last executing test programs: 26m8.666489408s ago: executing program 0 (id=3565): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) 26m7.037499203s ago: executing program 0 (id=3569): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 26m4.603525112s ago: executing program 0 (id=3576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = memfd_create(0x0, 0x2) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 26m3.263976483s ago: executing program 0 (id=3577): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000000000000040000001811"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 26m2.115354039s ago: executing program 0 (id=3581): syz_emit_ethernet(0x56, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af25, &(0x7f00000001c0)={@host}) socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000023c10000000086dd6001000000403a00fc020000000000000000000000000000ff020000000000000000000000000001040090780000000038d068994114ee6097436700008800fe88"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x2000000d, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0x100000000003f89, 0x0, 0x18ab}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 26m0.944069275s ago: executing program 0 (id=3584): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 25m44.88088391s ago: executing program 32 (id=3584): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 21m31.577492046s ago: executing program 5 (id=4159): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) statx(0xffffffffffffffff, 0x0, 0x800, 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) 21m30.372908733s ago: executing program 5 (id=4162): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 21m29.190081097s ago: executing program 5 (id=4167): socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 21m28.147143135s ago: executing program 5 (id=4169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2d, 'cpu'}, {0x2b, 'pids'}]}, 0xb) syz_open_dev$loop(&(0x7f00000008c0), 0x7ff, 0x2) syz_open_dev$loop(&(0x7f0000000000), 0xd5d1, 0x103a83) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x7f, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x2f, 0x0, @multicast1, @broadcast}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x10, 0x2000000, 0x4, 0x6, 0x6, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000010050000001000000000000000010000850200000000000000020000000000000200000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) mount(0x0, &(0x7f0000001080)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@ringbuf_query, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x7fe81e5246626bb5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}]}, 0x4c}}, 0x0) 21m26.929644033s ago: executing program 5 (id=4171): lseek(0xffffffffffffffff, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 21m23.82242779s ago: executing program 5 (id=4174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 21m6.420368002s ago: executing program 33 (id=4174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 8.080887103s ago: executing program 4 (id=8192): socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4044084) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 7.21974531s ago: executing program 4 (id=8196): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 6.526620529s ago: executing program 6 (id=8204): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 6.475745291s ago: executing program 4 (id=8205): setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 6.428710372s ago: executing program 3 (id=8206): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 6.359578498s ago: executing program 6 (id=8207): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000340)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000480), &(0x7f0000000540)="6b39c5baee459bd1bb62f4109a1c7e"}}, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)) r1 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000600)) 5.2079217s ago: executing program 1 (id=8211): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) close(0x3) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 4.583799367s ago: executing program 3 (id=8212): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100004, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x4, 0x7, 0x17, 0xd, 0x3, 0x3, 0x3e, 0x8f, 0x4002, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x4f8f1592, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x0, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x6, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x45, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x102, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x202, 0x7c, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x4, 0x12b, 0x4, 0x1, 0x0, 0x3, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x2000, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.582696022s ago: executing program 4 (id=8213): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604a03aa3980e059a542ea8"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.560988508s ago: executing program 1 (id=8214): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) creat(&(0x7f0000000200)='./bus\x00', 0x84) 4.435614245s ago: executing program 3 (id=8217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 4.367814303s ago: executing program 4 (id=8218): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10043, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_queues(r0, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa}}], 0x4, 0x0, &(0x7f0000001d80)) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r6}}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xe3a, 0xfffffffd, 0x4}) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x6d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000480), r7) 3.334677052s ago: executing program 3 (id=8219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, &(0x7f0000000300)="010a", 0x0}, 0x50) 3.272862689s ago: executing program 4 (id=8220): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff0000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.077967273s ago: executing program 2 (id=8222): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x161d02) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000280)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000300)='4\x00', 0x2) socket(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 3.032073245s ago: executing program 3 (id=8223): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) creat(&(0x7f0000000200)='./bus\x00', 0x84) 3.021322237s ago: executing program 6 (id=8224): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) creat(&(0x7f0000000200)='./bus\x00', 0x84) 2.368699463s ago: executing program 1 (id=8225): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 1.915336377s ago: executing program 6 (id=8226): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a0920", 0x41}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e", 0xb9}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f5", 0x29}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.85136765s ago: executing program 2 (id=8227): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="ca0e808b935b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1, r4}}, 0x40) 1.785336466s ago: executing program 3 (id=8228): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) 1.62792271s ago: executing program 2 (id=8229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 1.559812145s ago: executing program 6 (id=8230): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.513446191s ago: executing program 2 (id=8231): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) creat(&(0x7f0000000200)='./bus\x00', 0x84) 792.641487ms ago: executing program 1 (id=8232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x24044804}, 0x800) 658.501265ms ago: executing program 1 (id=8233): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="ca0e808b935b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1, r4}}, 0x40) 546.985585ms ago: executing program 6 (id=8234): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 338.883997ms ago: executing program 1 (id=8235): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) creat(&(0x7f0000000200)='./bus\x00', 0x84) 168.226821ms ago: executing program 2 (id=8236): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604a03aa3980e059a542ea8"], 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r0, 0x1, 0x0, 0x6, @link_local}, 0x14) 0s ago: executing program 2 (id=8237): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x4370}) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)="000080", 0x15) kernel console output (not intermixed with test programs): '. [ 2549.193582][T30966] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2549.228666][T30966] usb 2-1: USB disconnect, device number 25 [ 2549.371297][ T5686] usb 7-1: USB disconnect, device number 105 [ 2549.403956][ T5686] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2549.429991][ T5686] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2549.457655][ T567] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7527'. [ 2549.467610][ T5686] ti_usb_3410_5052 7-1:2.0: device disconnected [ 2549.673517][ T569] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7526'. [ 2549.778992][ T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2550.004437][ T24] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2550.066919][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2550.092069][ T24] usb 5-1: config 0 has no interface number 0 [ 2550.098563][ T24] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2550.140485][ T24] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2550.159030][ T24] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2550.199654][ T24] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2550.217879][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2550.226448][ T24] usb 5-1: Product: syz [ 2550.230718][ T24] usb 5-1: Manufacturer: syz [ 2550.237248][ T24] usb 5-1: SerialNumber: syz [ 2550.244081][ T24] usb 5-1: config 0 descriptor?? [ 2550.427086][ T579] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2550.435686][ T580] syzkaller0: entered promiscuous mode [ 2550.435707][ T580] syzkaller0: entered allmulticast mode [ 2550.461379][T26427] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 2550.710229][T26427] usb 7-1: Using ep0 maxpacket: 32 [ 2550.727292][T26427] usb 7-1: config 0 has an invalid interface number: 28 but max is 0 [ 2550.740711][T26427] usb 7-1: config 0 has no interface number 0 [ 2550.751920][T26427] usb 7-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2550.920489][T26427] usb 7-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2551.060052][T26427] usb 7-1: config 0 interface 28 has no altsetting 0 [ 2551.142964][T26427] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2551.164459][T26427] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.180357][T26427] usb 7-1: config 0 descriptor?? [ 2551.633055][ T599] __nla_validate_parse: 1 callbacks suppressed [ 2551.633088][ T599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7536'. [ 2551.648554][ T599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7536'. [ 2551.657630][ T599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7536'. [ 2551.873901][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2551.930547][T26427] usb 7-1: string descriptor 0 read error: -71 [ 2551.948888][T26427] usb 7-1: USB disconnect, device number 106 [ 2552.036598][ T601] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7537'. [ 2552.077495][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2552.087234][ T24] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2552.095535][ T24] usb 3-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2552.106614][ T24] usb 3-1: config 63 has no interface number 0 [ 2552.113273][ T24] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2552.122952][ T24] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2552.137479][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2552.146066][ T24] usb 3-1: Product: syz [ 2552.150360][ T24] usb 3-1: Manufacturer: syz [ 2552.174465][ T24] usb 3-1: SerialNumber: syz [ 2552.709035][ T5686] usb 5-1: USB disconnect, device number 29 [ 2552.727011][ T24] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 2552.747979][ T24] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2552.778930][ T24] uvcvideo 3-1:63.66: No valid video chain found. [ 2552.886829][ T24] usb 3-1: USB disconnect, device number 12 [ 2553.286301][ T616] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7542'. [ 2553.297116][ T616] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2553.358345][ T618] syzkaller0: entered promiscuous mode [ 2553.365010][ T618] syzkaller0: entered allmulticast mode [ 2553.970678][T26427] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2554.133202][T26427] usb 4-1: Using ep0 maxpacket: 32 [ 2554.150220][T26427] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2554.162623][T26427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.170742][T26427] usb 4-1: Product: syz [ 2554.174978][T26427] usb 4-1: Manufacturer: syz [ 2554.179874][T26427] usb 4-1: SerialNumber: syz [ 2554.188606][T26427] usb 4-1: config 0 descriptor?? [ 2554.203447][T26427] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2554.247277][T30966] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2554.317373][ T24] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 2554.416983][T30966] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 2554.427142][T30966] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2554.436262][T30966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.448469][T30966] usb 2-1: Product: syz [ 2554.452742][T30966] usb 2-1: Manufacturer: syz [ 2554.457362][T30966] usb 2-1: SerialNumber: syz [ 2554.499742][ T632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7546'. [ 2554.511118][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 2554.524691][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2554.582796][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2554.647047][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2554.791328][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2554.868430][ T24] usb 7-1: Product: syz [ 2554.877174][ T24] usb 7-1: Manufacturer: syz [ 2554.884847][ T24] usb 7-1: SerialNumber: syz [ 2554.928009][ T24] usb 7-1: config 0 descriptor?? [ 2555.024136][ T24] keyspan 7-1:0.0: Keyspan 1 port adapter converter detected [ 2555.059715][ T24] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 2555.095707][ T24] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 2555.259567][ T625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2555.289708][ T24] keyspan 7-1:0.0: unsupported endpoint type 0 [ 2555.316604][ T625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2555.335288][ T24] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 2555.366799][ T24] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 2555.395018][ T625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2555.418930][ T24] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 2555.437963][ T625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2555.470225][ T5718] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2555.500938][ T24] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 