last executing test programs: 15.850190431s ago: executing program 1 (id=782): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000bc0), 0xffffffae) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "3525358a", {0x3, 0x7, 0x0, 0x80, 0x5, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 14.26227807s ago: executing program 2 (id=785): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x640c1) r1 = socket(0x10, 0x3, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x200400, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0xa82) dup(r5) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ipv6_route\x00') 13.030440454s ago: executing program 2 (id=790): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000400)={0x0, 0xbfa338a6fb9b770b, 0x1f, {0x1f, 0xb, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11.181493969s ago: executing program 1 (id=795): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 9.947855003s ago: executing program 1 (id=797): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 8.696049248s ago: executing program 2 (id=799): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_open_dev$loop(0x0, 0x4, 0x50000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x0, &(0x7f0000000240)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f00000000c0)={0x0, 0x400, "aa4ab5", 0x8, 0x10}) 8.694345018s ago: executing program 0 (id=800): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x79, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000800), 0x62, 0x12141, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0xa00, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) 8.684758949s ago: executing program 4 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r3, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 8.68145598s ago: executing program 1 (id=803): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_open_dev$loop(0x0, 0x4, 0x50000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x0, &(0x7f0000000240)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f00000000c0)={0x0, 0x400, "aa4ab5", 0x8, 0x10}) 7.325869386s ago: executing program 2 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='rpm_return_int\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 6.640380604s ago: executing program 2 (id=806): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 5.514788837s ago: executing program 0 (id=807): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 4.778032061s ago: executing program 1 (id=808): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, r1, 0x0) 4.777447021s ago: executing program 4 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r4, 0x560a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) pread64(r6, &(0x7f0000001440)=""/126, 0x7e, 0x2a) 4.775451111s ago: executing program 1 (id=811): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002f638d408f01002204db10100000109022d00010b0680080904"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400"], 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442) r4 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r4) write$hidraw(r3, &(0x7f0000000bc0), 0xffffffae) ioctl$HIDIOCGRDESC(r3, 0x401c5820, &(0x7f00000005c0)) syz_usb_connect(0x5, 0x24, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r3, 0x4030582a, &(0x7f0000000140)={0xa, "7954bbc8aae250bd2354"}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "3525358a", {0x3, 0x7, 0x0, 0x80, 0x5, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.774881301s ago: executing program 2 (id=812): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe000000000000010902"], 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442) r4 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(r4) write$hidraw(r3, &(0x7f0000000bc0), 0xffffffae) ioctl$HIDIOCGRDESC(r3, 0x401c5820, &(0x7f00000005c0)) syz_usb_connect(0x5, 0x24, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r3, 0x4030582a, &(0x7f0000000140)={0xa, "7954bbc8aae250bd2354"}) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x4, {0xe0, 0x20}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000680)={0x40, 0xb, 0x2, "449a"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "84c1"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x4}}) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "3525358a", {0x3, 0x7, 0x0, 0x80, 0x5, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.69166094s ago: executing program 3 (id=813): socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000080)={0x14, r5, 0x50be6fea6f3bd4bb, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000804) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 3.731518746s ago: executing program 4 (id=814): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x10) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) listen(r3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r3) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, r6, 0x0) 3.715186967s ago: executing program 3 (id=815): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_open_dev$loop(0x0, 0x4, 0x50000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x0, &(0x7f0000000240)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000000c0)={0x0, 0x400, "aa4ab5", 0x8, 0x10}) 3.673276071s ago: executing program 4 (id=816): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x282c418, &(0x7f0000003b80), 0x1, 0x512, &(0x7f0000000f80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) getpid() seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000380)=[{&(0x7f00000007c0)="4eabf2", 0x3}, {0x0}], 0x2) 3.530040576s ago: executing program 4 (id=817): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000e0000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) uname(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 3.414029748s ago: executing program 0 (id=818): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000e0000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 2.306231319s ago: executing program 3 (id=819): r0 = socket$packet(0x11, 0x3, 0x300) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x4}, 0x4) close(r0) 2.162128503s ago: executing program 0 (id=820): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200, 0x800) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, 0x0) 1.279958792s ago: executing program 4 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r3, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 1.244301585s ago: executing program 3 (id=822): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x10) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) listen(r3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close(r3) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, r6, 0x0) 1.241061326s ago: executing program 0 (id=823): bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r5, 0x0, 0x0) 1.128012957s ago: executing program 3 (id=824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000300)='./bus\x00', 0x2008002, &(0x7f00000003c0)={[{@commit={'commit', 0x3d, 0x5}}, {@noauto_da_alloc}, {@inlinecrypt}, {@discard}, {@oldalloc}]}, 0x1, 0x571, &(0x7f0000001440)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r2}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000500090000"], 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000000000000ac1e000100000000000000000000000020010000000000000000000000000000000000074e2010000200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}}, 0x804) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r8, 0x5) 135.291136ms ago: executing program 3 (id=825): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x79, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') read$FUSE(r7, &(0x7f00000004c0)={0x2020}, 0x2020) 0s ago: executing program 0 (id=826): socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000080)={0x14, r4, 0x50be6fea6f3bd4bb, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000804) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) kernel console output (not intermixed with test programs): 0: port 2(bridge_slave_1) entered forwarding state [ 28.143831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.151851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.166987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.175327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.184952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.193141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.206109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.214845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.229618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.237940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.256786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.265181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.273471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.282113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.300360][ T285] device veth0_vlan entered promiscuous mode [ 28.311248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.318978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.327181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.335312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.343366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.351470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.359608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.367259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.374906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.382420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.392254][ T284] device veth0_vlan entered promiscuous mode [ 28.404438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.413059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.421319][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.428375][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.436124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.443568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.451354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.459835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.468139][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.475207][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.482772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.491297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.499867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.508439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.516814][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.523841][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.532343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.540894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.549341][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.556397][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.567629][ T287] device veth0_vlan entered promiscuous mode [ 