last executing test programs: 9.057170502s ago: executing program 1 (id=868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 8.335411985s ago: executing program 1 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x4, 0x93, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) inotify_add_watch(r5, 0x0, 0x21000900) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000000000000c00054000000000000000"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) 7.231647743s ago: executing program 2 (id=872): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2e, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6.920039837s ago: executing program 2 (id=874): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) 6.870122809s ago: executing program 4 (id=875): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000", 0x87}, {&(0x7f0000000400)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5", 0x6c}, {&(0x7f0000000180)="0c1928a7397d5f2e855cb2b0b1e61d3fe4", 0x11}, {&(0x7f0000000740)="c8605474ee573ad5ad5acedf22046d983c7964dad745eb7c8eb102c0d2b166382d3f325806513b1eb3fe7b135bfef85013c74b374f5892a7254e3405ebe8d6", 0x3f}], 0x4}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="acc841985992b79554acfc02163bb0fb2bb293e68c02bb40b6b870bde5700d368744361ae9fce3", 0x27}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1da}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.528640822s ago: executing program 2 (id=877): openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r4 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) 5.84603276s ago: executing program 4 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 5.719924321s ago: executing program 4 (id=881): mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') lseek(r0, 0x1000000, 0x0) process_mrelease(r0, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x20040, 0x1c4, 0x4}, 0x18) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0x3, 0xfffffffe, 0x4, 0x5, 0x11, "738612001502f4e5b53a331d87fbfd361a086c"}) socket$can_bcm(0x1d, 0x2, 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r3, 0x409, 0x7) syz_80211_inject_frame(&(0x7f0000000200), &(0x7f0000002c40)=ANY=[@ANYRESHEX=r0], 0x4cb) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002700)=0x1, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 5.016681805s ago: executing program 0 (id=883): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 4.958481502s ago: executing program 0 (id=884): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2e, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.957930274s ago: executing program 1 (id=885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 4.851283305s ago: executing program 0 (id=887): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 4.433171293s ago: executing program 4 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}}, 0x8850) 3.658484419s ago: executing program 4 (id=893): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800"/126], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 3.632969955s ago: executing program 0 (id=894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b"], 0xffdd) close(0x3) close(0x4) 3.581587011s ago: executing program 1 (id=895): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.519093427s ago: executing program 1 (id=896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_usb_connect$uac1(0x4, 0x93, &(0x7f0000000000)=ANY=[], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) inotify_add_watch(r5, 0x0, 0x21000900) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000000000000c00054000000000000000"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) 3.293985349s ago: executing program 2 (id=897): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xfeffffffffffffff, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.959072417s ago: executing program 4 (id=898): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b000905810300"], 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, &(0x7f0000000100)=ANY=[], 0x4) io_uring_enter(r1, 0xa65, 0x779a, 0x2c, &(0x7f0000000840)={[0x6]}, 0x8) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@global=@item_012={0x0, 0x1, 0x6}, @main=@item_4={0x3, 0x0, 0x8, "8f0500f8"}, @local=@item_4={0x3, 0x2, 0x9, "dc370ea4"}]}}, 0x0}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000880)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xa8, 0x2f, 0x0, @empty, @mcast2, {[@hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x4, 0x68}, @dstopts={0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, @dstopts={0x2, 0x0, '\x00', [@pad1]}, @dstopts={0x5c, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x9b, 0x7, [0x7, 0x0]}}, @enc_lim={0x4, 0x1, 0xb}, @pad1]}, @dstopts={0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra]}], {0x2000, 0x88be, 0x8}}}}}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x24, 0x100, 0x70bd2a, 0x25dfdbff, {0x14}, [@nested={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0xf5}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c000000030101020000000000000000000000051c000f80080001400000007f08000240000000470800024000010000240019800800020040000000080002000400000008000200700000000600124000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x3ef27131a34fa02d) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.75303292s ago: executing program 3 (id=899): socket$netlink(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x27) r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r3, 0x71) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r2, 0xffffffff) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001a00010828bd7000fedbdf248180800000000000000000003d2a1350201d615caf9cc74109218ef5a410291fd688ebf305b660d7d2ce0249855c6730223c63e75e3b80688b6e6a03c100f916832bd7196c228ec2fc01b12b4e03a594b00394dacab33514cdba7436e0bad9ddb69c4eafe393206b8c3355a76b246dc1a111fcfb07003b87312f464ab2250f1a885efa696ff1b5a30318f0d6c80fe2f7210c210bc9a89d60826216e91ef7b16813"], 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) 2.124428735s ago: executing program 2 (id=900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x2860020, &(0x7f0000000180)=ANY=[]) r1 = getpid() socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) pipe2(0x0, 0x4800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000400)={0x4, &(0x7f0000000300)=[{0xa00, 0x9a, 0x4, 0x13c}, {0xf4, 0x9, 0x7, 0x4}, {0x8, 0x6, 0xf9, 0x3}, {0x0, 0x4, 0x1, 0x6}]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="060000000400000008000000010000008000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005b9b302a481609743176291c23578b8bf7b66f535e0b93c9f3f1b59881b6ea3373021b6aa285b7d716a94edfa90aa22e9ee2ef5b23d8ac9e0a4df788f9556d5f4559b84d2c6dba6a1798c2865c59081a5b44a20c4ffafb1b3ee33401804026d3c95476f5418aba68b148", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000200"/25], 0x48) 1.832017654s ago: executing program 3 (id=901): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 1.082098464s ago: executing program 2 (id=902): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d80402f0000000000001090224000100000000090400000103000000092100000001220b"], 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) write$nci(r1, &(0x7f0000000100)=ANY=[], 0x4) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@global=@item_012={0x0, 0x1, 0x6}, @main=@item_4={0x3, 0x0, 0x8, "8f0500f8"}, @local=@item_4={0x3, 0x2, 0x9, "dc370ea4"}]}}, 0x0}, 0x0) syz_emit_ethernet(0xde, &(0x7f0000000880)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xa8, 0x2f, 0x0, @empty, @mcast2, {[@hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x4, 0x68}, @dstopts={0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}, @dstopts={0x2, 0x0, '\x00', [@pad1]}, @dstopts={0x5c, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x9b, 0x7, [0x7, 0x0]}}, @enc_lim={0x4, 0x1, 0xb}, @pad1]}, @dstopts={0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra]}], {0x2000, 0x88be, 0x8}}}}}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, 0x24, 0x100, 0x70bd2a, 0x25dfdbff, {0x14}, [@nested={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0xf5}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000040) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00', @ANYRES32], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c000000030101020000000000000000000000051c000f80080001400000007f08000240000000470800024000010000240019800800020040000000080002000400000008000200700000000600124000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x3ef27131a34fa02d) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 377.289528ms ago: executing program 3 (id=903): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x4}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40484c5) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c0005001901070000"], 0x398}}, 0x0) 308.31309ms ago: executing program 0 (id=904): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$nfc_llcp(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x2000e881) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) 290.752265ms ago: executing program 3 (id=905): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 184.955305ms ago: executing program 3 (id=906): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 179.489741ms ago: executing program 0 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) gettid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x1, 0x1, 0xe}]}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x34, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x28) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x9d77, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x70}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000240)=0x4dd9, 0x4) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) recvfrom$unix(r7, 0x0, 0x0, 0x12122, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) readahead(0xffffffffffffffff, 0x5ac, 0x0) read$msr(r4, 0x0, 0x0) 170.064865ms ago: executing program 3 (id=908): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffffffffffeff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)={0x60002003}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001480)) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000004000)) semget$private(0x0, 0x1, 0x201) 0s ago: executing program 1 (id=909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x46000200) kernel console output (not intermixed with test programs): d=6733 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 134.293058][ T5862] gspca_sn9c2028: read1 error -110 [ 134.308246][ T5862] gspca_sn9c2028: read1 error -32 [ 134.325108][ T5862] gspca_sn9c2028: read1 error -32 [ 134.336309][ T5862] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -32 [ 134.535909][ T6745] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.725586][ T30] audit: type=1400 audit(1746504601.307:471): avc: denied { write } for pid=6746 comm="syz.0.231" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.782970][ T24] usb 5-1: USB disconnect, device number 9 [ 134.821077][ T6750] binder: BINDER_SET_CONTEXT_MGR already set [ 134.833328][ T6750] binder: 6746:6750 ioctl 4018620d 200000000040 returned -16 [ 135.006957][ T30] audit: type=1400 audit(1746504601.357:472): avc: denied { map } for pid=6746 comm="syz.0.231" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 135.597597][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.662704][ T5862] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 135.753062][ T24] usb 5-1: config 0 has no interfaces? [ 135.760591][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.769699][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.777747][ T24] usb 5-1: Product: syz [ 135.781951][ T24] usb 5-1: Manufacturer: syz [ 135.786521][ T24] usb 5-1: SerialNumber: syz [ 135.792538][ T24] usb 5-1: config 0 descriptor?? [ 135.820140][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 135.828280][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.839428][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.849206][ T5862] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 135.858532][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.869288][ T5862] usb 4-1: config 0 descriptor?? [ 135.930180][ T5820] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.005333][ T5889] usb 5-1: USB disconnect, device number 10 [ 136.080095][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 136.086985][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.098001][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.107818][ T5820] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 136.116909][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.127115][ T5820] usb 1-1: config 0 descriptor?? [ 136.340114][ T5862] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 136.347807][ T5862] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 136.493825][ T5862] usb 4-1: USB disconnect, device number 13 [ 136.579130][ T6765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.591901][ T6765] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 136.611170][ T5820] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 136.619806][ T5820] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 136.675646][ T5820] usb 2-1: USB disconnect, device number 13 [ 136.677811][ T6766] netlink: 132 bytes leftover after parsing attributes in process `syz.4.238'. [ 136.764149][ T24] usb 1-1: USB disconnect, device number 9 [ 137.360033][ T6774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.240'. [ 138.160346][ T5820] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.478569][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 138.508172][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.518391][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.531801][ T5820] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 138.541141][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.555512][ T5820] usb 1-1: config 0 descriptor?? [ 138.575953][ T5820] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 139.935400][ T6800] binder: BINDER_SET_CONTEXT_MGR already set [ 139.943781][ T6800] binder: 6796:6800 ioctl 4018620d 200000000040 returned -16 [ 139.955873][ T6800] binder: 6796:6800 ioctl c0306201 200000000240 returned -11 [ 140.010300][ T5809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.131757][ T58] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.264644][ T5809] usb 3-1: config 0 has no interfaces? [ 140.271745][ T5809] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.280989][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.289019][ T5809] usb 3-1: Product: syz [ 140.293400][ T5809] usb 3-1: Manufacturer: syz [ 140.297983][ T5809] usb 3-1: SerialNumber: syz [ 140.304300][ T5809] usb 3-1: config 0 descriptor?? [ 140.312928][ T58] usb 5-1: config 0 has no interfaces? [ 140.848657][ T58] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.859248][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.867893][ T58] usb 5-1: Product: syz [ 140.880472][ T58] usb 5-1: Manufacturer: syz [ 140.891360][ T58] usb 5-1: SerialNumber: syz [ 140.905783][ T58] usb 5-1: config 0 descriptor?? [ 140.928101][ T30] audit: type=1400 audit(1746504607.507:473): avc: denied { write } for pid=6806 comm="syz.3.250" name="tcp" dev="proc" ino=4026533107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 140.958295][ T6807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.034195][ T5809] usb 1-1: USB disconnect, device number 10 [ 141.210632][ T58] usb 5-1: USB disconnect, device number 11 [ 141.235492][ T6795] vlan3: entered promiscuous mode [ 141.240646][ T6795] vlan2: entered promiscuous mode [ 141.245663][ T6795] syz_tun: entered promiscuous mode [ 141.730066][ T5862] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.880033][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 142.534089][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.545535][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.555671][ T5862] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 142.564705][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.573917][ T5862] usb 2-1: config 0 descriptor?? [ 142.988701][ T5809] usb 