2556.279145][ T625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.281568][ T24] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2556.676591][ T625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2556.693621][ T186] usb 7-1: USB disconnect, device number 107 [ 2556.694720][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.710279][ T186] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2556.720476][ T186] keyspan 7-1:0.0: device disconnected [ 2556.768608][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2556.820663][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.856984][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2556.869019][T26427] gspca_ov534_9: reg_r err -32 [ 2556.878685][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2556.895662][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2556.932237][T27559] usb 2-1: USB disconnect, device number 26 [ 2557.156384][T26427] gspca_ov534_9: Unknown sensor 0000 [ 2557.156456][T26427] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 2557.296870][ T186] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2557.331939][ T654] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 2557.415505][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2557.423110][ T5718] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2557.430194][ T5718] ath9k_htc: Failed to initialize the device [ 2557.437113][T27559] usb 2-1: ath9k_htc: USB layer deinitialized [ 2557.460146][ T186] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2557.471438][ T186] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2557.480004][ T186] usb 3-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2557.494867][ T186] usb 3-1: config 63 has no interface number 0 [ 2557.501220][ T186] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2557.503193][ T659] syzkaller0: entered promiscuous mode [ 2557.514199][ T186] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2557.514831][ T659] syzkaller0: entered allmulticast mode [ 2557.523314][ T186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2557.541840][ T186] usb 3-1: Product: syz [ 2557.546329][ T186] usb 3-1: Manufacturer: syz [ 2557.550964][ T186] usb 3-1: SerialNumber: syz [ 2557.599500][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 2557.606087][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 2557.614316][ T24] usb 5-1: config 0 has no interface number 0 [ 2557.620467][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 2557.630726][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2557.640047][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2557.648119][ T24] usb 5-1: Product: syz [ 2557.652278][ T24] usb 5-1: Manufacturer: syz [ 2557.656928][ T24] usb 5-1: SerialNumber: syz [ 2557.663966][ T24] usb 5-1: config 0 descriptor?? [ 2557.761856][T27559] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2557.925376][T27559] usb 2-1: Using ep0 maxpacket: 32 [ 2557.934414][T27559] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2557.948989][T27559] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=d2.a2 [ 2557.958558][T27559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2557.966777][T27559] usb 2-1: Product: syz [ 2557.972014][T27559] usb 2-1: Manufacturer: syz [ 2557.976692][T27559] usb 2-1: SerialNumber: syz [ 2557.986716][ T186] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 2557.995261][ T186] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2557.998417][T30966] usb 4-1: USB disconnect, device number 34 [ 2558.003328][ T186] uvcvideo 3-1:63.66: No valid video chain found. [ 2558.033719][T27559] usb 2-1: config 0 descriptor?? [ 2558.050089][T27559] mos7840 2-1:0.0: required endpoints missing [ 2558.060639][ T186] usb 3-1: USB disconnect, device number 13 [ 2558.075997][T27508] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 2558.263387][T27508] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2558.276162][ T186] usb 2-1: USB disconnect, device number 27 [ 2558.286679][T27508] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2558.301004][T27508] usb 7-1: config 0 has no interface number 0 [ 2558.308221][T27508] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2558.352165][T27508] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2558.362396][T27508] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2558.389832][T27508] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2558.399020][T27508] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2558.410902][T27508] usb 7-1: Product: syz [ 2558.415144][T27508] usb 7-1: Manufacturer: syz [ 2558.419751][T27508] usb 7-1: SerialNumber: syz [ 2558.426892][T27508] usb 7-1: config 0 descriptor?? [ 2558.671744][ T186] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2558.778109][ T24] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2558.785797][ T24] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 2558.794708][ T24] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2558.802420][ T24] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 2558.817961][ T24] usb 5-1: USB disconnect, device number 30 [ 2558.855946][ T186] usb 2-1: Using ep0 maxpacket: 32 [ 2558.871266][ T186] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 2558.892313][T27559] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2558.907222][ T186] usb 2-1: config 0 has no interface number 0 [ 2558.928722][ T186] usb 2-1: config 0 interface 12 has no altsetting 0 [ 2558.947929][ T186] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2558.957747][ T186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2558.971789][ T186] usb 2-1: Product: syz [ 2558.978550][ T186] usb 2-1: Manufacturer: syz [ 2558.983321][ T186] usb 2-1: SerialNumber: syz [ 2558.996136][ T186] usb 2-1: config 0 descriptor?? [ 2559.024263][ T680] lo speed is unknown, defaulting to 1000 [ 2559.085281][T27559] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2559.116442][T27559] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2559.160347][T27559] usb 4-1: config 0 has no interface number 0 [ 2559.179773][T27559] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2559.210052][T27559] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2559.237781][T27559] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2559.271140][T27559] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2559.288686][T27559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2559.311114][T27559] usb 4-1: Product: syz [ 2559.320077][T27559] usb 4-1: Manufacturer: syz [ 2559.329950][T27559] usb 4-1: SerialNumber: syz [ 2559.348533][T27559] usb 4-1: config 0 descriptor?? [ 2559.559927][T28916] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 2559.668247][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2559.725753][T28916] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2559.734937][T28916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2559.742988][T28916] usb 3-1: Product: syz [ 2559.747304][T28916] usb 3-1: Manufacturer: syz [ 2559.752163][T28916] usb 3-1: SerialNumber: syz [ 2559.759111][T28916] usb 3-1: config 0 descriptor?? [ 2559.835255][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2559.845771][ T24] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2559.854103][ T24] usb 5-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2559.864506][ T24] usb 5-1: config 63 has no interface number 0 [ 2559.870680][ T24] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2559.879251][ T24] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2559.888332][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2559.896411][ T24] usb 5-1: Product: syz [ 2559.900682][ T24] usb 5-1: Manufacturer: syz [ 2559.905276][ T24] usb 5-1: SerialNumber: syz [ 2560.330203][ T24] uvcvideo 5-1:63.66: Found Unit with invalid ID 0 [ 2560.336830][ T24] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2560.344270][ T24] uvcvideo 5-1:63.66: No valid video chain found. [ 2560.354311][ T24] usb 5-1: USB disconnect, device number 31 [ 2560.768912][ T186] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2560.776824][ T186] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 2560.784885][ T186] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2560.792550][ T186] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 2560.807207][ T186] usb 2-1: USB disconnect, device number 28 [ 2560.948815][T27559] usb 7-1: USB disconnect, device number 108 [ 2561.173911][T28916] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2561.325486][T27559] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2561.343656][T28916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2561.356085][T28916] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2561.367037][T28916] usb 5-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2561.377897][T28916] usb 5-1: config 63 has no interface number 0 [ 2561.384460][T28916] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2561.396162][T28916] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2561.405689][T28916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.414269][T28916] usb 5-1: Product: syz [ 2561.418542][T28916] usb 5-1: Manufacturer: syz [ 2561.423351][T28916] usb 5-1: SerialNumber: syz [ 2561.520488][T27559] usb 7-1: Using ep0 maxpacket: 32 [ 2561.527177][T27559] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2561.539158][T27559] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2561.551046][T27559] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2562.190493][T27559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2562.214244][T27559] usb 7-1: Product: syz [ 2562.244327][T27559] usb 7-1: Manufacturer: syz [ 2562.374803][T27559] usb 7-1: SerialNumber: syz [ 2562.386907][T22047] usb 4-1: USB disconnect, device number 35 [ 2562.418020][T27559] usb 7-1: config 0 descriptor?? [ 2562.447285][T27559] keyspan 7-1:0.0: Keyspan 1 port adapter converter detected [ 2562.474071][T27559] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 2562.490327][T26427] usb 3-1: USB disconnect, device number 14 [ 2562.503427][T27559] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 2562.523202][T27559] keyspan 7-1:0.0: unsupported endpoint type 0 [ 2562.539538][T27559] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 2562.551868][T27559] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 2562.561266][T27559] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 2562.571852][T27559] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 2562.601418][T27559] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2562.618467][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2562.706298][ T691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2562.856175][ T691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2562.871103][T28916] uvcvideo 5-1:63.66: Found Unit with invalid ID 0 [ 2562.877787][ T701] syzkaller0: entered promiscuous mode [ 2562.878035][ T691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2562.891499][ T701] syzkaller0: entered allmulticast mode [ 2562.891698][T28916] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2562.905749][ T691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2562.914662][T28916] uvcvideo 5-1:63.66: No valid video chain found. [ 2562.924301][T26427] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2562.948635][T28916] usb 5-1: USB disconnect, device number 32 [ 2563.112752][T26427] usb 3-1: Using ep0 maxpacket: 32 [ 2563.148215][T26427] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2563.167781][ T691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2563.180568][T26427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2563.200147][ T691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2563.208174][T26427] usb 3-1: Product: syz [ 2563.222283][T28916] usb 7-1: USB disconnect, device number 109 [ 2563.229885][T26427] usb 3-1: Manufacturer: syz [ 2563.237473][T26427] usb 3-1: SerialNumber: syz [ 2563.253814][T28916] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2563.265222][T26427] usb 3-1: config 0 descriptor?? [ 2563.277391][T28916] keyspan 7-1:0.0: device disconnected [ 2563.293758][T26427] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2564.963184][T26427] gspca_ov534_9: reg_w failed -110 [ 2565.000689][ T29] audit: type=1400 audit(1786220557.863:1092): avc: denied { name_connect } for pid=723 comm="syz.3.7574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 2565.579370][ T742] netlink: 'syz.6.7579': attribute type 1 has an invalid length. [ 2565.582487][T26427] gspca_ov534_9: Unknown sensor 0000 [ 2565.587329][ T742] netlink: 224 bytes leftover after parsing attributes in process `syz.6.7579'. [ 2565.605822][T26427] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2565.658346][T30966] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2565.698257][ T29] audit: type=1400 audit(1786220558.510:1093): avc: denied { read } for pid=5258 comm="dhcpcd" name="n59" dev="tmpfs" ino=24641 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2565.720514][ T29] audit: type=1400 audit(1786220558.510:1094): avc: denied { open } for pid=5258 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=24641 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2565.745491][ T29] audit: type=1400 audit(1786220558.510:1095): avc: denied { getattr } for pid=5258 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=24641 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2565.790313][ T748] syzkaller0: entered promiscuous mode [ 2565.795866][ T748] syzkaller0: entered allmulticast mode [ 2565.854935][T30966] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2565.863292][T30966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2565.873705][T30966] usb 5-1: config 0 has no interface number 0 [ 2565.880250][T30966] usb 5-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2565.896312][T30966] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2565.906021][T30966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2565.916858][T30966] usb 5-1: Product: syz [ 2565.921594][T30966] usb 5-1: Manufacturer: syz [ 2565.926728][T30966] usb 5-1: SerialNumber: syz [ 2565.961194][T30966] usb 5-1: config 0 descriptor?? [ 2567.051025][ T24] usb 3-1: USB disconnect, device number 15 [ 2567.951536][ T766] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2568.768569][ T24] usb 5-1: USB disconnect, device number 33 [ 2569.264182][ T785] netlink: 'syz.1.7593': attribute type 1 has an invalid length. [ 2569.288610][ T785] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7593'. [ 2571.691604][T27508] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2571.857223][T27508] usb 7-1: Using ep0 maxpacket: 32 [ 2571.882951][T27508] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 2571.927718][T27508] usb 7-1: config 0 has no interface number 0 [ 2571.943114][T27508] usb 7-1: config 0 interface 12 has no altsetting 0 [ 2571.965542][T27508] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2571.982598][T27508] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2572.088180][T27508] usb 7-1: Product: syz [ 2572.100694][T27508] usb 7-1: Manufacturer: syz [ 2572.121066][T27508] usb 7-1: SerialNumber: syz [ 2572.145501][T27508] usb 7-1: config 0 descriptor?? [ 2574.161252][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2574.344182][T27508] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2574.351778][T27508] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 