28.586531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.594788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.602964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.612477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.620780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.628955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.637043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.645325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.653257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.661518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.669936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.677538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.687995][ T285] device veth1_macvtap entered promiscuous mode [ 28.698196][ T284] device veth1_macvtap entered promiscuous mode [ 28.710671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.718564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.727133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.739957][ T287] device veth1_macvtap entered promiscuous mode [ 28.754736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.763106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.771763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.780058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.788574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.797297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.805537][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.813522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.821944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.832233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.840862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.860740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.869153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.877735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.886111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.895170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.903402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.917676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.926682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.935068][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 28.953852][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.962428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.970894][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.978645][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.986382][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.993926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.001709][ T288] device veth0_vlan entered promiscuous mode [ 29.019498][ T286] device veth0_vlan entered promiscuous mode [ 29.048331][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.064510][ T288] device veth1_macvtap entered promiscuous mode [ 29.087805][ T286] device veth1_macvtap entered promiscuous mode [ 29.103536][ T342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 29.111217][ T339] device syzkaller0 entered promiscuous mode [ 29.135685][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.155100][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.163935][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.174568][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.198326][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.231866][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.243989][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.258442][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.267151][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.276026][ T369] loop1: detected capacity change from 0 to 40427 [ 30.282970][ T369] ======================================================= [ 30.282970][ T369] WARNING: The mand mount option has been deprecated and [ 30.282970][ T369] and is ignored by this kernel. Remove the mand [ 30.282970][ T369] option from the mount to silence this warning. [ 30.282970][ T369] ======================================================= [ 30.334842][ T369] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9) [ 30.343198][ T369] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 30.353644][ T369] F2FS-fs (loop1): Unrecognized mount option "whint_mode=off" or missing value [ 30.382299][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 30.382348][ T28] audit: type=1400 audit(1762971972.276:128): avc: denied { create } for pid=363 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.442156][ T28] audit: type=1400 audit(1762971972.456:129): avc: denied { mounton } for pid=363 comm="syz.1.8" path="/syzcgroup/unified/syz1/syz1/bus" dev="cgroup2" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 30.504954][ T28] audit: type=1400 audit(1762971972.646:130): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 30.697925][ T379] 9pnet_fd: Insufficient options for proto=fd [ 30.767460][ T28] audit: type=1400 audit(1762971972.946:131): avc: denied { read write } for pid=383 comm="syz.3.14" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.814076][ T28] audit: type=1400 audit(1762971972.976:132): avc: denied { open } for pid=383 comm="syz.3.14" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.862895][ T28] audit: type=1400 audit(1762971972.976:133): avc: denied { ioctl } for pid=383 comm="syz.3.14" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.045708][ T28] audit: type=1400 audit(1762971973.206:134): avc: denied { create } for pid=382 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.216733][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.246346][ T28] audit: type=1400 audit(1762971973.806:135): avc: denied { create } for pid=390 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.415902][ T39] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.473036][ T39] usb 1-1: config 0 interface 0 has no altsetting 0 [ 32.529235][ T39] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 32.602376][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.690899][ T39] usb 1-1: config 0 descriptor?? [ 32.971690][ T28] audit: type=1400 audit(1762971975.146:136): avc: denied { create } for pid=398 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.993512][ T399] xt_hashlimit: size too large, truncated to 1048576 [ 33.021881][ T28] audit: type=1400 audit(1762971975.176:137): avc: denied { setopt } for pid=398 comm="syz.1.19" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.044090][ T222] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.084365][ T395] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 33.136874][ T39] zeroplus 0003:0C12:0005.0001: unknown main item tag 0x0 [ 33.154493][ T39] zeroplus 0003:0C12:0005.0001: unknown global tag 0xe [ 33.163285][ T39] zeroplus 0003:0C12:0005.0001: item 0 0 1 14 parsing failed [ 33.174381][ T39] zeroplus 0003:0C12:0005.0001: parse failed [ 33.180465][ T39] zeroplus: probe of 0003:0C12:0005.0001 failed with error -22 [ 33.274111][ T395] usb 5-1: Using ep0 maxpacket: 8 [ 33.275244][ T222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.280329][ T395] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.300077][ T222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.311308][ T222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.324743][ T222] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 33.333875][ T222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.335633][ T395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.343623][ T222] usb 4-1: config 0 descriptor?? [ 33.376045][ T395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.387306][ T395] usb 5-1: Product: syz [ 33.391534][ T395] usb 5-1: Manufacturer: syz [ 33.396322][ T395] usb 5-1: SerialNumber: syz [ 33.401653][ T39] usb 1-1: USB disconnect, device number 2 [ 33.918510][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.928893][ T222] wacom 0003:056A:00EC.0002: unknown main item tag 0x1 [ 33.936766][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.944967][ T222] wacom 0003:056A:00EC.0002: unknown main item tag 0x0 [ 33.953051][ T222] wacom 0003:056A:00EC.0002: unknown main item tag 0x0 [ 33.960443][ T222] wacom 0003:056A:00EC.0002: unknown main item tag 0x0 [ 33.967537][ T222] wacom 0003:056A:00EC.0002: unknown main item tag 0x0 [ 33.985119][ T222] wacom 0003:056A:00EC.0002: hidraw0: USB HID v0.00 Device [HID 056a:00ec] on usb-dummy_hcd.3-1/input0 [ 34.071570][ T411] loop1: detected capacity change from 0 to 40427 [ 34.105716][ T411] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9) [ 34.114070][ T411] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.122499][ T411] F2FS-fs (loop1): Unrecognized mount option "whint_mode=off" or missing value [ 34.144328][ T39] usb 4-1: USB disconnect, device number 2 [ 34.168214][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.178392][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.209190][ T418] loop2: detected capacity change from 0 to 256 [ 34.221217][ T418] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 36.914871][ T414] fido_id[414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 36.955343][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 36.955358][ T28] audit: type=1400 audit(1762971979.136:148): avc: denied { create } for pid=422 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.983738][ T424] device syzkaller0 entered promiscuous mode [ 37.283324][ T395] cdc_ncm 5-1:1.0: bind() failure [ 37.289655][ T395] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 37.296541][ T395] cdc_ncm 5-1:1.1: bind() failure [ 37.309745][ T395] usb 5-1: USB disconnect, device number 2 [ 37.323604][ T28] audit: type=1400 audit(1762971979.496:149): avc: denied { create } for pid=432 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.353105][ T28] audit: type=1400 audit(1762971979.526:150): avc: denied { write } for pid=422 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.486943][ T28] audit: type=1400 audit(1762971979.666:151): avc: denied { create } for pid=437 comm="syz.1.