcf86fafbdb156addfc47e2da6091d739c1329adaa10a8f016ec9e2441fe24b60d50053d524b53ab1ca677c8aca0da20839ca9b0cfce04e07c0f23acebf439e6bed12b23dcb42c304fce164fc6eb1a3a3c92a8cf940af940d6e6a8cabe4927e3ae7f25ecd13cda982596809d4a0dca6f915404ab21d8e9f4a7e5c73ba8fab5a5d04718f12ef610fc80addc8fc2d5cae71f44c12efd6247b79d34e4e307"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x2, 0x5, 0x8, 0xc023}}}, &(0x7f0000000640)={0x84, &(0x7f0000000200)={0x0, 0x17, 0x68, "e420bf896852e703350e614f159db8efb9ede9b8f5679e2a85194e3b54813fd6a735849652d465cae8dfa05039c605b845c80ac6f21adfefbdd2869c3cdcbf816babaaf87ad1e00d8308e2d6339a4c17c8439d5c5bed7fffad426273518d9c14f9556fb96a65c274"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x20, 0x40, [0xf000]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000400)={0x40, 0xb, 0x2, "01a5"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000480)={0x40, 0x13, 0x6, @local}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "91bc"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x6}, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x21, 0x1}}) 6m23.04055233s ago: executing program 0 (id=206): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c0009000900000600150002000000140016"], 0x38}}, 0x2000a080) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x400000, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@random="0f539af21094", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x0, 0x0, 0x1, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv2(r5, &(0x7f0000000140)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0x0, 0x6b, 0x1) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0xa1ffffff, 0x0, 0xa9e7d3e3779f8165}, 0x800) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008984}, 0x10) 6m22.660802174s ago: executing program 0 (id=209): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000013006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac004000202080006000300010006000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r1) write(0xffffffffffffffff, &(0x7f0000000400)='0\x00', 0x1) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040)) 6m19.510855908s ago: executing program 0 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x80c4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x4}, 0x1) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r2 = fcntl$dupfd(r0, 0x406, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0xc16) 6m19.330703168s ago: executing program 32 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x80c4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x4}, 0x1) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r2 = fcntl$dupfd(r0, 0x406, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0xc16) 4m29.198669756s ago: executing program 2 (id=649): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000021000108fcfffffffcffffff022000000000be36bfe356713fd89a082ae27b0d"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) (rerun: 32) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) mlockall(0x2) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) statx(0xffffffffffffffff, &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x4, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r2, &(0x7f0000000700)) (async, rerun: 32) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) (rerun: 32) shmctl$SHM_LOCK(r3, 0xb) (async) shmat(r3, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (async) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000120001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="f6ffd1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async, rerun: 32) shmctl$SHM_UNLOCK(r3, 0xc) (async, rerun: 64) r5 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) umount2(0x0, 0x1) (async, rerun: 32) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) (async) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 4m27.934687251s ago: executing program 2 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000140)=0xe996) 4m25.547547726s ago: executing program 2 (id=663): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28f, 0x1001, 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0x5c2, 0xffffffff, 0xb, 0x1fd, 0x1}) r2 = gettid() timer_create(0x1, &(0x7f0000000380)={0x0, 0x1f, 0x4, @tid=r2}, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r3, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x185d, &(0x7f00000003c0)={0x0, 0xc821, 0xc000, 0x4, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x900) r6 = syz_open_procfs(0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x1800, 0x0) pread64(r7, &(0x7f0000000580)=""/198, 0xc6, 0x10000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000280)={0x4000, 0x10, 0x1c}, 0x18) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000208205820540000102030109026e000301be1000080b0001012130810904000000010130000a2401020a008100000009040100000102300009040101010102300009fe1609000200fe980a2525f4000000100700090402000001023000090402010106800a0a252506000000010300"/128], 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f00000002c0)={'NETMAP\x00'}, &(0x7f0000000300)=0x1e) 4m23.203013652s ago: executing program 2 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000400007012bad700000000000067c00000c00bc8008000800"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 4m22.423893983s ago: executing program 2 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x7c) write(r1, &(0x7f0000000800)='1', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0x4}, {0x0, 0xa}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffffa, 0x3, 0x5, 0x6, 0x9, 0x3, 0x6, 0x7f, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x28048884) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020db871a7000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB='\n\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="02000000010000000300"/28], 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000bff000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r11, 0x4400ae8f, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040050}, 0x0) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$poke(0x4, r12, &(0x7f00000011c0), 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r0, r13, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f0000000000)={0x10000, 0xffffffff}) 4m21.695837347s ago: executing program 2 (id=675): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x3a) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0x4d0d) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 4m6.476612024s ago: executing program 33 (id=675): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x3, 0x3a) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0x4d0d) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz2/memory.limit_in_bytes\x00', 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 9.256052869s ago: executing program 6 (id=1659): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x401}}, 0x18) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 7.548691786s ago: executing program 6 (id=1664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000004021dff0010000000e8fe55a1180015000600144003600e1205875d000008000000000000000001402000", 0x2f}], 0x1}, 0x8800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1c, 0x3, "0000000000000000e80300"/24}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) 7.263229225s ago: executing program 6 (id=1668): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r1, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x6}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.240613298s ago: executing program 3 (id=1669): openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000028f6100000001000000002000000040000000000000e04000000000000000000"], 0x0, 0x2a}, 0x28) eventfd(0x5f0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$KDSKBENT(r6, 0x4b47, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) 6.787296094s ago: executing program 6 (id=1671): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b80)='\rHB', 0x3}], 0x1, 0x0, 0x0, 0xc0}], 0x1, 0x48040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = eventfd2(0x8, 0x0) write$eventfd(r1, &(0x7f0000000100)=0xfffffffffffffffd, 0x8) read(r1, &(0x7f0000000180)=""/78, 0x4e) timerfd_create(0x4, 0x80000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0), &(0x7f00000005c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r5, 0x0, 0x0, 0x80000) 6.742010429s ago: executing program 3 (id=1672): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x156, 0x0) dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42) 6.641062506s ago: executing program 4 (id=1673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r2, 0x1, 0x4000, 0xfffffffe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}]}, 0x34}}, 0x0) r3 = syz_io_uring_setup(0xf40, &(0x7f00000002c0)={0x0, 0xc79, 0x80, 0xfffffffd, 0x40055}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000300)={0x7f6e}, 0x30, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r9 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000580) inotify_rm_watch(0xffffffffffffffff, r9) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 6.40867664s ago: executing program 1 (id=1674): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2152, 0xc000, 0xfffffff, 0xce}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202, 0x2) r4 = getpgrp(0xffffffffffffffff) sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x3) openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101, 0x12, 0x5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.345729863s ago: executing program 4 (id=1675): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x401}}, 0x18) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 4.786695093s ago: executing program 6 (id=1676): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) r6 = userfaultfd(0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r7, 0x401845ef, &(0x7f0000000180)={0x9, 0x10000, 0x0, 0x40, 0x9, 0x3}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x2, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "f841a79fd83f6762c41c2fb3d633c6118dff670acaa7ebb027346b6613c883d8a851e24c5e9856c835788a6d795638824b610dffa6db56f0d44d7a1a298f9964"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.219801115s ago: executing program 1 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x80c4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x4}, 0x1) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r2 = fcntl$dupfd(r0, 0x406, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x48001, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) read$FUSE(r2, &(0x7f00000019c0)={0x2020}, 0xc16) 4.218293824s ago: executing program 4 (id=1678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0xf5, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) 4.127552075s ago: executing program 4 (id=1679): sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000020701020000000000000000070000090c0007ffff0001400001"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000000b40)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001b80)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2", 0x27}], 0x1, 0x0, 0x0, 0x20000010}], 0x1, 0x20049001) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/39, 0x27}], 0x1}, 0x40010023) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b57900000000000000000800010000000000080003"], 0x20}}, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) 4.088965834s ago: executing program 5 (id=1680): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "f04e51506a92d0df", "04f29a92088b2c0e6b49aa8a8b4d027e", "3dc31685", "aaaafd546b553076"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x2, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)}, 0x9a9}], 0x1, 0x21, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268e957a720", 0x9}], 0x2}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 3.241866824s ago: executing program 1 (id=1681): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x80140, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$cgroup_int(r3, &(0x7f0000000440)=0x4, 0x12) io_setup(0x5, &(0x7f0000000080)=0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x1003, r2, 0x0}]) close(r1) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, &(0x7f0000000140)) 3.121867612s ago: executing program 5 (id=1682): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r1, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x6}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.092392014s ago: executing program 6 (id=1683): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) prctl$PR_CAPBSET_READ(0x18, 0x15) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002780)=ANY=[], 0xfb5) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x1, 0x4000401, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0xfffffffd, 0x0, 0x3, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x80, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff418, 0x0, 0x0, 0x4, 0x20000, 0xf6b, 0xedc0, 0x0, 0xb, 0x5, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x9, 0x8, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x9, 0x0, 0x0, 0x8, 0x25, 0x4, 0x0, 0xfffffeff, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986, 0x401], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x5, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x400, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0xffffffff, 0x20000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x7fffffc, 0x4, 0xffffffff, 0x0, 0xffffffff, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(0xffffffffffffffff, 0x54a6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06f40908"], 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x80002, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043209aaaaaa95aa120c122b"], 0xc) mount(0x0, &(0x7f0000000280)='mnt/ttyUSB0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x310002, 0x0) r4 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) 3.028364028s ago: executing program 3 (id=1684): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc002) r3 = syz_usbip_server_init(0x2) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x19, 0x4}) quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000302, r4, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r5, 0x0, 0x0, 0x80000) 2.379964848s ago: executing program 5 (id=1686): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "f04e51506a92d0df", "04f29a92088b2c0e6b49aa8a8b4d027e", "3dc31685", "aaaafd546b553076"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x2, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)}, 0x9a9}], 0x1, 0x21, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000000)="11c9064268e957a720", 0x9}], 0x2}, 0x40) 1.796245963s ago: executing program 3 (id=1687): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', r4, 0x17, 0x20, 0x8, 0x6, {{0x11, 0x4, 0x0, 0x17, 0x44, 0x66, 0x0, 0xa, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@end, @timestamp_addr={0x44, 0x1c, 0x9b, 0x1, 0x2, [{@loopback, 0x5}, {@rand_addr=0x64010100, 0x81}, {@broadcast, 0x8}]}, @timestamp={0x44, 0x8, 0x7e, 0x0, 0x9, [0xfffffff8]}, @ra={0x94, 0x4}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendto$packet(r0, &(0x7f0000000280)="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", 0xfd, 0x24040080, &(0x7f0000000540)={0x11, 0x1b, r6, 0x1, 0x9, 0x6, @broadcast}, 0x14) 1.698824591s ago: executing program 1 (id=1688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)={0x38c, r1, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2b6c, 0x46}}}}, [@NL80211_ATTR_TX_RATES={0x364, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x6}, {0x7, 0x3}, {0x6, 0x3}, {0x7, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x7, 0x2}, {0x4, 0x2}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x7}, {}, {0x4, 0x3}, {0x4, 0x3}, {0x7, 0x5}, {0x3, 0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x5}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x5}, {0x3, 0x7}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x1b, 0x12, 0x31, 0x9, 0x5, 0x6, 0x30, 0x36, 0x48, 0x60, 0x48, 0x4, 0x6c, 0x6c, 0x36, 0x6c, 0x30, 0x7b59bdec7eaea1e, 0x9, 0x5, 0x12, 0x6c, 0x24, 0x5, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xf1, 0x100, 0xc83, 0x0, 0x193, 0xc99, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x5, 0x4, 0x7d3, 0x26e1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xb, 0x18]}]}, @NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1, 0x200, 0x200, 0x9, 0x5, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x4, 0x8, 0x7, 0x7, 