last executing test programs: 9.325231918s ago: executing program 2 (id=420): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) unshare(0x200) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x1, 'vlan0\x00', {}, 0x4004}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff1}, {}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0xa6ff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000200000000000040"]) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x3, 0x1, 0x0, 0x2}}, {&(0x7f0000000100)=""/31, 0x1f}, &(0x7f0000000140)}, 0xa0) 9.029324805s ago: executing program 2 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESOCT=r0, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x40) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000140)={0x1f, @fixed}, 0x8) r2 = dup2(r1, r1) getsockopt$rose(r2, 0x104, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xe5, 0x32}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000004c0)={0xc, @capture={0x1000, 0x1, {0x1ff, 0x3}, 0x7, 0x3a}}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000001c0)=0xc72, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480200001bf3e59f033b855196e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a32003fde85c3b4c2a864264e61a788000000110000001100010000000000000000000000000a"], 0x98}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRES64=r5], 0x0) 7.669980338s ago: executing program 4 (id=429): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000) 7.585390246s ago: executing program 4 (id=430): bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x101840, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000000c0)=0x1) r4 = fcntl$dupfd(r3, 0x0, r3) read$FUSE(r4, 0x0, 0x0) recvfrom$l2tp(r2, 0x0, 0x0, 0x80002041, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r5, 0x0}]) 6.459842202s ago: executing program 4 (id=434): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x408002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7ffe, 0x0) io_setup(0x83ab, &(0x7f00000004c0)) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) 5.280993794s ago: executing program 3 (id=436): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0x80086e1, 0x10800, 0x0, 0x1}, &(0x7f0000010080), &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) (async) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000300)=""/43, 0x2b}], 0x1) 5.150300483s ago: executing program 4 (id=437): ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000100)={{}, "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"}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000004180)={0x16, 0x98, 0xfa00, {&(0x7f0000004140)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000004240)={0x11, 0x10, 0xfa00, {&(0x7f0000004100), r1}}, 0x18) r2 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f00000040c0)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0x40000000, 0x7ffb}}}, 0x118) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETSF(r5, 0x5404, 0x0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r5, &(0x7f0000002080)={0x2020}, 0x2) ioctl$VIDIOC_S_STD(r5, 0x40085618, &(0x7f00000003c0)) ioctl$TIOCGPTPEER(r5, 0x5441, 0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) 5.085452151s ago: executing program 2 (id=438): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) listen(r0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000640)="1e35616b0e3c33", 0x7}], 0x1) r6 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/83, 0x53}], 0x1}, 0x4c2103a0) 5.083884426s ago: executing program 3 (id=439): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4a0000, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00') r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000a400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sys_enter\x00', r1}, 0x18) setgroups(0x0, 0x0) tgkill(0x0, 0x0, 0x13) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44f99209cadb74e40e000000fcdbdfdbfa000000", @ANYRES32=r3, @ANYBLOB="8345050001000000240012800b000100697036746e6c00001400028008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\b\x00;\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40040c0) gettid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r6, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_emit_ethernet(0x46, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r7, 0x3000) socket(0x1e, 0x4, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x80) 4.605786915s ago: executing program 3 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$evdev(0x0, 0x0, 0x121041) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r5, &(0x7f0000000800), 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) lseek(r4, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) write$bt_hci(r7, &(0x7f0000000000)=ANY=[], 0x6) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xb8002, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0), 0x4) 3.650853958s ago: executing program 3 (id=447): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r5, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="b90000"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d43, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0xc208ae62, 0x0) 3.559217953s ago: executing program 4 (id=448): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nf_conntrack_expect\x00') r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffe}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6e15}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4040) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = dup(r3) listen(r4, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0xf, &(0x7f00000003c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000440)='GPL\x00', 0xd01, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @tracing=0x1a, r0, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x10, 0x10000, 0x5}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000500)=[r0], 0x0, 0x10, 0x80, @void, @value}, 0x94) socket$kcm(0x29, 0x7, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000600), 0x4) sendmsg$nl_route(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@getneightbl={0x14, 0x42, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x20060000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9d, 0x9d, 0x5, [@typedef={0xe}, @struct={0xa, 0x1, 0x0, 0x4, 0x1, 0x3, [{0x9, 0x5, 0x777f4037}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x2}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @datasec={0xd, 0x4, 0x0, 0xf, 0x1, [{0x2, 0x8000, 0x5}, {0x4, 0x0, 0xb0c}, {0x2, 0x5, 0x6}, {0x5, 0x0, 0xbafb}], 'O'}, @restrict={0xf, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f0000000800)=""/101, 0xbd, 0x65, 0x0, 0x8, 0x0, @void, @value}, 0x28) recvmmsg(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000008c0)=""/153, 0x99}, {&(0x7f0000000980)=""/206, 0xce}, {&(0x7f0000000a80)=""/4, 0x4}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000bc0)=""/93, 0x5d}, {&(0x7f0000000c40)=""/25, 0x19}], 0x6}, 0x2}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)=""/147, 0x93}], 0x1, &(0x7f0000000e00)=""/110, 0x6e}, 0x8}], 0x2, 0x20, &(0x7f0000000f00)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000f40)='wchan\x00') r7 = getpgrp(0x0) sched_setscheduler(r7, 0x5, &(0x7f0000000f80)=0x43c) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x5c, 0x13, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = fspick(r4, &(0x7f0000001100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000001140)='fou\x00', &(0x7f0000001180)="07981c6cc35cb5e31b1d295a773d886c7247fe41a1320352fbe1932c442da98f89f7caf92705deedc137aca6a062da6183e94749e0798a208ac61f41f6a60fbbc37228233c152080a260fb1552b5b85579e89b37fc503002733b4986669d498fa0c52dbacbef9bd923e706f263b3160d9cd51f91b35cda0f8d90340911fdfe8d9fbf8fab07c0b91041a1265a48fccaf3b5f41a2ad7e155014782", 0x9a) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSID(r9, 0x5429, &(0x7f0000001240)=0x0) pipe2$watch_queue(&(0x7f0000001280)={0xffffffffffffffff}, 0x80) read$watch_queue(r11, &(0x7f00000012c0)=""/166, 0xa6) connect$inet6(r6, &(0x7f0000001380)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f00000013c0)) sched_setaffinity(r10, 0x8, &(0x7f0000001400)=0x4) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000001440)={0x0, 0xfffffff3, 0x7, 0x9, 0x1, [], [0x5, 0xffff, 0x1, 0x5], [0x73, 0x80, 0xa9a6, 0x4], [0xb, 0x1, 0xffffffff, 0xfffffffffffffffd]}) 3.509240141s ago: executing program 2 (id=449): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = io_uring_setup(0x6f48, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0xfffffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x133f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x24300, 0x2a) sendmmsg$inet6(r5, &(0x7f0000000380)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="72d87b746e99d3ae7d", 0x9}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f00000002c0)="3f4f7a48c342986cc1ccff9bca1bd51752b9acec2b03be5c0c2bf7f734e80cb540d6f93c60ad44fc83c435f2c51cd44e4a5ef616698d4fc66ef039145ef616ef747ae1b1a177d74910a511d5a7e4f873d465ab381f5a0ed2c567919eab6d6f510c95b69259f393c2b834dbc71a987aabf846fb8feda81fdbb7c6f6081a49501ee39f8dad20bcf195f496190ad541d1ab0cdf", 0x92}, {&(0x7f0000000440)="484a02a422fec1068d0357942792e2a0dad3dd1e894094ecaa62d807c201b86760238619ddbb20d92106a781733cc1ef236dd91c74431b0c14ce5bf3f460ec9bbd41c44e6580222f4e4696dfa42db8446e156cf2cef174b84a2a68fa81a8e9fb2431b36bdf5b6f2b318e054470a8cacb46c4dda9a88eb93a02417a86b46ab743a86aaf2a80568152db368f76d644409cbc75c2b563142031e48d5b9fa1", 0x9d}, {&(0x7f0000002280)="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", 0x1000}], 0x5, &(0x7f0000003280)=[@hoplimit_2292={{0x14}}, @dstopts={{0x30, 0x29, 0x37, {0x40, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @pad1, @ra={0x5, 0x2, 0x8001}, @jumbo={0xc2, 0x4, 0x40}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff9}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x21, 0x6, 0x1, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2]}}}, @hopopts={{0x1030, 0x29, 0x36, {0x88, 0x202, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x7, 0x1000, "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"}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffff8}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @rthdr={{0x48, 0x29, 0x39, {0xc, 0x6, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}], 0x1150}}], 0x1, 0x80) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x8000, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x44}}, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd700000000000020202000900010073797a3000000000"], 0x20}, 0x1, 0x40030000000000, 0x0, 0x44880}, 0x20000000) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='H*\x00\x00', @ANYRES16=r10, @ANYBLOB="00032bbd7000fddbdf250100000005000400020000000900010073797a30000000000900010073797a32000000000900010073797a31000000000500040002000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040840) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 3.373232481s ago: executing program 3 (id=450): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x96d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a90102030109025b09040d9720090904320409f073ea09090503002000f8004009050410"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000003a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x250, 0x4c, 0x232, 0x0, 0x0, 0x3b0, 0x2e8, 0x2e8, 0x3b0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [0x0, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4=@rand_addr=0x64010100, [], @ipv4=@broadcast, [0x7000000], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2, [0x0, 0xff000000]}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'ip6gre0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x50}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0x0, 0x2, 0xd, 'snmp\x00', 'syz1\x00', {0x401}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x200f00, 0x100) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000280)={0x100, r4}, 0x0) close(r4) close(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x100, r5}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x2, 'veth0_to_batadv\x00', {0x5}, 0xb}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r2, 0x0) close(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) syz_usb_connect(0x5, 0x98f, &(0x7f0000000e40)={{0x12, 0x1, 0x201, 0x3e, 0xb3, 0x7, 0xff, 0xccd, 0x10b6, 0xa732, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97d, 0x3, 0x9, 0x98, 0x80, 0xe, [{{0x9, 0x4, 0x6b, 0x7, 0xa, 0xbf, 0xd2, 0x2e, 0x3, [], [{{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x40, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x3}, @generic={0xf9, 0x5, "1919950727f823a5363571959d2e2c727f686a9193a3bfc5bcf91df893b0d7c905b89334b3654f9b630e8694a3ae81e10686d2d7314a4578931a8d4e2c6ed93e3204abee88c6321fcd502f8a68e0bc5a8693e9e4d54b5b18c019c7f300ef7bc60960d7dc9a8e94a452ef257adb417f8a968cdd80969f16486b15bf04f615e26169205bbae6d4e30bbb686b1b85f36150f1d9b316335c13124ed53441b81381a500f43078db344f38ac8846d2d17c91f9b0f20dd91eafafba4e99873f99aefe392ebf78648389b4d8db7df858e28e6f4569d1e020ae03d3abb0f7f8cbca7b3faa790216bbf351ba7c083b4012f8ccee9f87f872f8cfdb98"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x5, 0x80, 0x6}}, {{0x9, 0x5, 0x83, 0x10, 0x10, 0x40, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x8, 0x4, 0x1}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x6, 0x7, 0x7, [@generic={0x1b, 0x1, "e95844a7738732107453f09ccf884af818cc58fcc929923025"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0x0, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x6}, @generic={0xd2, 0xf, "555728fc19e56ae85f28876e170555ee25a7dc21d437f55d96e514b4ce428a4fd5d921154b1428bb80c6f06023747fecb699d2b09792d87883b0aae5e655494f4089c2626650dd985457883f73f968d7500d26fae1fe26033c5245f7f882ce7bf4baf3178995a0eb4de67150d39782d1bfa0f298123281bf92dfe9e315b0468bb6da8c2a35420abe24f14438147e7c7d9e3eedd87a5bbce8c80af964fce26f5539f9e0283b56ea042afc79a2f9018791a39c449d7647ca17c0411da4e0f7536e886f8c128847360789355206f0e305de"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3b7, 0x5, 0x81, 0x6, [@generic={0x16, 0x23, "07c5bcd433fbfdc2b82cc7a14b201d0930047912"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xc, 0xdc, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x8, 0x3, 0x9a, [@generic={0x21, 0x23, "ef73c55ceec569f63e4a61406846c33304e1e5b80bb4e51b48fbf202202df7"}]}}]}}, {{0x9, 0x4, 0x2a, 0x3, 0xd, 0x2, 0x2, 0xff, 0x5, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "c4d6"}, {0x5, 0x24, 0x0, 0xef95}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xd033, 0x8, 0x7}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xb1, 0xb}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0xd}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x1}, @country_functional={0xc, 0x24, 0x7, 0x10, 0xa0bd, [0xfffa, 0x9, 0xab27]}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, ',B'}, {0x5, 0x24, 0x0, 0x7200}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x0, 0x2, 0xb}}], [{{0x9, 0x5, 0x4, 0x0, 0x20, 0x80, 0x0, 0x2, [@generic={0x27, 0x23, "e39d43eb0572173187bd31fe1531c8e67f4152721cc02e3623567861d26ea58696b2dad36a"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0xf3, 0x5, 0x4a, [@generic={0xa1, 0x8, "83d9d9203e51c85aa41064594f98d054eaa69c45044f5a5df04083b1e9c937c0b59ee49e71ebf4ca57cc087d58c80b56e783c39866339e2ce2cdb62e6751db45d62ed4d2bc3fa082247c9da7c8dcd005ef446050cd280f4fce804de8db931dda8e36dc2cf0700ae1eb7da1f75e41c5e5c21d84e984c8225bcfdc3a2c51a3042d7a5dcd2526b226d80918c13449ce27cf781968eeeb9a4ecdb65dff65179dd1"}, @generic={0xf5, 0x5, "3ea32f7cb5c11d0fd0ce7993a43094ae7dece5b099bdfebd068a7b4d668f10bde1b4295338b0d10a4c8119c87bcecaf62f469aa403e93c31517353c3007823f0aa58f05e23901cb6f5732fdac4051224a9d0cc7f9d0294236aa4262b7fb552f244d4c4551854501b30ccdda5156a8af9621e7a7763bb3a123a34538858849e61fc4123ab074572220853a99892148869e5e2b3a6f055f8b995e913abe3353730b16746b5394ef192aa60d27be16202653469df8e499fa36cbab86c3fb6462f37e07c467036f761f3d1b902ac4e7fc1c54f58c63925653ee17e919a429ae3d1b39ba374d4fff60f32fcfac2e4babfb8f39d98c4"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x8, 0xf9, 0x8}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0xc3, 0x0, 0x1, [@generic={0xd4, 0xa, "36f5d95c882d2abab9ee47ccd9753c78c6da3200e122a96d2227090f5e09688ff009fb29699c0aa23a24249847fe3e0eadfc5791843051121bd92cf04378f4718cc9daf34a9a64baa1ea8817078acc18f8bd59bb31f56ca04ad280f1841279d1ea78b1dc737e58cbd01fccc4aadda03bd0b3edb51cdc0b2e60794899b0168339f2ba322a5c0a45cd38dde270f7566054b14405a18d2820fff85a002e21a9709da01e39738c1d1c614491ed7194c9025533a9ce81fe96695aa23b50d254082acf94a0fa603a181a366bf9171e221802da00bc"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x9, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf8, 0x6}, @generic={0xef, 0x22, "82d5b000d0e7218f27293e8a2a20d18c19c944bbe7570e82f23f84512523e34419e02c83fc34209eaaa65682ba3cf723e19ed1798c753c0c1572385aa54accab373dc591bced5a93d023913508bd8a27ba697ade8f1971e04a6689e6cbc3dbef36e6f7425496f08ad685434ad868d2b4f02f4f04ccbb8505dff9f1a06147b5c964c97df4284f5d452b8d7b85bc31f318f5ab2ca9e9ac35e3669dce4ccc073ecc23367552082fb5a6a2586ed1c252998aa7077ddcad3968e0fe3366dc1f93f12de37cb5daa6b0f6a36094a4f7a8800b9c83d8da84429046ebdca85af36d7ed91148b6aa85f54589b125abe37f3f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x2, 0x1, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xa, 0x0, 0x4}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0xdb, 0x3, 0xf}}, {{0x9, 0x5, 0xc, 0x0, 0x610, 0x1, 0x0, 0x6f, [@generic={0x41, 