last executing test programs: 5.916357738s ago: executing program 2 (id=2077): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2) socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) 4.925207944s ago: executing program 2 (id=2082): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048051}, 0x8000) 4.545965419s ago: executing program 2 (id=2083): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB='\b\x00'], 0x2c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x3, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.51020025s ago: executing program 4 (id=2084): socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x1, 0x80000) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40, 0x6, 0x1}) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0x1, 0xa, 0x4}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000280)=@conn_svc_rsp={0x0, 0x0, 0xa, "9b775988", {0x3, 0x107, 0x0, 0x0, 0x1, 0xa, 0x9}}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x3c71166105bf274e) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.216052738s ago: executing program 2 (id=2085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000740), 0x0, 0x101080) ioctl$CEC_DQEVENT(r2, 0xc0506107, &(0x7f0000001800)) 3.785418146s ago: executing program 4 (id=2089): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2701000068c7"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 3.50482206s ago: executing program 4 (id=2091): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r4, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.339829373s ago: executing program 2 (id=2092): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) landlock_restrict_self(r3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20020480) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2c, r5, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r8 = signalfd(0xffffffffffffffff, 0x0, 0x0) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304905) close(r9) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) fcntl$setstatus(r8, 0x4, 0x2c00) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582", @ANYRES16=r9], 0x0) syz_usb_control_io(r10, 0x0, 0x0) 2.715979437s ago: executing program 1 (id=2095): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB='\b\x00'], 0x2c}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x9, 0xa9, 0x3, 0x0, 0x0, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.482188282s ago: executing program 4 (id=2097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.327983992s ago: executing program 4 (id=2098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3a1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 2.327445994s ago: executing program 3 (id=2099): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x2000) read$FUSE(r1, &(0x7f0000002c40)={0x2020}, 0x2020) 2.289114603s ago: executing program 1 (id=2100): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0x14, 0x0, 0x0, 0x25dfdbfe, [@sadb_key={0x6, 0x8, 0x108, 0x0, "041f6255dd400d223296421054f011855acec306fd5e47b5a703e12c5826a2e7e3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x233d, @local}}]}, 0xa0}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) socket(0xb, 0x3, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x850003f3) r3 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x2000)=nil, 0x5000) syz_emit_ethernet(0x165, &(0x7f00000021c0)={@local, @multicast, @void, {@mpls_uc={0x8847, {[{0x6}, {0x5}, {0x400}, {0x680f, 0x0, 0x1}, {0x100, 0x0, 0x1}], @ipv6=@tipc_packet={0x4, 0x6, "97007d", 0x11b, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@fragment={0x87, 0x0, 0x9, 0x0, 0x0, 0x3, 0x68}, @dstopts={0x0, 0x1a, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0x9, [0x9, 0x0, 0x1, 0x7]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0xe}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x7, 0x7b, "5ab6ad85a569711c5bdafa85fbfe8aac2087dd8a167bed2c030fbdabebbe5b44c650c866b754b80969c0334e043a90ff092778ad4c491aec42dc5d817046d3d48946608aaf60f208e98ba4d85c0ab481986175a180c5bbf56cac1b965b013e8962f777219ce3d3f436b1f84b23eeb035a8135b1cd574fc8b929472"}]}, @routing={0x16, 0x2, 0x2, 0xf1, 0x0, [@private1]}], @payload_conn={{{0x1b, 0x0, 0x0, 0x0, 0x1, 0x6, 0x1, 0x2, 0x1, 0x0, 0x2, 0x8, 0x4, 0x0, 0x463, 0xa, 0x1, 0x4e24, 0x4e21}}, [0x0, 0x0, 0x0]}}}}}}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x80, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) 2.212454435s ago: executing program 4 (id=2101): set_mempolicy(0x6, 0x0, 0xe0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0xffffffffffffffff) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="98000000020701010000000000000000040000030400078034000780080002407fffffff0800014000000068080001400000000008000240000000098cfc02400000000d080002406f009c960c00064000000000000000030c00034000000000000000030900010073797a30000000001400078008000140000000010800024000000010140007800800014000007ffb08000240200000053963"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x40448c2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000280), 0x40a00, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) syz_clone(0x7fba0180, 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x7ff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000070000000980010073797a300000000070000000090a0104000000e0000000000700000008000a4000000000090002007379387ab82a277d7a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00014000000000000000060c00024000000000000000090800054001000000140000001000010000000000000000000084000a8d4235a51e37fc2b29e264110fdb5c760840168c898ecd1e6c597d8d28fc6727644b87da1143a81acdd75eeb293821ea527b8709c8eac25d"], 0xb8}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2.095970832s ago: executing program 3 (id=2102): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a6876", 0x10, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.851663737s ago: executing program 3 (id=2103): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9, 0x4}) 1.814948831s ago: executing program 3 (id=2104): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 1.275397968s ago: executing program 0 (id=2106): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000600)={0x4, [[0x9, 0x0, 0xfffffffe, 0x9, 0x0, 0x0, 0x2], [0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x4000002, 0xfffffffd, 0xa0, 0xfffffffd]], '\x00', [{}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) 1.203848973s ago: executing program 3 (id=2107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}}, 0x0) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1000, 0x80) r4 = open_tree(0xffffffffffffffff, 0x0, 0x89901) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983a, 0x2, 0x1003, 0xea}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1}) io_uring_enter(r5, 0x3058, 0xdf5e, 0x7, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r4], 0x4c}, 0x1, 0x0, 0x0, 0x4055}, 0x4002) sendto$inet6(r8, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.126048261s ago: executing program 0 (id=2108): syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x9}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 784.1085ms ago: executing program 1 (id=2109): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x5255fc3640d2cc84}], 0x1, 0x0, 0x8000) 751.023399ms ago: executing program 0 (id=2110): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0xffffffffffffff80, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000001c0)={0x8}) 623.990124ms ago: executing program 0 (id=2111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3a1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 623.740379ms ago: executing program 1 (id=2112): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0x2000) read$FUSE(r1, &(0x7f0000002c40)={0x2020}, 0x2020) 545.055538ms ago: executing program 1 (id=2113): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 538.05759ms ago: executing program 0 (id=2114): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a6876", 0x10, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280080004"], 0x40}}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 351.961557ms ago: executing program 1 (id=2115): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcb9}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) socket$kcm(0xa, 0x2, 0x3a) syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r2, &(0x7f0000002580)={0x2020}, 0x2020) 299.709833ms ago: executing program 0 (id=2116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e27, 0xb, @mcast1, 0x800a}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) 104.505765ms ago: executing program 2 (id=2117): r0 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_usb_connect$uac1(0x3, 0x8d, &(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRESOCT=r3], 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000003c0)='befs\x00', 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=2118): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000280), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x70, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0xf5, 0x8, 0x0, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000006c0)={'tunl0\x00', r1, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', r2, 0x20, 0x700, 0xe, 0x889c, {{0x5, 0x4, 0x1, 0x1f, 0x14, 0x68, 0x0, 0xfa, 0x29, 0x0, @multicast1, @broadcast}}}}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) futex(0x0, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x10000}}) kernel console output (not intermixed with test programs): er=0 [ 460.673240][ T5861] usb 4-1: config 0 descriptor?? [ 460.692406][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.716037][ T57] usb 5-1: config 0 has no interfaces? [ 460.735016][ T57] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.764148][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.879764][T10619] tipc: Started in network mode [ 460.888435][T10619] tipc: Node identity 7f000001, cluster identity 4711 [ 460.901548][T10619] tipc: New replicast peer: 0.0.0.0 [ 460.911857][T10619] tipc: Enabled bearer , priority 10 [ 460.945548][ T57] usb 5-1: config 0 descriptor?? [ 461.189589][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.204929][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.252437][ T10] usb 5-1: USB disconnect, device number 26 [ 461.363961][ T5861] usbhid 4-1:0.0: can't add hid device: -71 [ 461.377637][ T5861] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 461.403803][ T5861] usb 4-1: USB disconnect, device number 24 [ 462.020770][ T57] tipc: Node number set to 2130706433 [ 462.180871][ T5861] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 462.249839][T10643] lo speed is unknown, defaulting to 1000 [ 462.344888][ T5861] usb 3-1: config 0 has no interfaces? [ 462.568731][ T5861] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 462.577964][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.587469][ T5861] usb 3-1: Product: syz [ 462.591800][ T5861] usb 3-1: Manufacturer: syz [ 462.599242][ T5861] usb 3-1: SerialNumber: syz [ 462.623559][ T5861] usb 3-1: config 0 descriptor?? [ 462.685020][ T30] audit: type=1326 audit(1746967888.660:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10642 comm="syz.4.1299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e32f8e969 code=0x0 [ 462.963788][ T5861] usb 1-1: USB disconnect, device number 21 [ 463.580795][ T5861] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 463.740882][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 463.750954][ T5861] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 463.760177][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 463.769683][ T5861] usb 5-1: Product: syz [ 463.773936][ T5861] usb 5-1: Manufacturer: syz [ 463.778547][ T5861] usb 5-1: SerialNumber: syz [ 463.786144][ T5861] usb 5-1: config 0 descriptor?? [ 464.017866][ T5861] usb 5-1: USB disconnect, device number 27 [ 464.019321][T10668] kvm: pic: single mode not supported [ 464.024264][T10668] kvm: pic: level sensitive irq not supported [ 464.032911][T10668] kvm: pic: single mode not supported [ 464.206366][T10675] syzkaller1: entered promiscuous mode [ 464.224912][T10675] syzkaller1: entered allmulticast mode [ 464.308599][T10678] lo speed is unknown, defaulting to 1000 [ 464.714656][T10693] B: renamed from veth0 [ 464.779666][T10683] block device autoloading is deprecated and will be removed. [ 464.790386][T10683] syz.1.1310: attempt to access beyond end of device [ 464.790386][T10683] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 464.828104][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 464.908468][ T9] usb 3-1: USB disconnect, device number 24 [ 465.476102][T10710] syzkaller1: entered promiscuous mode [ 465.481779][T10710] syzkaller1: entered allmulticast mode [ 465.873379][ T30] audit: type=1400 audit(1746967891.840:2372): avc: denied { ioctl } for pid=10719 comm="syz.0.1326" path="socket:[27268]" dev="sockfs" ino=27268 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 466.061067][T10730] B: renamed from veth0 [ 466.217883][T10741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.267795][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 466.423983][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.436493][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.458006][ T9] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 466.469287][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.484002][ T9] usb 5-1: config 0 descriptor?? [ 466.812034][ T5859] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 466.950966][ T5859] usb 1-1: device descriptor read/64, error -71 [ 467.190692][ T5859] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 467.335581][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 467.343118][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 467.350960][ T5859] usb 1-1: device descriptor read/64, error -71 [ 467.373447][ T9] usb 5-1: USB disconnect, device number 28 [ 467.461311][ T5859] usb usb1-port1: attempt power cycle [ 467.507268][T10765] netlink: 'syz.1.1342': attribute type 5 has an invalid length. [ 467.515624][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 467.541934][T10769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1343'. [ 467.588590][T10772] netlink: 'syz.2.1345': attribute type 3 has an invalid length. [ 467.595412][T10773] syzkaller1: entered promiscuous mode [ 467.596539][T10772] netlink: 'syz.2.1345': attribute type 3 has an invalid length. [ 467.604398][T10773] syzkaller1: entered allmulticast mode [ 467.610080][T10772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1345'. [ 467.683370][T10774] syz_tun: entered allmulticast mode [ 467.800844][ T5859] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 467.821309][ T5859] usb 1-1: device descriptor read/8, error -71 [ 468.010725][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 468.070685][ T5859] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 468.091161][ T5859] usb 1-1: device descriptor read/8, error -71 [ 468.194006][ T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 468.202877][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 468.228972][ T5859] usb usb1-port1: unable to enumerate USB device [ 468.245723][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 468.266212][ T10] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 468.275596][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.303852][ T10] usb 2-1: config 0 descriptor?? [ 468.312577][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 468.357000][T10786] B: renamed from veth0 (while UP) [ 468.418960][T10771] syz_tun: left allmulticast mode [ 468.522641][T10789] lo speed is unknown, defaulting to 1000 [ 469.652028][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 469.677627][T10797] bridge_slave_1: left allmulticast mode [ 469.721288][T10797] veth0_macvtap: left allmulticast mode [ 469.760726][T10797] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.769662][T10797] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.778819][T10797] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.789898][T10797] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.906200][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.941659][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 469.957651][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 470.025747][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.046757][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.056534][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.087162][ T10] usb 5-1: config 0 descriptor?? [ 470.095677][T10798] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 470.534136][ T10] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 470.553959][ T10] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 470.587541][ T10] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 470.628472][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 470.853017][ T57] usb 2-1: USB disconnect, device number 26 [ 471.620851][ T5861] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 471.772983][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 471.784234][ T5861] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 471.794986][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 471.902749][ T5861] usb 3-1: Product: syz [ 471.944268][ T5861] usb 3-1: Manufacturer: syz [ 471.950884][ T5861] usb 3-1: SerialNumber: syz [ 471.960911][ T5861] usb 3-1: config 0 descriptor?? [ 471.991022][ T9] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 472.236734][ T10] usb 3-1: USB disconnect, device number 25 [ 472.639983][T10851] kernel profiling enabled (shift: 7) [ 472.710911][T10860] loop2: detected capacity change from 0 to 7 [ 472.788503][T10860] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 472.794235][T10860] loop2: partition table partially beyond EOD, truncated [ 472.864123][T10860] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 473.000895][ T9] usb 5-1: device descriptor read/64, error -71 [ 473.340788][ T9] usb 5-1: reset high-speed USB device number 29 using dummy_hcd [ 473.386952][T10871] trusted_key: syz.3.1373 sent an empty control message without MSG_MORE. [ 473.389932][ T8067] udevd[8067]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 473.537888][ T5859] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 473.564602][ T9] usb 5-1: device firmware changed [ 473.584831][ T5895] usb 5-1: USB disconnect, device number 29 [ 473.702172][ T5859] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 473.711362][ T5859] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 473.724444][ T5859] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 473.739461][ T5859] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 473.748996][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.765998][ T5859] usb 1-1: config 0 descriptor?? [ 473.780770][ T5895] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 473.812587][ T5859] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 473.925657][T10886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1379'. [ 473.935735][T10886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1379'. [ 474.105972][ T5895] usb 5-1: config 0 has no interfaces? [ 474.115932][ T5895] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 474.125294][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.242130][T10890] lo speed is unknown, defaulting to 1000 [ 474.348003][ T5895] usb 5-1: Product: syz [ 474.352558][ T5895] usb 5-1: Manufacturer: syz [ 474.357183][ T5895] usb 5-1: SerialNumber: syz [ 474.425805][ T5895] usb 5-1: config 0 descriptor?? [ 474.652922][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 474.662023][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 475.169215][ T30] audit: type=1400 audit(1746967901.140:2373): avc: denied { connect } for pid=10915 comm="syz.2.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 475.330738][ T30] audit: type=1400 audit(1746967901.250:2374): avc: denied { ioctl } for pid=10913 comm="syz.1.1390" path="socket:[28638]" dev="sockfs" ino=28638 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 475.703511][ T5861] usb 5-1: USB disconnect, device number 30 [ 476.142614][ T5895] usb 1-1: USB disconnect, device number 26 [ 476.340704][ T5861] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 476.573668][ T5861] usb 5-1: config 0 has no interfaces? [ 476.800789][ T5895] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 477.043867][ T5861] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 477.078596][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.097187][ T5895] usb 1-1: config 0 has no interfaces? [ 477.127822][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 477.147994][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.152410][ T5861] usb 5-1: Product: syz [ 477.160689][ T5860] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 477.212671][ T5895] usb 1-1: Product: syz [ 477.272194][ T5895] usb 1-1: Manufacturer: syz [ 477.288984][ T5895] usb 1-1: SerialNumber: syz [ 477.290703][ T5861] usb 5-1: Manufacturer: syz [ 477.309157][ T5895] usb 1-1: config 0 descriptor?? [ 477.322076][ T5861] usb 5-1: SerialNumber: syz [ 477.476167][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.495064][ T5861] usb 5-1: config 0 descriptor?? [ 477.510202][T10950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19984 sclass=netlink_route_socket pid=10950 comm=syz.3.1399 [ 477.530725][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 477.557804][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.647471][ T5860] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.673732][ T5860] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.685446][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 477.711280][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 477.800923][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.811946][ T5860] usb 3-1: config 0 descriptor?? [ 477.850909][ T30] audit: type=1400 audit(1746967903.820:2375): avc: denied { ioctl } for pid=10933 comm="syz.0.1395" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 477.852541][T10943] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 477.884295][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.029528][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'. [ 478.039717][T10938] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1395'. [ 478.190690][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 478.425957][ T9] usb 2-1: config 0 has no interfaces? [ 478.429904][ T5860] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 478.440837][ T5860] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 478.450382][ T5860] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 478.463724][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 478.476986][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.495604][T10964] binder: BINDER_SET_CONTEXT_MGR already set [ 478.502481][T10964] binder: 10963:10964 ioctl 4018620d 200000000040 returned -16 [ 478.534522][ T5860] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 478.546984][ T30] audit: type=1400 audit(1746967904.470:2376): avc: denied { set_context_mgr } for pid=10963 comm="syz.3.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 478.579401][ T9] usb 2-1: Product: syz [ 478.600843][ T9] usb 2-1: Manufacturer: syz [ 478.615632][ T9] usb 2-1: SerialNumber: syz [ 478.617255][ T30] audit: type=1400 audit(1746967904.470:2377): avc: denied { write } for pid=10963 comm="syz.3.1404" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 478.651425][ T9] usb 2-1: config 0 descriptor?? [ 478.704173][ T30] audit: type=1400 audit(1746967904.470:2378): avc: denied { map } for pid=10963 comm="syz.3.1404" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 478.728072][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.140765][ T5895] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 479.204320][ T9] usb 5-1: USB disconnect, device number 31 [ 479.644816][ T9] usb 1-1: USB disconnect, device number 27 [ 479.727101][ T5895] usb 4-1: config 0 has no interfaces? [ 479.738085][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 479.766149][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.795854][ T5895] usb 4-1: Product: syz [ 479.820654][ T5895] usb 4-1: Manufacturer: syz [ 479.834941][ T5895] usb 4-1: SerialNumber: syz [ 479.855576][ T5895] usb 4-1: config 0 descriptor?? [ 479.870788][ T5859] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 479.981165][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 480.047932][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 480.071470][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 480.096129][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 480.166665][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.210718][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 480.230005][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.305586][ T5895] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 480.314872][ T5859] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 480.327389][ T5895] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 480.352011][ T9] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 480.361495][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.372581][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.394416][ T5859] usb 5-1: config 0 descriptor?? [ 480.407234][ T9] usb 1-1: config 0 descriptor?? [ 480.414251][T10974] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.511515][ T57] usb 3-1: USB disconnect, device number 26 [ 480.729581][ T5895] usb 2-1: USB disconnect, device number 27 [ 480.844244][ T5859] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 480.851878][ T5859] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 480.859738][ T5859] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 480.878497][ T5859] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 481.062346][T11006] sctp: [Deprecated]: syz.1.1417 (pid 11006) Use of int in maxseg socket option. [ 481.062346][T11006] Use struct sctp_assoc_value instead [ 481.085673][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 481.096913][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 481.117995][ T9] usb 1-1: USB disconnect, device number 28 [ 481.131300][T11007] mmap: syz.1.1417 (11007) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 482.047752][ T57] usb 4-1: USB disconnect, device number 25 [ 482.324499][ T5860] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 482.406732][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 482.427840][ T9] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 482.683586][ T5895] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 482.879888][ T5895] usb 4-1: config 0 has no interfaces? [ 482.889972][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 482.908467][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.939135][ T5895] usb 4-1: Product: syz [ 482.946146][ T5895] usb 4-1: Manufacturer: syz [ 482.955208][ T5895] usb 4-1: SerialNumber: syz [ 483.007563][ T5895] usb 4-1: config 0 descriptor?? [ 483.012754][ T5859] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 483.183222][ T5859] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 483.192161][ T5861] usb 5-1: USB disconnect, device number 32 [ 483.192234][ T5859] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 483.243572][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 483.259455][ T5859] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 483.277848][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.307721][ T5859] usb 3-1: config 0 descriptor?? [ 483.335291][ T5859] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 484.960788][ T5861] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 485.148777][ T5861] usb 5-1: config 0 has no interfaces? [ 485.155962][ T5861] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 485.167060][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.287481][ T5861] usb 5-1: Product: syz [ 485.298916][ T5861] usb 5-1: Manufacturer: syz [ 485.311404][ T5861] usb 5-1: SerialNumber: syz [ 485.333389][ T5861] usb 5-1: config 0 descriptor?? [ 485.432029][ T57] usb 4-1: USB disconnect, device number 26 [ 485.510819][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1441'. [ 485.524368][T11088] vlan2: entered promiscuous mode [ 485.536424][T11088] ip6gretap0: entered promiscuous mode [ 485.622268][T11075] QAT: Device 127 not found [ 485.716402][ T5895] usb 3-1: USB disconnect, device number 27 [ 486.520907][ T5895] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 486.645258][T11114] netdevsim netdevsim1: Direct firmware load for . [ 486.645258][T11114] failed with error -2 [ 486.662930][T11114] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 486.662930][T11114] [ 486.767887][ T5895] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 486.805433][ T5895] usb 4-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 486.851014][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 486.860036][ T5895] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 486.877072][ T5895] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 486.887896][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 486.903758][ T5895] usb 4-1: Product: syz [ 486.911531][ T5895] usb 4-1: Manufacturer: syz [ 486.929348][ T5895] cdc_wdm 4-1:1.0: skipping garbage [ 486.939654][ T5895] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 487.133206][ T5895] usb 4-1: USB disconnect, device number 27 [ 487.478605][ T5861] usb 5-1: USB disconnect, device number 33 [ 487.530764][ T57] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 487.616060][ T30] audit: type=1400 audit(1746967913.590:2379): avc: denied { read } for pid=11131 comm="syz.1.1458" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 487.659447][ T30] audit: type=1400 audit(1746967913.610:2380): avc: denied { open } for pid=11131 comm="syz.1.1458" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 487.723751][ T57] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 487.734159][ T57] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 487.759036][ T57] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 487.844206][ T57] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 488.028399][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.066987][ T57] usb 3-1: config 0 descriptor?? [ 488.079112][ T57] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 488.147284][ T30] audit: type=1326 audit(1746967914.120:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.3.1462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x0 [ 488.191249][T11147] wg1: entered promiscuous mode [ 488.198224][T11147] wg1: entered allmulticast mode [ 488.917575][ T5861] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 489.080719][ T5861] usb 1-1: device descriptor read/64, error -71 [ 489.464747][ T5861] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 489.591520][ T5895] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 489.688682][T11163] netdevsim netdevsim4: Direct firmware load for . [ 489.688682][T11163] failed with error -2 [ 489.702399][T11163] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 489.702399][T11163] [ 489.763340][ T5895] usb 2-1: config 0 has no interfaces? [ 489.773631][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 489.783819][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.799784][ T5895] usb 2-1: Product: syz [ 489.807867][ T5895] usb 2-1: Manufacturer: syz [ 489.814588][ T5895] usb 2-1: SerialNumber: syz [ 489.822766][ T5861] usb 1-1: device descriptor read/64, error -71 [ 489.842386][ T5895] usb 2-1: config 0 descriptor?? [ 489.947190][ T5861] usb usb1-port1: attempt power cycle [ 490.052471][T11169] QAT: Device 127 not found [ 490.060699][ T57] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 490.260539][ T57] usb 4-1: config 0 has no interfaces? [ 490.308885][ T57] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 490.330285][ T5861] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 490.349504][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.430968][ T5858] usb 3-1: USB disconnect, device number 28 [ 490.451179][ T5861] usb 1-1: device descriptor read/8, error -71 [ 490.457441][ T57] usb 4-1: Product: syz [ 490.497882][ T57] usb 4-1: Manufacturer: syz [ 490.533514][ T57] usb 4-1: SerialNumber: syz [ 490.543897][T11185] loop2: detected capacity change from 0 to 7 [ 490.553851][ T8067] Dev loop2: unable to read RDB block 7 [ 490.559499][ T8067] loop2: unable to read partition table [ 490.565495][ T8067] loop2: partition table beyond EOD, truncated [ 490.577853][T11185] Dev loop2: unable to read RDB block 7 [ 490.600862][T11185] loop2: unable to read partition table [ 490.613296][ T57] usb 4-1: config 0 descriptor?? [ 490.618642][T11185] loop2: partition table beyond EOD, truncated [ 490.625160][T11185] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 490.890714][ T5861] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 490.911144][ T5861] usb 1-1: device descriptor read/8, error -71 [ 491.031375][ T5861] usb usb1-port1: unable to enumerate USB device [ 491.547909][ T30] audit: type=1326 audit(1746967917.520:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.4.1477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e32f8e969 code=0x0 [ 492.006095][T11204] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1479'. [ 492.021471][ T5895] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 492.156290][ T9] usb 2-1: USB disconnect, device number 28 [ 492.183409][ T5895] usb 1-1: config 0 has no interfaces? [ 492.213701][ T5895] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 492.237999][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.252841][ T5895] usb 1-1: Product: syz [ 492.257139][ T5895] usb 1-1: Manufacturer: syz [ 492.262127][ T5895] usb 1-1: SerialNumber: syz [ 492.276405][ T5895] usb 1-1: config 0 descriptor?? [ 492.666970][ T30] audit: type=1400 audit(1746967918.640:2383): avc: denied { block_suspend } for pid=11221 comm="syz.4.1486" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 492.793309][ T5861] usb 4-1: USB disconnect, device number 28 [ 493.300799][ T5861] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 493.450827][ T5861] usb 4-1: device descriptor read/64, error -71 [ 493.620466][T11243] binder_alloc: 11242: binder_alloc_buf, no vma [ 493.624226][ T30] audit: type=1400 audit(1746967919.590:2384): avc: denied { call } for pid=11242 comm="syz.4.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 493.700801][ T5861] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 493.712863][T11245] syzkaller1: entered promiscuous mode [ 493.718499][T11245] syzkaller1: entered allmulticast mode [ 493.860820][ T5861] usb 4-1: device descriptor read/64, error -71 [ 493.893846][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 493.924705][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 493.970903][ T5861] usb usb4-port1: attempt power cycle [ 494.247762][T11260] netlink: 'syz.2.1497': attribute type 3 has an invalid length. [ 494.257146][T11260] netlink: 'syz.2.1497': attribute type 3 has an invalid length. [ 494.266992][T11260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1497'. [ 494.284665][T11260] syz_tun: entered allmulticast mode [ 494.300300][T11259] syz_tun: left allmulticast mode [ 494.312561][ T5861] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 494.341666][ T5861] usb 4-1: device descriptor read/8, error -71 [ 494.385931][ T30] audit: type=1400 audit(1746967920.360:2385): avc: denied { append } for pid=11265 comm="syz.4.1500" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 494.592165][ T5861] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 494.649054][ T5861] usb 4-1: device descriptor read/8, error -71 [ 494.694335][ T5858] usb 1-1: USB disconnect, device number 33 [ 494.801902][ T5861] usb usb4-port1: unable to enumerate USB device [ 494.970149][T11282] syzkaller1: entered promiscuous mode [ 494.989624][T11282] syzkaller1: entered allmulticast mode [ 495.862038][T11294] netdevsim netdevsim1: Direct firmware load for . [ 495.862038][T11294] failed with error -2 [ 495.948464][T11294] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 495.948464][T11294] [ 496.035593][T11296] netlink: 'syz.3.1511': attribute type 3 has an invalid length. [ 496.088023][T11296] netlink: 'syz.3.1511': attribute type 3 has an invalid length. [ 496.148060][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1511'. [ 496.219419][T11296] lo: entered allmulticast mode [ 496.248887][T11295] lo: left allmulticast mode [ 496.406159][T11306] sctp: [Deprecated]: syz.4.1512 (pid 11306) Use of int in maxseg socket option. [ 496.406159][T11306] Use struct sctp_assoc_value instead [ 496.637662][T11307] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 496.840131][T11317] syzkaller1: entered promiscuous mode [ 496.845751][T11317] syzkaller1: entered allmulticast mode [ 497.686951][T11319] lo speed is unknown, defaulting to 1000 [ 497.801308][ T30] audit: type=1400 audit(1746967923.780:2386): avc: denied { create } for pid=11324 comm="syz.2.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 498.012057][T11334] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1525'. [ 498.062776][ T30] audit: type=1400 audit(1746967924.040:2387): avc: denied { read } for pid=11335 comm="syz.1.1523" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 498.175082][ T30] audit: type=1400 audit(1746967924.040:2388): avc: denied { open } for pid=11335 comm="syz.1.1523" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 498.313510][ T5895] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 498.857080][T11352] lo speed is unknown, defaulting to 1000 [ 498.988312][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.001916][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.212468][ T5895] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 499.304148][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.347046][ T5895] usb 2-1: config 0 descriptor?? [ 499.721434][T11366] dns_resolver: Unsupported server list version (0) [ 499.969298][ T5895] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 500.188354][ T5895] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 500.239339][ T5895] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints? [ 500.285210][ C0] hid-thrustmaster 0003:044F:B65D.000E: URB to get model id failed with error -71 [ 500.369110][ T5895] usb 2-1: USB disconnect, device number 29 [ 501.359695][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.369347][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.965522][T11422] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1548'. [ 502.030905][ T5861] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 502.197182][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 502.280947][ T57] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 502.312838][ T5861] usb 5-1: config 0 has no interfaces? [ 502.402127][ T5861] usb 5-1: New USB device found, idVendor=0af0, idProduct=d357, bcdDevice= 0.00 [ 502.470354][T11431] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[11431] [ 502.507943][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.646553][ T5861] usb 5-1: Product: syz [ 502.727657][ T5861] usb 5-1: Manufacturer: syz [ 502.752180][ T57] usb 3-1: config 0 has no interfaces? [ 502.782087][ T5861] usb 5-1: SerialNumber: syz [ 502.800813][ T57] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 502.832381][ T5861] usb 5-1: config 0 descriptor?? [ 502.881498][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.934523][ T57] usb 3-1: Product: syz [ 502.943630][ T57] usb 3-1: Manufacturer: syz [ 502.948257][ T57] usb 3-1: SerialNumber: syz [ 502.958542][ T57] usb 3-1: config 0 descriptor?? [ 503.153136][T11415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1543'. [ 503.162335][T11415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1543'. [ 503.540756][ T57] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 503.694546][ T57] usb 4-1: config 0 has no interfaces? [ 503.704086][ T57] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 503.730378][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.787329][ T57] usb 4-1: Product: syz [ 503.800252][ T57] usb 4-1: Manufacturer: syz [ 503.822966][ T57] usb 4-1: SerialNumber: syz [ 503.847411][ T57] usb 4-1: config 0 descriptor?? [ 504.485784][ T5895] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 504.671943][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.687810][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.707783][ T5895] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 504.731391][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.772952][ T5895] usb 2-1: config 0 descriptor?? [ 504.997628][ T5895] usbhid 2-1:0.0: can't add hid device: -71 [ 505.003677][ T5895] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 505.029427][ T5895] usb 2-1: USB disconnect, device number 30 [ 505.263919][ T5859] usb 3-1: USB disconnect, device number 29 [ 505.361376][T11450] binder: BINDER_SET_CONTEXT_MGR already set [ 505.367425][T11450] binder: 11449:11450 ioctl 4018620d 200000000040 returned -16 [ 505.514733][ T5861] usb 5-1: USB disconnect, device number 34 [ 505.531148][ T5895] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 505.643979][T11457] wg1: entered promiscuous mode [ 505.653341][T11457] wg1: entered allmulticast mode [ 505.710784][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 505.722515][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.749537][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.791005][ T5895] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 505.800131][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.834451][ T5895] usb 2-1: config 0 descriptor?? [ 505.844885][ T5895] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 505.867688][ T5895] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 506.045466][T11445] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 506.060928][ T5895] usb 2-1: USB disconnect, device number 31 [ 506.119355][ T5895] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 506.322294][ T5859] usb 4-1: USB disconnect, device number 33 [ 506.574510][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 506.915364][T11484] vlan2: entered promiscuous mode [ 506.922286][T11484] team0: entered promiscuous mode [ 506.927305][T11484] team_slave_0: entered promiscuous mode [ 507.031172][T11484] team_slave_1: entered promiscuous mode [ 507.476397][T11490] sctp: [Deprecated]: syz.4.1568 (pid 11490) Use of int in maxseg socket option. [ 507.476397][T11490] Use struct sctp_assoc_value instead [ 508.336411][T11510] dns_resolver: Unsupported server list version (0) [ 508.840708][ T5861] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 508.990414][T11531] lo speed is unknown, defaulting to 1000 [ 509.015191][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.062108][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.187981][ T5861] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 509.218016][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.272219][ T5861] usb 1-1: config 0 descriptor?? [ 509.494718][ T5861] usbhid 1-1:0.0: can't add hid device: -71 [ 509.501284][ T5861] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 509.529899][ T5861] usb 1-1: USB disconnect, device number 34 [ 509.610755][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 509.808433][ T9] usb 2-1: config 0 has no interfaces? [ 509.818130][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 509.830815][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.839530][ T9] usb 2-1: Product: syz [ 509.847048][ T9] usb 2-1: Manufacturer: syz [ 509.852404][ T9] usb 2-1: SerialNumber: syz [ 509.886270][ T9] usb 2-1: config 0 descriptor?? [ 510.092185][ T5861] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 510.250694][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 510.276633][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.312435][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.380465][ T5861] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 510.494817][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.528345][ T5861] usb 1-1: config 0 descriptor?? [ 510.552270][ T5859] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 510.656379][ T5861] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 510.688292][ T5861] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 510.763517][T11562] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1590'. [ 510.780055][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.811954][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.836601][ T5859] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 510.858694][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.859548][T11514] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 510.987938][ T5859] usb 5-1: config 0 descriptor?? [ 511.061034][ T5860] usb 1-1: USB disconnect, device number 35 [ 511.075227][ T5860] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 511.330052][ T5859] usbhid 5-1:0.0: can't add hid device: -71 [ 511.339854][ T5859] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 511.369911][ T5859] usb 5-1: USB disconnect, device number 35 [ 511.839877][T11576] syz_tun: entered allmulticast mode [ 511.845534][ T5859] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 511.859775][T11574] syz_tun: left allmulticast mode [ 512.019822][T11584] syzkaller1: entered promiscuous mode [ 512.020685][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 512.033727][T11584] syzkaller1: entered allmulticast mode [ 512.034470][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.229978][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.297613][ T5859] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 512.329918][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.355773][ T5859] usb 5-1: config 0 descriptor?? [ 512.369172][ T5859] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 512.386683][ T5859] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 512.430984][ T5895] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 512.503256][ T5820] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 512.532298][ T5860] usb 2-1: USB disconnect, device number 32 [ 512.574072][T11553] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 512.586378][ T5861] usb 5-1: USB disconnect, device number 36 [ 512.595717][ T5861] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 512.630160][ T5895] usb 3-1: config 0 has no interfaces? [ 512.645731][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 512.712082][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.728185][ T5895] usb 3-1: Product: syz [ 512.735559][ T5820] usb 1-1: config 0 has no interfaces? [ 512.749276][ T5895] usb 3-1: Manufacturer: syz [ 512.754087][ T5895] usb 3-1: SerialNumber: syz [ 512.775606][ T5895] usb 3-1: config 0 descriptor?? [ 512.902613][ T5820] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 512.924478][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.951038][ T5820] usb 1-1: Product: syz [ 512.956368][ T5820] usb 1-1: Manufacturer: syz [ 512.980744][ T5820] usb 1-1: SerialNumber: syz [ 513.008914][ T5820] usb 1-1: config 0 descriptor?? [ 513.470282][T11606] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1606'. [ 513.900456][T11616] lo speed is unknown, defaulting to 1000 [ 513.939102][ T5895] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 514.252469][ T5895] usb 2-1: config 0 has no interfaces? [ 514.259859][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 514.270164][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.278590][ T5895] usb 2-1: Product: syz [ 514.410768][ T5895] usb 2-1: Manufacturer: syz [ 514.415418][ T5895] usb 2-1: SerialNumber: syz [ 514.455351][ T5895] usb 2-1: config 0 descriptor?? [ 514.993986][ T5861] usb 3-1: USB disconnect, device number 30 [ 515.127995][ T5860] usb 1-1: USB disconnect, device number 36 [ 515.384394][ T30] audit: type=1400 audit(1746967941.360:2389): avc: denied { write } for pid=11632 comm="syz.0.