3-1: USB disconnect, device number 5 [ 143.456936][ T5862] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf4 found [ 143.464710][ T5862] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf3 found [ 143.545165][ T5862] usb 2-1: USB disconnect, device number 14 [ 144.310233][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 144.705381][ T24] usb 5-1: config 0 has no interfaces? [ 144.722156][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 144.745087][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.757554][ T24] usb 5-1: Product: syz [ 144.763140][ T24] usb 5-1: Manufacturer: syz [ 144.767793][ T24] usb 5-1: SerialNumber: syz [ 144.772449][ T30] audit: type=1400 audit(1746504611.357:474): avc: denied { ioctl } for pid=6859 comm="syz.3.268" path="socket:[10907]" dev="sockfs" ino=10907 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 144.802095][ T24] usb 5-1: config 0 descriptor?? [ 145.016476][ T24] usb 5-1: USB disconnect, device number 12 [ 146.419643][ T6883] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.567122][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.277'. [ 146.586014][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 146.615704][ T30] audit: type=1400 audit(1746504613.197:475): avc: denied { bind } for pid=6886 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.720327][ T6893] Illegal XDP return value 6893 on prog (id 77) dev N/A, expect packet loss! [ 147.201747][ T6909] delete_channel: no stack [ 147.240248][ T5889] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 147.413404][ T5889] usb 5-1: config 0 has no interfaces? [ 147.432856][ T5889] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.443538][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.460050][ T5809] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 147.467698][ T5889] usb 5-1: Product: syz [ 147.477011][ T5889] usb 5-1: Manufacturer: syz [ 147.483998][ T5889] usb 5-1: SerialNumber: syz [ 147.501811][ T5889] usb 5-1: config 0 descriptor?? [ 147.644571][ T5809] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.664221][ T6917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.968808][ T24] usb 5-1: USB disconnect, device number 13 [ 148.116752][ T5809] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 148.127125][ T5809] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 148.136451][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.160496][ T6909] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 148.201459][ T6921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.289'. [ 148.204203][ T5809] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.371708][ T30] audit: type=1400 audit(1746504614.907:476): avc: denied { create } for pid=6922 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.520223][ T30] audit: type=1400 audit(1746504614.907:477): avc: denied { connect } for pid=6922 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.543127][ T30] audit: type=1400 audit(1746504614.907:478): avc: denied { ioctl } for pid=6922 comm="syz.1.290" path="socket:[11119]" dev="sockfs" ino=11119 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.567689][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.588125][ T30] audit: type=1400 audit(1746504614.907:479): avc: denied { write } for pid=6922 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.344357][ T6935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.082030][ T6931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.172917][ T5820] usb 4-1: USB disconnect, device number 14 [ 150.310065][ T24] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 150.488002][ T6953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.511967][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 150.525728][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 150.539517][ T24] usb 5-1: config 2 has an invalid interface number: 212 but max is 1 [ 150.554811][ T24] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 150.563458][ T24] usb 5-1: config 2 has no interface number 0 [ 150.569548][ T24] usb 5-1: config 2 has no interface number 1 [ 150.578779][ T24] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 150.589819][ T24] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 150.600767][ T24] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 150.611916][ T24] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 150.623140][ T24] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 150.633017][ T24] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.646126][ T24] usb 5-1: config 2 interface 212 has no altsetting 0 [ 150.654770][ T24] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 150.674805][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.687656][ T24] usb 5-1: Product: syz [ 150.691921][ T24] usb 5-1: Manufacturer: syz [ 150.694643][ T6958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.301'. [ 150.696547][ T24] usb 5-1: SerialNumber: syz [ 150.780095][ T5889] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 151.312686][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 151.320319][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.333060][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.342223][ T24] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input6 [ 151.356370][ T5889] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 151.365742][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.384939][ T5889] usb 1-1: config 0 descriptor?? [ 151.391497][ T3561] wlan1: Trigger new scan to find an IBSS to join [ 151.428938][ T24] usb 5-1: USB disconnect, device number 14 [ 151.667646][ T30] audit: type=1400 audit(1746504618.247:480): avc: denied { create } for pid=6967 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.687548][ T30] audit: type=1400 audit(1746504618.247:481): avc: denied { connect } for pid=6967 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.730053][ T30] audit: type=1400 audit(1746504618.307:482): avc: denied { bind } for pid=6967 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.751984][ T30] audit: type=1400 audit(1746504618.337:483): avc: denied { listen } for pid=6967 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.781913][ T30] audit: type=1400 audit(1746504618.337:484): avc: denied { accept } for pid=6967 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.792696][ T5910] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 151.801892][ T30] audit: type=1400 audit(1746504618.367:485): avc: denied { write } for pid=6967 comm="syz.3.305" path="socket:[11185]" dev="sockfs" ino=11185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 151.832597][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.850957][ T30] audit: type=1400 audit(1746504618.367:486): avc: denied { write } for pid=6967 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 151.872473][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 151.879124][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 151.889143][ T5889] usb 1-1: USB disconnect, device number 11 [ 151.901210][ T30] audit: type=1400 audit(1746504618.477:487): avc: denied { read } for pid=6967 comm="syz.3.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 152.001842][ T5910] usb 2-1: config 0 has no interfaces? [ 152.030533][ T5910] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 152.039583][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.063230][ T5910] usb 2-1: Product: syz [ 152.067408][ T5910] usb 2-1: Manufacturer: syz [ 152.072436][ T5910] usb 2-1: SerialNumber: syz [ 152.093890][ T5910] usb 2-1: config 0 descriptor?? [ 152.324174][ T5910] usb 2-1: USB disconnect, device number 15 [ 152.430166][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 152.507874][ T6985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.620727][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 152.627360][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.639739][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.760053][ T24] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 152.769811][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.779770][ T24] usb 4-1: config 0 descriptor?? [ 152.825835][ T6990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.311'. [ 153.252041][ T6992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.350161][ T24] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 153.363048][ T24] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 153.503163][ T24] usb 4-1: USB disconnect, device number 15 [ 153.728813][ T5910] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 153.751978][ T5910] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.927031][ T7005] delete_channel: no stack [ 153.944532][ T30] audit: type=1400 audit(1746504620.527:488): avc: denied { ioctl } for pid=7003 comm="syz.1.317" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 153.969595][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.240172][ T5910] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 154.380815][ T7016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.391869][ T5889] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 154.473336][ T5910] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.959944][ T5910] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.972761][ T5910] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.000808][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.013980][ T7005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.021828][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 155.032907][ T5910] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.041143][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 155.057173][ T5889] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 155.079094][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 155.088667][ T5889] usb 4-1: Product: syz [ 155.097364][ T5889] usb 4-1: Manufacturer: syz [ 155.103755][ T5889] usb 4-1: SerialNumber: syz [ 155.132279][ T5889] usb 4-1: config 0 descriptor?? [ 155.141050][ T7010] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 155.210768][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 155.240047][ T58] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.410202][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 155.419522][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 155.435541][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.449608][ T24] usb 5-1: Product: syz [ 155.458645][ T24] usb 5-1: Manufacturer: syz [ 155.494570][ T58] usb 3-1: config 0 has no interfaces? [ 155.506160][ T58] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 155.516697][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.554153][ T24] usb 5-1: SerialNumber: syz [ 155.558912][ T58] usb 3-1: Product: syz [ 155.567521][ T58] usb 3-1: Manufacturer: syz [ 155.577185][ T24] usb 5-1: config 0 descriptor?? [ 155.583871][ T58] usb 3-1: SerialNumber: syz [ 155.599173][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 155.611770][ T58] usb 3-1: config 0 descriptor?? [ 155.841561][ T58] usb 3-1: USB disconnect, device number 6 [ 156.130180][ T24] gspca_sn9c2028: read1 error -110 [ 156.135578][ T24] gspca_sn9c2028: read1 error -32 [ 156.146596][ T24] gspca_sn9c2028: read1 error -32 [ 156.154543][ T5889] usb 4-1: USB disconnect, device number 16 [ 156.178091][ T24] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32 [ 156.531719][ T57] wlan1: Trigger new scan to find an IBSS to join [ 156.572653][ T7028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.882843][ T5910] usb 2-1: USB disconnect, device number 16 [ 156.894986][ T7034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.325'. [ 157.256715][ T7038] xt_CT: No such helper "pptp" [ 157.277381][ T24] usb 5-1: USB disconnect, device number 15 [ 157.374880][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 157.806249][ T7053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.468536][ T5915] wlan1: Creating new IBSS network, BSSID 8a:86:18:63:f8:ae [ 159.022006][ T58] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.100634][ T7071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 159.228774][ T58] usb 2-1: config 0 has no interfaces? [ 159.312971][ T58] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 159.492656][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.593405][ T58] usb 2-1: Product: syz [ 159.598026][ T58] usb 2-1: Manufacturer: syz [ 159.603090][ T58] usb 2-1: SerialNumber: syz [ 159.646869][ T58] usb 2-1: config 0 descriptor?? [ 160.215439][ T58] usb 2-1: USB disconnect, device number 17 [ 160.290565][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.433666][ T3561] wlan1: Trigger new scan to find an IBSS to join [ 160.450030][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 160.470173][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 160.480176][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.488158][ T24] usb 3-1: Product: syz [ 160.494904][ T24] usb 3-1: Manufacturer: syz [ 160.500195][ T24] usb 3-1: SerialNumber: syz [ 160.516024][ T24] usb 3-1: config 0 descriptor?? [ 160.525175][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 160.630082][ T5910] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 161.640326][ T24] gspca_sn9c2028: read1 error -110 [ 161.646228][ T24] gspca_sn9c2028: read1 error -32 [ 161.661568][ T24] gspca_sn9c2028: read1 error -32 [ 161.685645][ T24] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -32 [ 161.730052][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 161.737935][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 161.750344][ T5910] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 161.759382][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 161.972110][ T5910] usb 5-1: Product: syz [ 161.976340][ T5910] usb 5-1: Manufacturer: syz [ 161.981026][ T5910] usb 5-1: SerialNumber: syz [ 161.988421][ T5910] usb 5-1: config 0 descriptor?? [ 162.003416][ T7086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.024902][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 162.040606][ T5915] wlan1: Trigger new scan to find an IBSS to join [ 162.145583][ T3561] wlan1: Trigger new scan to find an IBSS to join [ 162.362896][ T3561] wlan1: Trigger new scan to find an IBSS to join [ 162.394503][ T7108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.343'. [ 162.879245][ T13] wlan1: Trigger new scan to find an IBSS to join [ 162.897663][ T58] usb 3-1: USB disconnect, device number 7 [ 162.961748][ T36] wlan1: Trigger new scan to find an IBSS to join [ 163.067889][ T36] wlan1: Trigger new scan to find an IBSS to join [ 163.132386][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.204288][ T36] wlan1: Trigger new scan to find an IBSS to join [ 163.314750][ T5910] usb 5-1: USB disconnect, device number 16 [ 163.317863][ T36] wlan1: Trigger new scan to find an IBSS to join [ 163.403970][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 163.697748][ T36] wlan1: Trigger new scan to find an IBSS to join [ 163.919708][ T36] wlan1: Trigger new scan to find an IBSS to join [ 163.982248][ T24] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 163.992109][ T63] wlan1: Trigger new scan to find an IBSS to join [ 164.024822][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.088270][ T63] wlan1: Trigger new scan to find an IBSS to join [ 164.102275][ T30] audit: type=1400 audit(1746504630.687:489): avc: denied { ioctl } for pid=7120 comm="syz.3.348" path="socket:[12571]" dev="sockfs" ino=12571 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 164.162177][ T24] usb 1-1: Product: syz [ 164.167261][ T24] usb 1-1: Manufacturer: syz [ 164.171974][ T24] usb 1-1: SerialNumber: syz [ 164.182023][ T24] usb 1-1: config 0 descriptor?? [ 164.189577][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 164.197184][ T5915] wlan1: Trigger new scan to find an IBSS to join [ 164.619871][ T3561] wlan1: Trigger new scan to find an IBSS to join [ 164.710837][ T24] gspca_sn9c2028: read1 error -110 [ 164.716431][ T24] gspca_sn9c2028: read1 error -32 [ 164.724741][ T24] gspca_sn9c2028: read1 error -32 [ 164.729921][ T24] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 