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.631466][ T28] audit: type=1400 audit(1762971979.736:152): avc: denied { create } for pid=428 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.892556][ T28] audit: type=1400 audit(1762971980.066:153): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.036744][ T28] audit: type=1400 audit(1762971980.216:154): avc: denied { read } for pid=429 comm="syz.4.27" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.097423][ T28] audit: type=1400 audit(1762971980.236:155): avc: denied { open } for pid=429 comm="syz.4.27" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.164732][ T28] audit: type=1400 audit(1762971980.236:156): avc: denied { ioctl } for pid=429 comm="syz.4.27" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.246320][ T28] audit: type=1400 audit(1762971980.236:157): avc: denied { set_context_mgr } for pid=429 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.630319][ T474] loop1: detected capacity change from 0 to 256 [ 39.668355][ T474] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 42.751696][ T420] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 42.902604][ T485] netlink: 'syz.0.38': attribute type 195 has an invalid length. [ 42.915437][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 42.915463][ T28] audit: type=1400 audit(1762971985.066:159): avc: denied { write } for pid=482 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.313236][ T28] audit: type=1400 audit(1762971985.066:160): avc: denied { read } for pid=482 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.995544][ T492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.024281][ T492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.067861][ T492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.094295][ T496] loop3: detected capacity change from 0 to 2048 [ 46.104175][ T420] usb 2-1: Using ep0 maxpacket: 8 [ 46.124093][ T222] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.132045][ T492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.157383][ T420] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.176218][ T496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.192587][ T420] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.267189][ T28] audit: type=1400 audit(1762971988.386:161): avc: denied { mount } for pid=495 comm="syz.3.43" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.283053][ T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.296983][ T420] usb 2-1: Product: syz [ 46.301267][ T420] usb 2-1: Manufacturer: syz [ 46.305934][ T420] usb 2-1: SerialNumber: syz [ 46.375782][ T222] usb 5-1: device descriptor read/all, error -71 [ 46.773850][ T28] audit: type=1400 audit(1762971988.876:162): avc: denied { create } for pid=512 comm="syz.4.44" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.014497][ T28] audit: type=1400 audit(1762971988.986:163): avc: denied { mounton } for pid=512 comm="syz.4.44" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.344023][ C0] sched: RT throttling activated [ 47.496367][ T420] cdc_ncm 2-1:1.0: bind() failure [ 47.525409][ T420] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 47.534339][ T420] cdc_ncm 2-1:1.1: bind() failure [ 47.540851][ T420] usb 2-1: USB disconnect, device number 2 [ 47.547544][ T28] audit: type=1400 audit(1762971989.716:164): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.592309][ T28] audit: type=1400 audit(1762971989.766:165): avc: denied { read } for pid=519 comm="syz.1.47" dev="nsfs" ino=4026532472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.615089][ T28] audit: type=1400 audit(1762971989.766:166): avc: denied { open } for pid=519 comm="syz.1.47" path="net:[4026532472]" dev="nsfs" ino=4026532472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.854219][ T395] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 47.944467][ T285] EXT4-fs (loop3): unmounting filesystem. [ 48.084078][ T395] usb 3-1: Using ep0 maxpacket: 8 [ 48.090340][ T395] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 48.138615][ T395] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 48.184490][ T395] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 48.194263][ T395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.397946][ T28] audit: type=1400 audit(1762971990.576:167): avc: denied { write } for pid=531 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.427345][ T395] usb 3-1: USB disconnect, device number 2 [ 48.484099][ T420] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 48.501501][ T28] audit: type=1400 audit(1762971990.676:168): avc: denied { create } for pid=534 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.521003][ T28] audit: type=1400 audit(1762971990.676:169): avc: denied { setopt } for pid=534 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.700319][ T28] audit: type=1400 audit(1762971990.866:170): avc: denied { bind } for pid=534 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.735972][ T420] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.798238][ T420] usb 4-1: config 0 interface 0 has no altsetting 0 [ 48.829839][ T541] 9pnet_fd: Insufficient options for proto=fd [ 48.883660][ T420] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 49.015592][ T28] audit: type=1400 audit(1762971990.866:171): avc: denied { write } for pid=534 comm="syz.0.50" path="socket:[16215]" dev="sockfs" ino=16215 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.068900][ T420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.207354][ T420] usb 4-1: config 0 descriptor?? [ 50.715016][ T554] loop0: detected capacity change from 0 to 256 [ 50.740733][ T420] usbhid 4-1:0.0: can't add hid device: -71 [ 50.747674][ T420] usbhid: probe of 4-1:0.0 failed with error -71 [ 50.759483][ T554] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 50.819882][ T420] usb 4-1: USB disconnect, device number 3 [ 51.240379][ T28] audit: type=1400 audit(1762971993.396:172): avc: denied { create } for pid=557 comm="syz.1.56" name="cgroup.freeze" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.397290][ T28] audit: type=1400 audit(1762971993.396:173): avc: denied { read append open } for pid=557 comm="syz.1.56" path="/syzcgroup/unified/syz1/syz1/cgroup.freeze" dev="loop1" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.204122][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 53.395125][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.424077][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.454058][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.487197][ T6] usb 3-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 53.517469][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.547618][ T6] usb 3-1: config 0 descriptor?? [ 53.884397][ T579] syz.4.62[579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.884477][ T579] syz.4.62[579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.897306][ T579] xt_policy: neither incoming nor outgoing policy selected [ 53.967128][ T6] wacom 0003:056A:00EC.0003: unknown main item tag 0x1 [ 53.980384][ T6] wacom 0003:056A:00EC.0003: unknown main item tag 0x0 [ 53.987635][ T6] wacom 0003:056A:00EC.0003: unknown main item tag 0x0 [ 53.994739][ T6] wacom 0003:056A:00EC.0003: unknown main item tag 0x0 [ 54.003592][ T6] wacom 0003:056A:00EC.0003: unknown main item tag 0x0 [ 54.012623][ T6] wacom 0003:056A:00EC.0003: hidraw0: USB HID v0.00 Device [HID 056a:00ec] on usb-dummy_hcd.2-1/input0 [ 54.056898][ T586] loop3: detected capacity change from 0 to 256 [ 54.084779][ T586] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 54.177222][ T6] usb 3-1: USB disconnect, device number 3 [ 54.874069][ T420] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 55.072291][ T420] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.174074][ T420] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.180745][ T420] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 55.204077][ T420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.212897][ T420] usb 5-1: config 0 descriptor?? [ 55.397418][ T28] audit: type=1400 audit(1762971997.576:174): avc: denied { create } for pid=597 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.436823][ T28] audit: type=1400 audit(1762971997.606:175): avc: denied { write } for pid=597 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 55.574060][ T222] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 55.628737][ T420] zeroplus 0003:0C12:0005.0004: unknown main item tag 0x0 [ 55.646102][ T420] zeroplus 0003:0C12:0005.0004: unknown global tag 0xe [ 55.667207][ T420] zeroplus 0003:0C12:0005.0004: item 0 0 1 14 parsing failed [ 55.687946][ T420] zeroplus 0003:0C12:0005.0004: parse failed [ 55.706103][ T420] zeroplus: probe of 0003:0C12:0005.0004 failed with error -22 [ 55.765166][ T222] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.789606][ T222] usb 2-1: config 0 interface 0 has no altsetting 0 [ 55.806633][ T222] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 55.834068][ T222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.846902][ T420] usb 5-1: USB disconnect, device number 5 [ 55.857589][ T222] usb 2-1: config 0 descriptor?? [ 56.475692][ T222] usbhid 2-1:0.0: can't add hid device: -71 [ 56.481693][ T222] usbhid: probe of 2-1:0.0 failed with error -71 [ 56.515166][ T222] usb 2-1: USB disconnect, device number 3 [ 57.023867][ T625] device syzkaller0 entered promiscuous mode [ 57.531839][ T222] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 58.643986][ T28] audit: type=1326 audit(1762972000.816:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=646 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 58.667217][ T28] audit: type=1326 audit(1762972000.826:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=646 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 58.686261][ T222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.691636][ T28] audit: type=1326 audit(1762972000.826:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=646 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 58.723723][ T222] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.729444][ T28] audit: type=1326 audit(1762972000.826:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=646 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 58.740930][ T222] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.760333][ T28] audit: type=1326 audit(1762972000.826:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=646 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 58.770015][ T222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.792286][ T28] audit: type=1326 audit(1762972000.826:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=646 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 58.802345][ T222] usb 5-1: config 0 descriptor?? [ 58.839143][ T222] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 58.899495][ T28] audit: type=1326 audit(1762972000.826:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=646 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 58.928356][ T28] audit: type=1326 audit(1762972000.826:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=646 comm="syz.0.