last executing test programs: 28m39.440820858s ago: executing program 0 (id=2107): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x3c}}, 0x54) 28m38.249871565s ago: executing program 0 (id=2111): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 28m34.451749067s ago: executing program 0 (id=2127): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000084) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(r4, 0x0, 0x0, 0x10000, &(0x7f0000000440)={r6, r7+60000000}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x3f8, 0x8, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r10, &(0x7f00000000c0)="355eabc213179bacccd12131c482aabccdf8bdefbce5f1dc0146c0c93c47a383251b0e799bef524cb4cb769aad1cc74dac4787ea709fd09ec5fde6dbca89792eb2d1ece080498fbf810e929558b35bd85deaddaa51299f9b0600caf617480f4e391df250760c9a1d023e1c9e4dd6af0d45a260f59125742f9237db5018e0ac0a6e98b3cca02d02e6294501a78f8d34d5f0d343568e49576fcfbf9387196f267d4d20b73d905eae9d54996065af3ffbda4c73ced58ffb4c3ac93299d758f5d39f", 0xc0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) write$cgroup_pressure(r2, &(0x7f0000000180)={'some', 0x20, 0x7fffffffffffffff, 0x20, 0xffffffffffffffff}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000340)="b9ff0500070000", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 28m31.360098835s ago: executing program 0 (id=2136): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x488c9) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x80000000000028) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(0x0, 0x2) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000080)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 28m29.287572069s ago: executing program 0 (id=2139): ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000640)={0xd5, &(0x7f0000000540)="1b0b86dce85c1be13340a487954dd9634653f8166258668481aae63dfe199c7f73658fd42208bf55428280e3e49a3f461bc6bee86c60fa77826a253f930f895738fd778d94b03690b2c135ee28b2e7764a1cd89dc704e0af7035cfafb6222e66a4e6898cfeda7eb465b31d1c0b820529f92bb3aa139c09cbf1044e285d842a9dd1c58e93b17d52e4678469eae5e18c58f1520acb05fdaff40d60cacb3c4b8159c37f1eadce239fddc36a35e0ca9d05b351f7169bb596cecec7c11d44077bef6813fe88882f078322eec75ae081917736a6e366adcb"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c050) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000340)={0x0, 'sit0\x00', {0x800001}, 0x26}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="00000b92007a468b797a02d7eff9162a937a03b08abb8d337f6a6abd930599b5b2581c3acf0585f15b4edf3fb3f49257c17eb7bb92d272", @ANYRESHEX, @ANYBLOB=',msize=0x000000007fffffff,noextend,k']) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x67, 0x2, {0x80, 0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) 28m28.207322978s ago: executing program 0 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tkill(r0, 0x29) unshare(0x60040000) 28m12.880796147s ago: executing program 32 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tkill(r0, 0x29) unshare(0x60040000) 25m42.524754984s ago: executing program 5 (id=2505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 25m41.407969278s ago: executing program 5 (id=2507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() socket$inet(0x2, 0x2, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r5) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 25m39.816140997s ago: executing program 5 (id=2509): r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x1d3942, 0x4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2040) ioctl(r0, 0xd4, &(0x7f0000000000)="87ef09834de590b139da3df0875e9b2470159472ff") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x10, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 25m37.788920685s ago: executing program 5 (id=2512): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 25m35.00705562s ago: executing program 5 (id=2519): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tkill(r0, 0x29) unshare(0x60040000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) 25m27.667535262s ago: executing program 5 (id=2530): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 25m11.750959023s ago: executing program 33 (id=2530): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) 10.703884756s ago: executing program 4 (id=6821): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$midi(0x3, 0x49, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x1, 0x87, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x2, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x5, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x7, 0x6, [{0x5, 0x7}, {0x5, 0x21}, {0x8, 0xd}, {0x3, 0x3}, {0x3, 0x9}, {0x6f, 0x7}], 0xbf}]}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 7.115157862s ago: executing program 4 (id=6834): r0 = syz_io_uring_setup(0x3ae9, &(0x7f0000000400)={0x0, 0xefa5, 0x10000, 0x1, 0x11e}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x23, 0x0, 0x0) 6.543426654s ago: executing program 4 (id=6837): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 6.405806283s ago: executing program 1 (id=6838): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000380)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}, 0x0) 6.397089489s ago: executing program 2 (id=6839): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @multicast1}}}, 0x88) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 6.391661583s ago: executing program 4 (id=6840): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) dup(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) close(0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$inet6(0xa, 0x5, 0x0) memfd_secret(0x0) socket$inet6(0xa, 0x5, 0x0) syz_create_resource$binfmt(0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xfe, 0xdcb6, 0xfffffffffffffffe}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) 6.23454325s ago: executing program 1 (id=6842): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fff6ffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006004400050000000000000000000000ffff0a010101000000003c0000000200000000000000000000000000ffffac1e010106000000040300000100"/176], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000170a01"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) 6.144915744s ago: executing program 2 (id=6843): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x2, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}}) set_mempolicy(0x3, 0x0, 0x6) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) 4.178686539s ago: executing program 1 (id=6846): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x7f5f5c7d, 0x5}}, './proc\x00'}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_LABELS_MASK={0x1c, 0x17, [0x35, 0x7, 0x40, 0x7f, 0x7a7b, 0x4]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x840) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, &(0x7f0000000fc0)={[0xffff]}, 0x8, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) close(0x3) ppoll(&(0x7f0000000140)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='i8042', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 3.97834709s ago: executing program 2 (id=6849): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x114, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x51}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 3.94248461s ago: executing program 1 (id=6850): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$NFT_BATCH(r3, 0x0, 0x4048010) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x65) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000080)=0x0) ptrace$ARCH_GET_FS(0x1e, r7, &(0x7f0000000100), 0x1003) 3.637021579s ago: executing program 2 (id=6855): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r1, 0x25, 0x0, @void}, 0x10) r2 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 3.478871004s ago: executing program 3 (id=6856): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) 3.092033697s ago: executing program 3 (id=6857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 3.08834377s ago: executing program 3 (id=6858): syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10043, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f00000007c0)={0x0, 0x6a1a, 0x2000, 0x3, 0x185}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f51, 0x8000, 0x2, 0x2d7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbfe3, 0x4, 0x1, 0x272}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa471, 0x100, 0x3, 0xd1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a5, 0x20, 0x0, 0xaa}}], 0x4, &(0x7f0000001d00)={0x2e, 0x30, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x6d7, 0x0, &(0x7f0000000d00)=@buf_4k="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"}}, &(0x7f0000001d80)) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r6}}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x1, 0xe3a, 0xfffffffd, 0x4}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x6d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x8, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r8) socket$nl_route(0x10, 0x3, 0x0) 3.017493291s ago: executing program 6 (id=6859): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x68}}, 0x0) 2.898225053s ago: executing program 1 (id=6860): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x161d02) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000280)='1\x00', 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000300)='4\x00', 0x2) r4 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @rand_addr=0x100000a}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 2.575622929s ago: executing program 4 (id=6861): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000280), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 1.569561222s ago: executing program 3 (id=6862): getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f00000000c0)) 1.415856885s ago: executing program 2 (id=6863): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0xa) unshare(0x64000600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="0000000021040200086fe2314f0000002c0006002000028004000200000004800400018018000a801400ff0200000000000000000000000000010000"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf25040000000509000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40048c4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r3, @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf252100000009001f007068793100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') 1.376523547s ago: executing program 6 (id=6864): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000001c0)="1fd93fd76d4934184bbec63c656291062a3d29cd3034d4ceaba77debecd9573575cd14ce0838f22abc3c4abd5ed67a90ed87b702e18760b6d86669edc113fc3d0fb3", 0x42}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="0efb18e617048dae506fb6119eb0536e7984081783e7584cd5d8d27033ed437c6246b2b94a22bd62d589a8e3886d9977523fd3e8fd174d51cd86a159d2ef88ab0632d7eb46c792f365df9d56fdd2299f44da364e2ef035705a084bbf2d3fdbeea8f05b35502c909a69f9be0405607e6eed6bcfb3acbf182ba4a2016e207bdacb6f240adf181a764f79d7dd3c93fc3e74f5c0985587deb47eec917dab82f4a194a186cb5515e0133dbdea3633abe499b978e798c2a5a64913d677d3b99927638735b214566ae0f4ca2ec80d1dd27f3249f9f6dd0b7a5ba70c0e7ad0be90ef56c6dc2ef3f445cae39675ff73fffb3aaccbb5f823bd80d94e112b970b266f9e380432314c39fe589e3174bc10b87f3e8f221d46ee42a2544e4b0c26e947fe2667555001e5beefe950450ee8d41080e6fbba3effec8484de4a6f1314e5aaf19d40296a986bc0500f0d731d8bd1f6fa147ba791d1eff8a5d68ece936cc6336ede0e8686c34d3e9f8d12249ef52a61171be50635d5aaf7bc6140128b65220f88aac07fce9ce944f875b7255cbfd1e401a32217573adf2304c47e7c8c9bacfdc2b3ba7b9450c8bb8b44c4b39292f09240d6d3d47f7d421286c1e0e78cde078f74f3c2b53544ca683aa1a8ef31342d09a85e09687dd043df25f595c6a4b941c6f7166654c013be7b347702e2a27d50b2ef78212defab03bb82e1260063a39551f72eab61477f3e8bc673abdd41b5692066dec8d26a4cc6a6f821bcb2f2239972e753fb526e7f33ee49d6cbfcd2b669afbe099cf50d2798f1dd6e8104d05cc4357d742daaa9e333060c59a47fe9335a46b9289f3da0d5ec1ce19597f02ca09442714e2989a3a9b707fc3284de3d4a7d65e3c24c880b8fdad025f7dae7fd70655e4f5b98484de78ff51a7ac3159c3449aa7d222113bea285e75c46c784abfd19a4d4894f284a2e2625eb97b8e35b2af2a9d0eb53fe55ca9ef7acc1b51fbcdd521ed21bc57bc4dbb3923e175c49e04ae30df0f361af2105f7772753cd4d9233a24e858229798d88af5bfa9b450e9d81f5d4c2358a5c1559684659e8f6ef741f29d2a7910cc2b3ba01189c951ee3eb9ad7403590e82448e041e4310f878255156e0247c966fd857fa23086ecebeb7bff416bf21a9df5494c8bae4af0e3da77a274f99e15d07924011cddbbc004f704445cbf6f2940e2a2cca1b3e05b6bcf16f459cae5f12cd26eed0eea757fc60bac3d591380017046d091ec5a5b4b7d910527927b8b4b179c89f04ecab9753de8d0d280e5444b15d647396c13d365e9d72a81df3a48bd4c8bab2a62d6f669b9e40f7df414b84f30e1fa3a27cbfc79664c4f225e6087de72d9c2a2093e84bee55314e73f6a3ab722fa516ed370f47e2ae7ae025a6cb7b072304c0a4af0ecdf782a0c6318a4f2a79a81b36cabb4207817d2aa497fb7887db11facdd14f38a1e9c898264b26aa97a658c40f5cc88d97c7cabc2f2294c34f8461e6913487c86d9ffb8b6821e16615131e4cec85ec7261bb390a4bcc63982596e5e0908c8bf264dd38557c7556372c042bf2427bd9fbee1c1689a9a9553ed1b8b8861e15767278b39ac858014bfa9aec3961e3493070c3232b92f45b040677c54dfc6047f353027474f476fd75085274125c421e12b393a790e449407fd5a72f6beba7a40786c77e4d20a85c89863e8faec609747436c8e5ae585a4bf6662e1d9d38ab24123fd8058a497cd874122d4677d689d732e365ea6e3c479458fc5d20070e2e064edeab794c61bf8add78ed8c331d2d1f2a636b36324282607ec2d41cfe5b0da91974cd85c73fd9cf34fa3db7b06ea4bd4c1b43f3e5967d48384866ef62a67f4880a9f35c55df6a5ff1a3f95a76723618a70cf532691ec59d1a3998bcabe6c7e2359636c2a50129a90896f0cb584b7714e22a81d3c47a4819afdf57e83f579263f5935ddc5ac0372dbcbe4d63fd468a3c68977ae0d8ec1f3835c890fab4916c16419f4f81dadb871b1a25a05729d2c51b2ca261401bef2bc69756555a16527e1ff9cec3d327e52a15377279b54988b5b2e20d3d747fbc7634fad898fba69da6f82bcc333990623deb84067d328aa65760c9d6e7b125dcc2948128c3a70f06db6672ca3734676b5455f89dbdba947aa4ef33753d48fbf47fb32f594da646f5b34a7e910ef9873a11c3ac03c5e22ca1fd7a58d10b224ac955bfd7b2e16b43da9f38958809a935240a63ebd3ca96847993a647d89c91d745f5012b6cab1c6f4726d51774f477e33f504fdc34b340c7e2a183243d17a3ed59a91521806202b6261cc65d94145a6bfac56ec43775b0bc3eb46ae19d6b188879e2cbe0fc32bf4a9e7b11f4c627667c411e00ae4adbaf37a1175898b35a788c26a7faa33fcc9637ba5f411d917f99959864820db36a815c58de480be7dada6cc18e8f54192b323b67ae2c355ac0d84cc7bdc23f85b4d26d99d6d778eeff5ecc94cd31f1fbdbbb2eeaee5ac3dc4b6ca5acda37ace3acd6034124fe1a0671d828b0abd42bafbd19a64c2eac660af37a699440f9396de8fc7c507a27814776ad51d1761839ca21532ad7c61fba30e6957bb791c9d204f95931cdb1d21c0b7267d57cc853604903c1a4a28fd284f351d90396c0d27a08f8ee298c56513882bb36ba659fdf02b051b19bc59bcaf7e1c2dee3b718de1f6f4822715ae358d1a197f9f0d9330db72b16e8572b774504e4e9b0f7e2d9e46fda56b93180a7221efa08908531de284a36f78795ff835ceecf75ff89a5dfa081940b24d1bedf416baf654413edb2045155ab99d8feccd3db59c4259a93ff3b4d918d2878c59406c3a03b99b46c0fe38ac0807963d9a02876b860ca2a53afe767a242f59de4061afd251c675bd173619e024db33871512ebcdde999bd42d5e346a55506925c0f00b9a38f7336efd94bd1c2598f8a134895f3b471171f8fbcfa2ea70cabf972488ff6a1e21c723e4c22f295bbf8601d34249c534fe9c339c2c0f11df3984c4991c357b23c4ddd7349f03bc7bf3fd3ecd6d4e2377c3260dc293bd2d8a28e53994fe4ac03140d983966f09100ca8c0d108378e0db4acd2dfb4d2ee171c1ab51ead1cf1da176c106ecf3f5511af6b5f05855be971361ebcfd571ba6cfd77bf7a4772b79a0673535922baf130f3a6b14afe753cd57009d13ee95c763bd70657d89d59ae6136724caf8d6fd0377050c7b6f3d798cceb16b7ead26cae2e667fc82a8b2238dbc130ecf0c24e532724388abfed2523ac7cbeb1ffc0537114f883aa1c06b95d0697b8566b4bd22a0c71d7906e4088346b7a7bcc3ae4a218c19694c72960fac184e3033dabecc1aef5fa622b96e7cd0c6c420e97b94c65f9069f7bbf49950b4e3b1e2b68aa7f0dfe70be37a9e46af607ce4b3ca5d21e7c735e14c43b805e14682c68e4de03e6f46306042bcd5619b8fa2582988fb53a0338f58a69fc59bee2af8463432049f65ebd67e543665de1cd56b26f8a8a57c7cf7e0e4a09104256b99e31424a2c416fa4847abeaf138506027aa95cd5571a620", 0x9c9}], 0x3}, 0x8841) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.307451677s ago: executing program 3 (id=6865): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, 0x0, 0x401, 0x70bd2e, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004043}, 0x1404c090) 1.182847049s ago: executing program 6 (id=6866): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="832a0a65bd8cf52b0304000e0580a7b6070d", 0x12) 1.133501214s ago: executing program 3 (id=6867): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) 1.123532472s ago: executing program 1 (id=6868): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 975.258661ms ago: executing program 6 (id=6869): socket$kcm(0xa, 0x922000000003, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 768.388164ms