0x8, "b90b1f7f7744a2a606f1145c096e969e872f5135b0473d80e1911a21b139a1e21e5e3585a8b9ad60271dfddb3f943d98dc8addfaffefcd60e221006ada7230"}, @generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x0, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0x7}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0xcf, 0xe, 0x8}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x56, 0xa, 0xe7, [@generic={0x25, 0xc, "9e5726bf8423dc6c69fc85475195622994a13ea8432f77daba2156ab138a975d5b584d"}, @generic={0x3a, 0x4, "c17b680a8005a6695704aad76c6dbb8b9dfee7c8bd681943ce8786b9a896cc11e80d0debf221898182896b21b75b5cae2688c19f40ec4964"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x0, 0x8, 0x9}}]}}, {{0x9, 0x4, 0x49, 0x3, 0x8, 0x39, 0x63, 0x42, 0x5, [@hid_hid={0x9, 0x21, 0x6, 0x7f, 0x1, {0x22, 0xf71}}], [{{0x9, 0x5, 0x8, 0x10, 0x10, 0x3, 0x26, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x5}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x2, 0x0, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9b, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xf8, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0x2, 0xc9, [@generic={0x2e, 0x22, "25660f2e6e2b39fcf37cfdbd0c4f8f0fd1da43f9d569fa557aa8caae7fa0b4999f766c4c9251865376bcec0f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x1}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x6, 0x9, 0xab}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x5, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x20, 0x1000}]}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x7, 0x3b, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x8}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x3, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x4}, @generic={0x7f, 0xb, "a77abf4c67fd0acd34dafe4d7fbf10d63f5d9d1a2d9f02932d034cacf7a4d4cdfc6bee4dcac227108d8463d7962a15ad2fb1920c5ef702937b1c9b3b5a858cb1247118f12584fd51f4c17cb91c217a8e6a9d2b507b632f7d340eca2097a128d3c336004103b2a5c91284a18da381a3e18441a0148ed66ab125c55ef66c"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x5, 0xfe, 0x8, [@generic={0x83, 0xa, "b69ea7d400f8583ff5bc3b2877a017b80897c046f8a3a79b34be8418904f098145d0457188feadee77e79cdd992c3c0f81ca5afdc19e6abc87f3a6a30c0aa38e7c50e328ee3f889bf51005122b686fb8657e88c9d5352a912d2e1439e5b82e38c6becd483a16859236dabad9c1f015a5f9485b79088b402a8e5c509953d014c797"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xd7, 0xff, 0xc5, 0xff, 0x6}, 0x37, &(0x7f0000000200)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x7, 0x8, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x0, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9, 0xe, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "737caf94f034e91ff7fee3ce2a671664"}]}, 0x2, [{0x8b, &(0x7f0000000300)=@string={0x8b, 0x3, "bf12365b72c3d0d6744222285905d319e2b5b676a3b37308f8f37ed3d06e66200ecce8660b8b491d43c37d6749d8bf423fb0d4bb6d35181daea4df64e99ce443dd77e78bf603e1edb9735426cf393866f8a6f8f3e9f1bc9249d67e6fe9d21952145e31a165a3a9d95e6f718122a92bd7b34c4fcb7ae753e3427ca2e7c23eee9625f780bee9a680ac80"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40a}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xc1, 0x0, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280060008"], 0x4c}}, 0x0) 3.257959949s ago: executing program 1 (id=453): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) dup3(r0, r0, 0x80000) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}, 0x300}], 0x1, 0x2000c000) 3.198798432s ago: executing program 1 (id=454): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)='w', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000800001c5970616e00000031c4c8269fa45d06c103335cacf3700800080087ba000000000000000000000000000400"/67], 0x4c}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_PBUF_STATUS(r4, 0x1a, &(0x7f0000000280)={0x8001}, 0x1) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x201, 0x4800003e, r6, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r7, 0x61, 0x40001002, r8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') shutdown(r0, 0x1) splice(r0, 0x0, r3, 0x0, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x80, 0x1c2) 3.104031439s ago: executing program 2 (id=456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x88, 0x80, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251b", 0x4, 0xfffffffffffffffb) r3 = dup(r2) r4 = syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES8=r2, @ANYRESOCT=r3, @ANYRESDEC=r3, @ANYRESDEC=r3], 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x8840) syz_usb_control_io(r4, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="19353e369b98a089216ab6b1872c7b3349d16b7b09e6696fcc84198358e565f171c5e6a30615d17c6f5524dceefa13d250b542e2d77ed8feaba23ed5aa8707236054a54eededa7650468f24b33aff555"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) 3.032952011s ago: executing program 1 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) syz_open_dev$evdev(0x0, 0x0, 0x121041) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r5, &(0x7f0000000800), 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) lseek(r4, 0xfffffffffffffff5, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) write$bt_hci(r7, &(0x7f0000000000)=ANY=[], 0x6) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xb8002, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0), 0x4) 2.413395286s ago: executing program 4 (id=458): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3132564e}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0x4, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_create\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='io_uring_create\x00', r4}, 0x10) io_uring_setup(0x5394, &(0x7f0000005480)={0x0, 0x0, 0x80, 0x0, 0x3bc}) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'\x00', &(0x7f0000000080)=@ethtool_regs={0x4, 0x5, 0x2b, "b14adf2d5c50cc0357f3ab17e5f8e65ee58f63113c0f01b0938db434c0a73a6dfad7307722f2945b66f4fd"}}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 1.962849367s ago: executing program 1 (id=460): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x1, 0xffffffff, &(0x7f0000002cc0)=[{&(0x7f00000018c0)="8ef64b89a5abaac196f70df9c37013eb4ab139b2aa", 0x15}], 0x1, 0x10, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{'noacl'}], [], 0x2}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f00000014c0)=0x60, 0x4) r10 = socket$kcm(0x29, 0x7, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r10, 0x119, 0x1, &(0x7f0000000040)=0x80, 0x4) 1.825464037s ago: executing program 0 (id=461): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000280), 0xffffffffffffffd4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x3, 0x2, 0x1, 0x9}) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaa23624baaaaaaffffffff0f80cdc1cf7efaffff0c00450e001c120000000002907800000000e000"], 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@loopback, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/43, 0x2b}], 0x1}}], 0x2, 0x10010, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.799931007s ago: executing program 0 (id=462): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="9012", 0x2}], 0x1}}], 0x1, 0xc8040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000700000008000000", @ANYRES32, @ANYBLOB='\x00'/19], 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setreuid(0xee01, 0xee01) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.039314086s ago: executing program 1 (id=463): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x414301, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000380)={0x4080200, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0, {0x10}, &(0x7f0000000180)=""/174, 0xae, &(0x7f0000000240)=""/225, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) sched_setscheduler(r2, 0x0, &(0x7f0000000400)=0xfffffffb) 842.243426ms ago: executing program 0 (id=464): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000001c0)={{}, 0x24}, 0x10) 785.327821ms ago: executing program 1 (id=465): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x1, 0xfbf, 0x4, 0x50d, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) set_mempolicy(0x1, &(0x7f0000000180)=0x6c0d05c5, 0x2) unshare(0x68040200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x9, 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="cff2"], 0x1c}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000480)=@arm64_fp_extra={0x60200000001000d5, &(0x7f0000000400)=0x9}) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000004140)=[{0x8dffffff, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f46", 0x20}], 0x2}], 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000240)={&(0x7f0000000080)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000100)="ec1319166add63fe228fd3b58055b0914948ce6300de38af04e53b61fab1816580029849f44d98d8416494924615017bf1d065a9aee6735834cbf8156fd709e20180ec21a605c56b55ffdc654d9308e1340cf08d0144d90256df72e820de8b3465862dace2338f3db7d87c00d4406cafc59b311051dd3142e02f137e7172e8ee7bdc851ea277af47a4e910ea60e7acdcd09585efff780549dd62a21db39d82b2efeb0103eea0c82075ff82c54b850803", 0xb0}, {&(0x7f00000001c0)="6c95edd5cbd00707f16978441864f7d6f3fff3d19d6b013e2f1114a0d4ca1626b26559a4aa2597ed68a793d96c347c43fd99da424531f0cb10440b2baad522f09d05ac555d947da4e6b44328549413742c11b732bbf6c1eab2b05085ac935ffb649d3d3cb82579e9e2bcd3b90f96169e6695", 0x72}, {&(0x7f00000014c0)}], 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="6000000000000010ff9c4e64db69a47f72c2cf0000000d00000087d8376959c0a5319bae3fa597729ebdabef6a0066688f1746f9608775ccf3784ba9fec738b0ab52017de6d7acaac4d96e21006b81b250ca8200553b451f751513e20822b832f7728e9a4c280eb3000018000000000000000901000001800000d76e5d86cb230000"], 0x78}, 0x20000000) syz_open_procfs(r2, &(0x7f0000000040)='net/netstat\x00') 777.927061ms ago: executing program 0 (id=466): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0xcac, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x16800) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000001c0)={0xa0d}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000fc060000050000000000000000000000050000000000ffffffffffff"]) 752.698919ms ago: executing program 0 (id=467): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0xffffffffffffff21) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) syz_usb_connect$cdc_ncm(0x2, 0x84, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x1}]}, 0x3c}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "411896b1"}, @global=@item_4={0x3, 0x1, 0x6, "39d0bbd4"}, @main=@item_4={0x3, 0x0, 0xa, "e4ae19b1"}]}}, 0x0}, 0x0) 457.203139ms ago: executing program 3 (id=468): r0 = socket$inet6(0xa, 0xa, 0xeb80) syz_open_dev$vcsa(&(0x7f0000000040), 0x2, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x100000001}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4040810) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000002680), 0x0, 0x2042, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r8, 0x8990, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000001c0), &(0x7f0000000340)=0x10) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r9, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@null, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) syz_init_net_socket$rose(0xb, 0x5, 0x0) 157.343731ms ago: executing program 0 (id=469): socketpair$unix(0x1, 0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget(0x1, 0x400000, 0x8, &(0x7f0000bff000/0x400000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x2, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x6, 0x20010, r4, 0x100000000) mremap(&(0x7f000099e000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000b15000/0x1000)=nil) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}}, 0x4004) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01060000", @ANYRES16=r7, @ANYBLOB="00022bbd7000fddbdf250f000000080031000800000005002e000100000008002b00ca03000005002e0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048005) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x3130, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4, 0x10000000}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=470): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000510ae922000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r6, &(0x7f0000000340)=ANY=[], 0x40) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x14, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xfa, 0x3, 0x1, 0x68, 0x401}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x400, 0xb4, &(0x7f0000000680)=""/180, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000780)=[0x1, r0, r0, r0, r1, r0, r1, r1], &(0x7f00000007c0)=[{0x2, 0x2, 0x3, 0x4}, {0x4, 0x2, 0x0, 0x5}, {0x1, 0x1, 0xb, 0xa}, {0x0, 0x5, 0x6, 0x9}], 0x10, 0x1, @void, @value}, 0x94) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r12, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r13, &(0x7f0000000080), &(0x7f00000002c0)=@tcp}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x6, &(0x7f0000000480)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x1, 0x4, 0x6, 0xa, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f00000004c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x1a, r6, 0x8, &(0x7f0000000500)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xb, 0x643}, 0x10, r8, r11, 0x0, &(0x7f0000000900)=[r1, r1, r13, r14, r0, r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 83871][ T52] cdc_wdm 3-1:1.0: skipping garbage [ 66.493704][ T52] cdc_wdm 3-1:1.0: skipping garbage [ 66.534073][ T52] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 66.549647][ T52] cdc_wdm 3-1:1.0: Unknown control protocol [ 66.696903][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 66.705871][ T5906] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.799284][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 66.799365][ T52] usb 3-1: USB disconnect, device number 2 [ 66.806103][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 66.817910][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 66.826992][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.920160][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 66.929946][ T5906] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 66.939411][ T5906] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 66.952208][ T5906] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 66.964108][ T5906] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 66.979136][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 66.988353][ T5906] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 67.000149][ T5906] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 67.008885][ T5906] usb 1-1: Product: syz [ 67.023812][ T5906] usb 1-1: Manufacturer: syz [ 67.028632][ T5906] usb 1-1: SerialNumber: syz [ 67.038097][ T5906] usb 1-1: config 0 descriptor?? [ 67.047066][ T5906] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 67.060806][ T5906] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 67.563140][ T5857] usb 1-1: USB disconnect, device number 3 [ 67.563209][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 67.742532][ T5857] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 67.756050][ T5885] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 67.777122][ T5885] usb 5-1: USB disconnect, device number 3 [ 68.363527][ T6068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.910236][ T5857] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 69.070860][ T5857] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 69.082515][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.092470][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.104538][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.116734][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.126238][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.139395][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 69.147859][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.158175][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.169083][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.183111][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.193479][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.205115][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.216499][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.225934][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.235066][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.246370][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.254242][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.263386][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.274775][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.283629][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.293192][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.304290][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 69.348579][ T5906] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.360451][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.367273][ T5906] usb 5-1: config 179 has no interface number 0 [ 69.376985][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 69.388414][ T5857] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.402104][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 69.413803][ T5857] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.517671][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.535260][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 69.636132][ T5857] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 69.701274][ T5906] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 69.788402][ T5857] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 69.797544][ T5906] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 