last executing test programs: 9m33.378806308s ago: executing program 3 (id=2164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x400, 0x34}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xfffffffd, 0x4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x88}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110006", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffffffe, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7a"], 0x0}, 0x94) unshare(0x28000600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x3}, 0x38) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) getpriority(0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 9m31.888955023s ago: executing program 3 (id=2166): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7ffd, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa13, 0xffffffff}, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) syz_emit_ethernet(0x72, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)={0x1, 0x5, [0xe5f, 0xe5, 0xef5, 0xee3]}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0xadc) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000040)) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x8c, 0x0) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x1081}, 0x4008016) (async) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="710505"], 0x61) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) pipe2$watch_queue(&(0x7f0000002240), 0x80) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 9m30.21894185s ago: executing program 3 (id=2173): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mq_unlink(0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000540)={0x0, 0xa}, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x246000) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000040)=0x3a6) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0xd], 0x0, &(0x7f0000000040)}) 9m28.710112198s ago: executing program 3 (id=2184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1709a70000000000000101000000080009003f00000006001a000500070000000000060002000100000008000a000400000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x400000, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x1}}, 0x18) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc00864d2, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000300)={0x0, 0x80000}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) chdir(&(0x7f0000000040)='./file0/../file0\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') socket$inet6(0xa, 0x805, 0x0) 9m28.38275456s ago: executing program 3 (id=2185): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000240)='./mnt/file0\x00', 0x0, 0x0, r1}, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x804000, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e730e027de77266646e6f3dff5d3b8223f2504a8052634d92fad99e8160a13772736ccced94f463c9d6a35be8cb1dea30b53ad1380ded2b166088762e82f86681c8821e5e51abe46a9e25ab7ce22dcaa55d64c8a8ca1d5a6b070c385a", @ANYRESHEX=r7, @ANYRES32=r4, @ANYRESHEX=r6, @ANYRES32, @ANYBLOB="29a49778528d631d59685c38525506ce51152c9cc1e774a9508ce1fa4924af7e827e5ed26192382a37408a7ef8804ff0c4cbc334fbdaed4eb9ddde39594e47dbb392d1d75a3ddd8f912c5b61c2ef2e9c0dc0857188f304e8707f4e25fa5eda0175e4229b4e7bb10b8f94191759be"]) ioctl$SIOCX25GCAUSEDIAG(r7, 0x89e6, &(0x7f00000002c0)={0x10, 0x5}) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f00000001c0)=0x9, 0x4) 9m27.049513045s ago: executing program 3 (id=2191): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$vbi(&(0x7f0000001140), 0x0, 0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 9m26.853725501s ago: executing program 32 (id=2191): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$vbi(&(0x7f0000001140), 0x0, 0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad2107c752f91b25470987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 6.164681873s ago: executing program 4 (id=4184): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x4, 0x0, 0x0, 0x7, [@sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81, 0x0, 0x0, 0xc0000001}]}, 0x20}, 0x1, 0x400000000000000}, 0x0) 5.935792511s ago: executing program 4 (id=4185): ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000002500)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x2404c054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001440)=ANY=[@ANYBLOB="24010000", @ANYRES16=r3, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x804c801) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0}) 4.666767627s ago: executing program 2 (id=4197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000004aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000008"], 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x98, 0x0, 0x1, 0x401, 0xf5, 0x8000000, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x8884) 4.566828948s ago: executing program 2 (id=4198): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000100)=""/141, 0x32, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a63727970745f6465766963655f753a73302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a7330203138343436373434303733373039353531313035002411a8e4bbaac77fc93218989a2f1f9fb39cf53c19af972879b7996f6d5f6b544d7d5f8e72a921ae70f19716a466ead5258201c6e4e9e98b0ea09037ea020020773327dead25b7a0117b2aea92be310d93e0b8cbbb59b48fa1a121d0ce3c53431906b87247bef840e53f7d7b3dfbf8321f0ca877f9e5310951c728ac44851153d2236c5ab09e45e6afd5eae47c5540984aa13238e49f"], 0x57) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) 4.456528022s ago: executing program 2 (id=4201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f00000000c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x8014) 4.026882327s ago: executing program 2 (id=4205): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000004c0)={0x7, @vbi={0x6, 0x7fff, 0x23a2, 0x30313953, [0x3, 0x3], [0xf8c, 0x80001], 0x13a}}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 4.022357198s ago: executing program 4 (id=4206): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000002b40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4048884) 3.89432439s ago: executing program 2 (id=4209): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000440)={0x10, 0xfffffdfc, 0x0, 0x9, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x181a01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0xd, 0xb, 0xf, 0x3, 0x16, "43db4c9554938a92b052134851317440023bd9"}) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000740)=0x1004af) r6 = syz_open_pts(r2, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000200)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) close(r7) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="6e88b19e4d136c105356a58805f33a6cbbfa241fc2214a82d9d7b2a450d26114a075b7b4fe469682fbbaa06cc4244e5dbe45295c823069f2555bb2b35cd3c22cb7b5d2aa1382dced68bbb4f243bd8e8ce49f8384fbc48777d92b2219d0cbab199098b3081bc9fe8caa6f1140ac0c53cedd1a2995e5cfbcf4eae0ce2b2d4fbbfbbee70b0422f77ae70018c48f4ddf6fbfe2d109eaf0f2ff12a0e640f319309f5bbcae30d5b540fd6e197a68a8a4c6535750a9ff55bd"], 0x28}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r11, 0x0, 0xc19) socket$nl_netfilter(0x10, 0x3, 0xc) 3.871420777s ago: executing program 0 (id=4210): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') rmdir(&(0x7f0000000040)='./file0\x00') 3.854804955s ago: executing program 4 (id=4211): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000100)=""/141, 0x32, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a63727970745f6465766963655f753a73302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a7330203138343436373434303733373039353531313035002411a8e4bbaac77fc93218989a2f1f9fb39cf53c19af972879b7996f6d5f6b544d7d5f8e72a921ae70f19716a466ead5258201c6e4e9e98b0ea09037ea020020773327dead25b7a0117b2aea92be310d93e0b8cbbb59b48fa1a121d0ce3c53431906b87247bef840e53f7d7b3dfbf8321f0ca877f9e5310951c728ac44851153d2236c5ab09e45e6afd5eae47c5540984aa13238e49f"], 0x57) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) 3.716814898s ago: executing program 0 (id=4213): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000b708000000000000dbaaf8fff1000000b5080000020000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006a00000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) fcntl$setstatus(r0, 0x4, 0x800) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) read(r0, &(0x7f00000001c0)=""/3, 0x3) close(r0) 3.504637336s ago: executing program 4 (id=4215): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e2010203010902"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500001c00000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b42e6080a1a03011dad010203010902120001000039690904"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.481710659s ago: executing program 0 (id=4216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f00000000c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x8014) 2.938165953s ago: executing program 0 (id=4217): ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000002500)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r1, &(0x7f0000000040)=""/4109, 0x100d) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x2404c054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001440)=ANY=[@ANYBLOB="24010000", @ANYRES16=r3, @ANYBLOB="10002abd7000fcdbdf2517000000100002800400040008000200040000003c00018038000400200001000a004e200000000bec47ed201b00000000000000000000000000000000080000001400020002004e21ac1414bb0000000000000000c40001802c0004001400010002004e23e000000200000000000000001400020002004e20e0000002000000000000000044000400200001000a004e2200000008fc010000000000000000000000000000330d0000200002000a004e2400000001fe8800000000000000000000000001019a0000000c000280080002000600000044000400200001000a004e2400000003fc01000000000000000000000000000001000000200002000a004e2300000003fc02000000000000000000000000000006000000bd7bea9ea40ce4e0d9989065e3501a4b692113aed5cc9ed03a6b8b8250682d09c17549469b2d45fa87e0dd9486b223c13542407963771db40b803b795207f544e37aa7cb8909db662b4b2bcf92cd16045a4873cc4d11b77da3338346d44e75d0474fb1b3e2fa2634b9b8c6a64cb2e17855e257f77814"], 0x124}, 0x1, 0x0, 0x0, 0x4}, 0x804c801) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0}) 2.845105368s ago: executing program 5 (id=4219): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000004c0)={0x7, @vbi={0x6, 0x7fff, 0x23a2, 0x30313953, [0x3, 0x3], [0xf8c, 0x80001], 0x13a}}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 2.810569742s ago: executing program 5 (id=4220): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x3c, @local, 0x15, 0x3, 'sh\x00', 0x19, 0x5, 0x71}, 0x2c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.650844596s ago: executing program 1 (id=4221): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/46, &(0x7f0000000040)=0x2e) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x406}}}, 0x7) 2.103800078s ago: executing program 1 (id=4222): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x5, 0x0, 0x0, 0x7, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4, @multicast2}}]}, 0x28}, 0x1, 0x400000000000000}, 0x0) 1.942052171s ago: executing program 1 (id=4223): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') rmdir(&(0x7f0000000040)='./file0\x00') 1.882655074s ago: executing program 1 (id=4224): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x32, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000001c0), 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a00000000000006"], 0x30}}, 0x4090) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x32, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f00000001c0), 0x4) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async) 1.599005336s ago: executing program 5 (id=4225): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000ffff0f000002000000000000000100000000000012"], 0x0, 0x4e, 0x0, 0x1}, 0x28) 1.598791176s ago: executing program 1 (id=4226): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], &(0x7f0000000100)=""/141, 0x32, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a63727970745f6465766963655f753a73302073797374656d5f753a73797374656d5f723a6b65726e656c5f743a7330203138343436373434303733373039353531313035002411a8e4bbaac77fc93218989a2f1f9fb39cf53c19af972879b7996f6d5f6b544d7d5f8e72a921ae70f19716a466ead5258201c6e4e9e98b0ea09037ea020020773327dead25b7a0117b2aea92be310d93e0b8cbbb59b48fa1a121d0ce3c53431906b87247bef840e53f7d7b3dfbf8321f0ca877f9e5310951c728ac44851153d2236c5ab09e45e6afd5eae47c5540984aa13238e49f"], 0x57) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) 1.586298043s ago: executing program 5 (id=4227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5457, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f00000000c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000c40), 0x0, 0x8014) 1.577827221s ago: executing program 4 (id=4228): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b15, 0x0) 1.195504121s ago: executing program 1 (id=4229): r0 = syz_open_dev$audion(0x0, 0x3, 0x1) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) close(0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) write$P9_RVERSION(r0, 0x0, 0xfffffcd9) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010400733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x5b15, 0x0) 1.088998368s ago: executing program 0 (id=4230): ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000004c0)={0x7, @vbi={0x6, 0x7fff, 0x23a2, 0x30313953, [0x3, 0x3], [0xf8c, 0x80001], 0x13a}}) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 1.085014507s ago: executing program 5 (id=4231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000680)={r7, 0x10000201, 0x7, 0x81, 0x1, [0x0], [0x3fd86826, 0xfffffffd, 0xfffffffe], [0x7f, 0x7, 0x109], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8], [0x2b8], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) bind$can_raw(r4, &(0x7f0000000080), 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x41) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x1) ioctl$UFFDIO_API(r10, 0xc018aa3f, 0x0) 827.339832ms ago: executing program 0 (id=4232): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/46, &(0x7f0000000040)=0x2e) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x406}}}, 0x7) 614.788254ms ago: executing program 2 (id=4233): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x5, 0x0, 0x0, 0x7, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4, @multicast2}}]}, 0x28}, 0x1, 0x400000000000000}, 0x0) 0s ago: executing program 5 (id=4234): r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000002b40)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4048884) kernel console output (not intermixed with test programs): 220 interface 0 has no altsetting 0 [ 1131.287008][ T5911] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1131.335592][ T5911] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1131.367209][ T29] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 1131.679018][ T791] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1131.944859][ T791] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1132.058446][ T791] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1132.141531][ T791] usb 2-1: config 63 has an invalid descriptor of length 109, skipping remainder of the config [ 1132.240000][ T791] usb 2-1: config 63 has no interface number 0 [ 1132.297429][ T791] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1132.315720][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.331031][ T29] usb 3-1: config 0 has no interfaces? [ 1132.338308][ T29] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1132.339946][ T791] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1132.347526][ T5911] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1132.347552][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.347572][ T5911] usb 1-1: Product: syz [ 1132.347586][ T5911] usb 1-1: Manufacturer: syz [ 1132.347601][ T5911] usb 1-1: SerialNumber: syz [ 1132.349395][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.406198][ T29] usb 3-1: config 0 descriptor?? [ 1132.483137][ T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.491209][ T791] usb 2-1: Product: syz [ 1132.514530][ T791] usb 2-1: Manufacturer: syz [ 1132.525909][ T791] usb 2-1: SerialNumber: syz [ 1132.560769][ T5911] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1132.570405][ T5911] uvcvideo 1-1:220.0: No valid video chain found. [ 1132.598240][ T29] usb 3-1: can't set config #0, error -71 [ 1132.613302][ T5911] usb 1-1: selecting invalid altsetting 0 [ 1132.627777][ T29] usb 3-1: USB disconnect, device number 118 [ 1132.658527][ T5911] usb 1-1: selecting invalid altsetting 0 [ 1132.674586][ T5911] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1132.739033][ T5911] usb 1-1: USB disconnect, device number 111 [ 1132.804228][ T791] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 1132.838270][ T791] usb 2-1: USB disconnect, device number 117 [ 1133.068585][ T5855] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1133.239759][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 1133.246393][ T5855] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1133.262895][ T5855] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1133.273845][ T5855] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1133.284005][ T5855] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1133.297341][ T5855] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1133.306600][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.543928][ T5855] usb 6-1: GET_CAPABILITIES returned 0 [ 1133.809927][ T5855] usbtmc 6-1:16.0: can't read capabilities [ 1133.847095][ T5855] usb 6-1: USB disconnect, device number 46 [ 1135.942843][ T29] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1136.242232][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3471'. [ 1137.519379][T20135] xt_CONNSECMARK: invalid mode: 66 [ 1139.683315][T20159] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1139.718077][ T30] audit: type=1400 audit(1772619909.869:1324): avc: denied { write } for pid=20156 comm="syz.4.3482" path="socket:[86618]" dev="sockfs" ino=86618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1139.844852][ T30] audit: type=1400 audit(1772619909.897:1325): avc: denied { setopt } for pid=20156 comm="syz.4.3482" lport=47271 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1140.407914][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1140.954401][T20178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1143.922253][T20199] input: syz0 as /devices/virtual/input/input93 [ 1144.102520][T20206] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3495'. [ 1144.553268][T20209] netlink: 'syz.5.3496': attribute type 13 has an invalid length. [ 1144.561299][T20209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3496'. [ 1145.033396][T20211] block nbd0: server does not support multiple connections per device. [ 1145.107196][T20211] block nbd0: shutting down sockets [ 1145.277086][ T30] audit: type=1400 audit(1772619915.070:1326): avc: denied { listen } for pid=20227 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1145.382258][T20232] tmpfs: Unknown parameter 'vuge' [ 1145.451190][T20232] fuse: Unknown parameter '0x0000000000000008' [ 1145.922102][T20240] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3504'. [ 1145.964261][T20241] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3502'. [ 1146.079312][ T30] audit: type=1400 audit(1772619915.828:1327): avc: denied { bind } for pid=20244 comm="syz.1.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1147.004736][T20260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20260 comm=syz.0.3510 [ 1147.051850][ T5855] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1147.187699][T20263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1147.223399][ T5855] usb 3-1: device descriptor read/64, error -71 [ 1147.961840][ T5855] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1148.276727][T20274] bridge4: entered promiscuous mode [ 1148.281972][T20274] bridge4: entered allmulticast mode [ 1148.399177][ T5855] usb 3-1: device descriptor read/64, error -71 [ 1148.685595][T20244] delete_channel: no stack [ 1148.788456][ T5855] usb usb3-port1: attempt power cycle [ 1149.382404][ T5868] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1149.404019][ T5855] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1149.436307][ T5855] usb 3-1: device descriptor read/8, error -71 [ 1149.491760][ T29] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1149.554373][ T5868] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1149.562986][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.572808][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.585025][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.592692][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.601883][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.612993][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.620922][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.631420][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.642677][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.651909][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.661277][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1149.668794][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.682127][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.695108][ T29] usb 5-1: config 1 has an invalid interface number: 124 but max is 0 [ 1149.703870][ T29] usb 5-1: config 1 has no interface number 0 [ 1149.711952][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.721439][ T29] usb 5-1: config 1 interface 124 has no altsetting 0 [ 1149.729594][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.730119][ T5855] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1149.749722][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.764879][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.778139][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.794721][ T29] usb 5-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=56.14 [ 1149.810268][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.818368][ T29] usb 5-1: Product: syz [ 1149.824249][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.831010][ T29] usb 5-1: Manufacturer: syz [ 1149.842116][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.854738][ T29] usb 5-1: SerialNumber: syz [ 1149.862995][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.886622][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.898541][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1149.908702][ T5868] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1149.921114][ T5868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.929708][ T5855] usb 3-1: device descriptor read/8, error -71 [ 1149.975704][ T5868] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1149.986079][ T5868] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1150.009534][ T5868] usb 1-1: Product: syz [ 1150.019969][ T5868] usb 1-1: Manufacturer: syz [ 1150.030924][ T5868] usb 1-1: SerialNumber: syz [ 1150.110224][ T5855] usb usb3-port1: unable to enumerate USB device [ 1150.226421][T20283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.239764][ T5868] usb 1-1: config 0 descriptor?? [ 1150.260732][T20283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.275161][ T5868] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1150.555278][ T30] audit: type=1400 audit(1772619920.009:1328): avc: denied { map } for pid=20302 comm="syz.2.3521" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1150.763781][T20283] SELinux: failed to load policy [ 1150.764434][ T791] usb 1-1: USB disconnect, device number 112 [ 1150.788943][ T791] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1150.877397][ T29] usb 5-1: Could not find all expected endpoints [ 1150.894361][ T29] usb 5-1: USB disconnect, device number 118 [ 1151.000949][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1151.178752][ T30] audit: type=1400 audit(1772619920.495:1329): avc: denied { bind } for pid=20290 comm="syz.0.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1151.565314][T20319] ubi: mtd0 is already attached to ubi31 [ 1152.896841][T20323] loop2: detected capacity change from 0 to 7 [ 1153.005219][T18487] Dev loop2: unable to read RDB block 7 [ 1153.011571][T18487] loop2: AHDI p1 p2 p3 [ 1153.034751][T18487] loop2: partition table partially beyond EOD, truncated [ 1153.046422][T18487] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1153.055508][T18487] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1153.076482][T20323] Dev loop2: unable to read RDB block 7 [ 1153.091651][T20323] loop2: AHDI p1 p2 p3 [ 1153.113639][T20323] loop2: partition table partially beyond EOD, truncated [ 1153.158549][T20323] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1153.174334][T20323] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1153.363908][ T5868] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1154.334292][ T5868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1154.366954][ T5868] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1154.383531][ T5868] usb 1-1: config 63 has an invalid descriptor of length 47, skipping remainder of the config [ 1154.395577][ T5868] usb 1-1: config 63 has no interface number 0 [ 1154.402071][ T5868] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1154.460467][ T5868] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1154.480463][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.500186][ T5868] usb 1-1: Product: syz [ 1154.504518][ T5868] usb 1-1: Manufacturer: syz [ 1154.509110][ T5868] usb 1-1: SerialNumber: syz [ 1155.369159][ T791] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1155.541687][ T791] usb 5-1: device descriptor read/64, error -71 [ 1155.688780][ T5868] uvcvideo 1-1:63.66: probe with driver uvcvideo failed with error -22 [ 1155.723131][ T5868] usb 1-1: USB disconnect, device number 113 [ 1155.807827][ T791] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1156.016061][ T791] usb 5-1: device descriptor read/64, error -71 [ 1156.310690][ T791] usb usb5-port1: attempt power cycle [ 1156.855308][ T791] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1157.101380][ T5903] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1157.175447][ T791] usb 5-1: device descriptor read/8, error -71 [ 1157.282811][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 1157.289374][ T5903] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1157.300803][ T5903] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.319063][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1157.337217][ T5903] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1157.346281][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.355059][ T5903] usb 2-1: Product: syz [ 1157.360717][ T5903] usb 2-1: Manufacturer: syz [ 1157.365347][ T5903] usb 2-1: SerialNumber: syz [ 1157.443118][ T5855] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1157.453809][ T791] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1157.476161][ T791] usb 5-1: device descriptor read/8, error -71 [ 1157.593059][ T791] usb usb5-port1: unable to enumerate USB device [ 1157.603706][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 1157.610830][ T5855] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.623315][ T5855] usb 1-1: config 0 has no interfaces? [ 1157.631664][ T5855] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1157.658767][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.680394][ T5855] usb 1-1: config 0 descriptor?? [ 1157.870927][ T5903] usb 2-1: 0:2 : does not exist [ 1158.136407][ T791] usb 1-1: USB disconnect, device number 114 [ 1158.449497][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3553'. [ 1158.544285][ T29] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1158.741348][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1158.760617][ T29] usb 6-1: config 1 has an invalid interface number: 124 but max is 0 [ 1158.780335][ T29] usb 6-1: config 1 has no interface number 0 [ 1158.790227][ T29] usb 6-1: config 1 interface 124 has no altsetting 0 [ 1158.800407][ T29] usb 6-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=56.14 [ 1158.810861][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.903213][ T29] usb 6-1: Product: syz [ 1158.918135][T20431] sctp: [Deprecated]: syz.0.3555 (pid 20431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1158.918135][T20431] Use struct sctp_sack_info instead [ 1159.070437][ T29] usb 6-1: Manufacturer: syz [ 1159.075106][ T29] usb 6-1: SerialNumber: syz [ 1159.078826][ T30] audit: type=1400 audit(1772619927.969:1330): avc: denied { write } for pid=20429 comm="syz.0.3555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1160.166850][T20398] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1160.232087][ T30] audit: type=1326 audit(1772619927.969:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20429 comm="syz.0.3555" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b40f9c799 code=0x0 [ 1160.831214][T20416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.831908][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'. [ 1160.891951][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3557'. [ 1160.916883][T20416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.920151][ T5903] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1160.932151][T20436] netlink: 'syz.0.3557': attribute type 11 has an invalid length. [ 1160.983343][T20439] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.990865][T20439] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.217050][T20436] netlink: 'syz.0.3557': attribute type 13 has an invalid length. [ 1161.281974][T20439] bridge0: entered allmulticast mode [ 1161.308212][T20419] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1161.338662][T20443] bridge_slave_1: left allmulticast mode [ 1161.640626][T20443] bridge_slave_1: left promiscuous mode [ 1161.662401][T20419] SELinux: failed to load policy [ 1161.666120][T20443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.705605][T20443] bridge_slave_0: left allmulticast mode [ 1161.718908][T20443] bridge_slave_0: left promiscuous mode [ 1161.735254][T20443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.771802][ T29] usb 6-1: Could not find all expected endpoints [ 1161.810495][ T5903] usb 2-1: USB disconnect, device number 118 [ 1161.824755][ T29] usb 6-1: USB disconnect, device number 47 [ 1162.642183][ T30] audit: type=1400 audit(1772619931.318:1332): avc: denied { read } for pid=20456 comm="syz.5.3561" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1162.708999][ T30] audit: type=1400 audit(1772619931.318:1333): avc: denied { open } for pid=20456 comm="syz.5.3561" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1163.152046][ T5903] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1163.335464][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1163.344291][ T5903] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1163.352495][ T5903] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.371563][ T5903] usb 2-1: config 63 has no interface number 0 [ 1163.392584][ T5903] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1163.438350][ T5903] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1163.465407][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.573780][ T5903] usb 2-1: Product: syz [ 1163.586854][ T5903] usb 2-1: Manufacturer: syz [ 1163.599306][ T5903] usb 2-1: SerialNumber: syz [ 1164.144146][ T5903] uvcvideo 2-1:63.66: Found UVC 5.07 device syz (174f:8acf) [ 1164.152401][ T5903] uvcvideo 2-1:63.66: No valid video chain found. [ 1164.165761][ T5903] usb 2-1: USB disconnect, device number 119 [ 1164.443607][T20486] xt_ipcomp: unknown flags 1D [ 1165.161020][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'. [ 1165.629894][T20500] netlink: 'syz.1.3572': attribute type 13 has an invalid length. [ 1165.638047][T20500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3572'. [ 1168.597135][T17242] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1168.807243][T17242] usb 3-1: device descriptor read/64, error -71 [ 1168.807314][T14727] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1168.977364][T20540] input: syz0 as /devices/virtual/input/input96 [ 1169.063967][T17242] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1169.389922][T14727] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1169.399706][T14727] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1169.408088][T14727] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.418343][T14727] usb 5-1: config 63 has no interface number 0 [ 1169.424830][T14727] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1169.516675][T14727] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1169.526198][T14727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.541821][T14727] usb 5-1: Product: syz [ 1169.551206][T14727] usb 5-1: Manufacturer: syz [ 1169.561587][T14727] usb 5-1: SerialNumber: syz [ 1169.598567][T17242] usb 3-1: device descriptor read/64, error -71 [ 1169.909188][T14727] uvcvideo 5-1:63.66: Found UVC 5.07 device syz (174f:8acf) [ 1169.916528][T14727] uvcvideo 5-1:63.66: No valid video chain found. [ 1169.933187][T14727] usb 5-1: USB disconnect, device number 123 [ 1169.934363][T17242] usb usb3-port1: attempt power cycle [ 1170.155865][ T791] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1170.357662][T17242] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1170.365425][ T791] usb 6-1: Using ep0 maxpacket: 8 [ 1170.375559][ T791] usb 6-1: config 8 has an invalid interface number: 65 but max is 0 [ 1170.385471][ T791] usb 6-1: config 8 has no interface number 0 [ 1170.390046][T17242] usb 3-1: device descriptor read/8, error -71 [ 1170.394942][ T791] usb 6-1: config 8 interface 65 has no altsetting 0 [ 1170.406878][ T791] usb 6-1: New USB device found, idVendor=06cd, idProduct=0101, bcdDevice= 4.9b [ 1170.416766][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.425099][ T791] usb 6-1: Product: syz [ 1170.430166][ T791] usb 6-1: Manufacturer: syz [ 1170.440345][ T791] usb 6-1: SerialNumber: syz [ 1170.533697][T20564] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3589'. [ 1170.646026][T17242] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1170.677358][ T791] keyspan 6-1:8.65: Keyspan - (without firmware) converter detected [ 1170.678921][T17242] usb 3-1: device descriptor read/8, error -71 [ 1170.707237][ T30] audit: type=1400 audit(1772619938.857:1334): avc: denied { ioctl } for pid=20567 comm="syz.4.3593" path="socket:[88679]" dev="sockfs" ino=88679 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1170.757335][ T791] usb 6-1: USB disconnect, device number 48 [ 1170.765584][ T791] keyspan 6-1:8.65: device disconnected [ 1170.861758][T17242] usb usb3-port1: unable to enumerate USB device [ 1173.602343][T17242] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1173.774548][T17242] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1173.786619][T17242] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1173.800246][T17242] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.826346][T17242] usb 3-1: config 63 has no interface number 0 [ 1173.842621][T17242] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1173.858389][T17242] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1173.874403][T17242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.884220][T17242] usb 3-1: Product: syz [ 1173.908040][T17242] usb 3-1: Manufacturer: syz [ 1173.913389][ T30] audit: type=1400 audit(1772619941.850:1335): avc: denied { ioctl } for pid=20608 comm="syz.1.3605" path="pid:[4026532990]" dev="nsfs" ino=4026532990 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1173.920268][T17242] usb 3-1: SerialNumber: syz [ 1174.324095][T17242] uvcvideo 3-1:63.66: Found UVC 5.07 device syz (174f:8acf) [ 1174.374558][T17242] uvcvideo 3-1:63.66: No valid video chain found. [ 1174.405071][T17242] usb 3-1: USB disconnect, device number 2 [ 1175.029422][T17242] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1175.326490][T20639] netlink: 'syz.0.3614': attribute type 1 has an invalid length. [ 1175.473841][ T30] audit: type=1400 audit(1772619943.291:1336): avc: denied { write } for pid=20622 comm="syz.4.3609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1175.736922][T20642] lo speed is unknown, defaulting to 1000 [ 1175.869243][T20639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.917725][T20647] bond0: (slave ip6erspan0): making interface the new active one [ 1175.935412][T20647] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1177.792883][T20666] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1177.799691][T20666] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1178.012603][T20668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1178.024084][T17242] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1178.086465][T17242] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1178.118885][ T791] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1178.131469][T17242] usb 5-1: can't read configurations, error -71 [ 1178.482960][ T791] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1178.505575][ T791] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1178.575795][ T791] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.587555][ T791] usb 1-1: config 63 has no interface number 0 [ 1178.593905][ T791] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1178.612516][ T791] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1178.647226][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.668810][ T791] usb 1-1: Product: syz [ 1178.674880][ T791] usb 1-1: Manufacturer: syz [ 1178.685832][ T791] usb 1-1: SerialNumber: syz [ 1178.960584][ T791] uvcvideo 1-1:63.66: Found UVC 5.07 device syz (174f:8acf) [ 1178.991384][ T791] uvcvideo 1-1:63.66: No valid video chain found. [ 1179.167434][ T9] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1179.269815][ T791] usb 1-1: USB disconnect, device number 115 [ 1179.437548][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1179.449039][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1179.469359][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.592227][ T9] usb 6-1: Product: syz [ 1179.603604][ T9] usb 6-1: Manufacturer: syz [ 1179.614640][ T9] usb 6-1: SerialNumber: syz [ 1179.638736][ T9] usb 6-1: config 0 descriptor?? [ 1180.253116][T20685] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3629'. [ 1180.408993][ T9] airspy 6-1:0.0: Board ID: 00 [ 1180.413801][ T9] airspy 6-1:0.0: Firmware version: [ 1181.205781][ T5869] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1181.249916][ T9] airspy 6-1:0.0: usb_control_msg() failed -71 request 12 [ 1181.496188][ T9] airspy 6-1:0.0: Registered as swradio24 [ 1181.515017][ T9] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1181.553153][ T9] usb 6-1: USB disconnect, device number 49 [ 1181.661354][ T5869] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1181.672468][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.719654][T20712] sit1: entered allmulticast mode [ 1181.753806][ T5869] usb 5-1: config 0 has no interface number 0 [ 1181.761907][ T5869] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1181.786186][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.794328][ T5869] usb 5-1: Product: syz [ 1181.815945][ T5869] usb 5-1: Manufacturer: syz [ 1181.829029][ T5869] usb 5-1: SerialNumber: syz [ 1181.839503][ T5869] usb 5-1: config 0 descriptor?? [ 1181.856816][ T5869] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1182.095450][T20689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.111636][T20689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.213696][ T30] audit: type=1400 audit(1772619949.624:1337): avc: denied { bind } for pid=20724 comm="syz.5.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1182.513132][T20731] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3637'. [ 1182.656496][ T5911] usb 5-1: USB disconnect, device number 126 [ 1182.879338][T20734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.185055][ T30] audit: type=1400 audit(1772619950.522:1338): avc: denied { create } for pid=20739 comm="syz.2.3641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1183.205315][ T5855] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1183.261048][ T30] audit: type=1400 audit(1772619950.531:1339): avc: denied { sys_admin } for pid=20739 comm="syz.2.3641" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1183.586463][ T5855] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1183.635239][ T5855] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1183.654232][ T5855] usb 2-1: config 63 has an invalid descriptor of length 66, skipping remainder of the config [ 1183.733026][ T5855] usb 2-1: config 63 has no interface number 0 [ 1183.740227][ T5855] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1183.814384][ T5855] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1183.959520][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.903047][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.912574][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.983964][ T5855] usb 2-1: Product: syz [ 1184.988254][ T5855] usb 2-1: Manufacturer: syz [ 1184.992923][ T5855] usb 2-1: SerialNumber: syz [ 1185.335342][T20763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3646'. [ 1185.350363][T20763] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1185.358126][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1185.604511][ T5855] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 1185.682763][ T5855] usb 2-1: USB disconnect, device number 120 [ 1186.869683][ T30] audit: type=1400 audit(1772619953.534:1340): avc: denied { getopt } for pid=20774 comm="syz.5.3649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1187.601388][ T5903] usb 5-1: new full-speed USB device number 127 using dummy_hcd [ 1187.774069][ T5903] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 1187.880878][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.911356][ T5903] usb 5-1: config 0 has no interface number 0 [ 1187.927971][ T5903] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1187.938359][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.956570][ T5903] usb 5-1: Product: syz [ 1187.965000][ T5903] usb 5-1: Manufacturer: syz [ 1187.974591][ T5903] usb 5-1: SerialNumber: syz [ 1187.986958][ T5903] usb 5-1: config 0 descriptor?? [ 1187.999042][ T5903] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1188.311564][T20781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1188.556415][T20781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.191085][T20806] fuse: blksize only supported for fuseblk [ 1189.799770][ T5903] usb 5-1: USB disconnect, device number 127 [ 1189.834860][T20809] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1189.841419][T20809] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1189.905785][T20809] vhci_hcd vhci_hcd.0: Device attached [ 1189.952010][T20809] vhci_hcd vhci_hcd.0: port 0 already used [ 1189.966990][T20810] vhci_hcd: connection closed [ 1189.967346][T13192] vhci_hcd vhci_hcd.0: stop threads [ 1189.996149][T13192] vhci_hcd vhci_hcd.0: release socket [ 1190.001574][T13192] vhci_hcd vhci_hcd.0: disconnect device [ 1190.626936][T20823] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1190.755168][ T5869] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1190.979546][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 1190.986425][ T5869] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1191.001264][ T5869] usb 2-1: config 0 has no interface number 0 [ 1191.050244][ T5869] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1191.133348][ T5869] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1191.153675][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.191511][ T5869] usb 2-1: Product: syz [ 1191.198028][ T5869] usb 2-1: Manufacturer: syz [ 1191.202644][ T5869] usb 2-1: SerialNumber: syz [ 1191.209898][ T5869] usb 2-1: config 0 descriptor?? [ 1191.215830][T20832] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:4096x512 (0x33424752, 8, 0, 0, 0) [ 1191.250593][ T5869] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1191.271795][ T5869] em28xx 2-1:0.132: Video interface 132 found: [ 1191.599685][ T5868] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1191.678555][ T5869] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1191.760043][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 1191.766789][ T5868] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 1191.775231][ T5868] usb 1-1: config 0 has no interface number 0 [ 1191.782616][ T5903] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1191.792468][ T5868] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1191.804866][ T5868] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1191.814306][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.822299][ T5868] usb 1-1: Product: syz [ 1191.835727][ T5868] usb 1-1: Manufacturer: syz [ 1191.840350][ T5868] usb 1-1: SerialNumber: syz [ 1191.852686][ T5868] usb 1-1: config 0 descriptor?? [ 1191.858616][T20853] overlayfs: missing 'lowerdir' [ 1191.868982][ T5868] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 1191.876476][ T5868] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 1191.954142][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1191.962936][ T5903] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1191.971227][ T5903] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.981458][ T5903] usb 3-1: config 63 has no interface number 0 [ 1191.987769][ T5903] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1192.005854][ T5911] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1192.014990][ T5903] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1192.024166][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.032590][ T5903] usb 3-1: Product: syz [ 1192.036807][ T5903] usb 3-1: Manufacturer: syz [ 1192.041750][ T5903] usb 3-1: SerialNumber: syz [ 1192.085240][ T5868] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1192.166222][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 1192.173029][ T5911] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1192.184101][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1192.193208][ T5911] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1192.202354][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.210401][ T5911] usb 5-1: Product: syz [ 1192.215323][ T5911] usb 5-1: Manufacturer: syz [ 1192.220006][ T5911] usb 5-1: SerialNumber: syz [ 1192.227148][ T5911] usb 5-1: config 0 descriptor?? [ 1192.275766][ T5903] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1192.292476][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1192.302812][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1192.321298][ T5868] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 1192.337537][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1192.350281][ T5869] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 1192.350630][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1192.366970][ T5869] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 1192.367106][ T5868] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 1192.385261][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1192.398147][ T5868] usb 1-1: USB disconnect, device number 116 [ 1192.405353][ T5868] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 1192.412747][ T5903] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 1192.424405][ T5903] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1192.457870][ T5903] usb 3-1: USB disconnect, device number 3 [ 1192.483532][ T5911] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input98 [ 1192.604552][ T5869] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1192.612570][ T5869] em28xx 2-1:0.132: analog set to bulk mode. [ 1192.618858][ T9] em28xx 2-1:0.132: Registering V4L2 extension [ 1192.639805][ T5869] usb 2-1: USB disconnect, device number 121 [ 1192.650936][ T5869] em28xx 2-1:0.132: Disconnecting em28xx [ 1192.734465][ T9] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1192.744540][ T9] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1192.751663][ T9] em28xx 2-1:0.132: No AC97 audio processor [ 1192.756674][ T5911] rc_core: IR keymap rc-imon-pad not found [ 1192.768703][ T5911] Registered IR keymap rc-empty [ 1192.773632][ T5911] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1192.784026][ T5911] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1192.812267][ T9] usb 2-1: Decoder not found [ 1192.825311][ T9] em28xx 2-1:0.132: failed to create media graph [ 1192.829120][ T5903] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1192.832689][ T9] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1192.859165][ T9] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1192.871318][ T5869] em28xx 2-1:0.132: Closing input extension [ 1192.883706][ T5869] em28xx 2-1:0.132: Freeing device [ 1192.894586][ T5911] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1192.928667][ T5911] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input99 [ 1192.943076][ T5911] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:2> initialized [ 1193.012930][ T5903] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1193.030526][ T5903] usb 3-1: not running at top speed; connect to a high speed hub [ 1193.077054][ T5903] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1193.085268][ T5903] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.099731][ T5903] usb 3-1: config 63 has no interface number 0 [ 1193.105953][ T5903] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1193.107849][T20851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.113348][ T5911] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1193.153389][ T5903] usb 3-1: string descriptor 0 read error: -22 [ 1193.155727][T20851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.159858][ T5903] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1193.177606][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.208929][ T5903] uvcvideo 3-1:63.66: Found UVC 0.07 device (174f:8acf) [ 1193.299423][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 1193.307118][ T5911] usb 6-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 1193.319350][ T5911] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1193.328452][ T5911] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1193.338077][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.414529][T20873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1193.442690][T20867] Unsupported ieee802154 address type: 0 [ 1193.481283][ T29] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 1193.571172][ T5911] usb 6-1: string descriptor 0 read error: -71 [ 1193.590832][ T5911] usb 6-1: USB disconnect, device number 50 [ 1193.625146][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1193.642434][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1193.653517][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1193.669918][ T29] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 1193.678840][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.689110][ T5903] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1193.700404][ T29] usb 2-1: config 0 has no interface number 0 [ 1193.706943][ T5903] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 1193.715541][ T5903] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1193.728874][ T29] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1193.741160][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.758532][ T5903] usb 3-1: USB disconnect, device number 4 [ 1193.766120][ T29] usb 2-1: Product: syz [ 1193.774851][ T29] usb 2-1: Manufacturer: syz [ 1193.793655][ T29] usb 2-1: SerialNumber: syz [ 1193.816176][ T29] usb 2-1: config 0 descriptor?? [ 1193.826051][ T29] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1193.919550][ T5911] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1194.057311][T20869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.066528][ T5911] usb 6-1: device descriptor read/64, error -71 [ 1194.100970][T20869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.337544][ T5911] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1194.574028][ T5911] usb 6-1: device descriptor read/64, error -71 [ 1195.794868][ T5911] usb usb6-port1: attempt power cycle [ 1195.864756][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1195.865118][ T9] usb 5-1: USB disconnect, device number 2 [ 1196.243143][T20903] 9p: Bad value for 'wfdno' [ 1196.324946][ T5911] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1196.503165][ T29] usb 2-1: USB disconnect, device number 122 [ 1196.533250][ T5911] usb 6-1: device descriptor read/8, error -71 [ 1197.312379][T20913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.324721][T20913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.345435][T20915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.383761][ T5911] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1197.385624][T20915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.428614][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.448003][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1197.504552][ T5911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1197.534533][T20920] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3682'. [ 1197.543986][ T5911] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1197.588853][ T5911] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1197.617397][ T5911] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1197.978007][ T5911] usb 6-1: Manufacturer: syz [ 1198.005026][ T5911] usb 6-1: config 0 descriptor?? [ 1198.024506][T20933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3684'. [ 1198.043501][T20933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3684'. [ 1198.175062][T20933] tipc: Enabled bearer , priority 10 [ 1198.293539][ T5911] rc_core: IR keymap rc-hauppauge not found [ 1198.301486][ T5911] Registered IR keymap rc-empty [ 1198.310864][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.336869][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.357164][ T5911] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1198.379871][ T5911] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input100 [ 1198.397250][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.431664][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.452541][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.474467][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.495442][ T5903] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1198.504559][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.538132][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.563674][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.655464][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.681109][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.709207][ T5911] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1198.733856][ T30] audit: type=1400 audit(1772619965.076:1341): avc: denied { ioctl } for pid=20939 comm="syz.1.3687" path="socket:[90835]" dev="sockfs" ino=90835 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1198.759960][T16998] Bluetooth: hci5: unknown advertising packet type: 0x75 [ 1198.760024][T16998] Bluetooth: hci5: unknown advertising packet type: 0x6c [ 1198.761507][ T5911] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1198.769031][T16998] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1198.872021][ T5903] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1198.883118][ T5903] usb 5-1: not running at top speed; connect to a high speed hub [ 1198.896635][ T5911] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1198.907388][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1198.937120][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 21064, setting to 64 [ 1198.959234][ T5911] usb 6-1: USB disconnect, device number 54 [ 1199.020610][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 64 [ 1199.362369][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1199.371738][ T9] tipc: Node number set to 1452690413 [ 1199.418702][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1199.465119][ T5903] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1199.477759][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.496864][ T5903] usb 5-1: Product: syz [ 1199.523339][ T5903] usb 5-1: Manufacturer: syz [ 1199.542694][ T5903] usb 5-1: SerialNumber: syz [ 1199.583277][ T5903] usb 5-1: config 0 descriptor?? [ 1199.618146][T20935] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1199.632188][ T5903] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1199.805795][ T30] audit: type=1400 audit(1772619966.077:1342): avc: denied { bind } for pid=20968 comm="syz.1.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1199.962343][T20973] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3696'. [ 1199.994449][ T5869] usb 5-1: USB disconnect, device number 3 [ 1200.158277][T20984] fuse: Bad value for 'fd' [ 1201.296517][ T30] audit: type=1400 audit(1772619967.471:1343): avc: denied { name_bind } for pid=20991 comm="syz.0.3702" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1202.280623][T21010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3705'. [ 1202.921531][T20702] bridge_slave_1: left allmulticast mode [ 1202.931438][T20702] bridge_slave_1: left promiscuous mode [ 1203.017384][T20702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.109675][T20702] bridge_slave_0: left allmulticast mode [ 1203.126763][T20702] bridge_slave_0: left promiscuous mode [ 1203.231215][T20702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.297504][ T30] audit: type=1400 audit(1772619969.351:1344): avc: denied { getattr } for pid=21030 comm="syz.1.3715" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=92106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1203.389965][T21034] netlink: 'syz.5.3712': attribute type 2 has an invalid length. [ 1203.483706][T21035] netlink: 'syz.5.3712': attribute type 2 has an invalid length. [ 1203.753813][ T30] audit: type=1400 audit(1772619969.454:1345): avc: denied { connect } for pid=21021 comm="syz.5.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1205.791259][T20702] bond0 (unregistering): (slave bridge3): Removing an active aggregator [ 1205.823169][T20702] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 1205.850517][T20702] bridge3 (unregistering): left promiscuous mode [ 1205.868666][T20702] bridge3 (unregistering): left allmulticast mode [ 1205.928647][T20702] bond1 (unregistering): Released all slaves [ 1206.088553][T20702] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1206.110965][T20702] bond0 (unregistering): Released all slaves [ 1206.547017][T20702] tipc: Left network mode [ 1207.469194][T21083] ªªªªªª5gæ¹Q[Ô: renamed from lo (while UP) [ 1207.536484][T20702] hsr_slave_0: left promiscuous mode [ 1207.558603][T20702] hsr_slave_1: left promiscuous mode [ 1207.572508][T20702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.587379][T20702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.645290][T20702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.673489][T20702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.701829][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1207.742931][T20702] veth1_macvtap: left promiscuous mode [ 1207.748440][T20702] veth0_macvtap: left promiscuous mode [ 1207.759102][T20702] veth1_vlan: left promiscuous mode [ 1207.767945][T20702] veth0_vlan: left promiscuous mode [ 1207.849816][ T9] usb 6-1: device descriptor read/64, error -71 [ 1207.977823][ T791] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1208.102182][T20702] team0 (unregistering): Port device team_slave_1 removed [ 1208.120823][T20702] team0 (unregistering): Port device team_slave_0 removed [ 1208.130745][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1208.159671][ T791] usb 5-1: Using ep0 maxpacket: 16 [ 1208.166813][ T791] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1208.190164][ T791] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1208.209204][ T791] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1208.223522][ T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.242686][ T791] usb 5-1: Product: syz [ 1208.253149][ T791] usb 5-1: Manufacturer: syz [ 1208.263920][ T791] usb 5-1: SerialNumber: syz [ 1208.278735][ T9] usb 6-1: device descriptor read/64, error -71 [ 1208.336791][T20702] team0 (unregistering): Port device dummy0 removed [ 1208.416515][ T9] usb usb6-port1: attempt power cycle [ 1208.435116][T21101] bond0: entered promiscuous mode [ 1208.441951][T21101] bond_slave_0: entered promiscuous mode [ 1208.448309][T21101] bond_slave_1: entered promiscuous mode [ 1208.456141][T21101] batadv0: entered promiscuous mode [ 1208.463702][T21101] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1208.566789][ T30] audit: type=1326 audit(1772619974.243:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21095 comm="syz.4.3727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3edb9c799 code=0x0 [ 1208.811529][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1208.822475][T20702] IPVS: stop unused estimator thread 0... [ 1208.844185][ T9] usb 6-1: device descriptor read/8, error -71 [ 1209.170082][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1209.429220][ T9] usb 6-1: device descriptor read/8, error -71 [ 1209.575157][ T9] usb usb6-port1: unable to enumerate USB device [ 1209.723443][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'. [ 1210.471175][T21153] netlink: 'syz.1.3738': attribute type 16 has an invalid length. [ 1210.479361][T21153] netlink: 'syz.1.3738': attribute type 17 has an invalid length. [ 1210.634859][T21153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1210.706348][T21157] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3739'. [ 1210.841344][T21163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3741'. [ 1211.044145][T21175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1211.092284][ T791] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1211.107021][T21175] netlink: 'syz.2.3743': attribute type 10 has an invalid length. [ 1211.115541][T21175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1211.124763][T21175] bridge0: port 3(dummy0) entered blocking state [ 1211.131181][T21175] bridge0: port 3(dummy0) entered disabled state [ 1211.137840][T21175] dummy0: entered allmulticast mode [ 1211.144349][T21175] dummy0: entered promiscuous mode [ 1211.149796][T21175] bridge0: port 3(dummy0) entered blocking state [ 1211.156187][T21175] bridge0: port 3(dummy0) entered forwarding state [ 1211.224553][T21175] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1211.248853][ T791] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1211.399378][ T791] usb 5-1: USB disconnect, device number 4 [ 1211.462652][T20095] udevd[20095]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.860451][T21197] netlink: 'syz.2.3747': attribute type 21 has an invalid length. [ 1212.885220][T21198] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1212.971049][T21197] IPv6: NLM_F_CREATE should be specified when creating new route [ 1213.328957][T21203] netlink: 'syz.4.3749': attribute type 2 has an invalid length. [ 1214.026392][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1214.602785][ T9] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 1214.615402][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.648373][ T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1214.681486][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1214.721021][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1214.772524][ T30] audit: type=1400 audit(1772619980.080:1347): avc: denied { read } for pid=21227 comm="syz.0.3756" dev="sockfs" ino=92578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1214.811442][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.845099][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1214.849745][T21232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3758'. [ 1215.364809][ T9] usb 5-1: SerialNumber: syz [ 1215.380934][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1215.403581][ T9] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1215.456658][ T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 1215.597181][ T9] usb 5-1: USB disconnect, device number 5 [ 1215.758254][ T791] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1215.975760][ T791] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1216.008507][ T791] usb 6-1: string descriptor 0 read error: -22 [ 1216.014804][ T791] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.40 [ 1216.049064][ T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.204425][T21249] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1216.312240][T21254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.326383][T21254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1216.920013][ T791] usbhid 6-1:1.0: can't add hid device: -71 [ 1216.947694][ T791] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1216.992795][ T791] usb 6-1: USB disconnect, device number 59 [ 1217.144460][T21266] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1217.165767][T21268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1217.200572][T21266] exFAT-fs (nullb0): invalid boot record signature [ 1217.381927][T21266] exFAT-fs (nullb0): failed to read boot sector [ 1218.411330][T21266] exFAT-fs (nullb0): failed to recognize exfat type [ 1218.684559][T21280] new mount options do not match the existing superblock, will be ignored [ 1219.453212][ T5903] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1219.707194][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1219.722039][ T5903] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1219.779826][ T5903] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.877693][ T5903] usb 2-1: config 63 has no interface number 0 [ 1219.888051][ T5903] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1219.901781][ T5903] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1219.916596][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.946712][ T5903] usb 2-1: Product: syz [ 1219.951594][ T5903] usb 2-1: Manufacturer: syz [ 1219.994955][ T5903] usb 2-1: SerialNumber: syz [ 1220.584375][T21311] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3782'. [ 1220.742246][ T5868] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1220.907163][ T5868] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1220.946499][ T5868] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1220.979396][ T5868] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1220.999301][ T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1221.028625][ T5868] usb 5-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 1221.047812][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.062691][ T5868] usb 5-1: Product: syz [ 1221.070295][ T5868] usb 5-1: Manufacturer: syz [ 1221.079521][ T5868] usb 5-1: SerialNumber: syz [ 1221.170223][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1221.177312][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1221.212585][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.237018][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1221.263753][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.290573][ T9] usb 1-1: config 0 descriptor?? [ 1221.307043][ T9] hub 1-1:0.0: USB hub found [ 1221.475321][T21313] syz.5.3783 (21313): drop_caches: 2 [ 1221.558263][ T9] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1221.582218][ T5868] usb 5-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 1221.606253][ T5868] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1221.639832][ T5868] usb 5-1: failed to enable PITCH for EP 0x1 [ 1221.657742][ T5868] usb 5-1: unit 2 not found! [ 1221.685390][ T5868] usb 5-1: unit 0 not found! [ 1221.850568][ T5903] uvcvideo 2-1:63.66: Found UVC 5.07 device syz (174f:8acf) [ 1221.876153][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1221.896249][ T5903] uvcvideo 2-1:63.66: No valid video chain found. [ 1221.912279][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1222.069178][ T5903] usb 2-1: USB disconnect, device number 123 [ 1222.509825][ T5868] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1222.534195][ T5868] usb 5-1: USB disconnect, device number 6 [ 1222.541592][ T9] usb 1-1: USB disconnect, device number 117 [ 1222.567390][ T30] audit: type=1400 audit(1772619987.367:1348): avc: denied { execute } for pid=21319 comm="syz.2.3785" name="cgroup" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1222.743039][ T30] audit: type=1400 audit(1772619987.507:1349): avc: denied { ioctl } for pid=21334 comm="syz.0.3788" path="socket:[93796]" dev="sockfs" ino=93796 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1222.745221][T19898] udevd[19898]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1223.608485][ T30] audit: type=1400 audit(1772619988.321:1350): avc: denied { getopt } for pid=21347 comm="syz.2.