2574.361052][ T24] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2574.373286][T27508] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2574.390920][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2574.411443][T27508] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 2574.420155][ T24] usb 5-1: config 0 has no interface number 0 [ 2574.430660][T27508] usb 7-1: USB disconnect, device number 110 [ 2574.436960][ T24] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2574.448560][ T24] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2574.467758][ T24] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2574.483876][ T24] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2574.495279][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.504485][ T24] usb 5-1: Product: syz [ 2574.508942][ T24] usb 5-1: Manufacturer: syz [ 2574.513609][ T24] usb 5-1: SerialNumber: syz [ 2574.523017][ T24] usb 5-1: config 0 descriptor?? [ 2574.616405][T28916] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2574.799010][T28916] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 2574.819245][T28916] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2574.836088][T28916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2574.846108][T28916] usb 2-1: Product: syz [ 2574.850434][T28916] usb 2-1: Manufacturer: syz [ 2574.857118][T28916] usb 2-1: SerialNumber: syz [ 2575.162796][T26427] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2576.058982][ T847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.193289][ T847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.411785][ T847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.528485][ T847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.644113][T26427] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2576.688610][ T847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2576.712048][T26427] ath9k_htc: Failed to initialize the device [ 2576.736059][T28916] usb 5-1: USB disconnect, device number 34 [ 2576.789559][T26427] usb 2-1: ath9k_htc: USB layer deinitialized [ 2576.847738][ T847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2576.897773][T22047] usb 2-1: USB disconnect, device number 29 [ 2577.273173][ T868] netlink: 'syz.4.7616': attribute type 1 has an invalid length. [ 2577.282511][ T868] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7616'. [ 2578.323772][ T29] audit: type=1400 audit(1786220569.348:1096): avc: denied { mount } for pid=863 comm="syz.3.7615" name="/" dev="overlay" ino=1829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2578.618018][T28916] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2578.773343][ T887] : renamed from bond_slave_0 (while UP) [ 2579.418893][ T897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7621'. [ 2579.428462][ T897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7621'. [ 2579.437483][ T897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7621'. [ 2580.021889][ T42] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2580.355738][ T42] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2580.467101][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2580.623077][ T42] usb 3-1: config 0 has no interface number 0 [ 2580.710073][ T42] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2580.864047][ T42] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2580.986079][ T42] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2581.167701][ T42] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2581.200760][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.214900][ T42] usb 3-1: Product: syz [ 2581.221723][ T42] usb 3-1: Manufacturer: syz [ 2581.233289][ T42] usb 3-1: SerialNumber: syz [ 2581.251957][ T42] usb 3-1: config 0 descriptor?? [ 2581.682648][T27559] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2581.881578][T27559] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 2581.938560][T27559] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2581.953834][T27559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.974694][T27559] usb 4-1: Product: syz [ 2581.978964][T27559] usb 4-1: Manufacturer: syz [ 2581.987361][T27559] usb 4-1: SerialNumber: syz [ 2582.124091][T22047] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2582.607387][ T935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2582.664480][T26427] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2582.709069][ T935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2582.759835][ T935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2582.848226][ T935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2582.884240][T26427] usb 7-1: Using ep0 maxpacket: 8 [ 2582.942158][T26427] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2582.970901][ T935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2583.036012][T26427] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2583.049092][ T935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2583.132220][T27559] usb 4-1: USB disconnect, device number 36 [ 2583.153028][T26427] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2583.239513][T26427] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2583.283736][T26427] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2583.334348][T26427] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2583.377011][T26427] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2583.461712][T26427] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2583.506246][T22047] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2583.557932][T22047] ath9k_htc: Failed to initialize the device [ 2583.612937][T27559] usb 4-1: ath9k_htc: USB layer deinitialized [ 2583.902186][T26427] usb 7-1: GET_CAPABILITIES returned 0 [ 2583.913564][T28916] usb 3-1: USB disconnect, device number 16 [ 2583.925428][T26427] usbtmc 7-1:16.0: can't read capabilities [ 2584.099593][T27559] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2584.201852][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.210959][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.371548][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.380652][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.392148][T27559] usb 4-1: Using ep0 maxpacket: 32 [ 2584.443088][T27559] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2584.509213][T26427] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2584.525204][T27559] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2584.576081][T27559] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2584.605313][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.627812][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.638573][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.648201][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.660144][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.669236][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.682391][T27559] usb 4-1: SerialNumber: syz [ 2584.702803][T26427] usb 2-1: device descriptor read/64, error -71 [ 2584.725652][T27559] usb 4-1: config 0 descriptor?? [ 2584.736638][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.745732][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.756895][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.774569][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.783903][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.829993][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2584.860323][ T10] usb 7-1: USB disconnect, device number 111 [ 2584.962271][T26427] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2585.134950][T26427] usb 2-1: device descriptor read/64, error -71 [ 2585.170628][T27559] usb 4-1: can't set config #0, error -71 [ 2585.196396][T27559] usb 4-1: USB disconnect, device number 37 [ 2585.219291][ T964] netlink: 'syz.2.7641': attribute type 1 has an invalid length. [ 2585.227819][ T964] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7641'. [ 2585.374169][T26427] usb usb2-port1: attempt power cycle [ 2585.746448][T26427] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2585.818633][T26427] usb 2-1: device descriptor read/8, error -71 [ 2586.110217][T26427] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2586.280952][T26427] usb 2-1: device descriptor read/8, error -71 [ 2586.707575][ T993] : renamed from bond_slave_0 (while UP) [ 2587.325478][T26427] usb usb2-port1: unable to enumerate USB device [ 2587.464924][ T1003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7652'. [ 2587.560457][ T1003] syz.4.7652 (1003): attempted to duplicate a private mapping with mremap. This is not supported. [ 2587.623218][ T999] bond1: entered promiscuous mode [ 2587.852789][T27508] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2587.852853][T22047] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2588.018361][T27508] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2588.038542][T27508] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2588.058527][T27508] usb 7-1: config 0 has no interface number 0 [ 2588.071179][T27508] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2588.098150][T27508] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2588.117432][T27508] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2588.136578][T27508] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2588.157575][T22047] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 2588.187524][T27508] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.198128][T27508] usb 7-1: Product: syz [ 2588.209137][T27508] usb 7-1: Manufacturer: syz [ 2588.219666][T27508] usb 7-1: SerialNumber: syz [ 2589.057204][T22047] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2589.072344][T22047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.081671][T22047] usb 4-1: Product: syz [ 2589.085858][T22047] usb 4-1: Manufacturer: syz [ 2589.090625][T22047] usb 4-1: SerialNumber: syz [ 2589.250934][T27508] usb 7-1: config 0 descriptor?? [ 2589.299151][T26427] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2589.950752][ T1012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.721515][ T1012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.745192][ T1012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.758876][ T1012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.771322][ T1012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.781206][ T1012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.800960][ T42] usb 4-1: USB disconnect, device number 38 [ 2590.836168][T26427] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2591.610661][T27508] usb 7-1: USB disconnect, device number 112 [ 2592.239525][T26427] ath9k_htc: Failed to initialize the device [ 2592.260744][ T42] usb 4-1: ath9k_htc: USB layer deinitialized [ 2595.599221][ T1093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7672'. [ 2596.252517][ T1091] bond1: entered promiscuous mode [ 2596.778280][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2598.253705][ T1114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7676'. [ 2598.262807][ T1114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7676'. [ 2598.271790][ T1114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7676'. [ 2598.350514][ T10] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 2598.398798][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2598.493302][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2598.591244][ T10] usb 5-1: Product: syz [ 2598.631257][ T10] usb 5-1: Manufacturer: syz [ 2598.678521][ T10] usb 5-1: SerialNumber: syz [ 2598.793082][T26427] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2598.843361][ T1120] netlink: 'syz.3.7679': attribute type 1 has an invalid length. [ 2598.888947][ T1120] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7679'. [ 2598.980970][T27508] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 2599.049461][ T1101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2599.092905][ T1101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2599.140226][ T1101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2599.164413][ T1101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2599.185510][T27508] usb 7-1: device descriptor read/64, error -71 [ 2599.203925][ T1101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2599.275233][ T1101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.067028][T27559] usb 5-1: USB disconnect, device number 35 [ 2600.105430][T26427] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2600.218822][T26427] ath9k_htc: Failed to initialize the device [ 2600.321801][T27559] usb 5-1: ath9k_htc: USB layer deinitialized [ 2600.775765][T27559] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2601.010637][ T29] audit: type=1400 audit(1786220590.738:1097): avc: denied { write } for pid=1135 comm="syz.3.7682" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2601.421804][ T1145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7684'. [ 2601.433317][ T1142] bond2: entered promiscuous mode [ 2601.511833][T27508] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 2601.652622][T27508] usb 7-1: device descriptor read/64, error -71 [ 2601.775913][T27508] usb usb7-port1: attempt power cycle [ 2602.162030][T27508] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2602.465050][T27508] usb 7-1: device not accepting address 115, error -71 [ 2602.803628][ T1170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7692'. [ 2603.329160][ T1173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7693'. [ 2603.378174][ T1171] bond1: entered promiscuous mode [ 2604.501400][T26427] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2605.897375][T26427] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 2606.045818][T26427] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2606.152204][T26427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.270339][T26427] usb 2-1: Product: syz [ 2606.328071][T26427] usb 2-1: Manufacturer: syz [ 2606.389027][T26427] usb 2-1: SerialNumber: syz [ 2606.717617][T27559] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2606.970158][ T1178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.005540][ T1178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.040292][ T1178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.047027][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2607.092673][ T1178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.137790][ T1194] lo speed is unknown, defaulting to 1000 [ 2607.185852][ T1178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.237203][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2607.261489][ T1178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.432812][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2607.434009][ T42] usb 2-1: USB disconnect, device number 35 [ 2607.992235][T27559] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2608.018903][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2608.072558][T27559] ath9k_htc: Failed to initialize the device [ 2608.095082][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2608.113350][ T42] usb 2-1: ath9k_htc: USB layer deinitialized [ 2608.145869][ T10] usb 5-1: config 0 descriptor?? [ 2608.498419][ T42] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2608.511381][T27508] usb 5-1: USB disconnect, device number 37 [ 