69.828412][ T5857] usb 4-1: Product: syz [ 69.932227][ T5857] usb 4-1: Manufacturer: syz [ 69.944639][ T5857] usb 4-1: SerialNumber: syz [ 69.951263][ T5906] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 69.965367][ T5857] usb 4-1: config 0 descriptor?? [ 70.448054][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.463333][ T5857] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 70.472293][ T6075] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 70.511875][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 70.511889][ T30] audit: type=1400 audit(1743090918.900:278): avc: denied { read } for pid=6103 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.556491][ T6098] Zero length message leads to an empty skb [ 70.575217][ T30] audit: type=1400 audit(1743090918.900:279): avc: denied { open } for pid=6103 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.600915][ T30] audit: type=1400 audit(1743090918.900:280): avc: denied { getattr } for pid=6103 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.702057][ T30] audit: type=1400 audit(1743090919.090:281): avc: denied { bind } for pid=6072 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.723755][ T6073] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 70.732951][ T6073] overlayfs: missing 'lowerdir' [ 70.795687][ T30] audit: type=1400 audit(1743090919.090:282): avc: denied { node_bind } for pid=6072 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 70.819379][ T30] audit: type=1400 audit(1743090919.110:283): avc: denied { write } for pid=6072 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.885584][ T30] audit: type=1400 audit(1743090919.270:284): avc: denied { create } for pid=6109 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.913100][ T6106] netlink: 'syz.4.50': attribute type 2 has an invalid length. [ 70.965088][ T6113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.59'. [ 71.034415][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.041475][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.137367][ T6106] netlink: 'syz.4.50': attribute type 2 has an invalid length. [ 71.250256][ T5857] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 71.373785][ T30] audit: type=1400 audit(1743090919.740:285): avc: denied { read } for pid=5174 comm="acpid" name="js0" dev="devtmpfs" ino=2766 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.581655][ T6120] netlink: 64 bytes leftover after parsing attributes in process `syz.0.61'. [ 71.684127][ T5857] usb 5-1: USB disconnect, device number 4 [ 71.690033][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 71.690067][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 71.715793][ T30] audit: type=1400 audit(1743090919.740:286): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2766 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.782641][ T5857] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 71.817557][ T30] audit: type=1400 audit(1743090919.740:287): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2766 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.867072][ T6131] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.255505][ T6137] syzkaller1: entered promiscuous mode [ 72.277868][ T6137] syzkaller1: entered allmulticast mode [ 72.322867][ T6120] tipc: Started in network mode [ 72.334184][ T6120] tipc: Node identity , cluster identity 4711 [ 72.440375][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.472272][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.479436][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.532043][ T6128] process 'syz.4.63' launched './file1' with NULL argv: empty string added [ 72.598450][ T52] usb 4-1: USB disconnect, device number 3 [ 72.626096][ T52] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 72.872951][ T6164] capability: warning: `syz.3.69' uses deprecated v2 capabilities in a way that may be insecure [ 73.384112][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 73.500132][ T52] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.050174][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 74.071760][ T52] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 74.079920][ T52] usb 2-1: config 0 has no interface number 0 [ 74.096361][ T52] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 74.117811][ T52] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 74.148416][ T52] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 74.180409][ T52] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 74.220219][ T5862] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 74.248325][ T52] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 74.281633][ T52] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 74.292379][ T6183] trusted_key: syz.4.74 sent an empty control message without MSG_MORE. [ 74.310438][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.323158][ T52] usb 2-1: config 0 descriptor?? [ 74.341786][ T52] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 74.412713][ T6174] gfs2: gfs2 mount does not exist [ 74.418382][ T6174] program syz.2.72 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.420117][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 74.448635][ T5862] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.459680][ T5862] usb 4-1: config 0 has no interfaces? [ 74.467395][ T5862] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 74.477023][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.485435][ T5862] usb 4-1: Product: syz [ 74.489827][ T5862] usb 4-1: Manufacturer: syz [ 74.497367][ T5862] usb 4-1: SerialNumber: syz [ 74.556798][ T6188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 74.631941][ T6163] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 74.643557][ T5862] usb 4-1: config 0 descriptor?? [ 74.667291][ T6163] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -90 [ 74.685867][ T5857] usb 2-1: USB disconnect, device number 3 [ 74.693175][ T5857] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 74.785275][ T6190] bond1 (unregistering): Released all slaves [ 74.890570][ T5906] usb 4-1: USB disconnect, device number 4 [ 75.494982][ T6196] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.565498][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 75.565513][ T30] audit: type=1400 audit(1743090923.950:312): avc: denied { create } for pid=6197 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.164400][ T972] cfg80211: failed to load regulatory.db [ 77.103921][ T30] audit: type=1400 audit(1743090925.480:313): avc: denied { create } for pid=6211 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.186988][ T972] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.286046][ T30] audit: type=1400 audit(1743090925.670:314): avc: denied { append } for pid=6219 comm="syz.1.84" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.460099][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 77.473227][ T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 77.728619][ T972] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 77.912054][ T972] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 320 [ 77.943904][ T972] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 77.953570][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.967798][ T972] usb 1-1: Product: syz [ 77.974187][ T972] usb 1-1: Manufacturer: syz [ 77.979052][ T972] usb 1-1: SerialNumber: syz [ 77.989792][ T972] usb 1-1: config 0 descriptor?? [ 77.997236][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.021700][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.040734][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 78.057209][ C0] port100 1-1:0.0: NFC: Urb failure (status -71) [ 78.068135][ T972] port100 1-1:0.0: NFC: Could not get supported command types [ 78.245995][ T6210] geneve1: entered promiscuous mode [ 78.404974][ T5864] usb 1-1: USB disconnect, device number 4 [ 78.420587][ T30] audit: type=1400 audit(1743090926.810:315): avc: denied { shutdown } for pid=6237 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.442553][ T6245] futex_wake_op: syz.2.89 tries to shift op by -33; fix this program [ 78.469387][ T6245] netdevsim netdevsim2: Direct firmware load for . [ 78.469387][ T6245] failed with error -2 [ 78.483951][ T30] audit: type=1400 audit(1743090926.870:316): avc: denied { firmware_load } for pid=6234 comm="syz.2.89" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 78.508101][ T6245] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 78.508101][ T6245] [ 80.277569][ T30] audit: type=1400 audit(1743090928.660:317): avc: denied { bind } for pid=6269 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.540139][ T5857] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.561286][ T30] audit: type=1400 audit(1743090928.940:318): avc: denied { bind } for pid=6286 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.640421][ T52] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 80.645852][ T6289] syzkaller1: entered promiscuous mode [ 80.721377][ T30] audit: type=1400 audit(1743090929.050:319): avc: denied { write } for pid=6286 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.772702][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 80.785016][ T5857] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 80.800377][ T6289] syzkaller1: entered allmulticast mode [ 80.810720][ T5857] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 80.815381][ T52] usb 5-1: unable to get BOS descriptor or descriptor too short [ 80.868797][ T52] usb 5-1: config 13 has an invalid interface number: 50 but max is 3 [ 80.886488][ T52] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 80.981731][ T5857] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 80.994329][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.014787][ T5857] usb 3-1: Product: syz [ 81.028597][ T52] usb 5-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 81.032241][ T5857] usb 3-1: Manufacturer: syz [ 81.050092][ T5857] usb 3-1: SerialNumber: syz [ 81.055616][ T52] usb 5-1: config 13 has no interface number 0 [ 81.062725][ T52] usb 5-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 81.067547][ T5857] usb 3-1: config 0 descriptor?? [ 81.087932][ T6292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6292 comm=syz.3.105 [ 81.115659][ T52] usb 5-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 81.120941][ T30] audit: type=1400 audit(1743090929.500:320): avc: denied { audit_write } for pid=6291 comm="syz.3.105" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.150653][ T52] usb 5-1: config 13 interface 50 has no altsetting 0 [ 81.163534][ T52] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 81.175575][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.207304][ T52] usb 5-1: Product: syz [ 81.225355][ T52] usb 5-1: Manufacturer: syz [ 81.230002][ T52] usb 5-1: SerialNumber: syz [ 81.721621][ T30] audit: type=1400 audit(1743090930.040:321): avc: denied { ioctl } for pid=6300 comm="syz.0.107" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 82.559222][ T6278] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 82.638373][ T6278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.652322][ T6313] FAULT_INJECTION: forcing a failure. [ 82.652322][ T6313] name failslab, interval 1, probability 0, space 0, times 0 [ 82.667162][ T6278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.685575][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.0.109 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 82.685608][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.685617][ T6313] Call Trace: [ 82.685622][ T6313] [ 82.685628][ T6313] dump_stack_lvl+0x16c/0x1f0 [ 82.685657][ T6313] should_fail_ex+0x512/0x640 [ 82.685673][ T6313] ? __kmalloc_noprof+0xbf/0x510 [ 82.685690][ T6313] ? __keyctl_dh_compute+0x5fb/0x10c0 [ 82.685706][ T6313] should_failslab+0xc2/0x120 [ 82.685723][ T6313] __kmalloc_noprof+0xd2/0x510 [ 82.685738][ T6313] ? __virt_addr_valid+0x5e/0x590 [ 82.685760][ T6313] ? __phys_addr+0xc6/0x150 [ 82.685779][ T6313] ? sg_init_one+0xb2/0x150 [ 82.685804][ T6313] __keyctl_dh_compute+0x5fb/0x10c0 [ 82.685825][ T6313] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 82.685861][ T6313] keyctl_dh_compute+0xd2/0x140 [ 82.685878][ T6313] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 82.685898][ T6313] ? ksys_write+0x1b9/0x240 [ 82.685920][ T6313] ? __pfx_ksys_write+0x10/0x10 [ 82.685943][ T6313] ? rcu_is_watching+0x12/0xc0 [ 82.685968][ T6313] __do_sys_keyctl+0x4df/0x590 [ 82.685993][ T6313] do_syscall_64+0xcd/0x260 [ 82.686017][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.686033][ T6313] RIP: 0033:0x7fe12918d169 [ 82.686046][ T6313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.686061][ T6313] RSP: 002b:00007fe129ff3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 82.686077][ T6313] RAX: ffffffffffffffda RBX: 00007fe1293a5fa0 RCX: 00007fe12918d169 [ 82.686087][ T6313] RDX: 0000200000000280 RSI: 0000200000000400 RDI: 0000000000000017 [ 82.686097][ T6313] RBP: 00007fe129ff3090 R08: 00002000000003c0 R09: 0000000000000000 [ 82.686107][ T6313] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000002 [ 82.686116][ T6313] R13: 0000000000000000 R14: 00007fe1293a5fa0 R15: 00007fffd91dcdc8 [ 82.686133][ T6313] [ 82.688493][ T6278] netlink: 'syz.4.101': attribute type 8 has an invalid length. [ 82.723512][ T30] audit: type=1400 audit(1743090931.110:322): avc: denied { accept } for pid=6315 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.766410][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 82.817867][ T30] audit: type=1400 audit(1743090931.160:323): avc: denied { bind } for pid=6315 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.989442][ T30] audit: type=1400 audit(1743090931.360:324): avc: denied { sys_module } for pid=6315 comm="syz.3.111" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.012326][ T30] audit: type=1400 audit(1743090931.370:325): avc: denied { bind } for pid=6323 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.033202][ T52] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 83.036822][ T3547] usb 5-1: Failed to submit usb control message: -71 [ 83.051405][ T3547] usb 5-1: unable to send the bmi data to the device: -71 [ 83.058555][ T3547] usb 5-1: unable to get target info from device [ 83.067753][ T3547] usb 5-1: could not get target info (-71) [ 83.073649][ T3547] usb 5-1: could not probe fw (-71) [ 83.098225][ T52] usb 5-1: USB disconnect, device number 5 [ 83.109237][ T30] audit: type=1400 audit(1743090931.370:326): avc: denied { listen } for pid=6323 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.127903][ T6326] sp0: Synchronizing with TNC [ 83.137019][ T30] audit: type=1400 audit(1743090931.370:327): avc: denied { accept } for pid=6323 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.179284][ T30] audit: type=1400 audit(1743090931.440:328): avc: denied { shutdown } for pid=6323 comm="syz.1.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.328911][ T6337] syzkaller1: entered promiscuous mode [ 83.338462][ T6337] syzkaller1: entered allmulticast mode [ 83.987222][ T6348] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 84.055369][ T6348] bond1: entered promiscuous mode [ 84.061324][ T6348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.087592][ T6350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.107841][ T6350] bond2: entered promiscuous mode [ 84.114333][ T6350] bond1: (slave bond2): Enslaving as an active interface with an up link [ 84.190867][ T972] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.213936][ T6355] sp0: Synchronizing with TNC [ 84.276578][ T6355] bridge1: entered promiscuous mode [ 84.282924][ T6355] bridge1: entered allmulticast mode [ 84.354062][ T6356] bridge2: entered promiscuous mode [ 84.359346][ T6356] bridge2: entered allmulticast mode [ 84.366596][ T972] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 84.380385][ T972] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.405102][ T972] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.460137][ T972] usb 5-1: config 1 has no interface number 0 [ 84.466472][ T972] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 84.477838][ T972] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 84.552718][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.561703][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.570637][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.579501][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.588453][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.597355][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.606251][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.615168][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.624191][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 84.776836][ T52] usb 3-1: USB disconnect, device number 3 [ 84.804442][ T972] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.813753][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.845871][ T972] usb 5-1: Product: syz [ 84.862626][ T972] usb 5-1: Manufacturer: syz [ 84.872995][ T972] usb 5-1: SerialNumber: syz [ 85.669240][ T972] usb 5-1: USB disconnect, device number 6 [ 85.757140][ T52] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.887514][ T6377] syzkaller1: entered promiscuous mode [ 85.898667][ T6377] syzkaller1: entered allmulticast mode [ 85.950289][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 85.957393][ T52] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 85.970895][ T52] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.981979][ T52] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.993264][ T52] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.006680][ T52] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 86.206080][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.462012][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 86.462045][ T30] audit: type=1400 audit(1743090934.850:340): avc: denied { getopt } for pid=6382 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.615514][ T30] audit: type=1400 audit(1743090934.980:341): avc: denied { create } for pid=6382 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.635491][ C1] vkms_vblank_simulate: vblank timer overrun [ 86.937437][ T52] usb 3-1: GET_CAPABILITIES returned 0 [ 86.950015][ T52] usbtmc 3-1:16.0: can't read capabilities [ 86.954082][ T30] audit: type=1400 audit(1743090934.990:342): avc: denied { setopt } for pid=6382 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.976474][ T5857] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.007876][ T30] audit: type=1400 audit(1743090934.990:343): avc: denied { bind } for pid=6382 comm="syz.3.