ago: executing program 2 (id=6870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006900), 0x0, 0x24040000) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x880) recvmmsg$unix(r3, 0x0, 0x0, 0x42, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) 427.628182ms ago: executing program 6 (id=6871): sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="0100fe02000000000000200000000c000600010000000100000024002d80050001"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="300030802c0001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 163.560153ms ago: executing program 6 (id=6872): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x4370}) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r1], 0x28}}, 0x816) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)="000080", 0x15) 0s ago: executing program 4 (id=6873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) kernel console output (not intermixed with test programs): Product: syz [ 2298.890444][T24255] usb 4-1: Manufacturer: syz [ 2298.895137][T24255] usb 4-1: SerialNumber: syz [ 2298.906674][T24255] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 2298.918280][T24255] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2298.941516][T24255] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2299.087914][T14702] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2299.099799][T14702] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2299.109562][T14702] uvcvideo 7-1:63.66: No valid video chain found. [ 2299.118830][T14702] usb 7-1: USB disconnect, device number 119 [ 2299.127103][T23984] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2299.302852][T23984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2299.311981][T23984] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2299.320323][T23984] usb 5-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2299.335183][T23984] usb 5-1: config 63 has no interface number 0 [ 2299.341402][T23984] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2299.350707][T23984] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2299.359939][T23984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.368605][T23984] usb 5-1: Product: syz [ 2299.375522][T23984] usb 5-1: Manufacturer: syz [ 2299.380297][T23984] usb 5-1: SerialNumber: syz [ 2299.868465][T24255] IPVS: starting estimator thread 0... [ 2300.019379][T28241] IPVS: using max 41 ests per chain, 98400 per kthread [ 2300.229547][T22085] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2300.299720][T22085] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2300.382917][T22085] uvcvideo 2-1:63.66: No valid video chain found. [ 2300.442558][ T187] usb 3-1: USB disconnect, device number 2 [ 2300.529622][T22085] usb 2-1: USB disconnect, device number 15 [ 2301.107359][T23984] uvcvideo 5-1:63.66: Found Unit with invalid ID 0 [ 2301.114226][T23984] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2301.121902][T23984] uvcvideo 5-1:63.66: No valid video chain found. [ 2301.136583][T23984] usb 5-1: USB disconnect, device number 19 [ 2301.250208][ T187] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2301.337300][T12210] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2301.415200][ T187] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2301.424397][ T187] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2301.432589][ T187] usb 3-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2301.443465][ T187] usb 3-1: config 63 has no interface number 0 [ 2301.450021][ T187] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2301.458726][ T187] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2301.468707][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.476728][ T187] usb 3-1: Product: syz [ 2301.483436][T25895] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2301.491255][ T187] usb 3-1: Manufacturer: syz [ 2301.496182][ T187] usb 3-1: SerialNumber: syz [ 2301.512558][T12210] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2301.521815][T12210] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2301.530006][T12210] usb 7-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2301.540723][T12210] usb 7-1: config 63 has no interface number 0 [ 2301.547081][T12210] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2301.556082][T12210] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2301.565340][T12210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.573352][T12210] usb 7-1: Product: syz [ 2301.578044][T12210] usb 7-1: Manufacturer: syz [ 2301.582650][T12210] usb 7-1: SerialNumber: syz [ 2301.666618][T25895] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2301.676028][T25895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.684861][T25895] usb 2-1: Product: syz [ 2301.689166][T25895] usb 2-1: Manufacturer: syz [ 2301.694955][T25895] usb 2-1: SerialNumber: syz [ 2301.967649][T28225] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -110 [ 2302.332766][T24255] IPVS: starting estimator thread 0... [ 2302.459150][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2302.561427][T28258] IPVS: using max 44 ests per chain, 105600 per kthread [ 2302.697748][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2302.988594][ T5329] usb 4-1: USB disconnect, device number 3 [ 2303.035174][ T5329] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2303.073299][ T187] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 2303.102149][ T187] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2303.261424][ T187] uvcvideo 3-1:63.66: No valid video chain found. [ 2303.282728][ T5329] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2303.301852][ T187] usb 3-1: USB disconnect, device number 3 [ 2303.312328][ T5329] ti_usb_3410_5052 4-1:2.0: device disconnected [ 2303.384714][T28267] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6272'. [ 2303.393771][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6272'. [ 2303.816719][T12210] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2303.838639][T12210] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2303.847451][T12210] uvcvideo 7-1:63.66: No valid video chain found. [ 2303.857169][T12210] usb 7-1: USB disconnect, device number 120 [ 2303.961444][T28269] fuse: Bad value for 'fd' [ 2304.105298][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2304.128322][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2304.157407][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2304.301902][T25895] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2305.059513][T28281] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6278'. [ 2305.520318][T28287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6279'. [ 2305.529651][T28287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6279'. [ 2305.538610][T28287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6279'. [ 2306.012483][T12210] usb 2-1: USB disconnect, device number 16 [ 2306.451464][T28296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6282'. [ 2306.460582][T28296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6282'. [ 2306.472025][T28296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6282'. [ 2306.492326][ T5329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2306.500219][T25895] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2306.579060][T28298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6283'. [ 2307.023501][ T5329] usb 4-1: Using ep0 maxpacket: 16 [ 2307.033332][ T5329] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 2307.041646][T25895] usb 7-1: Using ep0 maxpacket: 32 [ 2307.047549][ T5329] usb 4-1: config 0 has no interface number 0 [ 2307.053805][ T5329] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2307.065491][ T5329] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2307.065599][T25895] usb 7-1: config 0 has an invalid interface number: 28 but max is 0 [ 2307.084173][T25895] usb 7-1: config 0 has no interface number 0 [ 2307.091516][T25895] usb 7-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2307.103935][ T5329] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2307.113137][ T5329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.121668][T12210] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2307.129428][ T5329] usb 4-1: Product: syz [ 2307.134197][T25895] usb 7-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2307.150537][ T5329] usb 4-1: Manufacturer: syz [ 2307.155841][ T5329] usb 4-1: SerialNumber: syz [ 2307.161148][T25895] usb 7-1: config 0 interface 28 has no altsetting 0 [ 2307.170709][T25895] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2307.181159][ T5329] usb 4-1: config 0 descriptor?? [ 2307.211151][T25895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.219752][T28288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2307.227561][T28288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2307.275829][T25895] usb 7-1: config 0 descriptor?? [ 2307.314784][T28303] fuse: Bad value for 'fd' [ 2307.322127][T12210] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2307.332220][T12210] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2307.342132][T12210] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2307.359685][T12210] usb 2-1: config 63 has no interface number 0 [ 2307.365927][T12210] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2307.382547][T12210] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2307.399765][T12210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.431187][T12210] usb 2-1: Product: syz [ 2307.440363][T12210] usb 2-1: Manufacturer: syz [ 2307.460818][T28288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2307.472968][T28288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2307.473008][T12210] usb 2-1: SerialNumber: syz [ 2307.574709][T28307] lo speed is unknown, defaulting to 1000 [ 2307.595443][T25895] usb 7-1: string descriptor 0 read error: -71 [ 2307.627880][T25895] usb 7-1: USB disconnect, device number 121 [ 2307.703810][ T5329] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2307.720174][T19842] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2307.756531][ T5329] asix 4-1:0.34: probe with driver asix failed with error -61 [ 2307.883670][T12210] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2307.893714][T12210] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2307.916407][T12210] uvcvideo 2-1:63.66: No valid video chain found. [ 2307.930591][T12210] usb 2-1: USB disconnect, device number 17 [ 2307.933512][T19842] usb 3-1: Using ep0 maxpacket: 8 [ 2307.944441][T23984] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2307.965388][T19842] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2307.976696][T19842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.985294][T19842] usb 3-1: Product: syz [ 2307.989796][T19842] usb 3-1: Manufacturer: syz [ 2307.994480][T19842] usb 3-1: SerialNumber: syz [ 2308.002475][T19842] usb 3-1: config 0 descriptor?? [ 2308.130228][T23984] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2308.146709][T23984] usb 5-1: config 0 has no interface number 0 [ 2308.155624][T23984] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2308.165693][T23984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.173897][T23984] usb 5-1: Product: syz [ 2308.178150][T23984] usb 5-1: Manufacturer: syz [ 2308.182791][T23984] usb 5-1: SerialNumber: syz [ 2308.189718][T23984] usb 5-1: config 0 descriptor?? [ 2308.197134][T23984] usb 5-1: selecting invalid altsetting 1 [ 2308.203091][T23984] dvb_ttusb_budget: ttusb_init_controller: error [ 2308.215392][T23984] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2308.241718][T19842] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2308.295176][T23984] DVB: Unable to find symbol stv0299_attach() [ 2308.328000][T23984] DVB: Unable to find symbol tda8083_attach() [ 2308.334278][T23984] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2308.702530][ T5329] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 2308.908448][T28324] __nla_validate_parse: 2 callbacks suppressed [ 2308.908478][T28324] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6289'. [ 2309.479694][T19842] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2309.497427][T19842] usb 3-1: USB disconnect, device number 4 [ 2309.518042][T12210] usb 4-1: USB disconnect, device number 4 [ 2309.570455][ T5329] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2309.602325][ T5329] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2309.627220][ T5329] usb 7-1: config 0 has no interface number 0 [ 2309.639143][ T5329] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2309.650412][ T5329] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2309.660424][ T5329] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2309.698463][ T5329] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2309.724149][ T5329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.738570][ T5329] usb 7-1: Product: syz [ 2309.749293][ T5329] usb 7-1: Manufacturer: syz [ 2309.760755][ T5329] usb 7-1: SerialNumber: syz [ 2309.776562][ T5329] usb 7-1: config 0 descriptor?? [ 2310.395641][T28338] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6293'. [ 2310.558151][T19842] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2311.497801][T23984] IPVS: starting estimator thread 0... [ 2311.610973][T28340] IPVS: using max 83 ests per chain, 199200 per kthread [ 2311.623307][ T5329] IPVS: starting estimator thread 0... [ 2311.643675][T19842] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2311.655043][T19842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.664478][T19842] usb 2-1: Product: syz [ 2311.669220][T19842] usb 2-1: Manufacturer: syz [ 2311.674164][T28345] fuse: Invalid rootmode [ 2311.678920][T19842] usb 2-1: SerialNumber: syz [ 2311.746316][T28344] IPVS: using max 57 ests per chain, 136800 per kthread [ 2311.773950][T28348] openvswitch: netlink: IP tunnel TTL not specified. [ 2311.787442][T12210] usb 5-1: USB disconnect, device number 20 [ 2312.428741][T12210] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2312.553730][T19842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2312.565682][T19842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2312.601013][ T5329] usb 7-1: USB disconnect, device number 122 [ 2312.760114][T12210] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2312.884149][T23984] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2312.920067][T12210] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2312.954351][T12210] usb 5-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2312.999457][T12210] usb 5-1: config 63 has no interface number 0 [ 2313.041815][T12210] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2313.161162][T12210] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2313.229749][T12210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2313.295851][T12210] usb 5-1: Product: syz [ 2313.337936][T12210] usb 5-1: Manufacturer: syz [ 2313.383482][T12210] usb 5-1: SerialNumber: syz [ 2313.786658][T19842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2314.510830][T19842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2314.523964][T19842] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2314.534676][T19842] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2314.656916][T12210] uvcvideo 5-1:63.66: Found Unit with invalid ID 0 [ 2314.665606][T12210] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2314.680870][T12210] uvcvideo 5-1:63.66: No valid video chain found. [ 2314.690423][T12210] usb 5-1: USB disconnect, device number 21 [ 2314.694728][T23984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2314.705899][T23984] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2314.716213][T23984] usb 4-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2314.729943][T23984] usb 4-1: config 63 has no interface number 0 [ 2314.736652][T23984] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2314.745191][T23984] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2314.754609][T23984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.762639][T23984] usb 4-1: Product: syz [ 2314.777719][T23984] usb 4-1: Manufacturer: syz [ 2314.783239][T23984] usb 4-1: SerialNumber: syz [ 2314.858786][T14702] usb 2-1: USB disconnect, device number 18 [ 2314.866144][T19842] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2315.042656][T19842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.054577][T19842] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2315.060850][ T5329] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 2315.087882][T19842] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2315.099466][T19842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.111587][T19842] usb 3-1: Product: syz [ 2315.115817][T19842] usb 3-1: Manufacturer: syz [ 2315.120432][T19842] usb 3-1: SerialNumber: syz [ 2315.137496][T19842] usb 3-1: config 0 descriptor?? [ 2315.228324][T23984] uvcvideo 4-1:63.66: Found Unit with invalid ID 0 [ 2315.239516][T23984] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2315.239887][ T5329] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2315.247135][T23984] uvcvideo 4-1:63.66: No valid video chain found. [ 2315.277122][ T5329] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2315.284138][T23984] usb 4-1: USB disconnect, device number 5 [ 2315.287755][ T5329] usb 7-1: config 0 has no interface number 0 [ 2315.300851][ T5329] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2315.313886][ T5329] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2315.327578][ T5329] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2315.383891][ T5329] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2315.391350][T28387] fuse: Invalid rootmode [ 2315.406038][ T5329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.422258][ T5329] usb 7-1: Product: syz [ 2315.426523][ T5329] usb 7-1: Manufacturer: syz [ 2315.432175][ T5329] usb 7-1: SerialNumber: syz [ 2315.439591][ T5329] usb 7-1: config 0 descriptor?? [ 2315.635844][T12210] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2315.665762][ T5329] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2315.799221][T12210] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2315.811220][T12210] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2315.824441][T12210] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2315.829992][T23984] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2315.833713][T12210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.849131][T12210] usb 2-1: Product: syz [ 2315.853348][T12210] usb 2-1: Manufacturer: syz [ 2315.857915][T12210] usb 2-1: SerialNumber: syz [ 2315.869869][T12210] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 2315.885880][T12210] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2315.903952][T12210] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2316.006357][T23984] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2316.016802][T23984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.027050][T23984] usb 5-1: config 0 has no interface number 0 [ 2316.033378][T23984] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2316.052232][T23984] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2316.091631][T23984] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2316.106855][T23984] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2316.116642][T23984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.126508][T23984] usb 5-1: Product: syz [ 2316.130699][T23984] usb 5-1: Manufacturer: syz [ 2316.135426][T23984] usb 5-1: SerialNumber: syz [ 2316.499974][T23984] usb 5-1: config 0 descriptor?? [ 2317.740287][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2317.746650][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2317.876148][T23984] usb 3-1: USB disconnect, device number 5 [ 2317.970577][T19842] usb 7-1: USB disconnect, device number 123 [ 2318.193017][T14702] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2318.342902][T23984] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2318.364629][T14702] usb 4-1: Using ep0 maxpacket: 8 [ 2318.372670][T14702] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2318.382548][T14702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.390751][T14702] usb 4-1: Product: syz [ 2318.394948][T14702] usb 4-1: Manufacturer: syz [ 2318.399588][T14702] usb 4-1: SerialNumber: syz [ 2318.405958][T14702] usb 4-1: config 0 descriptor?? [ 2318.472854][T12210] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2318.541231][T23984] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2318.552144][T23984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.564096][T23984] usb 3-1: Product: syz [ 2318.568417][T23984] usb 3-1: Manufacturer: syz [ 2318.573076][T23984] usb 3-1: SerialNumber: syz [ 2318.633347][T14702] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2318.637273][T12210] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2318.650452][T12210] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2318.658697][T12210] usb 7-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2318.669129][T12210] usb 7-1: config 63 has no interface number 0 [ 2318.677110][T12210] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2318.686818][T12210] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2318.698045][T12210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.707273][T12210] usb 7-1: Product: syz [ 2318.711744][T12210] usb 7-1: Manufacturer: syz [ 2318.714944][ T5604] usb 5-1: USB disconnect, device number 22 [ 2318.716404][T12210] usb 7-1: SerialNumber: syz [ 2318.778292][T28385] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -110 [ 2318.793125][ T5329] usb 2-1: USB disconnect, device number 19 [ 2318.817200][ T5329] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2318.829776][T28417] fuse: Invalid rootmode [ 2318.837187][ T5329] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2318.850512][ T5329] ti_usb_3410_5052 2-1:2.0: device disconnected [ 2318.874263][T14702] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2318.896486][T14702] usb 4-1: USB disconnect, device number 6 [ 2318.915212][T28419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6321'. [ 2319.027996][T23984] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2319.042260][T23984] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2319.184379][T12210] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2319.191131][T12210] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2319.199265][T12210] uvcvideo 7-1:63.66: No valid video chain found. [ 2319.208193][T12210] usb 7-1: USB disconnect, device number 124 [ 2319.339441][ T5604] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2319.512801][ T5604] usb 5-1: Using ep0 maxpacket: 32 [ 2319.520898][ T5604] usb 5-1: config 0 has an invalid interface number: 28 but max is 0 [ 2319.529364][ T5604] usb 5-1: config 0 has no interface number 0 [ 2319.536449][ T5604] usb 5-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2319.549000][ T5604] usb 5-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2319.564625][ T5604] usb 5-1: config 0 interface 28 has no altsetting 0 [ 2319.571414][ T5604] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2319.582819][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.594005][ T5604] usb 5-1: config 0 descriptor?? [ 2319.643184][T14702] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2319.829783][T14702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2319.839916][T14702] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2319.848828][ T5604] usb 5-1: string descriptor 0 read error: -71 [ 2319.856027][T14702] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2319.872414][ T5604] usb 5-1: USB disconnect, device number 23 [ 2319.878451][T14702] usb 2-1: config 63 has no interface number 0 [ 2319.886688][T14702] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2319.901651][T14702] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2319.911277][T14702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.919385][ T5742] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2319.927531][T14702] usb 2-1: Product: syz [ 2319.932172][T14702] usb 2-1: Manufacturer: syz [ 2319.937440][T14702] usb 2-1: SerialNumber: syz [ 2320.099415][ T5742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2320.108105][ T5742] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2320.118291][ T5742] usb 4-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2320.119336][T12210] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 2320.129123][ T5742] usb 4-1: config 63 has no interface number 0 [ 2320.142956][ T5742] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2320.149842][T23984] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2320.162084][T23984] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2320.177371][ T5742] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2320.186569][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.194979][T23984] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2320.203796][ T5742] usb 4-1: Product: syz [ 2320.208211][ T5742] usb 4-1: Manufacturer: syz [ 2320.212874][ T5742] usb 4-1: SerialNumber: syz [ 2320.218630][T23984] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 2320.295088][T12210] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 2320.303520][T12210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2320.313616][T12210] usb 7-1: config 0 has no interface number 0 [ 2320.316112][T14702] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2320.320182][T12210] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2320.326410][T14702] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2320.340835][T12210] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2320.356563][T14702] uvcvideo 2-1:63.66: No valid video chain found. [ 2320.359427][T12210] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2320.381959][T12210] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2320.388184][T14702] usb 2-1: USB disconnect, device number 20 [ 2320.392199][T12210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.405917][T12210] usb 7-1: Product: syz [ 2320.410108][T12210] usb 7-1: Manufacturer: syz [ 2320.422619][T12210] usb 7-1: SerialNumber: syz [ 2320.431935][T12210] usb 7-1: config 0 descriptor?? [ 2320.686168][ T5742] uvcvideo 4-1:63.66: Found Unit with invalid ID 0 [ 2320.692748][ T5742] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2320.700198][ T5742] uvcvideo 4-1:63.66: No valid video chain found. [ 2320.714053][ T5742] usb 4-1: USB disconnect, device number 7 [ 2321.629395][T23984] usb 3-1: USB disconnect, device number 6 [ 2321.712339][T28450] fuse: Bad value for 'rootmode' [ 2322.736007][T28460] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2323.071933][ T5329] usb 7-1: USB disconnect, device number 125 [ 2323.163093][ T5814] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2323.373865][ T5814] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2323.469899][ T5814] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2323.484751][ T5814] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2323.499261][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.507466][ T5814] usb 3-1: Product: syz [ 2323.529345][ T5814] usb 3-1: Manufacturer: syz [ 2323.540310][ T5814] usb 3-1: SerialNumber: syz [ 2323.627392][ T5814] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2323.686357][ T5814] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2323.758044][ T5814] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2323.954084][T23984] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2324.154956][T23984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2324.183117][T23984] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2324.212950][T23984] usb 5-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2324.246969][T23984] usb 5-1: config 63 has no interface number 0 [ 2324.254847][T23984] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2324.278427][T23984] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2324.314766][T23984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.332988][T23984] usb 5-1: Product: syz [ 2324.337351][T23984] usb 5-1: Manufacturer: syz [ 2324.346303][T23984] usb 5-1: SerialNumber: syz [ 2324.593578][T25895] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2324.836437][T25895] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2324.936220][T25895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.044149][T25895] usb 2-1: Product: syz [ 2325.121799][T25895] usb 2-1: Manufacturer: syz [ 2325.193008][T25895] usb 2-1: SerialNumber: syz [ 2325.870719][T28495] lo speed is unknown, defaulting to 1000 [ 2325.921395][T23984] uvcvideo 5-1:63.66: Found Unit with invalid ID 0 [ 2325.967204][T23984] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2326.029880][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2326.051523][T23984] uvcvideo 5-1:63.66: No valid video chain found. [ 2326.077860][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2326.117914][T23984] usb 5-1: USB disconnect, device number 24 [ 2326.174437][T12210] usb 7-1: new full-speed USB device number 126 using dummy_hcd [ 2326.383490][T12210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2326.403876][T28459] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 2326.420637][T12210] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2326.444889][T28459] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 2326.483592][T12210] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2326.509866][T28459] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 2326.525150][T12210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.552325][T12210] usb 7-1: Product: syz [ 2326.554501][ T5814] usb 3-1: USB disconnect, device number 7 [ 2326.578490][T12210] usb 7-1: Manufacturer: syz [ 2326.591695][T12210] usb 7-1: SerialNumber: syz [ 2326.612269][ T5814] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2326.613908][T12210] usb 7-1: config 0 descriptor?? [ 2326.695445][ T5814] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2326.760793][ T5814] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2327.564619][T12210] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 2327.589209][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2327.667340][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2327.792157][T25895] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2327.822379][T12210] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2327.947422][T12210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2327.962169][T25895] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2327.983993][T12210] usb 4-1: config 0 has no interface number 0 [ 2328.527539][T12210] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2328.576738][T12210] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2328.603768][T12210] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2328.648058][T12210] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2328.666798][T12210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2328.785880][T12210] usb 4-1: Product: syz [ 2328.813044][T12210] usb 4-1: Manufacturer: syz [ 2328.835449][T25895] usb 2-1: USB disconnect, device number 21 [ 2328.852675][T12210] usb 4-1: SerialNumber: syz [ 2328.899113][T12210] usb 4-1: config 0 descriptor?? [ 2330.354664][T12210] usb 7-1: USB disconnect, device number 126 [ 2330.810389][T12210] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 2330.984763][T25895] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2330.995060][T12210] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2331.028579][T12210] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2331.063006][T12210] usb 7-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2331.087463][T12210] usb 7-1: config 63 has no interface number 0 [ 2331.108268][T12210] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2331.129812][T12210] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2331.150170][T12210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.178043][T12210] usb 7-1: Product: syz [ 2331.186868][T25895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2331.196513][T12210] usb 7-1: Manufacturer: syz [ 2331.207432][T25895] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2331.216758][T12210] usb 7-1: SerialNumber: syz [ 2331.227271][T25895] usb 3-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2331.255320][T25895] usb 3-1: config 63 has no interface number 0 [ 2331.272856][T25895] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2331.295032][T25895] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2331.313195][T25895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.336690][T25895] usb 3-1: Product: syz [ 2331.348950][T25895] usb 3-1: Manufacturer: syz [ 2331.360167][T25895] usb 3-1: SerialNumber: syz [ 2331.806070][T15400] usb 4-1: USB disconnect, device number 8 [ 