0x9, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x2}, {0x6, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x6, 0x2}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x5}, {0x3, 0x4}, {0x5, 0x4}, {0x3, 0x4}, {0x4, 0x9}, {0x3, 0x9}, {0x6, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0x4}, {0x1, 0xa}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x4, 0xa}, {0x2}, {0x1, 0x6}, {0x6}, {0x2, 0x8}, {0x6, 0xa}, {0x0, 0x7}, {0x5}, {0x2, 0x8}, {0x4, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0x9}, {0x7, 0xa}, {0x0, 0xa}, {0x6}, {0x7, 0x4}, {0x7, 0x9}, {0x5}, {0x1, 0x9}, {0x5, 0x8}, {0x4, 0x7}, {0x7, 0x9}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0x9}, {0x3, 0x3}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x6}, {0x6, 0x9}, {0x6, 0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0x3}, {0x2, 0x6}, {0x3, 0x4}, {0x2, 0x1}, {0x6, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x6}, {0x2, 0x6}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x7, 0xa}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0xa}, {0x3, 0xa}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x1}, {0x7, 0x6}, {0x7, 0x9}, {0x4, 0x2}, {0x2, 0x7}, {0x7, 0xa}, {0x7, 0xa}, {0x5, 0x9}, {0x0, 0xa}, {}, {}, {0x1, 0xa}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0xa}, {0x7, 0x1}, {0x4, 0x6}, {0x1}, {0x7, 0xa}, {0x2}, {0x4, 0x8}, {0x7, 0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x7}, {0x1, 0x5}, {0x3, 0x9}, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x5}, {0x4, 0x5}, {0x7, 0x1}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf7f, 0x4, 0x5, 0x7, 0xe, 0x0, 0x7ff, 0x1]}}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6d4e, 0x9, 0x401, 0x0, 0xfa5, 0x5, 0xb47, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xa, 0xfff1, 0x2, 0x7, 0x1, 0xe1, 0x6d95]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0x4}, {0x3, 0x7}, {0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x7, 0x7}, {0x3, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0xa}, {0x3}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x5}, {0x4, 0x2}, {0x5, 0x8}, {0x2, 0x2}, {0x5, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0x1}, {0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0xa}, {0x5}, {0x2, 0xa}, {0x6, 0x4}, {0x4, 0x4}, {0x3, 0x8}, {0x0, 0x5}, {0x5, 0x4}, {0x6, 0x8}, {0x3, 0xa}, {0x5, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x6, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x6}, {0x2, 0x7}, {0x2, 0xa}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0x8}, {0x3, 0x6}, {}, {0x0, 0x5}, {0x1, 0x8}, {}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x7, 0x2}, {0x4, 0x4}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa7, 0x1000, 0x4c2c, 0xb6, 0x5, 0x4, 0x2, 0x4602]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7c6, 0xfff8, 0x9, 0x4, 0x9, 0xe2e, 0x1]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x9, 0x30, 0xc, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x3ff, 0x200, 0x7, 0x4, 0x800, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xc2, 0x7, 0x6, 0x4, 0x1, 0x4ad, 0x5]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x60898836412d3b3c, 0x48, 0xc, 0x24, 0x60, 0x0, 0xb, 0x30, 0x12, 0x1, 0x48, 0x30, 0x5, 0xb, 0x0, 0x30, 0x60, 0x12, 0x16, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x3}, {0x3, 0x3}, {0x5, 0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0x4}, {0x5, 0x8}, {0x6, 0x9}, {0x6}, {0x1, 0x7}, {0x7, 0x5}, {0x3, 0x4}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0xa}, {0x2, 0x5}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x8}, {0x7, 0x4}, {0x3, 0x3}, {0x4, 0xa}, {0x1, 0x8}, {0x4, 0x9}, {0x4, 0x3}, {0x1}, {0x5, 0x3}, {0x1, 0x9}, {0x0, 0x6}, {0x4, 0x4}, {0x7, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x4, 0x7}, {0x6, 0x5}, {0x2, 0x5}, {0x1, 0x8}, {0x7, 0x3}, {0x4, 0x8}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x4}, {0x4, 0x1}, {0x1, 0x5}, {0x7, 0x5}, {0x6, 0x6}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x84, 0x7, 0x6, 0x5, 0x8000, 0x9, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x38c}, 0x1, 0x0, 0x0, 0xc000044}, 0x10000801) r3 = fsopen(&(0x7f0000000140)='xfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xd) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000201e04df30400001020301090292000301fa8001080b0002010130400904000000010130000a2401062e00080000001324030304040301080104000008000010050011240a010200000000000000000100000009040100000101", @ANYRESHEX], 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x3c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x49}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xac}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b00060065"], 0x28}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r7, 0x8070587c, &(0x7f0000000180)) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r12, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffb}}, 0x2e) r14 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r14, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r15 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r15, 0x40047438, &(0x7f0000000240)=0x2) 1.471384952s ago: executing program 3 (id=1689): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x8, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x401}}, 0x18) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) umount2(0x0, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$inet(0x2, 0x5, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) 1.459557273s ago: executing program 5 (id=1690): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x422001, 0x0) write(r0, &(0x7f0000000400)="77776e6e3d3078111111111111111133333333333333332c", 0x18) 1.398832803s ago: executing program 5 (id=1691): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b"], 0xffdd) close(r4) close(0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.015666638s ago: executing program 4 (id=1692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xffff, 0xffe0}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socket$packet(0x11, 0x3, 0x300) gettid() socket$kcm(0x10, 0x2, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8}]}, 0x2c}, 0x1, 0x1000000, 0x0, 0x4000000}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 624.113083ms ago: executing program 4 (id=1693): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) r6 = userfaultfd(0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) ioctl$EVIOCSABS2F(r7, 0x401845ef, &(0x7f0000000180)={0x9, 0x10000, 0x0, 0x40, 0x9, 0x3}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x2, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "f841a79fd83f6762c41c2fb3d633c6118dff670acaa7ebb027346b6613c883d8a851e24c5e9856c835788a6d795638824b610dffa6db56f0d44d7a1a298f9964"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 529.221766ms ago: executing program 3 (id=1694): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x100000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x5f23, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0xfff, 0x3, 0x0, 0x0, 0x95, 0x0, 0x0, 0x9, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x2000000000000000, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x40000, 0xfffffffffffffffd, 0x71]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioprio_get$pid(0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x1508}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmmsg(r1, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="fd688abf7deed46507fed1c62e163539b2460bb0b8e5baf8fe089958fc36382c2c86f7dce9f0698043bb973a7f67aa4ab016c1056d1fccad24b1fd22a50fb22840366c76276c48dd", 0x48}], 0x1}}], 0x1, 0x880) writev(r1, &(0x7f0000000040), 0x2) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write(r2, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) read$FUSE(r2, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000240)={0x81, 0x7f}) rt_sigqueueinfo(r3, 0x23, &(0x7f0000002800)={0xb, 0x4, 0x9}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0401) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000700)={{0xffffffffffffffff, 0x2, 0x8, 0x1, 0x1}, 0x4, 0xfffffffe, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x7, 0x2, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x400201) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4 \x00\x00', @ANYRES16=0x0, @ANYBLOB="e9b229bd7000fedbdf250b000000050030000000000008003a008ffdffff08002c00090000000500350008000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ptrace$getsig(0x4202, r3, 0x922, &(0x7f00000002c0)) 224.167165ms ago: executing program 5 (id=1695): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r1, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x6}, 0x10) r3 = io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0x1443, 0x8, 0xfffffffe, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1696): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0x1443, 0x8, 0xfffffffe, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): alNumber: syz [ 438.845826][ T46] usb 6-1: config 0 descriptor?? [ 438.850938][ T29] audit: type=1800 audit(1786005564.708:5591): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220762 res=0 errno=0 [ 438.874263][ T29] audit: type=1800 audit(1786005564.708:5592): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=220794 res=0 errno=0 [ 438.898261][ T46] usb 6-1: selecting invalid altsetting 1 [ 438.915894][ T46] dvb_ttusb_budget: ttusb_init_controller: error [ 438.930793][ T46] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 438.965570][ T29] audit: type=1800 audit(1786005564.708:5593): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=220769 res=0 errno=0 [ 438.992467][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 439.005868][ T29] audit: type=1800 audit(1786005564.738:5594): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=220770 res=0 errno=0 [ 439.042884][ T46] DVB: Unable to find symbol stv0299_attach() [ 439.056537][ T29] audit: type=1400 audit(1786005564.808:5595): avc: denied { read } for pid=11519 comm="syz.1.1402" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 439.099464][ T46] DVB: Unable to find symbol tda8083_attach() [ 439.107346][ T46] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 439.145329][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 439.195052][ T46] usb 6-1: USB disconnect, device number 39 [ 439.208527][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 439.255203][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 439.288600][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 439.331046][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.365779][T11512] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.381302][T11512] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.407450][T11512] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.428665][T11512] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.455142][ T9] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 439.620096][ T5805] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 439.726785][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1396'. [ 439.771387][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.781932][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 439.805903][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.857127][ T5805] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 439.869825][ T9] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 439.888309][ T9] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 439.905630][ T5805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 439.915063][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.963870][ T5805] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 439.976434][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.015423][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.057930][ T5805] usb 2-1: Product: syz [ 440.076359][ T5805] usb 2-1: Manufacturer: syz [ 440.093875][ T5805] usb 2-1: SerialNumber: syz [ 440.119174][ T5805] usb 2-1: config 0 descriptor?? [ 440.141585][T11538] nfs: Unknown parameter 'configfs' [ 440.419912][ T5711] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 441.147021][ T5805] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input49 [ 441.290829][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 441.308094][T11546] 9pnet_fd: Insufficient options for proto=fd [ 441.331938][ T5711] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.351130][ T5711] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.388607][ T5711] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 441.443852][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.527987][ T5711] usb 6-1: Product: syz [ 441.585463][ T5711] usb 6-1: Manufacturer: syz [ 441.750542][ T5711] usb 6-1: SerialNumber: syz [ 442.272986][ T5805] rc_core: IR keymap rc-imon-pad not found [ 442.288013][ T5805] Registered IR keymap rc-empty [ 442.295254][ T804] usb 4-1: USB disconnect, device number 54 [ 442.312010][ T5805] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 442.345331][ T804] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 442.384834][ T5805] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 442.437124][ T804] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 442.451351][ T5805] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 442.474001][ T804] mos7720 4-1:1.0: device disconnected [ 442.494436][ T5805] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input50 [ 442.554618][ T5805] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:57> initialized [ 442.735959][T11554] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 443.291061][ T5711] usb 6-1: unit 48 not found! [ 443.296862][ T5711] usb 6-1: unit 0 not found! [ 443.349950][ T804] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 443.369700][ T5711] usb 6-1: USB disconnect, device number 40 [ 443.523283][ T804] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.573638][ T804] usb 4-1: config 0 has no interface number 0 [ 443.575195][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 443.575207][ T29] audit: type=1800 audit(1786005569.438:5701): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="vendor" dev="sysfs" ino=221299 res=0 errno=0 [ 443.682711][ T29] audit: type=1400 audit(1786005569.468:5702): avc: denied { create } for pid=11562 comm="syz.6.