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.133988][ T5857] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.154786][ T30] audit: type=1400 audit(1743090935.540:344): avc: denied { write } for pid=6367 comm="syz.2.124" name="usbtmc0" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.155147][ T5857] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 87.181400][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 87.195976][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 87.205878][ C1] vkms_vblank_simulate: vblank timer overrun [ 87.214593][ T6369] usbtmc 3-1:16.0: Unable to send data, error -71 [ 87.243636][ T5857] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 87.267648][ T5857] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 87.276729][ T972] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.309126][ T30] audit: type=1400 audit(1743090935.650:345): avc: denied { read } for pid=6367 comm="syz.2.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 87.330168][ T5857] usb 2-1: config 13 has no interface number 0 [ 87.331601][ T6369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.337178][ T5857] usb 2-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 87.356200][ T5857] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 87.363096][ T6369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.387622][ T5857] usb 2-1: config 13 interface 50 has no altsetting 0 [ 87.398769][ T5857] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 87.414370][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.423415][ T5857] usb 2-1: Product: syz [ 87.427666][ T5857] usb 2-1: Manufacturer: syz [ 87.434316][ T5857] usb 2-1: SerialNumber: syz [ 87.482909][ T972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.493462][ T972] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 87.501240][ T52] usb 3-1: USB disconnect, device number 4 [ 87.509377][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.526252][ T972] usb 1-1: config 0 descriptor?? [ 87.536393][ T972] pwc: Askey VC010 type 2 USB webcam detected. [ 87.654404][ T6381] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 87.688238][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.705780][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.715732][ T6381] netlink: 'syz.1.129': attribute type 8 has an invalid length. [ 87.737439][ T972] pwc: recv_control_msg error -32 req 02 val 2b00 [ 87.753087][ T972] pwc: recv_control_msg error -32 req 02 val 2700 [ 87.763751][ T972] pwc: recv_control_msg error -32 req 02 val 2c00 [ 87.774837][ T972] pwc: recv_control_msg error -32 req 04 val 1000 [ 87.782942][ T5857] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 87.796018][ T3547] usb 2-1: Failed to submit usb control message: -71 [ 87.810894][ T3547] usb 2-1: unable to send the bmi data to the device: -71 [ 87.819105][ T972] pwc: recv_control_msg error -32 req 04 val 1300 [ 87.834145][ T5857] usb 2-1: USB disconnect, device number 4 [ 87.841279][ T3547] usb 2-1: unable to get target info from device [ 87.847669][ T3547] usb 2-1: could not get target info (-71) [ 87.855891][ T972] pwc: recv_control_msg error -32 req 04 val 1400 [ 87.863437][ T3547] usb 2-1: could not probe fw (-71) [ 87.869955][ T972] pwc: recv_control_msg error -71 req 02 val 2000 [ 87.886149][ T972] pwc: recv_control_msg error -71 req 02 val 2100 [ 87.901821][ T972] pwc: recv_control_msg error -71 req 04 val 1500 [ 87.914987][ T972] pwc: recv_control_msg error -71 req 02 val 2500 [ 87.933889][ T972] pwc: recv_control_msg error -71 req 02 val 2400 [ 87.979434][ T30] audit: type=1400 audit(1743090936.360:346): avc: denied { setopt } for pid=6402 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.009548][ T972] pwc: recv_control_msg error -71 req 02 val 2600 [ 88.017644][ T30] audit: type=1400 audit(1743090936.370:347): avc: denied { bind } for pid=6402 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.039909][ T972] pwc: recv_control_msg error -71 req 02 val 2900 [ 88.077534][ T972] pwc: recv_control_msg error -71 req 02 val 2800 [ 88.090123][ T972] pwc: recv_control_msg error -71 req 04 val 1100 [ 88.105539][ T972] pwc: recv_control_msg error -71 req 04 val 1200 [ 88.121025][ T30] audit: type=1400 audit(1743090936.500:348): avc: denied { getopt } for pid=6404 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.168078][ T6407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6407 comm=syz.0.134 [ 88.193459][ T972] pwc: Registered as video103. [ 88.200837][ T972] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 88.233672][ T30] audit: type=1400 audit(1743090936.550:349): avc: denied { write } for pid=6404 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 88.254806][ T972] usb 1-1: USB disconnect, device number 5 [ 89.076466][ T6435] tipc: Enabling of bearer rejected, failed to enable media [ 89.284237][ T6440] nftables ruleset with unbound set [ 89.760206][ T6440] tipc: Started in network mode [ 89.771415][ T6440] tipc: Node identity 06115f19e691, cluster identity 4711 [ 89.778997][ T6440] tipc: Enabled bearer , priority 0 [ 89.787034][ T6440] syzkaller0: entered promiscuous mode [ 89.793419][ T6440] syzkaller0: entered allmulticast mode [ 89.853897][ T6446] tmpfs: Bad value for 'mpol' [ 89.863132][ T6446] __nla_validate_parse: 45 callbacks suppressed [ 89.863153][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.146'. [ 89.957905][ T6439] tipc: Resetting bearer [ 90.027466][ T6439] tipc: Disabling bearer [ 90.103967][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 90.338838][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 91.452527][ T5857] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.783093][ T5857] usb 4-1: device descriptor read/64, error -71 [ 91.855729][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 91.855746][ T30] audit: type=1400 audit(1743090940.240:355): avc: denied { write } for pid=6490 comm="syz.2.161" path="socket:[10234]" dev="sockfs" ino=10234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.951682][ T6494] veth0_vlan: entered allmulticast mode [ 91.966038][ T6494] veth0_vlan: left promiscuous mode [ 91.973306][ T6494] veth0_vlan: entered promiscuous mode [ 92.801454][ T5857] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 93.144973][ T5857] usb 4-1: device descriptor read/64, error -71 [ 93.184129][ T30] audit: type=1400 audit(1743090941.570:356): avc: denied { create } for pid=6486 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.280538][ T5857] usb usb4-port1: attempt power cycle [ 93.300853][ T30] audit: type=1400 audit(1743090941.680:357): avc: denied { ioctl } for pid=6486 comm="syz.0.160" path="socket:[11267]" dev="sockfs" ino=11267 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.487008][ T30] audit: type=1400 audit(1743090941.740:358): avc: denied { getopt } for pid=6486 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.522801][ T6498] syzkaller0: entered promiscuous mode [ 93.545011][ T6498] syzkaller0: entered allmulticast mode [ 93.546217][ T30] audit: type=1400 audit(1743090941.920:359): avc: denied { create } for pid=6503 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.589364][ T30] audit: type=1400 audit(1743090941.920:360): avc: denied { read } for pid=6503 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 93.670108][ T5857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 93.699950][ T5857] usb 4-1: device descriptor read/8, error -71 [ 93.799765][ T30] audit: type=1400 audit(1743090942.180:361): avc: denied { connect } for pid=6509 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.000216][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 94.385398][ T30] audit: type=1400 audit(1743090942.430:362): avc: denied { write } for pid=6509 comm="iou-sqp-6516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 94.463064][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 94.502561][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.541830][ T24] usb 2-1: Product: syz [ 94.558551][ T24] usb 2-1: Manufacturer: syz [ 94.569548][ T24] usb 2-1: SerialNumber: syz [ 94.621995][ T24] usb 2-1: config 0 descriptor?? [ 94.724043][ T24] usb 2-1: interface 1 not found [ 94.870118][ T5886] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 94.985600][ T24] usb 2-1: USB disconnect, device number 5 [ 95.792116][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 95.807297][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.821604][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 95.854425][ T5886] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 95.866958][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.879498][ T5886] usb 3-1: Product: syz [ 95.888180][ T5886] usb 3-1: Manufacturer: syz [ 95.896615][ T5886] usb 3-1: SerialNumber: syz [ 95.911704][ T5886] usb 3-1: config 0 descriptor?? [ 96.006991][ T30] audit: type=1400 audit(1743090944.390:363): avc: denied { setopt } for pid=6537 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.033088][ T30] audit: type=1400 audit(1743090944.390:364): avc: denied { bind } for pid=6537 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.141071][ T5886] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 96.300157][ T52] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 96.643424][ T6543] netlink: 337 bytes leftover after parsing attributes in process `syz.2.169'. [ 97.086114][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 97.086131][ T30] audit: type=1400 audit(1743090945.030:366): avc: denied { nlmsg_read } for pid=6523 comm="syz.2.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.118150][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 97.192988][ T52] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 97.238819][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.282678][ T52] usb 2-1: Product: syz [ 97.287197][ T52] usb 2-1: Manufacturer: syz [ 97.315127][ T52] usb 2-1: SerialNumber: syz [ 97.390816][ T52] usb 2-1: config 0 descriptor?? [ 97.525709][ T30] audit: type=1400 audit(1743090945.910:367): avc: denied { ioctl } for pid=6545 comm="syz.0.175" path="socket:[10908]" dev="sockfs" ino=10908 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.594111][ T30] audit: type=1400 audit(1743090945.950:368): avc: denied { create } for pid=6547 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.740366][ T30] audit: type=1400 audit(1743090945.950:369): avc: denied { write } for pid=6547 comm="syz.0.177" path="socket:[10920]" dev="sockfs" ino=10920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.764233][ T30] audit: type=1400 audit(1743090946.000:370): avc: denied { unlink } for pid=6550 comm="syz.3.176" name="#1" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.786603][ T30] audit: type=1400 audit(1743090946.020:371): avc: denied { mount } for pid=6550 comm="syz.3.176" name="/" dev="overlay" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.505117][ T24] usb 3-1: USB disconnect, device number 5 [ 98.580367][ T30] audit: type=1400 audit(1743090946.800:372): avc: denied { write } for pid=6537 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.753576][ T30] audit: type=1400 audit(1743090947.140:373): avc: denied { watch } for pid=6563 comm="syz.4.181" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.867450][ T52] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 98.963492][ T52] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 99.020406][ T52] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 99.342604][ T52] usb 2-1: USB disconnect, device number 6 [ 99.563561][ T30] audit: type=1400 audit(1743090947.140:374): avc: denied { watch_sb watch_reads } for pid=6563 comm="syz.4.181" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.864145][ T6575] ======================================================= [ 99.864145][ T6575] WARNING: The mand mount option has been deprecated and [ 99.864145][ T6575] and is ignored by this kernel. Remove the mand [ 99.864145][ T6575] option from the mount to silence this warning. [ 99.864145][ T6575] ======================================================= [ 99.899675][ T6575] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 99.909248][ T6575] VFS: Can't find a romfs filesystem on dev nullb0. [ 99.909248][ T6575] [ 100.195123][ T30] audit: type=1400 audit(1743090948.310:375): avc: denied { listen } for pid=6570 comm="syz.3.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 101.130405][ T52] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.570130][ T52] usb 2-1: Using ep0 maxpacket: 16 [ 101.576710][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.588005][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.597883][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.611069][ T52] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.620188][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.629378][ T52] usb 2-1: config 0 descriptor?? [ 101.729157][ T6599] warning: `syz.4.191' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.800264][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.950196][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 102.012776][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 102.097540][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.243925][ T52] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 102.253152][ T5886] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.270515][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.662921][ T52] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input7 [ 102.680180][ T5886] usb 3-1: Product: syz [ 102.685078][ T5886] usb 3-1: Manufacturer: syz [ 102.689692][ T5886] usb 3-1: SerialNumber: syz [ 102.713222][ T5886] usb 3-1: config 0 descriptor?? [ 102.763581][ T5886] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.799749][ T5886] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 102.869068][ T52] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 103.071275][ T52] usb 2-1: USB disconnect, device number 7 [ 103.780197][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.720969][ T5886] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 104.728109][ T5886] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 104.777000][ T5886] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 104.806151][ T5886] em28xx 3-1:0.0: No AC97 audio processor [ 104.928678][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 104.928696][ T30] audit: type=1400 audit(1743090953.310:378): avc: denied { mount } for pid=6630 comm="syz.3.198" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 105.001606][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 105.016704][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.034884][ T9] usb 5-1: Product: syz [ 105.049430][ T9] usb 5-1: Manufacturer: syz [ 105.062854][ T9] usb 5-1: SerialNumber: syz [ 105.165884][ T9] usb 5-1: config 0 descriptor?? [ 105.179726][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 105.249435][ T30] audit: type=1400 audit(1743090953.610:379): avc: denied { nlmsg_write } for pid=6640 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.308973][ T30] audit: type=1400 audit(1743090953.620:380): avc: denied { name_connect } for pid=6640 comm="syz.3.200" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 105.578707][ T9] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 105.613802][ T6664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6664 comm=syz.1.203 [ 106.323413][ T30] audit: type=1400 audit(1743090954.710:381): avc: denied { shutdown } for pid=6673 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.507109][ T30] audit: type=1400 audit(1743090954.890:382): avc: denied { getopt } for pid=6680 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 106.551843][ T6681] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62497 sclass=netlink_xfrm_socket pid=6681 comm=syz.3.206 [ 106.553517][ T30] audit: type=1326 audit(1743090954.940:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 106.565319][ T6681] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62497 sclass=netlink_xfrm_socket pid=6681 comm=syz.3.206 [ 106.593384][ T30] audit: type=1326 audit(1743090954.940:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 106.600897][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.207'. [ 106.626738][ T30] audit: type=1326 audit(1743090954.940:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 106.664354][ T30] audit: type=1326 audit(1743090954.940:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 106.692865][ T30] audit: type=1326 audit(1743090954.940:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.3.