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 59.971067][ T371] usb 5-1: USB disconnect, device number 6 [ 62.164238][ T420] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 62.376182][ T420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.400174][ T420] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.434296][ T420] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.463616][ T420] usb 5-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 62.482701][ T420] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.515213][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 62.515228][ T28] audit: type=1400 audit(1762972004.696:201): avc: denied { name_bind } for pid=687 comm="syz.1.93" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 62.543099][ T420] usb 5-1: config 0 descriptor?? [ 62.555991][ T689] netlink: 'syz.2.92': attribute type 195 has an invalid length. [ 62.572684][ T28] audit: type=1400 audit(1762972004.726:202): avc: denied { node_bind } for pid=687 comm="syz.1.93" saddr=::ffff:172.20.20.46 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.044702][ T420] wacom 0003:056A:00EC.0005: unknown main item tag 0x1 [ 63.099757][ T420] wacom 0003:056A:00EC.0005: unknown main item tag 0x0 [ 63.114126][ T420] wacom 0003:056A:00EC.0005: unknown main item tag 0x0 [ 63.121238][ T420] wacom 0003:056A:00EC.0005: unknown main item tag 0x0 [ 63.128435][ T420] wacom 0003:056A:00EC.0005: unknown main item tag 0x0 [ 63.144178][ T420] wacom 0003:056A:00EC.0005: hidraw0: USB HID v0.00 Device [HID 056a:00ec] on usb-dummy_hcd.4-1/input0 [ 63.254324][ T420] usb 5-1: USB disconnect, device number 7 [ 64.048991][ T714] loop4: detected capacity change from 0 to 4096 [ 64.101127][ T714] EXT4-fs (loop4): Test dummy encryption mode enabled [ 64.151851][ T714] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 64.253301][ T714] System zones: 0-5 [ 64.310497][ T714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.327950][ T28] audit: type=1400 audit(1762972006.506:203): avc: denied { mount } for pid=710 comm="syz.4.98" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.362799][ T719] device syzkaller0 entered promiscuous mode [ 64.388485][ T28] audit: type=1400 audit(1762972006.536:204): avc: denied { relabelfrom } for pid=718 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.472998][ T28] audit: type=1400 audit(1762972006.536:205): avc: denied { relabelto } for pid=718 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.523403][ T28] audit: type=1400 audit(1762972006.566:206): avc: denied { getopt } for pid=710 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.764172][ T28] audit: type=1400 audit(1762972006.746:207): avc: denied { write } for pid=721 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.896474][ T28] audit: type=1400 audit(1762972006.746:208): avc: denied { nlmsg_write } for pid=721 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.052193][ T722] syz.2.100 (722) used greatest stack depth: 20896 bytes left [ 65.584072][ T371] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 65.815121][ T371] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 65.833580][ T371] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 66.285928][ T753] syz.3.106[753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.286370][ T753] syz.3.106[753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.132503][ T753] xt_policy: neither incoming nor outgoing policy selected [ 67.196535][ T28] audit: type=1400 audit(1762972009.306:209): avc: denied { bind } for pid=746 comm="syz.3.106" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.858113][ T371] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 67.867518][ T371] usb 3-1: config 220 has no interface number 1 [ 67.875707][ T371] usb 3-1: config 220 interface 0 has no altsetting 0 [ 67.883916][ T371] usb 3-1: config 220 interface 76 has no altsetting 0 [ 67.893936][ T371] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 67.903212][ T371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.911954][ T371] usb 3-1: Product: syz [ 67.917235][ T371] usb 3-1: Manufacturer: syz [ 67.921942][ T371] usb 3-1: SerialNumber: syz [ 68.149777][ T371] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 68.181396][ T371] usb 3-1: No valid video chain found. [ 68.358517][ T395] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 68.426980][ T371] usb 3-1: USB disconnect, device number 4 [ 68.584091][ T395] usb 4-1: Using ep0 maxpacket: 8 [ 68.590774][ T395] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.610302][ T395] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.632932][ T395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.641194][ T395] usb 4-1: Product: syz [ 68.645635][ T395] usb 4-1: Manufacturer: syz [ 68.650274][ T395] usb 4-1: SerialNumber: syz [ 68.724443][ T28] audit: type=1400 audit(1762972010.906:210): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.747419][ T287] EXT4-fs (loop4): unmounting filesystem. [ 68.840303][ T777] device syzkaller0 entered promiscuous mode [ 69.065542][ T763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.086579][ T763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.394741][ T763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.434499][ T763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.454073][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 69.655153][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.676340][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.704046][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.733436][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.754852][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.773369][ T24] usb 5-1: config 0 descriptor?? [ 70.021796][ T395] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 70.030684][ T395] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 70.184143][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 70.190593][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 70.219188][ T24] usb 5-1: USB disconnect, device number 8 [ 70.236209][ T395] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 70.274965][ T395] usb 4-1: USB disconnect, device number 4 [ 70.280870][ T28] audit: type=1400 audit(1762972012.456:211): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 70.312772][ T395] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 70.365582][ T28] audit: type=1400 audit(1762972012.456:212): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=1239 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.424149][ T28] audit: type=1400 audit(1762972012.456:213): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1239 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.484350][ T28] audit: type=1400 audit(1762972012.456:214): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1239 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.544627][ T28] audit: type=1400 audit(1762972012.516:215): avc: denied { search } for pid=790 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.593179][ T28] audit: type=1400 audit(1762972012.596:216): avc: denied { read } for pid=794 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.623534][ T803] syz.0.121[803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.623630][ T803] syz.0.121[803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.635834][ T803] xt_policy: neither incoming nor outgoing policy selected [ 70.739243][ T28] audit: type=1400 audit(1762972012.596:217): avc: denied { open } for pid=794 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.775041][ T28] audit: type=1400 audit(1762972012.596:218): avc: denied { getattr } for pid=794 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.802237][ T28] audit: type=1400 audit(1762972012.846:219): avc: denied { ioctl } for pid=778 comm="syz.2.116" path="socket:[18441]" dev="sockfs" ino=18441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.672648][ T824] loop4: detected capacity change from 0 to 256 [ 74.695991][ T824] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 74.776878][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 74.776921][ T28] audit: type=1400 audit(1762972016.956:225): avc: denied { remove_name } for pid=811 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1254 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.871909][ T28] audit: type=1400 audit(1762972016.986:226): avc: denied { unlink } for pid=811 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1254 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 75.905544][ T28] audit: type=1400 audit(1762972018.086:227): avc: denied { load_policy } for pid=842 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 75.905582][ T843] SELinux: failed to load policy [ 75.945524][ T846] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 76.484049][ T826] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 77.004594][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.024086][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.077608][ T826] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.106821][ T826] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 77.134223][ T826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.150505][ T826] usb 4-1: config 0 descriptor?? [ 77.597531][ T395] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.627902][ T28] audit: type=1400 audit(1762972019.796:228): avc: denied { write } for pid=890 comm="syz.1.141" name="cgroup.freeze" dev="loop1" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.006904][ T395] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.033802][ T395] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.078695][ T826] wacom 0003:056A:00EC.0006: unknown main item tag 0x1 [ 78.085722][ T826] wacom 0003:056A:00EC.0006: unknown main item tag 0x0 [ 78.087834][ T395] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 78.092699][ T826] wacom 0003:056A:00EC.0006: unknown main item tag 0x0 [ 78.108692][ T826] wacom 0003:056A:00EC.0006: unknown main item tag 0x0 [ 78.115685][ T826] wacom 0003:056A:00EC.0006: unknown main item tag 0x0 [ 78.117261][ T395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.132070][ T826] wacom 0003:056A:00EC.0006: hidraw0: USB HID v0.00 Device [HID 056a:00ec] on usb-dummy_hcd.3-1/input0 [ 78.144620][ T395] usb 1-1: config 0 descriptor?? [ 78.146096][ T826] usb 4-1: USB disconnect, device number 5 [ 78.173756][ T898] fido_id[898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 78.567910][ T395] zeroplus 0003:0C12:0005.0007: unknown main item tag 0x0 [ 78.578686][ T395] zeroplus 0003:0C12:0005.0007: unknown global tag 0xe [ 78.591799][ T395] zeroplus 0003:0C12:0005.0007: item 0 0 1 14 parsing failed [ 78.600479][ T395] zeroplus 0003:0C12:0005.0007: parse failed [ 78.606851][ T395] zeroplus: probe of 0003:0C12:0005.0007 failed with error -22 [ 78.815257][ T826] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 79.290063][ T24] usb 1-1: USB disconnect, device number 3 [ 79.524654][ T919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.574108][ T826] usb 5-1: Using ep0 maxpacket: 8 [ 79.580383][ T826] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 79.588829][ T826] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 79.599289][ T826] usb 5-1: config 179 has no interface number 0 [ 79.605652][ T826] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 79.624990][ T826] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 79.638525][ T826] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.647878][ T826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.686631][ T28] audit: type=1326 audit(1762972021.866:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.712019][ T28] audit: type=1326 audit(1762972021.866:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.735697][ T28] audit: type=1326 audit(1762972021.866:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.759098][ T28] audit: type=1326 audit(1762972021.866:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.783385][ T28] audit: type=1326 audit(1762972021.866:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.807790][ T28] audit: type=1326 audit(1762972021.866:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.831202][ T28] audit: type=1400 audit(1762972021.866:235): avc: denied { bind } for pid=924 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.850641][ T28] audit: type=1326 audit(1762972021.866:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.891131][ T826] usb 5-1: USB disconnect, device number 9 [ 79.905424][ T28] audit: type=1326 audit(1762972021.866:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.928998][ T28] audit: type=1326 audit(1762972021.866:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 79.988957][ T28] audit: type=1400 audit(1762972021.866:239): avc: denied { connect } for pid=924 comm="syz.3.