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 443.703719][ T29] audit: type=1400 audit(1786005569.468:5703): avc: denied { ioctl } for pid=11562 comm="syz.6.1412" path="socket:[36564]" dev="sockfs" ino=36564 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 443.704384][T11564] syzkaller1: entered promiscuous mode [ 443.734756][ T804] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 443.754510][ T804] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 443.797969][ T804] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 443.818729][T11564] syzkaller1: entered allmulticast mode [ 443.837527][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.837664][ T29] audit: type=1800 audit(1786005569.468:5704): pid=5618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=221300 res=0 errno=0 [ 443.886958][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 443.894204][ T5733] usb 2-1: USB disconnect, device number 57 [ 443.908667][ T804] usb 4-1: config 0 descriptor?? [ 443.921359][T11551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 443.986302][ T804] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 444.022191][ T29] audit: type=1800 audit(1786005569.468:5705): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 444.064448][ T29] audit: type=1800 audit(1786005569.478:5706): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221530 res=0 errno=0 [ 444.163596][ T29] audit: type=1800 audit(1786005569.498:5707): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 444.269093][ T29] audit: type=1800 audit(1786005569.498:5708): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221543 res=0 errno=0 [ 444.355638][ T29] audit: type=1800 audit(1786005569.738:5709): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 444.377567][ T29] audit: type=1800 audit(1786005569.798:5710): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221692 res=0 errno=0 [ 444.719948][ T5733] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 444.786493][T11598] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 444.789880][ T5711] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 444.812704][T11598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.823933][T11598] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 444.834073][T11598] bond0: entered allmulticast mode [ 444.845640][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1422'. [ 444.856978][T11598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11598 comm=syz.4.1422 [ 444.886824][T11598] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 444.906044][ T5733] usb 7-1: Using ep0 maxpacket: 16 [ 444.935118][ T5733] usb 7-1: unable to get BOS descriptor or descriptor too short [ 444.948954][ T5733] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 444.955236][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 444.959684][ T5733] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 444.992949][ T5711] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 445.017349][ T5711] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.052192][ T5711] usb 2-1: config 0 has no interface number 0 [ 445.085422][ T5711] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 445.118778][ T5711] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 445.119040][ T5733] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 445.149570][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.157927][ T5733] usb 7-1: Product: syz [ 445.162427][ T5733] usb 7-1: Manufacturer: syz [ 445.170443][ T5733] usb 7-1: SerialNumber: syz [ 445.174544][ T5711] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 445.227556][ T5711] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 445.239733][ T5711] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 445.280228][ T5711] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 445.315765][ T6020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.334665][ T5711] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 445.365443][ T5711] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 445.387795][ T5711] usb 2-1: config 0 interface 239 has no altsetting 0 [ 445.404256][ T5711] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 445.426178][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.440846][ T5711] usb 2-1: Product: syz [ 445.447755][ T5711] usb 2-1: Manufacturer: syz [ 445.450841][ T9] usb 4-1: USB disconnect, device number 55 [ 445.454116][ T5711] usb 2-1: SerialNumber: syz [ 445.480933][T11590] SELinux: policydb version 0 does not match my version range 15-35 [ 445.502027][T11590] SELinux: failed to load policy [ 445.518256][ T6020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.533866][ T5711] usb 2-1: config 0 descriptor?? [ 445.545916][T11592] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 445.563641][T11592] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 445.580252][ T5718] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 445.599976][ T5805] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 445.821270][ T5805] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 445.821334][ T5718] usb 6-1: Using ep0 maxpacket: 16 [ 445.972601][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.987091][ T5718] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 445.998840][ T5718] usb 6-1: config 0 interface 0 has no altsetting 0 [ 446.005979][ T5613] Bluetooth: hci1: urb ffff888074a95b00 submission failed (90) [ 446.029369][ T5718] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 446.039910][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.048169][ T5718] usb 6-1: Product: syz [ 446.053769][ T5805] usb 5-1: config 0 descriptor?? [ 446.071313][ T5718] usb 6-1: Manufacturer: syz [ 446.076557][ T5718] usb 6-1: SerialNumber: syz [ 446.094523][ T5718] usb 6-1: config 0 descriptor?? [ 446.126451][ T5805] cp210x 5-1:0.0: cp210x converter detected [ 446.168509][ T6020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.194726][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1420'. [ 446.293843][ T6020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.335025][ T5718] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input51 [ 446.388400][ T5711] usb 2-1: USB disconnect, device number 58 [ 446.560336][ T5805] usb 5-1: cp210x converter now attached to ttyUSB0 [ 446.669972][ T5718] rc_core: IR keymap rc-imon-pad not found [ 446.686704][ T5718] Registered IR keymap rc-empty [ 446.706692][ T5718] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 446.746409][ T5718] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 446.765486][ T5719] usb 5-1: USB disconnect, device number 55 [ 446.796214][ T5719] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 446.849477][ T5718] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 446.871284][ T5719] cp210x 5-1:0.0: device disconnected [ 446.888921][ T5718] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input52 [ 446.930236][ T5718] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:41> initialized [ 446.946621][ T6020] bridge_slave_1: left allmulticast mode [ 446.965318][ T6020] bridge_slave_1: left promiscuous mode [ 446.985292][ T6020] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.038515][ T6020] bridge_slave_0: left allmulticast mode [ 447.058497][ C0] imon 6-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0) [ 447.078852][ T6020] bridge_slave_0: left promiscuous mode [ 447.104571][ T6020] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.740008][ T804] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 448.746430][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 448.746446][ T29] audit: type=1400 audit(1786005574.598:5861): avc: denied { write } for pid=11614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.793130][ T6020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.798334][ T29] audit: type=1400 audit(1786005574.648:5862): avc: denied { add_name } for pid=11614 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 448.861997][ T29] audit: type=1400 audit(1786005574.648:5863): avc: denied { create } for pid=11614 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.907481][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 448.919775][ T29] audit: type=1400 audit(1786005574.648:5864): avc: denied { write } for pid=11614 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=8798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 448.959479][ T5711] usb 6-1: USB disconnect, device number 41 [ 448.973498][ T804] usb 4-1: Using ep0 maxpacket: 8 [ 448.980775][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 449.009513][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.019304][ T804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.048067][ T6020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.080493][ T6020] bond0 (unregistering): Released all slaves [ 449.081872][ T29] audit: type=1400 audit(1786005574.648:5865): avc: denied { append } for pid=11614 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=8798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.105498][ T804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 236 [ 449.142179][ T804] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 449.194412][T11643] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 449.200953][T11643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 449.216609][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.233303][ T804] usb 4-1: config 0 descriptor?? [ 449.265698][T11627] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 449.275204][T11643] vhci_hcd vhci_hcd.0: Device attached [ 449.281799][ T29] audit: type=1800 audit(1786005574.838:5866): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 449.296223][ T804] hub 4-1:0.0: bad descriptor, ignoring hub [ 449.314632][T11644] vhci_hcd: connection closed [ 449.319616][ T191] vhci_hcd vhci_hcd.5: stop threads [ 449.333428][ T804] hub 4-1:0.0: probe with driver hub failed with error -5 [ 449.395816][ T5733] usb 7-1: unit 3 not found! [ 449.404959][ T191] vhci_hcd vhci_hcd.5: release socket [ 449.439822][ T191] vhci_hcd vhci_hcd.5: disconnect device [ 449.455256][ T46] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 449.461431][ T29] audit: type=1400 audit(1786005574.888:5867): avc: denied { write } for pid=11640 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.484529][ T29] audit: type=1400 audit(1786005574.888:5868): avc: denied { remove_name } for pid=11640 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=8798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 449.508502][ T29] audit: type=1400 audit(1786005574.888:5869): avc: denied { unlink } for pid=11640 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=8798 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 449.536795][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 449.542128][ T804] usb 4-1: USB disconnect, device number 56 [ 449.670967][ T29] audit: type=1800 audit(1786005574.988:5870): pid=11643 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1430" name="attach" dev="sysfs" ino=33616 res=0 errno=0 [ 450.167302][ T5733] usb 7-1: USB disconnect, device number 27 [ 450.486938][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1436'. [ 450.554247][ T6035] udevd[6035]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.569904][ T5711] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 450.772913][ T5711] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 450.807604][ T5711] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 450.835275][T11669] efs: cannot read volume header [ 450.847812][ T5711] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 450.882648][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 450.929101][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 450.982294][ T5711] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 451.009214][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 451.032306][ T5711] usb 5-1: Product: syz [ 451.062803][ T5711] usb 5-1: Manufacturer: syz [ 451.107710][ T5711] cdc_wdm 5-1:1.0: skipping garbage [ 451.129484][ T5711] cdc_wdm 5-1:1.0: skipping garbage [ 451.187159][ T5711] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 451.196378][ T5711] cdc_wdm 5-1:1.0: Unknown control protocol [ 451.566300][ T6020] hsr_slave_0: left promiscuous mode [ 451.583692][ T6020] hsr_slave_1: left promiscuous mode [ 451.598819][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.623170][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.700513][ T5711] usb 5-1: USB disconnect, device number 56 [ 452.103908][ T6020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.128035][ T6020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.325537][ T6020] veth1_macvtap: left promiscuous mode [ 452.338212][ T6020] veth0_macvtap: left promiscuous mode [ 452.787630][ T6020] veth1_vlan: left promiscuous mode [ 452.792959][ T6020] veth0_vlan: left promiscuous mode [ 453.935122][ T6020] team0 (unregistering): Port device team_slave_1 removed [ 453.947611][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 453.947626][ T29] audit: type=1800 audit(1786005578.803:5952): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 453.975762][ T6020] team0 (unregistering): Port device team_slave_0 removed [ 454.081349][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 454.100957][T11730] smc: net device lo applied user defined pnetid SYZ0 [ 454.234297][ T29] audit: type=1800 audit(1786005579.093:5953): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 454.268466][ T29] audit: type=1800 audit(1786005579.123:5954): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15683 res=0 errno=0 [ 454.339187][ T29] audit: type=1800 audit(1786005579.193:5955): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 454.473503][ T29] audit: type=1800 audit(1786005579.243:5956): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 454.615661][T11751] 9pnet_fd: Insufficient options for proto=fd [ 455.813919][ T29] audit: type=1800 audit(1786005579.473:5957): pid=11751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1453" name="mem_sleep" dev="sysfs" ino=1413 res=0 errno=0 [ 455.985251][ T29] audit: type=1400 audit(1786005579.493:5958): avc: denied { mount } for pid=11744 comm="syz.3.1453" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 456.138529][ T29] audit: type=1400 audit(1786005579.503:5959): avc: denied { create } for pid=11744 comm="syz.3.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 456.220468][ T5805] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 456.246528][ T29] audit: type=1400 audit(1786005579.513:5960): avc: denied { append } for pid=11744 comm="syz.3.1453" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 456.342171][ T29] audit: type=1400 audit(1786005580.893:5961): avc: denied { unmount } for pid=5612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 456.374350][T11766] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1459'. [ 456.430243][ T5718] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 456.460100][ T5805] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 456.473636][ T5805] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 456.510610][ T5805] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 456.539885][ T5805] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 456.561128][ T5805] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 456.581128][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.602544][T11752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 456.610443][T11752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 456.619583][T11752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 456.628535][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 456.628656][T11752] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 456.645028][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 456.647108][ T5805] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 456.665303][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 456.679815][ T5719] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 456.690717][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 456.715924][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 456.726579][ T5718] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 456.739277][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.751611][T11759] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 456.759998][T11759] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 456.769383][T11759] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 456.777501][T11759] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 456.786761][ T5718] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 456.830042][ T5733] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 456.872598][ T5719] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 456.887642][ T5719] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 456.902996][ T5805] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 456.925595][T11785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.928372][ T5719] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 456.957356][ T5805] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 456.985882][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.990288][ T5733] usb 5-1: device descriptor read/64, error -71 [ 457.006944][ T5719] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 457.026385][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.044432][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.066208][ T5719] usb 7-1: Product: syz [ 457.081473][ T5718] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB2 [ 457.102725][ T5719] usb 7-1: Manufacturer: syz [ 457.119171][ T5719] usb 7-1: SerialNumber: syz [ 457.133363][ T5718] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB3 [ 457.148631][ T5719] usb 7-1: config 0 descriptor?? [ 457.164616][T11795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.174732][T11769] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 457.203745][T11769] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 457.205683][T11795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.228600][ T5719] usb 7-1: ucan: probing device on interface #0 [ 457.290039][ T5733] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 457.399026][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 457.419952][ T5733] usb 5-1: device descriptor read/64, error -71 [ 457.541042][ T5733] usb usb5-port1: attempt power cycle [ 457.641677][ T5719] usb 7-1: ucan: failed to retrieve device info [ 457.652471][ T5719] usb 7-1: ucan: probe failed; try to update the device firmware [ 457.678456][ T5719] usb 7-1: USB disconnect, device number 28 [ 457.899965][ T5733] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 457.930860][ T5733] usb 5-1: device descriptor read/8, error -71 [ 458.020139][ T5718] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 458.179845][ T5733] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 458.188965][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 458.196507][ T5718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.207942][ T5718] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 458.217192][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.226868][ T5733] usb 5-1: device descriptor read/8, error -71 [ 458.239254][ T5718] usb 6-1: config 0 descriptor?? [ 458.340248][ T5733] usb usb5-port1: unable to enumerate USB device [ 458.561518][ T5711] usb 2-1: USB disconnect, device number 59 [ 459.043897][ T5718] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 459.098760][ T5711] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 459.116755][ T5805] usb 4-1: USB disconnect, device number 57 [ 459.129467][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 459.129483][ T29] audit: type=1800 audit(1786005583.973:6025): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 459.187686][ T5711] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 459.204515][ T5805] moschip7720 ttyUSB2: Moschip 2 port adapter converter now disconnected from ttyUSB2 [ 459.241182][ T5711] mos7720 2-1:1.0: device disconnected [ 459.267991][ T5805] moschip7720 ttyUSB3: Moschip 2 port adapter converter now disconnected from ttyUSB3 [ 459.281145][T11822] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 459.287679][T11822] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 459.304411][T11822] vhci_hcd vhci_hcd.0: Device attached [ 459.310841][ T29] audit: type=1800 audit(1786005583.983:6026): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224739 res=0 errno=0 [ 459.339363][ T5805] mos7720 4-1:1.0: device disconnected [ 459.373522][T11823] vhci_hcd: connection closed [ 459.386683][ T6020] vhci_hcd vhci_hcd.6: stop threads [ 459.400733][T11826] tmpfs: Unknown parameter 'grpquoñßËT˜A÷5‰#iBH~>ÕSRº–õ>ˆ«w6¼úOûð“z gþõ÷(à›”N·"adGCÀ$Ûút?