last executing test programs: 26m30.152176889s ago: executing program 4 (id=2133): ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000640)={0xd5, &(0x7f0000000540)="1b0b86dce85c1be13340a487954dd9634653f8166258668481aae63dfe199c7f73658fd42208bf55428280e3e49a3f461bc6bee86c60fa77826a253f930f895738fd778d94b03690b2c135ee28b2e7764a1cd89dc704e0af7035cfafb6222e66a4e6898cfeda7eb465b31d1c0b820529f92bb3aa139c09cbf1044e285d842a9dd1c58e93b17d52e4678469eae5e18c58f1520acb05fdaff40d60cacb3c4b8159c37f1eadce239fddc36a35e0ca9d05b351f7169bb596cecec7c11d44077bef6813fe88882f078322eec75ae081917736a6e366adcb"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0x800, 0x70bd27, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0xfff1}, {0x5, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x2, 0x10000000, 0x2, 0x5, 0x8, 0x19, 0x13, 0xa, 0x0, 0x10e6, {0x3, 0x2525, 0xff, 0x9, 0x181, 0x20008}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c050) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000340)={0x0, 'sit0\x00', {0x800001}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="00000b92007a468b797a02d7eff9162a937a03b08abb8d337f6a6abd930599b5b2581c3acf0585f15b4edf3fb3f49257c17eb7bb92d272", @ANYRESHEX, @ANYBLOB=',msize=0x000000007fffffff,noextend,k']) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x67, 0x2, {0x80, 0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a200000d6a369c600000a01040000000000000000020000000900010073797a30000000002c000000010a01040000000000000000000009000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000000000000000000000000000f599283caa64c389ace3978474fff8083c1b3acb3985769042bbba0e951027e2e79ef9be551c3805ac4b35ec8333aa1d032ed20cbb9c749c6ea3b776e9d2816e8204860cc89ae441aae8434a7d748a0c02741302d395192878c4ab6bd5025ead2e13f793b3cec251a53e5499449c5d0794c44056f4110e91f320af625f434ec75b61e57a449769afe5701c632dd46ea4c4c090a3e0dc224d59e68a0653eb7f6316268980ea62ee96ccdc0c882571e6d555e6d81c096cdac2c97554325dd44c6eb1dbd7c1b7288dca02e1de85feea2938f74afaabd35585f48c"], 0x10c}}, 0x0) 26m28.952874394s ago: executing program 4 (id=2135): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000000000000040000001811"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 26m27.698649283s ago: executing program 4 (id=2138): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) 26m25.896672193s ago: executing program 4 (id=2141): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x2, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 26m21.352366008s ago: executing program 4 (id=2153): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 26m19.960279872s ago: executing program 4 (id=2156): socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000880)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 26m2.139521945s ago: executing program 32 (id=2156): socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000880)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 25m44.992247349s ago: executing program 3 (id=2219): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25m43.964802464s ago: executing program 3 (id=2224): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25m43.270013473s ago: executing program 3 (id=2231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 25m43.108199801s ago: executing program 3 (id=2233): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$poke(0x4, r1, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) 25m42.000574961s ago: executing program 3 (id=2236): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) sendmmsg$sock(r3, &(0x7f00000005c0)=[{{&(0x7f00000000c0)=@rc={0x1f, @none, 0xff}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)="3a7f40860e1505f56228e30bffdd624e52671fe99e4006b71264b7836317fba6100b98cf63498212783a4887b0ca75571aad7063591ed03dbcd16f796fbe75ebc34873ef1e8f18a408d44a385f0c1a42b4bbe86e9a12732ed357426b8a07e270415329bfe4fcece8bc4cb740c5aa7572bb46c6b7747dc9ab25ede82c11fe477cbbf466901b16ac198a461266be3f0ab0336f128a925b21e7694b", 0x9a}, {&(0x7f0000000440)}], 0x2, &(0x7f0000000580)}}], 0x1, 0x4000) ptrace$ARCH_GET_GS(0x1e, r0, 0x0, 0x1004) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 25m39.564016376s ago: executing program 3 (id=2239): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tkill(0x0, 0x29) unshare(0x60040000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) 25m22.605977599s ago: executing program 33 (id=2239): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tkill(0x0, 0x29) unshare(0x60040000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) 7.183607876s ago: executing program 2 (id=6718): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7f5f5c7d, 0x5}}, './proc\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000fc0)={[0xffff]}, 0x8, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) close(0x3) ppoll(&(0x7f0000000140)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='i8042', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 7.142241127s ago: executing program 6 (id=6719): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 7.030318247s ago: executing program 6 (id=6720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 6.891807888s ago: executing program 6 (id=6721): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 6.611811483s ago: executing program 6 (id=6723): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x161d02) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000280)='1\x00', 0x1) 5.525428256s ago: executing program 2 (id=6725): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) close(0x3) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 5.516802854s ago: executing program 6 (id=6726): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) 5.475141831s ago: executing program 5 (id=6727): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 5.312958935s ago: executing program 5 (id=6728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d4}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200820814120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31ac", 0x25}], 0x1}, 0x0) 5.280474611s ago: executing program 2 (id=6730): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaabb72b4000000590806000108000604a03aa3980e059a542ea8"], 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 5.14615007s ago: executing program 2 (id=6732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x840) 5.131249918s ago: executing program 5 (id=6734): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 5.108909296s ago: executing program 2 (id=6735): syz_io_uring_setup(0x13e5, &(0x7f00000000c0)={0x0, 0x434b, 0x1000, 0x3, 0x341}, &(0x7f0000000140), &(0x7f00000001c0), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) 5.046118005s ago: executing program 5 (id=6736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400040000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000008114001180090001"], 0xc4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 4.99662667s ago: executing program 2 (id=6738): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) poll(0x0, 0x0, 0x3ff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8040, 0x0, 0x0) listen(0xffffffffffffffff, 0xda90) getxattr(&(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x7ff, 0xfa11, 0xff7fffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c00)={0x14, &(0x7f0000000ac0)={0x20, 0x4, 0x49, {0x49, 0x2, "d6cad23fb933daccf712fdccfef892b8141e05ca8624a8843961eae9cdff2ba0447c6a6ac2a9d6235188f41247fa018ef22405125f94fe798e71f63ebfa007cf22b4d50fac6429"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000b80)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, 'hM'}, @main=@item_012={0x1, 0x0, 0xa, '$'}, @main=@item_012={0x2, 0x0, 0x9, "ecfc"}]}}, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x272}}}}, &(0x7f0000000e00)={0x18, &(0x7f0000000c40)={0x20, 0x5, 0x51, "710e44b1ac2b5be6a621a9a7a3838e9d24b175f708b5a83daab98359c291f7c15a30312849dea751320d38d42ada585d45b1aa9da6794278bf1c89e03d211d28d4a2b840fbf60b8ce870e28245ae156223"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0x6a, "d1ab51975d5f002f31807e83159ca3b62a5fd7cdc18f1d8208b65aae6ff7afa1d0f04ed029c9e3ca37a225662753737d4b55480b97c7c3dd84396536803353059ef489aaeb1e97b6584c85203bb1a79969111ab7a43b0e6d350ae62f1c2420c09d946d626cc82765d213"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0x9}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000500)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x9, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x8, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x44, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0xfffffffe, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 4.498523853s ago: executing program 5 (id=6741): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x49, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x1, 0x87, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x7, 0x6, [{0x5, 0x7}, {0x5, 0x21}, {0x8, 0xd}, {0x3, 0x3}, {0x3, 0x9}, {0x6f, 0x7}], 0xbf}]}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 3.978041098s ago: executing program 0 (id=6744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x40) r4 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) lseek(r6, 0x5, 0x4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001480)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000680)={"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"}) 3.026582551s ago: executing program 0 (id=6748): syz_io_uring_setup(0x13e5, &(0x7f00000000c0)={0x0, 0x434b, 0x1000, 0x3, 0x341}, &(0x7f0000000140), &(0x7f00000001c0), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) 2.89271319s ago: executing program 0 (id=6749): syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10043, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000007c0)={0x0, 0x6a1a, 0x2000, 0x3, 0x185}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r6}}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xe3a, 0xfffffffd, 0x4}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x6d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x8, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r8) socket$nl_route(0x10, 0x3, 0x0) 2.807485784s ago: executing program 1 (id=6750): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x68a41, 0x3) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a0920", 0x41}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e", 0xb9}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f5", 0x29}], 0x4, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.716859341s ago: executing program 0 (id=6751): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) 2.622724298s ago: executing program 0 (id=6752): openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) creat(&(0x7f0000000200)='./bus\x00', 0x84) 2.553671054s ago: executing program 1 (id=6753): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f5f5c7d, 0x5}}, './proc\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_LABELS_MASK={0x1c, 0x17, [0x35, 0x7, 0x40, 0x7f, 0x7a7b, 0x4]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x840) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000fc0)={[0xffff]}, 0x8, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) close(0x3) ppoll(&(0x7f0000000140)=[{r1, 0x5}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='i8042', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 2.278592046s ago: executing program 1 (id=6754): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000280), 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = fcntl$dupfd(r6, 0x406, r6) write$binfmt_elf64(r7, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$NFT_BATCH(r4, 0x0, 0x4048010) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x65) r8 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000080)=0x0) ptrace$ARCH_GET_FS(0x1e, r9, &(0x7f0000000100), 0x1003) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}}, 0x20}}, 0x0) 1.233533825s ago: executing program 1 (id=6755): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.161784328s ago: executing program 6 (id=6756): socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4044084) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 213.705765ms ago: executing program 1 (id=6757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) 111.888058ms ago: executing program 1 (id=6758): setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$pptp(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) 109.204742ms ago: executing program 0 (id=6759): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x4370}) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r1], 0x28}}, 0x816) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)="000080", 0x15) 0s ago: executing program 5 (id=6760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) kernel console output (not intermixed with test programs): maxpacket: 32 [ 2209.260533][T14126] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2209.276567][T14126] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2209.300767][T14126] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2209.328105][T14126] usb 7-1: Product: syz [ 2209.342424][T14126] usb 7-1: Manufacturer: syz [ 2209.363533][T14126] usb 7-1: SerialNumber: syz [ 2209.392257][T14126] usb 7-1: config 0 descriptor?? [ 2209.435453][T27282] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2210.531700][T27289] lo speed is unknown, defaulting to 1000 [ 2210.613147][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2210.628313][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2210.639584][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2210.651539][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2210.665080][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2210.892235][T14126] usb 7-1: USB disconnect, device number 107 [ 2211.577034][T27293] lo speed is unknown, defaulting to 1000 [ 2211.987921][T21978] IPVS: starting estimator thread 0... [ 2212.030891][T14126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2212.054484][T18422] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 2212.108924][T27339] IPVS: using max 41 ests per chain, 98400 per kthread [ 2212.271800][T18422] usb 7-1: Using ep0 maxpacket: 8 [ 2212.283544][T14126] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2212.593987][T18422] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2212.653428][T14126] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2212.698686][T18422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.720406][T14126] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2212.789408][T18422] usb 7-1: Product: syz [ 2212.822182][T18422] usb 7-1: Manufacturer: syz [ 2212.831710][T14126] usb 2-1: config 63 has no interface number 0 [ 2212.862683][T18422] usb 7-1: SerialNumber: syz [ 2212.876711][T14126] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2212.927710][T27296] Bluetooth: hci4: command tx timeout [ 2212.992060][T18422] usb 7-1: config 0 descriptor?? [ 2213.013032][T14126] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2213.029052][T14126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.042143][T14126] usb 2-1: Product: syz [ 2213.051907][T14126] usb 2-1: Manufacturer: syz [ 2213.061582][T14126] usb 2-1: SerialNumber: syz [ 2213.078123][T27293] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.088919][T27293] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.099000][T27293] bridge_slave_0: entered allmulticast mode [ 2213.117043][T27293] bridge_slave_0: entered promiscuous mode [ 2213.150505][T27293] bridge0: port 2(bridge_slave_1) entered blocking state [ 2213.158287][T27293] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.166577][T27293] bridge_slave_1: entered allmulticast mode [ 2213.180313][T27293] bridge_slave_1: entered promiscuous mode [ 2213.250759][T27293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2213.350984][T18422] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2213.373794][T27293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2213.459918][T27293] team0: Port device team_slave_0 added [ 2213.495934][T27293] team0: Port device team_slave_1 added [ 2213.642205][T27293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2213.655253][T14126] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2213.664473][T14126] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2213.675290][T27293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2213.709109][T14126] uvcvideo 2-1:63.66: No valid video chain found. [ 2213.728303][T14126] usb 2-1: USB disconnect, device number 3 [ 2213.755623][T27293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2213.794754][T27293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2213.799289][T18422] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2213.824174][T27293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2213.851169][T27293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2213.876221][T18422] usb 7-1: USB disconnect, device number 108 [ 2213.932662][T27293] hsr_slave_0: entered promiscuous mode [ 2213.940350][T27293] hsr_slave_1: entered promiscuous mode [ 2213.946823][T27293] debugfs: 'hsr0' already exists in 'hsr' [ 2213.953131][T27293] Cannot create hsr debugfs directory [ 2214.652313][T27293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2214.952073][T27293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2215.163388][T27296] Bluetooth: hci4: command tx timeout [ 2216.800694][T27364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6000'. [ 2216.921162][T27293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.622470][T27296] Bluetooth: hci4: command tx timeout [ 2217.687604][T22578] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2218.232625][T22578] usb 3-1: Using ep0 maxpacket: 32 [ 2218.326814][T22578] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 2218.408127][T22578] usb 3-1: config 0 has no interface number 0 [ 2218.487273][T22578] usb 3-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2218.588477][T22578] usb 3-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2218.743129][T22578] usb 3-1: config 0 interface 28 has no altsetting 0 [ 2218.827429][T22578] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2218.937015][T22578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2219.100293][T22578] usb 3-1: config 0 descriptor?? [ 2219.145096][T27293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2219.165228][T22578] usb 3-1: can't set config #0, error -71 [ 2219.188164][T22578] usb 3-1: USB disconnect, device number 8 [ 2219.460999][T27293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2219.470930][T27293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2219.484008][T27293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2219.581445][T27293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2219.621077][T27293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2219.712868][T27293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2219.750903][T27293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2219.842616][T27296] Bluetooth: hci4: command tx timeout [ 2220.550642][T27293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2221.560618][T27293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2221.592179][T27293] 8021q: adding VLAN 0 to HW filter on device team0 [ 2221.606766][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 2221.613985][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2221.679165][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 2221.686360][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2221.761583][T20708] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2221.856443][ T5711] IPVS: starting estimator thread 0... [ 2222.006826][T27417] IPVS: using max 53 ests per chain, 127200 per kthread [ 2222.040916][T20708] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2222.095518][T20708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.168528][T20708] usb 3-1: Product: syz [ 2222.200014][T20708] usb 3-1: Manufacturer: syz [ 2222.216382][T20708] usb 3-1: SerialNumber: syz [ 2222.767439][T27293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2222.859554][T20708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2222.876099][T20708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2222.994939][ T189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2223.198118][ T189] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2223.221285][ T189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2223.285974][ T189] usb 2-1: config 0 has no interface number 0 [ 2223.355703][ T189] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2223.427658][ T189] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2223.487934][ T189] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2223.551087][ T189] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2223.585278][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.622083][ T189] usb 2-1: Product: syz [ 2223.642277][ T189] usb 2-1: Manufacturer: syz [ 2223.695529][ T189] usb 2-1: SerialNumber: syz [ 2223.816243][ T189] usb 2-1: config 0 descriptor?? [ 2224.098359][T20708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 2224.134452][T20708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2224.147521][T20708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2225.164175][T20708] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2225.217953][T27293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2225.288308][T27293] veth0_vlan: entered promiscuous mode [ 2225.305265][T27293] veth1_vlan: entered promiscuous mode [ 2225.368040][T20708] usb 3-1: USB disconnect, device number 9 [ 2225.407184][T27293] veth0_macvtap: entered promiscuous mode [ 2225.438826][T27293] veth1_macvtap: entered promiscuous mode [ 2225.470711][T27293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2225.492952][T27293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2225.552894][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.608261][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2225.620847][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2225.641904][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2225.652357][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.659477][T27232] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 2225.662041][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2225.673194][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.686800][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2225.702675][T20708] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2225.834247][T27232] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2225.846682][T27232] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2225.859680][T27232] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2225.869138][T27232] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.878114][T27232] usb 7-1: Product: syz [ 2225.882346][T27232] usb 7-1: Manufacturer: syz [ 2225.889157][T27232] usb 7-1: SerialNumber: syz [ 2225.894822][T20708] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2225.906285][T20708] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2225.915999][T27232] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 2225.926856][T20708] usb 3-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2225.937756][T27232] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2225.949281][T20708] usb 3-1: config 63 has no interface number 0 [ 2225.958366][T20708] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2225.965687][T27232] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2225.977492][T20708] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2225.987710][T20708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.997187][T20708] usb 3-1: Product: syz [ 2226.004261][T20708] usb 3-1: Manufacturer: syz [ 2226.016778][T20708] usb 3-1: SerialNumber: syz [ 2226.152736][T22578] usb 2-1: USB disconnect, device number 4 [ 2226.461787][T27457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6021'. [ 2226.470883][T27457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6021'. [ 2226.479957][T27457] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6021'. [ 2226.883653][T27232] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2227.058449][T27232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2227.067166][T27232] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 2227.075690][T27232] usb 6-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2227.086123][T27232] usb 6-1: config 63 has no interface number 0 [ 2227.093210][T27232] usb 6-1: config 63 interface 66 has no altsetting 0 [ 2227.102311][T27232] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2227.113271][T27232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.121307][T27232] usb 6-1: Product: syz [ 2227.125554][T27232] usb 6-1: Manufacturer: syz [ 2227.130285][T27232] usb 6-1: SerialNumber: syz [ 2228.421568][T22578] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2228.473281][T27232] uvcvideo 6-1:63.66: Found Unit with invalid ID 0 [ 2228.480183][T27232] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2228.498781][T27232] uvcvideo 6-1:63.66: No valid video chain found. [ 2228.507145][T20708] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 2228.516106][T27232] usb 6-1: USB disconnect, device number 107 [ 2228.527922][T20708] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2228.543757][T20708] uvcvideo 3-1:63.66: No valid video chain found. [ 2228.555879][T20708] usb 3-1: USB disconnect, device number 10 [ 2228.588788][T22578] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2228.607331][T22578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2228.615381][T22578] usb 2-1: Product: syz [ 2228.620700][T22578] usb 2-1: Manufacturer: syz [ 2228.625440][T22578] usb 2-1: SerialNumber: syz [ 2228.687759][ T5711] usb 7-1: USB disconnect, device number 109 [ 2228.718118][ T5711] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2228.765826][ T5711] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2228.803754][ T5711] ti_usb_3410_5052 7-1:2.0: device disconnected [ 2229.080130][T22578] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2229.092728][T22578] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2229.127282][ T5711] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 2229.298884][ T5711] usb 7-1: Using ep0 maxpacket: 8 [ 2229.312745][ T5711] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2229.322816][ T5711] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2229.334595][ T5711] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2229.346463][ T5711] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2229.357915][ T5711] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2229.368245][ T5711] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2229.386307][ T5711] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2229.397772][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2229.408229][ T24] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2229.591406][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 2229.598346][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2229.610185][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2229.621724][ T24] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2229.630893][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.641951][ T24] usb 6-1: Product: syz [ 2229.642331][ T5711] usb 7-1: usb_control_msg returned -32 [ 2229.646231][ T24] usb 6-1: Manufacturer: syz [ 2229.646249][ T24] usb 6-1: SerialNumber: syz [ 2229.649070][ T24] usb 6-1: config 0 descriptor?? [ 2229.656673][ T5711] usbtmc 7-1:16.0: can't read capabilities [ 2229.686287][ T24] keyspan 6-1:0.0: Keyspan 1 port adapter converter detected [ 2229.689446][ T5711] usb 7-1: USB disconnect, device number 110 [ 2229.694955][ T24] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87 [ 2229.709049][ T24] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7 [ 2229.718951][ T24] keyspan 6-1:0.0: unsupported endpoint type 0 [ 2229.725604][ T24] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1 [ 2229.733612][ T24] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2 [ 2229.741311][ T24] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85 [ 2229.749301][ T24] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5 [ 2229.757993][ T24] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2229.909190][T27492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2229.919380][T27492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2229.928967][T27492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2229.937771][T27492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.417687][T22578] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2230.419698][T27499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.432231][T22578] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2230.443068][T27499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.457310][T22578] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2230.463297][T20708] usb 6-1: USB disconnect, device number 108 [ 2230.473707][T22578] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2230.485655][T20708] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2230.489955][T22578] usb 2-1: USB disconnect, device number 5 [ 2230.506479][T20708] keyspan 6-1:0.0: device disconnected [ 2230.774680][T27503] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6033'. [ 2230.783841][T27503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6033'. [ 2230.795118][T27503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6033'. [ 2231.440867][T27510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6036'. [ 2232.455631][T27521] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6037'. [ 2232.464644][T27521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6037'. [ 2232.485324][ T29] audit: type=1400 audit(1786220526.408:839): avc: denied { write } for pid=27514 comm="syz.6.6038" laddr=fe80::16 lport=60 faddr=fe80::a fport=65535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2232.515756][ T5711] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2232.819648][ T5596] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2233.377754][ T5711] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2233.480612][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2233.945835][ T5596] usb 6-1: Using ep0 maxpacket: 32 [ 2233.966735][ T5596] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 2233.999614][ T5711] usb 3-1: config 0 has no interface number 0 [ 2234.009358][ T5596] usb 6-1: config 0 has no interface number 0 [ 2234.021300][ T5711] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2234.037778][ T5596] usb 6-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2234.040374][ T5711] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2234.062387][ T5711] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2234.077495][ T5596] usb 6-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2234.088756][ T5711] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2234.094195][ T5596] usb 6-1: config 0 interface 28 has no altsetting 0 [ 2234.117715][ T5596] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2234.121886][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.127262][ T5596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.144913][ T5711] usb 3-1: Product: syz [ 2234.145648][ T5596] usb 6-1: config 0 descriptor?? [ 2234.156307][ T5711] usb 3-1: Manufacturer: syz [ 2234.160969][ T5711] usb 3-1: SerialNumber: syz [ 2234.179769][ T5711] usb 3-1: config 0 descriptor?? [ 2234.368270][T20708] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 2234.415706][ T5711] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2234.462069][T27539] lo speed is unknown, defaulting to 1000 [ 2234.486169][ T5596] usb 6-1: string descriptor 0 read error: -71 [ 2234.530687][T20708] usb 7-1: Using ep0 maxpacket: 8 [ 2234.537908][ T5596] usb 6-1: USB disconnect, device number 109 [ 