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.009351][ T28] audit: type=1326 audit(1762972021.866:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 80.033121][ T28] audit: type=1326 audit(1762972021.866:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 80.056647][ T28] audit: type=1326 audit(1762972021.866:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 80.080163][ T28] audit: type=1326 audit(1762972021.866:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=924 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5017f8f6c9 code=0x7ffc0000 [ 83.124215][ T540] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.300589][ T965] device syzkaller0 entered promiscuous mode [ 83.326232][ T540] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.336188][ T540] usb 4-1: config 0 interface 0 has no altsetting 0 [ 83.343010][ T540] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 83.370838][ T540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.392804][ T540] usb 4-1: config 0 descriptor?? [ 83.704086][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.835542][ T540] zeroplus 0003:0C12:0005.0008: unknown main item tag 0x0 [ 83.844982][ T540] zeroplus 0003:0C12:0005.0008: unknown global tag 0xe [ 83.855295][ T540] zeroplus 0003:0C12:0005.0008: item 0 0 1 14 parsing failed [ 83.868405][ T540] zeroplus 0003:0C12:0005.0008: parse failed [ 83.877798][ T540] zeroplus: probe of 0003:0C12:0005.0008 failed with error -22 [ 83.904061][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 83.910327][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.929304][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.942868][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.971375][ T24] usb 5-1: Product: syz [ 83.975744][ T24] usb 5-1: Manufacturer: syz [ 83.980379][ T24] usb 5-1: SerialNumber: syz [ 84.081899][ T395] usb 4-1: USB disconnect, device number 6 [ 84.598789][ T973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.614735][ T973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.851442][ T996] device syzkaller0 entered promiscuous mode [ 84.945784][ T999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.971447][ T999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.848569][ T24] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 85.858524][ T24] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 86.114755][ T24] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 86.174634][ T24] usb 5-1: USB disconnect, device number 10 [ 86.198287][ T24] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 86.504921][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 86.504936][ T28] audit: type=1400 audit(1762972028.686:259): avc: denied { map } for pid=1014 comm="syz.2.179" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.544362][ T395] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 87.224128][ T395] usb 4-1: Using ep0 maxpacket: 8 [ 87.674213][ T395] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.724760][ T395] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 87.784855][ T395] usb 4-1: config 179 has no interface number 0 [ 87.791165][ T395] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 87.832059][ T395] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 87.878764][ T395] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 87.903750][ T395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.135337][ T395] usb 4-1: USB disconnect, device number 7 [ 88.459281][ T28] audit: type=1400 audit(1762972030.636:260): avc: denied { setopt } for pid=1068 comm="syz.0.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.583448][ T1071] SELinux: failed to load policy [ 89.816384][ T1086] syz.4.192[1086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.816574][ T1086] syz.4.192[1086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.829825][ T1086] xt_policy: neither incoming nor outgoing policy selected [ 90.294358][ T1087] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.221363][ T28] audit: type=1400 audit(1762972033.396:261): avc: denied { write } for pid=1107 comm="syz.4.199" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.224197][ T222] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 91.374039][ T1087] usb 2-1: Using ep0 maxpacket: 8 [ 91.384968][ T1087] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.427367][ T1087] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.471479][ T1087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.520493][ T1087] usb 2-1: Product: syz [ 91.553310][ T1087] usb 2-1: Manufacturer: syz [ 91.596070][ T222] usb 4-1: Using ep0 maxpacket: 8 [ 91.621376][ T1087] usb 2-1: SerialNumber: syz [ 92.756996][ T1116] binder: 1113:1116 ioctl 4018620d 0 returned -22 [ 93.014150][ T222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.065685][ T1087] cdc_ncm 2-1:1.0: bind() failure [ 93.074086][ T1087] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 93.085995][ T1087] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 93.091525][ T222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.106771][ T1087] usb 2-1: USB disconnect, device number 4 [ 93.138381][ T222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.156900][ T222] usb 4-1: Product: syz [ 93.164217][ T222] usb 4-1: Manufacturer: syz [ 93.181432][ T222] usb 4-1: SerialNumber: syz [ 93.879712][ T1103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.889387][ T1103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.914092][ T1087] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.099853][ T1103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.109979][ T1087] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 94.119632][ T1103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.126366][ T1087] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 94.209124][ T1087] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 94.218707][ T1087] usb 2-1: config 220 has no interface number 1 [ 94.225191][ T1087] usb 2-1: config 220 interface 0 has no altsetting 0 [ 94.231994][ T1087] usb 2-1: config 220 interface 76 has no altsetting 0 [ 94.240920][ T1087] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 94.250369][ T1087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.258682][ T1087] usb 2-1: Product: syz [ 94.263171][ T1087] usb 2-1: Manufacturer: syz [ 94.270291][ T1087] usb 2-1: SerialNumber: syz [ 94.540758][ T222] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 94.549981][ T222] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 94.552202][ T1087] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 94.566654][ T1087] usb 2-1: No valid video chain found. [ 94.609699][ T1087] usb 2-1: USB disconnect, device number 5 [ 94.754386][ T222] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 94.800048][ T222] usb 4-1: USB disconnect, device number 8 [ 94.819882][ T222] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 95.269592][ T1147] device veth3 entered promiscuous mode [ 95.475824][ T1173] fuse: Bad value for 'fd' [ 95.654075][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.277352][ T39] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.348630][ T39] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.944120][ T39] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 96.953356][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.055969][ T39] usb 1-1: config 0 descriptor?? [ 97.467066][ T39] zeroplus 0003:0C12:0005.0009: unknown main item tag 0x0 [ 97.491418][ T39] zeroplus 0003:0C12:0005.0009: unknown global tag 0xe [ 97.510846][ T39] zeroplus 0003:0C12:0005.0009: item 0 0 1 14 parsing failed [ 97.529425][ T1206] SELinux: failed to load policy [ 97.534284][ T39] zeroplus 0003:0C12:0005.0009: parse failed [ 97.547923][ T39] zeroplus: probe of 0003:0C12:0005.0009 failed with error -22 [ 97.673594][ T39] usb 1-1: USB disconnect, device number 4 [ 97.958674][ T1217] fuse: Bad value for 'fd' [ 98.074082][ T222] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.264059][ T222] usb 2-1: Using ep0 maxpacket: 8 [ 98.270532][ T222] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 98.298534][ T222] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 98.333818][ T222] usb 2-1: config 179 has no interface number 0 [ 98.355684][ T222] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 98.569897][ T222] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 98.687297][ T222] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 98.711980][ T222] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 98.726330][ T222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.964135][ T39] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.536830][ T39] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.556830][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.563497][ T39] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 99.633566][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.668073][ T39] usb 4-1: config 0 descriptor?? [ 99.668706][ T1208] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 100.089516][ T39] zeroplus 0003:0C12:0005.000A: unknown main item tag 0x0 [ 100.126814][ T39] zeroplus 0003:0C12:0005.000A: unknown global tag 0xe [ 100.165806][ T19] usb 2-1: USB disconnect, device number 6 [ 100.182558][ T39] zeroplus 0003:0C12:0005.000A: item 0 0 1 14 parsing failed [ 100.197413][ T39] zeroplus 0003:0C12:0005.000A: parse failed [ 100.208833][ T39] zeroplus: probe of 0003:0C12:0005.000A failed with error -22 [ 100.293755][ T222] usb 4-1: USB disconnect, device number 9 [ 101.214127][ T39] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 101.885460][ T39] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 101.897138][ T39] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 101.923035][ T39] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 101.933622][ T39] usb 5-1: config 220 has no interface number 1 [ 101.940128][ T39] usb 5-1: config 220 interface 0 has no altsetting 0 [ 101.947196][ T39] usb 5-1: config 220 interface 76 has no altsetting 0 [ 101.965247][ T39] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 101.974529][ T395] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.982058][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.990484][ T39] usb 5-1: Product: syz [ 101.994742][ T39] usb 5-1: Manufacturer: syz [ 101.999447][ T39] usb 5-1: SerialNumber: syz [ 102.174056][ T395] usb 2-1: Using ep0 maxpacket: 8 [ 102.180389][ T395] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.193272][ T395] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.204526][ T395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.213135][ T395] usb 2-1: Product: syz [ 102.242228][ T39] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 102.266610][ T395] usb 2-1: Manufacturer: syz [ 102.271612][ T39] usb 5-1: No valid video chain found. [ 102.278648][ T395] usb 2-1: SerialNumber: syz [ 102.350302][ T39] usb 5-1: USB disconnect, device number 11 [ 102.709127][ T28] audit: type=1326 audit(1762972044.886:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 102.733349][ T28] audit: type=1326 audit(1762972044.886:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 102.757191][ T28] audit: type=1326 audit(1762972044.906:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 102.780576][ T28] audit: type=1326 audit(1762972044.906:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 102.804244][ T28] audit: type=1326 audit(1762972044.906:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 102.827841][ T28] audit: type=1326 audit(1762972044.936:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 102.851330][ T28] audit: type=1326 audit(1762972044.936:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 102.851522][ T1251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.874611][ T28] audit: type=1326 audit(1762972044.936:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 102.914283][ T1251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.972794][ T28] audit: type=1326 audit(1762972044.956:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 103.022565][ T28] audit: type=1326 audit(1762972044.956:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1270 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3932d8f6c9 code=0x7ffc0000 [ 103.734559][ T1251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.743071][ T1251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.819545][ T1292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.975788][ T1292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.190076][ T395] cdc_ncm 2-1:1.0: bind() failure [ 108.199501][ T395] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 108.305229][ T395] cdc_ncm 2-1:1.1: bind() failure [ 108.340417][ T395] usb 2-1: USB disconnect, device number 7 [ 116.725914][ T1423] binder: BINDER_SET_CONTEXT_MGR already set [ 116.731978][ T1423] binder: 1419:1423 ioctl 4018620d 200000000040 returned -16 [ 117.390102][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 117.390117][ T28] audit: type=1400 audit(1762972059.566:279): avc: denied { create } for pid=1432 comm="syz.2.286" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.742321][ T28] audit: type=1400 audit(1762972060.856:280): avc: denied { mounton } for pid=1432 comm="syz.2.286" path="/62/file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.162014][ T28] audit: type=1400 audit(1762972061.336:281): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.444071][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.684376][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 119.697003][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.776591][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.014094][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.022173][ T24] usb 1-1: Product: syz [ 120.026712][ T24] usb 1-1: Manufacturer: syz [ 120.031367][ T24] usb 1-1: SerialNumber: syz [ 120.245010][ T1446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.262280][ T1446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.524239][ T1446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.532783][ T1446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.701577][ T1475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.734108][ T1475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.973087][ T24] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 121.983029][ T24] cdc_ncm 1-1:1.0: bind() failure [ 121.994376][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 122.004043][ T771] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.011351][ T24] cdc_ncm 1-1:1.1: bind() failure [ 122.194021][ T771] usb 2-1: Using ep0 maxpacket: 8 [ 122.204326][ T771] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 122.212653][ T771] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 122.253378][ T771] usb 2-1: config 179 has no interface number 0 [ 122.259926][ T771] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 122.281184][ T771] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 122.302622][ T771] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 122.334061][ T771] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 122.353347][ T771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.373918][ T1479] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 122.593248][ T771] usb 2-1: USB disconnect, device number 8 [ 123.255308][ T395] usb 1-1: USB disconnect, device number 5 [ 123.455174][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.760944][ T395] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.944048][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 123.953025][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.975120][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.094413][ T395] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.116050][ T395] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.150139][ T395] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 124.303575][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.314301][ T395] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.327478][ T19] usb 3-1: Product: syz [ 124.336928][ T19] usb 3-1: Manufacturer: syz [ 124.346719][ T19] usb 3-1: SerialNumber: syz [ 124.358505][ T395] usb 1-1: config 0 descriptor?? [ 124.483876][ T28] audit: type=1326 audit(1762972066.656:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.507379][ T28] audit: type=1326 audit(1762972066.656:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.531209][ T28] audit: type=1326 audit(1762972066.656:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.557520][ T28] audit: type=1326 audit(1762972066.656:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.594069][ T1523] binder: 1518:1523 ioctl 4018620d 0 returned -22 [ 124.631779][ T28] audit: type=1326 audit(1762972066.656:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.836259][ T28] audit: type=1326 audit(1762972066.656:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.870070][ T28] audit: type=1326 audit(1762972066.656:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.885940][ T1503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.899618][ T28] audit: type=1326 audit(1762972066.656:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.903258][ T1503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.928202][ T28] audit: type=1326 audit(1762972066.656:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.956806][ T28] audit: type=1326 audit(1762972066.656:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1521 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 124.958820][ T395] zeroplus 0003:0C12:0005.000B: unknown main item tag 0x0 [ 124.992200][ T395] zeroplus 0003:0C12:0005.000B: unknown global tag 0xe [ 124.999149][ T395] zeroplus 0003:0C12:0005.000B: item 0 0 1 14 parsing failed [ 125.014190][ T395] zeroplus 0003:0C12:0005.000B: parse failed [ 125.020245][ T395] zeroplus: probe of 0003:0C12:0005.000B failed with error -22 [ 125.192949][ T1503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.264430][ T1503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.300877][ T395] usb 1-1: USB disconnect, device number 6 [ 125.672401][ T1540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.695347][ T1540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.982566][ T1549] netlink: 'syz.1.319': attribute type 195 has an invalid length. [ 126.214713][ T395] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 126.379751][ T19] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 126.386347][ T19] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 126.404045][ T395] usb 5-1: Using ep0 maxpacket: 8 [ 126.410424][ T395] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.423056][ T395] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.432320][ T395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.440445][ T395] usb 5-1: Product: syz [ 126.444848][ T395] usb 5-1: Manufacturer: syz [ 126.449535][ T395] usb 5-1: SerialNumber: syz [ 126.585058][ T19] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 126.606714][ T19] usb 3-1: USB disconnect, device number 5 [ 126.627398][ T19] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 126.663480][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.679423][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.914292][ T1542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.922803][ T1542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.467304][ T1586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.493645][ T1586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.623095][ T395] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 128.662588][ T395] cdc_ncm 5-1:1.0: bind() failure [ 128.783118][ T395] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 128.813886][ T395] cdc_ncm 5-1:1.1: bind() failure [ 129.691768][ T395] usb 5-1: USB disconnect, device number 12 [ 131.314105][ T222] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 131.524031][ T222] usb 4-1: Using ep0 maxpacket: 8 [ 131.530355][ T222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.563146][ T222] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.587014][ T222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.598771][ T222] usb 4-1: Product: syz [ 131.614037][ T222] usb 4-1: Manufacturer: syz [ 131.624176][ T222] usb 4-1: SerialNumber: syz [ 131.774035][ T420] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.994342][ T420] usb 1-1: Using ep0 maxpacket: 8 [ 132.001221][ T420] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.086410][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.102401][ T420] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.145231][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.215725][ T420] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.294573][ T420] usb 1-1: Product: syz [ 