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 106.730320][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 106.901634][ T6694] Bluetooth: MGMT ver 1.23 [ 107.370407][ T5886] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.429983][ T5863] usb 5-1: USB disconnect, device number 7 [ 107.588889][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 171, changing to 7 [ 107.610107][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26371, setting to 1024 [ 107.622578][ T5886] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 107.632195][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.669628][ T5886] usb 2-1: config 0 descriptor?? [ 107.943950][ T5886] ath6kl: Failed to submit usb control message: -71 [ 107.984527][ T5886] ath6kl: unable to send the bmi data to the device: -71 [ 108.032623][ T9] usb 3-1: USB disconnect, device number 6 [ 108.038931][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 108.057353][ T9] em28xx 3-1:0.0: Freeing device [ 108.059044][ T5886] ath6kl: Unable to send get target info: -71 [ 108.082208][ T5886] ath6kl: Failed to init ath6kl core: -71 [ 108.088382][ T5886] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 108.133944][ T6705] input: syz1 as /devices/virtual/input/input9 [ 108.147148][ T5886] usb 2-1: USB disconnect, device number 8 [ 108.843214][ T6721] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.852491][ T6721] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.861778][ T6721] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 108.870855][ T6721] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 109.140801][ T6732] ALSA: mixer_oss: invalid OSS volume '' [ 110.499850][ T6756] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 110.507640][ T6756] UDF-fs: Scanning with blocksize 512 failed [ 110.514253][ T6756] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 110.521841][ T6756] UDF-fs: Scanning with blocksize 1024 failed [ 110.528134][ T6756] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 110.538153][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 110.538165][ T30] audit: type=1400 audit(1743090958.880:394): avc: denied { setopt } for pid=6754 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.629700][ T6756] UDF-fs: Scanning with blocksize 2048 failed [ 110.972195][ T30] audit: type=1400 audit(1743090959.360:395): avc: denied { append } for pid=6740 comm="syz.4.219" name="sg0" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.003401][ T6756] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 111.018350][ T6756] UDF-fs: Scanning with blocksize 4096 failed [ 112.958871][ T30] audit: type=1326 audit(1743090961.340:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6774 comm="syz.0.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12918d169 code=0x7fc00000 [ 113.331776][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 113.541019][ T30] audit: type=1326 audit(1743090961.930:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6792 comm="syz.2.230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8334f8d169 code=0x0 [ 113.928333][ T6804] kAFS: unable to lookup cell '' [ 114.074949][ T6811] FAULT_INJECTION: forcing a failure. [ 114.074949][ T6811] name failslab, interval 1, probability 0, space 0, times 0 [ 114.088049][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz.1.234 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 114.088073][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.088082][ T6811] Call Trace: [ 114.088087][ T6811] [ 114.088093][ T6811] dump_stack_lvl+0x16c/0x1f0 [ 114.088120][ T6811] should_fail_ex+0x512/0x640 [ 114.088138][ T6811] should_failslab+0xc2/0x120 [ 114.088157][ T6811] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 114.088174][ T6811] ? skb_clone+0x190/0x3f0 [ 114.088200][ T6811] skb_clone+0x190/0x3f0 [ 114.088223][ T6811] netlink_deliver_tap+0xabd/0xd30 [ 114.088248][ T6811] netlink_unicast+0x5df/0x7f0 [ 114.088272][ T6811] ? __pfx_netlink_unicast+0x10/0x10 [ 114.088299][ T6811] netlink_sendmsg+0x8da/0xd70 [ 114.088323][ T6811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.088351][ T6811] ____sys_sendmsg+0xa8d/0xc60 [ 114.088370][ T6811] ? copy_msghdr_from_user+0x10a/0x160 [ 114.088393][ T6811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.088419][ T6811] ___sys_sendmsg+0x134/0x1d0 [ 114.088443][ T6811] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.088483][ T6811] __sys_sendmsg+0x16d/0x220 [ 114.088504][ T6811] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.088529][ T6811] ? rcu_is_watching+0x12/0xc0 [ 114.088549][ T6811] do_syscall_64+0xcd/0x260 [ 114.088570][ T6811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.088584][ T6811] RIP: 0033:0x7f41fe18d169 [ 114.088595][ T6811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.088608][ T6811] RSP: 002b:00007f41fef56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.088630][ T6811] RAX: ffffffffffffffda RBX: 00007f41fe3a5fa0 RCX: 00007f41fe18d169 [ 114.088640][ T6811] RDX: 0000000020000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 114.088649][ T6811] RBP: 00007f41fef56090 R08: 0000000000000000 R09: 0000000000000000 [ 114.088658][ T6811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.088667][ T6811] R13: 0000000000000000 R14: 00007f41fe3a5fa0 R15: 00007fffecb15c68 [ 114.088683][ T6811] [ 117.809898][ T30] audit: type=1400 audit(1743090966.190:398): avc: denied { relabelfrom } for pid=6848 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 117.815274][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.240'. [ 117.842469][ T30] audit: type=1400 audit(1743090966.190:399): avc: denied { relabelto } for pid=6848 comm="syz.1.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 118.350247][ T5863] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.512863][ T5863] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.567943][ T5863] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 118.587210][ T5863] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 118.608895][ T5863] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 118.618590][ T5863] usb 4-1: config 13 has no interface number 0 [ 118.627974][ T5863] usb 4-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 118.702210][ T5863] usb 4-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 118.715457][ T5863] usb 4-1: config 13 interface 50 has no altsetting 0 [ 118.724217][ T5863] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 118.733544][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.741579][ T5863] usb 4-1: Product: syz [ 118.745770][ T5863] usb 4-1: Manufacturer: syz [ 118.751852][ T5863] usb 4-1: SerialNumber: syz [ 120.169105][ T6846] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 120.178570][ T30] audit: type=1400 audit(1743090967.400:400): avc: denied { mount } for pid=6863 comm="syz.1.247" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 120.261033][ T30] audit: type=1400 audit(1743090967.400:401): avc: denied { remount } for pid=6863 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 120.288933][ T6846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.298464][ T6846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.324394][ T6846] netlink: 'syz.3.243': attribute type 8 has an invalid length. [ 120.349704][ T30] audit: type=1400 audit(1743090968.730:402): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 120.350835][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.243'. [ 120.379990][ T6867] vlan2: entered promiscuous mode [ 120.385390][ T6867] vlan2: entered allmulticast mode [ 120.411999][ T6867] hsr_slave_1: entered allmulticast mode [ 120.445428][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'. [ 120.458815][ T5863] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 120.469784][ T12] usb 4-1: Failed to submit usb control message: -71 [ 120.490126][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 120.514162][ T5863] usb 4-1: USB disconnect, device number 9 [ 120.524172][ T12] usb 4-1: unable to get target info from device [ 120.544334][ T12] usb 4-1: could not get target info (-71) [ 120.572471][ T12] usb 4-1: could not probe fw (-71) [ 120.688870][ T6867] hsr_slave_1 (unregistering): left allmulticast mode [ 120.820436][ T6867] hsr_slave_1 (unregistering): left promiscuous mode [ 120.969891][ T6879] 9pnet_fd: Insufficient options for proto=fd [ 121.770549][ T6893] FAULT_INJECTION: forcing a failure. [ 121.770549][ T6893] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.783771][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.1.253 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 121.783794][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.783803][ T6893] Call Trace: [ 121.783808][ T6893] [ 121.783815][ T6893] dump_stack_lvl+0x16c/0x1f0 [ 121.783844][ T6893] should_fail_ex+0x512/0x640 [ 121.783864][ T6893] _copy_to_user+0x32/0xd0 [ 121.783884][ T6893] rng_dev_read+0x1fc/0x800 [ 121.783901][ T6893] ? __pfx_virtio_read+0x10/0x10 [ 121.783917][ T6893] ? __pfx_rng_dev_read+0x10/0x10 [ 121.783936][ T6893] ? bpf_lsm_file_permission+0x9/0x10 [ 121.783953][ T6893] ? security_file_permission+0x71/0x210 [ 121.783971][ T6893] ? rw_verify_area+0xcf/0x680 [ 121.783994][ T6893] ? __pfx_rng_dev_read+0x10/0x10 [ 121.784009][ T6893] vfs_readv+0x6bc/0x8a0 [ 121.784029][ T6893] ? get_pid_task+0x106/0x250 [ 121.784057][ T6893] ? __pfx_vfs_readv+0x10/0x10 [ 121.784080][ T6893] ? find_held_lock+0x2b/0x80 [ 121.784108][ T6893] ? __fget_files+0x20e/0x3c0 [ 121.784128][ T6893] ? do_preadv+0x1af/0x270 [ 121.784150][ T6893] do_preadv+0x1af/0x270 [ 121.784173][ T6893] ? __pfx_do_preadv+0x10/0x10 [ 121.784200][ T6893] do_syscall_64+0xcd/0x260 [ 121.784225][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.784241][ T6893] RIP: 0033:0x7f41fe18d169 [ 121.784255][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.784271][ T6893] RSP: 002b:00007f41fef14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 121.784289][ T6893] RAX: ffffffffffffffda RBX: 00007f41fe3a6160 RCX: 00007f41fe18d169 [ 121.784300][ T6893] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 121.784310][ T6893] RBP: 00007f41fef14090 R08: 0000000000000002 R09: 0000000000000000 [ 121.784321][ T6893] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000002 [ 121.784331][ T6893] R13: 0000000000000000 R14: 00007f41fe3a6160 R15: 00007fffecb15c68 [ 121.784350][ T6893] [ 122.199136][ T6898] veth1_macvtap: left promiscuous mode [ 122.205421][ T6898] macsec0: entered promiscuous mode [ 122.448816][ T30] audit: type=1400 audit(1743090970.830:403): avc: denied { map } for pid=6894 comm="syz.2.254" path="socket:[12753]" dev="sockfs" ino=12753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 122.480351][ T30] audit: type=1400 audit(1743090970.830:404): avc: denied { read accept } for pid=6894 comm="syz.2.254" path="socket:[12753]" dev="sockfs" ino=12753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 123.674236][ T30] audit: type=1400 audit(1743090972.030:405): avc: denied { connect } for pid=6913 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 123.734358][ T30] audit: type=1400 audit(1743090972.030:406): avc: denied { write } for pid=6913 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 124.010157][ T5864] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.410146][ T5857] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 124.450185][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 124.468712][ T5864] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 124.478208][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.489990][ T5864] usb 5-1: config 0 descriptor?? [ 124.497439][ T5864] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 124.571611][ T5857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.606225][ T5857] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 124.633548][ T5857] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 124.655662][ T30] audit: type=1400 audit(1743090973.040:407): avc: denied { create } for pid=6919 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 124.676110][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.682486][ T5857] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 124.692350][ T5857] usb 4-1: config 13 has no interface number 0 [ 124.698551][ T5857] usb 4-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 124.709230][ T5857] usb 4-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 124.720153][ T5886] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.734364][ T5857] usb 4-1: config 13 interface 50 has no altsetting 0 [ 124.745509][ T5857] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 124.758713][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.770653][ T5857] usb 4-1: Product: syz [ 124.774880][ T5857] usb 4-1: Manufacturer: syz [ 124.779552][ T5857] usb 4-1: SerialNumber: syz [ 124.855917][ T6941] xt_nat: multiple ranges no longer supported [ 124.903700][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.914601][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.978772][ T5886] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.988544][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.997550][ T5886] usb 3-1: SerialNumber: syz [ 125.000363][ T6928] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 125.047542][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 125.110614][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.131802][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.159910][ T6928] netlink: 'syz.3.265': attribute type 8 has an invalid length. [ 125.168747][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.265'. [ 125.220224][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 125.248208][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 125.319587][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.349729][ T5857] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 125.373144][ T1334] usb 4-1: Failed to submit usb control message: -71 [ 125.406255][ T1334] usb 4-1: unable to send the bmi data to the device: -71 [ 125.422739][ T5857] usb 4-1: USB disconnect, device number 10 [ 125.433686][ T1334] usb 4-1: unable to get target info from device [ 125.449052][ T1334] usb 4-1: could not get target info (-71) [ 125.466170][ T1334] usb 4-1: could not probe fw (-71) [ 125.525209][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 125.529092][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.536617][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.555338][ T24] usb 2-1: Product: syz [ 125.562971][ T24] usb 2-1: Manufacturer: syz [ 125.566581][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.568617][ T24] usb 2-1: SerialNumber: syz [ 125.650335][ T5864] gspca_vc032x: reg_w err -110 [ 125.655217][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.661086][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.666414][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.677388][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.689911][ T24] usb 2-1: config 0 descriptor?? [ 125.698012][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.965608][ T5886] usb 3-1: skipping empty audio interface (v1) [ 125.973199][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 125.982511][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.987802][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 125.998762][ T24] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 126.006206][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.017575][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.026952][ T5886] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 126.037824][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.043776][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.049086][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.056317][ T5886] usb 3-1: USB disconnect, device number 7 [ 126.064382][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.069721][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.075905][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.081731][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.087021][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.092347][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.097630][ T5864] gspca_vc032x: Unknown sensor... [ 126.102878][ T5864] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 126.220990][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.270186][ T5857] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 126.420835][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 126.438640][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 126.441701][ T5857] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 126.456395][ T24] em28xx 2-1:0.0: Config register raw data: 0x41 [ 126.524937][ T5857] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 126.626434][ T5857] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 126.812700][ T5857] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 126.826881][ T5857] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.835146][ T5857] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 126.844938][ T5857] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 126.853411][ T5857] usb 4-1: Product: syz [ 126.857593][ T5857] usb 4-1: Manufacturer: syz [ 126.862458][ T5857] usb 4-1: SerialNumber: syz [ 126.868314][ T5857] usb 4-1: config 0 descriptor?? [ 126.874714][ T5857] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 127.346158][ T9] usb 5-1: USB disconnect, device number 8 [ 127.360412][ T6952] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 127.372054][ T6952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.377027][ T5857] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 127.420548][ T5864] usb 4-1: USB disconnect, device number 11 [ 127.427558][ T5864] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 127.879347][ T30] audit: type=1400 audit(1743090976.260:408): avc: denied { setopt } for pid=6967 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.880742][ T6968] vivid-000: disconnect [ 127.918899][ T6967] vivid-000: reconnect [ 127.950846][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.276'. [ 127.991929][ T6972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=6972 comm=syz.2.277 [ 128.029127][ T6974] netlink: 4344 bytes leftover after parsing attributes in process `syz.2.278'. [ 128.262073][ T30] audit: type=1400 audit(1743090976.640:409): avc: denied { write } for pid=6973 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.476306][ T5857] usb 2-1: USB disconnect, device number 9 [ 128.483092][ T5857] em28xx 2-1:0.0: Disconnecting em28xx [ 128.490555][ T5857] em28xx 2-1:0.0: Freeing device [ 128.920125][ T5885] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 129.147640][ T5857] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 129.230751][ T5885] usb 5-1: Using ep0 maxpacket: 16 [ 129.327700][ T5857] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 129.337496][ T5857] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 129.354580][ T5857] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 129.354842][ T5885] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 129.386964][ T5885] usb 5-1: config 0 has no interface number 0 [ 129.401523][ T5857] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 129.412692][ T5885] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 129.440137][ T5885] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 129.450783][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.461862][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 129.487177][ T5885] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 129.497601][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.506262][ T5857] usb 2-1: string descriptor 0 read error: -22 [ 129.512598][ T5857] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 129.522731][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.530858][ T5885] usb 5-1: Product: syz [ 129.536517][ T5857] usb 2-1: config 0 descriptor?? [ 129.571030][ T5885] usb 5-1: Manufacturer: syz [ 129.586366][ T5857] hub 2-1:0.0: bad descriptor, ignoring hub [ 129.595819][ T5885] usb 5-1: SerialNumber: syz [ 129.600912][ T5857] hub 2-1:0.0: probe with driver hub failed with error -5 [ 129.623478][ T5885] usb 5-1: config 0 descriptor?? [ 129.634486][ T6989] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.646227][ T6989] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.780576][ T30] audit: type=1400 audit(1743090978.170:410): avc: denied { setopt } for pid=7000 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.049015][ T6989] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 130.056480][ T30] audit: type=1400 audit(1743090978.170:411): avc: denied { connect } for pid=7000 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.089289][ T6989] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 130.586837][ T30] audit: type=1400 audit(1743090978.170:412): avc: denied { connect } for pid=7000 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.712594][ T24] usb 2-1: USB disconnect, device number 10 [ 130.809303][ T7007] FAULT_INJECTION: forcing a failure. [ 130.809303][ T7007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.827090][ T7007] CPU: 0 UID: 0 PID: 7007 Comm: syz.2.287 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 130.827115][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.827123][ T7007] Call Trace: [ 130.827128][ T7007] [ 130.827133][ T7007] dump_stack_lvl+0x16c/0x1f0 [ 130.827159][ T7007] should_fail_ex+0x512/0x640 [ 130.827180][ T7007] _copy_from_user+0x2e/0xd0 [ 130.827197][ T7007] move_addr_to_kernel+0x74/0x160 [ 130.827217][ T7007] __sys_connect+0xaf/0x170 [ 130.827236][ T7007] ? __pfx___sys_connect+0x10/0x10 [ 130.827261][ T7007] ? xfd_validate_state+0x5d/0x180 [ 130.827280][ T7007] __x64_sys_connect+0x72/0xb0 [ 130.827297][ T7007] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.827316][ T7007] do_syscall_64+0xcd/0x260 [ 130.827338][ T7007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.827353][ T7007] RIP: 0033:0x7f8334f8d169 [ 130.827365][ T7007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.827380][ T7007] RSP: 002b:00007f8332dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 130.827398][ T7007] RAX: ffffffffffffffda RBX: 00007f83351a6080 RCX: 00007f8334f8d169 [ 130.827409][ T7007] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000008 [ 130.827418][ T7007] RBP: 00007f8332dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 130.827427][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.827436][ T7007] R13: 0000000000000000 R14: 00007f83351a6080 R15: 00007fff2f7b8c48 [ 130.827452][ T7007] [ 131.230291][ T5885] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 131.327969][ T5885] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 131.340916][ T5885] asix 5-1:0.251: probe with driver asix failed with error -71 [ 131.884373][ T5885] usb 5-1: USB disconnect, device number 9 [ 132.109346][ T7017] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 132.116033][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.151607][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 132.280934][ T7022] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 132.287493][ T7022] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 132.297611][ T7017] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 132.304138][ T7017] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 132.316912][ T7022] vhci_hcd vhci_hcd.0: Device attached [ 132.316978][ T7017] vhci_hcd vhci_hcd.0: Device attached [ 132.442187][ T5857] vhci_hcd: vhci_device speed not set [ 132.475456][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.481853][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.495016][ T30] audit: type=1400 audit(1743090980.880:413): avc: denied { setopt } for pid=7034 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 132.514797][ T5857] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 132.585082][ T30] audit: type=1400 audit(1743090980.910:414): avc: denied { getopt } for pid=7037 comm="syz.1.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.672421][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.740106][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.820102][ T5864] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.841417][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.851625][ T24] usb 4-1: config 0 has no interfaces? [ 132.857187][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 132.866290][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.886871][ T24] usb 4-1: config 0 descriptor?? [ 132.902520][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 132.913836][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 132.926345][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.937157][ T9] usb 5-1: config 0 descriptor?? [ 132.949691][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 132.957261][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 132.960148][ T5864] usb 2-1: device descriptor read/64, error -71 [ 133.153938][ T9] usb 5-1: USB disconnect, device number 10 [ 133.212094][ T5864] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 133.327858][ T30] audit: type=1400 audit(1743090981.710:415): avc: denied { shutdown } for pid=7041 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.400339][ T5864] usb 2-1: device descriptor read/64, error -71 [ 133.510477][ T5864] usb usb2-port1: attempt power cycle [ 133.660157][ T5906] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.822803][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 133.885766][ T5864] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 133.901421][ T5906] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 133.910191][ T5906] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 133.912303][ T5864] usb 2-1: device descriptor read/8, error -71 [ 133.921322][ T5906] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 133.938555][ T5906] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 133.951798][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 134.160285][ T5864] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.202189][ T5864] usb 2-1: device descriptor read/8, error -71 [ 134.362607][ T5906] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 134.369553][ T5864] usb usb2-port1: unable to enumerate USB device [ 134.371866][ T5906] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 134.387420][ T5906] usb 3-1: Product: syz [ 134.391603][ T5906] usb 3-1: Manufacturer: syz [ 134.396197][ T5906] usb 3-1: SerialNumber: syz [ 134.401651][ T5906] usb 3-1: config 0 descriptor?? [ 134.410516][ T5906] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 134.423987][ T5906] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 134.759991][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.775021][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.095148][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.298'. [ 136.201023][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 136.230171][ T5864] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 136.268162][ T7026] vhci_hcd: connection closed [ 136.269846][ T7023] vhci_hcd: connection closed [ 136.279359][ T7018] vhci_hcd: connection reset by peer [ 136.293602][ T5906] usb 4-1: USB disconnect, device number 12 [ 136.305135][ T309] vhci_hcd: stop threads [ 136.315261][ T309] vhci_hcd: release socket [ 136.323434][ T309] vhci_hcd: disconnect device [ 136.328648][ T309] vhci_hcd: stop threads [ 136.337175][ T309] vhci_hcd: release socket [ 136.343127][ T309] vhci_hcd: disconnect device [ 136.349262][ T309] vhci_hcd: stop threads [ 136.356866][ T309] vhci_hcd: release socket [ 136.366809][ T309] vhci_hcd: disconnect device [ 136.710616][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 136.982790][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 137.003483][ T5864] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 137.013171][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.021572][ T5864] usb 5-1: Product: syz [ 137.026208][ T5864] usb 5-1: Manufacturer: syz [ 137.031122][ T5864] usb 5-1: SerialNumber: syz [ 137.044527][ T5864] usb 5-1: config 0 descriptor?? [ 137.064755][ T5864] hub 5-1:0.0: bad descriptor, ignoring hub [ 137.070794][ T5864] hub 5-1:0.0: probe with driver hub failed with error -5 [ 137.087427][ T5864] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 137.104357][ T5864] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 137.272161][ T5864] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 137.321364][ T5864] usb 5-1: USB disconnect, device number 11 [ 137.630291][ T5857] vhci_hcd: vhci_device speed not set [ 138.791716][ T5906] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 138.918142][ T7099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 139.023538][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 139.042108][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 139.053912][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 139.075431][ T5906] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 139.102068][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.114440][ T5906] usb 5-1: Product: syz [ 139.118765][ T5906] usb 5-1: Manufacturer: syz [ 139.123764][ T5906] usb 5-1: SerialNumber: syz [ 139.131235][ T5906] usb 5-1: config 0 descriptor?? [ 139.144838][ T5906] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 139.170697][ T5906] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 139.310169][ T52] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 139.482654][ T52] usb 4-1: Using ep0 maxpacket: 8 [ 139.493891][ T52] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.504192][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.512493][ T52] usb 4-1: Product: syz [ 139.520081][ T52] usb 4-1: Manufacturer: syz [ 139.524721][ T52] usb 4-1: SerialNumber: syz [ 139.538274][ T52] usb 4-1: config 0 descriptor?? [ 139.597343][ T30] audit: type=1400 audit(1743090987.980:416): avc: denied { ioctl } for pid=7109 comm="syz.0.316" path="socket:[13872]" dev="sockfs" ino=13872 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 139.742634][ T5906] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 139.751637][ T5906] em28xx 5-1:0.0: Config register raw data: 0x41 [ 139.794927][ T52] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.941740][ T7052] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 140.109390][ T5857] usb 3-1: USB disconnect, device number 8 [ 140.121821][ T5857] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 140.251169][ T7119] syzkaller1: entered promiscuous mode [ 140.257628][ T7119] syzkaller1: entered allmulticast mode [ 141.227033][ T5857] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 141.420241][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 141.540660][ T5857] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.644208][ T24] usb 5-1: USB disconnect, device number 12 [ 141.673069][ T24] em28xx 5-1:0.0: Disconnecting em28xx [ 141.682663][ T5857] usb 2-1: config 1 interface 0 has no altsetting 0 [ 141.701248][ T24] em28xx 5-1:0.0: Freeing device [ 141.707566][ T5857] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 141.810640][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.842725][ T5857] usb 2-1: Product: syz [ 141.846941][ T5857] usb 2-1: Manufacturer: syz [ 142.057114][ T52] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 142.233334][ T5857] usb 2-1: SerialNumber: syz [ 142.247182][ T52] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 142.267986][ T52] usb 4-1: media controller created [ 142.315679][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.343879][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'. [ 142.418345][ T52] i2c i2c-1: Added multiplexed i2c bus 2 [ 142.425805][ T52] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 142.455739][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.458811][ T52] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 142.480357][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.493920][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.496312][ T52] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 142.515113][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.526975][ T30] audit: type=1400 audit(1743090990.910:417): avc: denied { ioctl } for pid=7122 comm="syz.1.319" path="socket:[14003]" dev="sockfs" ino=14003 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 142.556185][ T5857] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 142.578038][ T5857] usb 2-1: USB disconnect, device number 15 [ 142.655446][ T52] DVB: Unable to find symbol r820t_attach() [ 142.871077][ T5886] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.889965][ T52] usb 4-1: USB disconnect, device number 13 [ 142.896364][ T30] audit: type=1400 audit(1743090991.280:418): avc: denied { append } for pid=7163 comm="syz.3.330" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 143.014548][ T30] audit: type=1400 audit(1743090991.400:419): avc: denied { read } for pid=7163 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.050135][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 143.063024][ T5886] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 143.073688][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.082773][ T5886] usb 5-1: can't read configurations, error -61 [ 143.220406][ T5886] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 143.236158][ T30] audit: type=1400 audit(1743090991.620:420): avc: denied { connect } for pid=7168 comm="syz.0.332" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.272173][ T7170] sp0: Synchronizing with TNC [ 143.281798][ T30] audit: type=1400 audit(1743090991.630:421): avc: denied { getopt } for pid=7166 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.304360][ T30] audit: type=1400 audit(1743090991.680:422): avc: denied { create } for pid=7166 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 143.346230][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 143.347317][ T30] audit: type=1400 audit(1743090991.730:423): avc: denied { write } for pid=7166 comm="syz.1.331" path="socket:[13305]" dev="sockfs" ino=13305 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.410232][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 143.427941][ T5886] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 143.466494][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.478048][ T5886] usb 5-1: can't read configurations, error -61 [ 143.500506][ T5886] usb usb5-port1: attempt power cycle [ 144.240559][ T5886] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 144.312550][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 144.314600][ T30] audit: type=1400 audit(1743091445.631:424): avc: denied { nlmsg_write } for pid=7175 comm="syz.2.