2234.552638][T20708] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2234.584067][T20708] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2234.622227][T20708] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2234.662557][T20708] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2234.695369][T20708] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2234.720336][T20708] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2234.753479][T20708] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2234.775256][T20708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.996397][T27232] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 2235.021955][T20708] usb 7-1: usb_control_msg returned -32 [ 2235.027662][T20708] usbtmc 7-1:16.0: can't read capabilities [ 2235.038338][T20708] usb 7-1: USB disconnect, device number 111 [ 2235.160572][T27232] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2235.168787][T27232] usb 2-1: config 0 has no interface number 0 [ 2235.177704][T27232] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2235.187741][T27232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.199287][T27232] usb 2-1: Product: syz [ 2235.207608][T27232] usb 2-1: Manufacturer: syz [ 2235.212417][T27232] usb 2-1: SerialNumber: syz [ 2235.234317][T27232] usb 2-1: config 0 descriptor?? [ 2235.247596][T27232] usb 2-1: selecting invalid altsetting 1 [ 2235.253400][T27232] dvb_ttusb_budget: ttusb_init_controller: error [ 2235.260555][T27232] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2235.288331][T27232] DVB: Unable to find symbol stv0299_attach() [ 2235.314259][T27232] DVB: Unable to find symbol tda8083_attach() [ 2235.322277][T27232] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2236.247694][T22578] usb 3-1: USB disconnect, device number 11 [ 2236.722669][T22578] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2236.786248][ T5596] usb 2-1: USB disconnect, device number 6 [ 2236.918090][T22578] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2236.930428][T22578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.938609][T22578] usb 3-1: Product: syz [ 2236.943000][T22578] usb 3-1: Manufacturer: syz [ 2236.948268][T22578] usb 3-1: SerialNumber: syz [ 2237.065400][T20708] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 2237.922084][T20708] usb 7-1: Using ep0 maxpacket: 32 [ 2237.934411][T20708] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2237.956885][T20708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2237.956899][T22578] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2237.956941][T22578] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2237.987827][T20708] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 2238.007770][T20708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.025211][T20708] usb 7-1: Product: syz [ 2238.040463][T20708] usb 7-1: Manufacturer: syz [ 2238.048933][T20708] usb 7-1: SerialNumber: syz [ 2238.086643][T20708] usb 7-1: config 0 descriptor?? [ 2238.152909][T20708] keyspan 7-1:0.0: Keyspan 1 port adapter converter detected [ 2238.160581][T20708] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 2238.168332][T20708] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 2238.182688][T20708] keyspan 7-1:0.0: unsupported endpoint type 0 [ 2238.188975][T20708] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 2238.198385][T20708] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 2238.213229][T20708] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 2238.223057][T20708] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 2238.266093][T27576] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6049'. [ 2238.395894][T27560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.488026][T27560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.511750][T20708] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2238.623945][T27560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.659692][T27560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.997106][T27560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.009684][T27560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.020386][T20708] usb 7-1: USB disconnect, device number 112 [ 2239.040790][T20708] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2239.063375][T20708] keyspan 7-1:0.0: device disconnected [ 2239.576291][T22578] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2239.582412][ T29] audit: type=1400 audit(1786220532.972:840): avc: denied { map } for pid=27582 comm="syz.1.6054" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2239.589246][T22578] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2239.625284][T22578] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2239.636896][T22578] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 2239.659642][ T29] audit: type=1400 audit(1786220532.972:841): avc: denied { execute } for pid=27582 comm="syz.1.6054" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2239.671082][T22578] usb 3-1: USB disconnect, device number 12 [ 2240.065761][T27232] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 2240.228272][T27232] usb 7-1: Using ep0 maxpacket: 8 [ 2240.236814][T27232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2240.261563][T27232] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2240.284197][T27232] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2240.297311][T27232] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2240.310751][T27232] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2240.321086][T27232] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2240.338078][T27232] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2240.347437][T27232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.062316][T22578] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2241.095811][T27232] usb 7-1: usb_control_msg returned -32 [ 2241.101640][T27232] usbtmc 7-1:16.0: can't read capabilities [ 2241.112078][T27232] usb 7-1: USB disconnect, device number 113 [ 2241.268241][ T24] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2241.280816][T22578] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2241.291798][T22578] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2241.300002][T22578] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2241.311812][T22578] usb 2-1: config 63 has no interface number 0 [ 2241.318021][T22578] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2241.326637][T22578] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2241.336149][T22578] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.345053][T22578] usb 2-1: Product: syz [ 2241.349301][T22578] usb 2-1: Manufacturer: syz [ 2241.354013][T22578] usb 2-1: SerialNumber: syz [ 2241.833588][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2241.842339][ T24] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 2241.850615][ T24] usb 6-1: config 63 has an invalid descriptor of length 43, skipping remainder of the config [ 2241.865638][ T24] usb 6-1: config 63 has no interface number 0 [ 2241.871892][ T24] usb 6-1: config 63 interface 66 has no altsetting 0 [ 2241.880622][ T24] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2241.889771][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.897813][ T24] usb 6-1: Product: syz [ 2241.902027][ T24] usb 6-1: Manufacturer: syz [ 2241.906632][ T24] usb 6-1: SerialNumber: syz [ 2242.149396][ T24] uvcvideo 6-1:63.66: probe with driver uvcvideo failed with error -22 [ 2242.170437][ T24] usb 6-1: USB disconnect, device number 110 [ 2242.398596][T22578] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2242.422100][T22578] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2242.438025][T22578] uvcvideo 2-1:63.66: No valid video chain found. [ 2242.478960][T22578] usb 2-1: USB disconnect, device number 7 [ 2242.511588][T27613] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6062'. [ 2242.904248][T27615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6064'. [ 2243.262851][T27232] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2243.406806][T27624] lo speed is unknown, defaulting to 1000 [ 2244.076404][T27232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2244.094560][T27232] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 2244.116384][T27232] usb 6-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2244.696506][T27232] usb 6-1: config 63 has no interface number 0 [ 2244.733476][T27232] usb 6-1: config 63 interface 66 has no altsetting 0 [ 2244.745346][T27232] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2244.754458][T27232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.762723][T27232] usb 6-1: Product: syz [ 2244.766943][T27232] usb 6-1: Manufacturer: syz [ 2244.771552][T27232] usb 6-1: SerialNumber: syz [ 2245.143628][T27639] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6068'. [ 2245.154440][T27639] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6068'. [ 2245.164767][T27639] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6068'. [ 2245.486768][T27641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6070'. [ 2245.496939][ T5711] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 2245.673384][T27232] uvcvideo 6-1:63.66: Found Unit with invalid ID 0 [ 2245.680406][T27232] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2245.701146][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2245.712071][T27232] uvcvideo 6-1:63.66: No valid video chain found. [ 2245.718802][ T5711] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2245.730069][T27232] usb 6-1: USB disconnect, device number 111 [ 2245.756741][ T5711] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2245.768737][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.788024][ T5711] usb 3-1: Product: syz [ 2245.886730][ T5711] usb 3-1: Manufacturer: syz [ 2245.904013][ T5711] usb 3-1: SerialNumber: syz [ 2245.935705][ T5711] usb 3-1: config 0 descriptor?? [ 2246.195657][T27646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6071'. [ 2246.205032][T27646] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6071'. [ 2246.214229][T27646] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6071'. [ 2246.985410][ T5711] usb 3-1: USB disconnect, device number 13 [ 2247.000946][T18422] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2248.065953][T18422] usb 2-1: Using ep0 maxpacket: 32 [ 2248.093639][T18422] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 2248.107576][T18422] usb 2-1: config 0 has no interface number 0 [ 2248.114650][T18422] usb 2-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2248.125991][T18422] usb 2-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2248.141452][T18422] usb 2-1: config 0 interface 28 has no altsetting 0 [ 2248.148652][T18422] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2248.158217][T18422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.168669][T18422] usb 2-1: config 0 descriptor?? [ 2248.363012][ T5711] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2248.432676][T18422] usb 2-1: string descriptor 0 read error: -71 [ 2248.442202][T18422] usb 2-1: USB disconnect, device number 8 [ 2248.884401][ T5711] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2248.892610][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2248.902822][ T5711] usb 3-1: config 0 has no interface number 0 [ 2248.909012][ T5711] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2248.920442][ T5711] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2248.930465][ T5711] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2248.945836][ T5711] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2248.955030][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.964734][ T5711] usb 3-1: Product: syz [ 2248.968923][ T5711] usb 3-1: Manufacturer: syz [ 2248.973581][ T5711] usb 3-1: SerialNumber: syz [ 2248.979794][ T5711] usb 3-1: config 0 descriptor?? [ 2249.002125][T22984] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2249.165495][T22984] usb 6-1: no configurations [ 2249.170182][T22984] usb 6-1: can't read configurations, error -22 [ 2249.321410][T22984] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2249.437576][T27677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6081'. [ 2249.501139][T22984] usb 6-1: no configurations [ 2249.514304][T22984] usb 6-1: can't read configurations, error -22 [ 2249.534344][T22984] usb usb6-port1: attempt power cycle [ 2249.649085][T27680] lo speed is unknown, defaulting to 1000 [ 2249.847275][ T5711] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2249.912167][T22984] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2249.945586][T22984] usb 6-1: no configurations [ 2249.955114][T22984] usb 6-1: can't read configurations, error -22 [ 2250.020243][ T5711] usb 2-1: Using ep0 maxpacket: 32 [ 2250.032108][ T5711] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 2250.040270][ T5711] usb 2-1: config 0 has no interface number 0 [ 2250.046896][ T5711] usb 2-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2250.058137][ T189] usb 7-1: new full-speed USB device number 114 using dummy_hcd [ 2250.066569][ T5711] usb 2-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2250.083452][ T5711] usb 2-1: config 0 interface 28 has no altsetting 0 [ 2250.090366][ T5711] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2250.100018][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.112151][ T5711] usb 2-1: config 0 descriptor?? [ 2250.119088][T22984] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2250.152355][T22984] usb 6-1: no configurations [ 2250.157162][T22984] usb 6-1: can't read configurations, error -22 [ 2250.164704][T22984] usb usb6-port1: unable to enumerate USB device [ 2250.229302][ T189] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2250.238616][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.246664][ T189] usb 7-1: Product: syz [ 2250.251815][ T189] usb 7-1: Manufacturer: syz [ 2250.256494][ T189] usb 7-1: SerialNumber: syz [ 2250.264079][ T189] usb 7-1: config 0 descriptor?? [ 2250.416064][ T5711] usb 2-1: string descriptor 0 read error: -71 [ 2250.435007][ T5711] usb 2-1: USB disconnect, device number 9 [ 2250.894459][T22578] usb 3-1: USB disconnect, device number 14 [ 2250.968836][T27696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6086'. [ 2251.701428][T27702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.716118][T27702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.850935][T22578] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2252.024250][T22578] usb 3-1: Using ep0 maxpacket: 32 [ 2252.030969][T22578] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 2252.039364][T22578] usb 3-1: config 0 has no interface number 0 [ 2252.048468][T22578] usb 3-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2252.098266][T22578] usb 3-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2252.111729][T22578] usb 3-1: config 0 interface 28 has no altsetting 0 [ 2252.118466][T22578] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2252.127920][T22578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.138952][T22578] usb 3-1: config 0 descriptor?? [ 2252.403661][T22578] usb 3-1: string descriptor 0 read error: -71 [ 2252.418937][T22578] usb 3-1: USB disconnect, device number 15 [ 2252.533310][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2252.626846][T22578] usb 7-1: USB disconnect, device number 114 [ 2252.791685][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2252.800516][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.810946][ T24] usb 2-1: config 0 has no interface number 0 [ 2252.817666][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2252.829419][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2252.839439][ T24] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2252.856935][ T24] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2252.869082][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.879731][ T24] usb 2-1: Product: syz [ 2253.007874][ T24] usb 2-1: Manufacturer: syz [ 2253.127630][ T24] usb 2-1: SerialNumber: syz [ 2253.330160][ T24] usb 2-1: config 0 descriptor?? [ 2255.122163][T18422] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2255.194501][T27725] lo speed is unknown, defaulting to 1000 [ 2255.306273][T18422] usb 7-1: Using ep0 maxpacket: 8 [ 2255.321767][T18422] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2255.347719][T18422] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2255.378853][T18422] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2255.415124][T18422] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2255.443656][T18422] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2255.477175][T18422] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2255.523815][T18422] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2255.532870][T18422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.768326][T18422] usb 7-1: GET_CAPABILITIES returned 0 [ 2255.787727][T18422] usbtmc 7-1:16.0: can't read capabilities [ 2255.826124][ T24] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 2255.989407][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2255.998517][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.007593][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.016645][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.025694][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.034744][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.043878][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.052907][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.062043][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.071080][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.113057][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.123307][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2256.132935][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.142051][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.151130][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.160215][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.169267][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.183295][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2256.192415][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2256.202511][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.209606][T22984] usb 7-1: USB disconnect, device number 115 [ 2256.210679][ T24] usb 6-1: Product: syz [ 2256.220716][ T24] usb 6-1: Manufacturer: syz [ 2256.226541][ T24] usb 6-1: SerialNumber: syz [ 2256.238738][ T24] usb 6-1: config 0 descriptor?? [ 2256.522337][T22984] usb 2-1: USB disconnect, device number 10 [ 2256.801177][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2257.068708][ T24] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2257.103708][ T24] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2257.659593][ T24] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2257.668705][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.676738][ T24] usb 3-1: Product: syz [ 2257.681401][ T24] usb 3-1: Manufacturer: syz [ 2257.686019][ T24] usb 3-1: SerialNumber: syz [ 2257.699772][ T24] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2257.712005][ T24] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2257.726320][ T24] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2257.954417][T27738] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 2259.903149][T18422] usb 3-1: USB disconnect, device number 16 [ 2259.980832][T18422] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2260.024135][T18422] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2260.025180][ T5711] usb 6-1: USB disconnect, device number 116 [ 2260.039818][T18422] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2260.186879][ T29] audit: type=1400 audit(1786220551.990:842): avc: denied { read } for pid=27777 comm="syz.5.6110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2260.248629][T20708] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2260.279768][ T29] audit: type=1400 audit(1786220552.082:843): avc: denied { name_connect } for pid=27777 comm="syz.5.6110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 2260.418946][T20708] usb 2-1: Using ep0 maxpacket: 32 [ 2260.447397][T18422] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2260.670187][T18422] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2260.752795][T18422] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2260.818015][T18422] usb 3-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2260.948881][T18422] usb 3-1: config 63 has no interface number 0 [ 2261.002691][T18422] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2261.151396][T18422] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2261.269511][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2261.277838][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2261.310107][T18422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.424002][T18422] usb 3-1: Product: syz [ 2261.483680][T20708] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2261.497624][T18422] usb 3-1: Manufacturer: syz [ 2261.499770][T20708] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2261.511509][T20708] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2261.521228][T20708] usb 2-1: Product: syz [ 2261.525517][T20708] usb 2-1: Manufacturer: syz [ 2261.530139][T20708] usb 2-1: SerialNumber: syz [ 2261.537087][T20708] usb 2-1: config 0 descriptor?? [ 2261.542848][T27772] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2261.544152][T18422] usb 3-1: SerialNumber: syz [ 2261.786310][T20708] usb 2-1: USB disconnect, device number 11 [ 2262.882325][T18422] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 2263.493579][T18422] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2263.508155][T18422] uvcvideo 3-1:63.66: No valid video chain found. [ 2263.522838][T18422] usb 3-1: USB disconnect, device number 17 [ 2264.218442][ T5596] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2264.394249][ T24] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 2264.517158][ T5596] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2264.575892][ T5596] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2264.590617][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2264.605832][ T24] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2264.615632][ T5596] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2264.626645][ T24] usb 7-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2264.640029][ T5596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.648423][ T24] usb 7-1: config 63 has no interface number 0 [ 2264.654858][ T5596] usb 6-1: Product: syz [ 2264.659068][ T24] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2264.666650][ T5596] usb 6-1: Manufacturer: syz [ 2264.672171][ T5596] usb 6-1: SerialNumber: syz [ 2264.679370][ T24] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2264.695818][ T5596] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 2264.705033][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.718753][ T24] usb 7-1: Product: syz [ 2264.724527][ T24] usb 7-1: Manufacturer: syz [ 2264.729668][ T24] usb 7-1: SerialNumber: syz [ 2265.233635][ T5596] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2265.576306][ T5596] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2265.712220][T27812] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 2265.834398][T27837] netlink: 'syz.2.6125': attribute type 1 has an invalid length. [ 2265.844184][T27837] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6125'. [ 2267.296292][ T29] audit: type=1400 audit(1786220558.554:844): avc: denied { read } for pid=5259 comm="dhcpcd" name="n49" dev="tmpfs" ino=23432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2267.324292][T22984] usb 6-1: USB disconnect, device number 117 [ 2267.331961][ T29] audit: type=1400 audit(1786220558.554:845): avc: denied { open } for pid=5259 comm="dhcpcd" path="/run/udev/data/n49" dev="tmpfs" ino=23432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2267.355922][ T29] audit: type=1400 audit(1786220558.554:846): avc: denied { getattr } for pid=5259 comm="dhcpcd" path="/run/udev/data/n49" dev="tmpfs" ino=23432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2267.388129][ T24] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2267.411733][ T24] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2267.440110][ T24] uvcvideo 7-1:63.66: No valid video chain found. [ 2267.597681][T22984] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2267.599374][ T24] usb 7-1: USB disconnect, device number 116 [ 2267.626529][T22984] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2267.745143][T22984] ti_usb_3410_5052 6-1:2.0: device disconnected [ 2268.652309][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2268.838550][T27875] syzkaller0: entered promiscuous mode [ 2268.844168][T27875] syzkaller0: entered allmulticast mode [ 2268.851709][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 2268.862406][ T24] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 2268.905384][ T24] usb 2-1: config 0 has no interface number 0 [ 2268.922344][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2268.961332][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2268.994023][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2269.041060][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.073801][ T24] usb 2-1: Product: syz [ 2269.075630][T27878] netlink: 'syz.2.6137': attribute type 1 has an invalid length. [ 2269.083587][ T24] usb 2-1: Manufacturer: syz [ 2269.091871][ T24] usb 2-1: SerialNumber: syz [ 2269.101523][ T24] usb 2-1: config 0 descriptor?? [ 2269.107160][T27878] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6137'. [ 2269.116681][T27864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2269.136488][T27864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2270.246191][T27890] : renamed from bond_slave_0 (while UP) [ 2270.260160][T27864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2270.303182][T27864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2271.556492][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2271.656076][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2271.685900][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 2271.710862][ T24] asix 2-1:0.34: probe with driver asix failed with error -71 [ 2271.744905][ T24] usb 2-1: USB disconnect, device number 12 [ 2274.393934][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2274.619580][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 2274.727476][ T24] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2274.819523][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2274.889812][ T24] usb 2-1: Product: syz [ 2274.942302][ T29] audit: type=1400 audit(1786220565.598:847): avc: denied { append } for pid=27957 comm="syz.2.6159" name="demux0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2274.976746][ T24] usb 2-1: Manufacturer: syz [ 2274.983720][ T24] usb 2-1: SerialNumber: syz [ 2274.995007][ T24] usb 2-1: config 0 descriptor?? [ 2275.518355][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2277.258986][T27979] syzkaller0: entered promiscuous mode [ 2277.264727][T27979] syzkaller0: entered allmulticast mode [ 2277.433287][T27983] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6165'. [ 2277.520622][ T24] gspca_ov534_9: reg_r err -32 [ 2277.570526][T27989] fuse: Unknown parameter 'user_i00000000000000000000' [ 2277.814971][T22984] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2277.826517][ T24] gspca_ov534_9: Unknown sensor 0000 [ 2277.826607][ T24] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 2277.980548][T22984] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2277.989899][T22984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.998209][T22984] usb 7-1: Product: syz [ 2278.003078][T22984] usb 7-1: Manufacturer: syz [ 2278.007744][T22984] usb 7-1: SerialNumber: syz [ 2278.139907][T27232] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2278.304748][T27232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2278.313946][T27232] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 2278.322205][T27232] usb 6-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2278.332921][T27232] usb 6-1: config 63 has no interface number 0 [ 2278.339628][T27232] usb 6-1: config 63 interface 66 has no altsetting 0 [ 2278.349706][T27232] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2278.361671][T27232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.370212][T27232] usb 6-1: Product: syz [ 2278.374557][T27232] usb 6-1: Manufacturer: syz [ 2278.379241][T27232] usb 6-1: SerialNumber: syz [ 2278.646341][T20708] usb 2-1: USB disconnect, device number 13 [ 2278.678394][T22984] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2278.716026][T22984] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2278.740955][T22984] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2278.750108][T28013] syzkaller0: entered promiscuous mode [ 2278.767166][T28013] syzkaller0: entered allmulticast mode [ 2278.769260][T22984] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 2278.805786][T22984] usb 7-1: USB disconnect, device number 117 [ 2279.147491][T28023] bond1: entered promiscuous mode [ 2279.173393][T28023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6179'. [ 2279.197702][T28023] syz.0.6179 (28023): attempted to duplicate a private mapping with mremap. This is not supported. [ 2280.224432][T28031] fuse: Unknown parameter 'user_i00000000000000000000' [ 2281.187981][ T29] audit: type=1400 audit(1786220571.294:848): avc: denied { write } for pid=28036 comm="syz.1.6183" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2283.112164][ T5596] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 2283.406203][ T5596] usb 7-1: Using ep0 maxpacket: 32 [ 2283.555744][T27232] uvcvideo 6-1:63.66: Found Unit with invalid ID 0 [ 2283.562375][T27232] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2283.572158][T27232] uvcvideo 6-1:63.66: No valid video chain found. [ 2283.601436][ T5596] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2283.621832][T27232] usb 6-1: USB disconnect, device number 118 [ 2283.748614][ T5596] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.793500][ T5596] usb 7-1: Product: syz [ 2283.823356][ T5596] usb 7-1: Manufacturer: syz [ 2283.844912][ T5596] usb 7-1: SerialNumber: syz [ 2283.866748][ T5596] usb 7-1: config 0 descriptor?? [ 2283.891090][ T5596] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2285.938425][ T5596] gspca_ov534_9: reg_w failed -110 [ 2286.042552][T28072] fuse: Unknown parameter 'user_i00000000000000000000' [ 2286.252977][ T5596] gspca_ov534_9: Unknown sensor 0000 [ 2286.253057][ T5596] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 2286.382995][ T5596] usb 7-1: USB disconnect, device number 118 [ 2286.499101][T28082] bond1: entered promiscuous mode [ 2287.002088][T28082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6199'. [ 2287.031716][T28089] netlink: 'syz.0.6200': attribute type 1 has an invalid length. [ 2287.048168][T28089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6200'. [ 2287.351448][T28084] overlay: Unknown parameter '/' [ 2287.739390][T28099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6202'. [ 2290.378115][T28107] fuse: Unknown parameter 'user_id00000000000000000000' [ 2291.383803][T28121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6208'. [ 2291.454381][T28114] bond2: entered promiscuous mode [ 2293.714283][T28148] fuse: Unknown parameter 'user_id00000000000000000000' [ 2293.831247][T28154] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6220'. [ 2294.008777][ T5596] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2294.160619][ T5596] usb 7-1: device descriptor read/64, error -71 [ 2294.431062][ T5596] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2294.627621][ T5596] usb 7-1: device descriptor read/64, error -71 [ 2294.790148][ T5596] usb usb7-port1: attempt power cycle [ 2295.279156][ T5596] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2296.165321][ T5596] usb 7-1: device descriptor read/8, error -71 [ 2296.762391][ T5596] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2297.121683][T28181] netlink: 'syz.0.6231': attribute type 1 has an invalid length. [ 2297.242548][T28181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6231'. [ 2298.302944][ T5596] usb 7-1: device not accepting address 122, error -71 [ 2298.323984][ T5596] usb usb7-port1: unable to enumerate USB device [ 2298.636295][T28203] netlink: 'syz.6.6237': attribute type 1 has an invalid length. [ 2298.644119][T28203] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6237'. [ 2298.715073][T28209] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6235'. [ 2298.724232][T28209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6235'. [ 2298.733394][T28209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6235'. [ 2299.014980][T27232] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2299.173111][T28221] : renamed from bond_slave_0 (while UP) [ 2299.679519][T27232] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 2299.693897][T27232] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2299.703943][T27232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.715276][T27232] usb 3-1: Product: syz [ 2299.719534][T27232] usb 3-1: Manufacturer: syz [ 2299.724218][T27232] usb 3-1: SerialNumber: syz [ 2299.747897][T20708] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2299.975877][T22578] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2299.989044][T28210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2300.011825][T28210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2300.117139][T28210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2300.237862][T22578] usb 6-1: device descriptor read/64, error -71 [ 2300.266993][T28210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2300.405162][T28210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2300.418702][T28210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2300.429809][ T5596] usb 3-1: USB disconnect, device number 18 [ 2300.468894][T28232] fuse: Bad value for 'fd' [ 2300.530885][T22578] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2300.608789][T28236] evm: overlay not supported [ 2300.692243][T22578] usb 6-1: device descriptor read/64, error -71 [ 2300.865346][T20708] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2300.865871][T22578] usb usb6-port1: attempt power cycle [ 2301.000641][T20708] ath9k_htc: Failed to initialize the device [ 2301.021916][ T5596] usb 3-1: ath9k_htc: USB layer deinitialized [ 2301.330935][T22578] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2301.948381][ T5596] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2302.187080][T22578] usb 6-1: device descriptor read/8, error -71 [ 2302.399308][T28256] fuse: Bad value for 'fd' [ 2302.458506][T22578] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2302.491993][T22578] usb 6-1: device descriptor read/8, error -71 [ 2302.510769][T28260] bond1: entered promiscuous mode [ 2302.510818][T28265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6257'. [ 2302.660861][T22578] usb usb6-port1: unable to enumerate USB device [ 2302.936452][T28265] netlink: zone id is out of range [ 2305.012210][T28295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6267'. [ 2305.053625][T28296] fuse: Bad value for 'fd' [ 2305.257849][T28290] bond2: entered promiscuous mode [ 2306.584426][T20708] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2306.773506][T20708] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2306.824537][T20708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.869280][T20708] usb 3-1: Product: syz [ 2306.892600][T20708] usb 3-1: Manufacturer: syz [ 2306.907125][T28315] bond3: entered promiscuous mode [ 2306.916996][T20708] usb 3-1: SerialNumber: syz [ 2306.935046][T28318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6274'. [ 2306.955104][T28317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 2307.013827][T28319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 2307.087181][T28319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 2307.143327][T28319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 2307.157740][T28319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6273'. [ 2309.103955][T20708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2309.149022][T20708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2309.189320][T20708] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2309.241981][T20708] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2309.279293][T20708] usb 3-1: USB disconnect, device number 20 [ 2309.765942][T28336] lo speed is unknown, defaulting to 1000 [ 2312.096471][ T29] audit: type=1400 audit(1786220599.913:849): avc: denied { remount } for pid=28357 comm="syz.1.6285" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2312.166424][T28359] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 2312.466210][T20708] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 2312.477328][T14126] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2312.653056][T20708] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2312.661335][T14126] usb 6-1: Using ep0 maxpacket: 16 [ 2312.683436][T14126] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 2312.683455][T20708] usb 7-1: config 0 has no interface number 0 [ 2312.699569][T14126] usb 6-1: config 0 has no interface number 0 [ 2312.706100][T14126] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2312.713849][T20708] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2312.716593][T14126] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2312.748759][T14126] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2312.764815][T20708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.767118][T14126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.789784][T14126] usb 6-1: Product: syz [ 2312.814365][T20708] usb 7-1: Product: syz [ 2312.817123][T14126] usb 6-1: Manufacturer: syz [ 2312.828374][T14126] usb 6-1: SerialNumber: syz [ 2312.839582][T20708] usb 7-1: Manufacturer: syz [ 2312.856934][T20708] usb 7-1: SerialNumber: syz [ 2312.869817][T14126] usb 6-1: config 0 descriptor?? [ 2312.873742][T20708] usb 7-1: config 0 descriptor?? [ 2312.909244][T28361] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2312.922296][T20708] usb 7-1: selecting invalid altsetting 1 [ 2312.942060][T28361] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2312.944353][T20708] dvb_ttusb_budget: ttusb_init_controller: error [ 2313.313329][T20708] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2313.329219][T28361] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2313.338974][T28361] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2313.460497][T20708] DVB: Unable to find symbol stv0299_attach() [ 2313.565810][T14126] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2313.605915][T20708] DVB: Unable to find symbol tda8083_attach() [ 2313.628449][T20708] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2313.785477][T14126] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2313.796683][T14126] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 2313.812202][T14126] asix 6-1:0.34: probe with driver asix failed with error -61 [ 2313.914708][ T29] audit: type=1400 audit(1786220601.594:850): avc: denied { ioctl } for pid=28393 comm="syz.2.6298" path="socket:[162621]" dev="sockfs" ino=162621 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2314.204891][T28399] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2314.754563][T14126] usb 7-1: USB disconnect, device number 123 [ 2316.822746][ T5711] usb 6-1: USB disconnect, device number 123 [ 2316.892813][T28421] fuse: Unknown parameter '0x0000000000000004' [ 2319.541192][T20708] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2319.647600][ T5596] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2319.703009][T28455] fuse: Unknown parameter '0x0000000000000004' [ 2319.749800][T20708] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2319.772339][T20708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.803252][T20708] usb 7-1: Product: syz [ 2319.810527][ T5596] usb 3-1: Using ep0 maxpacket: 16 [ 2319.812006][T20708] usb 7-1: Manufacturer: syz [ 2319.830485][T20708] usb 7-1: SerialNumber: syz [ 2319.840358][ T5596] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 2320.224015][ T29] audit: type=1400 audit(1786220607.280:851): avc: denied { override_creds } for pid=28458 comm="syz.5.6322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2320.592093][T20708] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2320.842272][ T5596] usb 3-1: config 0 has no interface number 0 [ 2320.848696][ T5596] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2320.858925][ T5596] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2320.903316][ T5596] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2320.966752][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.040934][ T5596] usb 3-1: Product: syz [ 2321.079537][ T5596] usb 3-1: Manufacturer: syz [ 2321.104773][ T5596] usb 3-1: SerialNumber: syz [ 2321.162234][ T5596] usb 3-1: config 0 descriptor?? [ 2321.209783][T28448] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2321.268542][T28448] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2321.343005][T20708] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2321.352865][T20708] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2321.366649][T20708] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 2321.380550][T20708] usb 7-1: USB disconnect, device number 124 [ 2321.592166][T28448] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2321.599601][T28448] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2324.499147][ T5596] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2324.543191][ T5596] asix 3-1:0.34: probe with driver asix failed with error -71 [ 2324.565897][T28496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6331'. [ 2324.627937][T28499] fuse: Unknown parameter '0x0000000000000004' [ 2324.635331][ T5596] usb 3-1: USB disconnect, device number 21 [ 2325.003401][T28510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6334'. [ 2325.119016][T28510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6334'. [ 2325.173285][T28510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6334'. [ 2325.197357][T28510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6334'. [ 2325.239242][T28510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6334'. [ 2325.821231][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6338'. [ 2325.892596][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6338'. [ 2325.923526][T28523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6339'. [ 2325.930555][T28521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6338'. [ 2327.151646][T28533] Bluetooth: MGMT ver 1.23 [ 2327.183157][T28533] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 2327.855831][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2327.865306][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2328.343591][T28545] fuse: Unknown parameter 'fd0x0000000000000004' [ 2328.622064][T27232] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2328.833090][T27232] usb 3-1: Using ep0 maxpacket: 16 [ 2328.919945][T27232] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 2328.950522][T27232] usb 3-1: config 0 has no interface number 0 [ 2328.967859][T27232] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2329.007795][T27232] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2329.063931][T27232] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2329.086121][T27232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.148802][T27232] usb 3-1: Product: syz [ 2329.154778][T27232] usb 3-1: Manufacturer: syz [ 2329.159473][T27232] usb 3-1: SerialNumber: syz [ 2329.207502][T27232] usb 3-1: config 0 descriptor?? [ 2329.227020][T28540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2329.490150][T28540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2329.738743][T28540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2329.770295][T28540] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2330.036810][T27232] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2330.254564][T27232] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2330.352484][T27232] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 2330.430978][T27232] asix 3-1:0.34: probe with driver asix failed with error -61 [ 2330.431061][T28568] __nla_validate_parse: 6 callbacks suppressed [ 2330.431074][T28568] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6353'. [ 2330.750306][ T24] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 2330.924971][ T24] usb 7-1: config 0 has no interfaces? [ 2330.941922][ T24] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2330.970472][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.001032][ T24] usb 7-1: config 0 descriptor?? [ 2331.248867][ T5711] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2331.256741][ T24] usb 7-1: USB disconnect, device number 125 [ 2331.467157][ T5711] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2331.479182][ T5711] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 2331.496189][ T5711] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2331.506850][ T5711] usb 6-1: config 63 has no interface number 0 [ 2331.515442][ T5711] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2331.524923][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2332.208504][T28594] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2332.332997][ T5711] usb 6-1: Product: syz [ 2332.341732][ T5711] usb 6-1: Manufacturer: syz [ 2332.352099][ T5711] usb 6-1: SerialNumber: syz [ 2332.377746][T20708] usb 3-1: USB disconnect, device number 22 [ 2332.654987][ T5711] usb 6-1: USB disconnect, device number 124 [ 2333.272874][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 2333.308899][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 2333.340265][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 2333.436362][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6362'. [ 2334.043586][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2334.073694][T28615] Bluetooth: hci0: unsupported parameter 255 [ 2334.107098][T28615] Bluetooth: hci0: unsupported parameter 255 [ 2334.297908][ T24] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2334.363143][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2334.428658][ T24] usb 2-1: config 0 has no interface number 0 [ 2334.465790][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2334.531122][ T24] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2334.603367][ T24] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2334.683790][ T24] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2334.715957][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.742287][ T24] usb 2-1: Product: syz [ 2334.755790][T28619] overlayfs: failed to verify origin (228/file1, ino=1282, err=-116) [ 2334.782475][T28619] overlayfs: failed to verify origin (228/file1, ino=1282, err=-116) [ 2334.795061][ T24] usb 2-1: Manufacturer: syz [ 2334.830041][ T24] usb 2-1: SerialNumber: syz [ 2335.015731][ T24] usb 2-1: config 0 descriptor?? [ 2335.725798][ T24] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2336.381476][ T5596] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2336.437324][T20708] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 2337.260785][ T5596] usb 6-1: Using ep0 maxpacket: 16 [ 2337.382948][ T5596] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 2337.408129][ T5596] usb 6-1: config 0 has no interface number 0 [ 2337.431057][ T5596] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2337.469284][ T5596] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2337.497613][ T5596] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2337.508913][T20708] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2337.524302][ T5596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.546970][ T5596] usb 6-1: Product: syz [ 2337.603946][ T5596] usb 6-1: Manufacturer: syz [ 2337.633079][ T5596] usb 6-1: SerialNumber: syz [ 2337.717185][T20708] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.718541][ T5596] usb 6-1: config 0 descriptor?? [ 2337.741570][T14126] usb 2-1: USB disconnect, device number 14 [ 2337.759670][T20708] usb 7-1: config 0 has no interface number 0 [ 2337.766311][T20708] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2337.781415][T20708] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2337.792284][T20708] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2337.809565][T20708] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2337.818827][T20708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.826890][T20708] usb 7-1: Product: syz [ 2337.831072][T20708] usb 7-1: Manufacturer: syz [ 2337.835776][T20708] usb 7-1: SerialNumber: syz [ 2337.840238][T28630] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2337.848792][T20708] usb 7-1: config 0 descriptor?? [ 2338.133863][T28630] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2339.910729][ T5596] asix 6-1:0.34: probe with driver asix failed with error -71 [ 2340.106956][ T5596] usb 6-1: USB disconnect, device number 125 [ 2340.172896][T18422] usb 7-1: USB disconnect, device number 126 [ 2340.517342][T28671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6384'. [ 2340.562234][T28673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6383'. [ 2340.571333][T28673] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6383'. [ 2340.582412][T28673] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6383'. [ 2340.812878][T28679] overlayfs: failed to resolve './bus': -2 [ 2340.918085][T22578] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2341.153340][T22578] usb 6-1: config 0 has no interfaces? [ 2341.185471][T22578] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2341.255820][T22578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2341.428469][T22578] usb 6-1: config 0 descriptor?? [ 2341.791046][ T5596] usb 6-1: USB disconnect, device number 126 [ 2342.882083][T14334] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2343.061133][T14334] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2343.078458][T14334] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2343.097976][T14334] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2343.119514][T14334] usb 2-1: config 63 has no interface number 0 [ 2343.137200][T14334] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2343.184556][T14334] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2343.204860][T14334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.223951][T14334] usb 2-1: Product: syz [ 2343.233467][T14334] usb 2-1: Manufacturer: syz [ 2343.247330][T14334] usb 2-1: SerialNumber: syz [ 2343.501606][T14334] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 2343.591896][T14334] usb 2-1: USB disconnect, device number 15 [ 2343.824177][T28718] jffs2: notice: (28718) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 2343.931996][ T29] audit: type=1400 audit(1786220629.253:852): avc: denied { write } for pid=28717 comm="syz.6.6398" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2343.977980][ T29] audit: type=1400 audit(1786220629.327:853): avc: denied { create } for pid=28717 comm="syz.6.6398" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 2343.979127][T28718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6398'. [ 2344.106969][T28718] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6398'. [ 2344.407262][T28725] bond4: entered promiscuous mode [ 2344.449445][T28728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6400'. [ 2344.482702][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6399'. [ 2344.685863][T28728] overlay: Unknown parameter '/' [ 2344.758534][T28730] netlink: zone id is out of range [ 2346.564868][T18422] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2346.705716][T24705] Bluetooth: hci4: command 0x0406 tx timeout [ 2346.772974][T18422] usb 6-1: config 0 has no interfaces? [ 2346.778566][T18422] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2346.791185][T18422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2346.801848][T18422] usb 6-1: config 0 descriptor?? [ 2347.344871][T14334] usb 6-1: USB disconnect, device number 127 [ 2347.713076][ T5711] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2347.890857][ T5711] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2347.921279][ T5711] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2347.944985][ T5711] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2347.984093][ T5711] usb 3-1: config 63 has no interface number 0 [ 2348.001283][ T5711] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2348.031159][ T5711] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2348.059533][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.091124][ T5711] usb 3-1: Product: syz [ 2348.100272][ T5711] usb 3-1: Manufacturer: syz [ 2348.118141][ T5711] usb 3-1: SerialNumber: syz [ 2348.378056][ T5711] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22 [ 2348.415497][ T5711] usb 3-1: USB disconnect, device number 23 [ 2348.978034][ T29] audit: type=1400 audit(1786220633.961:854): avc: denied { write } for pid=28777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2349.117049][ T29] audit: type=1400 audit(1786220633.961:855): avc: denied { create } for pid=28777 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.dhcp" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2349.293551][ T29] audit: type=1400 audit(1786220633.961:856): avc: denied { write } for pid=28777 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller0.dhcp" dev="tmpfs" ino=24130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2349.435513][ T29] audit: type=1400 audit(1786220633.961:857): avc: denied { append } for pid=28777 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.dhcp" dev="tmpfs" ino=24130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2349.563996][ T29] audit: type=1400 audit(1786220634.358:858): avc: denied { write } for pid=28797 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2349.653609][ T29] audit: type=1400 audit(1786220634.358:859): avc: denied { unlink } for pid=28797 comm="rm" name="resolv.conf.syzkaller0.dhcp" dev="tmpfs" ino=24130 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2349.828406][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6419'. [ 2349.897586][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6419'. [ 2349.942573][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6419'. [ 2349.985203][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6419'. [ 2350.024668][T28805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6419'. [ 2350.406685][T28819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6421'. [ 2350.524466][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6421'. [ 2350.555209][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6421'. [ 2350.584650][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6421'. [ 2350.619459][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6421'. [ 2350.785293][ T29] audit: type=1400 audit(1786220635.623:860): avc: denied { write } for pid=28800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2351.242275][ T29] audit: type=1400 audit(1786220636.029:861): avc: denied { write } for pid=28832 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2352.804968][ T29] audit: type=1400 audit(1786220637.488:862): avc: denied { write } for pid=28840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2353.136252][ T29] audit: type=1400 audit(1786220637.801:863): avc: denied { write } for pid=28870 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2356.265795][T28897] __nla_validate_parse: 5 callbacks suppressed [ 2356.265810][T28897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6438'. [ 2359.257961][T28937] program syz.1.6447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2359.269186][T28937] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2360.387541][ T29] audit: type=1400 audit(1786220643.451:864): avc: denied { ioctl } for pid=28930 comm="syz.1.6447" path="/dev/sg0" dev="devtmpfs" ino=730 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2361.885717][T28958] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 2362.401748][ T5596] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2362.581650][ T5596] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 2362.600066][ T5596] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2362.610665][ T5596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2362.618827][ T5596] usb 6-1: Product: syz [ 2362.625371][ T5596] usb 6-1: Manufacturer: syz [ 2362.633252][ T5596] usb 6-1: SerialNumber: syz [ 2362.776037][T22578] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2363.271648][T28961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2363.325925][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6455'. [ 2363.330104][T28961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2363.336980][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6455'. [ 2363.354942][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6455'. [ 2363.371145][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6455'. [ 2363.419493][T28961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2363.448884][T28961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2363.572673][T28961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2363.667723][T28961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2364.181004][T14126] usb 6-1: USB disconnect, device number 2 [ 2364.208594][T22578] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2364.341611][T22578] ath9k_htc: Failed to initialize the device [ 2364.392392][T14126] usb 6-1: ath9k_htc: USB layer deinitialized [ 2364.698109][ T5596] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2364.773280][T14126] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2364.885971][ T5596] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2364.918339][ T5596] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2364.946761][T14126] usb 6-1: Using ep0 maxpacket: 32 [ 2364.954424][ T5596] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2364.981848][T14126] usb 6-1: config index 0 descriptor too short (expected 241, got 72) [ 2364.996893][ T5596] usb 2-1: config 63 has no interface number 0 [ 2365.010978][T14126] usb 6-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2365.027565][ T5596] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2365.064400][T14126] usb 6-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2365.075847][ T5596] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2365.127774][ T5596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.138897][T14126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2365.160951][ T5596] usb 2-1: Product: syz [ 2365.168611][T14126] usb 6-1: config 0 descriptor?? [ 2365.189233][ T5596] usb 2-1: Manufacturer: syz [ 2365.213666][T14126] mos7840 6-1:0.0: missing endpoints [ 2365.219258][ T5596] usb 2-1: SerialNumber: syz [ 2365.430486][T22578] usb 6-1: USB disconnect, device number 3 [ 2367.486363][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6467'. [ 2367.510543][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6467'. [ 2367.536252][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6467'. [ 2367.586946][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6467'. [ 2367.597166][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6467'. [ 2368.519853][ T5596] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2368.571873][ T5596] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2368.643313][ T5596] uvcvideo 2-1:63.66: No valid video chain found. [ 2368.765708][ T5596] usb 2-1: USB disconnect, device number 16 [ 2369.604035][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6469'. [ 2369.627088][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6469'. [ 2369.877356][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6469'. [ 2369.888523][T29014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6469'. [ 2374.034691][ T29] audit: type=1400 audit(1786220657.087:865): avc: denied { write } for pid=29043 comm="syz.2.6477" name="instances" dev="tracefs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2374.110161][ T29] audit: type=1400 audit(1786220657.087:866): avc: denied { add_name } for pid=29043 comm="syz.2.6477" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2374.131023][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6478'. [ 2374.173859][T29050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6478'. [ 2374.197736][ T29] audit: type=1400 audit(1786220657.087:867): avc: denied { create } for pid=29043 comm="syz.2.6477" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 2374.224149][T29050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6478'. [ 2374.280294][T29050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6478'. [ 2374.344772][T29050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6478'. [ 2375.372983][ T29] audit: type=1400 audit(1786220657.281:868): avc: denied { bind } for pid=29043 comm="syz.2.6477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2375.973706][T20708] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2376.167186][T20708] usb 6-1: config 0 has no interfaces? [ 2376.410838][T20708] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2376.460107][T20708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.573481][T20708] usb 6-1: config 0 descriptor?? [ 2376.911413][ T5596] usb 6-1: USB disconnect, device number 4 [ 2377.759334][ T29] audit: type=1400 audit(1786220660.531:869): avc: denied { create } for pid=29075 comm="syz.6.6485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2379.658475][T29094] pim6reg: entered allmulticast mode [ 2379.938806][T29094] pim6reg: left allmulticast mode [ 2382.864243][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 2382.929319][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 2382.959128][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 2382.982589][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 2383.037063][T29130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 2383.621521][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6500'. [ 2383.781235][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6500'. [ 2383.813589][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6500'. [ 2384.269213][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6500'. [ 2384.281927][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6500'. [ 2384.324919][T18422] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2384.535649][T18422] usb 3-1: config 0 has no interfaces? [ 2384.562673][T18422] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2384.606753][T18422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2384.663513][T18422] usb 3-1: config 0 descriptor?? [ 2384.956358][ T5711] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2385.236339][T18422] usb 3-1: USB disconnect, device number 24 [ 2386.180407][ T5711] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 2386.202154][T29157] pim6reg: entered allmulticast mode [ 2386.378265][T29155] pim6reg: left allmulticast mode [ 2386.546822][T29159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2386.906421][ T5711] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2386.916710][ T5711] usb 6-1: config 0 has no interface number 0 [ 2386.924024][ T5711] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2386.935375][ T5711] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2386.947288][ T5711] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2387.035084][ T5711] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2387.054468][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.089743][ T5711] usb 6-1: Product: syz [ 2387.122559][ T5711] usb 6-1: Manufacturer: syz [ 2387.172035][ T5711] usb 6-1: SerialNumber: syz [ 2387.222678][ T5711] usb 6-1: config 0 descriptor?? [ 2387.471787][ T5711] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2387.878428][ T29] audit: type=1400 audit(1786220669.883:870): avc: denied { write } for pid=29165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2389.169683][T27232] usb 6-1: USB disconnect, device number 5 [ 2389.184741][ T29] audit: type=1400 audit(1786220671.074:871): avc: denied { write } for pid=29197 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2389.309966][T29203] __nla_validate_parse: 9 callbacks suppressed [ 2389.309980][T29203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6515'. [ 2389.410908][T29203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6515'. [ 2390.123718][ T29] audit: type=1400 audit(1786220671.951:872): avc: denied { read } for pid=29216 comm="syz.1.6517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2390.419579][ T29] audit: type=1400 audit(1786220672.218:873): avc: denied { write } for pid=29204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2391.091869][T29232] pim6reg: entered allmulticast mode [ 2391.124511][T29232] pim6reg: left allmulticast mode [ 2391.410935][T29229] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2392.882200][T29236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6521'. [ 2392.922137][ T29] audit: type=1400 audit(1786220674.517:874): avc: denied { write } for pid=29235 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2393.406416][T29247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6524'. [ 2394.389144][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2394.418278][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2394.805466][T29259] bond1: entered promiscuous mode [ 2394.940603][T29264] overlay: Unknown parameter '/' [ 2395.010293][T29266] netlink: zone id is out of range [ 2395.081052][ T5596] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2395.461068][ T5596] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2395.531789][ T5596] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2395.608292][ T5596] usb 2-1: can't read configurations, error -71 [ 2397.076552][T29288] pim6reg: entered allmulticast mode [ 2397.104921][T29288] pim6reg: left allmulticast mode [ 2397.223410][T29291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 2397.299236][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 2397.336820][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 2397.391193][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 2397.424309][T29293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6536'. [ 2397.448277][T29285] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2399.318059][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6538'. [ 2399.678650][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6538'. [ 2399.711249][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6538'. [ 2399.765893][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6538'. [ 2399.800599][T29300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6538'. [ 2400.389106][T29315] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 2400.811029][ T5711] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 2400.978826][ T5711] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 2402.135142][ T5711] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2402.147065][ T5711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.160400][ T5711] usb 7-1: Product: syz [ 2402.166852][ T5711] usb 7-1: Manufacturer: syz [ 2402.171595][ T5711] usb 7-1: SerialNumber: syz [ 2402.197164][T14334] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2402.689051][T29320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2402.728536][T29320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2402.829563][T29333] overlay: Unknown parameter '/' [ 2402.863618][T29333] netlink: zone id is out of range [ 2402.927767][T29320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2403.146783][T29320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2403.458223][T27232] usb 7-1: USB disconnect, device number 127 [ 2403.504256][T14334] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2403.562612][T14334] ath9k_htc: Failed to initialize the device [ 2403.590628][T27232] usb 7-1: ath9k_htc: USB layer deinitialized [ 2403.942357][T27232] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2404.114756][T27232] usb 7-1: Using ep0 maxpacket: 8 [ 2404.158374][T27232] usb 7-1: config index 0 descriptor too short (expected 241, got 72) [ 2404.186900][T27232] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2404.238618][T27232] usb 7-1: New USB device found, idVendor=235a, idProduct=0109, bcdDevice=bd.da [ 2404.273665][T27232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.322754][T27232] usb 7-1: config 0 descriptor?? [ 2404.407280][T22984] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2404.598645][T22984] usb 2-1: config 0 has no interfaces? [ 2404.650515][T22984] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2404.716265][T22984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.897606][T22984] usb 2-1: config 0 descriptor?? [ 2405.140961][T22984] usb 2-1: USB disconnect, device number 19 [ 2405.906108][T14126] usb 7-1: USB disconnect, device number 2 [ 2406.735022][T29379] netlink: 'syz.6.6563': attribute type 10 has an invalid length. [ 2407.308302][T29379] team0: Port device dummy0 added [ 2407.951030][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6567'. [ 2408.042960][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6567'. [ 2408.075396][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6567'. [ 2408.094881][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6567'. [ 2408.539454][T29401] pim6reg: entered allmulticast mode [ 2408.550321][T29401] pim6reg: left allmulticast mode [ 2408.893204][T29400] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2409.147060][ T5596] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2409.250642][T22984] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2409.435114][ T5596] usb 7-1: config 0 has no interfaces? [ 2409.435873][T22984] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2409.466081][ T5596] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2409.471871][T22984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.476844][ T5596] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.566049][T22984] usb 6-1: Product: syz [ 2409.572470][ T5596] usb 7-1: config 0 descriptor?? [ 2409.612515][T22984] usb 6-1: Manufacturer: syz [ 2409.648793][T22984] usb 6-1: SerialNumber: syz [ 2409.936187][T27232] usb 7-1: USB disconnect, device number 3 [ 2410.051267][T14334] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2410.082875][ T29] audit: type=1400 audit(1786220690.368:875): avc: denied { write } for pid=29414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2410.226070][T14334] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2410.248662][T14334] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2410.263899][ T29] audit: type=1400 audit(1786220690.516:876): avc: denied { write } for pid=29433 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2410.269299][T14334] usb 2-1: config 0 has no interface number 0 [ 2410.338228][T14334] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2410.352206][T22984] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2410.382531][T14334] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2410.396635][T22984] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2410.420065][T22984] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2410.428935][T14334] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2410.460408][T22984] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2410.474672][T14334] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2410.500598][T14334] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.510135][T22984] usb 6-1: USB disconnect, device number 6 [ 2410.536364][T14334] usb 2-1: Product: syz [ 2410.552328][T14334] usb 2-1: Manufacturer: syz [ 2410.594127][T14334] usb 2-1: SerialNumber: syz [ 2410.636611][T14334] usb 2-1: config 0 descriptor?? [ 2410.873920][T14334] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2411.100453][ T29] audit: type=1400 audit(1786220691.310:877): avc: denied { write } for pid=29438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2411.353004][ T29] audit: type=1400 audit(1786220691.550:878): avc: denied { write } for pid=29459 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2412.311775][ T29] audit: type=1400 audit(1786220692.427:879): avc: denied { write } for pid=29465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2412.419137][ T29] audit: type=1400 audit(1786220692.529:880): avc: denied { write } for pid=29481 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2412.469448][T29480] lo speed is unknown, defaulting to 1000 [ 2413.122133][T18422] usb 2-1: USB disconnect, device number 20 [ 2413.468691][T29499] pim6reg: entered allmulticast mode [ 2413.506099][T29495] pim6reg: left allmulticast mode [ 2413.615246][T29499] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2414.240044][T29501] overlay: Unknown parameter '/' [ 2414.332694][T29502] netlink: zone id is out of range [ 2414.349987][T29509] netlink: 'syz.0.6588': attribute type 10 has an invalid length. [ 2414.578212][T29513] program syz.5.6589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2414.587922][T29513] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2415.505658][T14334] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 2415.962968][T29509] team0: Port device dummy0 added [ 2417.424200][ T29] audit: type=1400 audit(1786220697.154:881): avc: denied { write } for pid=29486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2417.537163][T29520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6591'. [ 2418.582090][ T29] audit: type=1804 audit(1786220698.216:882): pid=29540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6595" name="/newroot/137/file0" dev="fuse" ino=1 res=1 errno=0 [ 2418.693518][ T29] audit: type=1804 audit(1786220698.308:883): pid=29537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.6595" name="/newroot/137/file0" dev="fuse" ino=1 res=1 errno=0 [ 2418.948648][ T29] audit: type=1400 audit(1786220698.557:884): avc: denied { write } for pid=29536 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2419.311805][T14334] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2419.684642][T22578] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2419.794058][T29562] pim6reg: entered allmulticast mode [ 2419.920057][T22578] usb 2-1: config 0 has no interfaces? [ 2419.926624][T22578] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2419.938216][T22578] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2419.997953][T29560] pim6reg: left allmulticast mode [ 2420.035258][T22578] usb 2-1: config 0 descriptor?? [ 2420.174378][T29563] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2420.409205][T21978] usb 2-1: USB disconnect, device number 21 [ 2420.546688][T14334] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 2421.582992][T14334] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2421.592343][T14334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2421.601298][T14334] usb 3-1: Product: syz [ 2421.605572][T14334] usb 3-1: Manufacturer: syz [ 2421.610323][T14334] usb 3-1: SerialNumber: syz [ 2421.639830][T22984] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2421.984565][T29548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2422.108386][T29548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2422.140207][T29548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2422.222631][T29548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2422.250223][T29571] lo speed is unknown, defaulting to 1000 [ 2422.288230][T29548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2422.351907][T29548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2422.780671][ T189] usb 3-1: USB disconnect, device number 26 [ 2423.078519][T22984] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2423.202686][T22984] ath9k_htc: Failed to initialize the device [ 2423.210156][ T189] usb 3-1: ath9k_htc: USB layer deinitialized [ 2423.450998][T29594] netlink: 'syz.5.6610': attribute type 10 has an invalid length. [ 2423.493557][T29594] team0: Port device dummy0 added [ 2427.050951][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6617'. [ 2427.080972][T29616] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6616'. [ 2427.117040][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6617'. [ 2427.154244][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6617'. [ 2427.187284][T29613] lo speed is unknown, defaulting to 1000 [ 2427.189767][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6617'. [ 2427.227509][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6617'. [ 2427.640470][T29628] netlink: 'syz.0.6619': attribute type 10 has an invalid length. [ 2428.220111][T29623] lo speed is unknown, defaulting to 1000 [ 2429.234689][T29634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6620'. [ 2429.363875][T29639] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6622'. [ 2430.331848][ T29] audit: type=1400 audit(1786220709.073:885): avc: denied { ioctl } for pid=29659 comm="syz.1.6629" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2430.367717][T29660] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6629'. [ 2431.540616][T29692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6628'. [ 2432.665649][T29728] __nla_validate_parse: 2 callbacks suppressed [ 2432.665671][T29728] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6641'. [ 2432.738138][ T29] audit: type=1400 audit(1786220711.288:886): avc: denied { ioctl } for pid=29729 comm="syz.6.6642" path="/285/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 2432.953584][T29737] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6644'. [ 2432.969193][T29732] lo speed is unknown, defaulting to 1000 [ 2433.560699][T29749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'. [ 2433.651976][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'. [ 2433.721747][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'. [ 2433.733511][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'. [ 2434.662935][T29751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'. [ 2434.722676][T29780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6649'. [ 2435.098585][T29790] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6652'. [ 2435.281960][ T29] audit: type=1400 audit(1786220713.633:887): avc: denied { view } for pid=29791 comm="syz.2.6653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2436.313159][T29809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6659'. [ 2436.478389][T29811] lo speed is unknown, defaulting to 1000 [ 2437.692020][T29824] lo speed is unknown, defaulting to 1000 [ 2438.057582][T29831] netlink: 'syz.0.6664': attribute type 10 has an invalid length. [ 2439.197409][T29845] __nla_validate_parse: 6 callbacks suppressed [ 2439.197430][T29845] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6669'. [ 2440.039114][T29865] lo speed is unknown, defaulting to 1000 [ 2440.737990][ T5596] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2440.751242][T29895] lo speed is unknown, defaulting to 1000 [ 2440.861956][T29900] lo speed is unknown, defaulting to 1000 [ 2440.902186][ T5596] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2440.914347][ T5596] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2440.937934][ T5596] usb 3-1: config 0 has no interface number 0 [ 2440.947140][ T5596] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2440.961799][ T5596] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2440.972309][ T5596] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2440.996914][ T5596] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2441.006121][ T5596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.015887][ T5596] usb 3-1: Product: syz [ 2441.020555][ T5596] usb 3-1: Manufacturer: syz [ 2441.025284][ T5596] usb 3-1: SerialNumber: syz [ 2441.061244][ T5596] usb 3-1: config 0 descriptor?? [ 2442.503586][T29930] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6695'. [ 2443.142062][T26704] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2444.352465][ T189] usb 3-1: USB disconnect, device number 28 [ 2444.441987][T26704] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2444.458140][T26704] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 2444.484170][T29957] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6706'. [ 2444.493683][T26704] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.551402][T26704] usb 6-1: config 63 has no interface number 0 [ 2444.597432][T26704] usb 6-1: config 63 interface 66 has no altsetting 0 [ 2444.773517][T26704] usb 6-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2444.793656][T29956] lo speed is unknown, defaulting to 1000 [ 2444.796917][T26704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.810163][T26704] usb 6-1: Product: syz [ 2444.816778][T26704] usb 6-1: Manufacturer: syz [ 2444.853406][T26704] usb 6-1: SerialNumber: syz [ 2445.455118][T26704] uvcvideo 6-1:63.66: probe with driver uvcvideo failed with error -22 [ 2445.465877][T26704] usb 6-1: USB disconnect, device number 7 [ 2445.704579][T29970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6709'. [ 2445.775582][T29972] program syz.0.6708 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2445.785337][T29972] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2447.358597][T29981] overlayfs: failed to resolve './bus': -2 [ 2447.469286][T29984] syzkaller0: entered promiscuous mode [ 2447.485507][T29984] syzkaller0: entered allmulticast mode [ 2447.999579][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6721'. [ 2448.024181][T30001] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6721'. [ 2449.387175][T30015] overlayfs: failed to resolve './bus': -2 [ 2449.528996][T30019] syzkaller0: entered promiscuous mode [ 2449.536396][T30019] syzkaller0: entered allmulticast mode [ 2449.619839][ T5596] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2449.622871][T30025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6731'. [ 2449.694752][ T29] audit: type=1400 audit(1786220726.936:888): avc: denied { write } for pid=30028 comm="syz.1.6733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2449.726060][ T29] audit: type=1400 audit(1786220726.973:889): avc: denied { read } for pid=30028 comm="syz.1.6733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2449.763544][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6736'. [ 2449.773442][ T5596] usb 7-1: device descriptor read/64, error -71 [ 2449.821514][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6736'. [ 2450.069844][ T5596] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2450.253564][T30034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6736'. [ 2450.324760][ T5596] usb 7-1: device descriptor read/64, error -71 [ 2450.394275][T30056] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6742'. [ 2450.448054][ T5596] usb usb7-port1: attempt power cycle [ 2450.802284][ T5711] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2450.975965][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2450.990220][ T5711] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2450.999514][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2451.010709][ T5711] usb 6-1: config 0 descriptor?? [ 2451.033364][ T5596] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2451.066259][T30061] pim6reg: entered allmulticast mode [ 2451.120059][ T5596] usb 7-1: device descriptor read/8, error -71 [ 2451.284624][ T5711] usbhid 6-1:0.0: can't add hid device: -71 [ 2451.306156][ T5711] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2451.333153][ T5711] usb 6-1: USB disconnect, device number 8 [ 2451.348068][T30061] pim6reg: left allmulticast mode [ 2451.390002][ T5596] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2451.436069][T30064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2451.455451][ T5596] usb 7-1: device descriptor read/8, error -71 [ 2451.463651][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 2451.484827][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 2451.496884][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 2451.520729][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 2451.531815][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6747'. [ 2451.595119][ T5596] usb usb7-port1: unable to enumerate USB device [ 2451.872458][ T5711] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2452.057974][ T5711] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2452.092724][ T5711] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2452.114122][ T5711] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2452.137622][ T5711] usb 6-1: config 0 descriptor?? [ 2452.311160][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6752'. [ 2452.332925][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6752'. [ 2452.343827][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6752'. [ 2452.354356][T30085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6752'. [ 2452.704336][T30051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2452.740313][T30051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2454.790546][ T5711] usbhid 6-1:0.0: can't add hid device: -71 [ 2454.816465][ T5711] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2454.846251][ T5711] usb 6-1: USB disconnect, device number 9 [ 2454.870768][ T29] audit: type=1400 audit(1786220731.719:890): avc: denied { write } for pid=30097 comm="syz.0.6759" name="extensions" dev="configfs" ino=9064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2454.887267][T30102] [ 2454.896165][T30102] ====================================================== [ 2454.903180][T30102] WARNING: possible circular locking dependency detected [ 2454.910220][T30102] syzkaller #0 Tainted: G L [ 2454.916198][T30102] ------------------------------------------------------ [ 2454.923206][T30102] syz.0.6759/30102 is trying to acquire lock: [ 2454.929258][T30102] ffffffff901c9de8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2454.940575][T30102] [ 2454.940575][T30102] but task is already holding lock: [ 2454.947923][T30102] ffff88806021b070 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x346/0x6f0 [ 2454.957155][T30102] [ 2454.957155][T30102] which lock already depends on the new lock. [ 2454.957155][T30102] [ 2454.967542][T30102] [ 2454.967542][T30102] the existing dependency chain (in reverse order) is: [ 2454.976532][T30102] [ 2454.976532][T30102] -> #3 (&p->frag_sem){++++}-{4:4}: [ 2454.983913][T30102] lock_acquire+0x1b9/0x370 [ 2454.988934][T30102] down_write_killable+0x93/0x250 [ 2454.994470][T30102] configfs_rmdir+0x3fa/0x950 [ 2454.999662][T30102] vfs_rmdir+0x328/0x8a0 [ 2455.004500][T30102] filename_rmdir+0x31a/0x5c0 [ 2455.009681][T30102] __x64_sys_unlinkat+0xf5/0x130 [ 2455.015130][T30102] do_syscall_64+0x115/0x870 [ 2455.020226][T30102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.026621][T30102] [ 2455.026621][T30102] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 2455.035297][T30102] lock_acquire+0x1b9/0x370 [ 2455.040394][T30102] down_write+0x8b/0x1f0 [ 2455.045166][T30102] configfs_depend_item_unlocked+0xf3/0x6a0 [ 2455.051571][T30102] usbg_make_tpg+0x261/0x620 [ 2455.056681][T30102] target_fabric_make_tpg+0xab/0x8c0 [ 2455.062478][T30102] configfs_mkdir+0x51e/0xb70 [ 2455.067665][T30102] vfs_mkdir+0x361/0x850 [ 2455.072420][T30102] filename_mkdirat+0x48b/0x5e0 [ 2455.077777][T30102] __x64_sys_mkdir+0x6b/0x90 [ 2455.082869][T30102] do_syscall_64+0x115/0x870 [ 2455.087967][T30102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.094361][T30102] [ 2455.094361][T30102] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 2455.101999][T30102] lock_acquire+0x1b9/0x370 [ 2455.107014][T30102] __mutex_lock+0x1a4/0x1bd0 [ 2455.112108][T30102] tcm_set_name+0x29/0xb0 [ 2455.116938][T30102] function_make+0x21c/0x3f0 [ 2455.122119][T30102] configfs_mkdir+0x51e/0xb70 [ 2455.127306][T30102] vfs_mkdir+0x361/0x850 [ 2455.132065][T30102] filename_mkdirat+0x48b/0x5e0 [ 2455.137419][T30102] __x64_sys_mkdir+0x6b/0x90 [ 2455.142523][T30102] do_syscall_64+0x115/0x870 [ 2455.147622][T30102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.154016][T30102] [ 2455.154016][T30102] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 2455.162252][T30102] check_prev_add+0xeb/0xe60 [ 2455.167346][T30102] __lock_acquire+0x136c/0x1a40 [ 2455.172700][T30102] lock_acquire+0x1b9/0x370 [ 2455.177792][T30102] __mutex_lock+0x1a4/0x1bd0 [ 2455.182896][T30102] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2455.189576][T30102] configfs_read_iter+0x426/0x6f0 [ 2455.195103][T30102] __kernel_read+0x397/0xad0 [ 2455.200209][T30102] integrity_kernel_read+0x7e/0xb0 [ 2455.205913][T30102] ima_calc_file_hash_tfm+0x25e/0x350 [ 2455.211875][T30102] ima_calc_file_hash+0x1e3/0x380 [ 2455.217403][T30102] ima_collect_measurement+0x94f/0xb30 [ 2455.223378][T30102] process_measurement+0xdfe/0x2350 [ 2455.229076][T30102] ima_file_check+0xc3/0x110 [ 2455.234188][T30102] security_file_post_open+0xc4/0x210 [ 2455.240116][T30102] path_openat+0x985/0x4280 [ 2455.245212][T30102] do_file_open+0x20e/0x430 [ 2455.250221][T30102] do_sys_openat2+0x10f/0x1e0 [ 2455.255418][T30102] __x64_sys_openat+0x12d/0x210 [ 2455.260801][T30102] do_syscall_64+0x115/0x870 [ 2455.265896][T30102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.272293][T30102] [ 2455.272293][T30102] other info that might help us debug this: [ 2455.272293][T30102] [ 2455.282518][T30102] Chain exists of: [ 2455.282518][T30102] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#25 --> &p->frag_sem [ 2455.282518][T30102] [ 2455.297013][T30102] Possible unsafe locking scenario: [ 2455.297013][T30102] [ 2455.304439][T30102] CPU0 CPU1 [ 2455.309796][T30102] ---- ---- [ 2455.315138][T30102] rlock(&p->frag_sem); [ 2455.319368][T30102] lock(&sb->s_type->i_mutex_key#25); [ 2455.327345][T30102] lock(&p->frag_sem); [ 2455.334012][T30102] lock(gadget_subsys.su_mutex); [ 2455.339022][T30102] [ 2455.339022][T30102] *** DEADLOCK *** [ 2455.339022][T30102] [ 2455.347164][T30102] 3 locks held by syz.0.6759/30102: [ 2455.352339][T30102] #0: ffff888032d92480 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 2455.363367][T30102] #1: ffff888035edc880 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 2455.373112][T30102] #2: ffff88806021b070 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x346/0x6f0 [ 2455.382756][T30102] [ 2455.382756][T30102] stack backtrace: [ 2455.388627][T30102] CPU: 1 UID: 0 PID: 30102 Comm: syz.0.6759 Tainted: G L syzkaller #0 PREEMPT(full) [ 2455.388653][T30102] Tainted: [L]=SOFTLOCKUP [ 2455.388658][T30102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2455.388667][T30102] Call Trace: [ 2455.388673][T30102] [ 2455.388679][T30102] dump_stack_lvl+0x100/0x190 [ 2455.388699][T30102] print_circular_bug.cold+0x178/0x1c7 [ 2455.388723][T30102] check_noncircular+0x146/0x160 [ 2455.388742][T30102] check_prev_add+0xeb/0xe60 [ 2455.388760][T30102] __lock_acquire+0x136c/0x1a40 [ 2455.388781][T30102] lock_acquire+0x1b9/0x370 [ 2455.388798][T30102] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2455.388823][T30102] ? __pfx___might_resched+0x10/0x10 [ 2455.388842][T30102] __mutex_lock+0x1a4/0x1bd0 [ 2455.388861][T30102] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2455.388893][T30102] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2455.388915][T30102] ? lockdep_unlock+0x5a/0xc0 [ 2455.388927][T30102] ? __lock_acquire+0xd5b/0x1a40 [ 2455.388945][T30102] ? __pfx___mutex_lock+0x10/0x10 [ 2455.388967][T30102] ? __pfx___might_resched+0x10/0x10 [ 2455.388986][T30102] ? __pfx_uvcg_extension_ba_source_id_show+0x10/0x10 [ 2455.389008][T30102] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2455.389029][T30102] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2455.389051][T30102] ? ima_file_check+0xc3/0x110 [ 2455.389065][T30102] ? configfs_read_iter+0x53c/0x6f0 [ 2455.389084][T30102] ? __pfx_uvcg_extension_ba_source_id_show+0x10/0x10 [ 2455.389106][T30102] configfs_read_iter+0x426/0x6f0 [ 2455.389125][T30102] __kernel_read+0x397/0xad0 [ 2455.389148][T30102] ? __pfx___kernel_read+0x10/0x10 [ 2455.389175][T30102] integrity_kernel_read+0x7e/0xb0 [ 2455.389195][T30102] ? __pfx_integrity_kernel_read+0x10/0x10 [ 2455.389214][T30102] ? ima_calc_file_hash_tfm+0x236/0x350 [ 2455.389232][T30102] ima_calc_file_hash_tfm+0x25e/0x350 [ 2455.389248][T30102] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 2455.389264][T30102] ? is_bpf_text_address+0x8a/0x1a0 [ 2455.389295][T30102] ? ima_alloc_tfm+0x21a/0x2e0 [ 2455.389311][T30102] ima_calc_file_hash+0x1e3/0x380 [ 2455.389327][T30102] ima_collect_measurement+0x94f/0xb30 [ 2455.389346][T30102] ? __pfx_ima_collect_measurement+0x10/0x10 [ 2455.389367][T30102] ? process_measurement+0x5ab/0x2350 [ 2455.389382][T30102] ? is_bad_inode+0xd/0x40 [ 2455.389395][T30102] ? xattr_resolve_name+0x27d/0x3f0 [ 2455.389411][T30102] ? vfs_getxattr_alloc+0xec/0x350 [ 2455.389430][T30102] ? ima_get_hash_algo+0x241/0x400 [ 2455.389451][T30102] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 2455.389475][T30102] ? process_measurement+0xdfe/0x2350 [ 2455.389488][T30102] process_measurement+0xdfe/0x2350 [ 2455.389506][T30102] ? __pfx_process_measurement+0x10/0x10 [ 2455.389532][T30102] ? __configfs_open_file+0x6ca/0x9c0 [ 2455.389551][T30102] ima_file_check+0xc3/0x110 [ 2455.389565][T30102] ? __pfx_ima_file_check+0x10/0x10 [ 2455.389582][T30102] security_file_post_open+0xc4/0x210 [ 2455.389604][T30102] path_openat+0x985/0x4280 [ 2455.389629][T30102] ? __pfx_path_openat+0x10/0x10 [ 2455.389654][T30102] do_file_open+0x20e/0x430 [ 2455.389670][T30102] ? __pfx_do_file_open+0x10/0x10 [ 2455.389691][T30102] ? alloc_fd+0x471/0x7a0 [ 2455.389707][T30102] ? do_getname+0x191/0x390 [ 2455.389726][T30102] do_sys_openat2+0x10f/0x1e0 [ 2455.389752][T30102] ? __pfx_do_sys_openat2+0x10/0x10 [ 2455.389773][T30102] __x64_sys_openat+0x12d/0x210 [ 2455.389797][T30102] ? __pfx___x64_sys_openat+0x10/0x10 [ 2455.389818][T30102] do_syscall_64+0x115/0x870 [ 2455.389837][T30102] ? clear_bhb_loop+0x70/0xc0 [ 2455.389853][T30102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2455.389868][T30102] RIP: 0033:0x7f928679e0d9 [ 2455.389881][T30102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2455.389895][T30102] RSP: 002b:00007f9287700028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2455.389909][T30102] RAX: ffffffffffffffda RBX: 00007f9286a26090 RCX: 00007f928679e0d9 [ 2455.389919][T30102] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 2455.389930][T30102] RBP: 00007f9286835024 R08: 0000000000000000 R09: 0000000000000000 [ 2455.389945][T30102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2455.389954][T30102] R13: 00007f9286a26128 R14: 00007f9286a26090 R15: 00007fff02619508 [ 2455.389968][T30102] [ 2455.393005][ T29] audit: type=1400 audit(1786220731.728:891): avc: denied { create } for pid=30097 comm="syz.0.6759" name="ext0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 2455.875722][ T29] audit: type=1400 audit(1786220731.737:892): avc: denied { read } for pid=30097 comm="syz.0.6759" name="baSourceID" dev="configfs" ino=171513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 2455.905741][ T29] audit: type=1800 audit(1786220732.263:893): pid=30102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.6759" name="baSourceID" dev="configfs" ino=171513 res=0 errno=0 [ 2460.917855][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2460.925315][ T1302] ieee802154 phy1 wpan1: encryption failed: -22