132.310427][ T420] usb 1-1: Manufacturer: syz [ 132.323382][ T420] usb 1-1: SerialNumber: syz [ 132.448184][ T1636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.464983][ T1636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.510289][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 132.510325][ T28] audit: type=1400 audit(1762972074.686:295): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 132.748989][ T1646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.767495][ T1646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.801774][ T1670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.824180][ T1670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.834113][ T771] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.012815][ T1646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.022317][ T1646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.041898][ T771] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.074019][ T771] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.080732][ T771] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 133.104021][ T771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.114752][ T771] usb 3-1: config 0 descriptor?? [ 133.259157][ T222] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 133.265748][ T222] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 133.435020][ T420] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 133.441632][ T420] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 133.468274][ T222] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 133.488213][ T222] usb 4-1: USB disconnect, device number 10 [ 133.498942][ T222] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 133.504047][ T540] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 133.526341][ T771] zeroplus 0003:0C12:0005.000C: unknown main item tag 0x0 [ 133.533545][ T771] zeroplus 0003:0C12:0005.000C: unknown global tag 0xe [ 133.546028][ T771] zeroplus 0003:0C12:0005.000C: item 0 0 1 14 parsing failed [ 133.559099][ T771] zeroplus 0003:0C12:0005.000C: parse failed [ 133.578914][ T771] zeroplus: probe of 0003:0C12:0005.000C failed with error -22 [ 133.638026][ T420] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 133.655589][ T420] usb 1-1: USB disconnect, device number 7 [ 133.661946][ T420] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 133.705182][ T540] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 133.717880][ T540] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 133.743111][ T540] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 133.757218][ T540] usb 5-1: config 220 has no interface number 2 [ 133.765215][ T540] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.779300][ T540] usb 5-1: config 220 interface 0 has no altsetting 0 [ 133.795086][ T540] usb 5-1: config 220 interface 76 has no altsetting 0 [ 133.802101][ T540] usb 5-1: config 220 interface 1 has no altsetting 0 [ 133.812309][ T60] usb 3-1: USB disconnect, device number 6 [ 133.821656][ T540] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 133.836031][ T540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.844461][ T540] usb 5-1: Product: syz [ 133.848746][ T540] usb 5-1: Manufacturer: syz [ 133.853388][ T540] usb 5-1: SerialNumber: syz [ 134.072584][ T1708] device syzkaller0 entered promiscuous mode [ 134.080865][ T540] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 134.087370][ T540] usb 5-1: No valid video chain found. [ 134.105800][ T540] usb 5-1: USB disconnect, device number 13 [ 134.634115][ T28] audit: type=1400 audit(1762972076.786:296): avc: denied { append } for pid=1719 comm="syz.0.352" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.951578][ T1757] device syzkaller0 entered promiscuous mode [ 137.995781][ T771] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.714027][ T771] usb 3-1: Using ep0 maxpacket: 8 [ 139.724426][ T771] usb 3-1: device descriptor read/all, error -71 [ 143.383296][ T356] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.520584][ T1840] Zero length message leads to an empty skb [ 143.643142][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.654274][ T356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.665454][ T356] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.679766][ T356] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.689298][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.790157][ T356] usb 2-1: config 0 descriptor?? [ 145.240330][ T356] usbhid 2-1:0.0: can't add hid device: -71 [ 145.246369][ T356] usbhid: probe of 2-1:0.0 failed with error -71 [ 145.256475][ T356] usb 2-1: USB disconnect, device number 9 [ 146.774074][ T1089] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 146.781807][ T19] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 147.244035][ T1089] usb 3-1: Using ep0 maxpacket: 8 [ 147.249218][ T19] usb 4-1: Using ep0 maxpacket: 8 [ 147.255796][ T19] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 147.264223][ T1089] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.275299][ T19] usb 4-1: config 179 has no interface number 0 [ 147.281742][ T19] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 147.293091][ T19] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 147.304773][ T19] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.315059][ T19] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 147.329469][ T19] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 147.338810][ T1089] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.347960][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.356154][ T1089] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.513582][ T1865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.522331][ T1089] usb 3-1: Product: syz [ 148.335779][ T19] usb 4-1: USB disconnect, device number 11 [ 148.341862][ T1089] usb 3-1: Manufacturer: syz [ 148.455919][ T1089] usb 3-1: SerialNumber: syz [ 148.470466][ T1089] usb 3-1: can't set config #1, error -71 [ 148.477044][ T1089] usb 3-1: USB disconnect, device number 9 [ 148.639832][ T1903] syz.1.408[1903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.639907][ T1903] syz.1.408[1903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.652231][ T1903] xt_policy: neither incoming nor outgoing policy selected [ 150.814089][ T28] audit: type=1400 audit(1762972092.236:297): avc: denied { ioctl } for pid=1912 comm="syz.1.410" path="socket:[23600]" dev="sockfs" ino=23600 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.694084][ T1089] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 153.072048][ T1089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.117724][ T1949] device syzkaller0 entered promiscuous mode [ 153.119951][ T1089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.322917][ T1089] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.336235][ T1089] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.345584][ T1089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.354491][ T1089] usb 5-1: config 0 descriptor?? [ 154.360949][ T1089] usb 5-1: can't set config #0, error -71 [ 154.367818][ T1089] usb 5-1: USB disconnect, device number 14 [ 157.515799][ T771] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.102526][ T1797] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 159.893776][ T1797] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 159.902142][ T1797] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 159.911146][ T1797] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 159.921754][ T1797] usb 3-1: config 220 has no interface number 2 [ 159.928151][ T1797] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 159.941698][ T1797] usb 3-1: config 220 interface 0 has no altsetting 0 [ 159.964143][ T1797] usb 3-1: config 220 interface 76 has no altsetting 0 [ 159.971318][ T1797] usb 3-1: config 220 interface 1 has no altsetting 0 [ 159.994612][ T1797] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 160.018615][ T1797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.038554][ T1797] usb 3-1: Product: syz [ 160.042966][ T1797] usb 3-1: Manufacturer: syz [ 160.047686][ T1797] usb 3-1: SerialNumber: syz [ 160.267850][ T1797] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 160.278215][ T1797] usb 3-1: No valid video chain found. [ 160.308905][ T1797] usb 3-1: USB disconnect, device number 10 [ 162.320191][ T28] audit: type=1326 audit(1762972104.496:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 162.679049][ T28] audit: type=1326 audit(1762972104.496:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 162.723438][ T28] audit: type=1326 audit(1762972104.496:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 162.755206][ T28] audit: type=1326 audit(1762972104.496:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 162.783251][ T28] audit: type=1326 audit(1762972104.506:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 165.268616][ T28] audit: type=1326 audit(1762972104.506:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 165.293378][ T28] audit: type=1326 audit(1762972104.506:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 165.363276][ T28] audit: type=1326 audit(1762972104.506:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 165.547193][ T28] audit: type=1326 audit(1762972104.506:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 165.570961][ T28] audit: type=1326 audit(1762972104.506:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2075 comm="syz.4.