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 144.422988][ T5886] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 144.456833][ T5886] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.501578][ T5886] usb 5-1: can't read configurations, error -61 [ 144.630048][ T7184] ptrace attach of "./syz-executor exec"[5821] was attempted by "./syz-executor exec"[7184] [ 144.886381][ T5886] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 144.933063][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 145.941916][ T5886] usb 5-1: device descriptor read/all, error -71 [ 145.949491][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 145.958362][ T7188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.337'. [ 145.969087][ T5886] usb usb5-port1: unable to enumerate USB device [ 146.325483][ T7203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.342'. [ 146.895101][ T7212] input: syz0 as /devices/virtual/input/input11 [ 146.900274][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 147.342822][ T30] audit: type=1400 audit(1743091448.341:425): avc: denied { override_creds } for pid=7197 comm="syz.2.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 148.432726][ T30] audit: type=1400 audit(1743091449.741:426): avc: denied { setopt } for pid=7216 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 148.456921][ T7219] dlm: non-version read from control device 36 [ 148.488076][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.616285][ T24] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 148.630102][ T24] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 148.640495][ T24] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 148.650600][ T24] usb 2-1: config 13 has no interface number 0 [ 148.664492][ T24] usb 2-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 148.678312][ T24] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 148.700259][ T24] usb 2-1: config 13 interface 50 has no altsetting 0 [ 148.711949][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 148.721328][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.729440][ T24] usb 2-1: Product: syz [ 148.747973][ T24] usb 2-1: Manufacturer: syz [ 148.755607][ T24] usb 2-1: SerialNumber: syz [ 148.793674][ T30] audit: type=1400 audit(1743091450.171:427): avc: denied { create } for pid=7216 comm="syz.4.346" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 149.041465][ T7206] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 149.096732][ T30] audit: type=1400 audit(1743091450.361:428): avc: denied { read } for pid=7228 comm="syz.4.349" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 149.345532][ T7206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.380285][ T30] audit: type=1400 audit(1743091450.361:429): avc: denied { open } for pid=7228 comm="syz.4.349" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 149.426761][ T7206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.440368][ T30] audit: type=1400 audit(1743091450.421:430): avc: denied { read } for pid=7228 comm="syz.4.349" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.466330][ T7206] netlink: 'syz.1.343': attribute type 8 has an invalid length. [ 149.518118][ T30] audit: type=1400 audit(1743091450.421:431): avc: denied { open } for pid=7228 comm="syz.4.349" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.557371][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.343'. [ 149.586230][ T30] audit: type=1400 audit(1743091450.421:432): avc: denied { ioctl } for pid=7228 comm="syz.4.349" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 149.626437][ T30] audit: type=1400 audit(1743091450.441:433): avc: denied { create } for pid=7228 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.657858][ T30] audit: type=1400 audit(1743091450.461:434): avc: denied { ioctl } for pid=7228 comm="syz.4.349" path="socket:[14134]" dev="sockfs" ino=14134 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 149.694288][ T3547] usb 2-1: Failed to submit usb control message: -71 [ 149.705737][ T3547] usb 2-1: unable to send the bmi data to the device: -71 [ 149.724191][ T3547] usb 2-1: unable to get target info from device [ 149.737300][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 149.767339][ T3547] usb 2-1: could not get target info (-71) [ 149.806683][ T3547] usb 2-1: could not probe fw (-71) [ 149.828675][ T24] usb 2-1: USB disconnect, device number 16 [ 149.926300][ T7241] netlink: 'syz.3.351': attribute type 8 has an invalid length. [ 149.930854][ T7242] overlayfs: overlapping lowerdir path [ 149.971633][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 150.256597][ T5857] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.550080][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 150.556697][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 150.576622][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.604906][ T5857] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.708296][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.723662][ T5857] usb 3-1: Product: syz [ 150.736516][ T5857] usb 3-1: Manufacturer: syz [ 150.741998][ T5857] usb 3-1: SerialNumber: syz [ 151.302514][ T5857] usb 3-1: config 0 descriptor?? [ 151.359328][ T5857] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 151.370097][ T5857] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 152.323686][ T5857] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 152.330505][ T5857] em28xx 3-1:0.0: Config register raw data: 0x41 [ 152.648909][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 152.648924][ T30] audit: type=1400 audit(1743091454.031:481): avc: denied { create } for pid=7279 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.115126][ T30] audit: type=1400 audit(1743091454.101:482): avc: denied { ioctl } for pid=7279 comm="syz.3.364" path="socket:[14666]" dev="sockfs" ino=14666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.168065][ T30] audit: type=1400 audit(1743091454.111:483): avc: denied { create } for pid=7279 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.232167][ T30] audit: type=1400 audit(1743091454.131:484): avc: denied { getopt } for pid=7279 comm="syz.3.364" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.313416][ T30] audit: type=1400 audit(1743091454.551:485): avc: denied { module_request } for pid=7284 comm="syz.4.365" kmod="net-pf-2-proto-8-type-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 153.396679][ T30] audit: type=1400 audit(1743091454.601:486): avc: denied { connect } for pid=7284 comm="syz.4.365" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 153.460553][ T30] audit: type=1400 audit(1743091454.731:487): avc: denied { create } for pid=7279 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.539354][ T7289] syz.3.364 (7289) used greatest stack depth: 20424 bytes left [ 153.567298][ T30] audit: type=1400 audit(1743091454.731:488): avc: denied { write } for pid=7279 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.600279][ T30] audit: type=1400 audit(1743091454.731:489): avc: denied { nlmsg_write } for pid=7279 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.621429][ T30] audit: type=1400 audit(1743091454.731:490): avc: denied { write } for pid=7279 comm="syz.3.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.648385][ T7303] Invalid ELF header len 18 [ 153.978453][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'. [ 154.216703][ T24] usb 3-1: USB disconnect, device number 9 [ 154.228247][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 154.247107][ T24] em28xx 3-1:0.0: Freeing device [ 154.526946][ T5857] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 154.669766][ T7329] hub 9-0:1.0: USB hub found [ 154.676406][ T7329] hub 9-0:1.0: 1 port detected [ 154.770105][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 154.819023][ T5857] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 154.885300][ T5857] usb 4-1: config 0 has no interface number 0 [ 154.945928][ T5857] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 155.069612][ T5857] usb 4-1: config 0 interface 85 has no altsetting 0 [ 155.080913][ T5857] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 155.092572][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.103024][ T5857] usb 4-1: Product: syz [ 155.107505][ T5857] usb 4-1: Manufacturer: syz [ 155.116496][ T5857] usb 4-1: SerialNumber: syz [ 155.125742][ T5857] usb 4-1: config 0 descriptor?? [ 155.371849][ T7309] fuse: Bad value for 'fd' [ 155.425183][ T5857] appletouch 4-1:0.85: Failed to read mode from device. [ 155.475429][ T5857] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 155.511682][ T5857] usb 4-1: USB disconnect, device number 14 [ 155.711314][ T7342] netlink: 'syz.0.383': attribute type 10 has an invalid length. [ 155.841392][ T7349] infiniband syz1: set active [ 155.846203][ T7349] infiniband syz1: added syz_tun [ 155.867772][ T7349] RDS/IB: syz1: added [ 155.872127][ T7349] smc: adding ib device syz1 with port count 1 [ 155.878446][ T7349] smc: ib device syz1 port 1 has pnetid [ 156.755827][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 156.765777][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 156.765802][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.765813][ T54] Workqueue: hci1 hci_rx_work [ 156.765834][ T54] Call Trace: [ 156.765840][ T54] [ 156.765846][ T54] dump_stack_lvl+0x16c/0x1f0 [ 156.765869][ T54] sysfs_warn_dup+0x7f/0xa0 [ 156.765894][ T54] sysfs_create_dir_ns+0x24b/0x2b0 [ 156.765918][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 156.765943][ T54] ? find_held_lock+0x2b/0x80 [ 156.765963][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 156.765990][ T54] kobject_add_internal+0x2c4/0x9b0 [ 156.766019][ T54] kobject_add+0x16e/0x240 [ 156.766032][ T54] ? __pfx_kobject_add+0x10/0x10 [ 156.766047][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 156.766073][ T54] ? kobject_put+0xab/0x5a0 [ 156.766100][ T54] device_add+0x288/0x1a70 [ 156.766125][ T54] ? __pfx_dev_set_name+0x10/0x10 [ 156.766140][ T54] ? __pfx_device_add+0x10/0x10 [ 156.766164][ T54] ? mgmt_send_event_skb+0x2fb/0x460 [ 156.766196][ T54] hci_conn_add_sysfs+0x17e/0x230 [ 156.766215][ T54] le_conn_complete_evt+0x1075/0x1d70 [ 156.766242][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 156.766265][ T54] ? hci_event_packet+0x43c/0x1190 [ 156.766294][ T54] hci_le_conn_complete_evt+0x23c/0x370 [ 156.766323][ T54] hci_le_meta_evt+0x2f3/0x5e0 [ 156.766346][ T54] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 156.766375][ T54] hci_event_packet+0x669/0x1190 [ 156.766400][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 156.766415][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 156.766438][ T54] ? kcov_remote_start+0x3c9/0x6d0 [ 156.766459][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.766484][ T54] hci_rx_work+0x2c5/0x16b0 [ 156.766501][ T54] ? rcu_is_watching+0x12/0xc0 [ 156.766520][ T54] process_one_work+0x9cc/0x1b70 [ 156.766542][ T54] ? __pfx_process_one_work+0x10/0x10 [ 156.766564][ T54] ? assign_work+0x1a0/0x250 [ 156.766588][ T54] worker_thread+0x6c1/0xef0 [ 156.766612][ T54] ? __pfx_worker_thread+0x10/0x10 [ 156.766628][ T54] kthread+0x3a4/0x760 [ 156.766652][ T54] ? __pfx_kthread+0x10/0x10 [ 156.766670][ T54] ? __pfx_kthread+0x10/0x10 [ 156.766691][ T54] ? __pfx_kthread+0x10/0x10 [ 156.766712][ T54] ? __pfx_kthread+0x10/0x10 [ 156.766732][ T54] ? rcu_is_watching+0x12/0xc0 [ 156.766747][ T54] ? __pfx_kthread+0x10/0x10 [ 156.766775][ T54] ret_from_fork+0x45/0x80 [ 156.766790][ T54] ? __pfx_kthread+0x10/0x10 [ 156.766818][ T54] ret_from_fork_asm+0x1a/0x30 [ 156.766851][ T54] [ 156.767701][ T54] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.037155][ T54] Bluetooth: hci1: failed to register connection device [ 157.314596][ T7385] ALSA: mixer_oss: invalid OSS volume '' [ 157.470205][ T5863] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 157.700631][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 157.700646][ T30] audit: type=1400 audit(1743091459.081:558): avc: denied { search } for pid=5483 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=15571 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 157.749899][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.200128][ T5863] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 158.217698][ T5863] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 158.311286][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.319433][ T30] audit: type=1400 audit(1743091459.601:559): avc: denied { create } for pid=7398 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 158.343230][ T5863] usb 5-1: config 0 descriptor?? [ 158.769161][ T5863] ath6kl: Failed to submit usb control message: -71 [ 158.792108][ T5863] ath6kl: unable to send the bmi data to the device: -71 [ 158.822530][ T30] audit: type=1400 audit(1743091460.211:560): avc: denied { create } for pid=7408 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 158.823810][ T5863] ath6kl: Unable to send get target info: -71 [ 158.872476][ T5863] ath6kl: Failed to init ath6kl core: -71 [ 158.878636][ T5863] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 159.182295][ T5863] usb 5-1: USB disconnect, device number 17 [ 159.407516][ T7421] netlink: 'syz.3.402': attribute type 10 has an invalid length. [ 159.408389][ T30] audit: type=1400 audit(1743091460.761:561): avc: denied { getopt } for pid=7408 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.566617][ T7421] macvlan0: entered promiscuous mode [ 159.580174][ T7421] macvlan0: entered allmulticast mode [ 159.588747][ T7421] veth1_vlan: entered allmulticast mode [ 159.602450][ T7421] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 159.779426][ T30] audit: type=1400 audit(1743091461.161:562): avc: denied { watch watch_reads } for pid=7430 comm="syz.0.404" path="/91" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 160.434779][ T30] audit: type=1400 audit(1743091461.411:563): avc: denied { create } for pid=7437 comm="syz.3.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.511979][ T30] audit: type=1326 audit(1743091461.821:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fe18d169 code=0x7ffc0000 [ 160.535973][ T30] audit: type=1326 audit(1743091461.821:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41fe18bad0 code=0x7ffc0000 [ 160.559330][ T30] audit: type=1326 audit(1743091461.821:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41fe18d169 code=0x7ffc0000 [ 160.610799][ T30] audit: type=1326 audit(1743091461.851:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7439 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41fe18d169 code=0x7ffc0000 [ 160.884304][ T5906] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 161.031136][ T5906] usb 5-1: device descriptor read/64, error -71 [ 161.375905][ T5906] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 161.432768][ T5885] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 161.903009][ T7494] No control pipe specified [ 161.929235][ T7494] overlayfs: failed to resolve './cgroup': -2 [ 161.935543][ T5906] usb 5-1: device descriptor read/64, error -71 [ 162.002677][ T7501] netlink: 112 bytes leftover after parsing attributes in process `syz.0.415'. [ 162.020187][ T5885] usb 2-1: device descriptor read/64, error -71 [ 162.062467][ T5906] usb usb5-port1: attempt power cycle [ 162.146849][ T7512] netlink: 'syz.2.418': attribute type 10 has an invalid length. [ 162.156027][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.164377][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.188754][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.195850][ T7512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.203231][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.210157][ T5857] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 162.210331][ T7512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.229859][ T7512] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 162.280199][ T5885] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 162.380178][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 162.391591][ T5857] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.402552][ T5857] usb 4-1: config 0 has no interface number 0 [ 162.410194][ T5906] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 162.421159][ T5885] usb 2-1: device descriptor read/64, error -71 [ 162.432341][ T5857] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 162.441846][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.449840][ T5857] usb 4-1: Product: syz [ 162.455441][ T5906] usb 5-1: device descriptor read/8, error -71 [ 162.462101][ T5857] usb 4-1: Manufacturer: syz [ 162.466881][ T5857] usb 4-1: SerialNumber: syz [ 162.474762][ T5857] usb 4-1: config 0 descriptor?? [ 162.483815][ T5857] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 162.579108][ T5885] usb usb2-port1: attempt power cycle [ 162.692913][ T5857] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 162.706217][ T5857] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 162.708124][ T7523] netlink: 28 bytes leftover after parsing attributes in process `syz.2.422'. [ 162.715655][ T5906] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 162.762444][ T5906] usb 5-1: device descriptor read/8, error -71 [ 162.870436][ T5906] usb usb5-port1: unable to enumerate USB device [ 162.893460][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.902351][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.929413][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 105 [ 162.939130][ T5885] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 162.970141][ T5863] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 162.978087][ T5885] usb 2-1: device descriptor read/8, error -71 [ 163.100210][ T5863] usb 3-1: device descriptor read/64, error -71 [ 163.150947][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 163.151123][ T52] usb 4-1: USB disconnect, device number 15 [ 163.169621][ T52] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 163.184909][ T52] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 163.201800][ T52] quatech2 4-1:0.51: device disconnected [ 163.220647][ T5885] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 163.241105][ T5885] usb 2-1: device descriptor read/8, error -71 [ 163.340129][ T5863] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 163.350570][ T5885] usb usb2-port1: unable to enumerate USB device [ 163.470137][ T5863] usb 3-1: device descriptor read/64, error -71 [ 163.580226][ T5863] usb usb3-port1: attempt power cycle [ 163.642838][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 163.642853][ T30] audit: type=1400 audit(1743091465.031:588): avc: denied { execute } for pid=7525 comm="syz.4.423" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 163.772944][ T30] audit: type=1400 audit(1743091465.161:589): avc: denied { load_policy } for pid=7528 comm="syz.3.424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 163.793756][ T7529] SELinux: failed to load policy [ 163.920181][ T5863] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 164.012367][ T5863] usb 3-1: device descriptor read/8, error -71 [ 164.049162][ T30] audit: type=1326 audit(1743091465.431:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 164.118974][ T30] audit: type=1326 audit(1743091465.431:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 164.154836][ T30] audit: type=1326 audit(1743091465.431:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 164.178437][ T30] audit: type=1326 audit(1743091465.431:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 164.202925][ T30] audit: type=1326 audit(1743091465.431:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 164.227560][ T30] audit: type=1326 audit(1743091465.461:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 164.251274][ T5863] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 164.258885][ T30] audit: type=1326 audit(1743091465.461:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 164.286797][ T30] audit: type=1326 audit(1743091465.461:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7535 comm="syz.3.