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1223.767647][T21355] tipc: Failed to obtain node identity [ 1223.773228][T21355] tipc: Enabling of bearer rejected, failed to enable media [ 1223.784388][T21355] futex_wake_op: syz.4.3793 tries to shift op by 32; fix this program [ 1223.804388][ T30] audit: type=1400 audit(1772619988.508:1351): avc: denied { ioctl } for pid=21354 comm="syz.4.3793" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1223.932152][ T30] audit: type=1400 audit(1772619988.517:1352): avc: denied { connect } for pid=21354 comm="syz.4.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1224.033630][ T30] audit: type=1400 audit(1772619988.574:1353): avc: denied { write } for pid=21354 comm="syz.4.3793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1224.077964][T21358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1224.109811][ T5869] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1224.270236][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 1224.302564][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1224.332235][T21367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3796'. [ 1224.353878][ T5869] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1224.363279][ T5869] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1224.393292][ T5869] usb 5-1: Product: syz [ 1224.408354][ T5869] usb 5-1: Manufacturer: syz [ 1224.459195][ T5869] usb 5-1: SerialNumber: syz [ 1224.733008][ T5869] usb 5-1: Invalid connection information received from device [ 1225.072371][T21355] fuse: Bad value for 'rootmode' [ 1225.087833][ T5869] usb 5-1: USB disconnect, device number 7 [ 1225.361073][ T5903] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1225.614820][ T5903] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1225.715177][ T5903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.727595][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1225.743758][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.757542][ T5903] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1225.766610][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1226.357532][ T5903] usb 1-1: Product: syz [ 1226.361792][ T5903] usb 1-1: Manufacturer: syz [ 1226.382646][ T5903] cdc_wdm 1-1:1.0: skipping garbage [ 1226.392996][ T5903] cdc_wdm 1-1:1.0: skipping garbage [ 1226.399063][ T5903] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1226.617864][T21382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.626505][T21382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.643903][T12048] Bluetooth: hci1: command 0x0406 tx timeout [ 1226.655130][T14727] usb 1-1: USB disconnect, device number 118 [ 1226.844158][T21405] siw: device registration error -23 [ 1226.860028][ T30] audit: type=1400 audit(1772619991.380:1354): avc: denied { bind } for pid=21403 comm="syz.1.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1227.462093][T21407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3804'. [ 1228.853828][T10824] kworker/1:2 (10824) used greatest stack depth: 17736 bytes left [ 1229.253841][ T5868] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1229.381474][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3810'. [ 1229.431140][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 1229.440373][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.455057][ T5868] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1229.464188][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.478354][ T5868] usb 1-1: config 0 descriptor?? [ 1229.494089][ T5868] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 1230.849334][ T5903] usb 1-1: USB disconnect, device number 119 [ 1232.084252][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1232.109658][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1232.135159][T21436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3815'. [ 1232.146506][T21431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1232.187280][T21436] netlink: 'syz.2.3815': attribute type 13 has an invalid length. [ 1232.203813][T21436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3815'. [ 1232.373435][T21445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'. [ 1232.394730][T21445] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1232.576172][T21451] sit2: entered allmulticast mode [ 1233.275540][ T30] audit: type=1400 audit(1772619997.385:1355): avc: denied { getopt } for pid=21463 comm="syz.4.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1233.430756][ T30] audit: type=1400 audit(1772619997.507:1356): avc: denied { watch } for pid=21460 comm="syz.0.3821" path="/proc/602/fd" dev="proc" ino=93164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1233.616586][ T30] audit: type=1400 audit(1772619997.712:1357): avc: denied { ioctl } for pid=21463 comm="syz.4.3823" path="socket:[93157]" dev="sockfs" ino=93157 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1233.924079][ T791] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1234.345145][ T5868] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1234.488932][ T30] audit: type=1400 audit(1772619998.517:1358): avc: denied { remount } for pid=21484 comm="syz.5.3830" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1234.533072][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 1234.542366][ T5868] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1234.551971][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.560665][ T5868] usb 1-1: Product: syz [ 1234.564968][ T5868] usb 1-1: Manufacturer: syz [ 1234.571871][ T5868] usb 1-1: SerialNumber: syz [ 1234.608390][ T5868] usb 1-1: config 0 descriptor?? [ 1234.626756][ T791] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1234.637089][ T791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.648651][ T791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1234.658243][ T791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1234.670031][ T791] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1234.684518][ T791] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1234.693122][ T791] usb 2-1: Product: syz [ 1234.699242][ T791] usb 2-1: Manufacturer: syz [ 1234.712365][ T791] cdc_wdm 2-1:1.0: skipping garbage [ 1234.719465][ T5868] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1234.720037][ T791] cdc_wdm 2-1:1.0: skipping garbage [ 1234.762392][ T791] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1234.779055][ T5869] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1234.929891][ T5869] usb 6-1: device descriptor read/64, error -71 [ 1235.117108][T21475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.138892][T21475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.165974][ T791] usb 2-1: USB disconnect, device number 124 [ 1235.200106][T14727] usb 1-1: USB disconnect, device number 120 [ 1235.207303][ T5869] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1235.345779][ T5869] usb 6-1: device descriptor read/64, error -71 [ 1235.464763][ T5869] usb usb6-port1: attempt power cycle [ 1235.826936][ T5869] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1235.947689][ T5869] usb 6-1: device descriptor read/8, error -71 [ 1236.224165][ T5869] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1236.267054][ T5869] usb 6-1: device descriptor read/8, error -71 [ 1236.577465][ T5869] usb usb6-port1: unable to enumerate USB device [ 1237.216468][ T5868] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1237.378567][T21517] block nbd0: not configured, cannot reconfigure [ 1237.686927][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 1237.699945][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1237.712078][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1237.737885][ T5868] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1237.747088][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.759821][ T5868] usb 5-1: Product: syz [ 1237.769061][ T5868] usb 5-1: Manufacturer: syz [ 1237.775089][ T5868] usb 5-1: SerialNumber: syz [ 1237.851406][ T5868] usb 5-1: config 0 descriptor?? [ 1237.870933][ T5868] usb 5-1: no audio or video endpoints found [ 1238.642737][T21537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3835'. [ 1238.789500][ T30] audit: type=1400 audit(1772620002.548:1359): avc: denied { read } for pid=21504 comm="syz.4.3835" path="socket:[94320]" dev="sockfs" ino=94320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1238.842050][T21525] tmpfs: Unknown parameter 'sîSå%' [ 1239.256291][T21546] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1239.265340][T21546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1240.082258][T21556] syzkaller0: entered promiscuous mode [ 1240.110016][T21556] syzkaller0: entered allmulticast mode [ 1240.131108][T21556] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1240.177966][ T5911] usb 5-1: USB disconnect, device number 8 [ 1240.421150][ T30] audit: type=1400 audit(1772620004.073:1360): avc: denied { name_bind } for pid=21569 comm="syz.4.3854" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1240.603156][ T30] audit: type=1400 audit(1772620004.242:1361): avc: denied { write } for pid=21574 comm="syz.1.3857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1240.686427][ T30] audit: type=1400 audit(1772620004.307:1362): avc: denied { read } for pid=21574 comm="syz.1.3857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1242.159502][T21614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3865'. [ 1242.572443][ T5868] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1242.743519][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 1242.750671][ T5868] usb 2-1: config 9 has an invalid interface number: 61 but max is 0 [ 1242.758997][ T5868] usb 2-1: config 9 has no interface number 0 [ 1242.765669][ T5868] usb 2-1: config 9 interface 61 has no altsetting 0 [ 1242.767416][T21624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3871'. [ 1242.774016][ T5868] usb 2-1: New USB device found, idVendor=0ccd, idProduct=005a, bcdDevice=ba.e3 [ 1242.791714][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.805515][ T5868] usb 2-1: Product: syz [ 1242.809838][ T5868] usb 2-1: Manufacturer: syz [ 1242.814956][ T5868] usb 2-1: SerialNumber: syz [ 1243.182031][ T5869] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1243.184564][T21608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.220602][T21608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.288243][ T5868] dvb-usb: found a 'Terratec Cinergy DT XS Diversity' in cold state, will try to load a firmware [ 1243.370901][ T5868] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1243.380025][ T5868] dib0700: firmware download failed at 7 with -22 [ 1243.422423][ T5868] usb 2-1: USB disconnect, device number 125 [ 1243.446051][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 1243.545554][ T5869] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1243.558667][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.581097][ T5869] usb 1-1: Product: syz [ 1243.590873][ T5869] usb 1-1: Manufacturer: syz [ 1243.597813][ T30] audit: type=1400 audit(1772620007.038:1363): avc: denied { compute_member } for pid=21630 comm="syz.4.3873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1243.628873][ T5869] usb 1-1: SerialNumber: syz [ 1243.646822][ T5869] usb 1-1: config 0 descriptor?? [ 1243.649089][T21631] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1243.671727][ T5869] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1244.008562][ T5868] usb 1-1: USB disconnect, device number 121 [ 1244.587674][T21646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3878'. [ 1244.676801][T21659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3883'. [ 1245.106984][T16998] Bluetooth: hci1: command 0x0406 tx timeout [ 1245.267892][T21671] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1246.552655][T21695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3895'. [ 1246.891456][ T5869] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1247.051846][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 1247.133455][ T5869] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1247.159020][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.167115][ T5869] usb 1-1: Product: syz [ 1247.172501][ T5869] usb 1-1: Manufacturer: syz [ 1247.199497][ T5869] usb 1-1: SerialNumber: syz [ 1247.316025][ T5869] usb 1-1: config 0 descriptor?? [ 1247.330198][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 1247.366829][ T5869] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1247.388393][T21708] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 1247.459774][T21710] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1247.671836][T12048] Bluetooth: hci0: command 0x0406 tx timeout [ 1247.731546][ T5869] usb 1-1: USB disconnect, device number 122 [ 1248.954778][ T5911] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1249.115764][ T5911] usb 2-1: device descriptor read/64, error -71 [ 1249.358546][T21742] syzkaller0: entered promiscuous mode [ 1249.364235][T21742] syzkaller0: entered allmulticast mode [ 1249.375663][T21742] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1249.383963][ T5911] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1249.468931][ T5903] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1249.532588][ T5911] usb 2-1: device descriptor read/64, error -71 [ 1249.649818][ T5911] usb usb2-port1: attempt power cycle [ 1249.660437][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 1249.671706][ T5903] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1249.683224][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.701233][ T5903] usb 6-1: Product: syz [ 1249.709691][ T5903] usb 6-1: Manufacturer: syz [ 1249.718359][ T5903] usb 6-1: SerialNumber: syz [ 1249.814682][ T5903] usb 6-1: config 0 descriptor?? [ 1249.824395][ T5903] hub 6-1:0.0: bad descriptor, ignoring hub [ 1249.830295][ T5903] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1249.898423][T12048] Bluetooth: hci0: command 0x0406 tx timeout [ 1250.997894][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1250.998467][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1251.004628][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1251.067746][ T5911] usb 2-1: device descriptor read/8, error -71 [ 1251.706941][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1251.766909][ T5911] usb 2-1: device descriptor read/8, error -71 [ 1251.905649][ T5911] usb usb2-port1: unable to enumerate USB device [ 1252.236962][ T5911] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1252.386599][ T5911] usb 2-1: device descriptor read/64, error -71 [ 1252.653696][ T5911] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1252.803578][ T5911] usb 2-1: device descriptor read/64, error -71 [ 1252.985394][T17242] usb 6-1: USB disconnect, device number 64 [ 1252.998760][ T5911] usb usb2-port1: attempt power cycle [ 1253.285655][T21800] netlink: 'syz.4.3922': attribute type 2 has an invalid length. [ 1253.293487][T21800] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3922'. [ 1254.017303][T21799] infiniband syz2: set active [ 1254.022033][T21799] infiniband syz2: added bridge_slave_1 [ 1254.063161][T21799] RDS/IB: syz2: added [ 1254.067692][T21799] smc: adding ib device syz2 with port count 1 [ 1254.073975][T21799] smc: ib device syz2 port 1 has no pnetid [ 1254.578020][ T5911] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1254.611193][ T5911] usb 2-1: device descriptor read/8, error -71 [ 1254.802782][T21823] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3933'. [ 1254.848936][T21825] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1254.900913][ T5911] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1254.913032][T21828] syzkaller0: entered promiscuous mode [ 1254.918614][T21828] syzkaller0: entered allmulticast mode [ 1254.932733][T21828] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1254.946916][ T5911] usb 2-1: device descriptor read/8, error -71 [ 1255.070884][ T5911] usb usb2-port1: unable to enumerate USB device [ 1255.116306][T21836] tipc: Enabled bearer , priority 10 [ 1255.125876][T21836] futex_wake_op: syz.0.3939 tries to shift op by 32; fix this program [ 1255.289861][T14727] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1255.476443][T14727] usb 6-1: Using ep0 maxpacket: 8 [ 1255.487257][T14727] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1255.496318][T14727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.579585][T14727] usb 6-1: Product: syz [ 1255.598038][T14727] usb 6-1: Manufacturer: syz [ 1255.686073][T14727] usb 6-1: SerialNumber: syz [ 1256.135598][T14727] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1256.194436][T14727] mxuport 6-1:254.0: probe with driver mxuport failed with error -5 [ 1256.294848][T14727] usb 6-1: USB disconnect, device number 65 [ 1257.411513][ T5868] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1257.646384][ T5868] usb 5-1: device descriptor read/64, error -71 [ 1257.717566][T21896] FAULT_INJECTION: forcing a failure. [ 1257.717566][T21896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1257.739672][T21896] CPU: 1 UID: 0 PID: 21896 Comm: syz.1.3956 Tainted: G L syzkaller #0 PREEMPT(full) [ 1257.739702][T21896] Tainted: [L]=SOFTLOCKUP [ 1257.739708][T21896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1257.739719][T21896] Call Trace: [ 1257.739725][T21896] [ 1257.739733][T21896] dump_stack_lvl+0x100/0x190 [ 1257.739766][T21896] should_fail_ex.cold+0x5/0xa [ 1257.739789][T21896] _copy_from_user+0x2e/0xd0 [ 1257.739816][T21896] copy_msghdr_from_user+0x9f/0x4f0 [ 1257.739842][T21896] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1257.739877][T21896] ___sys_sendmsg+0x106/0x1e0 [ 1257.739903][T21896] ? __pfx____sys_sendmsg+0x10/0x10 [ 1257.739958][T21896] __sys_sendmsg+0x170/0x220 [ 1257.739974][T21896] ? __pfx___sys_sendmsg+0x10/0x10 [ 1257.740003][T21896] do_syscall_64+0x106/0xf80 [ 1257.740021][T21896] ? clear_bhb_loop+0x40/0x90 [ 1257.740044][T21896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.740062][T21896] RIP: 0033:0x7fbc44f9c799 [ 1257.740078][T21896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.740095][T21896] RSP: 002b:00007fbc45e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1257.740113][T21896] RAX: ffffffffffffffda RBX: 00007fbc45215fa0 RCX: 00007fbc44f9c799 [ 1257.740125][T21896] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1257.740136][T21896] RBP: 00007fbc45e22090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.740146][T21896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.740157][T21896] R13: 00007fbc45216038 R14: 00007fbc45215fa0 R15: 00007fff7d81dee8 [ 1257.740181][T21896] [ 1258.089253][T21905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1258.106630][ T5868] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1258.141513][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3960'. [ 1258.271759][T21911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3958'. [ 1258.350392][ T5868] usb 5-1: device descriptor read/64, error -71 [ 1258.359298][ T5813] Bluetooth: hci5: unexpected event for opcode 0x203d [ 1258.480896][ T5868] usb usb5-port1: attempt power cycle [ 1258.528555][T21919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1258.651123][T14727] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1258.843607][ T5868] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1258.857796][T14727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.869140][T14727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.897447][ T5868] usb 5-1: device descriptor read/8, error -71 [ 1258.908440][T14727] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1258.924117][T21929] FAULT_INJECTION: forcing a failure. [ 1258.924117][T21929] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.952183][T21929] CPU: 1 UID: 0 PID: 21929 Comm: syz.0.3968 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.952203][T21929] Tainted: [L]=SOFTLOCKUP [ 1258.952207][T21929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1258.952213][T21929] Call Trace: [ 1258.952217][T21929] [ 1258.952222][T21929] dump_stack_lvl+0x100/0x190 [ 1258.952242][T21929] should_fail_ex.cold+0x5/0xa [ 1258.952257][T21929] should_failslab+0xc2/0x120 [ 1258.952275][T21929] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1258.952291][T21929] ? __alloc_skb+0x140/0x710 [ 1258.952303][T21929] __alloc_skb+0x140/0x710 [ 1258.952312][T21929] ? __alloc_skb+0x5b7/0x710 [ 1258.952321][T21929] ? __pfx___alloc_skb+0x10/0x10 [ 1258.952332][T21929] ? __pfx___might_fault+0x10/0x10 [ 1258.952348][T21929] pfkey_sendmsg+0x161/0x840 [ 1258.952362][T21929] ____sys_sendmsg+0xa54/0xc30 [ 1258.952378][T21929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1258.952397][T21929] ___sys_sendmsg+0x190/0x1e0 [ 1258.952413][T21929] ? __pfx____sys_sendmsg+0x10/0x10 [ 1258.952442][T21929] __sys_sendmsg+0x170/0x220 [ 1258.952453][T21929] ? __pfx___sys_sendmsg+0x10/0x10 [ 1258.952472][T21929] do_syscall_64+0x106/0xf80 [ 1258.952484][T21929] ? clear_bhb_loop+0x40/0x90 [ 1258.952497][T21929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.952508][T21929] RIP: 0033:0x7f3b40f9c799 [ 1258.952518][T21929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.952528][T21929] RSP: 002b:00007f3b41e01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.952539][T21929] RAX: ffffffffffffffda RBX: 00007f3b41215fa0 RCX: 00007f3b40f9c799 [ 1258.952546][T21929] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1258.952552][T21929] RBP: 00007f3b41e01090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.952558][T21929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.952564][T21929] R13: 00007f3b41216038 R14: 00007f3b41215fa0 R15: 00007fffd8fafe38 [ 1258.952578][T21929] [ 1258.954881][T14727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.164334][ T5868] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1259.211028][ T5868] usb 5-1: device descriptor read/8, error -71 [ 1259.405444][T14727] usb 6-1: config 0 descriptor?? [ 1259.464549][ T5868] usb usb5-port1: unable to enumerate USB device [ 1260.696481][T21945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.759450][T21945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.814906][T21945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.825667][T21945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.059049][T14727] usbhid 6-1:0.0: can't add hid device: -71 [ 1262.111935][T14727] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1262.408007][T14727] usb 6-1: USB disconnect, device number 66 [ 1262.639527][ T5813] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1262.648386][ T5813] Bluetooth: hci5: Injecting HCI hardware error event [ 1262.657626][T16998] Bluetooth: hci5: hardware error 0x00 [ 1262.830911][T21974] pimreg: entered allmulticast mode [ 1262.837809][T21974] pimreg: left allmulticast mode [ 1262.991760][ T791] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1263.070020][T21978] FAULT_INJECTION: forcing a failure. [ 1263.070020][T21978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.087712][T21978] CPU: 0 UID: 0 PID: 21978 Comm: syz.1.3980 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.087742][T21978] Tainted: [L]=SOFTLOCKUP [ 1263.087749][T21978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1263.087760][T21978] Call Trace: [ 1263.087767][T21978] [ 1263.087775][T21978] dump_stack_lvl+0x100/0x190 [ 1263.087809][T21978] should_fail_ex.cold+0x5/0xa [ 1263.087836][T21978] _copy_from_iter+0x1f4/0x1690 [ 1263.087865][T21978] ? kmalloc_reserve+0xf9/0x350 [ 1263.087890][T21978] ? __pfx__copy_from_iter+0x10/0x10 [ 1263.087915][T21978] ? __alloc_skb+0x4e9/0x710 [ 1263.087930][T21978] ? __alloc_skb+0x5b7/0x710 [ 1263.087946][T21978] ? __pfx___alloc_skb+0x10/0x10 [ 1263.087965][T21978] ? __pfx___might_fault+0x10/0x10 [ 1263.087992][T21978] pfkey_sendmsg+0x1ce/0x840 [ 1263.088015][T21978] ____sys_sendmsg+0xa54/0xc30 [ 1263.088041][T21978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1263.088076][T21978] ___sys_sendmsg+0x190/0x1e0 [ 1263.088101][T21978] ? __pfx____sys_sendmsg+0x10/0x10 [ 1263.088155][T21978] __sys_sendmsg+0x170/0x220 [ 1263.088174][T21978] ? __pfx___sys_sendmsg+0x10/0x10 [ 1263.088214][T21978] do_syscall_64+0x106/0xf80 [ 1263.088233][T21978] ? clear_bhb_loop+0x40/0x90 [ 1263.088256][T21978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.088275][T21978] RIP: 0033:0x7fbc44f9c799 [ 1263.088291][T21978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.088309][T21978] RSP: 002b:00007fbc45e22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1263.088328][T21978] RAX: ffffffffffffffda RBX: 00007fbc45215fa0 RCX: 00007fbc44f9c799 [ 1263.088339][T21978] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1263.088351][T21978] RBP: 00007fbc45e22090 R08: 0000000000000000 R09: 0000000000000000 [ 1263.088361][T21978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.088371][T21978] R13: 00007fbc45216038 R14: 00007fbc45215fa0 R15: 00007fff7d81dee8 [ 1263.088396][T21978] [ 1263.348869][ T791] usb 6-1: device descriptor read/64, error -71 [ 1263.402551][T21980] tipc: Enabled bearer , priority 10 [ 1263.433294][T21980] futex_wake_op: syz.2.3981 tries to shift op by 32; fix this program [ 1263.438763][T21982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1263.654851][ T791] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1263.670847][T21988] netlink: 'syz.0.3983': attribute type 10 has an invalid length. [ 1263.684509][T21988] macvlan0: entered allmulticast mode [ 1263.704926][T21988] veth1_vlan: entered allmulticast mode [ 1263.740640][T21988] team0: Port device macvlan0 added [ 1263.770346][T21989] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1263.814707][ T791] usb 6-1: device descriptor read/64, error -71 [ 1263.874794][T21988] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1263.933749][ T791] usb usb6-port1: attempt power cycle [ 1264.221171][ T5869] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1264.306970][ T791] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1264.317372][ T5868] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1264.344568][ T791] usb 6-1: device descriptor read/8, error -71 [ 1264.370880][ T5869] usb 1-1: device descriptor read/64, error -71 [ 1264.468235][ T5911] tipc: Node number set to 634572847 [ 1264.477537][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 1264.495807][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1264.516449][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1264.543311][ T5868] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1264.584402][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.595777][ T5868] usb 2-1: Product: syz [ 1264.599955][ T5868] usb 2-1: Manufacturer: syz [ 1264.605887][ T791] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1264.626014][ T5868] usb 2-1: SerialNumber: syz [ 1264.648245][ T5868] usb 2-1: config 0 descriptor?? [ 1264.659543][ T5869] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 1264.668581][ T791] usb 6-1: device descriptor read/8, error -71 [ 1264.817698][ T791] usb usb6-port1: unable to enumerate USB device [ 1264.824279][ T5869] usb 1-1: device descriptor read/64, error -71 [ 1264.865139][T16998] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1264.948800][ T5869] usb usb1-port1: attempt power cycle [ 1265.261085][T22029] FAULT_INJECTION: forcing a failure. [ 1265.261085][T22029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.274529][T22029] CPU: 1 UID: 0 PID: 22029 Comm: syz.4.3996 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.274565][T22029] Tainted: [L]=SOFTLOCKUP [ 1265.274572][T22029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1265.274583][T22029] Call Trace: [ 1265.274589][T22029] [ 1265.274596][T22029] dump_stack_lvl+0x100/0x190 [ 1265.274626][T22029] should_fail_ex.cold+0x5/0xa [ 1265.274649][T22029] _copy_from_iter+0x1f4/0x1690 [ 1265.274679][T22029] ? kmalloc_reserve+0xf9/0x350 [ 1265.274702][T22029] ? __pfx__copy_from_iter+0x10/0x10 [ 1265.274727][T22029] ? __alloc_skb+0x4e9/0x710 [ 1265.274742][T22029] ? __alloc_skb+0x5b7/0x710 [ 1265.274757][T22029] ? __pfx___alloc_skb+0x10/0x10 [ 1265.274776][T22029] ? __pfx___might_fault+0x10/0x10 [ 1265.274804][T22029] pfkey_sendmsg+0x1ce/0x840 [ 1265.274826][T22029] ____sys_sendmsg+0xa54/0xc30 [ 1265.274852][T22029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1265.274886][T22029] ___sys_sendmsg+0x190/0x1e0 [ 1265.274913][T22029] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.274967][T22029] __sys_sendmsg+0x170/0x220 [ 1265.274986][T22029] ? __pfx___sys_sendmsg+0x10/0x10 [ 1265.275020][T22029] do_syscall_64+0x106/0xf80 [ 1265.275038][T22029] ? clear_bhb_loop+0x40/0x90 [ 1265.275059][T22029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.275077][T22029] RIP: 0033:0x7ff3edb9c799 [ 1265.275092][T22029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.275108][T22029] RSP: 002b:00007ff3eeae1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.275126][T22029] RAX: ffffffffffffffda RBX: 00007ff3ede15fa0 RCX: 00007ff3edb9c799 [ 1265.275137][T22029] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1265.275148][T22029] RBP: 00007ff3eeae1090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.275158][T22029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.275168][T22029] R13: 00007ff3ede16038 R14: 00007ff3ede15fa0 R15: 00007ffd3e8e5c18 [ 1265.275192][T22029] [ 1265.345600][ T5869] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1265.699006][T22034] netlink: 'syz.4.3997': attribute type 15 has an invalid length. [ 1265.707065][T22034] netlink: 'syz.4.3997': attribute type 17 has an invalid length. [ 1265.714922][T22034] netlink: 'syz.4.3997': attribute type 27 has an invalid length. [ 1265.727643][ T5869] usb 1-1: device descriptor read/8, error -71 [ 1266.166682][ T5869] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1266.202586][ T5869] usb 1-1: device descriptor read/8, error -71 [ 1266.316853][ T5869] usb usb1-port1: unable to enumerate USB device [ 1266.422692][T22049] syzkaller0: entered promiscuous mode [ 1266.428416][T22049] syzkaller0: entered allmulticast mode [ 1266.447076][T22049] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1268.353549][ T5868] usb 2-1: USB disconnect, device number 8 [ 1268.478025][ T30] audit: type=1400 audit(1772620030.321:1364): avc: denied { setattr } for pid=22066 comm="syz.4.4008" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1268.513413][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1268.550933][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1268.595669][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1268.617657][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1268.679335][ T5911] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1268.687552][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1268.788121][ T30] audit: type=1326 audit(1772620030.610:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.5.4012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dac59c799 code=0x0 [ 1268.921529][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 1268.928314][ T5911] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1268.939233][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1268.949191][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1268.959144][ T5911] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1268.972499][ T5911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1269.002524][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.110931][T22094] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1269.400351][ T5911] usb 1-1: usb_control_msg returned -32 [ 1269.406692][T17242] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 1269.521752][ T5911] usbtmc 1-1:16.0: can't read capabilities [ 1269.577273][T17242] usb 2-1: device descriptor read/64, error -71 [ 1269.762227][ T5911] usb 1-1: USB disconnect, device number 127 [ 1269.887988][T17242] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1270.036635][T17242] usb 2-1: device descriptor read/64, error -71 [ 1270.190088][T17242] usb usb2-port1: attempt power cycle [ 1270.602432][T22113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4020'. [ 1270.731567][T17242] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1270.778562][T17242] usb 2-1: device descriptor read/8, error -71 [ 1270.863702][T22122] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1271.316647][T17242] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1272.063737][T17242] usb 2-1: device descriptor read/8, error -71 [ 1272.099227][T22131] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22131 comm=syz.2.4024 [ 1272.235388][T17242] usb usb2-port1: unable to enumerate USB device [ 1272.762956][T17242] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1272.805638][T22144] overlayfs: missing 'lowerdir' [ 1272.823185][T22144] netlink: 'syz.5.4030': attribute type 1 has an invalid length. [ 1272.885849][T22144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1272.907969][T22147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1272.915137][T22147] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1272.926775][T22147] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1272.961020][T17242] usb 2-1: Using ep0 maxpacket: 8 [ 1272.981014][T17242] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1273.024867][T17242] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1273.072969][T17242] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1273.083111][T17242] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1273.115730][T17242] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1273.124829][T17242] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.159627][T22152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4032'. [ 1273.194190][T22152] netlink: 'syz.0.4032': attribute type 13 has an invalid length. [ 1273.233203][T22152] netlink: 'syz.0.4032': attribute type 17 has an invalid length. [ 1273.332892][T22152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1273.470469][T17242] usb 2-1: usb_control_msg returned -32 [ 1273.476382][T17242] usbtmc 2-1:16.0: can't read capabilities [ 1273.494445][T17242] usb 2-1: USB disconnect, device number 13 [ 1273.603305][T22157] siw: device registration error -23 [ 1273.617601][T22157] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4033'. [ 1274.326562][T22166] FAULT_INJECTION: forcing a failure. [ 1274.326562][T22166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.342084][T22167] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4035'. [ 1274.414247][T22166] CPU: 0 UID: 0 PID: 22166 Comm: syz.5.4036 Tainted: G L syzkaller #0 PREEMPT(full) [ 1274.414280][T22166] Tainted: [L]=SOFTLOCKUP [ 1274.414286][T22166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1274.414297][T22166] Call Trace: [ 1274.414303][T22166] [ 1274.414311][T22166] dump_stack_lvl+0x100/0x190 [ 1274.414345][T22166] should_fail_ex.cold+0x5/0xa [ 1274.414369][T22166] _copy_to_user+0x32/0xd0 [ 1274.414396][T22166] simple_read_from_buffer+0xcb/0x170 [ 1274.414426][T22166] proc_fail_nth_read+0x1af/0x230 [ 1274.414458][T22166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1274.414484][T22166] ? rw_verify_area+0xce/0x6d0 [ 1274.414507][T22166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1274.414530][T22166] vfs_read+0x1e4/0xb30 [ 1274.414558][T22166] ? __pfx_vfs_read+0x10/0x10 [ 1274.414583][T22166] ? __fget_files+0x215/0x3d0 [ 1274.414607][T22166] ? __fget_files+0x21f/0x3d0 [ 1274.414633][T22166] ksys_read+0x12a/0x250 [ 1274.414659][T22166] ? __pfx_ksys_read+0x10/0x10 [ 1274.414689][T22166] do_syscall_64+0x106/0xf80 [ 1274.414706][T22166] ? clear_bhb_loop+0x40/0x90 [ 1274.414728][T22166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.414746][T22166] RIP: 0033:0x7f8dac55cfce [ 1274.414761][T22166] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1274.414778][T22166] RSP: 002b:00007f8dad458fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1274.414797][T22166] RAX: ffffffffffffffda RBX: 00007f8dad4596c0 RCX: 00007f8dac55cfce [ 1274.414809][T22166] RDX: 000000000000000f RSI: 00007f8dad4590a0 RDI: 0000000000000004 [ 1274.414819][T22166] RBP: 00007f8dad459090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.414830][T22166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.414840][T22166] R13: 00007f8dac816038 R14: 00007f8dac815fa0 R15: 00007ffe49556fa8 [ 1274.414866][T22166] [ 1274.725429][T22175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4038'. [ 1274.738007][T22175] netlink: 'syz.4.4038': attribute type 13 has an invalid length. [ 1274.746096][T22175] netlink: 'syz.4.4038': attribute type 17 has an invalid length. [ 1274.858326][T22175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1274.911844][ T5869] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1274.920420][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 1277.843731][T22206] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4048'. [ 1278.150871][ T5911] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1278.188707][T22214] netlink: 1512 bytes leftover after parsing attributes in process `syz.1.4052'. [ 1278.323342][ T5911] usb 1-1: Using ep0 maxpacket: 8 [ 1278.334803][ T5911] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1278.364605][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1278.395218][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1278.497043][ T5911] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1278.669301][ T5911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1278.679843][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.398410][T22223] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1279.462909][T22223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4054'. [ 1279.486302][ T5911] usb 1-1: usb_control_msg returned -32 [ 1279.507777][ T5911] usbtmc 1-1:16.0: can't read capabilities [ 1279.546726][ T30] audit: type=1400 audit(1772620040.657:1366): avc: denied { write } for pid=22221 comm="syz.4.4054" name="file0" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1279.583875][ T5911] usb 1-1: USB disconnect, device number 2 [ 1279.636644][ T30] audit: type=1400 audit(1772620040.694:1367): avc: denied { open } for pid=22221 comm="syz.4.4054" path="/199/file0" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1279.715997][ T30] audit: type=1400 audit(1772620040.694:1368): avc: denied { ioctl } for pid=22221 comm="syz.4.4054" path="/199/file0" dev="tmpfs" ino=1071 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1279.882837][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1280.075181][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 1280.105295][T22229] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1280.186317][ T29] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1280.197647][ T29] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1280.212046][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1280.218819][ T5868] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1280.244365][ T29] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.40 [ 1280.337791][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.400228][ T29] usb 5-1: Product: 夹ï‚筺㮆ᚲ曑਱è‚먓枚쇶薠昚堲닲ãŽë²žâŠêœšï ‚焛ᇡ僸嘗âˆÒ¡íˆ‹ì‰¶î•›á“嗓ë£î˜„뗂ㄜ远〱㞚봜ì¥é”€è­ˆì·§áµî¤ªï¢»âŠœíƒ½ä´Œî¾®â¥˜í‡ºêŸ‡ê·à¡­åº„㒃ї첊垛ᖥ鸛⫽㆖몜䷯악嵈꪿ν [ 1280.535796][ T5868] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1280.549483][ T29] usb 5-1: Manufacturer: ꉦ绌윴⾽윙砄ëç¸ê„¹î ‰èŒÆ„㳾ᗃ甇î¯è½”â™â²Šä»Š [ 1280.561446][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.571138][ T29] usb 5-1: SerialNumber: Р [ 1280.584145][ T5868] usb 2-1: Product: syz [ 1280.599660][ T5868] usb 2-1: Manufacturer: syz [ 1280.609653][ T5868] usb 2-1: SerialNumber: syz [ 1280.625595][ T5868] usb 2-1: config 0 descriptor?? [ 1280.826892][ T29] usbhid 5-1:1.0: can't add hid device: -71 [ 1280.846856][ T29] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1280.858452][ T29] usb 5-1: USB disconnect, device number 13 [ 1281.206103][ T5868] usb 2-1: Firmware: major: 0, minor: 101, hardware type: ATUSB (0) [ 1281.377647][T22253] overlayfs: failed to clone upperpath [ 1281.388822][T22254] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4063'. [ 1281.413631][T22254] netlink: 'syz.5.4063': attribute type 13 has an invalid length. [ 1281.421948][T22254] netlink: 'syz.5.4063': attribute type 17 has an invalid length. [ 1281.431145][T22227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.451127][T22227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.569402][T22254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1281.639023][ T5868] usb 2-1: failed to fetch extended address, random address set [ 1281.733361][ T5868] usb 2-1: USB disconnect, device number 15 [ 1281.866283][T22266] tipc: Enabling of bearer rejected, already enabled [ 1281.904350][T22266] futex_wake_op: syz.2.4067 tries to shift op by 32; fix this program [ 1283.015182][ T29] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1283.048313][T22280] FAULT_INJECTION: forcing a failure. [ 1283.048313][T22280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1283.069327][T22280] CPU: 1 UID: 0 PID: 22280 Comm: syz.4.4068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.069345][T22280] Tainted: [L]=SOFTLOCKUP [ 1283.069350][T22280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1283.069356][T22280] Call Trace: [ 1283.069360][T22280] [ 1283.069365][T22280] dump_stack_lvl+0x100/0x190 [ 1283.069385][T22280] should_fail_ex.cold+0x5/0xa [ 1283.069400][T22280] _copy_from_user+0x2e/0xd0 [ 1283.069417][T22280] move_addr_to_kernel+0x65/0x170 [ 1283.069441][T22280] __sys_connect+0xb5/0x170 [ 1283.069457][T22280] ? __pfx___sys_connect+0x10/0x10 [ 1283.069472][T22280] ? __fget_files+0x21f/0x3d0 [ 1283.069488][T22280] ? __pfx_ksys_write+0x10/0x10 [ 1283.069507][T22280] __x64_sys_connect+0x72/0xb0 [ 1283.069522][T22280] ? lockdep_hardirqs_on+0x78/0x100 [ 1283.069534][T22280] do_syscall_64+0x106/0xf80 [ 1283.069545][T22280] ? clear_bhb_loop+0x40/0x90 [ 1283.069558][T22280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.069570][T22280] RIP: 0033:0x7ff3edb9c799 [ 1283.069580][T22280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1283.069590][T22280] RSP: 002b:00007ff3eeae1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1283.069601][T22280] RAX: ffffffffffffffda RBX: 00007ff3ede15fa0 RCX: 00007ff3edb9c799 [ 1283.069608][T22280] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000006 [ 1283.069614][T22280] RBP: 00007ff3eeae1090 R08: 0000000000000000 R09: 0000000000000000 [ 1283.069620][T22280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1283.069627][T22280] R13: 00007ff3ede16038 R14: 00007ff3ede15fa0 R15: 00007ffd3e8e5c18 [ 1283.069640][T22280] [ 1283.347655][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 1283.354420][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1283.369324][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1283.380431][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1283.412157][ T29] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.428024][ T29] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1283.446833][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.687328][ T29] usb 2-1: usb_control_msg returned -32 [ 1283.693158][ T29] usbtmc 2-1:16.0: can't read capabilities [ 1283.712993][ T29] usb 2-1: USB disconnect, device number 16 [ 1284.821046][T22305] tipc: Enabling of bearer rejected, already enabled [ 1284.830390][T22305] futex_wake_op: syz.2.4081 tries to shift op by 32; fix this program [ 1285.971552][ T30] audit: type=1326 audit(1772620046.681:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22331 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b95d9c799 code=0x7fc00000 [ 1286.579974][ T30] audit: type=1400 audit(1772620047.251:1370): avc: denied { write } for pid=22342 comm="syz.0.4092" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1286.785941][ T30] audit: type=1326 audit(1772620047.429:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22331 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b95d9c799 code=0x7fc00000 [ 1287.145502][T17242] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1287.211452][T22365] tipc: Enabled bearer , priority 10 [ 1287.265514][T22365] futex_wake_op: syz.1.4100 tries to shift op by 32; fix this program [ 1287.355396][T17242] usb 6-1: Using ep0 maxpacket: 8 [ 1287.362302][T17242] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1287.372166][T17242] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1287.383636][T17242] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1287.396537][T17242] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.409797][T17242] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1287.418881][T17242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.601290][ T5868] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1287.672502][T17242] usb 6-1: usb_control_msg returned -32 [ 1287.678974][T17242] usbtmc 6-1:16.0: can't read capabilities [ 1287.696329][T17242] usb 6-1: USB disconnect, device number 71 [ 1287.761756][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 1287.769779][ T5868] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1287.781890][ T5868] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1287.803900][ T5868] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1287.825396][ T5868] usb 2-1: Product: syz [ 1287.830629][ T5868] usb 2-1: Manufacturer: syz [ 1287.835280][ T5868] usb 2-1: SerialNumber: syz [ 1288.408467][ T5855] tipc: Node number set to 271266979 [ 1288.414849][ T5868] usb 2-1: Invalid connection information received from device [ 1288.643199][ T5855] usb 2-1: USB disconnect, device number 17 [ 1289.782342][T17242] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1289.990510][T17242] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1290.016979][T17242] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.061248][T17242] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1290.098589][T17242] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.224540][T17242] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1290.265994][T22411] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1290.293379][T17242] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1290.323851][ T30] audit: type=1400 audit(1772620050.647:1372): avc: denied { read open } for pid=22410 comm="syz.0.4116" path="/" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1290.346901][T22411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1290.378227][T17242] usb 2-1: Product: syz [ 1290.400493][T17242] usb 2-1: Manufacturer: syz [ 1290.550022][T17242] cdc_wdm 2-1:1.0: skipping garbage [ 1290.579997][T17242] cdc_wdm 2-1:1.0: skipping garbage [ 1290.602095][T17242] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1290.983314][T22405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.993372][T22405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.014058][T17242] usb 2-1: USB disconnect, device number 18 [ 1291.047219][T22430] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1291.057919][T22430] team0: Port device batadv1 added [ 1292.010957][T22450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1292.074178][ T30] audit: type=1400 audit(1772620052.377:1373): avc: denied { getopt } for pid=22459 comm="syz.2.4130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1295.105611][T22502] tipc: Enabled bearer , priority 0 [ 1295.183215][T22510] syzkaller0: entered promiscuous