164.956512][ T7131] netlink: 196 bytes leftover after parsing attributes in process `syz.1.351'. [ 165.270265][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 165.480290][ T3561] wlan1: Trigger new scan to find an IBSS to join [ 165.496927][ T5889] usb 4-1: config 0 has no interfaces? [ 165.506097][ T5889] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 165.948065][ T58] usb 1-1: USB disconnect, device number 12 [ 165.949189][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.962413][ T5889] usb 4-1: Product: syz [ 165.966582][ T5889] usb 4-1: Manufacturer: syz [ 165.971318][ T5889] usb 4-1: SerialNumber: syz [ 165.981039][ T5889] usb 4-1: config 0 descriptor?? [ 166.214222][ T5910] usb 4-1: USB disconnect, device number 17 [ 166.546294][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.363'. [ 166.555488][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 167.324658][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 167.356459][ T36] wlan1: Creating new IBSS network, BSSID 22:2e:b7:50:e3:76 [ 167.365721][ T13] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 169.612273][ T5889] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.709002][ T7215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.873544][ T5889] usb 3-1: config 0 has no interfaces? [ 169.882727][ T5889] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 169.897866][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.911633][ T5889] usb 3-1: Product: syz [ 169.918004][ T5889] usb 3-1: Manufacturer: syz [ 169.926807][ T5889] usb 3-1: SerialNumber: syz [ 169.934473][ T5889] usb 3-1: config 0 descriptor?? [ 170.145453][ T24] usb 3-1: USB disconnect, device number 8 [ 170.570046][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 170.741797][ T24] usb 2-1: config 0 has no interfaces? [ 170.772297][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 170.783424][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.795925][ T24] usb 2-1: config 0 descriptor?? [ 171.025714][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.090294][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.134269][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.168288][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.190051][ T24] usb 2-1: USB disconnect, device number 18 [ 172.545132][ T30] audit: type=1326 audit(1746504639.127:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 172.577884][ T30] audit: type=1326 audit(1746504639.157:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 172.609882][ T30] audit: type=1326 audit(1746504639.157:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 172.800156][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.030162][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 173.039093][ T30] audit: type=1326 audit(1746504639.157:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 173.079829][ T7263] smc: net device bond0 applied user defined pnetid SYZ2 [ 173.141405][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.261853][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.274330][ T7265] smc: net device bond0 erased user defined pnetid SYZ2 [ 173.378148][ T30] audit: type=1326 audit(1746504639.157:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 173.405619][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.445901][ T30] audit: type=1326 audit(1746504639.157:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 173.469205][ T30] audit: type=1326 audit(1746504639.157:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 173.492395][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.498571][ T30] audit: type=1326 audit(1746504639.157:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 173.500848][ T7257] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 173.522693][ T30] audit: type=1326 audit(1746504639.247:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 173.555274][ T30] audit: type=1326 audit(1746504639.247:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.0.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1398d8e969 code=0x7ffc0000 [ 173.557640][ T24] usb 2-1: Product: syz [ 173.578452][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.669879][ T24] usb 2-1: Manufacturer: syz [ 173.704387][ T24] usb 2-1: SerialNumber: syz [ 173.750602][ T24] usb 2-1: can't set config #1, error -71 [ 173.793149][ T24] usb 2-1: USB disconnect, device number 19 [ 174.273436][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 174.812861][ T5861] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 174.842087][ T24] usb 2-1: config 0 has no interfaces? [ 174.849362][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.858865][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.290181][ T24] usb 2-1: Product: syz [ 175.295324][ T24] usb 2-1: Manufacturer: syz [ 175.550866][ T24] usb 2-1: SerialNumber: syz [ 175.572429][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 175.583919][ T5861] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 175.593141][ T24] usb 2-1: config 0 descriptor?? [ 175.598178][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.606590][ T5861] usb 4-1: Product: syz [ 175.611600][ T5861] usb 4-1: Manufacturer: syz [ 175.616260][ T5861] usb 4-1: SerialNumber: syz [ 175.630707][ T5861] usb 4-1: config 0 descriptor?? [ 175.646310][ T5861] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 175.839897][ T912] usb 2-1: USB disconnect, device number 20 [ 176.160393][ T5861] gspca_sn9c2028: read1 error -110 [ 176.166868][ T5861] gspca_sn9c2028: read1 error -32 [ 176.173830][ T5861] gspca_sn9c2028: read1 error -32 [ 176.178884][ T5861] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 176.200155][ T5910] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.371801][ T5910] usb 3-1: config 0 has no interfaces? [ 176.386548][ T5910] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 176.402129][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.413281][ T5910] usb 3-1: config 0 descriptor?? [ 176.651666][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.669578][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.697487][ T7306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.708094][ T7306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.717141][ T5910] usb 3-1: USB disconnect, device number 9 [ 176.925908][ T5860] usb 4-1: USB disconnect, device number 18 [ 177.260035][ T5910] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.880132][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 177.889185][ T5910] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.903333][ T5910] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.915019][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.925729][ T5910] usb 3-1: Product: syz [ 177.929919][ T5910] usb 3-1: Manufacturer: syz [ 177.935830][ T5910] usb 3-1: SerialNumber: syz [ 177.950008][ T5910] usb 3-1: selecting invalid altsetting 1 [ 178.181773][ T7338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 178.190889][ T7338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.411'. [ 178.276041][ T5910] cdc_ncm 3-1:1.0: bind() failure [ 178.291257][ T5910] usb 3-1: USB disconnect, device number 10 [ 178.400068][ T5809] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 178.564792][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 178.564807][ T30] audit: type=1326 audit(1746504645.147:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 178.596711][ T5809] usb 1-1: Using ep0 maxpacket: 32 [ 178.630173][ T5809] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 178.659712][ T5809] usb 1-1: config 0 has no interface number 0 [ 178.686637][ T7344] smc: net device bond0 applied user defined pnetid SYZ2 [ 178.690028][ T5809] usb 1-1: config 0 interface 89 has no altsetting 0 [ 178.695882][ T7344] smc: net device bond0 erased user defined pnetid SYZ2 [ 178.709399][ T30] audit: type=1326 audit(1746504645.147:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 178.751246][ T5809] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 178.753311][ T7344] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 178.760317][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.760338][ T5809] usb 1-1: Product: syz [ 178.760351][ T5809] usb 1-1: Manufacturer: syz [ 178.760363][ T5809] usb 1-1: SerialNumber: syz [ 178.762321][ T5809] usb 1-1: config 0 descriptor?? [ 178.798015][ T30] audit: type=1326 audit(1746504645.147:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 178.854459][ T30] audit: type=1326 audit(1746504645.147:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 178.880954][ T30] audit: type=1326 audit(1746504645.147:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 178.904985][ T912] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 178.937721][ T30] audit: type=1326 audit(1746504645.147:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 178.978769][ T30] audit: type=1326 audit(1746504645.207:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 179.003524][ T30] audit: type=1326 audit(1746504645.217:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 179.043641][ T30] audit: type=1326 audit(1746504645.217:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 179.067919][ T30] audit: type=1326 audit(1746504645.217:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ae9d8e969 code=0x7ffc0000 [ 179.095787][ T7353] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 179.114800][ T7353] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 179.136818][ T7353] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 179.149124][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.186445][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.190696][ T912] usb 4-1: config 0 has no interfaces? [ 179.207553][ T912] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 179.227422][ T7337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.414'. [ 179.237071][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.376662][ T912] usb 4-1: Product: syz [ 179.389361][ T912] usb 4-1: Manufacturer: syz [ 179.412962][ T912] usb 4-1: SerialNumber: syz [ 179.540090][ T24] usb 1-1: USB disconnect, device number 13 [ 179.570890][ T912] usb 4-1: config 0 descriptor?? [ 179.863133][ T24] usb 4-1: USB disconnect, device number 19 [ 180.351139][ T7378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.426'. [ 180.729938][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 180.739599][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 180.747369][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 180.750192][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 181.707866][ T7393] smc: net device bond0 applied user defined pnetid SYZ2 [ 181.716217][ T7393] smc: net device bond0 erased user defined pnetid SYZ2 [ 181.728598][ T7393] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 181.940064][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 182.313086][ T7404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.440203][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 182.588161][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 182.597790][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.606165][ T24] usb 4-1: Product: syz [ 182.610528][ T24] usb 4-1: Manufacturer: syz [ 182.615117][ T24] usb 4-1: SerialNumber: syz [ 182.621178][ T24] usb 4-1: config 0 descriptor?? [ 182.690262][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 183.360287][ T24] gspca_sn9c2028: read1 error -110 [ 183.375449][ T24] gspca_sn9c2028: read1 error -32 [ 183.392622][ T24] gspca_sn9c2028: read1 error -32 [ 183.409740][ T24] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 183.492745][ T7417] fuse: Unknown parameter '00000000000000000000004' [ 183.610257][ T5820] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 183.761211][ T5820] usb 1-1: config 0 has no interfaces? [ 183.768582][ T5820] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 183.778303][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.786727][ T5820] usb 1-1: Product: syz [ 183.790944][ T5820] usb 1-1: Manufacturer: syz [ 183.795535][ T5820] usb 1-1: SerialNumber: syz [ 183.802405][ T5820] usb 1-1: config 0 descriptor?? [ 183.840129][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 184.011270][ T24] usb 3-1: config 0 has no interfaces? [ 184.019131][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.031269][ T7413] 8021q: VLANs not supported on ip6tnl0 [ 184.039408][ T5860] usb 1-1: USB disconnect, device number 14 [ 184.040980][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.059185][ T24] usb 3-1: Product: syz [ 184.064531][ T24] usb 3-1: Manufacturer: syz [ 184.069128][ T24] usb 3-1: SerialNumber: syz [ 184.076187][ T24] usb 3-1: config 0 descriptor?? [ 184.121761][ T24] usb 4-1: USB disconnect, device number 20 [ 184.273189][ T7423] xt_CT: No such helper "pptp" [ 184.307613][ T24] usb 3-1: USB disconnect, device number 11 [ 184.740243][ T7432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.973095][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 184.973110][ T30] audit: type=1400 audit(1746504651.557:632): avc: denied { bind } for pid=7441 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.043297][ T30] audit: type=1400 audit(1746504651.557:633): avc: denied { setopt } for pid=7441 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 185.131272][ T7447] delete_channel: no stack [ 185.940129][ T5809] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 185.966057][ T7453] fuse: Unknown parameter '00000000000000000000004' [ 186.896609][ T5809] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.907649][ T5809] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.917613][ T5809] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.927128][ T30] audit: type=1326 audit(1746504653.497:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6f8e969 code=0x7ffc0000 [ 186.952436][ T5809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.962865][ T30] audit: type=1326 audit(1746504653.497:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6f8e969 code=0x7ffc0000 [ 186.986498][ T7447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 186.993743][ T30] audit: type=1326 audit(1746504653.497:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7a6f8e969 code=0x7ffc0000 [ 187.020591][ T5809] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.028533][ T30] audit: type=1326 audit(1746504653.497:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6f8e969 code=0x7ffc0000 [ 187.062305][ T30] audit: type=1326 audit(1746504653.497:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7a6f8e969 code=0x7ffc0000 [ 187.119463][ T7463] smc: net device bond0 applied user defined pnetid SYZ2 [ 187.150976][ T7463] smc: net device bond0 erased user defined pnetid SYZ2 [ 187.158042][ T30] audit: type=1326 audit(1746504653.537:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6f8e969 code=0x7ffc0000 [ 187.267239][ T30] audit: type=1326 audit(1746504653.587:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fb7a6f8e969 code=0x7ffc0000 [ 187.410168][ T5861] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 187.468424][ T30] audit: type=1326 audit(1746504653.587:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7462 comm="syz.3.454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7a6f8e969 code=0x7ffc0000 [ 187.585022][ T7480] netlink: 5040 bytes leftover after parsing attributes in process `syz.2.457'. [ 187.595108][ T7480] netlink: 5040 bytes leftover after parsing attributes in process `syz.2.457'. [ 187.656543][ T5861] usb 2-1: config 0 has no interfaces? [ 187.666138][ T5861] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 187.679300][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.689310][ T5861] usb 2-1: Product: syz [ 187.701237][ T5861] usb 2-1: Manufacturer: syz [ 187.705911][ T5861] usb 2-1: SerialNumber: syz [ 187.731940][ T5861] usb 2-1: config 0 descriptor?? [ 187.974684][ T5910] usb 2-1: USB disconnect, device number 21 [ 188.062454][ T7486] Bluetooth: MGMT ver 1.23 [ 188.295353][ T5910] usb 1-1: USB disconnect, device number 15 [ 188.562104][ T5915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 190.328751][ T7510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.466'. [ 190.623967][ T7514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.747634][ T7522] netlink: 80 bytes leftover after parsing attributes in process `syz.0.470'. [ 191.040137][ T912] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 191.189109][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.474'. [ 191.205717][ T5860] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 191.474081][ T5860] usb 5-1: config 0 has no interfaces? [ 191.531337][ T5860] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 192.132304][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.174787][ T5860] usb 5-1: Product: syz [ 192.181362][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.192891][ T5860] usb 5-1: Manufacturer: syz [ 192.214106][ T5860] usb 5-1: SerialNumber: syz [ 192.243461][ T5860] usb 5-1: config 0 descriptor?? [ 192.336099][ T912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.346860][ T912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.363080][ T912] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.372151][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.384519][ T912] usb 1-1: config 0 descriptor?? [ 192.872258][ T12] wlan1: Trigger new scan to find an IBSS to join [ 192.886739][ T5861] usb 5-1: USB disconnect, device number 17 [ 193.269585][ T912] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 193.302935][ T912] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 193.578123][ T7556] netlink: 5040 bytes leftover after parsing attributes in process `syz.2.479'. [ 193.592196][ T7556] netlink: 5040 bytes leftover after parsing attributes in process `syz.2.479'. [ 194.068338][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.075534][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.128843][ T7560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.140453][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.148378][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.215478][ T7564] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 194.247936][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 194.247950][ T30] audit: type=1400 audit(1746504660.767:687): avc: denied { mount } for pid=7561 comm="syz.1.482" name="/" dev="ramfs" ino=15402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 194.348289][ T7559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.380370][ T7553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.478'. [ 194.443054][ T7568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.460511][ T5820] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 194.474898][ T30] audit: type=1400 audit(1746504661.047:688): avc: denied { search } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.660063][ T5820] usb 1-1: device descriptor read/64, error -32 [ 194.780378][ T7559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.945051][ T5820] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 195.099102][ T5820] usb 1-1: device descriptor read/64, error -32 [ 195.121866][ T7559] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.131859][ T7559] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.142678][ T7559] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.176662][ T7559] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.384038][ T5820] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 195.425826][ T5820] usb 1-1: device descriptor read/8, error -32 [ 195.532234][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 195.663677][ T7522] raw-gadget.0 gadget.0: failed to queue suspend event [ 195.670683][ T5820] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 195.678743][ T7522] raw-gadget.0 gadget.0: failed to queue disconnect event [ 195.890014][ T5820] usb 1-1: device not accepting address 16, error -71 [ 195.898991][ T912] usb 1-1: USB disconnect, device number 16 [ 196.083943][ T7586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.488'. [ 196.111256][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 196.294229][ T7595] loop8: detected capacity change from 0 to 1 [ 196.303831][ T7595] Dev loop8: unable to read RDB block 1 [ 196.309529][ T7595] loop8: unable to read partition table [ 196.316027][ T7595] loop8: partition table beyond EOD, truncated [ 196.322340][ T7595] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 196.357388][ T7596] futex_wake_op: syz.3.487 tries to shift op by -33; fix this program [ 196.382961][ T7596] netdevsim netdevsim3: Direct firmware load for . [ 196.382961][ T7596] failed with error -2 [ 196.393874][ T7596] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 196.393874][ T7596] [ 196.448701][ T36] wlan1: Trigger new scan to find an IBSS to join [ 196.848627][ T5889] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 197.051416][ T5889] usb 3-1: config 0 has no interfaces? [ 197.060068][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 197.079635][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.100496][ T5889] usb 3-1: config 0 descriptor?? [ 197.190189][ T5820] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 197.225210][ T7606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.315430][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.327812][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.342163][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.352074][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 197.360189][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.375567][ T912] usb 3-1: USB disconnect, device number 12 [ 197.480095][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 197.500889][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.537061][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.557307][ T5820] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 197.577581][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.581360][ T7614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.622124][ T5820] usb 1-1: config 0 descriptor?? [ 197.650196][ T5861] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 197.668691][ T7614] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 197.742806][ T5915] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 197.784457][ T7614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.495'. [ 197.833914][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 197.847598][ T5861] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 197.858196][ T912] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 197.955552][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.964744][ T5861] usb 4-1: Product: syz [ 197.968933][ T5861] usb 4-1: Manufacturer: syz [ 197.973661][ T5861] usb 4-1: SerialNumber: syz [ 197.981422][ T5861] usb 4-1: config 0 descriptor?? [ 198.003704][ T5861] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 198.180311][ T912] usb 3-1: Using ep0 maxpacket: 16 [ 198.188448][ T5820] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf4 found [ 198.448976][ T5820] hid-picolcd 0003:04D8:F002.000C: No report with id 0xf3 found [ 198.449051][ T912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.471887][ T5820] usb 1-1: USB disconnect, device number 17 [ 198.497517][ T912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.509626][ T912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.520253][ T5861] gspca_sn9c2028: read1 error -110 [ 198.525454][ T912] usb 3-1: Product: syz [ 198.529666][ T5861] gspca_sn9c2028: read1 error -32 [ 198.537021][ T912] usb 3-1: Manufacturer: syz [ 198.541892][ T5861] gspca_sn9c2028: read1 error -32 [ 198.547394][ T912] usb 3-1: SerialNumber: syz [ 198.553087][ T5861] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 198.567632][ T912] usb 3-1: selecting invalid altsetting 1 [ 198.769052][ T912] cdc_ncm 3-1:1.0: bind() failure [ 198.773889][ T7626] netlink: 80 bytes leftover after parsing attributes in process `syz.1.498'. [ 198.794574][ T912] usb 3-1: USB disconnect, device number 13 [ 199.085383][ T7632] netlink: 5040 bytes leftover after parsing attributes in process `syz.4.500'. [ 199.095795][ T7632] netlink: 5040 bytes leftover after parsing attributes in process `syz.4.500'. [ 199.157156][ T5860] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 199.342338][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.359998][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.379871][ T5860] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.406128][ T5860] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.417017][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.428119][ T5860] usb 2-1: config 0 descriptor?? [ 199.546128][ T912] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 199.960172][ T912] usb 1-1: Using ep0 maxpacket: 32 [ 200.205445][ T5910] usb 4-1: USB disconnect, device number 21 [ 200.385114][ T912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 200.447989][ T912] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 200.457766][ T7642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.460956][ T912] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 200.521319][ T912] usb 1-1: Product: syz [ 200.568231][ T912] usb 1-1: Manufacturer: syz [ 200.578788][ T912] usb 1-1: SerialNumber: syz [ 200.591461][ T912] usb 1-1: config 0 descriptor?? [ 200.607166][ T7636] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 200.721413][ T5860] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 200.741370][ T5861] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 200.766618][ T5860] plantronics 0003:047F:FFFF.000D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 200.900717][ T5861] usb 3-1: no configurations [ 200.905588][ T5861] usb 3-1: can't read configurations, error -22 [ 201.038646][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.040169][ T5861] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 201.046805][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.231658][ T5861] usb 3-1: no configurations [ 201.239728][ T5861] usb 3-1: can't read configurations, error -22 [ 201.264257][ T5861] usb usb3-port1: attempt power cycle [ 201.272492][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.319482][ T7626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.503566][ T7626] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.514499][ T7626] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.525921][ T7626] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.537465][ T7626] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.710067][ T5861] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 201.782295][ T5861] usb 3-1: no configurations [ 201.789459][ T5861] usb 3-1: can't read configurations, error -22 [ 201.807846][ T5890] usb 1-1: USB disconnect, device number 18 [ 201.852624][ T30] audit: type=1400 audit(1746504668.437:689): avc: denied { sys_module } for pid=7666 comm="syz.3.508" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 201.940936][ T5861] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 201.965758][ T7672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 201.974829][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 201.984513][ T5861] usb 3-1: no configurations [ 201.996087][ T5861] usb 3-1: can't read configurations, error -22 [ 202.006340][ T5861] usb usb3-port1: unable to enumerate USB device [ 202.068703][ T7676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 202.480033][ T5861] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.650156][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 202.663431][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.678959][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.688993][ T5861] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 202.699159][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.711354][ T5861] usb 5-1: config 0 descriptor?? [ 202.733200][ T30] audit: type=1400 audit(1746504669.317:690): avc: denied { accept } for pid=7681 comm="syz.0.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.790447][ T7683] netlink: 136 bytes leftover after parsing attributes in process `syz.0.513'. [ 202.799840][ T7683] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 202.823222][ T7683] pimreg3: entered allmulticast mode [ 202.858066][ T5860] usb 2-1: USB disconnect, device number 22 [ 203.052616][ T7690] delete_channel: no stack [ 203.180256][ T5861] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf4 found [ 203.191214][ T5861] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf3 found [ 203.300031][ T5860] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 203.350626][ T5861] usb 5-1: USB disconnect, device number 18 [ 203.543071][ T5860] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.595690][ T5860] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 203.636142][ T5860] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.669617][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.711574][ T7690] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 203.841256][ T5860] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.333790][ T5890] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 204.520623][ T5890] usb 1-1: no configurations [ 204.525366][ T5890] usb 1-1: can't read configurations, error -22 [ 204.613702][ T7707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'. [ 204.623524][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.521'. [ 204.710112][ T5890] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 204.930639][ T5890] usb 1-1: no configurations [ 204.935822][ T5890] usb 1-1: can't read configurations, error -22 [ 204.951977][ T5890] usb usb1-port1: attempt power cycle [ 205.160103][ T5820] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 205.503521][ T5820] usb 4-1: no configurations [ 205.508395][ T5820] usb 4-1: can't read configurations, error -22 [ 205.630308][ T5890] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 205.671020][ T5820] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 205.681035][ T5890] usb 1-1: no configurations [ 205.685651][ T5890] usb 1-1: can't read configurations, error -22 [ 205.823205][ T5890] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 205.831595][ T5820] usb 4-1: no configurations [ 205.836314][ T5820] usb 4-1: can't read configurations, error -22 [ 205.843576][ T5820] usb usb4-port1: attempt power cycle [ 205.860903][ T5890] usb 1-1: no configurations [ 205.865596][ T5890] usb 1-1: can't read configurations, error -22 [ 205.873277][ T5890] usb usb1-port1: unable to enumerate USB device [ 205.968648][ T7651] usb 2-1: USB disconnect, device number 23 [ 206.190069][ T5820] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 206.214333][ T5820] usb 4-1: no configurations [ 206.219086][ T5820] usb 4-1: can't read configurations, error -22 [ 206.350219][ T5820] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 206.371109][ T5820] usb 4-1: no configurations [ 206.375799][ T5820] usb 4-1: can't read configurations, error -22 [ 206.383997][ T5820] usb usb4-port1: unable to enumerate USB device [ 206.394647][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 206.441963][ T7737] delete_channel: no stack [ 207.233627][ T7651] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 207.433299][ T7751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.738106][ T7651] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.749655][ T7651] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.759866][ T7651] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.768969][ T7651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.779630][ T7740] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 207.790181][ T7651] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.875878][ T7755] loop8: detected capacity change from 0 to 1 [ 207.904458][ T5825] Dev loop8: unable to read RDB block 1 [ 207.914953][ T5825] loop8: unable to read partition table [ 207.931611][ T5825] loop8: partition table beyond EOD, truncated [ 207.968316][ T7758] futex_wake_op: syz.0.535 tries to shift op by -33; fix this program [ 207.983506][ T7755] Dev loop8: unable to read RDB block 1 [ 208.004538][ T7755] loop8: unable to read partition table [ 208.024070][ T7758] netdevsim netdevsim0: Direct firmware load for . [ 208.024070][ T7758] failed with error -2 [ 208.035210][ T7755] loop8: partition table beyond EOD, truncated [ 208.125177][ T7755] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 208.250172][ T7651] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 208.430333][ T7651] usb 3-1: Using ep0 maxpacket: 16 [ 208.721086][ T7651] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.735245][ T9] usb 5-1: USB disconnect, device number 19 [ 208.748455][ T7651] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.763657][ T7651] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 208.770211][ T7758] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 208.770211][ T7758] [ 208.778518][ T7651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.829712][ T7651] usb 3-1: config 0 descriptor?? [ 209.451807][ T7651] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 209.459817][ T7651] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 210.146085][ T5890] usb 3-1: USB disconnect, device number 18 [ 210.333068][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 210.870619][ T9] usb 5-1: no configurations [ 210.875731][ T9] usb 5-1: can't read configurations, error -22 [ 211.010104][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 211.256995][ T9] usb 5-1: no configurations [ 211.262781][ T9] usb 5-1: can't read configurations, error -22 [ 211.269580][ T9] usb usb5-port1: attempt power cycle [ 211.271488][ T5890] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 211.391073][ T7651] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 211.464818][ T7806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.570054][ T7651] usb 2-1: Using ep0 maxpacket: 32 [ 211.599835][ T7651] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 211.622139][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 211.645819][ T7651] usb 2-1: config 0 has no interface number 0 [ 211.659723][ T7651] usb 2-1: config 0 interface 89 has no altsetting 0 [ 211.672947][ T9] usb 5-1: no configurations [ 211.692846][ T9] usb 5-1: can't read configurations, error -22 [ 211.701043][ T7651] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 211.713892][ T7651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.723503][ T7651] usb 2-1: Product: syz [ 211.727657][ T7651] usb 2-1: Manufacturer: syz [ 211.733438][ T7651] usb 2-1: SerialNumber: syz [ 211.741631][ T7651] usb 2-1: config 0 descriptor?? [ 211.774998][ T5890] usb 1-1: config 0 has no interfaces? [ 211.786102][ T5890] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 211.797420][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.808037][ T5890] usb 1-1: Product: syz [ 211.811827][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 211.812284][ T5890] usb 1-1: Manufacturer: syz [ 211.826315][ T5890] usb 1-1: SerialNumber: syz [ 211.833429][ T5890] usb 1-1: config 0 descriptor?? [ 211.840135][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 211.872363][ T9] usb 5-1: no configurations [ 211.876978][ T9] usb 5-1: can't read configurations, error -22 [ 211.885566][ T9] usb usb5-port1: unable to enumerate USB device [ 211.959270][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.969644][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.019581][ T7800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.548'. [ 212.532406][ T5861] usb 2-1: USB disconnect, device number 24 [ 212.565307][ T7798] vlan3: entered promiscuous mode [ 212.570412][ T7798] vlan2: entered promiscuous mode [ 212.578770][ T7798] syz_tun: entered promiscuous mode [ 215.195220][ T9] usb 1-1: USB disconnect, device number 23 [ 215.980329][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 216.154074][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.563'. [ 216.163102][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.563'. [ 216.177285][ T7857] futex_wake_op: syz.0.561 tries to shift op by -33; fix this program [ 217.132022][ T5860] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 217.139928][ T30] audit: type=1400 audit(1746504683.677:691): avc: denied { append } for pid=7874 comm="syz.1.570" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 217.179346][ T30] audit: type=1400 audit(1746504683.687:692): avc: denied { ioctl } for pid=7874 comm="syz.1.570" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 217.212843][ T7880] netlink: 'syz.1.570': attribute type 20 has an invalid length. [ 217.370287][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 217.397545][ T5860] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 217.427656][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.457444][ T5860] usb 4-1: Product: syz [ 217.477201][ T5860] usb 4-1: Manufacturer: syz [ 217.482235][ T5860] usb 4-1: SerialNumber: syz [ 217.501843][ T5860] usb 4-1: config 0 descriptor?? [ 217.511541][ T5860] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 218.369206][ T5860] gspca_sn9c2028: read1 error -110 [ 218.375354][ T5860] gspca_sn9c2028: read1 error -32 [ 218.381173][ T5860] gspca_sn9c2028: read1 error -32 [ 218.401847][ T5860] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 219.852615][ T5915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.992798][ T9] usb 4-1: USB disconnect, device number 26 [ 220.271199][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.578'. [ 220.280141][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.578'. [ 220.298067][ T7906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.577'. [ 220.956167][ T30] audit: type=1400 audit(1746504687.537:693): avc: denied { create } for pid=7911 comm="syz.4.579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 221.049132][ T30] audit: type=1400 audit(1746504687.537:694): avc: denied { ioctl } for pid=7911 comm="syz.4.579" path="socket:[16179]" dev="sockfs" ino=16179 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 222.084867][ T30] audit: type=1400 audit(1746504688.657:695): avc: denied { create } for pid=7922 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 222.251948][ T7934] futex_wake_op: syz.4.583 tries to shift op by -33; fix this program [ 223.593206][ T7947] fuse: Unknown parameter '00000000000000000000' [ 224.010146][ T5860] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 224.160328][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 224.166846][ T5860] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 224.180408][ T5860] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 224.189601][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 224.199870][ T5860] usb 5-1: Product: syz [ 224.211777][ T5860] usb 5-1: Manufacturer: syz [ 224.221954][ T5860] usb 5-1: SerialNumber: syz [ 224.237287][ T5860] usb 5-1: config 0 descriptor?? [ 224.262544][ T7950] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.393496][ T7955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.983923][ T7960] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 225.181394][ T7955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.590'. [ 225.388588][ T7971] netlink: 'syz.0.591': attribute type 20 has an invalid length. [ 225.564529][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.593'. [ 225.573562][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 226.684985][ T5861] usb 5-1: USB disconnect, device number 24 [ 227.938134][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 227.947092][ T8003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 228.080037][ T5860] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 228.591802][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 228.598231][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.610400][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 228.631912][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.645015][ T5860] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 228.654535][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.701077][ T5860] usb 3-1: config 0 descriptor?? [ 229.311276][ T5860] usbhid 3-1:0.0: can't add hid device: -71 [ 229.318026][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 229.331911][ T5860] usb 3-1: USB disconnect, device number 19 [ 229.644556][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.607'. [ 229.670014][ T7651] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 229.820162][ T7651] usb 4-1: Using ep0 maxpacket: 32 [ 230.163545][ T7651] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 230.197967][ T8026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 230.208443][ T8026] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 230.226318][ T7651] usb 4-1: config 0 has no interface number 0 [ 230.252396][ T7651] usb 4-1: config 0 interface 89 has no altsetting 0 [ 230.261089][ T7651] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 230.372716][ T7651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.382166][ T7651] usb 4-1: Product: syz [ 230.386392][ T7651] usb 4-1: Manufacturer: syz [ 230.403002][ T7651] usb 4-1: SerialNumber: syz [ 230.414918][ T7651] usb 4-1: config 0 descriptor?? [ 230.963061][ T8026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.608'. [ 230.985063][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 230.997524][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 231.017193][ T8033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.610'. [ 231.193312][ T8017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.205265][ T8017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.250544][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.605'. [ 231.312633][ T7651] usb 4-1: USB disconnect, device number 27 [ 234.897748][ T8087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.028321][ T8092] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 235.122961][ T8106] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.234238][ T8087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.623'. [ 235.280124][ T5861] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 235.490108][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 235.505429][ T5861] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.611603][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.627435][ T5861] usb 5-1: Product: syz [ 235.641257][ T5861] usb 5-1: Manufacturer: syz [ 235.646983][ T5861] usb 5-1: SerialNumber: syz [ 235.655528][ T5861] usb 5-1: config 0 descriptor?? [ 235.915381][ T5861] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 237.095562][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 237.900030][ T5890] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 239.040000][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 240.014607][ T5861] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 240.035184][ T5890] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 240.151334][ T5861] usb 5-1: USB disconnect, device number 25 [ 240.171533][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.179542][ T5890] usb 3-1: Product: syz [ 240.779408][ T5890] usb 3-1: Manufacturer: syz [ 240.790063][ T5890] usb 3-1: SerialNumber: syz [ 240.810808][ T5890] usb 3-1: config 0 descriptor?? [ 240.816203][ T5890] usb 3-1: can't set config #0, error -71 [ 240.984211][ T5890] usb 3-1: USB disconnect, device number 20 [ 241.517594][ T8154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.644'. [ 241.983057][ T8156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.410119][ T7651] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 242.570002][ T7651] usb 2-1: Using ep0 maxpacket: 16 [ 242.592398][ T7651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.606298][ T7651] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.641093][ T7651] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 242.673283][ T7651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.721573][ T7651] usb 2-1: config 0 descriptor?? [ 243.321602][ T5890] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 243.552738][ T7651] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf4 found [ 243.563693][ T7651] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf3 found [ 243.597456][ T7651] usb 2-1: USB disconnect, device number 25 [ 243.710057][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 243.729428][ T5890] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 243.759283][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.789832][ T5890] usb 5-1: Product: syz [ 243.841611][ T5890] usb 5-1: Manufacturer: syz [ 243.846293][ T5890] usb 5-1: SerialNumber: syz [ 243.855823][ T5890] usb 5-1: config 0 descriptor?? [ 243.954854][ T5890] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 244.510268][ T5890] gspca_sn9c2028: read1 error -110 [ 244.517543][ T5890] gspca_sn9c2028: read1 error -32 [ 244.523484][ T5890] gspca_sn9c2028: read1 error -32 [ 244.528637][ T5890] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32 [ 245.044950][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'. [ 245.445390][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 246.311695][ T912] usb 5-1: USB disconnect, device number 26 [ 246.440036][ T5890] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 246.658689][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.662'. [ 246.751132][ T5890] usb 2-1: config 0 has no interfaces? [ 246.923686][ T5890] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.934188][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.952863][ T5890] usb 2-1: Product: syz [ 246.964539][ T5890] usb 2-1: Manufacturer: syz [ 246.979769][ T5890] usb 2-1: SerialNumber: syz [ 247.109872][ T5890] usb 2-1: config 0 descriptor?? [ 247.717712][ T8194] vlan3: entered promiscuous mode [ 247.722929][ T8194] vlan2: entered promiscuous mode [ 247.728334][ T8194] syz_tun: entered promiscuous mode [ 247.791616][ T5861] usb 2-1: USB disconnect, device number 26 [ 247.831694][ T5890] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 247.991747][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.003072][ T5890] usb 3-1: not running at top speed; connect to a high speed hub [ 248.030272][ T5890] usb 3-1: config 2 has an invalid interface number: 212 but max is 1 [ 248.035696][ T8236] netlink: 196 bytes leftover after parsing attributes in process `syz.0.671'. [ 248.056623][ T5890] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 248.081144][ T5890] usb 3-1: config 2 has no interface number 0 [ 248.225873][ T5890] usb 3-1: config 2 has no interface number 1 [ 248.242822][ T5890] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 248.263873][ T5890] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 248.290787][ T5890] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 248.302167][ T5890] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 248.313539][ T5890] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 248.323495][ T5890] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.364968][ T5890] usb 3-1: config 2 interface 212 has no altsetting 0 [ 248.375090][ T5890] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 248.384372][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.392404][ T5890] usb 3-1: Product: syz [ 248.396602][ T5890] usb 3-1: Manufacturer: syz [ 248.401406][ T5890] usb 3-1: SerialNumber: syz [ 248.452528][ T8250] delete_channel: no stack [ 248.493508][ T8249] netlink: 'syz.4.674': attribute type 20 has an invalid length. [ 248.637543][ T5890] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input11 [ 248.657310][ C1] xpad 3-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1 [ 248.701983][ T5890] usb 3-1: USB disconnect, device number 21 [ 248.710041][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 249.007060][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.160033][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.173222][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.183213][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.210032][ T912] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 249.254634][ T30] audit: type=1400 audit(1746504715.837:696): avc: denied { setopt } for pid=8264 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 249.275687][ T8265] netlink: 'syz.0.680': attribute type 39 has an