2608.687183][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 2608.720449][ T42] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 2608.742694][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2608.757001][ T42] usb 2-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 1 [ 2608.832934][ T42] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2608.905756][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2608.967291][ T42] usb 2-1: config 0 descriptor?? [ 2608.996803][T27508] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2609.023278][ T42] usb 2-1: can't set config #0, error -71 [ 2609.102206][ T42] usb 2-1: USB disconnect, device number 36 [ 2609.192955][T27508] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2609.308184][T27508] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2609.375617][T27508] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2609.415844][T27508] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.420048][ T1219] bond2: entered promiscuous mode [ 2609.435524][ T1222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7705'. [ 2609.436913][T27508] usb 5-1: config 0 descriptor?? [ 2609.741026][ T1222] netlink: zone id is out of range [ 2610.482889][ T1232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2610.599558][ T1232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2612.435457][ T10] usb 5-1: USB disconnect, device number 38 [ 2612.808580][ T29] audit: type=1400 audit(1786220602.002:1098): avc: denied { create } for pid=1260 comm="syz.6.7717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2612.912508][ T29] audit: type=1400 audit(1786220602.094:1099): avc: denied { bind } for pid=1260 comm="syz.6.7717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2613.039854][ T29] audit: type=1400 audit(1786220602.094:1100): avc: denied { write } for pid=1260 comm="syz.6.7717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2615.774456][ T29] audit: type=1400 audit(1786220604.743:1101): avc: denied { remount } for pid=1292 comm="syz.1.7728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2616.190791][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7731'. [ 2616.278847][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7731'. [ 2616.316606][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7731'. [ 2616.368911][ T42] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2616.427954][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7731'. [ 2616.437877][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7731'. [ 2616.636890][ T42] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2616.654317][ T42] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2616.682726][ T42] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2616.698208][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2616.706478][ T42] usb 3-1: Product: syz [ 2616.717434][ T42] usb 3-1: Manufacturer: syz [ 2616.722514][ T42] usb 3-1: SerialNumber: syz [ 2616.796540][ T42] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2618.724651][ T42] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2618.754385][ T42] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2619.143357][ T1331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7737'. [ 2619.348923][ T42] usb 3-1: USB disconnect, device number 17 [ 2619.406813][ T42] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2619.555895][ T42] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2619.637470][ T1339] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2620.153583][ T42] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2622.180555][ T1359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7746'. [ 2622.213351][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 2622.272289][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 2622.323861][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 2622.390710][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 2622.463550][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 2622.772809][ T1371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7749'. [ 2622.892371][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7749'. [ 2622.908863][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7749'. [ 2623.124407][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7749'. [ 2624.699427][ T1382] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2624.714816][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2624.916798][ T42] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2625.222396][ T42] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2625.244283][ T42] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2625.262834][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2625.955505][ T42] usb 3-1: Product: syz [ 2625.970160][ T42] usb 3-1: Manufacturer: syz [ 2626.057617][ T42] usb 3-1: SerialNumber: syz [ 2626.138177][ T42] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2626.221821][ T42] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2626.283221][ T29] audit: type=1400 audit(1786220614.419:1102): avc: denied { override_creds } for pid=1385 comm="syz.1.7753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2626.320365][ T42] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2627.484783][ T1397] bond3: entered promiscuous mode [ 2627.565628][ T1397] overlay: Unknown parameter '/' [ 2627.621929][ T1407] netlink: zone id is out of range [ 2628.389007][ T42] usb 3-1: USB disconnect, device number 18 [ 2628.464908][ T42] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2628.568533][ T42] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2628.713348][ T42] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2629.806250][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2633.048360][ T1433] evm: overlay not supported [ 2634.140802][ T42] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2634.502596][ T29] audit: type=1400 audit(1786220621.980:1103): avc: denied { ioctl } for pid=1452 comm="syz.1.7772" path="socket:[187424]" dev="sockfs" ino=187424 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2634.567806][ T42] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2634.601067][ T42] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2634.629552][ T42] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2635.703196][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2635.712356][ T42] usb 4-1: Product: syz [ 2635.721085][ T42] usb 4-1: Manufacturer: syz [ 2635.727620][ T42] usb 4-1: SerialNumber: syz [ 2635.758018][ T42] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 2635.819413][ T42] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2635.994900][ T42] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2637.146477][T30966] usb 4-1: USB disconnect, device number 39 [ 2637.177766][T30966] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2637.222791][T30966] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2637.282113][T30966] ti_usb_3410_5052 4-1:2.0: device disconnected [ 2637.369068][ T1479] jffs2: notice: (1479) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 2637.445417][ T1486] __nla_validate_parse: 2 callbacks suppressed [ 2637.445431][ T1486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7779'. [ 2637.549506][ T1489] : renamed from bond_slave_0 (while UP) [ 2638.115216][ T1486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7779'. [ 2639.696445][ T1504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7785'. [ 2639.859848][ T1512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7788'. [ 2639.998122][T27508] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2640.138310][T30966] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2640.192617][ T42] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2640.201800][T27508] usb 2-1: config 0 has no interfaces? [ 2640.207430][T27508] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2640.216511][T27508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.229804][T27508] usb 2-1: config 0 descriptor?? [ 2640.290368][T27559] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2640.313043][T30966] usb 3-1: config 0 has no interfaces? [ 2640.318557][T30966] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2640.328015][T30966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.340986][T30966] usb 3-1: config 0 descriptor?? [ 2640.367614][ T42] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2640.379479][ T42] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2640.391272][ T42] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2640.400439][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.408431][ T42] usb 5-1: Product: syz [ 2640.412642][ T42] usb 5-1: Manufacturer: syz [ 2640.417239][ T42] usb 5-1: SerialNumber: syz [ 2640.430174][ T42] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 2640.440534][ T42] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2640.455377][ T42] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2640.466095][T27559] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2640.482297][T27559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.494418][T28916] usb 2-1: USB disconnect, device number 37 [ 2640.507753][T27559] usb 4-1: Product: syz [ 2640.518994][T27559] usb 4-1: Manufacturer: syz [ 2640.523780][T27559] usb 4-1: SerialNumber: syz [ 2640.573464][T26427] usb 3-1: USB disconnect, device number 19 [ 2641.250641][T27559] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2641.424165][T27559] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2641.527258][T27559] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2641.655021][T27559] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2641.824810][T27559] usb 4-1: USB disconnect, device number 40 [ 2642.365009][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7795'. [ 2642.422376][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7795'. [ 2642.458060][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7795'. [ 2642.491673][ T1543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7797'. [ 2642.526763][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7795'. [ 2642.551116][ T1538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7795'. [ 2642.661401][ T1547] jffs2: notice: (1547) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 2642.699016][ T29] audit: type=1400 audit(1786220629.605:1104): avc: denied { write } for pid=1546 comm="syz.6.7799" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2642.738908][ T29] audit: type=1400 audit(1786220629.633:1105): avc: denied { create } for pid=1546 comm="syz.6.7799" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 2643.818167][ T42] usb 5-1: USB disconnect, device number 39 [ 2643.877210][ T42] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2643.988638][ T42] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2644.101254][ T42] ti_usb_3410_5052 5-1:2.0: device disconnected [ 2644.481935][ T42] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2646.666144][ T42] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2646.675287][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2646.732861][ T1585] can0: slcan on ttyS3. [ 2646.741358][ T42] usb 5-1: Product: syz [ 2646.789932][ T42] usb 5-1: Manufacturer: syz [ 2646.823290][ T42] usb 5-1: SerialNumber: syz [ 2646.974453][ T1585] can0 (unregistered): slcan off ttyS3. [ 2647.606380][ T42] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2647.686278][ T42] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2647.728930][ T42] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2647.775920][ T42] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2647.920971][ T42] usb 5-1: USB disconnect, device number 40 [ 2648.003210][ T1615] __nla_validate_parse: 2 callbacks suppressed [ 2648.003228][ T1615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7815'. [ 2648.114868][ T1618] : renamed from bond_slave_0 (while UP) [ 2649.047277][ T1628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7818'. [ 2649.116231][ T29] audit: type=1400 audit(1786220635.523:1106): avc: denied { write } for pid=1603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2649.220380][ T29] audit: type=1400 audit(1786220635.523:1107): avc: denied { create } for pid=1603 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2649.347656][ T29] audit: type=1400 audit(1786220635.532:1108): avc: denied { write } for pid=1603 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=25202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2649.453965][T30966] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2649.602951][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 2649.646713][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 2649.664238][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 2649.675039][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 2649.689327][ T1640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7820'. [ 2649.782168][ T1634] lo speed is unknown, defaulting to 1000 [ 2649.860886][ T29] audit: type=1400 audit(1786220635.532:1109): avc: denied { append } for pid=1603 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=25202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2649.961242][T30966] usb 5-1: config 0 has no interfaces? [ 2649.981792][T30966] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2650.081109][T30966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2650.091389][ T29] audit: type=1400 audit(1786220635.846:1110): avc: denied { write } for pid=1635 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2650.140425][T30966] usb 5-1: config 0 descriptor?? [ 2650.221356][ T29] audit: type=1400 audit(1786220635.846:1111): avc: denied { unlink } for pid=1635 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=25202 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2650.561976][T30966] usb 5-1: USB disconnect, device number 41 [ 2651.084684][ T24] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 2651.334536][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2651.364888][ T24] usb 3-1: config 0 has no interface number 0 [ 2651.401418][ T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2651.424242][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2651.459759][ T24] usb 3-1: Product: syz [ 2652.454830][ T24] usb 3-1: Manufacturer: syz [ 2652.492926][ T24] usb 3-1: SerialNumber: syz [ 2652.549673][ T24] usb 3-1: config 0 descriptor?? [ 2652.708053][ T29] audit: type=1400 audit(1786220638.846:1112): avc: denied { write } for pid=1645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2652.818848][ T24] usb 3-1: can't set config #0, error -71 [ 2652.880905][ T24] usb 3-1: USB disconnect, device number 20 [ 2653.059929][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7826'. [ 2653.136923][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7826'. [ 2653.152985][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7826'. [ 2653.360080][ T29] audit: type=1400 audit(1786220639.446:1113): avc: denied { write } for pid=1685 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2654.533858][T28916] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2654.726030][T28916] usb 2-1: config 0 has no interfaces? [ 2654.740516][T28916] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2654.760930][T28916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2654.787665][T28916] usb 2-1: config 0 descriptor?? [ 2655.063168][T28916] usb 2-1: USB disconnect, device number 38 [ 2656.297778][ T29] audit: type=1400 audit(1786220642.151:1114): avc: denied { write } for pid=1730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2656.609526][ T29] audit: type=1400 audit(1786220642.447:1115): avc: denied { write } for pid=1756 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2657.032568][ T1768] __nla_validate_parse: 2 callbacks suppressed [ 2657.032623][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7847'. [ 2657.087219][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7847'. [ 2657.099181][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7847'. [ 2657.110807][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7847'. [ 2657.121260][ T1768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7847'. [ 2657.725707][ T1781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7850'. [ 2657.768760][ T1781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7850'. [ 2657.783577][ T1781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7850'. [ 2657.795103][ T1781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7850'. [ 2657.805525][ T1781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7850'. [ 2658.140189][ T1788] jffs2: notice: (1788) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 2658.200569][ T29] audit: type=1400 audit(1786220643.906:1116): avc: denied { write } for pid=1764 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2658.530192][ T29] audit: type=1400 audit(1786220644.210:1117): avc: denied { write } for pid=1793 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2659.640952][ T29] audit: type=1400 audit(1786220645.244:1118): avc: denied { write } for pid=1805 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2660.177139][ T29] audit: type=1400 audit(1786220645.733:1119): avc: denied { write } for pid=1840 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2660.827187][T27559] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2661.516345][T27559] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2661.967606][T27559] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2661.993925][T27559] usb 4-1: config 0 has no interface number 0 [ 2662.007888][T27559] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2662.018993][T27559] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2662.028927][T27559] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2662.044425][T27559] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2662.053524][T27559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2662.061519][T27559] usb 4-1: Product: syz [ 2662.065714][T27559] usb 4-1: Manufacturer: syz [ 2662.070310][T27559] usb 4-1: SerialNumber: syz [ 2662.076496][T27559] usb 4-1: config 0 descriptor?? [ 2662.340336][T27559] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2662.542524][ T1866] can0: slcan on ttyS3. [ 2662.809810][T30966] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2663.120833][T30966] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2663.141993][T30966] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2663.185658][T30966] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2663.214671][T30966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.223557][ T1862] can0 (unregistered): slcan off ttyS3. [ 2663.258894][T30966] usb 3-1: Product: syz [ 2663.275332][T16395] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2663.288589][T30966] usb 3-1: Manufacturer: syz [ 2663.312533][T30966] usb 3-1: SerialNumber: syz [ 2663.356931][T30966] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2663.436913][T30966] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2663.454246][T16395] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2663.473536][T16395] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2663.495529][T16395] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2663.507358][T30966] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2663.526232][T16395] usb 5-1: config 63 has no interface number 0 [ 2663.553486][T16395] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2663.579680][T16395] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2663.593605][T16395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.612254][T16395] usb 5-1: Product: syz [ 2663.617584][T16395] usb 5-1: Manufacturer: syz [ 2663.625541][T16395] usb 5-1: SerialNumber: syz [ 2663.734055][ T1889] __nla_validate_parse: 12 callbacks suppressed [ 2663.734074][ T1889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7871'. [ 2664.003003][T16395] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 2664.018815][T16395] usb 5-1: USB disconnect, device number 42 [ 2664.042277][ T29] audit: type=1400 audit(1786220649.306:1120): avc: denied { write } for pid=1878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2664.107772][T30966] usb 4-1: USB disconnect, device number 41 [ 2664.252892][ T29] audit: type=1400 audit(1786220649.491:1121): avc: denied { write } for pid=1893 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2665.741372][ T29] audit: type=1400 audit(1786220650.876:1122): avc: denied { write } for pid=1904 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2665.820115][T30966] usb 3-1: USB disconnect, device number 21 [ 2665.865940][T30966] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2665.948674][ T29] audit: type=1400 audit(1786220651.051:1123): avc: denied { write } for pid=1933 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2666.036930][T30966] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2666.135604][T30966] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2666.611486][T27508] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2666.804006][T27508] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2666.860972][T27508] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2666.913232][T27508] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2666.952106][T27508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2666.990015][T27508] usb 4-1: Product: syz [ 2666.994637][T27508] usb 4-1: Manufacturer: syz [ 2667.028822][T27508] usb 4-1: SerialNumber: syz [ 2667.050037][T27508] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 2667.098592][T27508] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2667.131924][T27508] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2667.153036][T27559] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2667.359639][T27559] usb 2-1: Using ep0 maxpacket: 16 [ 2667.389347][T27559] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 2667.419112][T27559] usb 2-1: config 0 has no interface number 0 [ 2667.452369][T27559] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2667.486176][T27559] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2667.527039][T27559] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2667.547111][T27559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2667.585140][T27559] usb 2-1: Product: syz [ 2667.597970][T27559] usb 2-1: Manufacturer: syz [ 2667.612463][T27559] usb 2-1: SerialNumber: syz [ 2667.763674][T27559] usb 2-1: config 0 descriptor?? [ 2667.790281][ T1948] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2667.812082][ T1948] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2668.118777][ T1948] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2668.154625][ T1948] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2668.445082][T27559] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2668.698651][T27559] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2668.725669][T27559] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 2668.779549][T27559] asix 2-1:0.34: probe with driver asix failed with error -61 [ 2668.868916][ T1966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7883'. [ 2668.877996][ T1966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7883'. [ 2668.886971][ T1966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7883'. [ 2669.481875][T27559] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2669.655225][T27508] usb 4-1: USB disconnect, device number 42 [ 2669.673660][T27559] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2669.704029][T27508] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2669.721028][T27559] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2669.768407][T27559] usb 7-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2669.789370][T27508] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2669.832129][T27559] usb 7-1: config 63 has no interface number 0 [ 2669.851239][T27508] ti_usb_3410_5052 4-1:2.0: device disconnected [ 2669.867992][T27559] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2669.913507][T27559] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2669.961702][T27559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.998390][T27559] usb 7-1: Product: syz [ 2670.022207][T27559] usb 7-1: Manufacturer: syz [ 2670.049884][T27559] usb 7-1: SerialNumber: syz [ 2670.222457][T27508] usb 2-1: USB disconnect, device number 39 [ 2670.342689][T27559] uvcvideo 7-1:63.66: probe with driver uvcvideo failed with error -22 [ 2670.440299][T27559] usb 7-1: USB disconnect, device number 117 [ 2670.463084][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7894'. [ 2670.548922][ T1990] lo speed is unknown, defaulting to 1000 [ 2670.550172][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7894'. [ 2670.595604][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7894'. [ 2670.914559][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7894'. [ 2670.925131][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7894'. [ 2671.181701][ T2000] syzkaller0: entered promiscuous mode [ 2671.189689][ T2000] syzkaller0: entered allmulticast mode [ 2671.332848][ T2005] jffs2: notice: (2005) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 2671.424604][ T2006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7898'. [ 2671.458547][ T2006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7898'. [ 2671.680953][T27508] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 2671.973220][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7899'. [ 2671.983668][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7899'. [ 2671.993253][ T2009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7899'. [ 2672.104842][T27508] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2672.119101][T27508] usb 2-1: config 0 has no interface number 0 [ 2672.129635][T27508] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2672.141001][T27508] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.150842][T27508] usb 2-1: Product: syz [ 2672.167227][T27508] usb 2-1: Manufacturer: syz [ 2672.175455][T27508] usb 2-1: SerialNumber: syz [ 2672.183275][T27508] usb 2-1: config 0 descriptor?? [ 2672.190516][T26427] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 2672.206858][T27508] usb 2-1: selecting invalid altsetting 1 [ 2672.212969][T27508] dvb_ttusb_budget: ttusb_init_controller: error [ 2672.219323][T27508] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2672.330677][T27559] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2672.364756][T26427] usb 7-1: config 0 has no interfaces? [ 2672.370435][T26427] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2672.381649][T26427] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2672.408051][T26427] usb 7-1: config 0 descriptor?? [ 2672.494445][T27559] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2672.513239][T27508] DVB: Unable to find symbol stv0299_attach() [ 2672.514293][T27559] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2672.533647][T27559] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2672.552979][T27559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.566952][T27559] usb 3-1: Product: syz [ 2672.567086][T27508] DVB: Unable to find symbol tda8083_attach() [ 2672.574189][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2672.587229][T27559] usb 3-1: Manufacturer: syz [ 2672.587283][T27508] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2672.594062][T27559] usb 3-1: SerialNumber: syz [ 2672.619948][T27559] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2672.658038][T27559] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2672.659080][T27508] usb 7-1: USB disconnect, device number 118 [ 2672.670725][T27559] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2672.765815][ T10] usb 5-1: config 0 has no interfaces? [ 2672.771326][ T10] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2672.790694][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2672.808860][ T10] usb 5-1: config 0 descriptor?? [ 2673.069883][T16395] usb 5-1: USB disconnect, device number 43 [ 2673.327256][T27508] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2673.525116][T27508] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2673.535307][T27508] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2673.543549][T27508] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2673.555020][T27508] usb 4-1: config 63 has no interface number 0 [ 2673.561430][T27508] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2673.573218][T27508] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2673.587158][T27508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2673.595421][T27508] usb 4-1: Product: syz [ 2673.600446][T27508] usb 4-1: Manufacturer: syz [ 2673.606027][T27508] usb 4-1: SerialNumber: syz [ 2673.783944][T27559] usb 2-1: USB disconnect, device number 40 [ 2673.867987][ T2043] syzkaller0: entered promiscuous mode [ 2673.891361][ T2043] syzkaller0: entered allmulticast mode [ 2673.929978][T27508] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 2673.950791][T27508] usb 4-1: USB disconnect, device number 43 [ 2675.360453][T27508] usb 3-1: USB disconnect, device number 22 [ 2675.385280][T30966] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2675.419866][T27508] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2675.473877][T27508] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2675.520582][T27508] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2675.582042][T30966] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2675.619983][T30966] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2675.638394][T30966] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2675.676279][T30966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2675.742332][T30966] usb 7-1: config 0 descriptor?? [ 2675.788522][T30966] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2676.019984][ T10] usb 7-1: USB disconnect, device number 119 [ 2676.151055][ T2087] syzkaller0: entered promiscuous mode [ 2676.169242][ T2087] syzkaller0: entered allmulticast mode [ 2676.524053][ T2103] __nla_validate_parse: 25 callbacks suppressed [ 2676.524074][ T2103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7929'. [ 2676.560406][ T2103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7929'. [ 2676.566734][ T10] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2676.587828][T27559] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2676.720296][T26427] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2676.763385][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2676.780740][T27559] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2676.790713][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2676.803756][T27559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.811983][T27559] usb 