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66318d169 code=0x7ffc0000 [ 164.310517][ T5863] usb 3-1: device descriptor read/8, error -71 [ 164.420318][ T5863] usb usb3-port1: unable to enumerate USB device [ 164.510948][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 164.682068][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.690876][ T5906] usb 2-1: config 13 has an invalid interface number: 50 but max is 3 [ 164.699077][ T5906] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 164.709399][ T5906] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 164.718452][ T5906] usb 2-1: config 13 has no interface number 0 [ 164.724760][ T5906] usb 2-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 164.734774][ T5906] usb 2-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 164.749215][ T5906] usb 2-1: config 13 interface 50 has no altsetting 0 [ 164.788702][ T5906] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 164.798958][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.809672][ T5906] usb 2-1: Product: syz [ 164.815093][ T5906] usb 2-1: Manufacturer: syz [ 164.819771][ T5906] usb 2-1: SerialNumber: syz [ 165.006808][ T7547] ALSA: mixer_oss: invalid OSS volume '' [ 165.148114][ T7540] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 165.173413][ T7550] SELinux: Context system_u:object_r:auditd_unit_file_t:s0 is not valid (left unmapped). [ 165.187830][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.219207][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.246283][ T7540] netlink: 'syz.1.428': attribute type 8 has an invalid length. [ 165.258575][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.428'. [ 165.440872][ T5906] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 166.257854][ T6559] usb 2-1: Failed to submit usb control message: -71 [ 166.364730][ T5906] usb 2-1: USB disconnect, device number 21 [ 166.376097][ T6559] usb 2-1: unable to send the bmi data to the device: -71 [ 166.384047][ T6559] usb 2-1: unable to get target info from device [ 166.392801][ T6559] usb 2-1: could not get target info (-71) [ 166.398642][ T6559] usb 2-1: could not probe fw (-71) [ 166.937452][ T7585] dccp_invalid_packet: P.Data Offset(243) too large [ 167.134354][ T7591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 168.605156][ T7632] netlink: 44 bytes leftover after parsing attributes in process `syz.1.454'. [ 169.076681][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 169.732982][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short [ 169.741670][ T5885] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 169.751334][ T5885] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 169.754122][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 169.754135][ T30] audit: type=1400 audit(1743091471.131:650): avc: denied { ioctl } for pid=7647 comm="syz.0.459" path="socket:[16725]" dev="sockfs" ino=16725 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.761781][ T5885] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 169.801439][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 169.814347][ T5885] usb 4-1: config 13 has no interface number 0 [ 169.821241][ T5885] usb 4-1: config 13 interface 50 altsetting 4 endpoint 0x4 has invalid wMaxPacketSize 0 [ 169.831273][ T5885] usb 4-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 169.854688][ T5885] usb 4-1: config 13 interface 50 has no altsetting 0 [ 169.867237][ T5885] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 169.876416][ T972] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 169.908145][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.921667][ T5885] usb 4-1: Product: syz [ 169.926291][ T5885] usb 4-1: Manufacturer: syz [ 169.931816][ T5885] usb 4-1: SerialNumber: syz [ 169.950180][ T5906] usb 3-1: device descriptor read/64, error -71 [ 170.090483][ T972] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 170.099611][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.114736][ T7651] nfs: Unknown parameter '' [ 170.115603][ T972] usb 5-1: config 0 descriptor?? [ 170.124488][ T30] audit: type=1400 audit(1743091471.511:651): avc: denied { setopt } for pid=7650 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 170.545075][ T7621] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 170.622285][ T972] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 170.649876][ T7621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.670074][ T5906] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 170.687484][ T7621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.696992][ T7621] netlink: 'syz.3.450': attribute type 8 has an invalid length. [ 170.705318][ T7621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.450'. [ 170.745069][ T5885] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 170.746562][ T1334] usb 4-1: Failed to submit usb control message: -71 [ 170.781737][ T5885] usb 4-1: USB disconnect, device number 16 [ 170.789257][ T1334] usb 4-1: unable to send the bmi data to the device: -71 [ 170.796511][ T1334] usb 4-1: unable to get target info from device [ 170.805303][ T1334] usb 4-1: could not get target info (-71) [ 170.811277][ T1334] usb 4-1: could not probe fw (-71) [ 170.847351][ T5906] usb 3-1: device descriptor read/64, error -71 [ 170.874038][ T30] audit: type=1400 audit(1743091472.261:652): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 170.918158][ T30] audit: type=1400 audit(1743091472.291:653): avc: denied { bind } for pid=7666 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.966946][ T5906] usb usb3-port1: attempt power cycle [ 170.989487][ T30] audit: type=1400 audit(1743091472.351:654): avc: denied { bind } for pid=7670 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.049624][ T7675] usb usb8: usbfs: process 7675 (syz.1.465) did not claim interface 0 before use [ 171.191019][ T30] audit: type=1400 audit(1743091472.581:655): avc: denied { bind } for pid=7673 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 171.210861][ T30] audit: type=1400 audit(1743091472.581:656): avc: denied { accept } for pid=7673 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 171.239890][ T30] audit: type=1400 audit(1743091472.581:657): avc: denied { write } for pid=7673 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 171.330195][ T5906] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 171.360319][ T5906] usb 3-1: device descriptor read/8, error -71 [ 171.604705][ T30] audit: type=1400 audit(1743091472.991:658): avc: denied { create } for pid=7677 comm="syz.3.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.624804][ T30] audit: type=1400 audit(1743091473.011:659): avc: denied { ioctl } for pid=7677 comm="syz.3.468" path="socket:[16159]" dev="sockfs" ino=16159 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 171.710126][ T5906] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 172.720376][ T972] gspca_stv06xx: I2C: Read error writing address: -71 [ 172.940219][ T972] usb 5-1: USB disconnect, device number 22 [ 172.950141][ T5906] usb 3-1: device not accepting address 17, error -71 [ 172.981012][ T5906] usb usb3-port1: unable to enumerate USB device [ 173.403548][ C1] ------------[ cut here ]------------ [ 173.409206][ C1] workqueue: cannot queue hci_conn_timeout on wq hci0 [ 173.416031][ C1] WARNING: CPU: 1 PID: 6559 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 173.425163][ C1] Modules linked in: [ 173.429102][ C1] CPU: 1 UID: 0 PID: 6559 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 173.440918][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.451168][ C1] Workqueue: bat_events batadv_nc_worker [ 173.456915][ C1] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 173.462297][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 80 eb 8b 8b e8 b5 23 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 79 37 00 90 0f 0b 90 e9 1b f6 ff [ 173.481892][ C1] RSP: 0018:ffffc90000a08c00 EFLAGS: 00010082 [ 173.487954][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817abe18 [ 173.495907][ C1] RDX: ffff888026528000 RSI: ffffffff817abe25 RDI: 0000000000000001 [ 173.503860][ C1] RBP: ffff8880660788e8 R08: 0000000000000001 R09: 0000000000000000 [ 173.511828][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000141192 [ 173.519794][ C1] R13: 0000000080000101 R14: ffff888071311178 R15: 0000000000000001 [ 173.527761][ C1] FS: 0000000000000000(0000) GS:ffff888124b54000(0000) knlGS:0000000000000000 [ 173.536677][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.543246][ C1] CR2: 0000556809b5b0a8 CR3: 0000000036858000 CR4: 00000000003526f0 [ 173.551201][ C1] Call Trace: [ 173.554462][ C1] [ 173.557288][ C1] ? __warn+0xea/0x3c0 [ 173.561346][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 173.566351][ C1] ? __queue_work+0xc9c/0x10f0 [ 173.571095][ C1] ? report_bug+0x3c3/0x580 [ 173.575582][ C1] ? __queue_work+0xc9c/0x10f0 [ 173.580327][ C1] ? handle_bug+0x184/0x210 [ 173.584828][ C1] ? exc_invalid_op+0x17/0x50 [ 173.589488][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 173.594497][ C1] ? __warn_printk+0x198/0x350 [ 173.599246][ C1] ? __warn_printk+0x1a5/0x350 [ 173.603997][ C1] ? __queue_work+0xc9c/0x10f0 [ 173.608749][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 173.614539][ C1] call_timer_fn+0x197/0x620 [ 173.619116][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 173.624216][ C1] ? __run_timers+0x559/0x960 [ 173.628879][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 173.634668][ C1] __run_timers+0x569/0x960 [ 173.639158][ C1] ? __pfx___run_timers+0x10/0x10 [ 173.644183][ C1] run_timer_base+0x114/0x190 [ 173.648861][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 173.654046][ C1] run_timer_softirq+0x1a/0x40 [ 173.658792][ C1] handle_softirqs+0x216/0x8e0 [ 173.663544][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 173.668811][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 173.674080][ C1] ? batadv_nc_purge_paths+0x1d4/0x3a0 [ 173.679523][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 173.686359][ C1] do_softirq+0xb2/0xf0 [ 173.690496][ C1] [ 173.693418][ C1] [ 173.696331][ C1] __local_bh_enable_ip+0x100/0x120 [ 173.701511][ C1] batadv_nc_purge_paths+0x1d4/0x3a0 [ 173.706786][ C1] batadv_nc_worker+0x921/0x1030 [ 173.711713][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 173.717517][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 173.722879][ C1] ? rcu_is_watching+0x12/0xc0 [ 173.727638][ C1] process_one_work+0x9cc/0x1b70 [ 173.732561][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 173.737919][ C1] ? __pfx_process_one_work+0x10/0x10 [ 173.743276][ C1] ? assign_work+0x1a0/0x250 [ 173.747856][ C1] worker_thread+0x6c1/0xef0 [ 173.752431][ C1] ? __kthread_parkme+0x148/0x220 [ 173.757442][ C1] ? __pfx_worker_thread+0x10/0x10 [ 173.762533][ C1] kthread+0x3a4/0x760 [ 173.766593][ C1] ? __pfx_kthread+0x10/0x10 [ 173.771173][ C1] ? __pfx_kthread+0x10/0x10 [ 173.775747][ C1] ? __pfx_kthread+0x10/0x10 [ 173.780321][ C1] ? __pfx_kthread+0x10/0x10 [ 173.784898][ C1] ? rcu_is_watching+0x12/0xc0 [ 173.789642][ C1] ? __pfx_kthread+0x10/0x10 [ 173.794219][ C1] ret_from_fork+0x45/0x80 [ 173.798614][ C1] ? __pfx_kthread+0x10/0x10 [ 173.803190][ C1] ret_from_fork_asm+0x1a/0x30 [ 173.807947][ C1] [ 173.810947][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.818218][ C1] CPU: 1 UID: 0 PID: 6559 Comm: kworker/u8:8 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 173.829998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.840040][ C1] Workqueue: bat_events batadv_nc_worker [ 173.845669][ C1] Call Trace: [ 173.848944][ C1] [ 173.851774][ C1] dump_stack_lvl+0x3d/0x1f0 [ 173.856348][ C1] panic+0x71c/0x800 [ 173.860239][ C1] ? __pfx_panic+0x10/0x10 [ 173.864640][ C1] ? show_trace_log_lvl+0x29c/0x3c0 [ 173.869822][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 173.874925][ C1] ? __queue_work+0xc9c/0x10f0 [ 173.879688][ C1] check_panic_on_warn+0xab/0xb0 [ 173.884611][ C1] __warn+0xf6/0x3c0 [ 173.888489][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 173.893505][ C1] ? __queue_work+0xc9c/0x10f0 [ 173.898248][ C1] report_bug+0x3c3/0x580 [ 173.902559][ C1] ? __queue_work+0xc9c/0x10f0 [ 173.907301][ C1] handle_bug+0x184/0x210 [ 173.911629][ C1] exc_invalid_op+0x17/0x50 [ 173.916122][ C1] asm_exc_invalid_op+0x1a/0x20 [ 173.920951][ C1] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 173.926301][ C1] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 80 eb 8b 8b e8 b5 23 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 56 79 37 00 90 0f 0b 90 e9 1b f6 ff [ 173.945888][ C1] RSP: 0018:ffffc90000a08c00 EFLAGS: 00010082 [ 173.951938][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817abe18 [ 173.959890][ C1] RDX: ffff888026528000 RSI: ffffffff817abe25 RDI: 0000000000000001 [ 173.967841][ C1] RBP: ffff8880660788e8 R08: 0000000000000001 R09: 0000000000000000 [ 173.975793][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92000141192 [ 173.983743][ C1] R13: 0000000080000101 R14: ffff888071311178 R15: 0000000000000001 [ 173.991703][ C1] ? __warn_printk+0x198/0x350 [ 173.996470][ C1] ? __warn_printk+0x1a5/0x350 [ 174.001225][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 174.007011][ C1] call_timer_fn+0x197/0x620 [ 174.011584][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 174.016681][ C1] ? __run_timers+0x559/0x960 [ 174.021340][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 174.027129][ C1] __run_timers+0x569/0x960 [ 174.031632][ C1] ? __pfx___run_timers+0x10/0x10 [ 174.036649][ C1] run_timer_base+0x114/0x190 [ 174.041309][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 174.046508][ C1] run_timer_softirq+0x1a/0x40 [ 174.051257][ C1] handle_softirqs+0x216/0x8e0 [ 174.056005][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 174.061273][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 174.066544][ C1] ? batadv_nc_purge_paths+0x1d4/0x3a0 [ 174.071991][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 174.078837][ C1] do_softirq+0xb2/0xf0 [ 174.082986][ C1] [ 174.085916][ C1] [ 174.088853][ C1] __local_bh_enable_ip+0x100/0x120 [ 174.094067][ C1] batadv_nc_purge_paths+0x1d4/0x3a0 [ 174.099348][ C1] batadv_nc_worker+0x921/0x1030 [ 174.104284][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 174.110077][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 174.115443][ C1] ? rcu_is_watching+0x12/0xc0 [ 174.120190][ C1] process_one_work+0x9cc/0x1b70 [ 174.125125][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 174.130485][ C1] ? __pfx_process_one_work+0x10/0x10 [ 174.135845][ C1] ? assign_work+0x1a0/0x250 [ 174.140423][ C1] worker_thread+0x6c1/0xef0 [ 174.144996][ C1] ? __kthread_parkme+0x148/0x220 [ 174.150026][ C1] ? __pfx_worker_thread+0x10/0x10 [ 174.155146][ C1] kthread+0x3a4/0x760 [ 174.159206][ C1] ? __pfx_kthread+0x10/0x10 [ 174.163781][ C1] ? __pfx_kthread+0x10/0x10 [ 174.168355][ C1] ? __pfx_kthread+0x10/0x10 [ 174.172929][ C1] ? __pfx_kthread+0x10/0x10 [ 174.177507][ C1] ? rcu_is_watching+0x12/0xc0 [ 174.182257][ C1] ? __pfx_kthread+0x10/0x10 [ 174.186835][ C1] ret_from_fork+0x45/0x80 [ 174.191231][ C1] ? __pfx_kthread+0x10/0x10 [ 174.195809][ C1] ret_from_fork_asm+0x1a/0x30 [ 174.200563][ C1] [ 174.203688][ C1] Kernel Offset: disabled [ 174.208028][ C1] Rebooting in 86400 seconds..