invalid length. [ 249.350464][ T8250] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.373578][ T912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.453890][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 249.512038][ T912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.800286][ T912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.830133][ T912] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.839186][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.866123][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 249.875045][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 249.894848][ T912] usb 2-1: config 0 descriptor?? [ 250.319583][ T912] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 250.341692][ T912] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 250.470186][ T5890] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 250.670143][ T912] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 250.677768][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 250.685943][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.697225][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.712082][ T5890] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 250.723552][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.816370][ T5890] usb 5-1: config 0 descriptor?? [ 250.840426][ T7663] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 250.860067][ T912] usb 3-1: Using ep0 maxpacket: 16 [ 250.866758][ T912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.878461][ T912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.893034][ T912] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 250.910674][ T912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.931499][ T912] usb 3-1: config 0 descriptor?? [ 251.010032][ T7663] usb 1-1: Using ep0 maxpacket: 32 [ 251.016811][ T7663] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 251.025876][ T7663] usb 1-1: config 0 has no interface number 0 [ 251.039461][ T7663] usb 1-1: config 0 interface 89 has no altsetting 0 [ 251.055798][ T7663] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 251.072089][ T7663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.089041][ T7663] usb 1-1: Product: syz [ 251.096426][ T7663] usb 1-1: Manufacturer: syz [ 251.101497][ T7663] usb 1-1: SerialNumber: syz [ 251.108342][ T7663] usb 1-1: config 0 descriptor?? [ 251.247673][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 251.256060][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 251.267311][ T5890] usb 5-1: USB disconnect, device number 27 [ 251.380131][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.389552][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.416301][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.690'. [ 251.431600][ T912] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf4 found [ 251.443576][ T5890] usb 1-1: USB disconnect, device number 24 [ 251.458384][ T912] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf3 found [ 251.589346][ T9] usb 3-1: USB disconnect, device number 22 [ 251.789781][ T5890] usb 2-1: reset high-speed USB device number 27 using dummy_hcd [ 251.827269][ T9] usb 4-1: USB disconnect, device number 28 [ 252.040083][ T5890] usb 2-1: device descriptor read/64, error -32 [ 252.079803][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.317886][ T5890] usb 2-1: reset high-speed USB device number 27 using dummy_hcd [ 252.968793][ T5890] usb 2-1: device descriptor read/64, error -32 [ 253.907496][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.699'. [ 254.388423][ T912] usb 2-1: USB disconnect, device number 27 [ 254.663458][ T8337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.978236][ T30] audit: type=1400 audit(1746504721.557:697): avc: denied { write } for pid=8335 comm="syz.2.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 255.233169][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.239516][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.970527][ T5860] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 256.090718][ T8361] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 256.097500][ T8361] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 256.109118][ T30] audit: type=1400 audit(1746504722.607:698): avc: denied { append } for pid=8346 comm="syz.0.707" name="v4l-subdev2" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 256.135828][ T8361] vhci_hcd vhci_hcd.0: Device attached [ 256.151438][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 256.158137][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.182388][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.222492][ T5860] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 256.244741][ T8369] netlink: 'syz.1.711': attribute type 1 has an invalid length. [ 256.266455][ T8363] vhci_hcd: connection closed [ 256.267292][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.280471][ T7651] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 256.286557][ T13] vhci_hcd: stop threads [ 256.289025][ T8369] netlink: 'syz.1.711': attribute type 4 has an invalid length. [ 256.293430][ T13] vhci_hcd: release socket [ 256.320989][ T13] vhci_hcd: disconnect device [ 256.361214][ T8369] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.711'. [ 256.371354][ T5860] usb 5-1: config 0 descriptor?? [ 256.471681][ T7651] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.485190][ T7651] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.532110][ T7651] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.545413][ T7651] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.562575][ T7651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.579889][ T7651] usb 4-1: config 0 descriptor?? [ 257.301351][ T5860] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf4 found [ 257.309067][ T5860] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf3 found [ 257.431575][ T5860] usb 5-1: USB disconnect, device number 28 [ 257.570243][ T7651] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 257.580135][ T7663] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 257.594030][ T7651] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 257.673511][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 257.811654][ T7663] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 257.819303][ T7663] usb 2-1: can't read configurations, error -61 [ 258.363652][ T7663] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 258.527186][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.534521][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.614848][ T7663] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 258.632970][ T7663] usb 2-1: can't read configurations, error -61 [ 258.660093][ T7663] usb usb2-port1: attempt power cycle [ 258.690116][ T8404] netlink: 332 bytes leftover after parsing attributes in process `syz.0.722'. [ 259.018514][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.438907][ T7663] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 259.453899][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.482403][ T7663] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 259.490137][ T8401] usb 4-1: reset high-speed USB device number 29 using dummy_hcd [ 259.500055][ T7663] usb 2-1: can't read configurations, error -61 [ 259.607167][ T8398] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.619373][ T8398] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.630889][ T8398] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.643147][ T8398] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.654577][ T8401] usb 4-1: device descriptor read/64, error -32 [ 259.661345][ T7663] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 259.739479][ T2908] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 259.771030][ T7663] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 259.778634][ T7663] usb 2-1: can't read configurations, error -61 [ 259.796390][ T7663] usb usb2-port1: unable to enumerate USB device [ 259.910192][ T8401] usb 4-1: reset high-speed USB device number 29 using dummy_hcd [ 259.944654][ T8424] netlink: 136 bytes leftover after parsing attributes in process `syz.2.729'. [ 259.973279][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 260.070124][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 260.095706][ T8429] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 260.102309][ T8429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 260.268886][ T8429] vhci_hcd vhci_hcd.0: Device attached [ 260.330232][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 260.344387][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.501633][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.716651][ T5820] usb 4-1: USB disconnect, device number 29 [ 260.974304][ T7652] usb 33-1: new high-speed USB device number 3 using vhci_hcd [ 260.981859][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 261.001495][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.026849][ T10] usb 5-1: config 0 descriptor?? [ 261.096747][ T8431] vhci_hcd: connection reset by peer [ 261.109505][ T2908] vhci_hcd: stop threads [ 261.116849][ T2908] vhci_hcd: release socket [ 261.142603][ T2908] vhci_hcd: disconnect device [ 261.974473][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 261.983062][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 262.008755][ T10] usb 5-1: USB disconnect, device number 29 [ 263.318798][ T8470] 9pnet_fd: Insufficient options for proto=fd [ 263.710988][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.740'. [ 263.719953][ T8472] netlink: 20 bytes leftover after parsing attributes in process `syz.4.740'. [ 264.359457][ T8488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.458756][ T8512] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 265.465365][ T8512] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 265.571327][ T8516] 9pnet_fd: Insufficient options for proto=fd [ 266.292461][ T8512] vhci_hcd vhci_hcd.0: Device attached [ 266.387479][ T7652] vhci_hcd: vhci_device speed not set [ 266.741472][ T8514] vhci_hcd: connection closed [ 266.760022][ T5915] vhci_hcd: stop threads [ 266.773063][ T5915] vhci_hcd: release socket [ 266.790015][ T5820] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 266.800105][ T5915] vhci_hcd: disconnect device [ 266.815907][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 267.700065][ T7657] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 268.636215][ T7657] usb 5-1: Using ep0 maxpacket: 16 [ 268.702708][ T7657] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 268.725855][ T7657] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.744510][ T7657] usb 5-1: Product: syz [ 268.758042][ T7657] usb 5-1: Manufacturer: syz [ 268.829489][ T8546] netlink: 'syz.2.763': attribute type 39 has an invalid length. [ 268.846061][ T7657] usb 5-1: SerialNumber: syz [ 268.860427][ T7657] usb 5-1: config 0 descriptor?? [ 268.882444][ T7657] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 269.410798][ T7657] gspca_sn9c2028: read1 error -110 [ 269.416321][ T7657] gspca_sn9c2028: read1 error -32 [ 269.431278][ T7657] gspca_sn9c2028: read1 error -32 [ 269.460564][ T7657] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -32 [ 269.568141][ T63] syzkaller0: tun_net_xmit 76 [ 269.585681][ T63] syzkaller0: tun_net_xmit 48 [ 269.602233][ T7657] syzkaller0: tun_net_xmit 76 [ 269.655168][ T7657] syzkaller0: tun_net_xmit 76 [ 270.351754][ T7657] usb 5-1: USB disconnect, device number 30 [ 271.902337][ T7657] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 272.033183][ T5820] vhci_hcd: vhci_device speed not set [ 272.200166][ T5861] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 272.831564][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 272.842797][ T7657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.858200][ T5861] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 272.867494][ T7657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.877306][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.885539][ T5861] usb 1-1: Product: syz [ 272.889716][ T7657] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 272.918755][ T5861] usb 1-1: Manufacturer: syz [ 272.923634][ T5861] usb 1-1: SerialNumber: syz [ 272.928558][ T7657] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 272.943180][ T5861] usb 1-1: config 0 descriptor?? [ 272.955656][ T5861] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 272.962628][ T7657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.995942][ T7657] usb 2-1: config 0 descriptor?? [ 273.425533][ T7657] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 273.449585][ T7657] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 273.500897][ T5861] gspca_sn9c2028: read1 error -110 [ 273.506449][ T5861] gspca_sn9c2028: read1 error -32 [ 273.512124][ T5861] gspca_sn9c2028: read1 error -32 [ 273.517329][ T5861] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -32 [ 273.993120][ T8633] delete_channel: no stack [ 274.340114][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 274.513751][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 274.544602][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 274.568845][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 274.591923][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.622311][ T8636] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 274.636958][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.850021][ T7657] usb 2-1: reset high-speed USB device number 32 using dummy_hcd [ 274.913711][ T10] usb 1-1: USB disconnect, device number 25 [ 274.970081][ T5861] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 275.020014][ T7657] usb 2-1: device descriptor read/64, error -32 [ 275.180070][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 275.184321][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 275.187663][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.209043][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.223294][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 275.239676][ T5861] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 275.250811][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.264662][ T5861] usb 3-1: config 0 descriptor?? [ 275.290039][ T7657] usb 2-1: reset high-speed USB device number 32 using dummy_hcd [ 276.152648][ T7657] usb 2-1: device descriptor read/64, error -32 [ 276.186704][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0016/input/input13 [ 276.216268][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0016/input/input14 [ 276.252825][ T5861] kye 0003:0458:5011.0016: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 276.489616][ T7657] usb 2-1: reset high-speed USB device number 32 using dummy_hcd [ 276.511850][ T7657] usb 2-1: device descriptor read/8, error -32 [ 276.780008][ T5861] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 277.194046][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 277.230464][ T7652] usb 4-1: USB disconnect, device number 30 [ 277.235960][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.265484][ T7654] usb 3-1: USB disconnect, device number 23 [ 277.277234][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.303613][ T8663] netlink: 'syz.3.802': attribute type 39 has an invalid length. [ 277.313571][ T5861] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 277.324073][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.349170][ T5861] usb 1-1: config 0 descriptor?? [ 277.449486][ T7663] usb 2-1: USB disconnect, device number 32 [ 277.745703][ T8674] ubi31: attaching mtd0 [ 277.794222][ T8674] ubi31: scanning is finished [ 277.799018][ T8674] ubi31: empty MTD device detected [ 277.863012][ T5861] hid-picolcd 0003:04D8:F002.0017: No report with id 0xf4 found [ 277.923895][ T5861] hid-picolcd 0003:04D8:F002.0017: No report with id 0xf3 found [ 278.034421][ T5861] usb 1-1: USB disconnect, device number 26 [ 278.567930][ T8674] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 278.578865][ T8674] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 278.588862][ T8674] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 278.607841][ T8674] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 278.622370][ T8674] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 278.648876][ T8674] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 278.680046][ T7663] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 278.687682][ T8674] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1616181308 [ 278.714057][ T8674] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 278.725307][ T8679] ubi31: background thread "ubi_bgt31d" started, PID 8679 [ 278.829992][ T8686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.860121][ T7663] usb 4-1: Using ep0 maxpacket: 16 [ 278.873960][ T7663] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 279.036499][ T7663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.060599][ T7663] usb 4-1: Product: syz [ 279.060809][ T7654] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 279.072488][ T7663] usb 4-1: Manufacturer: syz [ 279.078177][ T7663] usb 4-1: SerialNumber: syz [ 279.088828][ T8690] netlink: 72 bytes leftover after parsing attributes in process `syz.1.810'. [ 279.095405][ T7663] usb 4-1: config 0 descriptor?? [ 279.104692][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'. [ 279.117854][ T7663] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 279.269910][ T8702] delete_channel: no stack [ 279.327439][ T7654] usb 3-1: Using ep0 maxpacket: 32 [ 279.342179][ T7654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.357283][ T7654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.367561][ T7654] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 279.410546][ T7654] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 279.434303][ T7654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.469730][ T7654] usb 3-1: config 0 descriptor?? [ 279.620117][ T5861] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 279.630625][ T7663] gspca_sn9c2028: read1 error -110 [ 279.682724][ T7663] gspca_sn9c2028: read1 error -32 [ 279.699004][ T7663] gspca_sn9c2028: read1 error -32 [ 279.704678][ T7663] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 279.805113][ T5861] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.816407][ T5861] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.844634][ T5861] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.858796][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.881094][ T8702] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 279.896825][ T5861] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.920017][ T5820] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 279.922825][ T7654] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0018/input/input16 [ 280.090312][ T7663] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 280.098190][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 280.162437][ T5820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.182957][ T5820] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77 [ 280.193021][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.196086][ T7654] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0018/input/input17 [ 280.210900][ T5820] usb 1-1: Product: syz [ 280.258569][ T7654] kye 0003:0458:5011.0018: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 280.260485][ T7663] usb 5-1: Using ep0 maxpacket: 16 [ 280.287308][ T5820] usb 1-1: Manufacturer: syz [ 280.318360][ T5820] usb 1-1: SerialNumber: syz [ 280.339477][ T7663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.367988][ T7654] usb 3-1: USB disconnect, device number 24 [ 280.378667][ T5820] usb 1-1: config 0 descriptor?? [ 280.397826][ T7663] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.419478][ T5820] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 280.447297][ T5820] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 280.459247][ T7663] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 280.521634][ T7663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.594430][ T7663] usb 5-1: config 0 descriptor?? [ 280.659783][ T8713] Cannot find add_set index 3 as target [ 280.853077][ T5820] usb 4-1: USB disconnect, device number 31 [ 280.973175][ T8721] netlink: 72 bytes leftover after parsing attributes in process `syz.2.822'. [ 281.100059][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 281.140102][ T7663] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf4 found [ 281.149049][ T7663] hid-picolcd 0003:04D8:F002.0019: No report with id 0xf3 found [ 281.163220][ T8724] netlink: 'syz.3.821': attribute type 20 has an invalid length. [ 281.292872][ T7663] usb 5-1: USB disconnect, device number 31 [ 282.816921][ T7657] usb 2-1: USB disconnect, device number 33 [ 282.994278][ T7654] usb 1-1: USB disconnect, device number 27 [ 283.304730][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 283.330051][ T7657] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 283.490286][ T7657] usb 2-1: Using ep0 maxpacket: 32 [ 283.776435][ T7657] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 283.802623][ T7657] usb 2-1: config 0 has no interface number 0 [ 283.818197][ T7657] usb 2-1: config 0 interface 89 has no altsetting 0 [ 283.922177][ T7657] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 283.931992][ T7657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.942006][ T7657] usb 2-1: Product: syz [ 283.946710][ T7657] usb 2-1: Manufacturer: syz [ 283.951507][ T7657] usb 2-1: SerialNumber: syz [ 283.958339][ T7657] usb 2-1: config 0 descriptor?? [ 284.528487][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.537023][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.542294][ T8760] netlink: 72 bytes leftover after parsing attributes in process `syz.0.833'. [ 284.556195][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 284.603836][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 284.697689][ T7654] usb 2-1: USB disconnect, device number 34 [ 284.720001][ T7663] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 284.752296][ T8769] netlink: 196 bytes leftover after parsing attributes in process `syz.2.836'. [ 284.992706][ T7663] usb 4-1: Using ep0 maxpacket: 16 [ 285.008341][ T7663] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 285.019521][ T7663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.028904][ T5915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.042080][ T7663] usb 4-1: Product: syz [ 285.046327][ T7663] usb 4-1: Manufacturer: syz [ 285.053374][ T7663] usb 4-1: SerialNumber: syz [ 285.076814][ T7663] usb 4-1: config 0 descriptor?? [ 285.097311][ T7663] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 285.108707][ T30] audit: type=1400 audit(1746504751.697:699): avc: denied { write } for pid=5166 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.130976][ T5915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.144622][ T30] audit: type=1400 audit(1746504751.697:700): avc: denied { remove_name } for pid=5166 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.182153][ T30] audit: type=1400 audit(1746504751.697:701): avc: denied { add_name } for pid=5166 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.232873][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.298396][ T8779] delete_channel: no stack [ 285.330055][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.432740][ T2908] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.534529][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.633759][ T7663] gspca_sn9c2028: read1 error -110 [ 285.639240][ T2908] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.640558][ T7663] gspca_sn9c2028: read1 error -32 [ 285.654742][ T7663] gspca_sn9c2028: read1 error -32 [ 285.659817][ T7663] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 285.800353][ T5820] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 285.816775][ T2908] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.872622][ T5915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.965339][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.046646][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.092338][ T5820] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 286.103430][ T5820] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 286.118397][ T8799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.842'. [ 286.148619][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.163718][ T8800] netlink: 'syz.1.841': attribute type 20 has an invalid length. [ 286.171678][ T5820] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 286.201257][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.251062][ T7411] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.272086][ T8784] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 286.337874][ T5820] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.365983][ T7654] usb 4-1: USB disconnect, device number 32 [ 286.374677][ T5915] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 287.320926][ T7654] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 287.496050][ T7654] usb 1-1: Using ep0 maxpacket: 32 [ 287.504279][ T7654] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 287.512522][ T7654] usb 1-1: config 0 has no interface number 0 [ 287.518586][ T7654] usb 1-1: config 0 interface 89 has no altsetting 0 [ 287.547487][ T7654] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 287.558118][ T7654] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.595158][ T7654] usb 1-1: Product: syz [ 287.606727][ T7654] usb 1-1: Manufacturer: syz [ 287.913132][ T7654] usb 1-1: SerialNumber: syz [ 287.945576][ T7654] usb 1-1: config 0 descriptor?? [ 288.256479][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.274392][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.388674][ T8826] can0: slcan on ptm0. [ 288.771310][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 288.788747][ T30] audit: type=1400 audit(1746504755.367:702): avc: denied { search } for pid=5478 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.810915][ T30] audit: type=1400 audit(1746504755.367:703): avc: denied { read } for pid=5478 comm="dhcpcd" name="n100" dev="tmpfs" ino=5683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.946359][ T8834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.961470][ T30] audit: type=1400 audit(1746504755.367:704): avc: denied { open } for pid=5478 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=5683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.007954][ T30] audit: type=1400 audit(1746504755.367:705): avc: denied { getattr } for pid=5478 comm="dhcpcd" path="/run/udev/data/n100" dev="tmpfs" ino=5683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.049040][ T7654] usb 1-1: USB disconnect, device number 28 [ 289.107153][ T7663] usb 5-1: USB disconnect, device number 32 [ 289.126723][ T8822] can0 (unregistered): slcan off ptm0. [ 289.375763][ T30] audit: type=1400 audit(1746504755.957:706): avc: denied { read } for pid=8839 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.436005][ T30] audit: type=1400 audit(1746504755.977:707): avc: denied { open } for pid=8839 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.924319][ T30] audit: type=1400 audit(1746504755.977:708): avc: denied { getattr } for pid=8839 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.313502][ T8855] netlink: 892 bytes leftover after parsing attributes in process `syz.0.858'. [ 290.584848][ T30] audit: type=1400 audit(1746504757.167:709): avc: denied { write } for pid=8835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.639364][ T30] audit: type=1400 audit(1746504757.167:710): avc: denied { add_name } for pid=8835 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.672944][ T7652] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 290.719579][ T30] audit: type=1400 audit(1746504757.167:711): avc: denied { create } for pid=8835 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.745328][ T30] audit: type=1400 audit(1746504757.167:712): avc: denied { write } for pid=8835 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=5715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.803500][ T30] audit: type=1400 audit(1746504757.167:713): avc: denied { append } for pid=8835 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=5715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 290.868011][ T30] audit: type=1400 audit(1746504757.357:714): avc: denied { remove_name } for pid=8875 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=5715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.891589][ T7652] usb 3-1: Using ep0 maxpacket: 32 [ 290.902283][ T7652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.936209][ T7652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.967025][ T7652] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 291.050013][ T7654] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 291.082353][ T30] audit: type=1400 audit(1746504757.357:715): avc: denied { unlink } for pid=8875 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=5715 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 291.578714][ T7652] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 291.588493][ T7652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.606301][ T7652] usb 3-1: config 0 descriptor?? [ 291.630062][ T7654] usb 1-1: device descriptor read/64, error -71 [ 292.438347][ T7654] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 292.474088][ T7652] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001A/input/input19 [ 292.696139][ T7652] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001A/input/input20 [ 292.822151][ T7654] usb 1-1: device descriptor read/64, error -71 [ 292.930728][ T7654] usb usb1-port1: attempt power cycle [ 293.428581][ T7652] kye 0003:0458:5011.001A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 293.474765][ T8907] netlink: 5040 bytes leftover after parsing attributes in process `syz.1.869'. [ 293.484087][ T8907] netlink: 5040 bytes leftover after parsing attributes in process `syz.1.869'. [ 293.585396][ T7652] usb 3-1: USB disconnect, device number 25 [ 293.930158][ T7654] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 294.172059][ T7654] usb 1-1: device not accepting address 31, error -71 [ 295.090007][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.880'. [ 295.631132][ T8949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.550382][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 297.830104][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.893'. [ 297.996581][ T8993] fuse: Unknown parameter 'fd0x0000000000000005' [ 298.017567][ T63] syzkaller0: tun_net_xmit 76 [ 298.079241][ T7663] syzkaller0: tun_net_xmit 76 [ 298.086107][ T63] syzkaller0: tun_net_xmit 48 [ 298.116682][ T8999] netlink: 5040 bytes leftover after parsing attributes in process `syz.1.896'. [ 298.146823][ T8999] netlink: 5040 bytes leftover after parsing attributes in process `syz.1.896'. [ 298.204235][ T7654] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 298.517601][ T7654] usb 5-1: Using ep0 maxpacket: 16 [ 298.563220][ T7654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.626460][ T7654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.669233][ T7654] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 298.713773][ T7654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.745143][ T7654] usb 5-1: config 0 descriptor?? [ 300.041072][ T7657] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 300.202678][ T7657] usb 3-1: Using ep0 maxpacket: 16 [ 300.212593][ T7657] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.222918][ T7657] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.236742][ T7657] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 300.246106][ T7657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.256479][ T7657] usb 3-1: config 0 descriptor?? [ 300.267652][ T7657] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 300.425405][ T7654] usbhid 5-1:0.0: can't add hid device: -71 [ 300.436517][ T7654] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 300.449055][ T7654] usb 5-1: USB disconnect, device number 33 [ 300.505961][ T9014] netlink: 868 bytes leftover after parsing attributes in process `syz.3.903'. [ 