3-1: Product: syz [ 2676.817693][T27559] usb 3-1: Manufacturer: syz [ 2676.822348][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2676.835670][T27559] usb 3-1: SerialNumber: syz [ 2676.841706][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2676.869743][ T10] usb 7-1: config 0 descriptor?? [ 2676.878561][ T10] aiptek 7-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 2676.925011][T26427] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2676.958777][ T29] audit: type=1400 audit(1786220661.197:1124): avc: denied { write } for pid=2096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2676.983235][ T2116] program syz.1.7932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2676.993645][ T2116] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2677.597555][ T2120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2677.689956][T27559] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2677.812420][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2677.825106][T27559] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2677.839109][T27559] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2677.869399][ T2120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2677.883436][T26427] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2677.890661][ T29] audit: type=1400 audit(1786220662.083:1125): avc: denied { write } for pid=2119 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2677.891788][T26427] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2677.930949][T26427] usb 4-1: config 63 has no interface number 0 [ 2677.966713][T26427] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2677.976007][T27559] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2677.998400][T26427] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2678.012733][T26427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2678.036663][T26427] usb 4-1: Product: syz [ 2678.044160][T27559] usb 3-1: USB disconnect, device number 23 [ 2678.060695][T26427] usb 4-1: Manufacturer: syz [ 2678.075307][T26427] usb 4-1: SerialNumber: syz [ 2678.337774][T26427] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 2678.372964][T26427] usb 4-1: USB disconnect, device number 44 [ 2678.487872][ T29] audit: type=1400 audit(1786220662.647:1126): avc: denied { write } for pid=2124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2679.649251][ T2158] syzkaller0: entered promiscuous mode [ 2679.657753][ T2158] syzkaller0: entered allmulticast mode [ 2679.724480][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7938'. [ 2679.738722][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7938'. [ 2679.828892][ T29] audit: type=1400 audit(1786220663.874:1127): avc: denied { write } for pid=2148 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2679.872428][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7938'. [ 2679.925057][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7938'. [ 2679.930161][T16395] usb 7-1: USB disconnect, device number 120 [ 2679.939111][ T2157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7938'. [ 2679.946224][T30966] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2680.244514][T30966] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 2680.288921][ T2173] program syz.6.7943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2680.298698][ T2173] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2681.181314][ T2166] bond1: entered promiscuous mode [ 2681.230615][T30966] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2681.591703][T30966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2681.653111][T30966] usb 4-1: Product: syz [ 2681.673582][T30966] usb 4-1: Manufacturer: syz [ 2681.703798][ T2172] overlay: Unknown parameter '/' [ 2681.712858][ T2172] netlink: zone id is out of range [ 2681.722127][ T2179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'. [ 2681.733718][T30966] usb 4-1: SerialNumber: syz [ 2681.927910][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'. [ 2681.942840][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'. [ 2681.994538][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'. [ 2682.061919][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7944'. [ 2682.762802][ T186] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2682.839960][ T42] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2682.912939][T27559] usb 4-1: USB disconnect, device number 45 [ 2682.981325][ T186] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2682.999190][ T186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2683.034301][ T186] usb 2-1: Product: syz [ 2683.059090][ T186] usb 2-1: Manufacturer: syz [ 2683.081563][ T186] usb 2-1: SerialNumber: syz [ 2683.258252][ T29] audit: type=1400 audit(1786220667.041:1128): avc: denied { write } for pid=2171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2683.395767][ T2201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7948'. [ 2683.436191][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7948'. [ 2683.481368][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7948'. [ 2683.493348][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7948'. [ 2683.545071][ T29] audit: type=1400 audit(1786220667.299:1129): avc: denied { write } for pid=2207 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2683.618399][ T2204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7948'. [ 2683.769151][T27508] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2683.816484][ T186] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2683.842628][ T186] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2683.853308][ T186] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2683.872891][ T186] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2683.909117][ T186] usb 2-1: USB disconnect, device number 41 [ 2683.917135][ T2216] syzkaller0: entered promiscuous mode [ 2683.946511][ T2216] syzkaller0: entered allmulticast mode [ 2683.980003][T27508] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2683.992426][T27508] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2684.000965][T27508] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2684.025594][ T42] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2684.035277][ T42] ath9k_htc: Failed to initialize the device [ 2684.053728][T27508] usb 5-1: config 63 has no interface number 0 [ 2684.063532][T27508] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2684.063952][T27559] usb 4-1: ath9k_htc: USB layer deinitialized [ 2684.072811][T27508] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2684.089857][T27508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.101532][T27508] usb 5-1: Product: syz [ 2684.106445][T27508] usb 5-1: Manufacturer: syz [ 2684.111141][T27508] usb 5-1: SerialNumber: syz [ 2684.159274][T26427] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2684.323094][T26427] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2684.331576][T26427] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2684.371155][T27508] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 2684.382560][T26427] usb 3-1: config 0 has no interface number 0 [ 2684.392686][T27508] usb 5-1: USB disconnect, device number 44 [ 2684.434305][T26427] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2684.475547][T26427] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2684.532733][T26427] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2684.576236][T26427] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2684.602228][T26427] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.624148][ T29] audit: type=1400 audit(1786220668.306:1130): avc: denied { write } for pid=2221 comm="syz.1.7955" name="instances" dev="tracefs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2684.627026][T26427] usb 3-1: Product: syz [ 2684.687321][T26427] usb 3-1: Manufacturer: syz [ 2684.716522][T26427] usb 3-1: SerialNumber: syz [ 2684.747279][ T29] audit: type=1400 audit(1786220668.306:1131): avc: denied { add_name } for pid=2221 comm="syz.1.7955" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2684.775600][T26427] usb 3-1: config 0 descriptor?? [ 2684.868822][ T29] audit: type=1400 audit(1786220668.306:1132): avc: denied { create } for pid=2221 comm="syz.1.7955" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 2684.915918][ T29] audit: type=1400 audit(1786220668.417:1133): avc: denied { bind } for pid=2221 comm="syz.1.7955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2687.902338][T26427] usb 3-1: can't set config #0, error -71 [ 2687.912354][T26427] usb 3-1: USB disconnect, device number 24 [ 2688.203732][ T2240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7958'. [ 2688.212849][ T2240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7958'. [ 2688.221877][ T2240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7958'. [ 2688.238775][ T186] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2688.447451][ T186] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 2688.590581][ T186] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2688.609701][ T186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2688.638308][ T186] usb 7-1: Product: syz [ 2688.651114][ T186] usb 7-1: Manufacturer: syz [ 2688.671922][ T186] usb 7-1: SerialNumber: syz [ 2688.726151][T27559] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2688.820144][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7960'. [ 2688.832037][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7960'. [ 2688.844507][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7960'. [ 2688.854702][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7960'. [ 2688.908020][ T2244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7960'. [ 2688.962374][ T2234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2688.988141][ T2234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2689.249343][ T2234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2689.306519][ T2234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2689.329273][ T2234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2689.357766][ T2234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2689.536152][ T2250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7961'. [ 2689.556046][T27508] usb 7-1: USB disconnect, device number 121 [ 2689.567055][ T2250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7961'. [ 2689.901501][T27559] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2689.931613][T27559] ath9k_htc: Failed to initialize the device [ 2689.952246][T27508] usb 7-1: ath9k_htc: USB layer deinitialized [ 2690.149118][ T42] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2690.300758][T27508] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2690.314646][ T42] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2690.323859][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2690.331860][ T42] usb 4-1: Product: syz [ 2690.338430][ T42] usb 4-1: Manufacturer: syz [ 2690.343046][ T42] usb 4-1: SerialNumber: syz [ 2690.463283][T27508] usb 7-1: Using ep0 maxpacket: 32 [ 2690.470155][T27508] usb 7-1: config index 0 descriptor too short (expected 241, got 72) [ 2690.483716][T27508] usb 7-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2690.503852][T27508] usb 7-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2690.513755][T27508] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2690.528302][T27508] usb 7-1: config 0 descriptor?? [ 2690.543335][T27508] mos7840 7-1:0.0: missing endpoints [ 2690.847566][T27508] usb 7-1: USB disconnect, device number 122 [ 2691.064935][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2691.082323][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2691.097894][ T42] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2691.143979][ T29] audit: type=1400 audit(1786220674.260:1134): avc: denied { read } for pid=2254 comm="syz.4.7963" dev="nsfs" ino=4026532786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2691.218809][ T42] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2691.238502][ T2273] pim6reg: entered allmulticast mode [ 2691.283478][ T2273] pim6reg: left allmulticast mode [ 2691.405365][ T42] usb 4-1: USB disconnect, device number 46 [ 2691.594969][ T2271] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2692.021363][ T29] audit: type=1400 audit(1786220674.260:1135): avc: denied { open } for pid=2254 comm="syz.4.7963" path="net:[4026532786]" dev="nsfs" ino=4026532786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2692.424203][ T42] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 2692.623710][ T42] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2692.648060][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2692.667964][ T42] usb 7-1: config 0 has no interface number 0 [ 2692.687261][ T42] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2692.707626][ T42] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2692.718514][ T42] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2692.741389][ T42] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2692.752122][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2692.771258][ T42] usb 7-1: Product: syz [ 2692.776060][ T42] usb 7-1: Manufacturer: syz [ 2692.782173][ T42] usb 7-1: SerialNumber: syz [ 2693.189825][ T42] usb 7-1: config 0 descriptor?? [ 2694.256504][ T2294] __nla_validate_parse: 3 callbacks suppressed [ 2694.256536][ T2294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7973'. [ 2694.271798][ T2294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7973'. [ 2694.280809][ T2294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7973'. [ 2694.377999][ T186] usb 7-1: USB disconnect, device number 123 [ 2695.712065][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2696.079900][ T2308] pim6reg: entered allmulticast mode [ 2696.105923][ T2308] pim6reg: left allmulticast mode [ 2696.294154][ T2306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7976'. [ 2696.757091][ T2308] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2697.046026][ T2315] pim6reg: entered allmulticast mode [ 2697.057273][ T2315] pim6reg: left allmulticast mode [ 2697.871929][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7976'. [ 2697.887799][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7976'. [ 2697.901506][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7976'. [ 2697.913549][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7976'. [ 2699.356213][ T186] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2699.410479][T27559] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2699.522171][ T186] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2699.539960][ T186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2699.585718][T27559] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 2700.337943][ T186] usb 3-1: Product: syz [ 2700.348239][ T186] usb 3-1: Manufacturer: syz [ 2700.356314][ T186] usb 3-1: SerialNumber: syz [ 2700.362581][T27559] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2700.372263][T27559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2700.387855][T27559] usb 5-1: Product: syz [ 2700.392455][T27559] usb 5-1: Manufacturer: syz [ 2700.399761][T27559] usb 5-1: SerialNumber: syz [ 