mode [ 1295.242319][T22510] syzkaller0: entered allmulticast mode [ 1295.283762][T22514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4147'. [ 1295.296538][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'. [ 1295.324418][T22502] tipc: Resetting bearer [ 1295.351549][T22501] tipc: Resetting bearer [ 1295.392484][T22501] tipc: Disabling bearer [ 1295.415008][T22517] tipc: Enabled bearer , priority 0 [ 1296.326445][T22536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1296.884399][T22553] tipc: Started in network mode [ 1296.889288][T22553] tipc: Node identity 4e8d23cc5ae7, cluster identity 4711 [ 1296.945914][T22553] tipc: Enabled bearer , priority 0 [ 1296.952823][T22554] syzkaller0: entered promiscuous mode [ 1296.959667][T22554] syzkaller0: entered allmulticast mode [ 1296.978594][T22553] tipc: Resetting bearer [ 1296.990004][T22551] tipc: Resetting bearer [ 1297.993061][T22551] tipc: Disabling bearer [ 1298.004221][T22563] futex_wake_op: syz.5.4163 tries to shift op by 32; fix this program [ 1298.047228][T22558] tipc: Enabled bearer , priority 10 [ 1298.231268][T22569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1298.779083][ T5855] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1298.910685][ T5813] Bluetooth: hci4: command tx timeout [ 1299.369973][ T5855] usb 6-1: Using ep0 maxpacket: 8 [ 1299.461111][ T5855] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1299.503140][ T5855] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1299.530940][ T5855] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1299.548350][ T5855] usb 6-1: Product: syz [ 1299.560532][ T5855] usb 6-1: Manufacturer: syz [ 1299.574897][ T5855] usb 6-1: SerialNumber: syz [ 1299.866342][ T5855] usb 6-1: Invalid connection information received from device [ 1300.613503][T17242] usb 6-1: USB disconnect, device number 72 [ 1300.943191][ T5868] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1301.009129][T22620] tipc: Enabled bearer , priority 10 [ 1301.015444][ T791] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1301.024182][T22620] futex_wake_op: syz.4.4185 tries to shift op by 32; fix this program [ 1301.125026][ T5813] Bluetooth: hci4: command tx timeout [ 1301.136887][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.147166][ T5868] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1301.158141][ T5868] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1301.167274][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.175565][ T5868] usb 1-1: Product: syz [ 1301.184194][ T5868] usb 1-1: Manufacturer: syz [ 1301.189177][ T791] usb 2-1: Using ep0 maxpacket: 8 [ 1301.194279][ T5868] usb 1-1: SerialNumber: syz [ 1301.196283][ T791] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1301.210881][ T791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1301.211917][ T5868] usb 1-1: config 0 descriptor?? [ 1301.221712][ T791] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1301.246863][ T791] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1301.271235][ T791] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1301.281281][ T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.306860][ T5855] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1301.492417][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 1301.586875][ T791] usb 2-1: GET_CAPABILITIES returned 0 [ 1301.601095][ T5855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1301.605485][T22612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.610901][ T791] usbtmc 2-1:16.0: can't read capabilities [ 1301.674131][T22612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.706642][ T5855] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1301.782895][ T5855] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1301.800195][ T5855] usb 5-1: Product: syz [ 1301.804391][ T5855] usb 5-1: Manufacturer: syz [ 1301.808835][ T5868] usb 2-1: USB disconnect, device number 19 [ 1301.815064][ T5855] usb 5-1: SerialNumber: syz [ 1302.011515][ T5813] Bluetooth: hci0: command 0x0406 tx timeout [ 1302.023185][T17242] usb 1-1: USB disconnect, device number 3 [ 1302.072409][ T5855] usb 5-1: Invalid connection information received from device [ 1302.087180][ T5855] tipc: Node number set to 342500300 [ 1302.295818][ T5855] usb 5-1: USB disconnect, device number 14 [ 1303.819615][ T5868] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1303.969092][T22703] tipc: Enabling of bearer rejected, already enabled [ 1303.979560][T22703] futex_wake_op: syz.0.4217 tries to shift op by 32; fix this program [ 1303.992911][ T5868] usb 5-1: config 0 has no interfaces? [ 1304.000332][ T5868] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1304.020719][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.028843][ T5868] usb 5-1: Product: syz [ 1304.041704][ T5868] usb 5-1: Manufacturer: syz [ 1304.047848][ T5868] usb 5-1: SerialNumber: syz [ 1304.054984][ T5868] usb 5-1: config 0 descriptor?? [ 1304.245721][T22710] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:21 [ 1304.254800][ T5855] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1304.284331][T22698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.296527][T22698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.493327][ T5855] usb 1-1: Using ep0 maxpacket: 8 [ 1304.667406][ T5855] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1304.703811][ T5855] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1304.720515][ T5855] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1304.730014][ T5855] usb 1-1: Product: syz [ 1304.734161][ T5855] usb 1-1: Manufacturer: syz [ 1304.741900][ T5855] usb 1-1: SerialNumber: syz [ 1304.767289][ T5868] usb 5-1: USB disconnect, device number 15 [ 1304.970478][ T5855] usb 1-1: Invalid connection information received from device [ 1305.094112][T22723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4224'. [ 1305.113984][T22723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4224'. [ 1305.144736][T22724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4224'. [ 1305.182001][ T5868] usb 1-1: USB disconnect, device number 4 [ 1305.713374][ T791] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1306.224472][T17242] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1306.920609][ T791] usb 5-1: Using ep0 maxpacket: 8 [ 1307.014662][ T791] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1307.026837][T17242] usb 2-1: Using ep0 maxpacket: 8 [ 1307.040387][ T791] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1307.043070][T17242] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1307.053584][ T791] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1307.079573][ T791] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1307.092708][ T791] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1307.104832][T16998] ================================================================== [ 1307.112906][T16998] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x56/0x380 [ 1307.115274][T17242] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1307.121432][T16998] Write of size 4 at addr ffff888068f90010 by task kworker/u9:1/16998 [ 1307.139276][T16998] [ 1307.141600][T16998] CPU: 0 UID: 0 PID: 16998 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.141626][T16998] Tainted: [L]=SOFTLOCKUP [ 1307.141634][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1307.141647][T16998] Workqueue: hci0 hci_cmd_sync_work [ 1307.141672][T16998] Call Trace: [ 1307.141680][T16998] [ 1307.141687][T16998] dump_stack_lvl+0x100/0x190 [ 1307.141716][T16998] print_report+0x156/0x4c9 [ 1307.141741][T16998] ? __virt_addr_valid+0x81/0x620 [ 1307.141766][T16998] ? __phys_addr+0xe8/0x180 [ 1307.141791][T16998] ? le_read_features_complete+0x56/0x380 [ 1307.141811][T16998] kasan_report+0xdf/0x1e0 [ 1307.141839][T16998] ? le_read_features_complete+0x56/0x380 [ 1307.141862][T16998] kasan_check_range+0x10f/0x1e0 [ 1307.141881][T16998] le_read_features_complete+0x56/0x380 [ 1307.141903][T16998] hci_cmd_sync_work+0x214/0x470 [ 1307.141922][T16998] ? __pfx_le_read_features_complete+0x10/0x10 [ 1307.141944][T16998] process_one_work+0x9d7/0x1920 [ 1307.141967][T16998] ? __pfx_process_one_work+0x10/0x10 [ 1307.141988][T16998] ? __pfx_hci_cmd_sync_work+0x10/0x10 [ 1307.142009][T16998] worker_thread+0x5da/0xe40 [ 1307.142029][T16998] ? __pfx_worker_thread+0x10/0x10 [ 1307.142048][T16998] ? kthread+0x13a/0x450 [ 1307.142063][T16998] ? __pfx_worker_thread+0x10/0x10 [ 1307.142079][T16998] kthread+0x370/0x450 [ 1307.142094][T16998] ? __pfx_kthread+0x10/0x10 [ 1307.142110][T16998] ret_from_fork+0x754/0xd80 [ 1307.142129][T16998] ? __pfx_ret_from_fork+0x10/0x10 [ 1307.142148][T16998] ? __switch_to+0x7b4/0x1120 [ 1307.142169][T16998] ? __pfx_kthread+0x10/0x10 [ 1307.142186][T16998] ret_from_fork_asm+0x1a/0x30 [ 1307.142212][T16998] [ 1307.142219][T16998] [ 1307.306694][T16998] Allocated by task 5813: [ 1307.310998][T16998] kasan_save_stack+0x30/0x50 [ 1307.315662][T16998] kasan_save_track+0x14/0x30 [ 1307.320335][T16998] __kasan_kmalloc+0xaa/0xb0 [ 1307.324905][T16998] __hci_conn_add+0x1f4/0x1da0 [ 1307.329652][T16998] hci_conn_add_unset+0x76/0x120 [ 1307.334565][T16998] le_conn_complete_evt+0x633/0x1f40 [ 1307.339833][T16998] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1307.345360][T16998] hci_le_meta_evt+0x34a/0x5f0 [ 1307.350098][T16998] hci_event_packet+0x682/0x11c0 [ 1307.355028][T16998] hci_rx_work+0x451/0xfc0 [ 1307.359428][T16998] process_one_work+0x9d7/0x1920 [ 1307.364343][T16998] worker_thread+0x5da/0xe40 [ 1307.368910][T16998] kthread+0x370/0x450 [ 1307.372955][T16998] ret_from_fork+0x754/0xd80 [ 1307.377523][T16998] ret_from_fork_asm+0x1a/0x30 [ 1307.382266][T16998] [ 1307.384564][T16998] Freed by task 5813: [ 1307.388515][T16998] kasan_save_stack+0x30/0x50 [ 1307.393172][T16998] kasan_save_track+0x14/0x30 [ 1307.397832][T16998] kasan_save_free_info+0x3b/0x70 [ 1307.402836][T16998] __kasan_slab_free+0x5f/0x80 [ 1307.407595][T16998] kfree+0x1f6/0x6b0 [ 1307.411489][T16998] device_release+0xa4/0x240 [ 1307.416062][T16998] kobject_put+0x1f7/0x640 [ 1307.420457][T16998] device_unregister+0x2f/0xe0 [ 1307.425201][T16998] hci_conn_del_sysfs+0xb9/0x1a0 [ 1307.430140][T16998] hci_conn_del+0x506/0x1180 [ 1307.434894][T16998] hci_cs_disconnect+0x6bc/0xa50 [ 1307.439821][T16998] hci_cmd_status_evt+0x258/0x770 [ 1307.444822][T16998] hci_event_packet+0x682/0x11c0 [ 1307.449761][T16998] hci_rx_work+0x451/0xfc0 [ 1307.454162][T16998] process_one_work+0x9d7/0x1920 [ 1307.459077][T16998] worker_thread+0x5da/0xe40 [ 1307.463646][T16998] kthread+0x370/0x450 [ 1307.467689][T16998] ret_from_fork+0x754/0xd80 [ 1307.472256][T16998] ret_from_fork_asm+0x1a/0x30 [ 1307.476998][T16998] [ 1307.479299][T16998] The buggy address belongs to the object at ffff888068f90000 [ 1307.479299][T16998] which belongs to the cache kmalloc-8k of size 8192 [ 1307.493326][T16998] The buggy address is located 16 bytes inside of [ 1307.493326][T16998] freed 8192-byte region [ffff888068f90000, ffff888068f92000) [ 1307.507097][T16998] [ 1307.509398][T16998] The buggy address belongs to the physical page: [ 1307.515781][T16998] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x68f90 [ 1307.524514][T16998] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1307.532986][T16998] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1307.540520][T16998] page_type: f5(slab) [ 1307.544489][T16998] raw: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 1307.553049][T16998] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1307.561609][T16998] head: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 1307.570264][T16998] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1307.578909][T16998] head: 00fff00000000003 ffffea0001a3e401 00000000ffffffff 00000000ffffffff [ 1307.587555][T16998] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1307.596195][T16998] page dumped because: kasan: bad access detected [ 1307.602593][T16998] page_owner tracks the page as allocated [ 1307.608280][T16998] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22332, tgid 22331 (syz.2.4090), ts 1286770310933, free_ts 1279907486562 [ 1307.629961][T16998] post_alloc_hook+0x153/0x170 [ 1307.634707][T16998] get_page_from_freelist+0x111d/0x3140 [ 1307.640237][T16998] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1307.646112][T16998] new_slab+0xa6/0x6d0 [ 1307.650180][T16998] refill_objects+0x26b/0x400 [ 1307.654838][T16998] __pcs_replace_empty_main+0x19f/0x600 [ 1307.660364][T16998] __kmalloc_cache_noprof+0x493/0x6f0 [ 1307.665715][T16998] audit_log_d_path+0xed/0x210 [ 1307.670457][T16998] audit_log_d_path_exe+0x46/0x80 [ 1307.675463][T16998] audit_log_task+0x2fe/0x3a0 [ 1307.680126][T16998] audit_seccomp+0x7a/0x1f0 [ 1307.684605][T16998] __seccomp_filter+0x850/0x1140 [ 1307.689517][T16998] __secure_computing+0x221/0x2e0 [ 1307.694531][T16998] do_syscall_64+0x568/0xf80 [ 1307.699100][T16998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.704974][T16998] page last free pid 17073 tgid 17073 stack trace: [ 1307.711446][T16998] __free_frozen_pages+0x7e1/0x10d0 [ 1307.716624][T16998] qlist_free_all+0x47/0xe0 [ 1307.721107][T16998] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1307.726561][T16998] __kasan_slab_alloc+0x69/0x90 [ 1307.731392][T16998] __kmalloc_noprof+0x2b9/0x850 [ 1307.736224][T16998] tomoyo_realpath_from_path+0xb6/0x690 [ 1307.741749][T16998] tomoyo_path_number_perm+0x23c/0x580 [ 1307.747184][T16998] tomoyo_path_mkdir+0x9b/0xe0 [ 1307.751932][T16998] security_path_mkdir+0x154/0x2e0 [ 1307.757024][T16998] filename_mkdirat+0x168/0x5e0 [ 1307.761867][T16998] __x64_sys_mkdirat+0x89/0xc0 [ 1307.766609][T16998] do_syscall_64+0x106/0xf80 [ 1307.771176][T16998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.777049][T16998] [ 1307.779362][T16998] Memory state around the buggy address: [ 1307.784965][T16998] ffff888068f8ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1307.793002][T16998] ffff888068f8ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1307.801043][T16998] >ffff888068f90000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1307.809078][T16998] ^ [ 1307.813639][T16998] ffff888068f90080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1307.821674][T16998] ffff888068f90100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1307.829708][T16998] ================================================================== [ 1307.847720][T17242] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1307.857871][T17242] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1307.871315][T16998] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1307.878523][T16998] CPU: 0 UID: 0 PID: 16998 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.889624][T16998] Tainted: [L]=SOFTLOCKUP [ 1307.893927][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1307.903971][T16998] Workqueue: hci0 hci_cmd_sync_work [ 1307.909156][T16998] Call Trace: [ 1307.912406][T16998] [ 1307.915314][T16998] dump_stack_lvl+0x100/0x190 [ 1307.919968][T16998] vpanic+0x552/0x970 [ 1307.923933][T16998] ? __pfx_vpanic+0x10/0x10 [ 1307.928426][T16998] ? le_read_features_complete+0x56/0x380 [ 1307.934148][T16998] panic+0xd1/0xe0 [ 1307.937864][T16998] ? __pfx_panic+0x10/0x10 [ 1307.942281][T16998] ? le_read_features_complete+0x56/0x380 [ 1307.948008][T16998] ? preempt_schedule_common+0x42/0xc0 [ 1307.953474][T16998] ? check_panic_on_warn+0x1f/0x90 [ 1307.958608][T16998] check_panic_on_warn.cold+0x19/0x34 [ 1307.963994][T16998] end_report.part.0+0x3a/0x90 [ 1307.968772][T16998] kasan_report.cold+0xe/0x18 [ 1307.973458][T16998] ? le_read_features_complete+0x56/0x380 [ 1307.979183][T16998] kasan_check_range+0x10f/0x1e0 [ 1307.984122][T16998] le_read_features_complete+0x56/0x380 [ 1307.989666][T16998] hci_cmd_sync_work+0x214/0x470 [ 1307.994603][T16998] ? __pfx_le_read_features_complete+0x10/0x10 [ 1308.000761][T16998] process_one_work+0x9d7/0x1920 [ 1308.005700][T16998] ? __pfx_process_one_work+0x10/0x10 [ 1308.011072][T16998] ? __pfx_hci_cmd_sync_work+0x10/0x10 [ 1308.016526][T16998] worker_thread+0x5da/0xe40 [ 1308.021111][T16998] ? __pfx_worker_thread+0x10/0x10 [ 1308.026213][T16998] ? kthread+0x13a/0x450 [ 1308.030448][T16998] ? __pfx_worker_thread+0x10/0x10 [ 1308.035550][T16998] kthread+0x370/0x450 [ 1308.039600][T16998] ? __pfx_kthread+0x10/0x10 [ 1308.044170][T16998] ret_from_fork+0x754/0xd80 [ 1308.048746][T16998] ? __pfx_ret_from_fork+0x10/0x10 [ 1308.053836][T16998] ? __switch_to+0x7b4/0x1120 [ 1308.058493][T16998] ? __pfx_kthread+0x10/0x10 [ 1308.063057][T16998] ret_from_fork_asm+0x1a/0x30 [ 1308.067806][T16998] [ 1308.071026][T16998] Kernel Offset: disabled [ 1308.075326][T16998] Rebooting in 86400 seconds..