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 515.431465][ T5861] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 515.592289][ T5861] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 515.601063][ T5861] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 515.611694][ T5861] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 515.621853][ T5861] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 515.636429][ T5861] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 515.645963][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 515.654528][ T5861] usb 3-1: Product: syz [ 515.658808][ T5861] usb 3-1: Manufacturer: syz [ 515.672579][ T5861] cdc_wdm 3-1:1.0: skipping garbage [ 515.679923][ T5861] cdc_wdm 3-1:1.0: skipping garbage [ 515.685496][ T5861] cdc_wdm 3-1:1.0: skipping garbage [ 515.692397][ T5861] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 515.872642][ T5861] usb 3-1: USB disconnect, device number 31 [ 516.608279][ T5861] usb 2-1: USB disconnect, device number 33 [ 517.230713][ T5859] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 517.544870][ T5859] usb 4-1: config 0 has no interfaces? [ 517.562290][ T5859] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 517.572222][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.580271][ T5859] usb 4-1: Product: syz [ 517.586481][ T5859] usb 4-1: Manufacturer: syz [ 517.594613][ T5859] usb 4-1: SerialNumber: syz [ 517.661382][ T5859] usb 4-1: config 0 descriptor?? [ 517.760777][ T5860] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 518.010203][ T5860] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 518.061450][ T5860] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 518.094696][ T5860] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 518.106620][ T5860] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.178533][ T5860] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 518.201086][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 518.224563][ T5860] usb 1-1: Product: syz [ 518.229796][ T5860] usb 1-1: Manufacturer: syz [ 518.247900][ T5860] cdc_wdm 1-1:1.0: skipping garbage [ 518.259378][ T5860] cdc_wdm 1-1:1.0: skipping garbage [ 518.301899][ T5860] cdc_wdm 1-1:1.0: skipping garbage [ 518.309683][ T5860] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 518.454038][ T5860] usb 1-1: USB disconnect, device number 37 [ 518.865082][T11702] dns_resolver: Unsupported server list version (0) [ 519.881512][ T5859] usb 4-1: USB disconnect, device number 34 [ 520.337748][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 520.810693][ T5859] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 521.031955][T11767] sctp: [Deprecated]: syz.4.1652 (pid 11767) Use of int in maxseg socket option. [ 521.031955][T11767] Use struct sctp_assoc_value instead [ 521.070137][ T5859] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.079018][ T5859] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 521.090406][ T5859] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.100481][ T5859] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 521.115139][ T5859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 521.129300][ T5859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 521.144673][ T5859] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.154712][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.163106][ T5859] usb 1-1: Product: syz [ 521.169543][ T5859] usb 1-1: Manufacturer: syz [ 521.193391][ T5859] cdc_wdm 1-1:1.0: skipping garbage [ 521.203208][ T5859] cdc_wdm 1-1:1.0: skipping garbage [ 521.228682][ T5859] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 521.413653][ T5859] usb 1-1: USB disconnect, device number 38 [ 523.353506][T11818] wg1: entered promiscuous mode [ 523.358546][T11818] wg1: entered allmulticast mode [ 523.929211][T11833] lo speed is unknown, defaulting to 1000 [ 524.791249][T11848] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 524.800343][T11845] netlink: 'syz.2.1675': attribute type 3 has an invalid length. [ 524.818660][T11845] netlink: 'syz.2.1675': attribute type 3 has an invalid length. [ 524.891101][T11852] syz_tun: entered allmulticast mode [ 524.891128][T11845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1675'. [ 525.062938][T11843] syz_tun: left allmulticast mode [ 527.275986][T11888] dns_resolver: Unsupported server list version (0) [ 528.187982][T11895] netdevsim netdevsim3: Direct firmware load for . [ 528.187982][T11895] failed with error -2 [ 528.222930][T11901] netlink: 'syz.2.1688': attribute type 3 has an invalid length. [ 528.250983][T11901] netlink: 'syz.2.1688': attribute type 3 has an invalid length. [ 528.260141][T11901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1688'. [ 528.296777][T11895] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 528.296777][T11895] [ 528.307806][T11901] syz_tun: entered allmulticast mode [ 528.377465][T11900] syz_tun: left allmulticast mode [ 528.550486][T11909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1691'. [ 528.721002][ T5859] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 529.020361][ T5859] usb 1-1: Using ep0 maxpacket: 16 [ 529.053719][ T5859] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 529.063094][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 529.199808][ T5859] usb 1-1: Product: syz [ 529.207077][ T5859] usb 1-1: Manufacturer: syz [ 529.229873][ T5859] usb 1-1: SerialNumber: syz [ 529.260844][ T5859] usb 1-1: config 0 descriptor?? [ 529.509347][ T5820] usb 1-1: USB disconnect, device number 39 [ 530.140444][T11941] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1700'. [ 530.340827][ T5860] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 530.695230][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.713943][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.735629][ T5860] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 530.800117][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.838489][ T5860] usb 4-1: config 0 descriptor?? [ 531.060759][ T5860] usbhid 4-1:0.0: can't add hid device: -71 [ 531.082742][ T5860] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 531.099756][ T5860] usb 4-1: USB disconnect, device number 35 [ 531.140055][T11958] netdevsim netdevsim0: Direct firmware load for . [ 531.140055][T11958] failed with error -2 [ 531.188129][T11958] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 531.188129][T11958] [ 531.522263][ T5859] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 531.570804][ T5860] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 531.711891][ T5859] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 531.746132][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 531.780657][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.796666][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.814514][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.898566][ T5859] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 531.977520][ T5859] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 531.986864][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.989313][ T5859] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 532.042955][ T5860] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 532.055870][ T5859] usb 3-1: Manufacturer: syz [ 532.084218][ T5859] usb 3-1: config 0 descriptor?? [ 532.154376][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.243456][ T5860] usb 4-1: config 0 descriptor?? [ 532.301612][ T5860] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 532.382502][ T5860] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 532.469682][T11937] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 532.494922][ T5860] usb 4-1: USB disconnect, device number 36 [ 532.505631][ T5860] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 532.590137][ T5859] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 532.696918][ T5859] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 532.716456][ T5859] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 532.820654][ T30] audit: type=1400 audit(1746967958.780:2390): avc: denied { append } for pid=11959 comm="syz.2.1707" name="hiddev0" dev="devtmpfs" ino=3276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 532.828883][T11975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1713'. [ 532.858430][T11975] vlan2: entered promiscuous mode [ 532.880783][T11975] bridge0: entered promiscuous mode [ 533.170679][ T5859] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 533.293723][T11992] netlink: 'syz.1.1718': attribute type 10 has an invalid length. [ 533.316567][T11992] bond0: (slave wlan1): Opening slave failed [ 533.326494][ T5859] usb 1-1: config 0 has no interfaces? [ 533.335757][ T5859] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 533.346925][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.404043][ T5859] usb 1-1: Product: syz [ 533.418590][ T5859] usb 1-1: Manufacturer: syz [ 533.448717][ T5859] usb 1-1: SerialNumber: syz [ 533.465569][ T5859] usb 1-1: config 0 descriptor?? [ 534.170726][T12009] input: syz1 as /devices/virtual/input/input17 [ 534.280845][ T5895] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 534.617840][ T57] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 534.655770][ T5895] usb 5-1: config 0 has no interfaces? [ 534.675715][ T5895] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 534.686773][ T5820] usb 3-1: USB disconnect, device number 32 [ 534.694670][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.724344][ T5895] usb 5-1: Product: syz [ 534.728894][ T5895] usb 5-1: Manufacturer: syz [ 534.757822][ T5895] usb 5-1: SerialNumber: syz [ 534.800753][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 534.822404][ T57] usb 4-1: config 0 has an invalid interface number: 25 but max is 0 [ 534.835892][ T5895] usb 5-1: config 0 descriptor?? [ 534.866471][ T57] usb 4-1: config 0 has no interface number 0 [ 534.896937][ T57] usb 4-1: config 0 interface 25 altsetting 6 endpoint 0x8 has invalid maxpacket 544, setting to 64 [ 535.105817][ T57] usb 4-1: config 0 interface 25 has no altsetting 0 [ 535.160181][ T57] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice=b4.82 [ 535.253025][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.323744][ T57] usb 4-1: Product: syz [ 535.380666][ T57] usb 4-1: Manufacturer: syz [ 535.387645][ T57] usb 4-1: SerialNumber: syz [ 535.498999][ T57] usb 4-1: config 0 descriptor?? [ 535.799204][T12025] lo speed is unknown, defaulting to 1000 [ 535.991820][ T5860] usb 1-1: USB disconnect, device number 40 [ 536.262353][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1726'. [ 536.381429][T12032] vlan2: entered promiscuous mode [ 536.390102][T12032] bridge0: entered promiscuous mode [ 536.695459][T12040] netlink: 'syz.2.1729': attribute type 3 has an invalid length. [ 536.992439][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 537.060674][ T5895] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 537.068559][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 537.168405][ T5859] usb 5-1: USB disconnect, device number 37 [ 537.201186][ T5895] usb 1-1: device descriptor read/64, error -32 [ 537.390817][ T5820] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 537.450764][ T5895] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 537.549194][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.560780][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.576878][ T5820] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 537.586560][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.601132][ T5820] usb 3-1: config 0 descriptor?? [ 537.614182][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 537.628642][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 537.641526][ T5895] usb 1-1: config 1 interface 0 has no altsetting 0 [ 537.650588][ T5895] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 537.663925][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.675857][ T5895] usb 1-1: Product: syz [ 537.680126][ T5895] usb 1-1: Manufacturer: syz [ 537.685507][ T5895] usb 1-1: SerialNumber: syz [ 538.040230][ T5820] megaworld 0003:07B5:0312.0010: unknown main item tag 0x3 [ 538.060990][ T5820] megaworld 0003:07B5:0312.0010: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 538.083184][ T5820] megaworld 0003:07B5:0312.0010: no inputs found [ 538.181367][ T57] usb 4-1: bad CDC descriptors [ 538.188904][ T57] cp210x 4-1:0.25: cp210x converter detected [ 538.220744][ T57] cp210x 4-1:0.25: failed to get vendor val 0x370b size 1: -71 [ 538.228337][ T57] cp210x 4-1:0.25: querying part number failed [ 538.259789][ T57] usb 4-1: cp210x converter now attached to ttyUSB0 [ 538.274816][ T10] usb 3-1: USB disconnect, device number 33 [ 538.303843][ T57] usb 4-1: USB disconnect, device number 37 [ 538.342675][ T57] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 538.377314][ T57] cp210x 4-1:0.25: device disconnected [ 538.430830][ T5820] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 538.580712][ T5820] usb 5-1: Using ep0 maxpacket: 32 [ 538.587242][ T5820] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 538.603380][ T5820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.623869][ T5820] usb 5-1: config 0 has no interface number 0 [ 538.630550][ T5820] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.643490][ T5820] usb 5-1: config 0 interface 1 has no altsetting 0 [ 538.654105][ T5820] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 538.663228][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.673615][ T5820] usb 5-1: Product: syz [ 538.680020][ T5820] usb 5-1: Manufacturer: syz [ 538.687257][ T5820] usb 5-1: SerialNumber: syz [ 538.694562][ T5820] usb 5-1: config 0 descriptor?? [ 538.945153][ T5820] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 539.076287][ T5820] cx231xx 5-1:0.1: Not found matching IAD interface [ 539.107072][ T5820] usb 5-1: USB disconnect, device number 38 [ 539.339999][ T30] audit: type=1400 audit(1746967965.310:2391): avc: denied { bind } for pid=12071 comm="syz.1.