300.721214][ T30] audit: type=1400 audit(1746504767.307:716): avc: denied { write } for pid=9025 comm="syz.3.908" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 300.898023][ T30] audit: type=1400 audit(1746504767.437:717): avc: denied { block_suspend } for pid=9025 comm="syz.3.908" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 301.310828][ C1] ================================================================== [ 301.318887][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x45a/0x4d0 [ 301.326761][ C1] Read of size 2 at addr ffff88803594c02a by task syz.3.908/9028 [ 301.334452][ C1] [ 301.336761][ C1] CPU: 1 UID: 0 PID: 9028 Comm: syz.3.908 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 301.336779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 301.336786][ C1] Call Trace: [ 301.336789][ C1] [ 301.336793][ C1] dump_stack_lvl+0x116/0x1f0 [ 301.336809][ C1] print_report+0xc3/0x670 [ 301.336819][ C1] ? __virt_addr_valid+0x5e/0x590 [ 301.336832][ C1] ? __phys_addr+0xc6/0x150 [ 301.336845][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 301.336858][ C1] kasan_report+0xe0/0x110 [ 301.336867][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 301.336881][ C1] rose_timer_expiry+0x45a/0x4d0 [ 301.336894][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 301.336907][ C1] call_timer_fn+0x197/0x620 [ 301.336919][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 301.336933][ C1] ? mark_held_locks+0x49/0x80 [ 301.336947][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 301.336960][ C1] __run_timers+0x6ef/0x960 [ 301.336974][ C1] ? __pfx___run_timers+0x10/0x10 [ 301.336991][ C1] run_timer_base+0x114/0x190 [ 301.337003][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 301.337017][ C1] run_timer_softirq+0x1a/0x40 [ 301.337032][ C1] handle_softirqs+0x216/0x8e0 [ 301.337045][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 301.337057][ C1] __irq_exit_rcu+0x109/0x170 [ 301.337068][ C1] irq_exit_rcu+0x9/0x30 [ 301.337079][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 301.337090][ C1] [ 301.337093][ C1] [ 301.337097][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.337109][ C1] RIP: 0010:__schedule+0x1177/0x5de0 [ 301.337120][ C1] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 17 49 00 00 49 89 5f 10 48 8b bd 10 ff ff ff 48 89 de e8 71 17 be f5 48 89 c7 e8 f9 d2 1b f6 <48> 8b 75 08 8b bd 08 ff ff ff e8 aa 46 1b f6 48 8b b5 88 fe ff ff [ 301.337130][ C1] RSP: 0018:ffffc9001d7af5d8 EFLAGS: 00000206 [ 301.337138][ C1] RAX: 000000000001102b RBX: ffff8880791c0000 RCX: 0000000000000006 [ 301.337144][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe124f RDI: ffffffff8bf482e0 [ 301.337150][ C1] RBP: ffffc9001d7af788 R08: 0000000000000001 R09: 0000000000000001 [ 301.337156][ C1] R10: ffffffff90850517 R11: 0000000000000001 R12: 0000000000000000 [ 301.337162][ C1] R13: 0000000000000000 R14: ffff8880791c0000 R15: ffff8880b8539dc0 [ 301.337171][ C1] ? __schedule+0x4002/0x5de0 [ 301.337189][ C1] ? __pfx___schedule+0x10/0x10 [ 301.337209][ C1] ? try_to_wake_up+0x157/0x1680 [ 301.337231][ C1] ? mark_held_locks+0x49/0x80 [ 301.337247][ C1] ? irqentry_exit+0x3b/0x90 [ 301.337267][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 301.337288][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 301.337306][ C1] preempt_schedule_common+0x44/0xc0 [ 301.337319][ C1] preempt_schedule_thunk+0x16/0x30 [ 301.337329][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 301.337340][ C1] __unix_dgram_recvmsg+0x326/0xee0 [ 301.337356][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 301.337369][ C1] ? do_user_addr_fault+0x843/0x1370 [ 301.337380][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 301.337394][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 301.337407][ C1] ? iovec_from_user+0xbb/0x140 [ 301.337421][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 301.337434][ C1] ____sys_recvmsg+0x5f6/0x6b0 [ 301.337448][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 301.337462][ C1] ? kfree+0x252/0x4d0 [ 301.337476][ C1] ___sys_recvmsg+0x114/0x1a0 [ 301.337486][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 301.337498][ C1] ? __pfx___might_resched+0x10/0x10 [ 301.337512][ C1] do_recvmmsg+0x2fe/0x740 [ 301.337521][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 301.337530][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 301.337545][ C1] ? do_futex+0x122/0x350 [ 301.337559][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 301.337572][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 301.337582][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 301.337592][ C1] ? rcu_is_watching+0x12/0xc0 [ 301.337604][ C1] do_syscall_64+0xcd/0x260 [ 301.337617][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.337627][ C1] RIP: 0033:0x7fb7a6f8e969 [ 301.337634][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.337644][ C1] RSP: 002b:00007fb7a7e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 301.337653][ C1] RAX: ffffffffffffffda RBX: 00007fb7a71b6080 RCX: 00007fb7a6f8e969 [ 301.337659][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 301.337665][ C1] RBP: 00007fb7a7010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 301.337671][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 301.337676][ C1] R13: 0000000000000000 R14: 00007fb7a71b6080 R15: 00007fffa4edb318 [ 301.337685][ C1] [ 301.337689][ C1] [ 301.800938][ C1] Allocated by task 7411: [ 301.805244][ C1] kasan_save_stack+0x33/0x60 [ 301.809910][ C1] kasan_save_track+0x14/0x30 [ 301.814576][ C1] __kasan_kmalloc+0xaa/0xb0 [ 301.819149][ C1] batadv_forw_packet_alloc+0x3ad/0x4e0 [ 301.824682][ C1] batadv_iv_ogm_aggregate_new+0x13c/0x4c0 [ 301.830470][ C1] batadv_iv_ogm_schedule_buff+0xe77/0x14e0 [ 301.836341][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 301.843342][ C1] process_one_work+0x9cc/0x1b70 [ 301.848259][ C1] worker_thread+0x6c8/0xf10 [ 301.852827][ C1] kthread+0x3c2/0x780 [ 301.856870][ C1] ret_from_fork+0x45/0x80 [ 301.861269][ C1] ret_from_fork_asm+0x1a/0x30 [ 301.866031][ C1] [ 301.868331][ C1] Freed by task 63: [ 301.872110][ C1] kasan_save_stack+0x33/0x60 [ 301.876775][ C1] kasan_save_track+0x14/0x30 [ 301.881435][ C1] kasan_save_free_info+0x3b/0x60 [ 301.886439][ C1] __kasan_slab_free+0x51/0x70 [ 301.891179][ C1] kfree+0x2b6/0x4d0 [ 301.895054][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x26d/0x920 [ 301.902057][ C1] process_one_work+0x9cc/0x1b70 [ 301.906972][ C1] worker_thread+0x6c8/0xf10 [ 301.911569][ C1] kthread+0x3c2/0x780 [ 301.915614][ C1] ret_from_fork+0x45/0x80 [ 301.920012][ C1] ret_from_fork_asm+0x1a/0x30 [ 301.924771][ C1] [ 301.927074][ C1] Last potentially related work creation: [ 301.932767][ C1] kasan_save_stack+0x33/0x60 [ 301.937427][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 301.942605][ C1] insert_work+0x36/0x230 [ 301.946911][ C1] __queue_work+0x3f8/0x10f0 [ 301.951477][ C1] call_timer_fn+0x197/0x620 [ 301.956050][ C1] __run_timers+0x569/0x960 [ 301.960535][ C1] run_timer_base+0x114/0x190 [ 301.965193][ C1] run_timer_softirq+0x1a/0x40 [ 301.969942][ C1] handle_softirqs+0x216/0x8e0 [ 301.974686][ C1] __irq_exit_rcu+0x109/0x170 [ 301.979343][ C1] irq_exit_rcu+0x9/0x30 [ 301.983566][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 301.989179][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.995137][ C1] [ 301.997439][ C1] The buggy address belongs to the object at ffff88803594c000 [ 301.997439][ C1] which belongs to the cache kmalloc-512 of size 512 [ 302.011467][ C1] The buggy address is located 42 bytes inside of [ 302.011467][ C1] freed 512-byte region [ffff88803594c000, ffff88803594c200) [ 302.025154][ C1] [ 302.027457][ C1] The buggy address belongs to the physical page: [ 302.033841][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803594d000 pfn:0x3594c [ 302.043882][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 302.052356][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 302.060831][ C1] page_type: f5(slab) [ 302.064794][ C1] raw: 00fff00000000240 ffff88801b441c80 ffffea000179bd10 ffffea0000d72b10 [ 302.073358][ C1] raw: ffff88803594d000 0000000000100004 00000000f5000000 0000000000000000 [ 302.081926][ C1] head: 00fff00000000240 ffff88801b441c80 ffffea000179bd10 ffffea0000d72b10 [ 302.090573][ C1] head: ffff88803594d000 0000000000100004 00000000f5000000 0000000000000000 [ 302.099221][ C1] head: 00fff00000000002 ffffea0000d65301 00000000ffffffff 00000000ffffffff [ 302.107867][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 302.116512][ C1] page dumped because: kasan: bad access detected [ 302.122897][ C1] page_owner tracks the page as allocated [ 302.128589][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5812, tgid 5812 (syz-executor), ts 60188473651, free_ts 60181308106 [ 302.149929][ C1] post_alloc_hook+0x181/0x1b0 [ 302.154688][ C1] get_page_from_freelist+0x135c/0x3920 [ 302.160222][ C1] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 302.166098][ C1] alloc_pages_mpol+0x1fb/0x550 [ 302.170927][ C1] new_slab+0x244/0x340 [ 302.175067][ C1] ___slab_alloc+0xd9c/0x1940 [ 302.179723][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 302.185077][ C1] __kmalloc_noprof+0x2f2/0x510 [ 302.189917][ C1] fib6_info_alloc+0x40/0x160 [ 302.194575][ C1] ip6_route_info_create+0x33f/0x18e0 [ 302.199932][ C1] ip6_route_add+0x26/0x1c0 [ 302.204415][ C1] addrconf_add_mroute+0x1dd/0x350 [ 302.209507][ C1] addrconf_add_dev+0x14e/0x1c0 [ 302.214333][ C1] inet6_addr_add+0xfe/0x960 [ 302.218904][ C1] inet6_rtm_newaddr+0x1619/0x1c70 [ 302.223992][ C1] rtnetlink_rcv_msg+0x95b/0xe90 [ 302.228909][ C1] page last free pid 5816 tgid 5816 stack trace: [ 302.235211][ C1] __free_frozen_pages+0x69d/0xff0 [ 302.240306][ C1] qlist_free_all+0x4e/0x120 [ 302.244881][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 302.250321][ C1] __kasan_slab_alloc+0x69/0x90 [ 302.255148][ C1] __kmalloc_node_track_caller_noprof+0x1d3/0x510 [ 302.261538][ C1] kmemdup_noprof+0x29/0x60 [ 302.266018][ C1] __addrconf_sysctl_register+0xbb/0x360 [ 302.271635][ C1] addrconf_sysctl_register+0x15f/0x1f0 [ 302.277177][ C1] ipv6_add_dev+0xb39/0x15f0 [ 302.281768][ C1] addrconf_notify+0x53e/0x19e0 [ 302.286618][ C1] notifier_call_chain+0xb9/0x410 [ 302.291653][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 302.297529][ C1] register_netdevice+0x182e/0x2270 [ 302.302709][ C1] cfg80211_register_netdevice+0x149/0x340 [ 302.308497][ C1] ieee80211_if_add+0xca7/0x1a40 [ 302.313419][ C1] ieee80211_register_hw+0x3836/0x4020 [ 302.318862][ C1] [ 302.321164][ C1] Memory state around the buggy address: [ 302.326774][ C1] ffff88803594bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.334821][ C1] ffff88803594bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 302.342862][ C1] >ffff88803594c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.350898][ C1] ^ [ 302.356269][ C1] ffff88803594c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.364308][ C1] ffff88803594c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 302.372359][ C1] ================================================================== [ 302.380483][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 302.387675][ C1] CPU: 1 UID: 0 PID: 9028 Comm: syz.3.908 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 302.399566][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 302.409703][ C1] Call Trace: [ 302.412960][ C1] [ 302.415787][ C1] dump_stack_lvl+0x3d/0x1f0 [ 302.420359][ C1] panic+0x71c/0x800 [ 302.424242][ C1] ? __pfx_panic+0x10/0x10 [ 302.428644][ C1] ? mark_held_locks+0x49/0x80 [ 302.433409][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 302.438499][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 302.443609][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 302.448704][ C1] check_panic_on_warn+0xab/0xb0 [ 302.453619][ C1] end_report+0x107/0x170 [ 302.457938][ C1] kasan_report+0xee/0x110 [ 302.462325][ C1] ? rose_timer_expiry+0x45a/0x4d0 [ 302.467424][ C1] rose_timer_expiry+0x45a/0x4d0 [ 302.472346][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 302.477788][ C1] call_timer_fn+0x197/0x620 [ 302.482377][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 302.487491][ C1] ? mark_held_locks+0x49/0x80 [ 302.492237][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 302.497672][ C1] __run_timers+0x6ef/0x960 [ 302.502152][ C1] ? __pfx___run_timers+0x10/0x10 [ 302.507157][ C1] run_timer_base+0x114/0x190 [ 302.511810][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 302.516982][ C1] run_timer_softirq+0x1a/0x40 [ 302.521719][ C1] handle_softirqs+0x216/0x8e0 [ 302.526463][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 302.531740][ C1] __irq_exit_rcu+0x109/0x170 [ 302.536400][ C1] irq_exit_rcu+0x9/0x30 [ 302.540628][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 302.546244][ C1] [ 302.549160][ C1] [ 302.552071][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.558029][ C1] RIP: 0010:__schedule+0x1177/0x5de0 [ 302.563295][ C1] Code: fa 48 c1 ea 03 80 3c 02 00 0f 85 17 49 00 00 49 89 5f 10 48 8b bd 10 ff ff ff 48 89 de e8 71 17 be f5 48 89 c7 e8 f9 d2 1b f6 <48> 8b 75 08 8b bd 08 ff ff ff e8 aa 46 1b f6 48 8b b5 88 fe ff ff [ 302.582879][ C1] RSP: 0018:ffffc9001d7af5d8 EFLAGS: 00000206 [ 302.588931][ C1] RAX: 000000000001102b RBX: ffff8880791c0000 RCX: 0000000000000006 [ 302.596885][ C1] RDX: 0000000000000000 RSI: ffffffff8dbe124f RDI: ffffffff8bf482e0 [ 302.604845][ C1] RBP: ffffc9001d7af788 R08: 0000000000000001 R09: 0000000000000001 [ 302.612788][ C1] R10: ffffffff90850517 R11: 0000000000000001 R12: 0000000000000000 [ 302.620757][ C1] R13: 0000000000000000 R14: ffff8880791c0000 R15: ffff8880b8539dc0 [ 302.628720][ C1] ? __schedule+0x4002/0x5de0 [ 302.633397][ C1] ? __pfx___schedule+0x10/0x10 [ 302.638222][ C1] ? try_to_wake_up+0x157/0x1680 [ 302.643138][ C1] ? mark_held_locks+0x49/0x80 [ 302.647881][ C1] ? irqentry_exit+0x3b/0x90 [ 302.652447][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.657623][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 302.662972][ C1] preempt_schedule_common+0x44/0xc0 [ 302.668237][ C1] preempt_schedule_thunk+0x16/0x30 [ 302.673410][ C1] _raw_spin_unlock_irqrestore+0x61/0x80 [ 302.679022][ C1] __unix_dgram_recvmsg+0x326/0xee0 [ 302.684198][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 302.689905][ C1] ? do_user_addr_fault+0x843/0x1370 [ 302.695172][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 302.700094][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.705277][ C1] ? iovec_from_user+0xbb/0x140 [ 302.710106][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 302.715020][ C1] ____sys_recvmsg+0x5f6/0x6b0 [ 302.719761][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 302.725021][ C1] ? kfree+0x252/0x4d0 [ 302.729066][ C1] ___sys_recvmsg+0x114/0x1a0 [ 302.733713][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 302.738895][ C1] ? __pfx___might_resched+0x10/0x10 [ 302.744158][ C1] do_recvmmsg+0x2fe/0x740 [ 302.748546][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 302.753451][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 302.758365][ C1] ? do_futex+0x122/0x350 [ 302.762683][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 302.767595][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 302.772590][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 302.778124][ C1] ? rcu_is_watching+0x12/0xc0 [ 302.782862][ C1] do_syscall_64+0xcd/0x260 [ 302.787340][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.793206][ C1] RIP: 0033:0x7fb7a6f8e969 [ 302.797594][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.817185][ C1] RSP: 002b:00007fb7a7e2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 302.825581][ C1] RAX: ffffffffffffffda RBX: 00007fb7a71b6080 RCX: 00007fb7a6f8e969 [ 302.833524][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 302.841468][ C1] RBP: 00007fb7a7010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 302.849410][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 302.857352][ C1] R13: 0000000000000000 R14: 00007fb7a71b6080 R15: 00007fffa4edb318 [ 302.865300][ C1] [ 302.868477][ C1] Kernel Offset: disabled [ 302.872776][ C1] Rebooting in 86400 seconds..