þIœý÷f0–-Á_ô¶zyÙ‘÷{.O«r}%»Z)“‡¿TVäíÞEc*nù™7K¡b!.8XQt¿ÄQ<>}‰' [ 459.431273][ T29] audit: type=1800 audit(1786005584.023:6027): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 459.479166][ T6020] vhci_hcd vhci_hcd.6: release socket [ 459.502542][ T6020] vhci_hcd vhci_hcd.6: disconnect device [ 459.524249][ T29] audit: type=1800 audit(1786005584.123:6028): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1466" name="attach" dev="sysfs" ino=33616 res=0 errno=0 [ 459.545733][ T5718] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 459.794952][ T29] audit: type=1800 audit(1786005584.163:6029): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 460.415154][ T29] audit: type=1800 audit(1786005585.273:6030): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 460.895797][ T29] audit: type=1800 audit(1786005585.743:6031): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15683 res=0 errno=0 [ 461.192017][ T29] audit: type=1400 audit(1786005585.943:6032): avc: denied { read write } for pid=11833 comm="syz.6.1469" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 461.505178][ T29] audit: type=1400 audit(1786005585.943:6033): avc: denied { open } for pid=11833 comm="syz.6.1469" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 461.593541][ T29] audit: type=1800 audit(1786005586.043:6034): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 461.820160][ T5805] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 461.964419][T11851] 9pnet_fd: Insufficient options for proto=fd [ 462.780149][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 462.845304][ T5805] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 462.928273][ T5805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.988072][ T46] usb 6-1: USB disconnect, device number 42 [ 463.041846][ T5805] usb 4-1: config 0 has no interface number 0 [ 463.109462][ T5805] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 463.181902][ T5805] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 463.209457][ T5805] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 463.259083][ T5805] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 463.259377][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 463.279340][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 463.297273][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 463.305565][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 463.316511][ T5805] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 463.369640][ T5805] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 463.392876][T11853] ceph: No mds server is up or the cluster is laggy [ 463.444312][ T5805] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 463.475308][ T5805] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 463.514582][ T5805] usb 4-1: config 0 interface 239 has no altsetting 0 [ 463.532397][ T5805] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 463.549923][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.560412][ T5805] usb 4-1: Product: syz [ 463.572428][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 463.581794][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 463.589856][ T5805] usb 4-1: Manufacturer: syz [ 463.599803][ T5805] usb 4-1: SerialNumber: syz [ 463.619458][ T5805] usb 4-1: config 0 descriptor?? [ 463.642664][T11842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 463.667873][T11842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 463.751436][ T5613] Bluetooth: hci1: urb ffff888029b82500 submission failed (90) [ 463.794202][T11855] FAULT_INJECTION: forcing a failure. [ 463.794202][T11855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.821936][T11855] CPU: 0 UID: 0 PID: 11855 Comm: syz.4.1475 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.821968][T11855] Tainted: [L]=SOFTLOCKUP [ 463.821974][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 463.821984][T11855] Call Trace: [ 463.821990][T11855] [ 463.821997][T11855] dump_stack_lvl+0x100/0x190 [ 463.822023][T11855] should_fail_ex.cold+0x5/0xa [ 463.822046][T11855] _copy_to_user+0x32/0xd0 [ 463.822074][T11855] simple_read_from_buffer+0xcb/0x170 [ 463.822095][T11855] proc_fail_nth_read+0x1af/0x230 [ 463.822124][T11855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.822152][T11855] ? rw_verify_area+0xce/0x6d0 [ 463.822177][T11855] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.822203][T11855] vfs_read+0x1e4/0xb40 [ 463.822233][T11855] ? __pfx_vfs_read+0x10/0x10 [ 463.822259][T11855] ? __fget_files+0x215/0x3d0 [ 463.822284][T11855] ? __fget_files+0x21f/0x3d0 [ 463.822309][T11855] ksys_read+0x12a/0x250 [ 463.822335][T11855] ? __pfx_ksys_read+0x10/0x10 [ 463.822370][T11855] do_syscall_64+0x115/0x870 [ 463.822391][T11855] ? clear_bhb_loop+0x40/0x90 [ 463.822414][T11855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.822432][T11855] RIP: 0033:0x7f2f1a75e90e [ 463.822445][T11855] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.822461][T11855] RSP: 002b:00007f2f1b64bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.822477][T11855] RAX: ffffffffffffffda RBX: 00007f2f1b64c6c0 RCX: 00007f2f1a75e90e [ 463.822488][T11855] RDX: 000000000000000f RSI: 00007f2f1b64c0a0 RDI: 0000000000000009 [ 463.822498][T11855] RBP: 00007f2f1b64c090 R08: 0000000000000000 R09: 0000000000000000 [ 463.822508][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.822518][T11855] R13: 00007f2f1aa26038 R14: 00007f2f1aa25fa0 R15: 00007fff5ce68068 [ 463.822542][T11855] [ 465.191217][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 465.191234][ T29] audit: type=1800 audit(1786005590.053:6084): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 465.295813][ T5719] usb 4-1: USB disconnect, device number 58 [ 465.341855][ T29] audit: type=1800 audit(1786005590.133:6085): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 465.403014][T11886] binder: 11885:11886 ioctl 4030582a 200000000000 returned -22 [ 465.438028][ T29] audit: type=1800 audit(1786005590.173:6086): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 465.460637][T11890] FAULT_INJECTION: forcing a failure. [ 465.460637][T11890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.512260][T11890] CPU: 0 UID: 0 PID: 11890 Comm: syz.4.1487 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.512292][T11890] Tainted: [L]=SOFTLOCKUP [ 465.512298][T11890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 465.512308][T11890] Call Trace: [ 465.512315][T11890] [ 465.512323][T11890] dump_stack_lvl+0x100/0x190 [ 465.512350][T11890] should_fail_ex.cold+0x5/0xa [ 465.512374][T11890] _copy_from_iter+0x1f4/0x1690 [ 465.512402][T11890] ? __asan_memset+0x23/0x50 [ 465.512422][T11890] ? __pfx__copy_from_iter+0x10/0x10 [ 465.512445][T11890] ? __pfx___alloc_skb+0x10/0x10 [ 465.512478][T11890] netlink_sendmsg+0x808/0xda0 [ 465.512503][T11890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.512525][T11890] ? selinux_socket_sendmsg+0x198/0x2f0 [ 465.512557][T11890] ____sys_sendmsg+0xa4d/0xbe0 [ 465.512584][T11890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.512606][T11890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.512645][T11890] ___sys_sendmsg+0x190/0x1e0 [ 465.512664][T11890] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.512681][T11890] ? __lock_acquire+0x49f/0x1a40 [ 465.512704][T11890] ? get_pid_task+0x106/0x250 [ 465.512747][T11890] __sys_sendmsg+0x160/0x210 [ 465.512771][T11890] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.512807][T11890] do_syscall_64+0x115/0x870 [ 465.512829][T11890] ? clear_bhb_loop+0x40/0x90 [ 465.512850][T11890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.512868][T11890] RIP: 0033:0x7f2f1a79e0d9 [ 465.512883][T11890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.512899][T11890] RSP: 002b:00007f2f1b64c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.512917][T11890] RAX: ffffffffffffffda RBX: 00007f2f1aa25fa0 RCX: 00007f2f1a79e0d9 [ 465.512928][T11890] RDX: 0000000020000800 RSI: 0000200000003700 RDI: 0000000000000003 [ 465.512938][T11890] RBP: 00007f2f1b64c090 R08: 0000000000000000 R09: 0000000000000000 [ 465.512948][T11890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.512959][T11890] R13: 00007f2f1aa26038 R14: 00007f2f1aa25fa0 R15: 00007fff5ce68068 [ 465.512982][T11890] [ 465.940812][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 465.965110][ T29] audit: type=1800 audit(1786005590.193:6087): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 466.114996][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 466.115078][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 466.115107][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 466.115134][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 466.115276][ T9] usb 7-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 466.115304][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.151648][ T29] audit: type=1800 audit(1786005590.253:6088): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15683 res=0 errno=0 [ 466.151832][ T29] audit: type=1800 audit(1786005590.343:6089): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 466.151988][ T29] audit: type=1800 audit(1786005590.623:6090): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1485" name="new_device" dev="sysfs" ino=24947 res=0 errno=0 [ 466.189951][T11889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 466.190426][T11889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 466.191049][T11889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 466.191515][T11889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 466.280012][ T9] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 466.310533][ T29] audit: type=1800 audit(1786005591.163:6091): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 466.310577][ T29] audit: type=1800 audit(1786005591.163:6092): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1490" name="resume" dev="sysfs" ino=1437 res=0 errno=0 [ 466.315083][ T29] audit: type=1800 audit(1786005591.173:6093): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 466.400626][ T9] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 466.417971][ T9] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 466.570259][ T5719] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 466.597334][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.597672][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.774982][ T5719] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 466.775013][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.775034][ T5719] usb 5-1: Product: syz [ 466.775050][ T5719] usb 5-1: Manufacturer: syz [ 466.775065][ T5719] usb 5-1: SerialNumber: syz [ 467.011165][ T5719] gspca_main: pac207-2.14.0 probing 093a:2476 [ 467.012053][ T5719] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 467.014339][ T5719] uvcvideo 5-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 467.014368][ T5719] uvcvideo 5-1:13.0: No valid video chain found. [ 467.016710][ T5719] usb 5-1: USB disconnect, device number 61 [ 467.300470][T11918] FAULT_INJECTION: forcing a failure. [ 467.300470][T11918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.327430][T11918] CPU: 0 UID: 0 PID: 11918 Comm: syz.5.1494 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.327463][T11918] Tainted: [L]=SOFTLOCKUP [ 467.327469][T11918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 467.327480][T11918] Call Trace: [ 467.327487][T11918] [ 467.327495][T11918] dump_stack_lvl+0x100/0x190 [ 467.327525][T11918] should_fail_ex.cold+0x5/0xa [ 467.327548][T11918] _copy_to_user+0x32/0xd0 [ 467.327577][T11918] simple_read_from_buffer+0xcb/0x170 [ 467.327599][T11918] proc_fail_nth_read+0x1af/0x230 [ 467.327629][T11918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.327659][T11918] ? rw_verify_area+0xce/0x6d0 [ 467.327685][T11918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.327711][T11918] vfs_read+0x1e4/0xb40 [ 467.327742][T11918] ? __pfx_vfs_read+0x10/0x10 [ 467.327769][T11918] ? __fget_files+0x215/0x3d0 [ 467.327794][T11918] ? __fget_files+0x21f/0x3d0 [ 467.327819][T11918] ksys_read+0x12a/0x250 [ 467.327845][T11918] ? __pfx_ksys_read+0x10/0x10 [ 467.327882][T11918] do_syscall_64+0x115/0x870 [ 467.327904][T11918] ? clear_bhb_loop+0x40/0x90 [ 467.327926][T11918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.327945][T11918] RIP: 0033:0x7fca2035e90e [ 467.327961][T11918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 467.327978][T11918] RSP: 002b:00007fca2126afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.327996][T11918] RAX: ffffffffffffffda RBX: 00007fca2126b6c0 RCX: 00007fca2035e90e [ 467.328009][T11918] RDX: 000000000000000f RSI: 00007fca2126b0a0 RDI: 0000000000000004 [ 467.328020][T11918] RBP: 00007fca2126b090 R08: 0000000000000000 R09: 0000000000000000 [ 467.328031][T11918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.328041][T11918] R13: 00007fca20626038 R14: 00007fca20625fa0 R15: 00007ffcc82e7328 [ 467.328067][T11918] [ 467.609293][T11920] lo speed is unknown, defaulting to 1000 [ 467.924954][T11928] 9pnet_fd: Insufficient options for proto=fd [ 468.657381][ T5733] usb 7-1: USB disconnect, device number 29 [ 468.764228][ T5733] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 468.827744][ T5733] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 468.884824][ T5733] mos7720 7-1:1.0: device disconnected [ 469.057777][T11940] binder: 11938:11940 ioctl 4030582a 200000000000 returned -22 [ 470.077779][T11954] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 470.248123][T11961] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 0, id = 0 [ 470.468606][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 470.468899][ T29] audit: type=1800 audit(1786005595.323:6140): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1504" name="profiling" dev="sysfs" ino=13 res=0 errno=0 [ 470.640857][ T29] audit: type=1800 audit(1786005595.503:6141): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 470.700648][T11920] netdevsim0 speed is unknown, defaulting to 1000 [ 470.748115][ T29] audit: type=1400 audit(1786005595.593:6142): avc: denied { write } for pid=11964 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.824484][ T29] audit: type=1800 audit(1786005595.633:6143): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 470.938237][ T29] audit: type=1800 audit(1786005595.793:6144): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 471.049848][ T29] audit: type=1800 audit(1786005595.903:6145): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 471.125037][ T29] audit: type=1400 audit(1786005595.983:6146): avc: denied { read } for pid=11978 comm="syz.5.1508" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.178576][ T29] audit: type=1400 audit(1786005596.013:6147): avc: denied { open } for pid=11978 comm="syz.5.1508" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.236694][ T29] audit: type=1400 audit(1786005596.033:6148): avc: denied { mount } for pid=11978 comm="syz.5.1508" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 471.279861][ T5711] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 471.331290][ T29] audit: type=1400 audit(1786005596.033:6149): avc: denied { search } for pid=11978 comm="syz.5.1508" name="/" dev="configfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 471.435299][ T5711] usb 7-1: not running at top speed; connect to a high speed hub [ 471.451291][ T5711] usb 7-1: config 0 has no interfaces? [ 471.478483][ T5711] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 471.501800][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 471.524072][ T5711] usb 7-1: Product: syz [ 471.544288][ T5711] usb 7-1: Manufacturer: syz [ 471.565517][ T5711] usb 7-1: config 0 descriptor?? [ 471.997798][ T5711] usb 7-1: USB disconnect, device number 30 [ 472.658816][T11993] FAULT_INJECTION: forcing a failure. [ 472.658816][T11993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.676142][T11993] CPU: 0 UID: 0 PID: 11993 Comm: syz.5.1510 Tainted: G L syzkaller #0 PREEMPT(full) [ 472.676170][T11993] Tainted: [L]=SOFTLOCKUP [ 472.676175][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 472.676184][T11993] Call Trace: [ 472.676190][T11993] [ 472.676198][T11993] dump_stack_lvl+0x100/0x190 [ 472.676226][T11993] should_fail_ex.cold+0x5/0xa [ 472.676250][T11993] _copy_from_user+0x2e/0xd0 [ 472.676277][T11993] ksys_shmctl.constprop.0+0x27e/0x390 [ 472.676298][T11993] ? __pfx_ksys_shmctl.constprop.0+0x10/0x10 [ 472.676319][T11993] ? __mutex_unlock_slowpath+0x35d/0x930 [ 472.676346][T11993] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 472.676369][T11993] ? __fget_files+0x21f/0x3d0 [ 472.676400][T11993] ? syscall_user_dispatch+0x76/0x130 [ 472.676428][T11993] do_syscall_64+0x115/0x870 [ 472.676449][T11993] ? clear_bhb_loop+0x40/0x90 [ 472.676471][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.676490][T11993] RIP: 0033:0x7fca2039e0d9 [ 472.676506][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.676522][T11993] RSP: 002b:00007fca2126b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 472.676540][T11993] RAX: ffffffffffffffda RBX: 00007fca20625fa0 RCX: 00007fca2039e0d9 [ 472.676552][T11993] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 472.676562][T11993] RBP: 00007fca2126b090 R08: 0000000000000000 R09: 0000000000000000 [ 472.676573][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.676583][T11993] R13: 00007fca20626038 R14: 00007fca20625fa0 R15: 00007ffcc82e7328 [ 472.676606][T11993] [ 473.959968][ T5711] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 474.053937][T12034] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 474.130232][ T5711] usb 6-1: Using ep0 maxpacket: 32 [ 474.172142][ T5711] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 474.194215][ T5711] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.229408][ T5711] usb 6-1: config 0 has no interface number 0 [ 474.253200][ T5711] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 474.291375][ T5711] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 474.335381][ T5711] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 474.349922][ T5711] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 474.376972][ T5711] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 474.482554][ T5711] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 474.523357][ T5711] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 474.549667][T12051] netlink: 'syz.4.1523': attribute type 10 has an invalid length. [ 474.564453][ T5711] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 474.576920][T12051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1523'. [ 474.586803][ T5711] usb 6-1: config 0 interface 239 has no altsetting 0 [ 474.604808][ T5711] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 474.614208][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.622545][ T5711] usb 6-1: Product: syz [ 474.631797][ T5733] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 474.643573][ T5711] usb 6-1: Manufacturer: syz [ 474.663338][ T5711] usb 6-1: SerialNumber: syz [ 474.688419][ T5711] usb 6-1: config 0 descriptor?? [ 474.714696][T12022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 474.723327][T12022] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 474.775253][ T5613] Bluetooth: hci1: urb ffff88804f0f6500 submission failed (90) [ 474.819814][ T5733] usb 4-1: Using ep0 maxpacket: 16 [ 474.835523][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.849373][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 474.860277][ T5733] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 474.872638][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.881063][ T5733] usb 4-1: Product: syz [ 474.885253][ T5733] usb 4-1: Manufacturer: syz [ 474.889956][ T5805] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 474.897959][ T5733] usb 4-1: SerialNumber: syz [ 474.908436][ T5733] usb 4-1: config 0 descriptor?? [ 474.966714][T12067] comedi comedi1: rti800: I/O port conflict (0x140,16) [ 475.534374][ T5805] usb 7-1: Using ep0 maxpacket: 8 [ 475.541502][ T5805] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 475.566317][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 475.566328][ T29] audit: type=1800 audit(1786005600.423:6208): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 475.596484][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1514'. [ 475.606297][ T5805] usb 7-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 475.623537][ T5733] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input53 [ 475.635423][ T5805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.638898][ T5805] usb 7-1: config 0 descriptor?? [ 475.834387][ T29] audit: type=1800 audit(1786005600.503:6209): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229761 res=0 errno=0 [ 476.065733][ T29] audit: type=1800 audit(1786005600.513:6210): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=229790 res=0 errno=0 [ 476.093407][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.121099][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.176228][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.188960][ T29] audit: type=1800 audit(1786005600.513:6211): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=229768 res=0 errno=0 [ 476.227573][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.269040][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.283317][ T29] audit: type=1800 audit(1786005600.513:6212): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=229769 res=0 errno=0 [ 476.319052][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.365150][ T29] audit: type=1800 audit(1786005600.513:6213): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=229770 res=0 errno=0 [ 476.451355][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.527932][ T29] audit: type=1800 audit(1786005600.923:6214): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 476.549913][ T29] audit: type=1800 audit(1786005600.993:6215): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=229819 res=0 errno=0 [ 476.577241][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.586519][ T29] audit: type=1400 audit(1786005600.993:6216): avc: denied { write } for pid=12076 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.609355][ T29] audit: type=1800 audit(1786005601.223:6217): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 476.612580][ T5733] rc_core: IR keymap rc-imon-pad not found [ 476.632903][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.646092][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.657055][ T9] usb 6-1: USB disconnect, device number 43 [ 476.673865][ T5733] Registered IR keymap rc-empty [ 476.682136][ T5733] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 476.705778][ T5733] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 476.726629][ T5733] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 476.910239][ T5733] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input54 [ 476.927999][ T5805] usbhid 7-1:0.0: can't add hid device: -71 [ 476.937321][ T5805] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 476.966243][ T5805] usb 7-1: USB disconnect, device number 31 [ 476.967305][ T5733] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:59> initialized [ 477.970903][T12117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12117 comm=syz.4.1536 [ 478.050731][T12117] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1536'. [ 478.892255][ T804] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 479.289224][ T804] usb 6-1: device descriptor read/64, error -71 [ 479.459338][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 479.493147][ T9] usb 4-1: USB disconnect, device number 59 [ 479.728306][T12139] netlink: 'syz.6.1541': attribute type 10 has an invalid length. [ 479.736957][T12139] dummy0: left promiscuous mode [ 479.766751][T12139] team0: Port device dummy0 added [ 479.832261][T12139] netlink: 'syz.6.1541': attribute type 10 has an invalid length. [ 479.869619][T12139] team0: Port device dummy0 removed [ 479.969875][ T5805] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 479.977569][ T804] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 480.159881][ T804] usb 6-1: device descriptor read/64, error -71 [ 480.189864][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 480.198207][ T5805] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 480.215269][ T5805] usb 2-1: config 0 interface 0 has no altsetting 0 [ 480.222777][ T5805] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 480.232191][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.245116][ T5805] usb 2-1: config 0 descriptor?? [ 480.271487][ T804] usb usb6-port1: attempt power cycle [ 480.329851][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 480.571131][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 480.582651][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 480.596741][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 480.608462][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 480.624522][ T804] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 480.639913][ T9] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 480.651774][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.681362][ T804] usb 6-1: device descriptor read/8, error -71 [ 480.694987][T12142] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 480.711422][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 480.711439][ T29] audit: type=1800 audit(1786005605.573:6281): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230199 res=0 errno=0 [ 480.760045][T12142] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 480.779569][T12142] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 480.803279][T12142] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 480.817616][ T29] audit: type=1800 audit(1786005605.623:6282): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=230228 res=0 errno=0 [ 480.854397][ T9] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 480.872600][ T29] audit: type=1800 audit(1786005605.623:6283): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=230206 res=0 errno=0 [ 480.945925][ T29] audit: type=1800 audit(1786005605.633:6284): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=230207 res=0 errno=0 [ 481.021212][ T29] audit: type=1400 audit(1786005605.653:6285): avc: denied { cmd } for pid=12131 comm="iou-wrk-12132" path="socket:[38790]" dev="sockfs" ino=38790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 481.047603][ T5805] sunplus 0003:04FC:05D8.000D: unexpected long global item [ 481.071833][ T5805] sunplus 0003:04FC:05D8.000D: probe with driver sunplus failed with error -22 [ 481.088882][ T9] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 481.113000][ T29] audit: type=1800 audit(1786005605.653:6286): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=230208 res=0 errno=0 [ 481.153633][ T9] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 481.177900][ T29] audit: type=1800 audit(1786005605.733:6287): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230248 res=0 errno=0 [ 481.190294][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.240791][ T29] audit: type=1800 audit(1786005605.783:6288): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 481.267056][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.338097][T12167] 9pnet_fd: Insufficient options for proto=fd [ 481.370784][T12168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.419997][ T804] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 481.879454][ T29] audit: type=1400 audit(1786005605.843:6289): avc: denied { block_suspend } for pid=12131 comm="syz.1.1542" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 482.005308][ T29] audit: type=1800 audit(1786005605.853:6290): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230265 res=0 errno=0 [ 482.097483][T12166] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 482.160103][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 482.200289][ T804] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 482.214635][ T804] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 482.224151][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.234489][ T804] usb 6-1: Product: ㌆햿Â골ܢﲬê¤ë„˜ç†£åª¯ìƒšê‚斗䶜⾛è°ë¦ê¬†ì¦ºá鋬ሃ筃ä®é—•ã»¾ç³ªï†ê …ï«ä·£ë­—ﳋ䮬瀶홣长製蕞彿ꦕ僓䊘㔅䊯멧⟻嘅ಲ䃮é»ïª‰ìº¿ë‚†ä²­ã›“á–ƒë“祠뼿籴‮域ᠰᔔஂ꠴弽믹싉鎉йퟃ൵è—枢ᷥ傅둭죘âŽç•ƒï”¿ë•™î¿²â‘©æ‰ˆá‰€è„€î•„ణﳜ慎㣕⊪ëšè¹çžç®•æ„«ë¨‚㺴 [ 482.267100][ T804] usb 6-1: Manufacturer: Ñ™ [ 482.272793][ T804] usb 6-1: SerialNumber: syz [ 482.484036][ T5733] usb 2-1: USB disconnect, device number 60 [ 482.534473][ T804] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 482.728966][ T804] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 482.746539][ T804] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 482.755758][ T804] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 482.786115][ T804] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 482.818697][ T804] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 482.827449][ T804] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 483.127694][ T5733] usb 4-1: USB disconnect, device number 60 [ 483.165824][ T5733] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 483.225449][ T5733] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 483.263383][ T5733] mos7720 4-1:1.0: device disconnected [ 483.457257][T12202] SELinux: Context system_u:object_r:auth_cache_t:s0 is not valid (left unmapped). [ 483.959709][T12221] netlink: 'syz.6.1565': attribute type 4 has an invalid length. [ 484.320793][ T46] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 484.491201][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 484.497769][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 484.535144][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 484.580819][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 484.605204][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.630891][ T804] usb 6-1: USB disconnect, device number 47 [ 484.639991][ T46] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 484.677659][ T46] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 484.707534][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.726075][ T46] usb 2-1: Product: syz [ 484.735754][ T46] usb 2-1: Manufacturer: syz [ 484.763130][ T46] usb 2-1: SerialNumber: syz [ 484.780513][ T46] usb 2-1: config 0 descriptor?? [ 484.804966][ T46] port100 2-1:0.0: NFC: Could not get supported command types [ 484.917837][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.091909][ T804] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 485.258445][ T804] usb 6-1: Using ep0 maxpacket: 16 [ 485.265008][ T804] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.276507][ T804] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 485.307588][ T804] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.332517][ T804] usb 6-1: config 0 descriptor?? [ 485.787495][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 485.787511][ T29] audit: type=1800 audit(1786005610.633:6356): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231128 res=0 errno=0 [ 485.866605][ T804] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 486.011676][ T29] audit: type=1800 audit(1786005610.863:6357): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231153 res=0 errno=0 [ 486.055576][ T29] audit: type=1800 audit(1786005610.863:6358): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=231157 res=0 errno=0 [ 486.114759][ T29] audit: type=1800 