2331.930373][T12210] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2332.009057][T12210] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2332.040546][T12210] uvcvideo 7-1:63.66: No valid video chain found. [ 2332.179057][T12210] usb 7-1: USB disconnect, device number 127 [ 2332.733700][T25895] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 2332.755291][T25895] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2332.783446][T25895] uvcvideo 3-1:63.66: No valid video chain found. [ 2332.829339][T25895] usb 3-1: USB disconnect, device number 8 [ 2333.261053][T12210] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2333.463275][T12210] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2333.499410][T12210] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2333.960006][T12210] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2334.045137][T12210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.123108][T12210] usb 2-1: Product: syz [ 2334.155966][T12210] usb 2-1: Manufacturer: syz [ 2334.173360][T12210] usb 2-1: SerialNumber: syz [ 2334.210554][T12210] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 2334.262059][T12210] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2334.304180][T12210] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2334.460831][ T5814] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2334.693649][ T5814] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2334.721953][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.744714][ T5814] usb 7-1: Product: syz [ 2334.764996][ T5814] usb 7-1: Manufacturer: syz [ 2334.788822][ T5814] usb 7-1: SerialNumber: syz [ 2335.251051][ T5814] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2335.290463][ T5814] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2335.928680][T28600] : renamed from bond_slave_0 (while UP) [ 2336.438411][ T5814] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2336.442950][T12210] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2336.467866][ T5814] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2336.492113][ T5814] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2336.506162][ T5814] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -32 [ 2336.653443][T12210] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2336.734176][T28562] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 2336.755248][T12210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2336.823878][ T30] audit: type=1400 audit(1786220564.873:860): avc: denied { read } for pid=28604 comm="syz.4.6372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2336.843507][T28562] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 2336.857916][T12210] usb 3-1: config 0 has no interface number 0 [ 2336.872438][T28562] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 2336.887606][T12210] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2336.921555][T28562] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 2336.934875][ T30] audit: type=1400 audit(1786220564.965:861): avc: denied { name_connect } for pid=28604 comm="syz.4.6372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 2336.958612][T12210] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2337.005414][T12210] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2337.030342][T25895] usb 2-1: USB disconnect, device number 22 [ 2337.061420][T25895] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2337.100262][T12210] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2337.135065][T25895] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2337.147832][T12210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.176742][T12210] usb 3-1: Product: syz [ 2337.188770][T25895] ti_usb_3410_5052 2-1:2.0: device disconnected [ 2337.209940][T12210] usb 3-1: Manufacturer: syz [ 2337.233314][T12210] usb 3-1: SerialNumber: syz [ 2337.294410][T12210] usb 3-1: config 0 descriptor?? [ 2337.585803][T12210] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2337.631159][ T5814] usb 7-1: USB disconnect, device number 2 [ 2339.152663][T28614] lo speed is unknown, defaulting to 1000 [ 2339.227049][ T5814] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2339.280266][T19842] usb 3-1: USB disconnect, device number 9 [ 2339.466680][ T5814] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2339.508360][T24255] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 2339.592732][ T5814] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2340.176518][ T5814] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2340.210921][ T5814] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.237299][T24255] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2340.243948][ T5814] usb 7-1: Product: syz [ 2340.267282][ T5814] usb 7-1: Manufacturer: syz [ 2340.273441][ T5814] usb 7-1: SerialNumber: syz [ 2340.289815][ T5814] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 2340.315016][ T5814] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2340.331616][T24255] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2340.332411][ T5814] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2340.499477][T24255] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2340.570105][T24255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.620143][T24255] usb 2-1: Product: syz [ 2340.640513][T24255] usb 2-1: Manufacturer: syz [ 2340.641479][T28616] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 2340.711152][T24255] usb 2-1: SerialNumber: syz [ 2340.772344][T24255] usb 2-1: config 0 descriptor?? [ 2341.356021][T24255] usb 2-1: can't set config #0, error -71 [ 2341.389218][T24255] usb 2-1: USB disconnect, device number 23 [ 2341.667301][T28656] bond1: entered promiscuous mode [ 2341.710931][T28656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6387'. [ 2341.763739][T28656] syz.2.6387 (28656): attempted to duplicate a private mapping with mremap. This is not supported. [ 2341.837307][T24255] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2341.888786][T28660] overlay: Unknown parameter '/' [ 2342.656806][T24255] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2342.831516][T24255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.991384][T24255] usb 2-1: Product: syz [ 2343.023274][T24255] usb 2-1: Manufacturer: syz [ 2343.041426][T12210] usb 7-1: USB disconnect, device number 3 [ 2343.078439][T24255] usb 2-1: SerialNumber: syz [ 2343.122453][T12210] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2344.484434][T12210] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2344.583473][T28664] netlink: 'syz.2.6390': attribute type 1 has an invalid length. [ 2344.655120][T24255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2344.679243][T12210] ti_usb_3410_5052 7-1:2.0: device disconnected [ 2344.801744][T24255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2344.866965][T28664] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6390'. [ 2345.031586][T28664] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 2345.998415][T24255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 2346.036008][T24255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2346.088653][T24255] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2346.804857][T24255] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 2347.113405][T24255] usb 2-1: USB disconnect, device number 24 [ 2347.138039][T28694] netlink: 'syz.4.6397': attribute type 1 has an invalid length. [ 2347.146827][T28694] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6397'. [ 2347.567338][T19842] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2348.277626][T19842] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2349.916080][T19842] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2350.989127][T19842] usb 4-1: string descriptor 0 read error: -71 [ 2351.008025][T19842] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2351.048683][T19842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.075252][T19842] usb 4-1: can't set config #2, error -71 [ 2351.090841][T19842] usb 4-1: USB disconnect, device number 9 [ 2353.668302][T28735] netlink: 'syz.1.6408': attribute type 1 has an invalid length. [ 2353.748412][T28735] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6408'. [ 2353.924925][T28735] workqueue: Failed to create a rescuer kthread for wq "phy4-mac-cmds": -EINTR [ 2354.239823][ T5814] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2354.358976][T24255] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2354.416573][ T5814] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2354.428334][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.460073][ T5814] usb 4-1: Product: syz [ 2354.474551][ T5814] usb 4-1: Manufacturer: syz [ 2354.502492][ T5814] usb 4-1: SerialNumber: syz [ 2354.522723][T24255] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2354.572712][T24255] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2354.596046][T24255] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2354.622374][T24255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.651976][T24255] usb 5-1: Product: syz [ 2354.675184][T24255] usb 5-1: Manufacturer: syz [ 2354.702128][T24255] usb 5-1: SerialNumber: syz [ 2354.747402][T24255] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 2354.798629][T24255] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2354.884447][T24255] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2354.991638][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2355.044164][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2356.666123][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2356.699106][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2356.916295][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2357.614222][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2357.637541][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2357.667327][ T5814] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2357.766397][ T5814] usb 4-1: USB disconnect, device number 10 [ 2357.775222][T15400] usb 5-1: USB disconnect, device number 25 [ 2357.905492][T15400] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2359.002456][ T30] audit: type=1400 audit(1786220585.035:862): avc: denied { write } for pid=28786 comm="syz.4.6423" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2359.733068][T15400] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2359.766745][T15400] ti_usb_3410_5052 5-1:2.0: device disconnected [ 2359.828780][T28799] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2359.838167][T28799] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2359.847898][T28799] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2360.394060][T23984] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2360.534921][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6429'. [ 2360.582657][T23984] usb 7-1: Using ep0 maxpacket: 32 [ 2360.602536][T23984] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 2360.705811][T28820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6427'. [ 2361.203632][T23984] usb 7-1: config 0 has no interface number 0 [ 2361.212174][T23984] usb 7-1: config 0 interface 12 has no altsetting 0 [ 2361.221306][T23984] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2361.230451][T23984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.238777][T23984] usb 7-1: Product: syz [ 2361.242968][T23984] usb 7-1: Manufacturer: syz [ 2361.247584][T23984] usb 7-1: SerialNumber: syz [ 2361.257401][T23984] usb 7-1: config 0 descriptor?? [ 2361.352126][T28808] bond1: entered promiscuous mode [ 2361.368971][T28820] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2361.380251][T28820] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2361.389830][T28820] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2362.926116][ T5814] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2363.776574][ T5814] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2364.355833][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.807439][ T5814] usb 3-1: Product: syz [ 2364.811733][ T5814] usb 3-1: Manufacturer: syz [ 2364.817935][ T5814] usb 3-1: SerialNumber: syz [ 2364.980882][T23984] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 2364.989117][T23984] f81534 7-1:0.12: f81534_find_config_idx: read failed: -32 [ 2364.996876][T23984] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 2365.004523][T23984] f81534 7-1:0.12: probe with driver f81534 failed with error -32 [ 2365.027700][ T5814] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 2365.075766][ T5814] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 2365.104150][ T5814] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2365.132794][ T5814] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2365.248440][T23984] usb 7-1: USB disconnect, device number 4 [ 2365.270429][ T5814] usb 3-1: USB disconnect, device number 10 [ 2365.828304][ T30] audit: type=1400 audit(1786220591.627:863): avc: denied { create } for pid=28855 comm="syz.6.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2366.023404][ T30] audit: type=1400 audit(1786220591.636:864): avc: denied { bind } for pid=28855 comm="syz.6.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2366.718411][T28868] : renamed from bond_slave_0 (while UP) [ 2367.629003][ T5814] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2368.298741][T28901] syzkaller0: entered promiscuous mode [ 2368.310196][T28901] syzkaller0: entered allmulticast mode [ 2368.479435][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 2368.544037][T28907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6458'. [ 2368.554161][T28907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6458'. [ 2368.563250][T28907] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6458'. [ 2368.706198][ T5814] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 2368.718799][ T5814] usb 5-1: config 0 has no interface number 0 [ 2368.725358][ T5814] usb 5-1: config 0 interface 12 has no altsetting 0 [ 2368.734391][ T5814] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2368.754406][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.769962][ T5814] usb 5-1: Product: syz [ 2368.774204][ T5814] usb 5-1: Manufacturer: syz [ 2368.789975][ T5814] usb 5-1: SerialNumber: syz [ 2368.803232][ T5814] usb 5-1: config 0 descriptor?? [ 2369.035963][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2369.070681][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2369.082274][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2369.099080][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2369.111914][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6462'. [ 2369.556907][T28926] : renamed from bond_slave_0 (while UP) [ 2370.689624][T28939] bond1: entered promiscuous mode [ 2370.705003][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6468'. [ 2371.155524][ T5814] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2371.803783][ T5814] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 2371.812372][ T5814] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2371.820247][ T5814] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 2371.863527][ T5814] usb 5-1: USB disconnect, device number 26 [ 2371.900468][T28951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6472'. [ 2372.090336][T28955] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2372.602675][T28949] bond1: entered promiscuous mode [ 2373.032303][T28962] evm: overlay not supported [ 2373.125872][ T30] audit: type=1400 audit(1786220598.394:865): avc: denied { remount } for pid=28965 comm="syz.3.6478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2373.147998][ T5814] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2373.327692][ T5814] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 2373.369887][ T5814] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2373.398553][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.461762][T28976] bond2: entered promiscuous mode [ 2373.485744][ T5814] usb 5-1: Product: syz [ 2373.584633][T28984] overlay: Unknown parameter '/' [ 2373.620232][ T5814] usb 5-1: Manufacturer: syz [ 2373.679518][T28988] netlink: zone id is out of range [ 2373.956298][ T30] audit: type=1400 audit(1786220599.133:866): avc: denied { write } for pid=28987 comm="syz.1.6484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2374.510813][ T5814] usb 5-1: SerialNumber: syz [ 2374.565323][ T5742] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2374.848430][T28996] bond2: entered promiscuous mode [ 2374.868874][T28995] __nla_validate_parse: 1 callbacks suppressed [ 2374.868892][T28995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6486'. [ 2374.885126][T28995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6486'. [ 2374.894100][T28995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6486'. [ 2375.011477][T28996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6487'. [ 2375.130069][T25895] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2375.871782][T29002] overlay: Unknown parameter '/' [ 2375.952556][T29004] netlink: zone id is out of range [ 2375.969481][ T5742] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2376.029273][T28960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2376.261238][T25895] usb 3-1: Using ep0 maxpacket: 32 [ 2376.290113][T28960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2376.329797][ T5742] ath9k_htc: Failed to initialize the device [ 2376.343796][T25895] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2376.365464][ T5742] usb 5-1: ath9k_htc: USB layer deinitialized [ 2377.032981][ T5814] usb 5-1: USB disconnect, device number 27 [ 2377.259162][T25895] usb 3-1: config 0 has no interface number 0 [ 2377.484104][T29018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6494'. [ 2377.494886][T25895] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2377.580392][T29022] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2377.975512][T25895] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2377.999689][T29020] bond2: entered promiscuous mode [ 2378.002843][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6495'. [ 2378.051910][T25895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.117771][T25895] usb 3-1: config 0 descriptor?? [ 2378.293875][T29032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6496'. [ 2379.251043][T29029] bond3: entered promiscuous mode [ 2379.257492][T29035] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2379.266869][T29035] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2379.276487][T29035] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2379.442862][T29029] netlink: zone id is out of range [ 2379.587709][T25895] usb 3-1: can't set config #0, error -71 [ 2380.913264][T25895] usb 3-1: USB disconnect, device number 11 [ 2381.473274][T29045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6500'. [ 2381.553447][T29043] bond1: entered promiscuous mode [ 2381.752710][T23984] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2381.851286][T29056] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2382.940972][T29061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6504'. [ 2383.210939][T29060] bond3: entered promiscuous mode [ 2383.289340][T29060] overlay: Unknown parameter '/' [ 2383.773193][T23984] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 2384.105135][T23984] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2384.116309][T23984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.124401][T23984] usb 7-1: Product: syz [ 2384.128761][T23984] usb 7-1: Manufacturer: syz [ 2384.133937][T23984] usb 7-1: SerialNumber: syz [ 2384.289520][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2384.368938][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2384.660104][ T5814] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2385.165155][T23984] usb 7-1: USB disconnect, device number 5 [ 2385.621311][ T5742] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2386.218992][ T5814] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2386.708885][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 2386.714191][ T5814] ath9k_htc: Failed to initialize the device [ 2386.728353][ T5742] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2386.739145][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.748883][T23984] usb 7-1: ath9k_htc: USB layer deinitialized [ 2386.756809][ T5742] usb 5-1: Product: syz [ 2386.772834][ T5742] usb 5-1: Manufacturer: syz [ 2386.779020][ T5742] usb 5-1: SerialNumber: syz [ 2386.834905][ T5742] usb 5-1: config 0 descriptor?? [ 2386.932366][ T5742] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2389.040827][T29114] syzkaller0: entered promiscuous mode [ 2389.046922][T29114] syzkaller0: entered allmulticast mode [ 2389.170834][ T5742] gspca_ov534_9: reg_r err -32 [ 2389.258457][T12210] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2389.281236][T29119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6520'. [ 2389.406853][T29124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6520'. [ 2389.481348][T12210] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 2390.149929][T29124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6520'. [ 2390.233685][T29124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6520'. [ 2390.277663][ T5742] gspca_ov534_9: Unknown sensor 0000 [ 2390.278560][ T5742] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2390.403881][T12210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2390.421888][T12210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.433798][T23984] usb 5-1: USB disconnect, device number 28 [ 2390.465601][T12210] usb 3-1: Product: syz [ 2390.504913][T12210] usb 3-1: Manufacturer: syz [ 2390.558644][T12210] usb 3-1: SerialNumber: syz [ 2390.575227][T29124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6520'. [ 2391.291082][T25895] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2391.597478][T29112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2391.621740][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6525'. [ 2391.653666][T29112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2391.696670][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6525'. [ 2392.031483][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6525'. [ 2392.050435][T29112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.076570][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6525'. [ 2392.086514][T29141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6525'. [ 2392.128834][T29112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.180270][T29112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2392.229161][T29112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2392.280888][T23984] usb 3-1: USB disconnect, device number 12 [ 2392.537592][T25895] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2392.593040][T25895] ath9k_htc: Failed to initialize the device [ 2392.625159][T23984] usb 3-1: ath9k_htc: USB layer deinitialized [ 2392.878907][T29158] syzkaller0: entered promiscuous mode [ 2392.886326][T29158] syzkaller0: entered allmulticast mode [ 2393.007137][T23984] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2395.524446][T29174] __nla_validate_parse: 5 callbacks suppressed [ 2395.524466][T29174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6536'. [ 2396.861719][T29190] Bluetooth: MGMT ver 1.23 [ 2398.098861][T29203] syzkaller0: entered promiscuous mode [ 2399.690381][T29203] syzkaller0: entered allmulticast mode [ 2401.712685][T29232] jffs2: notice: (29232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 2401.760315][ T30] audit: type=1400 audit(1786220624.816:867): avc: denied { write } for pid=29231 comm="syz.6.6554" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2401.771287][T23984] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2401.807050][ T30] audit: type=1400 audit(1786220624.853:868): avc: denied { create } for pid=29231 comm="syz.6.6554" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 2401.842351][T29239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6554'. [ 2401.854155][T29239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6554'. [ 2402.008457][T23984] usb 3-1: Using ep0 maxpacket: 32 [ 2402.290372][T23984] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2402.382691][T23984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.447687][T23984] usb 3-1: Product: syz [ 2402.457651][T23984] usb 3-1: Manufacturer: syz [ 2402.472585][T23984] usb 3-1: SerialNumber: syz [ 2402.492126][T23984] usb 3-1: config 0 descriptor?? [ 2402.516066][T23984] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2403.933225][T23984] gspca_ov534_9: reg_w failed -110 [ 2404.597194][T23984] gspca_ov534_9: Unknown sensor 0000 [ 2404.597284][T23984] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2404.811938][ T30] audit: type=1400 audit(1786220627.641:869): avc: denied { override_creds } for pid=29259 comm="syz.1.6560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2405.729553][T25895] usb 3-1: USB disconnect, device number 14 [ 2408.456009][ T30] audit: type=1400 audit(1786220631.011:870): avc: denied { ioctl } for pid=29298 comm="syz.4.6569" path="socket:[183465]" dev="sockfs" ino=183465 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2409.220203][T29309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6571'. [ 2409.681550][ T5329] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2409.703389][T29304] can0: slcan on ttyS3. [ 2409.896512][ T5329] usb 5-1: config 0 has no interfaces? [ 2409.920060][ T5329] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2409.993607][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.070816][ T5329] usb 5-1: config 0 descriptor?? [ 2410.127393][T29317] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.6573'. [ 2410.168180][T29307] can0 (unregistered): slcan off ttyS3. [ 2410.375502][ T5742] usb 5-1: USB disconnect, device number 29 [ 2410.576381][ T5329] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2410.704111][ T30] audit: type=1400 audit(1786220633.079:871): avc: denied { write } for pid=29316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2410.761364][ T5329] usb 3-1: Using ep0 maxpacket: 32 [ 2410.816786][ T5329] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2410.881582][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.944659][ T5329] usb 3-1: Product: syz [ 2410.997711][ T5329] usb 3-1: Manufacturer: syz [ 2411.046745][ T5329] usb 3-1: SerialNumber: syz [ 2411.163246][ T5329] usb 3-1: config 0 descriptor?? [ 2411.467184][ T5329] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2411.851663][ T30] audit: type=1400 audit(1786220634.140:872): avc: denied { write } for pid=29341 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2411.941057][T29344] netlink: 'syz.4.6579': attribute type 1 has an invalid length. [ 2411.978077][T29344] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6579'. [ 2413.562218][ T30] audit: type=1400 audit(1786220635.719:873): avc: denied { write } for pid=29351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2413.606810][T29371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6582'. [ 2413.675735][ T5329] gspca_ov534_9: reg_r err -32 [ 2413.793460][T15400] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2413.999631][ T5329] gspca_ov534_9: Unknown sensor 0000 [ 2413.999708][ T5329] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2414.021340][T15400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2414.055110][T15400] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2414.105423][T15400] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2414.155577][T15400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2414.169628][ T30] audit: type=1400 audit(1786220636.282:874): avc: denied { write } for pid=29375 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2414.265148][T15400] usb 2-1: config 0 descriptor?? [ 2414.309815][T15400] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2414.538197][T15400] usb 2-1: USB disconnect, device number 25 [ 2414.800952][ T5329] usb 3-1: USB disconnect, device number 15 [ 2415.028702][T15400] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2415.254770][T15400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2415.265255][ T5329] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2415.316642][T15400] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2415.377079][T15400] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2415.431051][T15400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2415.499707][ T5329] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2415.566653][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.567354][T15400] usb 2-1: config 0 descriptor?? [ 2415.586066][ T5329] usb 3-1: Product: syz [ 2415.608708][ T5329] usb 3-1: Manufacturer: syz [ 2415.650063][ T5329] usb 3-1: SerialNumber: syz [ 2415.768848][T15400] aiptek 2-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 2415.915540][T15400] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2416.388674][T29392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2416.551453][T29392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2416.783762][ T5329] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2416.877331][ T5329] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2416.903653][ T5329] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2416.914869][ T5329] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2416.929892][T29396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6588'. [ 2416.965217][ T5329] usb 3-1: USB disconnect, device number 16 [ 2417.271881][T24255] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2417.396575][T29409] syzkaller0: entered promiscuous mode [ 2417.417620][T29409] syzkaller0: entered allmulticast mode [ 2417.454359][T24255] usb 4-1: config 0 has no interfaces? [ 2417.460156][T24255] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2417.469598][T24255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2417.482998][T24255] usb 4-1: config 0 descriptor?? [ 2417.613320][T29414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6594'. [ 2417.679384][T29416] jffs2: notice: (29416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 2417.730416][ T5742] usb 4-1: USB disconnect, device number 11 [ 2417.764107][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6595'. [ 2417.773290][T29416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6595'. [ 2417.909563][T23984] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2418.095321][T23984] usb 3-1: config 0 has no interfaces? [ 2418.103386][T23984] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2418.115456][T23984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2418.131249][T23984] usb 3-1: config 0 descriptor?? [ 2418.565794][ T5742] usb 3-1: USB disconnect, device number 17 [ 2419.234471][T24255] usb 2-1: USB disconnect, device number 26 [ 2419.545041][T29446] syzkaller0: entered promiscuous mode [ 2419.552938][T29446] syzkaller0: entered allmulticast mode [ 2419.610269][ T5604] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2419.656401][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'. [ 2419.732842][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'. [ 2419.746699][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'. [ 2419.757604][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'. [ 2419.767638][T29450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'. [ 2419.852473][ T5604] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2419.861848][ T5604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.881343][ T5604] usb 5-1: Product: syz [ 2419.907398][ T5604] usb 5-1: Manufacturer: syz [ 2419.935471][ T5604] usb 5-1: SerialNumber: syz [ 2420.623749][ T5604] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2420.651299][ T5604] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2420.688670][ T5604] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2420.838403][T29459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6609'. [ 2422.513361][T22085] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2422.759465][T22085] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.851629][T22085] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2422.961824][ T5604] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2422.995702][T22085] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2423.053469][T22085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.066027][ T5604] usb 5-1: USB disconnect, device number 30 [ 2423.234511][T29479] __nla_validate_parse: 9 callbacks suppressed [ 2423.234541][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 2423.298757][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 2423.309489][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 2423.324658][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 2423.336524][T29479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 2423.589841][T22085] usb 