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 539.920460][ T5820] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 539.995808][T12081] wg1: left promiscuous mode [ 540.000476][T12081] wg1: left allmulticast mode [ 540.021163][T12081] vlan2: left promiscuous mode [ 540.021756][ T5895] usbhid 1-1:1.0: can't add hid device: -71 [ 540.034702][T12081] bridge0: left promiscuous mode [ 540.035721][ T5895] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 540.066546][ T5895] usb 1-1: USB disconnect, device number 42 [ 540.114882][ T5820] usb 5-1: Using ep0 maxpacket: 32 [ 540.121334][ T5820] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 540.129376][ T5820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.130689][ T5858] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 540.162661][ T5820] usb 5-1: config 0 has no interface number 0 [ 540.197022][ T5820] usb 5-1: config 0 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.224235][ T5820] usb 5-1: config 0 interface 1 has no altsetting 0 [ 540.235855][ T5820] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 540.249701][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.258481][ T5820] usb 5-1: Product: syz [ 540.263693][ T5820] usb 5-1: Manufacturer: syz [ 540.269863][ T5820] usb 5-1: SerialNumber: syz [ 540.281131][T12089] input: syz1 as /devices/virtual/input/input18 [ 540.288959][ T5820] usb 5-1: config 0 descriptor?? [ 540.343229][ T5858] usb 4-1: config 0 has no interfaces? [ 540.355715][ T5858] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 540.365512][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.373914][ T5858] usb 4-1: Product: syz [ 540.378099][ T5858] usb 4-1: Manufacturer: syz [ 540.382750][ T5858] usb 4-1: SerialNumber: syz [ 540.391957][ T5858] usb 4-1: config 0 descriptor?? [ 540.553712][ T5820] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 540.562733][ T5820] cx231xx 5-1:0.1: Not found matching IAD interface [ 540.718913][T12099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.757639][T12099] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.768589][T12099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 540.900683][ T5820] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 541.061931][ T5820] usb 2-1: Using ep0 maxpacket: 8 [ 541.081687][ T5820] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 541.090484][ T5820] usb 2-1: config 0 has no interface number 0 [ 541.097225][ T5820] usb 2-1: config 0 interface 25 altsetting 6 endpoint 0x8 has invalid maxpacket 544, setting to 64 [ 541.108437][ T5820] usb 2-1: config 0 interface 25 has no altsetting 0 [ 541.478482][ T5820] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c00, bcdDevice=b4.82 [ 541.487818][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.496167][ T5820] usb 2-1: Product: syz [ 541.503087][ T5820] usb 2-1: Manufacturer: syz [ 541.507766][ T5820] usb 2-1: SerialNumber: syz [ 541.521718][ T5820] usb 2-1: config 0 descriptor?? [ 541.588589][ T5895] usb 5-1: USB disconnect, device number 39 [ 542.273266][T12118] lo speed is unknown, defaulting to 1000 [ 542.417265][ T5895] usb 4-1: USB disconnect, device number 38 [ 542.554520][T12122] lo: entered allmulticast mode [ 542.571867][T12121] lo: left allmulticast mode [ 543.257584][T12130] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[12130] [ 543.731605][ T5820] usb 2-1: bad CDC descriptors [ 543.747580][ T5820] cp210x 2-1:0.25: cp210x converter detected [ 543.763170][ T5820] cp210x 2-1:0.25: failed to get vendor val 0x370b size 1: -71 [ 543.784386][ T5820] cp210x 2-1:0.25: querying part number failed [ 543.801189][ T5820] usb 2-1: cp210x converter now attached to ttyUSB0 [ 543.829688][ T5820] usb 2-1: USB disconnect, device number 34 [ 543.855228][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 543.865419][ T5820] cp210x 2-1:0.25: device disconnected [ 544.282785][T12150] netdevsim netdevsim0: Direct firmware load for . [ 544.282785][T12150] failed with error -2 [ 544.293664][T12150] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 544.293664][T12150] [ 544.365484][ T30] audit: type=1400 audit(1746967970.340:2392): avc: denied { ioctl } for pid=12151 comm="syz.3.1761" path="socket:[35701]" dev="sockfs" ino=35701 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 544.555409][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 546.045351][T12189] input: syz1 as /devices/virtual/input/input19 [ 546.470748][T12197] netlink: 'syz.2.1770': attribute type 8 has an invalid length. [ 546.479050][ T30] audit: type=1400 audit(1746967972.440:2393): avc: denied { write } for pid=12186 comm="syz.2.1770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 546.563539][T12200] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1773'. [ 546.607180][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1773'. [ 547.031607][T12213] ptrace attach of "./syz-executor exec"[5808] was attempted by "./syz-executor exec"[12213] [ 548.080787][T12232] sctp: [Deprecated]: syz.2.1779 (pid 12232) Use of int in maxseg socket option. [ 548.080787][T12232] Use struct sctp_assoc_value instead [ 548.619218][T12245] lo speed is unknown, defaulting to 1000 [ 549.260783][ T5860] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 549.280856][ T30] audit: type=1400 audit(1746967975.230:2394): avc: denied { create } for pid=12255 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 549.423579][ T5860] usb 2-1: config 0 has no interfaces? [ 549.432873][ T5860] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 549.442074][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.570764][ T5860] usb 2-1: Product: syz [ 549.595259][ T5860] usb 2-1: Manufacturer: syz [ 549.637218][T12261] bridge0: port 3(macsec0) entered blocking state [ 549.658369][ T5860] usb 2-1: SerialNumber: syz [ 549.665887][T12261] bridge0: port 3(macsec0) entered disabled state [ 549.680521][ T5860] usb 2-1: config 0 descriptor?? [ 549.708828][T12261] macsec0: entered allmulticast mode [ 549.777179][T12261] macsec0: entered promiscuous mode [ 549.980680][ T5820] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 550.004072][T12274] IPVS: set_ctl: invalid protocol: 33 10.1.0.255:20002 [ 550.050122][T12274] hfs: unable to load iocharset "" [ 550.374715][ T5820] usb 4-1: config 0 has no interfaces? [ 550.410702][ T5820] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 550.439900][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.473796][ T5820] usb 4-1: Product: syz [ 550.489021][ T5820] usb 4-1: Manufacturer: syz [ 550.656410][ T5820] usb 4-1: SerialNumber: syz [ 550.679139][ T5820] usb 4-1: config 0 descriptor?? [ 550.890760][ T57] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 551.081923][ T57] usb 1-1: config 0 has no interfaces? [ 551.096426][ T57] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 551.106532][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.218278][ T57] usb 1-1: Product: syz [ 551.225218][ T57] usb 1-1: Manufacturer: syz [ 551.266345][ T57] usb 1-1: SerialNumber: syz [ 551.294883][ T57] usb 1-1: config 0 descriptor?? [ 551.661475][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1794'. [ 552.185095][T12302] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1796'. [ 552.195199][T12302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1796'. [ 552.248066][ T30] audit: type=1400 audit(1746967978.210:2395): avc: denied { mount } for pid=12293 comm="syz.4.1795" name="/" dev="ramfs" ino=36985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 552.710846][ T5860] usb 2-1: USB disconnect, device number 35 [ 552.931131][ T5860] usb 4-1: USB disconnect, device number 39 [ 553.352991][T12316] wg1: entered promiscuous mode [ 553.360055][T12316] wg1: entered allmulticast mode [ 553.655668][ T5860] usb 1-1: USB disconnect, device number 43 [ 553.838461][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 553.947035][T12334] raw_sendmsg: syz.0.1806 forgot to set AF_INET. Fix it! [ 554.044320][ T57] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 554.222395][ T57] usb 3-1: Using ep0 maxpacket: 32 [ 554.235137][ T57] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 554.248597][ T57] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.260690][ T5860] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 554.289118][T12342] hsr0: entered promiscuous mode [ 554.299701][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1807'. [ 554.309915][ T57] usb 3-1: config 0 descriptor?? [ 554.315160][T12342] hsr_slave_0: left promiscuous mode [ 554.332135][T12342] hsr_slave_1: left promiscuous mode [ 554.369710][T12342] hsr0 (unregistering): left promiscuous mode [ 554.440923][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 554.453994][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 554.468876][ T5860] usb 5-1: config 1 interface 0 has no altsetting 0 [ 554.477735][ T5860] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 554.487008][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.495054][ T5860] usb 5-1: Product: syz [ 554.499264][ T5860] usb 5-1: Manufacturer: syz [ 554.503953][ T5860] usb 5-1: SerialNumber: syz [ 554.548935][ T57] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 554.558564][ T57] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 554.569936][ T57] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 554.577453][ T57] usb 3-1: media controller created [ 554.598367][ T57] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 554.758613][T12322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.767320][T12322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.786167][ T57] az6027: usb out operation failed. (-71) [ 554.802755][ T57] az6027: usb out operation failed. (-71) [ 554.811628][ T57] stb0899_attach: Driver disabled by Kconfig [ 554.830830][ T57] az6027: no front-end attached [ 554.830830][ T57] [ 554.838394][ T57] az6027: usb out operation failed. (-71) [ 554.896465][ T57] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 554.979689][ T57] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 554.997450][ T57] dvb-usb: schedule remote query interval to 400 msecs. [ 555.004856][ T57] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 555.031210][ T57] usb 3-1: USB disconnect, device number 34 [ 555.067368][ T57] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 556.015334][T12364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1817'. [ 556.050983][ T5820] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 556.208017][ T5820] usb 1-1: config 1 interface 0 has no altsetting 0 [ 556.219356][ T5820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 556.240331][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.269779][ T5820] usb 1-1: Product: syz [ 556.284561][ T5820] usb 1-1: Manufacturer: syz [ 556.299300][ T5820] usb 1-1: SerialNumber: syz [ 556.792968][ T5820] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 556.880705][ T57] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 556.956445][ T5860] usbhid 5-1:1.0: can't add hid device: -71 [ 556.963070][ T5860] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 556.984124][ T5860] usb 5-1: USB disconnect, device number 40 [ 557.063116][ T57] usb 3-1: config 0 has no interfaces? [ 557.072496][ T57] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 557.082838][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.105457][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 557.139892][ T57] usb 3-1: Product: syz [ 557.160021][ T57] usb 3-1: Manufacturer: syz [ 557.168858][ T57] usb 3-1: SerialNumber: syz [ 557.200169][ T57] usb 3-1: config 0 descriptor?? [ 557.291521][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.304367][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.330720][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.371831][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.440360][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.458410][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.477375][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.629756][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.642275][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.650056][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.658263][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.684358][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.692558][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.700298][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.713212][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.728243][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.736442][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.744815][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.754049][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.766396][ T30] audit: type=1326 audit(1746967983.740:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 557.794533][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.824154][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.842858][ T30] audit: type=1326 audit(1746967983.740:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 557.873903][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.887296][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.907054][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.929905][ T30] audit: type=1326 audit(1746967983.740:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 557.956523][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.966480][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.974505][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 557.982475][ T30] audit: type=1326 audit(1746967983.740:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 558.006636][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 558.057127][ T57] hid-generic 0000:007F:FFFFFFFE.0011: unknown main item tag 0x0 [ 558.079366][ T57] hid-generic 0000:007F:FFFFFFFE.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.116575][ T30] audit: type=1326 audit(1746967983.740:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 558.146032][ T30] audit: type=1326 audit(1746967983.740:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 558.208117][T12404] fido_id[12404]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 558.223471][ T30] audit: type=1326 audit(1746967983.740:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 558.259646][ T30] audit: type=1326 audit(1746967983.740:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 558.291805][ T5820] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 558.322727][ T30] audit: type=1326 audit(1746967983.740:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 558.346977][ T30] audit: type=1326 audit(1746967983.740:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12394 comm="syz.3.1824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x7ffc0000 [ 558.452108][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 558.461660][ T5820] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 558.477026][ T5820] usb 4-1: config 0 has no interface number 0 [ 558.484407][ T5820] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.496829][ T5820] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 558.508813][ T5820] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.522862][ T5820] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.536764][ T5820] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 558.547513][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.563376][ T5820] usb 4-1: config 0 descriptor?? [ 558.582897][ T5820] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 558.819846][ T57] usb 4-1: USB disconnect, device number 40 [ 558.821012][ C0] usblp0: nonzero write bulk status received: -71 [ 558.828689][ T57] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 558.845493][ T5820] usb 1-1: USB disconnect, device number 44 [ 558.902061][ T5820] usblp0: removed [ 559.602457][ T5820] usb 3-1: USB disconnect, device number 35 [ 559.940505][T12433] tipc: Enabling of bearer rejected, already enabled [ 560.870705][ T5820] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 560.983773][T12450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1842'. [ 561.024257][ T5820] usb 5-1: config 1 interface 0 has no altsetting 0 [ 561.039923][ T5820] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 561.053822][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.067897][ T5820] usb 5-1: Product: syz [ 561.070681][ T57] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 561.072796][ T5820] usb 5-1: Manufacturer: syz [ 561.086618][ T5820] usb 5-1: SerialNumber: syz [ 561.275108][ T57] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 561.286657][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.400472][ T57] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.448862][ T57] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 561.500319][ T57] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 561.520851][ T57] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 561.530356][ T57] usb 1-1: Manufacturer: syz [ 561.549033][ T57] usb 1-1: config 0 descriptor?? [ 561.574529][ T5820] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 561.810360][T12465] netlink: 'syz.2.1847': attribute type 8 has an invalid length. [ 562.069275][ T57] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 562.083207][ T57] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 562.125054][ T57] appleir 0003:05AC:8243.0012: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 562.276561][ T5859] usb 1-1: USB disconnect, device number 45 [ 562.554392][T12474] fido_id[12474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 562.718822][T12481] syz_tun: entered allmulticast mode [ 562.753479][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.759967][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.832069][T12482] misc userio: No port type given on /dev/userio [ 563.057221][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1855'. [ 563.439284][T12509] dns_resolver: Unsupported server list version (0) [ 563.591157][ T57] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 563.611457][ T5859] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 563.640197][ C0] usblp0: nonzero write bulk status received: -71 [ 563.643450][ T5860] usb 5-1: USB disconnect, device number 41 [ 563.674525][ T5860] usblp0: removed [ 563.787065][ T5859] usb 2-1: device descriptor read/64, error -71 [ 563.825211][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 563.948298][ T57] usb 4-1: unable to get BOS descriptor or descriptor too short [ 564.073460][ T5859] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 564.120706][ T57] usb 4-1: config 1 interface 0 has no altsetting 0 [ 564.226506][ T57] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 564.237300][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.240918][ T5859] usb 2-1: device descriptor read/64, error -71 [ 564.246217][ T57] usb 4-1: Product: syz [ 564.255959][ T57] usb 4-1: Manufacturer: syz [ 564.260569][ T57] usb 4-1: SerialNumber: syz [ 564.391095][ T5859] usb usb2-port1: attempt power cycle [ 564.743073][ T5859] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 564.771535][ T5859] usb 2-1: device descriptor read/8, error -71 [ 565.020749][ T5859] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 565.041363][ T5859] usb 2-1: device descriptor read/8, error -71 [ 565.163044][ T5859] usb usb2-port1: unable to enumerate USB device [ 565.790704][ T5860] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 565.861504][ T5861] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 565.964829][ T5860] usb 1-1: config 1 interface 0 has no altsetting 0 [ 565.974533][ T5860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 565.985340][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.998226][ T5860] usb 1-1: Product: syz [ 566.010671][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 566.015940][ T5860] usb 1-1: Manufacturer: syz [ 566.020540][ T5860] usb 1-1: SerialNumber: syz [ 566.130823][ T5858] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 566.158295][ T57] usbhid 4-1:1.0: can't add hid device: -71 [ 566.186835][ T57] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 566.212329][ T57] usb 4-1: USB disconnect, device number 41 [ 566.323910][ T5858] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 566.334759][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 566.345166][ T5858] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 566.355192][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 566.365317][ T5858] usb 3-1: Product: syz [ 566.371392][ T5858] usb 3-1: Manufacturer: syz [ 566.376142][ T5858] usb 3-1: SerialNumber: syz [ 566.395799][ T5858] usb 3-1: config 0 descriptor?? [ 566.417172][ T5858] usb 3-1: selecting invalid altsetting 0 [ 566.491373][ T5860] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 566.726433][ T5860] usb 3-1: USB disconnect, device number 36 [ 567.424147][T12560] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1877'. [ 568.523644][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 568.542364][ C0] usblp0: nonzero write bulk status received: -71 [ 568.558122][ T5860] usb 1-1: USB disconnect, device number 46 [ 568.564713][ T5861] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 568.602140][ T5860] usblp0: removed [ 568.607195][ T5861] usb 5-1: can't read configurations, error -71 [ 568.630766][ T5895] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 568.817410][ T5895] usb 3-1: config 0 has no interfaces? [ 568.831465][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 568.847831][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.952104][ T5895] usb 3-1: Product: syz [ 568.968348][ T5895] usb 3-1: Manufacturer: syz [ 568.979577][ T5895] usb 3-1: SerialNumber: syz [ 569.000305][ T5895] usb 3-1: config 0 descriptor?? [ 569.506608][T12592] wg1: left promiscuous mode [ 569.536707][T12592] wg1: left allmulticast mode [ 569.568368][T12592] vlan2: left promiscuous mode [ 569.588829][T12592] bridge0: left promiscuous mode [ 569.647777][T12600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1893'. [ 569.890677][ T5861] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 570.040663][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 570.048789][ T5861] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 570.066616][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 570.096523][ T5820] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 570.112065][ T5861] usb 5-1: Product: syz [ 570.116935][ T5861] usb 5-1: Manufacturer: syz [ 570.122362][ T5861] usb 5-1: SerialNumber: syz [ 570.128739][ T5861] usb 5-1: config 0 descriptor?? [ 570.272255][ T5820] usb 4-1: config 1 interface 0 has no altsetting 0 [ 570.283293][ T5820] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 570.292531][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.300537][ T5820] usb 4-1: Product: syz [ 570.306148][ T5820] usb 4-1: Manufacturer: syz [ 570.311549][ T5820] usb 4-1: SerialNumber: syz [ 570.351275][ T5895] usb 5-1: USB disconnect, device number 44 [ 570.388197][T12610] tipc: Enabling of bearer rejected, already enabled [ 570.498563][T12616] hsr0: entered promiscuous mode [ 570.506442][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 570.516836][T12616] hsr_slave_0: left promiscuous mode [ 570.533029][T12616] hsr_slave_1: left promiscuous mode [ 570.556318][T12616] hsr0 (unregistering): left promiscuous mode [ 570.733097][ T5820] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 570.874582][ T5858] usb 3-1: USB disconnect, device number 37 [ 570.940693][ T5861] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 571.110745][ T5861] usb 2-1: device descriptor read/64, error -71 [ 571.350727][ T5861] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 571.480813][ T5861] usb 2-1: device descriptor read/64, error -71 [ 571.490682][ T5820] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 571.591300][ T5861] usb usb2-port1: attempt power cycle [ 571.652758][ T5820] usb 3-1: config 0 has no interfaces? [ 571.663479][ T5820] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 571.674083][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.682498][ T5820] usb 3-1: Product: syz [ 571.686929][ T5820] usb 3-1: Manufacturer: syz [ 571.692495][ T5820] usb 3-1: SerialNumber: syz [ 571.707999][ T5820] usb 3-1: config 0 descriptor?? [ 571.921620][T12639] QAT: Device 127 not found [ 571.930887][ T5861] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 571.964502][ T5861] usb 2-1: device descriptor read/8, error -71 [ 572.186910][T12650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1907'. [ 572.259816][T12652] B: renamed from veth0 [ 572.390692][ T5861] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 572.431283][ T5861] usb 2-1: device descriptor read/8, error -71 [ 572.540943][ T5861] usb usb2-port1: unable to enumerate USB device [ 572.836221][ C0] usblp0: nonzero write bulk status received: -71 [ 572.844463][ T5895] usb 4-1: USB disconnect, device number 42 [ 572.870217][T12608] usblp0: removed [ 573.040904][ T5820] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 573.088471][T12661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 573.109772][T12661] hsr_slave_0: left promiscuous mode [ 573.116704][T12661] hsr_slave_1: left promiscuous mode [ 573.200776][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 573.209490][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.239092][ T5820] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 573.282974][ T5820] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 573.299611][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.325269][ T5820] usb 1-1: config 0 descriptor?? [ 573.331966][ T5895] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 573.589051][ T10] usb 1-1: USB disconnect, device number 47 [ 573.615634][ T5895] usb 4-1: config 0 has no interfaces? [ 573.625282][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 573.635773][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.649498][ T5895] usb 4-1: Product: syz [ 573.658554][ T5895] usb 4-1: Manufacturer: syz [ 573.696301][ T5820] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 573.780981][ T5895] usb 4-1: SerialNumber: syz [ 573.902911][ T5895] usb 4-1: config 0 descriptor?? [ 574.080265][ T5861] usb 3-1: USB disconnect, device number 38 [ 574.109208][ T5820] usb 5-1: config 0 has no interfaces? [ 574.110714][ T5860] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 574.114884][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 574.190419][ T5820] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 574.214227][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.230382][ T5820] usb 5-1: Product: syz [ 574.237863][ T5820] usb 5-1: Manufacturer: syz [ 574.249143][ T5820] usb 5-1: SerialNumber: syz [ 574.262962][ T5820] usb 5-1: config 0 descriptor?? [ 574.301928][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.313061][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.324246][ T5860] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 574.333777][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.343038][ T5860] usb 2-1: config 0 descriptor?? [ 574.352772][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 574.359680][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.370022][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 574.379214][ T10] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 574.388685][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.399600][ T10] usb 1-1: config 0 descriptor?? [ 574.637021][ T5861] usb 1-1: USB disconnect, device number 48 [ 574.757098][ T5860] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 575.621277][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.661961][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.727103][T12685] sctp: [Deprecated]: syz.2.1918 (pid 12685) Use of int in maxseg socket option. [ 575.727103][T12685] Use struct sctp_assoc_value instead [ 575.815530][ T5860] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 575.837096][ T5860] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 575.857276][ T5860] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71 [ 575.911267][ T5861] usb 4-1: USB disconnect, device number 43 [ 575.986412][ T5860] usb 2-1: USB disconnect, device number 44 [ 576.420869][ T10] usb 5-1: USB disconnect, device number 45 [ 576.569059][T12695] tipc: Enabling of bearer rejected, already enabled [ 577.070679][ T5861] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 577.245165][ T5861] usb 2-1: config 0 has no interfaces? [ 577.253749][ T5861] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 577.263648][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.289282][ T5861] usb 2-1: Product: syz [ 577.307967][ T5861] usb 2-1: Manufacturer: syz [ 577.329084][ T5861] usb 2-1: SerialNumber: syz [ 577.356538][ T5861] usb 2-1: config 0 descriptor?? [ 577.570572][T12704] QAT: Device 127 not found [ 578.300960][ T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 578.487182][ T10] usb 4-1: config 0 has no interfaces? [ 578.497796][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 578.553828][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.633255][ T10] usb 4-1: Product: syz [ 578.676263][ T10] usb 4-1: Manufacturer: syz [ 578.705679][ T10] usb 4-1: SerialNumber: syz [ 578.719274][ T10] usb 4-1: config 0 descriptor?? [ 579.869810][ T5860] usb 2-1: USB disconnect, device number 45 [ 581.302428][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'. [ 581.599249][ T5860] usb 4-1: USB disconnect, device number 44 [ 581.874328][T12785] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[12785] [ 583.054217][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'. [ 584.880699][ T5860] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 584.910677][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 585.010677][ T5895] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 585.043351][ T5860] usb 3-1: config 0 has no interfaces? [ 585.054739][ T5860] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 585.072298][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 585.121243][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.129461][ T5860] usb 3-1: Product: syz [ 585.134538][ T5860] usb 3-1: Manufacturer: syz [ 585.139424][ T5860] usb 3-1: SerialNumber: syz [ 585.248595][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.272730][ T5860] usb 3-1: config 0 descriptor?? [ 585.301871][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.320151][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 585.336485][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 585.346847][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 585.362569][ T10] usb 5-1: Manufacturer: syz [ 585.377528][ T10] usb 5-1: config 0 descriptor?? [ 585.466759][ T5895] usb 2-1: config 0 has no interfaces? [ 585.478840][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 585.488365][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.499062][ T5895] usb 2-1: Product: syz [ 585.506930][ T5895] usb 2-1: Manufacturer: syz [ 585.519796][ T5895] usb 2-1: SerialNumber: syz [ 585.588039][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 585.588056][ T30] audit: type=1400 audit(1746968011.550:2410): avc: denied { ioctl } for pid=12824 comm="syz.2.1955" path="socket:[39192]" dev="sockfs" ino=39192 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 585.650145][ T5895] usb 2-1: config 0 descriptor?? [ 586.027752][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 586.042195][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 586.073591][ T10] usb 5-1: USB disconnect, device number 46 [ 587.010540][ T30] audit: type=1400 audit(1746968012.980:2411): avc: denied { write } for pid=12867 comm="syz.3.1968" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 587.039302][T12869] syz_tun: entered allmulticast mode [ 587.054735][T12866] syz_tun: left allmulticast mode [ 587.180846][ T30] audit: type=1400 audit(1746968012.990:2412): avc: denied { ioctl } for pid=12867 comm="syz.3.1968" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 587.532196][ T5861] usb 3-1: USB disconnect, device number 39 [ 587.644971][ T5860] usb 2-1: USB disconnect, device number 46 [ 587.693802][T12883] lo speed is unknown, defaulting to 1000 [ 588.553428][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1979'. [ 589.367447][ T5895] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 589.588198][ T5895] usb 4-1: config 0 has no interfaces? [ 589.607337][ T5895] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 589.725705][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.780209][ T5895] usb 4-1: Product: syz [ 589.803826][ T5895] usb 4-1: Manufacturer: syz [ 589.822705][ T5895] usb 4-1: SerialNumber: syz [ 589.864626][ T5895] usb 4-1: config 0 descriptor?? [ 590.080688][ T5860] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 590.157443][T12917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1983'. [ 590.166559][T12917] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1983'. [ 590.243215][T12946] binder: 12945:12946 ioctl 4018620d 0 returned -22 [ 590.334728][ T5860] usb 5-1: config 0 has no interfaces? [ 590.373962][ T5860] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 590.392027][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.429609][ T5860] usb 5-1: Product: syz [ 590.485514][ T5860] usb 5-1: Manufacturer: syz [ 590.507062][ T5860] usb 5-1: SerialNumber: syz [ 590.538998][ T5860] usb 5-1: config 0 descriptor?? [ 590.641560][ T5858] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 590.787621][ T30] audit: type=1400 audit(1746968016.760:2413): avc: denied { map } for pid=12958 comm="syz.1.1999" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 590.850476][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.011751][ T5858] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 591.026231][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.072962][ T5858] usb 3-1: Product: syz [ 591.100680][ T5858] usb 3-1: Manufacturer: syz [ 591.129934][ T5858] usb 3-1: SerialNumber: syz [ 591.250777][ T5860] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 591.276502][ T5858] usb 3-1: config 0 descriptor?? [ 591.317305][ T5858] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 591.393953][ T5858] dvb-usb: bulk message failed: -22 (3/0) [ 591.482731][ T5858] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 591.492174][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 591.515466][T12948] dvb-usb: bulk message failed: -22 (2/0) [ 591.560729][ T5858] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 591.691793][ T5858] usb 3-1: media controller created [ 591.811133][ T5895] usb 4-1: USB disconnect, device number 45 [ 591.915639][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 591.933517][ T5858] dvb-usb: bulk message failed: -22 (6/0) [ 591.940529][ T5858] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 591.977007][ T5858] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 592.016112][ T5858] dvb-usb: schedule remote query interval to 150 msecs. [ 592.049071][ T5858] dvb-usb: bulk message failed: -22 (3/0) [ 592.095831][T12970] syz_tun: entered allmulticast mode [ 592.095891][ T5858] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 592.143828][T12969] syz_tun: left allmulticast mode [ 592.157001][ T5858] usb 3-1: USB disconnect, device number 40 [ 592.328829][ T5858] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 592.346799][T12979] dns_resolver: Unsupported server list version (0) [ 592.742573][ T5895] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 592.874346][ T5861] usb 5-1: USB disconnect, device number 47 [ 592.932160][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 592.948436][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 592.974639][ T5895] usb 1-1: config 1 interface 0 has no altsetting 0 [ 592.992634][ T5895] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 593.022844][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.049393][ T5895] usb 1-1: Product: syz [ 593.066089][ T5895] usb 1-1: Manufacturer: syz [ 593.084278][ T5895] usb 1-1: SerialNumber: syz [ 593.336838][ T5895] usbhid 1-1:1.0: can't add hid device: -71 [ 593.348408][ T5895] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 593.365558][ T5895] usb 1-1: USB disconnect, device number 49 [ 593.805858][ T5860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 593.820986][ T5860] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 593.840040][ T5860] usb 2-1: can't read configurations, error -71 [ 594.009501][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'. [ 594.176264][ T30] audit: type=1400 audit(1746968020.110:2414): avc: denied { read } for pid=12998 comm="syz.4.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 594.279036][T13001] IPVS: length: 24 != 43032 [ 594.280375][ T30] audit: type=1400 audit(1746968020.250:2415): avc: denied { getopt } for pid=12998 comm="syz.4.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 594.510677][ T5858] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 594.670945][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 594.672160][ T5858] usb 1-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 594.677184][T12982] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 594.699793][T12982] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 594.738505][ T5858] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.768865][ T5858] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 594.791403][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.811583][ T5858] usb 1-1: config 0 descriptor?? [ 594.824038][ T5858] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 594.920745][ T5859] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 595.024482][ T5895] usb 1-1: USB disconnect, device number 50 [ 595.084552][ T5859] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 595.094619][ T5859] usb 5-1: config 0 interface 0 has no altsetting 0 [ 595.103075][ T5859] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.112353][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.126317][ T5859] usb 5-1: Product: syz [ 595.132687][ T5859] usb 5-1: Manufacturer: syz [ 595.138891][ T5859] usb 5-1: SerialNumber: syz [ 595.143591][T12982] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 595.149500][T12982] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 595.168124][ T5859] usb 5-1: config 0 descriptor?? [ 595.174970][T12982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.184672][ T5859] usb 5-1: selecting invalid altsetting 0 [ 595.194530][T12982] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 595.250920][ T5860] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 595.324994][T12982] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 595.334800][T12982] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 595.367638][T12982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.375848][T12982] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 595.394793][ T5858] usb 5-1: USB disconnect, device number 48 [ 595.471096][ T5895] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 595.500995][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 595.514035][ T5860] usb 2-1: unable to get BOS descriptor or descriptor too short [ 595.571234][ T5860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 595.650636][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 595.675725][ T5895] usb 1-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 595.686730][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 595.711939][ T5895] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 595.730299][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.734606][ T5860] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 595.747758][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.757475][ T5860] usb 2-1: Product: syz [ 595.761865][ T5860] usb 2-1: Manufacturer: syz [ 595.766458][ T5860] usb 2-1: SerialNumber: syz [ 595.796327][ T5895] usb 1-1: config 0 descriptor?? [ 595.814722][ T5895] ldusb 1-1:0.0: Interrupt in endpoint not found [ 595.833401][ T5895] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 595.865642][T13033] tipc: Enabling of bearer rejected, already enabled [ 595.987996][ T5860] usbhid 2-1:1.0: can't add hid device: -71 [ 595.994895][ T5860] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 596.012343][ T5860] usb 2-1: USB disconnect, device number 49 [ 596.017031][ T5895] usb 1-1: USB disconnect, device number 51 [ 596.211118][ T57] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 596.370754][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 596.376995][ T57] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 596.385563][ T57] usb 4-1: config 0 has no interface number 0 [ 596.391752][ T57] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 596.402557][ T57] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 596.415678][ T57] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 596.426705][ T57] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 596.439855][ T57] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 596.448921][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.458187][ T57] usb 4-1: config 0 descriptor?? [ 596.468661][ T57] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 596.570870][ T5895] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 596.744280][ T5895] usb 3-1: config 0 has no interfaces? [ 596.788194][ T10] usb 4-1: USB disconnect, device number 46 [ 596.796827][ T5895] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 596.808134][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 596.816552][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.844379][ T5895] usb 3-1: Product: syz [ 596.850180][ T5895] usb 3-1: Manufacturer: syz [ 596.864095][ T5895] usb 3-1: SerialNumber: syz [ 596.876224][ T5895] usb 3-1: config 0 descriptor?? [ 597.106723][T13042] QAT: Device 127 not found [ 597.700851][T13069] sctp: [Deprecated]: syz.0.2038 (pid 13069) Use of int in maxseg socket option. [ 597.700851][T13069] Use struct sctp_assoc_value instead [ 597.716681][ T57] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 597.952628][ T57] usb 4-1: config 0 has no interfaces? [ 598.000712][ T57] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 598.011467][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.099321][ T57] usb 4-1: Product: syz [ 598.123860][ T57] usb 4-1: Manufacturer: syz [ 598.128618][ T57] usb 4-1: SerialNumber: syz [ 598.166383][ T57] usb 4-1: config 0 descriptor?? [ 598.350928][ T5860] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 598.540826][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 598.553767][ T5860] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 598.565228][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.575876][ T5860] usb 2-1: config 0 has no interfaces? [ 598.622081][ T5860] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 598.631955][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.640460][ T5860] usb 2-1: Product: syz [ 598.650803][ T5860] usb 2-1: Manufacturer: syz [ 598.660714][ T5860] usb 2-1: SerialNumber: syz [ 598.684543][ T5860] usb 2-1: config 0 descriptor?? [ 598.880846][ T57] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 599.030789][ T57] usb 1-1: Using ep0 maxpacket: 16 [ 599.042107][ T57] usb 1-1: unable to get BOS descriptor or descriptor too short [ 599.054552][ T57] usb 1-1: config 1 interface 0 has no altsetting 0 [ 599.092397][ T57] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 599.101612][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.109797][ T57] usb 1-1: Product: syz [ 599.142359][ T57] usb 1-1: Manufacturer: syz [ 599.148623][ T57] usb 1-1: SerialNumber: syz [ 599.369960][ T5895] usb 3-1: USB disconnect, device number 41 [ 599.437367][ T57] usbhid 1-1:1.0: can't add hid device: -71 [ 599.446470][ T57] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 599.471066][ T57] usb 1-1: USB disconnect, device number 52 [ 599.850667][ T5860] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 600.035598][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 600.043277][ T5860] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 600.052897][ T5860] usb 3-1: config 0 has no interface number 0 [ 600.059476][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 600.073061][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 600.085813][ T5860] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 600.097982][ T5860] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 600.112301][ T5860] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 600.123050][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.142058][ T5860] usb 3-1: config 0 descriptor?? [ 600.159849][ T5860] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 600.428078][ T5860] usb 3-1: USB disconnect, device number 42 [ 600.437246][ T5860] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 600.605476][ T57] usb 4-1: USB disconnect, device number 47 [ 600.963445][ T57] usb 2-1: USB disconnect, device number 50 [ 601.321882][ T57] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 601.439962][T13124] sctp: [Deprecated]: syz.3.2053 (pid 13124) Use of int in maxseg socket option. [ 601.439962][T13124] Use struct sctp_assoc_value instead [ 601.531996][ T57] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 601.542081][ T57] usb 2-1: config 0 interface 0 has no altsetting 0 [ 601.785484][ T57] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 601.826791][ T57] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 601.850131][ T57] usb 2-1: Product: syz [ 601.858517][ T57] usb 2-1: Manufacturer: syz [ 601.864793][ T57] usb 2-1: SerialNumber: syz [ 601.873268][ T57] usb 2-1: config 0 descriptor?? [ 601.886513][ T57] usb 2-1: selecting invalid altsetting 0 [ 602.132027][ T5858] usb 2-1: USB disconnect, device number 51 [ 602.150793][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 602.220675][ T57] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 602.327715][ T10] usb 5-1: config 0 has no interfaces? [ 602.354173][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 602.363275][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.373217][ T10] usb 5-1: Product: syz [ 602.377380][ T10] usb 5-1: Manufacturer: syz [ 602.380714][ T57] usb 4-1: Using ep0 maxpacket: 16 [ 602.388558][ T10] usb 5-1: SerialNumber: syz [ 602.395232][ T57] usb 4-1: unable to get BOS descriptor or descriptor too short [ 602.395823][ T10] usb 5-1: config 0 descriptor?? [ 602.470369][ T57] usb 4-1: config 1 interface 0 has no altsetting 0 [ 602.473570][ T57] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 602.473602][ T57] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.473619][ T57] usb 4-1: Product: syz [ 602.473632][ T57] usb 4-1: Manufacturer: syz [ 602.473644][ T57] usb 4-1: SerialNumber: syz [ 602.659446][T13134] QAT: Device 127 not found [ 602.687179][ T57] usbhid 4-1:1.0: can't add hid device: -71 [ 602.693283][ T57] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 602.702964][ T57] usb 4-1: USB disconnect, device number 48 [ 603.400675][ T5859] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 603.727235][ T5859] usb 1-1: config 0 has no interfaces? [ 603.742923][ T5859] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 603.752169][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.761608][ T5859] usb 1-1: Product: syz [ 603.765802][ T5859] usb 1-1: Manufacturer: syz [ 603.770429][ T5859] usb 1-1: SerialNumber: syz [ 603.792572][ T5859] usb 1-1: config 0 descriptor?? [ 604.271398][ T5858] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 604.610953][T13173] sctp: [Deprecated]: syz.3.2066 (pid 13173) Use of int in maxseg socket option. [ 604.610953][T13173] Use struct sctp_assoc_value instead [ 604.652222][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.680665][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.743741][ T5858] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 604.764333][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.811337][ T5858] usb 2-1: config 0 descriptor?? [ 604.869789][ T5859] usb 5-1: USB disconnect, device number 49 [ 605.280173][ T5858] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 606.081589][ T5860] usb 1-1: USB disconnect, device number 53 [ 606.136257][ T5858] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 606.153051][ T5858] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 606.175484][ T5858] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 606.190801][ T5859] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 606.303436][T13201] netlink: 'syz.0.2075': attribute type 10 has an invalid length. [ 606.343986][ T5858] usb 2-1: USB disconnect, device number 52 [ 606.354945][ T5859] usb 4-1: config 0 has no interfaces? [ 606.371483][ T5859] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 606.381629][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.389604][ T5859] usb 4-1: Product: syz [ 606.396003][ T5859] usb 4-1: Manufacturer: syz [ 606.404105][ T5859] usb 4-1: SerialNumber: syz [ 606.438119][ T5859] usb 4-1: config 0 descriptor?? [ 606.770231][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2071'. [ 606.779354][T13195] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2071'. [ 607.587387][T13207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.677693][ T5858] usb 4-1: USB disconnect, device number 49 [ 608.857458][T13260] dns_resolver: Unsupported server list version (0) [ 608.885465][T13262] tipc: Enabling of bearer rejected, already enabled [ 608.967692][ T30] audit: type=1326 audit(1746968034.940:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13253 comm="syz.3.2090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83a918e969 code=0x0 [ 609.138853][T13269] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2092'. [ 609.181762][T13269] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 609.306864][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2093'. [ 609.450666][ T5858] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 609.604923][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 609.614187][ T5858] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 609.622600][ T5858] usb 3-1: config 0 has no interface number 0 [ 609.628666][ T5858] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.667426][ T5858] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 609.693962][ T5858] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 609.706866][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.718362][ T5858] usb 3-1: Product: syz [ 609.723487][ T5858] usb 3-1: Manufacturer: syz [ 609.728238][ T5858] usb 3-1: SerialNumber: syz [ 609.770322][ T5858] usb 3-1: config 0 descriptor?? [ 609.790418][ T5858] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 609.802433][ T5858] em28xx 3-1:0.132: Video interface 132 found: bulk [ 610.494821][ T5859] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 610.515222][T13302] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[13302] [ 610.676764][ T5859] usb 5-1: config 0 has no interfaces? [ 610.686582][ T5859] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 610.699172][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.740799][ T5859] usb 5-1: Product: syz [ 610.870154][ T5859] usb 5-1: Manufacturer: syz [ 610.918799][ T5859] usb 5-1: SerialNumber: syz [ 610.931718][ T5859] usb 5-1: config 0 descriptor?? [ 611.070977][ T5858] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 611.172745][T13297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2101'. [ 611.182685][T13297] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2101'. [ 611.203841][ T5858] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 611.224691][ T5858] em28xx 3-1:0.132: board has no eeprom [ 611.290666][ T5858] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 611.298547][ T5858] em28xx 3-1:0.132: analog set to bulk mode. [ 611.345795][ T5860] em28xx 3-1:0.132: Registering V4L2 extension [ 611.428688][ T5860] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 611.499053][ T5860] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 611.532392][ T5860] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 611.651287][ T5860] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 611.725732][ T5860] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 611.775512][ T5860] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 611.820043][ T5860] em28xx 3-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 611.890028][ T5860] em28xx 3-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 611.973190][ T5859] usb 3-1: USB disconnect, device number 43 [ 612.047174][ T5859] em28xx 3-1:0.132: Disconnecting em28xx [ 612.059787][ T5860] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 612.176214][T13353] lo speed is unknown, defaulting to 1000 [ 612.325647][ T5860] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 612.440776][ T5860] em28xx 3-1:0.132: No AC97 audio processor [ 612.472693][ T5860] usb 3-1: Decoder not found [ 612.479241][ T5860] em28xx 3-1:0.132: failed to create media graph [ 612.549910][ T5860] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 612.796153][T13365] netdevsim netdevsim3: Direct firmware load for . [ 612.796153][T13365] failed with error -2 [ 612.870087][T13365] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 612.870087][T13365] [ 612.887299][ T5860] em28xx 3-1:0.132: Remote control support is not available for this card. [ 612.904432][T13361] ================================================================== [ 612.912534][T13361] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 612.919998][T13361] Read of size 8 at addr ffff888021fa0738 by task v4l_id/13361 [ 612.927535][T13361] [ 612.929857][T13361] CPU: 1 UID: 0 PID: 13361 Comm: v4l_id Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 612.929881][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 612.929892][T13361] Call Trace: [ 612.929898][T13361] [ 612.929904][T13361] dump_stack_lvl+0x116/0x1f0 [ 612.929929][T13361] print_report+0xc3/0x670 [ 612.929945][T13361] ? __virt_addr_valid+0x5e/0x590 [ 612.929967][T13361] ? __phys_addr+0xc6/0x150 [ 612.929988][T13361] ? v4l2_fh_init+0x27d/0x2c0 [ 612.930007][T13361] kasan_report+0xe0/0x110 [ 612.930023][T13361] ? v4l2_fh_init+0x27d/0x2c0 [ 612.930044][T13361] v4l2_fh_init+0x27d/0x2c0 [ 612.930063][T13361] v4l2_fh_open+0x83/0xc0 [ 612.930082][T13361] em28xx_v4l2_open+0x24e/0x7e0 [ 612.930105][T13361] v4l2_open+0x222/0x490 [ 612.930123][T13361] ? __pfx_v4l2_open+0x10/0x10 [ 612.930140][T13361] chrdev_open+0x231/0x6a0 [ 612.930156][T13361] ? __pfx_chrdev_open+0x10/0x10 [ 612.930172][T13361] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 612.930197][T13361] do_dentry_open+0x741/0x1c10 [ 612.930221][T13361] ? __pfx_chrdev_open+0x10/0x10 [ 612.930238][T13361] vfs_open+0x82/0x3f0 [ 612.930255][T13361] path_openat+0x1e5e/0x2d40 [ 612.930284][T13361] ? __pfx_path_openat+0x10/0x10 [ 612.930309][T13361] do_filp_open+0x20b/0x470 [ 612.930333][T13361] ? __pfx_do_filp_open+0x10/0x10 [ 612.930364][T13361] ? alloc_fd+0x471/0x7d0 [ 612.930389][T13361] do_sys_openat2+0x11b/0x1d0 [ 612.930406][T13361] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.930427][T13361] __x64_sys_openat+0x174/0x210 [ 612.930446][T13361] ? __pfx___x64_sys_openat+0x10/0x10 [ 612.930465][T13361] ? do_user_addr_fault+0x843/0x1370 [ 612.930485][T13361] do_syscall_64+0xcd/0x260 [ 612.930507][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.930522][T13361] RIP: 0033:0x7feb942a7407 [ 612.930537][T13361] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 612.930554][T13361] RSP: 002b:00007ffcb7b6f780 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 612.930569][T13361] RAX: ffffffffffffffda RBX: 00007feb9495a880 RCX: 00007feb942a7407 [ 612.930578][T13361] RDX: 0000000000000000 RSI: 00007ffcb7b6ff1b RDI: ffffffffffffff9c [ 612.930586][T13361] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 612.930594][T13361] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 612.930602][T13361] R13: 00007ffcb7b6f9d0 R14: 00007feb94ac1000 R15: 000055afdab934d8 [ 612.930614][T13361] [ 612.930618][T13361] [ 613.178860][T13361] Allocated by task 5860: [ 613.183159][T13361] kasan_save_stack+0x33/0x60 [ 613.187815][T13361] kasan_save_track+0x14/0x30 [ 613.192482][T13361] __kasan_kmalloc+0xaa/0xb0 [ 613.197062][T13361] em28xx_v4l2_init+0x114/0x4080 [ 613.201978][T13361] em28xx_init_extension+0x137/0x200 [ 613.207241][T13361] request_module_async+0x61/0x70 [ 613.212244][T13361] process_one_work+0x9cc/0x1b70 [ 613.217159][T13361] worker_thread+0x6c8/0xf10 [ 613.221728][T13361] kthread+0x3c2/0x780 [ 613.225766][T13361] ret_from_fork+0x45/0x80 [ 613.230154][T13361] ret_from_fork_asm+0x1a/0x30 [ 613.234893][T13361] [ 613.237188][T13361] Freed by task 5860: [ 613.241137][T13361] kasan_save_stack+0x33/0x60 [ 613.245799][T13361] kasan_save_track+0x14/0x30 [ 613.250467][T13361] kasan_save_free_info+0x3b/0x60 [ 613.255464][T13361] __kasan_slab_free+0x51/0x70 [ 613.260197][T13361] kfree+0x2b6/0x4d0 [ 613.264080][T13361] em28xx_v4l2_init+0x22b5/0x4080 [ 613.269108][T13361] em28xx_init_extension+0x137/0x200 [ 613.274390][T13361] request_module_async+0x61/0x70 [ 613.279411][T13361] process_one_work+0x9cc/0x1b70 [ 613.284337][T13361] worker_thread+0x6c8/0xf10 [ 613.288913][T13361] kthread+0x3c2/0x780 [ 613.293132][T13361] ret_from_fork+0x45/0x80 [ 613.297528][T13361] ret_from_fork_asm+0x1a/0x30 [ 613.302275][T13361] [ 613.304577][T13361] The buggy address belongs to the object at ffff888021fa0000 [ 613.304577][T13361] which belongs to the cache kmalloc-8k of size 8192 [ 613.318609][T13361] The buggy address is located 1848 bytes inside of [ 613.318609][T13361] freed 8192-byte region [ffff888021fa0000, ffff888021fa2000) [ 613.332552][T13361] [ 613.334854][T13361] The buggy address belongs to the physical page: [ 613.341246][T13361] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21fa0 [ 613.349981][T13361] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 613.358474][T13361] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 613.366014][T13361] page_type: f5(slab) [ 613.369981][T13361] raw: 00fff00000000040 ffff88801b442280 dead000000000100 dead000000000122 [ 613.378549][T13361] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 613.387113][T13361] head: 00fff00000000040 ffff88801b442280 dead000000000100 dead000000000122 [ 613.395765][T13361] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 613.404412][T13361] head: 00fff00000000003 ffffea000087e801 00000000ffffffff 00000000ffffffff [ 613.413072][T13361] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 613.421737][T13361] page dumped because: kasan: bad access detected [ 613.428133][T13361] page_owner tracks the page as allocated [ 613.433826][T13361] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5467, tgid 5467 (iptables-restor), ts 34638861728, free_ts 34633413689 [ 613.453341][T13361] post_alloc_hook+0x181/0x1b0 [ 613.458092][T13361] get_page_from_freelist+0x135c/0x3920 [ 613.463622][T13361] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 613.469498][T13361] alloc_pages_mpol+0x1fb/0x550 [ 613.474328][T13361] new_slab+0x244/0x340 [ 613.478465][T13361] ___slab_alloc+0xd9c/0x1940 [ 613.483124][T13361] __slab_alloc.constprop.0+0x56/0xb0 [ 613.488477][T13361] __kmalloc_cache_noprof+0xfb/0x3e0 [ 613.493764][T13361] audit_log_d_path+0xe7/0x200 [ 613.498551][T13361] audit_log_lsm_data+0xacf/0x1fe0 [ 613.503691][T13361] common_lsm_audit+0x238/0x300 [ 613.508538][T13361] slow_avc_audit+0x186/0x210 [ 613.513197][T13361] avc_has_perm+0x18b/0x1c0 [ 613.517679][T13361] inode_has_perm+0x168/0x1d0 [ 613.522337][T13361] file_has_perm+0x2e4/0x350 [ 613.526921][T13361] match_file+0xd7/0x150 [ 613.531321][T13361] page last free pid 5467 tgid 5467 stack trace: [ 613.537621][T13361] __free_frozen_pages+0x69d/0xff0 [ 613.542737][T13361] __put_partials+0x16d/0x1c0 [ 613.547398][T13361] qlist_free_all+0x4e/0x120 [ 613.551972][T13361] kasan_quarantine_reduce+0x195/0x1e0 [ 613.557425][T13361] __kasan_slab_alloc+0x69/0x90 [ 613.562255][T13361] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 613.567622][T13361] tomoyo_init_log+0xc8a/0x2140 [ 613.572454][T13361] tomoyo_supervisor+0x302/0x13b0 [ 613.577458][T13361] tomoyo_env_perm+0x191/0x200 [ 613.582199][T13361] tomoyo_find_next_domain+0xec2/0x20b0 [ 613.587723][T13361] tomoyo_bprm_check_security+0x12e/0x1d0 [ 613.593420][T13361] security_bprm_check+0x1b9/0x1e0 [ 613.598510][T13361] bprm_execve+0x810/0x1650 [ 613.602998][T13361] do_execveat_common.isra.0+0x4a5/0x610 [ 613.608612][T13361] __x64_sys_execve+0x8e/0xb0 [ 613.613271][T13361] do_syscall_64+0xcd/0x260 [ 613.617756][T13361] [ 613.620057][T13361] Memory state around the buggy address: [ 613.625665][T13361] ffff888021fa0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.633707][T13361] ffff888021fa0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.641747][T13361] >ffff888021fa0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.649782][T13361] ^ [ 613.655649][T13361] ffff888021fa0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.663688][T13361] ffff888021fa0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 613.671738][T13361] ================================================================== [ 613.735676][ T5859] em28xx 3-1:0.132: Closing input extension [ 613.841662][T13361] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 613.848869][T13361] CPU: 1 UID: 0 PID: 13361 Comm: v4l_id Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 613.860557][T13361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 613.870596][T13361] Call Trace: [ 613.873851][T13361] [ 613.876758][T13361] dump_stack_lvl+0x3d/0x1f0 [ 613.881339][T13361] panic+0x71c/0x800 [ 613.885214][T13361] ? __pfx_panic+0x10/0x10 [ 613.889609][T13361] ? irqentry_exit+0x3b/0x90 [ 613.894187][T13361] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.899361][T13361] ? preempt_schedule_thunk+0x16/0x30 [ 613.904705][T13361] ? v4l2_fh_init+0x27d/0x2c0 [ 613.909362][T13361] ? preempt_schedule_common+0x44/0xc0 [ 613.914804][T13361] ? check_panic_on_warn+0x1f/0xb0 [ 613.919904][T13361] ? v4l2_fh_init+0x27d/0x2c0 [ 613.924564][T13361] check_panic_on_warn+0xab/0xb0 [ 613.929491][T13361] end_report+0x107/0x170 [ 613.933803][T13361] kasan_report+0xee/0x110 [ 613.938200][T13361] ? v4l2_fh_init+0x27d/0x2c0 [ 613.942861][T13361] v4l2_fh_init+0x27d/0x2c0 [ 613.947345][T13361] v4l2_fh_open+0x83/0xc0 [ 613.951657][T13361] em28xx_v4l2_open+0x24e/0x7e0 [ 613.956507][T13361] v4l2_open+0x222/0x490 [ 613.960731][T13361] ? __pfx_v4l2_open+0x10/0x10 [ 613.965474][T13361] chrdev_open+0x231/0x6a0 [ 613.969875][T13361] ? __pfx_chrdev_open+0x10/0x10 [ 613.974799][T13361] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 613.981549][T13361] do_dentry_open+0x741/0x1c10 [ 613.986299][T13361] ? __pfx_chrdev_open+0x10/0x10 [ 613.991222][T13361] vfs_open+0x82/0x3f0 [ 613.995273][T13361] path_openat+0x1e5e/0x2d40 [ 613.999851][T13361] ? __pfx_path_openat+0x10/0x10 [ 614.004775][T13361] do_filp_open+0x20b/0x470 [ 614.009267][T13361] ? __pfx_do_filp_open+0x10/0x10 [ 614.014283][T13361] ? alloc_fd+0x471/0x7d0 [ 614.018614][T13361] do_sys_openat2+0x11b/0x1d0 [ 614.023271][T13361] ? __pfx_do_sys_openat2+0x10/0x10 [ 614.028454][T13361] __x64_sys_openat+0x174/0x210 [ 614.033304][T13361] ? __pfx___x64_sys_openat+0x10/0x10 [ 614.038658][T13361] ? do_user_addr_fault+0x843/0x1370 [ 614.043926][T13361] do_syscall_64+0xcd/0x260 [ 614.048415][T13361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.054287][T13361] RIP: 0033:0x7feb942a7407 [ 614.058683][T13361] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 614.078273][T13361] RSP: 002b:00007ffcb7b6f780 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 614.086668][T13361] RAX: ffffffffffffffda RBX: 00007feb9495a880 RCX: 00007feb942a7407 [ 614.094623][T13361] RDX: 0000000000000000 RSI: 00007ffcb7b6ff1b RDI: ffffffffffffff9c [ 614.102573][T13361] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 614.110525][T13361] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 614.118476][T13361] R13: 00007ffcb7b6f9d0 R14: 00007feb94ac1000 R15: 000055afdab934d8 [ 614.126448][T13361] [ 614.129669][T13361] Kernel Offset: disabled [ 614.133998][T13361] Rebooting in 86400 seconds..