audit(1786005610.893:6359): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231144 res=0 errno=0 [ 486.162245][ T29] audit: type=1800 audit(1786005610.893:6360): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=231145 res=0 errno=0 [ 486.190032][ T29] audit: type=1800 audit(1786005611.043:6361): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231167 res=0 errno=0 [ 488.926714][ T9] usb 2-1: USB disconnect, device number 61 [ 488.934684][ T29] audit: type=1800 audit(1786005613.783:6362): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 488.998641][ T5733] usb 6-1: USB disconnect, device number 48 [ 489.000442][ T29] audit: type=1800 audit(1786005613.853:6363): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15683 res=0 errno=0 [ 489.092748][ T29] audit: type=1800 audit(1786005613.893:6364): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 489.124222][ T29] audit: type=1800 audit(1786005613.973:6365): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 489.183367][T12234] kvm: pic: single mode not supported [ 489.191472][T12239] syzkaller0: entered promiscuous mode [ 489.212168][T12239] syzkaller0: entered allmulticast mode [ 489.238900][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.314137][T12246] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.369942][ T5718] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 489.400344][ T5805] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 489.439202][T12249] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 489.460322][T12249] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 489.472924][T12249] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 489.509965][ T804] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 489.546854][T12254] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 489.601485][ T5805] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 489.612058][ T5805] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 489.625173][ T5805] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 489.635426][ T5805] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 489.641058][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 489.656484][ T5805] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 489.664299][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 489.677828][ T804] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 489.686747][ T804] usb 6-1: config 1 has no interface number 0 [ 489.693908][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.695934][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 489.703213][ T804] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 489.719907][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 489.732189][ T804] usb 6-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 489.734952][T12240] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 489.745687][ T804] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 489.750448][T12240] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 489.767172][ T5718] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 489.778871][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.779471][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.787580][T12240] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 489.795969][ T804] usb 6-1: Product: syz [ 489.804021][T12240] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 489.807814][ T804] usb 6-1: Manufacturer: syz [ 489.817042][T12236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.820546][ T804] usb 6-1: SerialNumber: syz [ 489.834249][T12236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.843515][T12236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.851026][T12239] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 489.859697][T12236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.860918][ T5805] mos7720 5-1:1.0: Moschip 2 port adapter converter detected [ 489.868992][ T5718] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 489.876043][ T804] usb 6-1: Expected 3 endpoints, found: 2 [ 489.959871][ T46] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 490.076565][T12239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.083541][ T5805] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 490.088612][ T5733] usb 6-1: USB disconnect, device number 49 [ 490.113114][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 490.126232][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 490.126545][ T5718] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB2 [ 490.167564][T12266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.178905][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 490.196769][ T5805] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 490.227311][ T46] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 490.229108][T12268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.237398][T12266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.257334][ T46] usb 7-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 490.267109][T12268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.273329][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.303403][T12262] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 490.311808][T12262] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 490.331153][T12262] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 490.338484][T12262] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 490.343933][ T5718] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB3 [ 490.393489][ T46] mos7720 7-1:1.0: Moschip 2 port adapter converter detected [ 490.407934][T12270] ALSA: mixer_oss: invalid OSS volume 'sit0' [ 490.596700][ T46] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB4 [ 490.612460][ T46] usb 7-1: Moschip 2 port adapter converter now attached to ttyUSB5 [ 490.681400][T12275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.706997][T12275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.828072][T12277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.857925][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 490.857940][ T29] audit: type=1800 audit(1786005615.713:6429): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232164 res=0 errno=0 [ 490.954889][ T29] audit: type=1800 audit(1786005615.783:6430): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 491.048874][ T29] audit: type=1800 audit(1786005615.903:6431): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 491.278972][ T29] audit: type=1400 audit(1786005616.133:6432): avc: denied { ioctl } for pid=12281 comm="syz.5.1583" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 491.552580][ T29] audit: type=1800 audit(1786005616.413:6433): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 491.605899][ T29] audit: type=1800 audit(1786005616.463:6434): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 491.800025][ T29] audit: type=1800 audit(1786005616.653:6435): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 491.842320][ T46] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 491.860685][ T29] audit: type=1800 audit(1786005616.713:6436): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 492.041654][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 492.050110][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 492.059293][ T46] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 492.075752][ T5718] usb 5-1: USB disconnect, device number 62 [ 492.100627][ T5718] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 492.132510][ T5718] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 492.155383][ T5733] usb 4-1: USB disconnect, device number 61 [ 492.189557][ T5718] mos7720 5-1:1.0: device disconnected [ 492.206823][ T5733] moschip7720 ttyUSB2: Moschip 2 port adapter converter now disconnected from ttyUSB2 [ 492.255056][ T29] audit: type=1800 audit(1786005617.103:6437): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15683 res=0 errno=0 [ 492.269497][ T46] usb 2-1: config 4 has no interface number 0 [ 492.282340][ T46] usb 2-1: config 4 interface 9 has no altsetting 0 [ 492.290877][ T46] usb 2-1: New USB device found, idVendor=2357, idProduct=0602, bcdDevice=91.75 [ 492.300492][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.308514][ T46] usb 2-1: Product: syz [ 492.309694][ T5733] moschip7720 ttyUSB3: Moschip 2 port adapter converter now disconnected from ttyUSB3 [ 492.312747][ T46] usb 2-1: Manufacturer: syz [ 492.312765][ T46] usb 2-1: SerialNumber: syz [ 492.348923][ T46] r8152-cfgselector 2-1: Unknown version 0x0000 [ 492.352725][ T5733] mos7720 4-1:1.0: device disconnected [ 492.375424][ T29] audit: type=1800 audit(1786005617.223:6438): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=232191 res=0 errno=0 [ 492.582338][T12289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.594808][T12289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.606596][ T5614] usb 7-1: USB disconnect, device number 32 [ 492.633933][ T46] r8152 2-1:4.9: Expected endpoints are not found [ 492.648848][ T5614] moschip7720 ttyUSB4: Moschip 2 port adapter converter now disconnected from ttyUSB4 [ 492.676978][ T46] r8152-cfgselector 2-1: USB disconnect, device number 62 [ 492.696947][ T5614] moschip7720 ttyUSB5: Moschip 2 port adapter converter now disconnected from ttyUSB5 [ 492.746764][ T5614] mos7720 7-1:1.0: device disconnected [ 495.229818][ T5733] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 495.229819][ T5805] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 495.266902][T12311] lo speed is unknown, defaulting to 1000 [ 495.401633][ T5733] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 495.413643][ T5805] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 495.424911][ T5805] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 495.428124][ T5733] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 495.449131][ T5805] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 495.463398][ T5805] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 495.473240][ T5733] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 495.483378][ T5733] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 495.493467][ T5805] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 495.503639][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.512362][ T5733] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 495.523475][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.533096][T12344] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.542366][T12344] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.557112][T12344] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.573694][T12344] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 495.594165][T12345] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.606356][ T5805] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 495.608163][T12345] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.641151][T12345] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.655800][T12345] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 495.681052][ T5733] mos7720 2-1:1.0: Moschip 2 port adapter converter detected [ 495.826725][ T5805] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 495.881129][T12311] netdevsim0 speed is unknown, defaulting to 1000 [ 495.898018][ T5805] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 495.914311][T12359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.924957][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 495.924973][ T29] audit: type=1800 audit(1786005620.783:6475): pid=12360 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1604" name="bus" dev="tmpfs" ino=969 res=0 errno=0 [ 495.958379][ T5733] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB2 [ 495.973542][T12359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.992728][ T29] audit: type=1800 audit(1786005620.823:6476): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 495.996511][T12365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.020226][ T5733] usb 2-1: Moschip 2 port adapter converter now attached to ttyUSB3 [ 496.036756][ T29] audit: type=1800 audit(1786005620.823:6477): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235635 res=0 errno=0 [ 496.062226][T12365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.132699][ T29] audit: type=1800 audit(1786005620.823:6478): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235743 res=0 errno=0 [ 496.188135][ T29] audit: type=1800 audit(1786005620.833:6479): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235770 res=0 errno=0 [ 496.209801][ T46] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 496.243958][ T29] audit: type=1800 audit(1786005620.843:6480): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235757 res=0 errno=0 [ 496.276773][ T29] audit: type=1800 audit(1786005620.853:6481): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235650 res=0 errno=0 [ 496.309860][ T5805] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 496.349019][ T29] audit: type=1800 audit(1786005620.883:6482): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceNumber" dev="sysfs" ino=234939 res=0 errno=0 [ 496.381753][ T46] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 496.392337][ T46] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.394022][ T29] audit: type=1800 audit(1786005620.893:6483): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235784 res=0 errno=0 [ 496.403713][ T46] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.440236][ T46] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.449383][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.459956][ T5805] usb 6-1: Using ep0 maxpacket: 32 [ 496.463650][ T29] audit: type=1800 audit(1786005620.933:6484): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bInterfaceClass" dev="sysfs" ino=234942 res=0 errno=0 [ 496.469157][ T5805] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 496.533324][ T5805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.550064][ T5805] usb 6-1: config 0 has no interface number 0 [ 496.557819][ T46] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 496.568294][ T5805] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 496.579398][ T46] usb 7-1: invalid MIDI out EP 0 [ 496.595656][ T5805] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 496.620108][ T5805] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 496.642411][ T5805] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 496.665633][ T5805] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 496.676271][ T5805] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 496.688550][ T5805] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 496.701664][ T5805] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 496.713346][ T5805] usb 6-1: config 0 interface 239 has no altsetting 0 [ 496.724065][ T5805] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 496.734808][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.743306][ T5805] usb 6-1: Product: syz [ 496.752122][ T5805] usb 6-1: Manufacturer: syz [ 496.766461][ T5805] usb 6-1: SerialNumber: syz [ 496.795675][ T46] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 496.813871][ T5805] usb 6-1: config 0 descriptor?? [ 496.826477][T12363] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 496.841950][T12363] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 496.858498][ T6243] udevd[6243]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.954791][ T5613] Bluetooth: hci1: urb ffff88802cb78800 submission failed (90) [ 497.244349][T12368] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1603'. [ 497.727407][ T5805] usb 6-1: USB disconnect, device number 50 [ 497.823690][ T5733] usb 4-1: USB disconnect, device number 62 [ 497.836597][ T5733] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 497.856434][ T5733] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 497.867702][ T5733] mos7720 4-1:1.0: device disconnected [ 497.897965][ T5718] usb 2-1: USB disconnect, device number 63 [ 497.921188][ T5718] moschip7720 ttyUSB2: Moschip 2 port adapter converter now disconnected from ttyUSB2 [ 497.950696][ T5718] moschip7720 ttyUSB3: Moschip 2 port adapter converter now disconnected from ttyUSB3 [ 497.967110][ T5718] mos7720 2-1:1.0: device disconnected [ 498.777997][T12390] binder: 12388:12390 ioctl 4020ae46 200000000400 returned -22 [ 499.059311][ T46] usb 7-1: USB disconnect, device number 33 [ 499.216537][T12392] ADFS-fs (md0): error: unable to read block 3, try 0 [ 499.324166][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1613'. [ 500.157682][T12404] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 