2-1: config 0 descriptor?? [ 2423.603962][T22085] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2423.897119][T22085] usb 2-1: USB disconnect, device number 27 [ 2423.965914][T29486] program syz.3.6616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2423.977207][T29486] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2425.422862][T29493] jffs2: notice: (29493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 2425.446744][T29494] syzkaller0: entered promiscuous mode [ 2425.452445][T29494] syzkaller0: entered allmulticast mode [ 2425.478509][T29493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6619'. [ 2425.508624][T29493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6619'. [ 2425.524406][T22085] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2425.711150][T22085] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2425.778124][T22085] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2425.914754][T29503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6621'. [ 2425.970238][T29503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6621'. [ 2425.984663][T29503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6621'. [ 2426.176123][T22085] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2426.332220][T22085] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2426.477981][T22085] usb 2-1: config 0 descriptor?? [ 2426.569837][T22085] usb 2-1: can't set config #0, error -71 [ 2426.706387][T22085] usb 2-1: USB disconnect, device number 28 [ 2427.203372][T22085] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2427.369837][T22085] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2427.401181][T22085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.464787][T22085] usb 2-1: Product: syz [ 2427.489654][T22085] usb 2-1: Manufacturer: syz [ 2427.523846][T22085] usb 2-1: SerialNumber: syz [ 2428.290290][T29526] bond4: entered promiscuous mode [ 2428.361351][T22085] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2428.624390][T22085] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2428.662482][T22085] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2428.730658][T29532] overlay: Unknown parameter '/' [ 2428.746566][T22085] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 2428.762629][T29532] netlink: zone id is out of range [ 2428.964601][T22085] usb 2-1: USB disconnect, device number 29 [ 2429.570519][T29536] syzkaller0: entered promiscuous mode [ 2429.618164][T29536] syzkaller0: entered allmulticast mode [ 2430.995174][T15400] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2431.175609][T15400] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2431.201865][T15400] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2431.282354][T15400] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2431.305148][T29551] __nla_validate_parse: 13 callbacks suppressed [ 2431.305183][T29551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6634'. [ 2431.358470][T15400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2431.506112][T15400] usb 7-1: config 0 descriptor?? [ 2431.606493][T29556] program syz.1.6635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2431.616339][T29556] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2432.588769][T15400] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2432.971215][T15400] usb 7-1: USB disconnect, device number 6 [ 2433.216238][T29563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6638'. [ 2433.261539][T29563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6638'. [ 2433.296284][T29563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6638'. [ 2433.333893][T29563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6638'. [ 2433.368006][T29563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6638'. [ 2433.453645][T15400] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2433.648922][T15400] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2433.688319][T15400] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2433.747583][T15400] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2433.786841][T15400] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2433.822161][T15400] usb 7-1: config 0 descriptor?? [ 2433.846514][T15400] aiptek 7-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 2433.897846][T15400] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2434.476195][T29587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2434.486273][T29587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2436.419983][T19842] usb 7-1: USB disconnect, device number 7 [ 2436.832882][T19842] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2437.094251][T29624] program syz.1.6650 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2437.104167][T29624] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2437.116165][T19842] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 2437.775754][ T30] audit: type=1400 audit(1786220658.060:875): avc: denied { write } for pid=29616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2438.202731][T19842] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2438.212480][T19842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2438.220724][T19842] usb 7-1: Product: syz [ 2438.224916][T19842] usb 7-1: Manufacturer: syz [ 2438.229518][T19842] usb 7-1: SerialNumber: syz [ 2438.251694][ T5742] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2438.446522][ T30] audit: type=1400 audit(1786220658.688:876): avc: denied { write } for pid=29642 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2438.545374][T29605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2438.584465][T29605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2438.701104][T29605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2438.717047][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'. [ 2438.746662][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'. [ 2438.746923][T29605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2438.788338][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'. [ 2438.804559][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'. [ 2438.830836][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6657'. [ 2438.916643][T29605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2438.994360][T29605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2439.708099][ T5742] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2440.412103][ T5742] ath9k_htc: Failed to initialize the device [ 2440.452831][T23984] usb 7-1: USB disconnect, device number 8 [ 2440.927468][T23984] usb 7-1: ath9k_htc: USB layer deinitialized [ 2441.553805][ T30] audit: type=1400 audit(1786220661.559:877): avc: denied { write } for pid=29661 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2441.625556][ T30] audit: type=1400 audit(1786220661.633:878): avc: denied { write } for pid=29693 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2441.793867][ T5742] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2441.957994][ T5742] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2442.029464][ T5742] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2442.104138][ T30] audit: type=1400 audit(1786220662.049:879): avc: denied { write } for pid=29696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2442.203780][ T5742] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2442.248319][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.328699][ T5742] usb 7-1: Product: syz [ 2442.355456][ T5742] usb 7-1: Manufacturer: syz [ 2442.372826][ T5742] usb 7-1: SerialNumber: syz [ 2442.373177][ T30] audit: type=1400 audit(1786220662.316:880): avc: denied { write } for pid=29717 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2442.444392][ T5742] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 2442.592555][ T5742] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2442.930682][ T5742] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2444.155952][T29657] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2444.277993][ T30] audit: type=1400 audit(1786220664.080:881): avc: denied { write } for pid=29726 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2444.323162][T29657] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 2444.334839][T29657] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2444.348321][T29657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.375949][T29657] usb 4-1: Product: syz [ 2444.393350][T29657] usb 4-1: Manufacturer: syz [ 2444.408327][T29657] usb 4-1: SerialNumber: syz [ 2444.436574][ T5742] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2444.445719][ T5604] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2444.458335][ T30] audit: type=1400 audit(1786220664.246:882): avc: denied { write } for pid=29750 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2444.614835][ T5604] usb 2-1: Using ep0 maxpacket: 16 [ 2444.628131][ T5604] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 2444.647242][ T5604] usb 2-1: config 0 has no interface number 0 [ 2444.725160][ T5604] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2444.976176][ T5604] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2445.267868][ T5604] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2445.390460][T29732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2445.459826][ T5604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.553565][T29732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2445.605023][ T5604] usb 2-1: Product: syz [ 2445.664470][ T5604] usb 2-1: Manufacturer: syz [ 2445.748478][ T5604] usb 2-1: SerialNumber: syz [ 2445.866490][T29732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2445.954050][T23984] usb 7-1: USB disconnect, device number 9 [ 2445.976277][T29732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2445.986699][ T5742] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2446.019548][T29732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2446.030524][ T5604] usb 2-1: config 0 descriptor?? [ 2446.036172][T23984] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2446.047031][T29742] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2446.061272][T29742] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2446.067588][T29732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2446.121493][ T5742] ath9k_htc: Failed to initialize the device [ 2446.125756][T22085] usb 4-1: USB disconnect, device number 12 [ 2446.214998][T22085] usb 4-1: ath9k_htc: USB layer deinitialized [ 2446.240344][T23984] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2446.283635][T23984] ti_usb_3410_5052 7-1:2.0: device disconnected [ 2446.363355][T29742] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2446.401732][T29742] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2446.654164][ T5604] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2446.700687][T22085] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2446.754963][T15400] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2446.884835][T22085] usb 4-1: Using ep0 maxpacket: 32 [ 2446.904207][T22085] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 2446.930036][T22085] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2446.959346][T22085] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 1 [ 2446.982661][T15400] usb 3-1: config 0 has no interfaces? [ 2446.991275][T15400] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2447.000687][T22085] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2447.012363][T15400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.020962][T22085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2447.035157][T15400] usb 3-1: config 0 descriptor?? [ 2447.045680][T22085] usb 4-1: config 0 descriptor?? [ 2447.081252][T22085] mos7840 4-1:0.0: required endpoints missing [ 2447.098848][ T5604] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2447.109502][ T5604] asix 2-1:0.34: probe with driver asix failed with error -32 [ 2447.298135][T15400] usb 3-1: USB disconnect, device number 18 [ 2448.757950][T14702] usb 2-1: USB disconnect, device number 30 [ 2448.999508][ T5604] usb 4-1: USB disconnect, device number 13 [ 2449.486657][ T5604] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2449.541100][T29818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6689'. [ 2449.602716][ T30] audit: type=1400 audit(1786220668.991:883): avc: denied { write } for pid=29802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2449.636479][T12210] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2449.660922][ T5604] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2449.668371][T29818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6689'. [ 2449.684614][T29818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6689'. [ 2449.701389][T29818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6689'. [ 2449.715953][T29818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6689'. [ 2449.746381][ T5604] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2449.786227][ T5604] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2449.806044][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.857512][ T5604] usb 4-1: Product: syz [ 2449.867046][ T30] audit: type=1400 audit(1786220669.231:884): avc: denied { write } for pid=29825 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2449.894112][ T5604] usb 4-1: Manufacturer: syz [ 2449.894206][T12210] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2449.903979][ T5604] usb 4-1: SerialNumber: syz [ 2449.944973][ T5604] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 2449.979410][T12210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.009312][ T5604] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2450.009614][T12210] usb 3-1: config 0 has no interface number 0 [ 2450.056419][T12210] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2450.065472][ T5604] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2450.102702][T12210] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2450.136201][T12210] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2450.177061][T12210] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2450.207060][T12210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.241336][T12210] usb 3-1: Product: syz [ 2450.286753][T12210] usb 3-1: Manufacturer: syz [ 2450.316841][T12210] usb 3-1: SerialNumber: syz [ 2450.337103][T12210] usb 3-1: config 0 descriptor?? [ 2450.744290][ T30] audit: type=1400 audit(1786220670.053:885): avc: denied { write } for pid=29831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2450.842684][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2450.849013][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2451.073077][ T30] audit: type=1400 audit(1786220670.348:886): avc: denied { write } for pid=29846 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2451.537832][T29857] bond3: entered promiscuous mode [ 2451.655497][T29860] overlay: Unknown parameter '/' [ 2451.678380][T29860] netlink: zone id is out of range [ 2452.785407][T15400] usb 3-1: USB disconnect, device number 19 [ 2452.838758][T22085] usb 4-1: USB disconnect, device number 14 [ 2452.923111][T22085] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2452.977394][T22085] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2452.998387][T29868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6696'. [ 2453.015419][T22085] ti_usb_3410_5052 4-1:2.0: device disconnected [ 2453.040845][T29875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6696'. [ 2453.087825][T29875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6696'. [ 2453.147068][T29874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6697'. [ 2453.190517][T29875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6696'. [ 2453.686635][ T30] audit: type=1400 audit(1786220672.749:887): avc: denied { write } for pid=29855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2454.110905][T29888] pim6reg: entered allmulticast mode [ 2454.117836][T29890] pim6reg: left allmulticast mode [ 2454.589260][ T30] audit: type=1400 audit(1786220673.579:888): avc: denied { write } for pid=29892 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2454.735702][T29881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2455.442076][T12210] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2455.964620][T12210] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2455.974399][T12210] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2456.004935][T12210] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.060144][T12210] usb 4-1: config 63 has no interface number 0 [ 2456.077034][T12210] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2456.316974][T12210] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2456.486169][T12210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.496140][T12210] usb 4-1: Product: syz [ 2456.504174][T12210] usb 4-1: Manufacturer: syz [ 2456.513333][T12210] usb 4-1: SerialNumber: syz [ 2456.751296][T12210] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22 [ 2456.812785][T12210] usb 4-1: USB disconnect, device number 15 [ 2456.833628][T29924] __nla_validate_parse: 5 callbacks suppressed [ 2456.833640][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6707'. [ 2456.926896][T29657] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2457.009394][ T30] audit: type=1400 audit(1786220675.832:889): avc: denied { write } for pid=29896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2457.104227][T29657] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2457.136435][T29657] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2457.172679][T29657] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2457.205038][T29657] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2457.217039][ T30] audit: type=1400 audit(1786220675.869:890): avc: denied { create } for pid=29926 comm="syz.2.