2700.424886][T26427] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2700.709924][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2700.755277][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.783471][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2700.812207][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.835694][ T2325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2700.860351][ T2325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2700.882656][T16395] usb 5-1: USB disconnect, device number 45 [ 2701.038684][ T186] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2701.072855][ T186] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2701.103395][ T186] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2701.178787][ T186] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2701.598448][T26427] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2702.237820][T26427] ath9k_htc: Failed to initialize the device [ 2702.258607][ T186] usb 3-1: USB disconnect, device number 25 [ 2702.269413][T16395] usb 5-1: ath9k_htc: USB layer deinitialized [ 2702.715710][T16395] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2704.230956][T27559] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2704.486791][T27559] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2704.570953][T27559] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2704.662935][T27559] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2704.705237][T27559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2704.742421][T27559] usb 4-1: Product: syz [ 2704.767042][T27559] usb 4-1: Manufacturer: syz [ 2704.803147][T27559] usb 4-1: SerialNumber: syz [ 2704.812542][ T2372] program syz.4.7992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2704.857269][T27559] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 2704.885853][ T2372] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2704.915312][T27559] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2704.961185][T27559] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2705.814150][ T2381] pim6reg: entered allmulticast mode [ 2705.857631][ T2381] pim6reg: left allmulticast mode [ 2706.043831][ T2379] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2707.311098][ T24] usb 4-1: USB disconnect, device number 47 [ 2707.355736][ T24] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2707.417129][ T24] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2707.465665][ T24] ti_usb_3410_5052 4-1:2.0: device disconnected [ 2707.599309][T27559] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2708.041156][ T2390] pim6reg: entered allmulticast mode [ 2708.089819][ T2390] pim6reg: left allmulticast mode [ 2708.316318][ T2389] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2708.640410][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2708.742822][ T2393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7997'. [ 2708.906205][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2708.916779][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2708.963650][ T24] usb 3-1: Product: syz [ 2709.006560][ T24] usb 3-1: Manufacturer: syz [ 2709.037088][ T24] usb 3-1: SerialNumber: syz [ 2709.182452][T27559] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2709.201616][T27559] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2709.224896][T27559] usb 7-1: can't read configurations, error -71 [ 2709.817832][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2709.836339][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2709.851500][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2710.132110][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2710.467683][ T24] usb 3-1: USB disconnect, device number 26 [ 2713.751827][T27559] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2714.350242][T27559] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2715.357722][T27559] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2715.367077][T27559] usb 3-1: can't read configurations, error -71 [ 2715.414966][ T2463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8015'. [ 2715.426258][ T2463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8015'. [ 2715.440278][ T2463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8015'. [ 2715.451039][ T2463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8015'. [ 2715.462324][ T2463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8015'. [ 2717.053277][ T29] audit: type=1804 audit(1786220698.245:1136): pid=2491 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.8022" name="/newroot/409/file0" dev="fuse" ino=1 res=1 errno=0 [ 2717.224623][ T2497] netlink: 'syz.3.8023': attribute type 10 has an invalid length. [ 2717.280193][ T2497] team0: Port device dummy0 added [ 2718.517930][ T2509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8025'. [ 2718.634982][ T2514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8025'. [ 2718.730972][ T2514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8025'. [ 2718.742215][ T2514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8025'. [ 2718.830158][ T2520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8027'. [ 2720.927641][ T2544] netlink: 'syz.4.8032': attribute type 10 has an invalid length. [ 2720.959991][ T2544] team0: Port device dummy0 added [ 2721.324215][ T2543] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2723.341496][ T2558] program syz.4.8034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2723.351338][ T2558] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2724.756831][ T29] audit: type=1400 audit(1786220705.354:1137): avc: denied { listen } for pid=2560 comm="syz.2.8037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2724.926801][ T2571] __nla_validate_parse: 5 callbacks suppressed [ 2724.926822][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8039'. [ 2724.944686][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8039'. [ 2724.954691][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8039'. [ 2724.965620][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8039'. [ 2724.979227][ T2571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8039'. [ 2725.421975][ T2578] pim6reg: entered allmulticast mode [ 2726.878377][ T2599] pim6reg: entered allmulticast mode [ 2726.895810][ T2599] pim6reg: left allmulticast mode [ 2727.134329][ T2592] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2728.477767][ T2605] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8049'. [ 2729.873421][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8053'. [ 2729.902529][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8053'. [ 2729.925667][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8053'. [ 2729.937948][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8053'. [ 2730.254936][ T2607] pim6reg: entered allmulticast mode [ 2730.287781][ T2607] pim6reg: left allmulticast mode [ 2730.390051][ T2607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2730.816420][ T2671] __nla_validate_parse: 1 callbacks suppressed [ 2730.816432][ T2671] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8062'. [ 2730.903163][ T2672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8059'. [ 2730.912489][ T2672] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8059'. [ 2730.921665][ T2672] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8059'. [ 2731.323301][ T29] audit: type=1804 audit(1786220711.428:1138): pid=2669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.8061" name="/newroot/417/file0" dev="fuse" ino=1 res=1 errno=0 [ 2732.910019][ T29] audit: type=1400 audit(1786220712.887:1139): avc: denied { getopt } for pid=2715 comm="syz.4.8068" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2732.993338][ T2720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8066'. [ 2733.027228][ T2720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8066'. [ 2733.063608][ T2720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8066'. [ 2733.095466][ T2720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8066'. [ 2733.114206][ T2720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8066'. [ 2734.768303][ T2743] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8074'. [ 2736.767865][ T2784] __nla_validate_parse: 5 callbacks suppressed [ 2736.767883][ T2784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8083'. [ 2736.812281][ T2786] lo speed is unknown, defaulting to 1000 [ 2736.839961][ T2789] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8084'. [ 2736.870269][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8082'. [ 2736.905405][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8082'. [ 2736.928820][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8082'. [ 2737.003631][ T29] audit: type=1400 audit(1786220716.663:1140): avc: denied { write } for pid=2785 comm="syz.2.8084" name="fs" dev="configfs" ino=21833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2737.033527][ T2796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8086'. [ 2737.079618][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8082'. [ 2737.099731][ T2790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8082'. [ 2737.108892][ T29] audit: type=1400 audit(1786220716.681:1141): avc: denied { write } for pid=2785 comm="syz.2.8084" name="fs" dev="configfs" ino=21833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2738.685759][ T2832] lo speed is unknown, defaulting to 1000 [ 2739.178703][ T2832] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8097'. [ 2739.197235][ T29] audit: type=1400 audit(1786220718.694:1142): avc: denied { write } for pid=2830 comm="syz.2.8097" name="fs" dev="configfs" ino=21833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2739.237104][ T29] audit: type=1400 audit(1786220718.712:1143): avc: denied { write } for pid=2830 comm="syz.2.8097" name="fs" dev="configfs" ino=21833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2739.627221][ T2859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8103'. [ 2739.987017][T30966] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2740.043855][T16395] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2740.197334][T30966] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2740.222103][T30966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2740.306742][T30966] usb 5-1: config 0 has no interface number 0 [ 2740.332388][T16395] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2740.371056][T30966] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2740.421085][T16395] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2740.453361][T16395] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2740.456446][T30966] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2740.477230][T16395] usb 4-1: config 63 has no interface number 0 [ 2740.497359][T16395] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2740.551781][T16395] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2740.563168][T30966] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2740.595790][T16395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.652983][T16395] usb 4-1: Product: syz [ 2740.677516][T16395] usb 4-1: Manufacturer: syz [ 2740.692592][T30966] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2740.724246][T30966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.737193][T16395] usb 4-1: SerialNumber: syz [ 2740.792296][T30966] usb 5-1: Product: syz [ 2740.825752][T30966] usb 5-1: Manufacturer: syz [ 2740.884351][T30966] usb 5-1: SerialNumber: syz [ 2741.054206][T30966] usb 5-1: config 0 descriptor?? [ 2741.138298][T16395] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 2741.213606][T16395] usb 4-1: USB disconnect, device number 48 [ 2743.216379][ T2948] __nla_validate_parse: 1 callbacks suppressed [ 2743.216398][ T2948] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8126'. [ 2743.217853][ T2946] lo speed is unknown, defaulting to 1000 [ 2743.274632][ T29] audit: type=1400 audit(1786220722.451:1144): avc: denied { write } for pid=2945 comm="syz.1.8126" name="fs" dev="configfs" ino=21833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2743.306189][T30966] usb 5-1: USB disconnect, device number 47 [ 2743.331764][ T29] audit: type=1400 audit(1786220722.451:1145): avc: denied { write } for pid=2945 comm="syz.1.8126" name="fs" dev="configfs" ino=21833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2743.677254][ T2955] lo speed is unknown, defaulting to 1000 [ 2744.174087][ T2964] syzkaller0: entered promiscuous mode [ 2744.187941][ T2964] syzkaller0: entered allmulticast mode [ 2744.207011][ T2967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8134'. [ 2744.255759][ T2964] tipc: Started in network mode [ 2744.261994][ T2964] tipc: Node identity e63f32811933, cluster identity 4711 [ 2744.291817][ T2964] tipc: Enabled bearer , priority 0 [ 2744.348652][ T2964] tipc: Resetting bearer [ 2744.484596][ T2963] tipc: Resetting bearer [ 2745.053720][ T2963] tipc: Disabling bearer [ 2746.750458][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8153'. [ 2746.874920][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8153'. [ 2746.908507][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8153'. [ 2746.940980][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8153'. [ 2746.953464][ T3025] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8153'. [ 2747.585613][ T3036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8158'. [ 2747.689227][ T3041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 2747.711056][ T3041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8159'. [ 2749.043768][ T3061] lo speed is unknown, defaulting to 1000 [ 2749.269565][T27559] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2749.466854][T27559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2749.503299][T27559] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2749.548794][T27559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2749.583683][T30966] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2749.600599][T27559] usb 2-1: config 0 descriptor?? [ 2749.795085][T30966] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 2749.838404][T30966] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2749.854291][T30966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2749.863975][T30966] usb 4-1: Product: syz [ 2749.870512][T27559] usbhid 2-1:0.0: can't add hid device: -71 [ 2749.874795][T30966] usb 4-1: Manufacturer: syz [ 2749.885361][T27559] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2749.902968][T30966] usb 4-1: SerialNumber: syz [ 2749.943750][T27559] usb 2-1: USB disconnect, device number 42 [ 2750.005649][T27508] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2750.184013][ T3078] __nla_validate_parse: 9 callbacks suppressed [ 2750.184033][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8171'. [ 2750.234343][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8171'. [ 2750.250211][ T3068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2750.263547][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8171'. [ 2750.284212][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8171'. [ 2750.293765][ T3068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2750.309881][ T3078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8171'. [ 2750.337279][ T3068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2750.356989][ T3068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2750.379762][ T3068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2750.393430][ T3068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2750.405188][ T10] usb 4-1: USB disconnect, device number 49 [ 2750.532657][T27559] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2751.183808][T27508] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2751.199778][T27508] ath9k_htc: Failed to initialize the device [ 2751.222114][T27559] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2751.233416][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 2751.262287][T27559] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2751.284282][T27559] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2751.327675][T27559] usb 2-1: config 0 descriptor?? [ 2751.566074][ T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2751.750215][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 2751.907979][ T3062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2751.944591][ T3062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2752.830167][ T10] usb 4-1: device descriptor read/all, error -71 [ 2752.910043][ T3100] tipc: Started in network mode [ 2752.915033][ T3100] tipc: Node identity 2a9878ccc41e, cluster identity 4711 [ 2752.923911][ T3100] tipc: Enabled bearer , priority 0 [ 2752.939529][ T3100] tipc: Resetting bearer [ 2752.968446][ T3098] tipc: Disabling bearer [ 2753.360026][T28916] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2753.852245][T28916] usb 3-1: device descriptor read/64, error -71 [ 2753.862696][T27559] usbhid 2-1:0.0: can't add hid device: -71 [ 2753.878227][T27559] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2753.902102][T27559] usb 2-1: USB disconnect, device number 43 [ 2754.225554][T28916] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2754.811359][T28916] usb 3-1: device descriptor read/64, error -71 [ 2754.949068][T28916] usb usb3-port1: attempt power cycle [ 2755.325715][T28916] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2755.363105][T28916] usb 3-1: device descriptor read/8, error -71 [ 2755.369864][ T3146] overlayfs: failed to resolve './bus': -2 [ 2755.415222][ T3141] lo speed is unknown, defaulting to 1000 [ 2755.639252][T28916] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2755.696941][T28916] usb 3-1: device descriptor read/8, error -71 [ 2755.851687][T28916] usb usb3-port1: unable to enumerate USB device [ 2756.451491][ T186] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 2756.695628][ T186] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2756.752846][ T186] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2756.790149][ T186] usb 7-1: config 0 has no interface number 0 [ 2756.825426][ T186] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2756.871221][ T186] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2756.907966][ T186] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2756.982906][ T186] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2757.010364][ T186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2757.049774][ T186] usb 7-1: Product: syz [ 2757.067635][ T186] usb 7-1: Manufacturer: syz [ 2757.087392][ T186] usb 7-1: SerialNumber: syz [ 2757.169442][ T186] usb 7-1: config 0 descriptor?? [ 2758.087880][ T3212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8214'. [ 2758.123824][ T3212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8214'. [ 2758.955640][ T3206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8216'. [ 2759.054799][ T3212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8214'. [ 2759.070744][ T3212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8214'. [ 2759.100461][ T3212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8214'. [ 2759.268892][T30966] usb 7-1: USB disconnect, device number 126 [ 2759.473204][T27508] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2759.490828][ T3229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8224'. [ 2759.550349][ T3231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8223'. [ 2759.593083][ T3231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8223'. [ 2759.619061][ T3229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8224'. [ 2759.671510][T27508] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2759.710037][T27508] usb 5-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2759.763260][T27508] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 2759.802411][T27508] usb 5-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 2759.853576][T27508] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2759.886052][T27508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2759.923781][T27508] usb 5-1: Product: syz [ 2759.956358][T27508] usb 5-1: Manufacturer: syz [ 2759.979128][T27508] usb 5-1: SerialNumber: syz [ 2760.024879][T27508] ti_usb_3410_5052 5-1:2.0: required endpoints missing [ 2760.881421][ T5686] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2761.566488][ T5686] usb 4-1: device descriptor read/64, error -71 [ 2761.845381][ T5686] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2762.051175][ T5686] usb 4-1: device descriptor read/64, error -71 [ 2762.216780][ T5686] usb usb4-port1: attempt power cycle [ 2762.261533][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2762.329925][ T29] audit: type=1400 audit(1786220740.048:1146): avc: denied { write } for pid=3271 comm="syz.2.8237" name="extensions" dev="configfs" ino=21824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2762.400358][ T3272] [ 2762.402713][ T3272] ====================================================== [ 2762.409707][ T3272] WARNING: possible circular locking dependency detected [ 2762.416700][ T3272] syzkaller #0 Tainted: G L [ 2762.422656][ T3272] ------------------------------------------------------ [ 2762.429644][ T3272] syz.2.8237/3272 is trying to acquire lock: [ 2762.435605][ T3272] ffffffff901c9de8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2762.446822][ T3272] [ 2762.446822][ T3272] but task is already holding lock: [ 2762.454170][ T3272] ffff88802b601070 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x346/0x6f0 [ 2762.463407][ T3272] [ 2762.463407][ T3272] which lock already depends on the new lock. [ 2762.463407][ T3272] [ 2762.473801][ T3272] [ 2762.473801][ T3272] the existing dependency chain (in reverse order) is: [ 2762.482794][ T3272] [ 2762.482794][ T3272] -> #3 (&p->frag_sem){++++}-{4:4}: [ 2762.490177][ T3272] lock_acquire+0x1b9/0x370 [ 2762.495186][ T3272] down_write_killable+0x93/0x250 [ 2762.500728][ T3272] configfs_rmdir+0x3fa/0x950 [ 2762.505903][ T3272] vfs_rmdir+0x328/0x8a0 [ 2762.510647][ T3272] filename_rmdir+0x31a/0x5c0 [ 2762.515821][ T3272] __x64_sys_unlinkat+0xf5/0x130 [ 2762.521257][ T3272] do_syscall_64+0x115/0x870 [ 2762.526351][ T3272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2762.532770][ T3272] [ 2762.532770][ T3272] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 2762.541463][ T3272] lock_acquire+0x1b9/0x370 [ 2762.546473][ T3272] down_write+0x8b/0x1f0 [ 2762.551221][ T3272] configfs_depend_item_unlocked+0xf3/0x6a0 [ 2762.557625][ T3272] usbg_make_tpg+0x261/0x620 [ 2762.562715][ T3272] target_fabric_make_tpg+0xab/0x8c0 [ 2762.568503][ T3272] configfs_mkdir+0x51e/0xb70 [ 2762.573684][ T3272] vfs_mkdir+0x361/0x850 [ 2762.578434][ T3272] filename_mkdirat+0x48b/0x5e0 [ 2762.583793][ T3272] __x64_sys_mkdir+0x6b/0x90 [ 2762.588880][ T3272] do_syscall_64+0x115/0x870 [ 2762.593981][ T3272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2762.600368][ T3272] [ 2762.600368][ T3272] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 2762.607983][ T3272] lock_acquire+0x1b9/0x370 [ 2762.612985][ T3272] __mutex_lock+0x1a4/0x1bd0 [ 2762.618073][ T3272] tcm_set_name+0x29/0xb0 [ 2762.622910][ T3272] function_make+0x21c/0x3f0 [ 2762.628020][ T3272] configfs_mkdir+0x51e/0xb70 [ 2762.633200][ T3272] vfs_mkdir+0x361/0x850 [ 2762.637953][ T3272] filename_mkdirat+0x48b/0x5e0 [ 2762.643298][ T3272] __x64_sys_mkdir+0x6b/0x90 [ 2762.648383][ T3272] do_syscall_64+0x115/0x870 [ 2762.653475][ T3272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2762.659879][ T3272] [ 2762.659879][ T3272] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 2762.668115][ T3272] check_prev_add+0xeb/0xe60 [ 2762.673214][ T3272] __lock_acquire+0x136c/0x1a40 [ 2762.678562][ T3272] lock_acquire+0x1b9/0x370 [ 2762.683570][ T3272] __mutex_lock+0x1a4/0x1bd0 [ 2762.688664][ T3272] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2762.695346][ T3272] configfs_read_iter+0x426/0x6f0 [ 2762.700867][ T3272] __kernel_read+0x397/0xad0 [ 2762.705958][ T3272] integrity_kernel_read+0x7e/0xb0 [ 2762.711569][ T3272] ima_calc_file_hash_tfm+0x25e/0x350 [ 2762.717437][ T3272] ima_calc_file_hash+0x1e3/0x380 [ 2762.722965][ T3272] ima_collect_measurement+0x94f/0xb30 [ 2762.728953][ T3272] process_measurement+0xdfe/0x2350 [ 2762.734682][ T3272] ima_file_check+0xc3/0x110 [ 2762.739810][ T3272] security_file_post_open+0xc4/0x210 [ 2762.745737][ T3272] path_openat+0x985/0x4280 [ 2762.750753][ T3272] do_file_open+0x20e/0x430 [ 2762.755751][ T3272] do_sys_openat2+0x10f/0x1e0 [ 2762.760940][ T3272] __x64_sys_openat+0x12d/0x210 [ 2762.766387][ T3272] do_syscall_64+0x115/0x870 [ 2762.771475][ T3272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2762.777866][ T3272] [ 2762.777866][ T3272] other info that might help us debug this: [ 2762.777866][ T3272] [ 2762.788073][ T3272] Chain exists of: [ 2762.788073][ T3272] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 2762.788073][ T3272] [ 2762.802470][ T3272] Possible unsafe locking scenario: [ 2762.802470][ T3272] [ 2762.809909][ T3272] CPU0 CPU1 [ 2762.815250][ T3272] ---- ---- [ 2762.820596][ T3272] rlock(&p->frag_sem); [ 2762.824826][ T3272] lock(&sb->s_type->i_mutex_key#26); [ 2762.832787][ T3272] lock(&p->frag_sem); [ 2762.839437][ T3272] lock(gadget_subsys.su_mutex); [ 2762.844446][ T3272] [ 2762.844446][ T3272] *** DEADLOCK *** [ 2762.844446][ T3272] [ 2762.852569][ T3272] 3 locks held by syz.2.8237/3272: [ 2762.857665][ T3272] #0: ffff888073a21dc8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 2762.868682][ T3272] #1: ffff8880726efe80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 2762.878405][ T3272] #2: ffff88802b601070 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x346/0x6f0 [ 2762.888025][ T3272] [ 2762.888025][ T3272] stack backtrace: [ 2762.893885][ T3272] CPU: 1 UID: 0 PID: 3272 Comm: syz.2.8237 Tainted: G L syzkaller #0 PREEMPT(full) [ 2762.893901][ T3272] Tainted: [L]=SOFTLOCKUP [ 2762.893905][ T3272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2762.893912][ T3272] Call Trace: [ 2762.893919][ T3272] [ 2762.893923][ T3272] dump_stack_lvl+0x100/0x190 [ 2762.893938][ T3272] print_circular_bug.cold+0x178/0x1c7 [ 2762.893965][ T3272] check_noncircular+0x146/0x160 [ 2762.893979][ T3272] check_prev_add+0xeb/0xe60 [ 2762.893992][ T3272] __lock_acquire+0x136c/0x1a40 [ 2762.894008][ T3272] lock_acquire+0x1b9/0x370 [ 2762.894021][ T3272] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2762.894039][ T3272] ? __pfx___might_resched+0x10/0x10 [ 2762.894052][ T3272] ? path_openat+0x985/0x4280 [ 2762.894064][ T3272] ? do_file_open+0x20e/0x430 [ 2762.894074][ T3272] ? do_sys_openat2+0x10f/0x1e0 [ 2762.894088][ T3272] __mutex_lock+0x1a4/0x1bd0 [ 2762.894103][ T3272] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2762.894119][ T3272] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2762.894135][ T3272] ? __lock_acquire+0x49f/0x1a40 [ 2762.894149][ T3272] ? __pfx___mutex_lock+0x10/0x10 [ 2762.894165][ T3272] ? __pfx___might_resched+0x10/0x10 [ 2762.894179][ T3272] ? __pfx_uvcg_extension_ba_source_id_show+0x10/0x10 [ 2762.894195][ T3272] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2762.894212][ T3272] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2762.894228][ T3272] ? ima_file_check+0xc3/0x110 [ 2762.894239][ T3272] ? configfs_read_iter+0x53c/0x6f0 [ 2762.894253][ T3272] ? __pfx_uvcg_extension_ba_source_id_show+0x10/0x10 [ 2762.894270][ T3272] configfs_read_iter+0x426/0x6f0 [ 2762.894283][ T3272] __kernel_read+0x397/0xad0 [ 2762.894300][ T3272] ? __pfx___kernel_read+0x10/0x10 [ 2762.894320][ T3272] integrity_kernel_read+0x7e/0xb0 [ 2762.894335][ T3272] ? __pfx_integrity_kernel_read+0x10/0x10 [ 2762.894350][ T3272] ? ima_calc_file_hash_tfm+0x236/0x350 [ 2762.894363][ T3272] ima_calc_file_hash_tfm+0x25e/0x350 [ 2762.894375][ T3272] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 2762.894387][ T3272] ? is_bpf_text_address+0x8a/0x1a0 [ 2762.894408][ T3272] ? ima_alloc_tfm+0x21a/0x2e0 [ 2762.894420][ T3272] ima_calc_file_hash+0x1e3/0x380 [ 2762.894432][ T3272] ima_collect_measurement+0x94f/0xb30 [ 2762.894446][ T3272] ? __pfx_ima_collect_measurement+0x10/0x10 [ 2762.894462][ T3272] ? process_measurement+0x5ab/0x2350 [ 2762.894473][ T3272] ? is_bad_inode+0xd/0x40 [ 2762.894483][ T3272] ? xattr_resolve_name+0x27d/0x3f0 [ 2762.894495][ T3272] ? vfs_getxattr_alloc+0xec/0x350 [ 2762.894508][ T3272] ? ima_get_hash_algo+0x241/0x400 [ 2762.894524][ T3272] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 2762.894542][ T3272] ? process_measurement+0xdfe/0x2350 [ 2762.894552][ T3272] process_measurement+0xdfe/0x2350 [ 2762.894565][ T3272] ? __pfx_process_measurement+0x10/0x10 [ 2762.894584][ T3272] ? __configfs_open_file+0x6ca/0x9c0 [ 2762.894598][ T3272] ima_file_check+0xc3/0x110 [ 2762.894608][ T3272] ? __pfx_ima_file_check+0x10/0x10 [ 2762.894621][ T3272] security_file_post_open+0xc4/0x210 [ 2762.894637][ T3272] path_openat+0x985/0x4280 [ 2762.894651][ T3272] ? __pfx_path_openat+0x10/0x10 [ 2762.894664][ T3272] do_file_open+0x20e/0x430 [ 2762.894676][ T3272] ? __pfx_do_file_open+0x10/0x10 [ 2762.894691][ T3272] ? alloc_fd+0x471/0x7a0 [ 2762.894703][ T3272] ? do_getname+0x191/0x390 [ 2762.894717][ T3272] do_sys_openat2+0x10f/0x1e0 [ 2762.894730][ T3272] ? __pfx_do_sys_openat2+0x10/0x10 [ 2762.894746][ T3272] __x64_sys_openat+0x12d/0x210 [ 2762.894760][ T3272] ? __pfx___x64_sys_openat+0x10/0x10 [ 2762.894776][ T3272] do_syscall_64+0x115/0x870 [ 2762.894790][ T3272] ? clear_bhb_loop+0x70/0xc0 [ 2762.894803][ T3272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2762.894814][ T3272] RIP: 0033:0x7f731e19e0d9 [ 2762.894825][ T3272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2762.894836][ T3272] RSP: 002b:00007f731eff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2762.894846][ T3272] RAX: ffffffffffffffda RBX: 00007f731e425fa0 RCX: 00007f731e19e0d9 [ 2762.894853][ T3272] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 2762.894860][ T3272] RBP: 00007f731e235024 R08: 0000000000000000 R09: 0000000000000000 [ 2762.894866][ T3272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2762.894873][ T3272] R13: 00007f731e426038 R14: 00007f731e425fa0 R15: 00007ffe3b142108 [ 2762.894883][ T3272] [ 2763.392590][ T29] audit: type=1800 audit(1786220741.026:1147): pid=3272 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.8237" name="baSourceID" dev="configfs" ino=194262 res=0 errno=0 [ 2763.427587][T28916] usb 5-1: USB disconnect, device number 48 [ 2763.459383][ T5686] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2763.514355][ T5686] usb 4-1: device descriptor read/8, error -71 [ 2763.773473][ T5686] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2763.795476][ T5686] usb 4-1: device descriptor read/8, error -71 [ 2763.925188][ T5686] usb usb4-port1: unable to enumerate USB device