500.166105][T12404] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1615'. [ 500.178840][T12404] netlink: 'syz.3.1615': attribute type 2 has an invalid length. [ 500.190102][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1615'. [ 500.264461][T12410] netlink: 'syz.5.1617': attribute type 10 has an invalid length. [ 500.306852][T12410] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1617'. [ 500.709926][ T5718] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 500.823364][T12426] netlink: 'syz.5.1620': attribute type 10 has an invalid length. [ 500.831894][T12426] dummy0: left promiscuous mode [ 500.855356][T12426] team0: Port device dummy0 added [ 501.036738][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 501.036754][ T29] audit: type=1800 audit(1786005625.893:6534): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 501.084936][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 501.109462][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 501.154951][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 501.191183][ T5718] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 501.215749][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.222334][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.235967][ T29] audit: type=1800 audit(1786005626.093:6535): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 501.802792][ T5718] usb 4-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 501.837133][ T29] audit: type=1800 audit(1786005626.683:6536): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 501.859296][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.877874][T12428] netlink: 'syz.6.1621': attribute type 10 has an invalid length. [ 501.892887][T12416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 501.910027][T12416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 501.912675][ T29] audit: type=1800 audit(1786005626.763:6537): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237156 res=0 errno=0 [ 501.923324][T12416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 501.958164][T12416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 501.967889][ T29] audit: type=1800 audit(1786005626.763:6538): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=237185 res=0 errno=0 [ 502.062605][ T5718] mos7720 4-1:1.0: Moschip 2 port adapter converter detected [ 502.088189][ T29] audit: type=1800 audit(1786005626.763:6539): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=237163 res=0 errno=0 [ 502.110437][ T29] audit: type=1800 audit(1786005626.773:6540): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=237164 res=0 errno=0 [ 502.165741][ T29] audit: type=1800 audit(1786005626.803:6541): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=237165 res=0 errno=0 [ 502.216050][T12441] xt_HMARK: proto mask must be zero with L3 mode [ 502.219216][ T29] audit: type=1800 audit(1786005626.943:6542): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=237205 res=0 errno=0 [ 502.247819][ T29] audit: type=1800 audit(1786005626.943:6543): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 502.294445][ T5718] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 502.311413][T12448] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 502.317960][T12448] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 502.337622][T12448] vhci_hcd vhci_hcd.0: Device attached [ 502.351453][ T5718] usb 4-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 502.353144][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.379226][T12449] vhci_hcd: connection closed [ 502.384192][ T6013] vhci_hcd vhci_hcd.1: stop threads [ 502.398453][ T6013] vhci_hcd vhci_hcd.1: release socket [ 502.406104][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.418854][ T6013] vhci_hcd vhci_hcd.1: disconnect device [ 502.539886][ T5733] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 502.640692][ T5719] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 502.699831][ T5733] usb 7-1: Using ep0 maxpacket: 16 [ 502.706273][ T5733] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.717330][ T5733] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.728393][ T5733] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.738688][ T5733] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 502.766521][ T5733] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.781536][ T5733] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.791568][ T5733] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.799595][ T5733] usb 7-1: Manufacturer: syz [ 502.807090][ T5719] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 502.823345][ T5733] usb 7-1: config 0 descriptor?? [ 502.828591][ T5719] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.840007][ T5719] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.856595][ T5719] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.865928][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.886872][ T5719] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.901846][ T5719] usb 5-1: invalid MIDI out EP 0 [ 503.158918][ T5719] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 503.173231][ T5733] rc_core: IR keymap rc-hauppauge not found [ 503.179180][ T5733] Registered IR keymap rc-empty [ 503.191282][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.210779][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.250663][ T5733] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 503.264944][ T5733] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input55 [ 503.272321][T12467] netlink: 'syz.5.1630': attribute type 10 has an invalid length. [ 503.281859][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.285902][T12467] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1630'. [ 503.306531][T12467] dummy0: entered promiscuous mode [ 503.321470][ T46] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 503.321545][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.330649][T12467] team0: Port device dummy0 removed [ 503.359859][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.391367][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.421470][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.439864][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.459934][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.480669][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.489826][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 503.496985][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 503.505982][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.509949][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.516455][ T46] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.538431][ T46] usb 2-1: config 1 interface 0 has no altsetting 0 [ 503.546815][ T46] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 503.549902][ T5733] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 503.556101][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.580910][ T46] usb 2-1: Product: syz [ 503.591792][ T5733] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 503.592164][ T46] usb 2-1: Manufacturer: syz [ 503.601405][ T5733] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 503.613649][ T5711] usb 4-1: USB disconnect, device number 63 [ 503.629868][ T5805] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 503.639133][ T5711] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 503.646251][ T5733] usb 7-1: USB disconnect, device number 34 [ 503.656941][ T46] usb 2-1: SerialNumber: syz [ 503.676143][ T5711] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 503.695582][ T5711] mos7720 4-1:1.0: device disconnected [ 503.779843][ T5805] usb 6-1: Using ep0 maxpacket: 8 [ 503.788625][ T5805] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 503.797922][ T5805] usb 6-1: config 179 has no interface number 0 [ 503.828012][ T5805] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 503.853933][ T5805] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 503.878840][ T5805] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 503.895479][ T5805] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 503.905917][ T5805] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 503.920164][ T5805] usb 6-1: config 179 interface 65 has no altsetting 0 [ 503.927114][ T5805] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 503.937935][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.983187][ T5805] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input56 [ 504.136051][ T46] usbhid 2-1:1.0: can't add hid device: -71 [ 504.143622][ T46] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 504.159435][ T46] usb 2-1: USB disconnect, device number 64 [ 504.292133][ T5733] usb 6-1: USB disconnect, device number 51 [ 505.260589][ T5711] usb 5-1: USB disconnect, device number 63 [ 505.625548][T12501] binder: 12500:12501 ioctl 4030582a 200000000000 returned -22 [ 505.709818][ T5718] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 505.871028][ T5711] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 506.118304][ T5711] usb 6-1: Using ep0 maxpacket: 8 [ 506.163247][ T5711] usb 6-1: unable to get BOS descriptor or descriptor too short [ 506.211004][ T5711] usb 6-1: config 252 has an invalid interface number: 50 but max is 0 [ 506.239186][ T5711] usb 6-1: config 252 has no interface number 0 [ 506.268587][ T5711] usb 6-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=5d.62 [ 506.679185][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.691196][ T5718] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 506.700435][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.714512][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 506.714528][ T29] audit: type=1800 audit(1786005631.573:6635): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 506.741696][ T5711] usb 6-1: Product: syz [ 506.741719][ T5711] usb 6-1: Manufacturer: syz [ 506.753172][ T29] audit: type=1800 audit(1786005631.613:6636): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 506.778580][ T5718] usb 2-1: config 0 descriptor?? [ 506.785018][ T5711] usb 6-1: SerialNumber: syz [ 506.791024][ T29] audit: type=1800 audit(1786005631.643:6637): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=238307 res=0 errno=0 [ 506.825419][ T5718] cp210x 2-1:0.0: cp210x converter detected [ 506.880593][T12511] 9pnet_fd: Insufficient options for proto=fd [ 506.891767][ T29] audit: type=1800 audit(1786005631.643:6638): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=238336 res=0 errno=0 [ 507.003798][ T29] audit: type=1800 audit(1786005631.643:6639): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=238314 res=0 errno=0 [ 507.258382][ T29] audit: type=1800 audit(1786005631.653:6640): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=238315 res=0 errno=0 [ 507.480762][ T29] audit: type=1800 audit(1786005631.673:6641): pid=5620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=238316 res=0 errno=0 [ 507.657230][ T5718] usb 2-1: cp210x converter now attached to ttyUSB0 [ 507.714421][ T29] audit: type=1800 audit(1786005631.683:6642): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=238356 res=0 errno=0 [ 507.786084][ T5718] usb 2-1: USB disconnect, device number 65 [ 507.903571][ T5718] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 507.938491][ T29] audit: type=1800 audit(1786005631.683:6643): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=238388 res=0 errno=0 [ 507.977195][ T5718] cp210x 2-1:0.0: device disconnected [ 508.035800][ T29] audit: type=1800 audit(1786005631.683:6644): pid=6035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=238363 res=0 errno=0 [ 508.383846][T12522] fuse: Bad value for 'group_id' [ 508.388968][T12522] fuse: Bad value for 'group_id' [ 508.535908][ T5711] uvcvideo 6-1:252.50: Found UVC 0.00 device syz (0408:4033) [ 508.654389][ T5711] uvcvideo 6-1:252.50: Forcing UVC version to 1.0a [ 508.785981][ T5711] uvcvideo 6-1:252.50: No valid video chain found. [ 509.091180][ T5711] usb 6-1: USB disconnect, device number 52 [ 509.147023][T12527] binder: 12526:12527 ioctl 4030582a 200000000000 returned -22 [ 509.695833][T12533] openvswitch: netlink: Actions may not be safe on all matching packets [ 510.043331][T12534] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 510.049979][T12534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 510.097061][T12534] vhci_hcd vhci_hcd.0: Device attached [ 510.136285][T12538] vhci_hcd: connection closed [ 510.137012][ T191] vhci_hcd vhci_hcd.3: stop threads [ 510.201835][ T191] vhci_hcd vhci_hcd.3: release socket [ 510.214018][ T191] vhci_hcd vhci_hcd.3: disconnect device [ 510.269878][ T5805] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 510.599799][ T5719] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 510.781317][ T5719] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 510.795541][ T5719] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.233454][ T5719] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.848753][ T5719] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.869915][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.926164][ T5719] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.927118][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 511.927154][ T29] audit: type=1800 audit(1786005636.783:6673): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 511.950301][ T5719] usb 6-1: invalid MIDI out EP 0 [ 512.057992][T12558] input: syz0 as /devices/virtual/input/input57 [ 512.172521][ T29] audit: type=1800 audit(1786005636.843:6674): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=238627 res=0 errno=0 [ 512.194150][ T29] audit: type=1800 audit(1786005636.843:6675): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=238656 res=0 errno=0 [ 512.251216][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1657'. [ 512.285709][ T29] audit: type=1800 audit(1786005636.853:6676): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=238634 res=0 errno=0 [ 512.323653][T12563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1657'. [ 512.385280][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.424660][ T29] audit: type=1800 audit(1786005636.853:6677): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=238635 res=0 errno=0 [ 512.545165][ T5719] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 512.547059][ T29] audit: type=1800 audit(1786005636.853:6678): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=238636 res=0 errno=0 [ 512.580226][T11375] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 512.599709][ T29] audit: type=1400 audit(1786005636.913:6679): avc: denied { write } for pid=12557 comm="syz.4.1655" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 512.626020][ T29] audit: type=1400 audit(1786005636.913:6680): avc: denied { ioctl } for pid=12557 comm="syz.4.1655" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 512.656519][ T29] audit: type=1800 audit(1786005636.913:6681): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15683 res=0 errno=0 [ 512.693703][ T29] audit: type=1800 audit(1786005636.943:6682): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=238676 res=0 errno=0 [ 512.770916][T11375] usb 5-1: not running at top speed; connect to a high speed hub [ 512.780391][T11375] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 512.951435][T11375] usb 5-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 512.951464][T11375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.951485][T11375] usb 5-1: Product: syz [ 512.951501][T11375] usb 5-1: Manufacturer: syz [ 512.951517][T11375] usb 5-1: SerialNumber: syz [ 512.958128][T11375] oti6858 5-1:1.0: oti6858 converter detected [ 513.153362][T11375] usb 5-1: oti6858 converter now attached to ttyUSB0 [ 513.276633][T11375] usb 6-1: USB disconnect, device number 53 [ 514.203946][T12581] netlink: 'syz.3.1663': attribute type 1 has an invalid length. [ 514.211821][T12581] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1663'. [ 514.222198][T12581] netlink: 'syz.3.1663': attribute type 2 has an invalid length. [ 514.231939][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 514.256557][T12578] netlink: 'syz.5.1662': attribute type 11 has an invalid length. [ 514.981988][T11375] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 515.038214][ T5805] usb 5-1: USB disconnect, device number 64 [ 515.076765][ T5805] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 515.116174][ T5805] oti6858 5-1:1.0: device disconnected [ 515.150055][T11375] usb 6-1: Using ep0 maxpacket: 8 [ 515.301268][T11375] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 515.319789][T11375] usb 6-1: config 179 has no interface number 0 [ 