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2457.264675][T29657] usb 5-1: Product: syz [ 2457.269369][ T30] audit: type=1400 audit(1786220675.869:891): avc: denied { read } for pid=29926 comm="syz.2.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2457.273247][T29657] usb 5-1: Manufacturer: syz [ 2457.350281][T29657] usb 5-1: SerialNumber: syz [ 2457.407669][ T30] audit: type=1400 audit(1786220676.201:892): avc: denied { write } for pid=29931 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2457.475184][T29657] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 2457.534946][T29657] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2457.611826][T29657] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2457.848815][T12210] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2458.062071][T12210] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2458.139012][T12210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2458.278241][T12210] usb 3-1: config 0 has no interface number 0 [ 2458.343324][T12210] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2458.419842][T12210] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2458.528137][T12210] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2458.694104][T12210] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2458.817072][T12210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.881810][T12210] usb 3-1: Product: syz [ 2458.930117][T12210] usb 3-1: Manufacturer: syz [ 2458.948669][T12210] usb 3-1: SerialNumber: syz [ 2458.971764][T12210] usb 3-1: config 0 descriptor?? [ 2459.160805][ T30] audit: type=1400 audit(1786220677.771:893): avc: denied { write } for pid=29935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2459.290003][ T30] audit: type=1400 audit(1786220677.900:894): avc: denied { write } for pid=29967 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2460.036258][T29975] overlay: Unknown parameter '/' [ 2460.071366][T29975] netlink: zone id is out of range [ 2460.401640][T15400] usb 5-1: USB disconnect, device number 31 [ 2460.442659][T15400] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2460.488352][T15400] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2460.523776][T15400] ti_usb_3410_5052 5-1:2.0: device disconnected [ 2460.726514][T29657] usb 3-1: USB disconnect, device number 20 [ 2460.738863][T12210] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2460.831137][T29987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6720'. [ 2460.862510][T29987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6720'. [ 2460.903686][T12210] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2460.921526][T29987] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6720'. [ 2460.942550][T12210] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2460.944233][T29991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6721'. [ 2461.024426][T12210] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2461.069645][T12210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2461.109823][T12210] usb 2-1: Product: syz [ 2461.136344][T12210] usb 2-1: Manufacturer: syz [ 2461.204095][T12210] usb 2-1: SerialNumber: syz [ 2461.218104][T12210] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 2461.245805][T12210] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2461.286364][T12210] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2463.016240][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6724'. [ 2463.109680][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6724'. [ 2463.130962][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6724'. [ 2463.168128][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6724'. [ 2463.184883][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6724'. [ 2463.599565][T30013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6728'. [ 2463.614220][T30013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6728'. [ 2463.623420][T30013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6728'. [ 2463.632549][T30013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6728'. [ 2463.643470][T30013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6728'. [ 2463.755585][T14702] usb 2-1: USB disconnect, device number 31 [ 2463.817543][T14702] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2463.886375][T14702] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2463.960304][T14702] ti_usb_3410_5052 2-1:2.0: device disconnected [ 2465.060794][T14702] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2465.253344][T14702] usb 3-1: config 0 has no interfaces? [ 2465.269082][T14702] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2465.315224][T14702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2465.370169][T14702] usb 3-1: config 0 descriptor?? [ 2465.706423][ T5604] usb 3-1: USB disconnect, device number 21 [ 2466.232010][ T30] audit: type=1400 audit(1786220684.344:895): avc: denied { write } for pid=30042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2466.440415][ T30] audit: type=1400 audit(1786220684.538:896): avc: denied { write } for pid=30068 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2468.575669][T30087] pim6reg: entered allmulticast mode [ 2468.615805][T30084] pim6reg: left allmulticast mode [ 2468.724438][T30087] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2469.393522][T15400] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2469.617466][T15400] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2469.632472][T14702] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2469.708927][T15400] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2469.795076][T15400] usb 3-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2469.826211][T14702] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2469.838616][T15400] usb 3-1: config 63 has no interface number 0 [ 2469.855196][ T30] audit: type=1400 audit(1786220687.686:897): avc: denied { write } for pid=30079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2469.878374][T15400] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2469.892516][T15400] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2469.904567][T15400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2469.917178][T15400] usb 3-1: Product: syz [ 2469.921452][T15400] usb 3-1: Manufacturer: syz [ 2469.921662][T14702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2469.926983][T15400] usb 3-1: SerialNumber: syz [ 2469.986688][T14702] usb 2-1: config 0 has no interface number 0 [ 2470.009062][T14702] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2470.020945][T14702] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2470.051327][T14702] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2470.101383][T14702] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2470.127791][T14702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2470.138318][ T30] audit: type=1400 audit(1786220687.954:898): avc: denied { write } for pid=30114 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2470.144846][T14702] usb 2-1: Product: syz [ 2470.167918][T30115] __nla_validate_parse: 18 callbacks suppressed [ 2470.167948][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6750'. [ 2470.197321][T14702] usb 2-1: Manufacturer: syz [ 2470.202300][T14702] usb 2-1: SerialNumber: syz [ 2470.239942][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6750'. [ 2470.240103][T14702] usb 2-1: config 0 descriptor?? [ 2470.311160][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6750'. [ 2470.361185][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6750'. [ 2470.387530][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6750'. [ 2470.466355][T14702] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2471.001013][T30131] pim6reg: entered allmulticast mode [ 2471.187061][T30126] pim6reg: left allmulticast mode [ 2471.276841][T30131] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2472.261560][T15400] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 2472.290067][T15400] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2472.343504][T15400] uvcvideo 3-1:63.66: No valid video chain found. [ 2472.398717][T15400] usb 3-1: USB disconnect, device number 22 [ 2473.802666][T24255] usb 2-1: USB disconnect, device number 32 [ 2474.200703][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6759'. [ 2474.267140][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6759'. [ 2474.296506][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6759'. [ 2474.306593][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6759'. [ 2474.339706][T30151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6759'. [ 2475.808410][T30175] program syz.2.6764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2475.818158][T30175] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2477.237427][T30176] __nla_validate_parse: 8 callbacks suppressed [ 2477.237452][T30176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6765'. [ 2477.267293][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6765'. [ 2477.290955][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6765'. [ 2477.407314][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6765'. [ 2477.426224][T30179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6765'. [ 2477.676807][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6767'. [ 2477.718114][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6767'. [ 2477.746695][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6767'. [ 2477.763586][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6767'. [ 2477.794798][T30186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6767'. [ 2477.961667][T24255] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2478.127190][T24255] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2478.151274][T24255] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2478.170520][T24255] usb 7-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2478.206038][T24255] usb 7-1: config 63 has no interface number 0 [ 2478.240145][T24255] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2478.333999][T24255] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2478.417094][T24255] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.481129][T24255] usb 7-1: Product: syz [ 2478.527598][T24255] usb 7-1: Manufacturer: syz [ 2478.545862][T24255] usb 7-1: SerialNumber: syz [ 2479.321261][T30209] program syz.1.6772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2479.369101][T30209] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2479.862946][ T30] audit: type=1400 audit(1786220696.927:899): avc: denied { listen } for pid=30214 comm="syz.4.6776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2479.884381][ T30] audit: type=1400 audit(1786220696.955:900): avc: denied { accept } for pid=30214 comm="syz.4.6776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2481.139978][T24255] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2481.150300][T24255] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2481.159060][T24255] uvcvideo 7-1:63.66: No valid video chain found. [ 2481.207586][T24255] usb 7-1: USB disconnect, device number 10 [ 2481.281124][ T5329] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2481.386395][T15400] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2481.474191][ T5329] usb 5-1: config 0 has no interfaces? [ 2481.483832][ T5329] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2481.506155][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.533833][ T5329] usb 5-1: config 0 descriptor?? [ 2481.559432][T15400] usb 4-1: config 0 has no interfaces? [ 2481.572318][T15400] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2481.595488][T15400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.633968][T15400] usb 4-1: config 0 descriptor?? [ 2481.796696][T15400] usb 5-1: USB disconnect, device number 32 [ 2481.888862][ T5329] usb 4-1: USB disconnect, device number 16 [ 2482.500207][T29657] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2482.747248][T29657] usb 3-1: config 0 has no interfaces? [ 2482.764847][T29657] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2482.809478][T29657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.869882][T29657] usb 3-1: config 0 descriptor?? [ 2483.247832][T29657] usb 3-1: USB disconnect, device number 23 [ 2484.511809][T30291] netlink: 'syz.2.6791': attribute type 10 has an invalid length. [ 2484.621691][T30291] team0: Port device dummy0 added [ 2485.231057][T30295] __nla_validate_parse: 16 callbacks suppressed [ 2485.231120][T30295] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6794'. [ 2486.779720][ T30] audit: type=1400 audit(1786220703.270:901): avc: denied { write } for pid=30314 comm="syz.1.6799" name="instances" dev="tracefs" ino=3227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2486.870771][ T30] audit: type=1400 audit(1786220703.353:902): avc: denied { add_name } for pid=30314 comm="syz.1.6799" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2486.957169][ T30] audit: type=1400 audit(1786220703.353:903): avc: denied { create } for pid=30314 comm="syz.1.6799" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 2487.078400][ T30] audit: type=1400 audit(1786220703.473:904): avc: denied { bind } for pid=30314 comm="syz.1.6799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2487.224520][T30323] netlink: 'syz.2.6801': attribute type 10 has an invalid length. [ 2488.424483][T30328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6803'. [ 2488.505303][T30329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6802'. [ 2488.577115][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6802'. [ 2488.588449][ T30] audit: type=1400 audit(1786220704.987:905): avc: denied { read } for pid=30327 comm="syz.3.6803" dev="nsfs" ino=4026532799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2488.622231][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6802'. [ 2488.675406][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6802'. [ 2488.766318][T30336] netlink: 'syz.2.6804': attribute type 10 has an invalid length. [ 2488.955418][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6802'. [ 2490.127365][ T30] audit: type=1400 audit(1786220704.987:906): avc: denied { open } for pid=30327 comm="syz.3.6803" path="net:[4026532799]" dev="nsfs" ino=4026532799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2491.231813][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6806'. [ 2491.275168][T30371] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6807'. [ 2491.277365][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6806'. [ 2491.294612][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6806'. [ 2491.468038][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6806'. [ 2491.478915][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6806'. [ 2493.156198][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6816'. [ 2493.191462][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6816'. [ 2493.212250][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6816'. [ 2493.238592][T30400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6816'. [ 2493.418684][ T5604] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2493.454060][ T30] audit: type=1400 audit(1786220709.483:907): avc: denied { write } for pid=30397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2493.540500][ T30] audit: type=1400 audit(1786220709.557:908): avc: denied { write } for pid=30412 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2493.596720][ T5604] usb 7-1: config 0 has no interfaces? [ 2493.602578][ T5604] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2493.616569][ T5604] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.660758][ T5604] usb 7-1: config 0 descriptor?? [ 2493.930198][ T5604] usb 7-1: USB disconnect, device number 11 [ 2494.134993][ T30] audit: type=1400 audit(1786220710.110:909): avc: denied { write } for pid=30415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2494.205278][ T30] audit: type=1400 audit(1786220710.166:910): avc: denied { write } for pid=30432 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2494.247044][T30430] lo speed is unknown, defaulting to 1000 [ 2494.832369][ T30] audit: type=1400 audit(1786220710.747:911): avc: denied { write } for pid=30435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2494.958941][ T30] audit: type=1400 audit(1786220710.867:912): avc: denied { write } for pid=30456 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2494.991238][T14702] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 2495.023425][ T5604] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2495.198391][T14702] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2495.220580][ T5604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2495.238574][T14702] usb 4-1: config 0 has no interface number 0 [ 2495.255622][ T5604] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2495.288139][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.302939][T14702] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2495.321616][T14702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2495.330458][ T5604] usb 5-1: config 0 descriptor?? [ 2495.349124][T14702] usb 4-1: Product: syz [ 2495.353584][T14702] usb 4-1: Manufacturer: syz [ 2495.362614][T14702] usb 4-1: SerialNumber: syz [ 2495.396189][T14702] usb 4-1: config 0 descriptor?? [ 2495.419112][T14702] usb 4-1: selecting invalid altsetting 1 [ 2495.432902][T14702] dvb_ttusb_budget: ttusb_init_controller: error [ 2495.442123][T14702] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2495.571774][ T5604] usbhid 5-1:0.0: can't add hid device: -71 [ 2495.594145][ T30] audit: type=1400 audit(1786220711.449:913): avc: denied { write } for pid=30461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2495.597672][ T5604] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2495.639202][T14702] DVB: Unable to find symbol stv0299_attach() [ 2495.711973][ T5604] usb 5-1: USB disconnect, device number 33 [ 2495.886707][T14702] DVB: Unable to find symbol tda8083_attach() [ 2495.895608][T14702] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2496.065002][ T30] audit: type=1400 audit(1786220711.892:914): avc: denied { write } for pid=30480 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2496.202505][ T5604] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2496.410311][ T5604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2496.444911][ T5604] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2496.472356][ T5604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2496.502632][ T5604] usb 5-1: config 0 descriptor?? [ 2496.623442][T30487] netlink: 'syz.6.6826': attribute type 10 has an invalid length. [ 2496.674069][T30487] team0: Port device dummy0 added [ 2497.738627][T30492] __nla_validate_parse: 1 callbacks suppressed [ 2497.738647][T30492] netlink: 1852 bytes leftover after parsing attributes in process `syz.1.6828'. [ 2497.855945][T29657] usb 4-1: USB disconnect, device number 17 [ 2498.045071][ T30] audit: type=1400 audit(1786220713.711:915): avc: denied { ioctl } for pid=30497 comm="syz.2.6832" path="/153/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 2498.257433][ T5604] usbhid 5-1:0.0: can't add hid device: -71 [ 2498.271797][ T5604] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2498.353947][T30496] pim6reg: entered allmulticast mode [ 2498.372526][T30496] pim6reg: left allmulticast mode [ 2498.379589][ T5604] usb 5-1: USB disconnect, device number 34 [ 2498.734755][T30496] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2499.273175][T30529] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6841'. [ 2499.274314][T30527] lo speed is unknown, defaulting to 1000 [ 2499.315122][T30530] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6842'. [ 2499.433733][ T5329] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2499.796119][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 2499.959769][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 2499.980866][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 2499.991764][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 2500.003887][T30538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6843'. [ 2500.190936][T30543] syzkaller0: entered promiscuous mode [ 2500.229701][T30543] syzkaller0: entered allmulticast mode [ 2500.282061][T30545] tipc: Started in network mode [ 2500.317016][T30545] tipc: Node identity 9e34c5e3d9e4, cluster identity 4711 [ 2500.436245][T30545] tipc: Enabled bearer , priority 0 [ 2500.555835][T30543] tipc: Resetting bearer [ 2500.640289][T30542] tipc: Resetting bearer [ 2500.968664][ T5329] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2500.996017][ T5329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2501.012345][ T5329] usb 5-1: Product: syz [ 2501.032461][ T5329] usb 5-1: Manufacturer: syz [ 2501.051927][ T5329] usb 5-1: SerialNumber: syz [ 2501.178681][T30542] tipc: Disabling bearer [ 2501.757096][ T5329] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2501.774976][ T5329] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2501.785874][ T5329] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2502.257092][ T5329] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2502.292436][T30594] lo speed is unknown, defaulting to 1000 [ 2502.308629][ T5329] usb 5-1: USB disconnect, device number 35 [ 2504.191960][T30620] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6863'. [ 2504.231540][T30616] lo speed is unknown, defaulting to 1000 [ 2504.926843][T30635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6870'. [ 2505.198459][T30637] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6871'. [ 2505.450093][ T30] audit: type=1400 audit(1786220720.552:916): avc: denied { write } for pid=30638 comm="syz.6.6872" name="extensions" dev="configfs" ino=10402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2505.454296][T30640] [ 2505.475367][T30640] ====================================================== [ 2505.482391][T30640] WARNING: possible circular locking dependency detected [ 2505.489409][T30640] syzkaller #0 Tainted: G L [ 2505.495366][T30640] ------------------------------------------------------ [ 2505.502364][T30640] syz.6.6872/30640 is trying to acquire lock: [ 2505.508409][T30640] ffffffff901c9de8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2505.519637][T30640] [ 2505.519637][T30640] but task is already holding lock: [ 2505.526992][T30640] ffff8880212cd470 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x346/0x6f0 [ 2505.536192][T30640] [ 2505.536192][T30640] which lock already depends on the new lock. [ 2505.536192][T30640] [ 2505.546571][T30640] [ 2505.546571][T30640] the existing dependency chain (in reverse order) is: [ 2505.555561][T30640] [ 2505.555561][T30640] -> #3 (&p->frag_sem){++++}-{4:4}: [ 2505.562935][T30640] lock_acquire+0x1b9/0x370 [ 2505.567953][T30640] down_write_killable+0x93/0x250 [ 2505.573490][T30640] configfs_rmdir+0x3fa/0x950 [ 2505.578695][T30640] vfs_rmdir+0x328/0x8a0 [ 2505.583444][T30640] filename_rmdir+0x31a/0x5c0 [ 2505.588632][T30640] __x64_sys_unlinkat+0xf5/0x130 [ 2505.594073][T30640] do_syscall_64+0x115/0x870 [ 2505.599171][T30640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.605564][T30640] [ 2505.605564][T30640] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 2505.614233][T30640] lock_acquire+0x1b9/0x370 [ 2505.619241][T30640] down_write+0x8b/0x1f0 [ 2505.623992][T30640] configfs_depend_item_unlocked+0xf3/0x6a0 [ 2505.630405][T30640] usbg_make_tpg+0x261/0x620 [ 2505.635503][T30640] target_fabric_make_tpg+0xab/0x8c0 [ 2505.641297][T30640] configfs_mkdir+0x51e/0xb70 [ 2505.646480][T30640] vfs_mkdir+0x361/0x850 [ 2505.651228][T30640] filename_mkdirat+0x48b/0x5e0 [ 2505.656591][T30640] __x64_sys_mkdir+0x6b/0x90 [ 2505.661683][T30640] do_syscall_64+0x115/0x870 [ 2505.666777][T30640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.673172][T30640] [ 2505.673172][T30640] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 2505.680795][T30640] lock_acquire+0x1b9/0x370 [ 2505.685803][T30640] __mutex_lock+0x1a4/0x1bd0 [ 2505.690896][T30640] tcm_set_name+0x29/0xb0 [ 2505.695726][T30640] function_make+0x21c/0x3f0 [ 2505.700821][T30640] configfs_mkdir+0x51e/0xb70 [ 2505.706002][T30640] vfs_mkdir+0x361/0x850 [ 2505.710750][T30640] filename_mkdirat+0x48b/0x5e0 [ 2505.716102][T30640] __x64_sys_mkdir+0x6b/0x90 [ 2505.721195][T30640] do_syscall_64+0x115/0x870 [ 2505.726287][T30640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.732679][T30640] [ 2505.732679][T30640] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 2505.740908][T30640] check_prev_add+0xeb/0xe60 [ 2505.746000][T30640] __lock_acquire+0x136c/0x1a40 [ 2505.751364][T30640] lock_acquire+0x1b9/0x370 [ 2505.756374][T30640] __mutex_lock+0x1a4/0x1bd0 [ 2505.761471][T30640] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2505.768131][T30640] configfs_read_iter+0x426/0x6f0 [ 2505.773658][T30640] __kernel_read+0x397/0xad0 [ 2505.778753][T30640] integrity_kernel_read+0x7e/0xb0 [ 2505.784369][T30640] ima_calc_file_hash_tfm+0x25e/0x350 [ 2505.790253][T30640] ima_calc_file_hash+0x1e3/0x380 [ 2505.795802][T30640] ima_collect_measurement+0x94f/0xb30 [ 2505.801769][T30640] process_measurement+0xdfe/0x2350 [ 2505.807480][T30640] ima_file_check+0xc3/0x110 [ 2505.812576][T30640] security_file_post_open+0xc4/0x210 [ 2505.818459][T30640] path_openat+0x985/0x4280 [ 2505.823465][T30640] do_file_open+0x20e/0x430 [ 2505.828469][T30640] do_sys_openat2+0x10f/0x1e0 [ 2505.833662][T30640] __x64_sys_openat+0x12d/0x210 [ 2505.839015][T30640] do_syscall_64+0x115/0x870 [ 2505.844109][T30640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.850504][T30640] [ 2505.850504][T30640] other info that might help us debug this: [ 2505.850504][T30640] [ 2505.860721][T30640] Chain exists of: [ 2505.860721][T30640] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#24 --> &p->frag_sem [ 2505.860721][T30640] [ 2505.875129][T30640] Possible unsafe locking scenario: [ 2505.875129][T30640] [ 2505.882563][T30640] CPU0 CPU1 [ 2505.887905][T30640] ---- ---- [ 2505.893246][T30640] rlock(&p->frag_sem); [ 2505.897482][T30640] lock(&sb->s_type->i_mutex_key#24); [ 2505.905791][T30640] lock(&p->frag_sem); [ 2505.912449][T30640] lock(gadget_subsys.su_mutex); [ 2505.917457][T30640] [ 2505.917457][T30640] *** DEADLOCK *** [ 2505.917457][T30640] [ 2505.925587][T30640] 3 locks held by syz.6.6872/30640: [ 2505.930760][T30640] #0: ffff88807aa3cbb8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 2505.941787][T30640] #1: ffff8880799dc080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 2505.951512][T30640] #2: ffff8880212cd470 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x346/0x6f0 [ 2505.961148][T30640] [ 2505.961148][T30640] stack backtrace: [ 2505.967018][T30640] CPU: 1 UID: 0 PID: 30640 Comm: syz.6.6872 Tainted: G L syzkaller #0 PREEMPT(full) [ 2505.967039][T30640] Tainted: [L]=SOFTLOCKUP [ 2505.967044][T30640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2505.967053][T30640] Call Trace: [ 2505.967058][T30640] [ 2505.967063][T30640] dump_stack_lvl+0x100/0x190 [ 2505.967083][T30640] print_circular_bug.cold+0x178/0x1c7 [ 2505.967106][T30640] check_noncircular+0x146/0x160 [ 2505.967125][T30640] check_prev_add+0xeb/0xe60 [ 2505.967143][T30640] __lock_acquire+0x136c/0x1a40 [ 2505.967163][T30640] lock_acquire+0x1b9/0x370 [ 2505.967179][T30640] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2505.967203][T30640] ? __pfx___might_resched+0x10/0x10 [ 2505.967222][T30640] __mutex_lock+0x1a4/0x1bd0 [ 2505.967241][T30640] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2505.967263][T30640] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2505.967284][T30640] ? lockdep_unlock+0x5a/0xc0 [ 2505.967297][T30640] ? __lock_acquire+0xd5b/0x1a40 [ 2505.967314][T30640] ? __pfx___mutex_lock+0x10/0x10 [ 2505.967335][T30640] ? __pfx___might_resched+0x10/0x10 [ 2505.967357][T30640] ? __pfx_uvcg_extension_ba_source_id_show+0x10/0x10 [ 2505.967379][T30640] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2505.967400][T30640] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2505.967422][T30640] ? ima_file_check+0xc3/0x110 [ 2505.967435][T30640] ? configfs_read_iter+0x53c/0x6f0 [ 2505.967454][T30640] ? __pfx_uvcg_extension_ba_source_id_show+0x10/0x10 [ 2505.967475][T30640] configfs_read_iter+0x426/0x6f0 [ 2505.967493][T30640] __kernel_read+0x397/0xad0 [ 2505.967516][T30640] ? __pfx___kernel_read+0x10/0x10 [ 2505.967543][T30640] integrity_kernel_read+0x7e/0xb0 [ 2505.967562][T30640] ? __pfx_integrity_kernel_read+0x10/0x10 [ 2505.967581][T30640] ? ima_calc_file_hash_tfm+0x236/0x350 [ 2505.967597][T30640] ima_calc_file_hash_tfm+0x25e/0x350 [ 2505.967613][T30640] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 2505.967629][T30640] ? is_bpf_text_address+0x8a/0x1a0 [ 2505.967658][T30640] ? ima_alloc_tfm+0x21a/0x2e0 [ 2505.967673][T30640] ima_calc_file_hash+0x1e3/0x380 [ 2505.967689][T30640] ima_collect_measurement+0x94f/0xb30 [ 2505.967707][T30640] ? __pfx_ima_collect_measurement+0x10/0x10 [ 2505.967728][T30640] ? process_measurement+0x5ab/0x2350 [ 2505.967742][T30640] ? is_bad_inode+0xd/0x40 [ 2505.967755][T30640] ? xattr_resolve_name+0x27d/0x3f0 [ 2505.967771][T30640] ? vfs_getxattr_alloc+0xec/0x350 [ 2505.967789][T30640] ? ima_get_hash_algo+0x241/0x400 [ 2505.967810][T30640] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 2505.967833][T30640] ? process_measurement+0xdfe/0x2350 [ 2505.967846][T30640] process_measurement+0xdfe/0x2350 [ 2505.967863][T30640] ? __pfx_process_measurement+0x10/0x10 [ 2505.967889][T30640] ? __configfs_open_file+0x6ca/0x9c0 [ 2505.967907][T30640] ima_file_check+0xc3/0x110 [ 2505.967921][T30640] ? __pfx_ima_file_check+0x10/0x10 [ 2505.967937][T30640] security_file_post_open+0xc4/0x210 [ 2505.967959][T30640] path_openat+0x985/0x4280 [ 2505.967978][T30640] ? __pfx_path_openat+0x10/0x10 [ 2505.967995][T30640] do_file_open+0x20e/0x430 [ 2505.968010][T30640] ? __pfx_do_file_open+0x10/0x10 [ 2505.968030][T30640] ? alloc_fd+0x471/0x7a0 [ 2505.968046][T30640] ? do_getname+0x191/0x390 [ 2505.968064][T30640] do_sys_openat2+0x10f/0x1e0 [ 2505.968083][T30640] ? __pfx_do_sys_openat2+0x10/0x10 [ 2505.968103][T30640] __x64_sys_openat+0x12d/0x210 [ 2505.968121][T30640] ? __pfx___x64_sys_openat+0x10/0x10 [ 2505.968142][T30640] do_syscall_64+0x115/0x870 [ 2505.968160][T30640] ? clear_bhb_loop+0x70/0xc0 [ 2505.968175][T30640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2505.968189][T30640] RIP: 0033:0x7f9741b9e0d9 [ 2505.968202][T30640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2505.968217][T30640] RSP: 002b:00007f9742a56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2505.968230][T30640] RAX: ffffffffffffffda RBX: 00007f9741e26090 RCX: 00007f9741b9e0d9 [ 2505.968240][T30640] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 2505.968249][T30640] RBP: 00007f9741c35024 R08: 0000000000000000 R09: 0000000000000000 [ 2505.968258][T30640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2505.968266][T30640] R13: 00007f9741e26128 R14: 00007f9741e26090 R15: 00007ffc73583338 [ 2505.968280][T30640] [ 2506.391824][ T30] audit: type=1400 audit(1786220720.552:917): avc: denied { read } for pid=30638 comm="syz.6.6872" name="baSourceID" dev="configfs" ino=187882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 2506.454438][ T30] audit: type=1800 audit(1786220721.475:918): pid=30640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.6872" name="baSourceID" dev="configfs" ino=187882 res=0 errno=0 [ 2506.523598][T30644] lo speed is unknown, defaulting to 1000