515.334002][T11375] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 515.350017][T11375] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 515.361704][T11375] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 515.386302][T11375] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 515.570080][ T46] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 515.755423][ T46] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 515.807992][ T46] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 515.874218][ T46] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.970901][ T46] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 516.022918][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.201743][ T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.224845][T11375] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 516.238341][T11375] usb 6-1: config 179 interface 65 has no altsetting 0 [ 516.240077][ T46] usb 4-1: invalid MIDI out EP 0 [ 516.245319][T11375] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 516.259241][T11375] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.321471][T11375] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input58 [ 516.678253][ T46] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 516.827728][ T46] usb 6-1: USB disconnect, device number 54 [ 517.076773][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 517.076789][ T29] audit: type=1800 audit(1786005641.933:6781): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 517.574259][ T29] audit: type=1800 audit(1786005642.433:6782): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 517.649680][ T29] audit: type=1800 audit(1786005642.473:6783): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 517.673531][ T29] audit: type=1800 audit(1786005642.513:6784): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 517.858852][ T29] audit: type=1800 audit(1786005642.703:6785): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 518.254390][T12647] netlink: 'syz.5.1680': attribute type 10 has an invalid length. [ 518.262609][T12647] dummy0: left promiscuous mode [ 518.281759][T12647] team0: Port device dummy0 added [ 518.329130][T12647] netlink: 'syz.5.1680': attribute type 10 has an invalid length. [ 518.348469][T11375] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 518.401404][T12647] team0: Port device dummy0 removed [ 518.434092][ T186] usb 4-1: USB disconnect, device number 64 [ 518.667581][T11375] usb 5-1: device descriptor read/64, error -71 [ 518.727613][ T29] audit: type=1800 audit(1786005643.583:6786): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 518.794847][ T29] audit: type=1800 audit(1786005643.633:6787): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 518.816464][ T29] audit: type=1800 audit(1786005643.653:6788): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 518.838723][ T29] audit: type=1800 audit(1786005643.683:6789): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15683 res=0 errno=0 [ 518.899460][T12659] openvswitch: netlink: Actions may not be safe on all matching packets [ 518.910402][ T29] audit: type=1800 audit(1786005643.773:6790): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1684" name="attach" dev="sysfs" ino=33616 res=0 errno=0 [ 518.969835][T11375] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 518.972921][T12659] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 518.984259][T12659] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 518.994805][T12653] input: syz0 as /devices/virtual/input/input59 [ 519.100599][T12659] vhci_hcd vhci_hcd.0: Device attached [ 519.149828][T11375] usb 5-1: device descriptor read/64, error -71 [ 519.327049][T12661] vhci_hcd: connection closed [ 519.327295][ T6015] vhci_hcd vhci_hcd.3: stop threads [ 519.344687][ T6015] vhci_hcd vhci_hcd.3: release socket [ 519.354548][ T6015] vhci_hcd vhci_hcd.3: disconnect device [ 519.371093][ T186] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 519.483311][ T9] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 519.513783][T11375] usb usb5-port1: attempt power cycle [ 519.786078][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 519.815998][T12673] netlink: 'syz.5.1686': attribute type 10 has an invalid length. [ 519.902464][T11375] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 519.941385][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 520.020363][T11375] usb 5-1: device descriptor read/8, error -71 [ 520.031042][ T9] usb 7-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 520.054979][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.067338][ T9] usb 7-1: Product: syz [ 520.074919][ T9] usb 7-1: Manufacturer: syz [ 520.083771][ T9] usb 7-1: SerialNumber: syz [ 520.092081][T12675] syzkaller0: entered promiscuous mode [ 520.106223][ T9] oti6858 7-1:1.0: oti6858 converter detected [ 520.116028][T12675] syzkaller0: entered allmulticast mode [ 520.128412][ T9] usb 7-1: oti6858 converter now attached to ttyUSB0 [ 520.279880][T11375] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 520.321948][T11375] usb 5-1: device descriptor read/8, error -71 [ 520.380036][ T46] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 520.539825][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 520.550563][T11375] usb usb5-port1: unable to enumerate USB device [ 520.556947][ T46] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 520.592234][ T46] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 520.647598][ T46] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 520.699097][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.741755][ T46] usb 2-1: Product: syz [ 520.766191][ T46] usb 2-1: Manufacturer: syz [ 520.822375][ T46] usb 2-1: SerialNumber: syz [ 521.092994][T12677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1688'. [ 521.206875][ T46] usb 2-1: unit 8 not found! [ 521.577370][ T46] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 521.600784][ T46] usb 2-1: USB disconnect, device number 66 [ 521.691483][T12699] nvme nvme0: failed to connect socket: -111 [ 521.753867][T12704] [ 521.756223][T12704] ====================================================== [ 521.763238][T12704] WARNING: possible circular locking dependency detected [ 521.770247][T12704] syzkaller #0 Tainted: G L [ 521.776208][T12704] ------------------------------------------------------ [ 521.783203][T12704] syz.3.1694/12704 is trying to acquire lock: [ 521.789244][T12704] ffffffff8fd25f60 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_show+0x26/0x210 [ 521.798117][T12704] [ 521.798117][T12704] but task is already holding lock: [ 521.805739][T12704] ffff88804e4bc998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 521.814169][T12704] [ 521.814169][T12704] which lock already depends on the new lock. [ 521.814169][T12704] [ 521.824567][T12704] [ 521.824567][T12704] the existing dependency chain (in reverse order) is: [ 521.833561][T12704] [ 521.833561][T12704] -> #4 (&p->lock){+.+.}-{4:4}: [ 521.840581][T12704] lock_acquire+0x1b9/0x370 [ 521.845608][T12704] __mutex_lock+0x1a4/0x1bd0 [ 521.850711][T12704] seq_read_iter+0xe1/0x1270 [ 521.855807][T12704] kernfs_fop_read_iter+0x46c/0x610 [ 521.861513][T12704] __kernel_read+0x397/0xad0 [ 521.866611][T12704] integrity_kernel_read+0x7e/0xb0 [ 521.872236][T12704] ima_calc_file_hash_tfm+0x25e/0x350 [ 521.878112][T12704] ima_calc_file_hash+0x1e3/0x380 [ 521.883648][T12704] ima_collect_measurement+0x94f/0xb30 [ 521.889611][T12704] process_measurement+0xdfe/0x2350 [ 521.895310][T12704] ima_file_check+0xc3/0x110 [ 521.900403][T12704] security_file_post_open+0xc4/0x210 [ 521.906286][T12704] path_openat+0x985/0x4280 [ 521.911314][T12704] do_file_open+0x20e/0x430 [ 521.916323][T12704] do_sys_openat2+0x10f/0x1e0 [ 521.921509][T12704] __x64_sys_openat+0x12d/0x210 [ 521.926873][T12704] do_syscall_64+0x115/0x870 [ 521.931983][T12704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.938381][T12704] [ 521.938381][T12704] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 521.947146][T12704] lock_acquire+0x1b9/0x370 [ 521.952175][T12704] __mutex_lock+0x1a4/0x1bd0 [ 521.957283][T12704] process_measurement+0x5ab/0x2350 [ 521.962985][T12704] ima_file_check+0xc3/0x110 [ 521.968080][T12704] security_file_post_open+0xc4/0x210 [ 521.973984][T12704] path_openat+0x985/0x4280 [ 521.978997][T12704] do_file_open_root+0x2f6/0x5a0 [ 521.984540][T12704] file_open_root+0x1c6/0x3f0 [ 521.989725][T12704] kernel_read_file_from_path_initns+0x189/0x260 [ 521.996565][T12704] _request_firmware+0x733/0x13c0 [ 522.002115][T12704] request_firmware+0x35/0x50 [ 522.007305][T12704] reg_reload_regdb+0x85/0x460 [ 522.012570][T12704] genl_family_rcv_msg_doit+0x214/0x300 [ 522.018622][T12704] genl_rcv_msg+0x560/0x800 [ 522.023628][T12704] netlink_rcv_skb+0x159/0x420 [ 522.028890][T12704] genl_rcv+0x28/0x40 [ 522.033370][T12704] netlink_unicast+0x585/0x850 [ 522.038721][T12704] netlink_sendmsg+0x8b0/0xda0 [ 522.043984][T12704] ____sys_sendmsg+0xa4d/0xbe0 [ 522.049252][T12704] ___sys_sendmsg+0x190/0x1e0 [ 522.054431][T12704] __sys_sendmsg+0x160/0x210 [ 522.059520][T12704] do_syscall_64+0x115/0x870 [ 522.064625][T12704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.071019][T12704] [ 522.071019][T12704] -> #2 (cb_lock){++++}-{4:4}: [ 522.077959][T12704] lock_acquire+0x1b9/0x370 [ 522.082972][T12704] down_read+0x99/0x4c0 [ 522.087631][T12704] genl_release+0x7e/0x1d0 [ 522.092549][T12704] netlink_release+0x1058/0x1ff0 [ 522.097988][T12704] __sock_release+0xb3/0x260 [ 522.103080][T12704] sock_close+0x1c/0x30 [ 522.107745][T12704] __fput+0x3ff/0xb50 [ 522.112228][T12704] fput_close_sync+0x118/0x250 [ 522.117493][T12704] __x64_sys_close+0x8b/0x120 [ 522.122672][T12704] do_syscall_64+0x115/0x870 [ 522.127773][T12704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.134166][T12704] [ 522.134166][T12704] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 522.142846][T12704] lock_acquire+0x1b9/0x370 [ 522.147851][T12704] down_write+0x8b/0x1f0 [ 522.152602][T12704] __sock_release+0x86/0x260 [ 522.157695][T12704] sock_close+0x1c/0x30 [ 522.162350][T12704] __fput+0x3ff/0xb50 [ 522.166833][T12704] __fput_sync+0xd4/0x100 [ 522.171661][T12704] nvme_tcp_alloc_queue.isra.0+0xd53/0x1750 [ 522.178060][T12704] nvme_tcp_configure_admin_queue+0x26/0x4d0 [ 522.184545][T12704] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 522.190074][T12704] nvme_tcp_create_ctrl+0x975/0xd20 [ 522.195776][T12704] nvmf_dev_write+0x4ee/0xb60 [ 522.200964][T12704] vfs_write+0x2aa/0x1050 [ 522.205814][T12704] ksys_write+0x12a/0x250 [ 522.210653][T12704] do_syscall_64+0x115/0x870 [ 522.215750][T12704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.222141][T12704] [ 522.222141][T12704] -> #0 (nvmf_dev_mutex){+.+.}-{4:4}: [ 522.229677][T12704] check_prev_add+0xeb/0xe60 [ 522.234768][T12704] __lock_acquire+0x136c/0x1a40 [ 522.240117][T12704] lock_acquire+0x1b9/0x370 [ 522.245119][T12704] __mutex_lock+0x1a4/0x1bd0 [ 522.250215][T12704] nvmf_dev_show+0x26/0x210 [ 522.255222][T12704] seq_read_iter+0x32f/0x1270 [ 522.260397][T12704] seq_read+0x344/0x4d0 [ 522.265053][T12704] vfs_read+0x1e4/0xb40 [ 522.269712][T12704] ksys_read+0x12a/0x250 [ 522.274468][T12704] do_syscall_64+0x115/0x870 [ 522.279565][T12704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.285970][T12704] [ 522.285970][T12704] other info that might help us debug this: [ 522.285970][T12704] [ 522.296173][T12704] Chain exists of: [ 522.296173][T12704] nvmf_dev_mutex --> &ima_iint_mutex_key[depth] --> &p->lock [ 522.296173][T12704] [ 522.309440][T12704] Possible unsafe locking scenario: [ 522.309440][T12704] [ 522.316862][T12704] CPU0 CPU1 [ 522.322202][T12704] ---- ---- [ 522.327539][T12704] lock(&p->lock); [ 522.331327][T12704] lock(&ima_iint_mutex_key[depth]); [ 522.339214][T12704] lock(&p->lock); [ 522.345518][T12704] lock(nvmf_dev_mutex); [ 522.349827][T12704] [ 522.349827][T12704] *** DEADLOCK *** [ 522.349827][T12704] [ 522.357940][T12704] 1 lock held by syz.3.1694/12704: [ 522.363020][T12704] #0: ffff88804e4bc998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 522.371871][T12704] [ 522.371871][T12704] stack backtrace: [ 522.377757][T12704] CPU: 0 UID: 0 PID: 12704 Comm: syz.3.1694 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.377782][T12704] Tainted: [L]=SOFTLOCKUP [ 522.377787][T12704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 522.377796][T12704] Call Trace: [ 522.377804][T12704] [ 522.377811][T12704] dump_stack_lvl+0x100/0x190 [ 522.377832][T12704] print_circular_bug.cold+0x178/0x1c7 [ 522.377855][T12704] check_noncircular+0x146/0x160 [ 522.377874][T12704] check_prev_add+0xeb/0xe60 [ 522.377891][T12704] __lock_acquire+0x136c/0x1a40 [ 522.377909][T12704] ? vfs_read+0x1e4/0xb40 [ 522.377930][T12704] lock_acquire+0x1b9/0x370 [ 522.377946][T12704] ? nvmf_dev_show+0x26/0x210 [ 522.377966][T12704] ? __pfx___might_resched+0x10/0x10 [ 522.377984][T12704] __mutex_lock+0x1a4/0x1bd0 [ 522.378003][T12704] ? nvmf_dev_show+0x26/0x210 [ 522.378020][T12704] ? nvmf_dev_show+0x26/0x210 [ 522.378040][T12704] ? __pfx___mutex_lock+0x10/0x10 [ 522.378059][T12704] ? trace_kmalloc+0xeb/0x110 [ 522.378077][T12704] ? __kasan_kmalloc+0xaa/0xb0 [ 522.378094][T12704] ? __kvmalloc_node_noprof+0x36d/0x970 [ 522.378111][T12704] ? nvmf_dev_show+0x26/0x210 [ 522.378128][T12704] nvmf_dev_show+0x26/0x210 [ 522.378146][T12704] seq_read_iter+0x32f/0x1270 [ 522.378163][T12704] seq_read+0x344/0x4d0 [ 522.378176][T12704] ? __pfx_seq_read+0x10/0x10 [ 522.378190][T12704] ? avc_policy_seqno+0x9/0x20 [ 522.378207][T12704] ? selinux_file_permission+0x8f/0x6d0 [ 522.378230][T12704] ? bpf_lsm_file_permission+0x9/0x10 [ 522.378251][T12704] ? security_file_permission+0x76/0x210 [ 522.378266][T12704] ? rw_verify_area+0xce/0x6d0 [ 522.378285][T12704] ? __pfx_seq_read+0x10/0x10 [ 522.378297][T12704] vfs_read+0x1e4/0xb40 [ 522.378319][T12704] ? __pfx_vfs_read+0x10/0x10 [ 522.378338][T12704] ? find_held_lock+0x2b/0x80 [ 522.378350][T12704] ? __fget_files+0x215/0x3d0 [ 522.378364][T12704] ? __fget_files+0x215/0x3d0 [ 522.378379][T12704] ? __fget_files+0x21f/0x3d0 [ 522.378395][T12704] ksys_read+0x12a/0x250 [ 522.378416][T12704] ? __pfx_ksys_read+0x10/0x10 [ 522.378436][T12704] ? kcov_ioctl+0x17a/0x750 [ 522.378453][T12704] do_syscall_64+0x115/0x870 [ 522.378470][T12704] ? clear_bhb_loop+0x40/0x90 [ 522.378485][T12704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.378500][T12704] RIP: 0033:0x7f750099e0d9 [ 522.378513][T12704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.378526][T12704] RSP: 002b:00007f75017a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 522.378546][T12704] RAX: ffffffffffffffda RBX: 00007f7500c26180 RCX: 00007f750099e0d9 [ 522.378555][T12704] RDX: 0000000000002020 RSI: 00002000000007c0 RDI: 0000000000000005 [ 522.378564][T12704] RBP: 00007f7500a35024 R08: 0000000000000000 R09: 0000000000000000 [ 522.378573][T12704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.378581][T12704] R13: 00007f7500c26218 R14: 00007f7500c26180 R15: 00007ffd2a300088 [ 522.378595][T12704] [ 522.742649][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 522.742660][ T29] audit: type=1800 audit(1786005647.533:6836): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0 [ 522.797048][ T5711] usb 7-1: USB disconnect, device number 35 [ 522.807725][ T5711] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 522.851638][ T5711] oti6858 7-1:1.0: device disconnected [ 522.869402][ T29] audit: type=1800 audit(1786005647.693:6837): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15806 res=0 errno=0 [ 522.952233][ T29] audit: type=1800 audit(1786005647.723:6838): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16052 res=0 errno=0 [ 523.022249][ T29] audit: type=1400 audit(1786005647.883:6839): avc: denied { ioctl } for pid=12695 comm="syz.3.1694" path="socket:[42535]" dev="sockfs" ino=42535 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 523.076732][ T29] audit: type=1400 audit(1786005647.913:6840): avc: denied { read } for pid=12695 comm="syz.3.1694" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 523.121096][ T29] audit: type=1400 audit(1786005647.913:6841): avc: denied { open } for pid=12695 comm="syz.3.1694" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 523.147724][ T29] audit: type=1800 audit(1786005647.933:6842): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15929 res=0 errno=0 [ 523.169909][ T29] audit: type=1800 audit(1786005647.983:6843): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15683 res=0 errno=0 [ 523.233842][ T29] audit: type=1800 audit(1786005648.093:6844): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15437 res=0 errno=0