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 170.516359][ T2145] binder: 2140:2145 ioctl 4018620d 0 returned -22 [ 175.264041][ T420] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.474034][ T420] usb 2-1: Using ep0 maxpacket: 8 [ 175.480431][ T420] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.493623][ T420] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.427462][ T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.680823][ T420] usb 2-1: Product: syz [ 176.685206][ T420] usb 2-1: Manufacturer: syz [ 176.689833][ T420] usb 2-1: SerialNumber: syz [ 177.343774][ T2200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.364127][ T1637] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 177.369659][ T2200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.709610][ T1637] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 177.724147][ T1637] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 177.733085][ T1637] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 177.794950][ T1637] usb 4-1: config 220 has no interface number 2 [ 177.937788][ T2241] fuse: Bad value for 'group_id' [ 177.945766][ T1637] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 178.023509][ T2238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.100877][ T1637] usb 4-1: config 220 interface 0 has no altsetting 0 [ 178.193466][ T1637] usb 4-1: config 220 interface 76 has no altsetting 0 [ 178.246798][ T2238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.371297][ T1637] usb 4-1: config 220 interface 1 has no altsetting 0 [ 178.894108][ T420] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 178.900168][ T420] cdc_ncm 2-1:1.0: bind() failure [ 178.972042][ T2253] netlink: 'syz.0.502': attribute type 195 has an invalid length. [ 178.976299][ T420] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 178.987250][ T1637] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 178.996886][ T420] cdc_ncm 2-1:1.1: bind() failure [ 179.076673][ T420] usb 2-1: USB disconnect, device number 11 [ 179.083492][ T1637] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.091653][ T1637] usb 4-1: Product: syz [ 179.095888][ T1637] usb 4-1: Manufacturer: syz [ 179.100503][ T1637] usb 4-1: SerialNumber: syz [ 179.329458][ T1637] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 179.336455][ T1637] usb 4-1: No valid video chain found. [ 179.354816][ T1637] usb 4-1: USB disconnect, device number 12 [ 180.375076][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 180.375093][ T28] audit: type=1326 audit(1762972122.556:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 180.456928][ T28] audit: type=1326 audit(1762972122.586:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 180.525012][ T28] audit: type=1326 audit(1762972122.586:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 180.626918][ T28] audit: type=1326 audit(1762972122.586:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 180.689514][ T28] audit: type=1326 audit(1762972122.586:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 180.733084][ T28] audit: type=1326 audit(1762972122.586:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 180.967383][ T28] audit: type=1326 audit(1762972122.586:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 181.053228][ T2291] binder: 2285:2291 ioctl 4018620d 0 returned -22 [ 181.589115][ T28] audit: type=1326 audit(1762972122.586:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 181.694238][ T28] audit: type=1326 audit(1762972122.586:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 181.718344][ T28] audit: type=1326 audit(1762972122.586:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2273 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f596b78f6c9 code=0x7ffc0000 [ 181.881605][ T2298] SELinux: failed to load policy [ 183.204861][ T1797] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.468035][ T1797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.485346][ T1797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.505569][ T1797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.533039][ T1797] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.551545][ T1797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.759449][ T1797] usb 4-1: config 0 descriptor?? [ 184.020998][ T2333] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.412872][ T1797] usbhid 4-1:0.0: can't add hid device: -71 [ 184.429003][ T1797] usbhid: probe of 4-1:0.0 failed with error -71 [ 184.633399][ T1797] usb 4-1: USB disconnect, device number 13 [ 186.424058][ T771] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 186.905126][ T771] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.920126][ T771] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.934029][ T771] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 186.948363][ T771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.969184][ T771] usb 5-1: config 0 descriptor?? [ 188.023805][ T771] zeroplus 0003:0C12:0005.000D: unknown main item tag 0x0 [ 188.031216][ T771] zeroplus 0003:0C12:0005.000D: unknown global tag 0xe [ 188.069599][ T771] zeroplus 0003:0C12:0005.000D: item 0 0 1 14 parsing failed [ 188.135145][ T2392] binder: 2385:2392 ioctl 4018620d 0 returned -22 [ 188.170201][ T1895] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.394195][ T771] zeroplus 0003:0C12:0005.000D: parse failed [ 188.400464][ T771] zeroplus: probe of 0003:0C12:0005.000D failed with error -22 [ 188.478373][ T2394] 9pnet: Could not find request transport: fd0x0000000000000005 [ 188.487306][ T1797] usb 5-1: USB disconnect, device number 15 [ 191.844349][ T2409] xt_policy: neither incoming nor outgoing policy selected [ 192.612556][ T1895] usb 1-1: device descriptor read/all, error -71 [ 192.637435][ T2412] device syzkaller0 entered promiscuous mode [ 196.287751][ T2450] device syzkaller0 entered promiscuous mode [ 196.330188][ T2455] netlink: 'syz.0.562': attribute type 4 has an invalid length. [ 196.473235][ T2457] xt_policy: neither incoming nor outgoing policy selected [ 197.554005][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 197.554021][ T28] audit: type=1400 audit(1762972139.726:382): avc: denied { write } for pid=2473 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 199.740983][ T2503] binder: 2498:2503 ioctl 4018620d 0 returned -22 [ 200.112762][ T2497] syz.1.574 (2497) used greatest stack depth: 20592 bytes left [ 202.049120][ T2535] device syzkaller0 entered promiscuous mode [ 202.854014][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 202.884010][ T1818] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.034029][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 203.040423][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.065402][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.074711][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.082732][ T19] usb 1-1: Product: syz [ 203.092872][ T19] usb 1-1: Manufacturer: syz [ 203.093999][ T1818] usb 3-1: Using ep0 maxpacket: 8 [ 203.097806][ T19] usb 1-1: SerialNumber: syz [ 203.104412][ T1818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.120754][ T1818] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.131315][ T1818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.140100][ T1818] usb 3-1: Product: syz [ 203.145126][ T1818] usb 3-1: Manufacturer: syz [ 203.149944][ T1818] usb 3-1: SerialNumber: syz [ 203.779826][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.788367][ T2547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.788877][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.797659][ T2547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.009150][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.017038][ T1818] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 204.023714][ T1818] cdc_ncm 3-1:1.0: bind() failure [ 204.029931][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.030215][ T1818] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 204.045503][ T1818] cdc_ncm 3-1:1.1: bind() failure [ 204.338974][ T2537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.349603][ T2537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.870827][ T19] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 204.877353][ T19] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 204.961980][ T19] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 204.989153][ T19] usb 1-1: USB disconnect, device number 10 [ 204.995514][ T19] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 205.641083][ T2555] usb 3-1: USB disconnect, device number 11 [ 208.554065][ T2555] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 208.734147][ T2555] usb 5-1: Using ep0 maxpacket: 8 [ 208.742229][ T2555] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.790835][ T2555] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.814020][ T2555] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.822084][ T2555] usb 5-1: Product: syz [ 208.826511][ T2555] usb 5-1: Manufacturer: syz [ 208.843994][ T2555] usb 5-1: SerialNumber: syz [ 209.366158][ T2652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.482446][ T2652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.711588][ T2652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.731804][ T2652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.826855][ T2679] netlink: 'syz.2.620': attribute type 11 has an invalid length. [ 209.834751][ T2679] netlink: 56 bytes leftover after parsing attributes in process `syz.2.620'. [ 209.845103][ T2679] netlink: 'syz.2.620': attribute type 11 has an invalid length. [ 209.852892][ T2679] netlink: 56 bytes leftover after parsing attributes in process `syz.2.620'. [ 209.861904][ T2679] netlink: 'syz.2.620': attribute type 11 has an invalid length. [ 209.869708][ T2679] netlink: 56 bytes leftover after parsing attributes in process `syz.2.620'. [ 209.952621][ T2652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.962973][ T2652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.054280][ T420] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.107923][ T2683] binder: 2680:2683 ioctl 4018620d 0 returned -22 [ 210.303854][ T420] usb 4-1: Using ep0 maxpacket: 8 [ 210.323824][ T420] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.346345][ T420] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.357841][ T420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.366630][ T420] usb 4-1: Product: syz [ 210.370904][ T420] usb 4-1: Manufacturer: syz [ 210.375960][ T420] usb 4-1: SerialNumber: syz [ 210.381112][ T2555] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 210.392317][ T2555] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 210.585237][ T2555] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 210.613839][ T2555] usb 5-1: USB disconnect, device number 16 [ 210.628526][ T2555] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 210.730214][ T2690] syz.2.625 (2690) used greatest stack depth: 19896 bytes left [ 210.803037][ T2678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.817979][ T2678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.235085][ T420] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 211.245117][ T420] cdc_ncm 4-1:1.0: bind() failure [ 211.318988][ T420] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 211.338569][ T420] cdc_ncm 4-1:1.1: bind() failure [ 212.184038][ T19] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 212.395170][ T19] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.416417][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 212.423186][ T19] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 212.432987][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.442166][ T19] usb 3-1: config 0 descriptor?? [ 212.696972][ T2728] syz.4.637 (2728) used greatest stack depth: 19584 bytes left [ 213.453079][ T420] usb 4-1: USB disconnect, device number 14 [ 213.461345][ T19] zeroplus 0003:0C12:0005.000E: unknown main item tag 0x0 [ 213.479641][ T19] zeroplus 0003:0C12:0005.000E: unknown global tag 0xe [ 213.486808][ T19] zeroplus 0003:0C12:0005.000E: item 0 0 1 14 parsing failed [ 213.498546][ T2737] fuse: Unknown parameter 'group_i00000000000000000000' [ 213.509940][ T19] zeroplus 0003:0C12:0005.000E: parse failed [ 214.444018][ T19] zeroplus: probe of 0003:0C12:0005.000E failed with error -22 [ 214.465749][ T19] usb 3-1: USB disconnect, device number 12 [ 215.077535][ T2772] netlink: 'syz.0.648': attribute type 195 has an invalid length. [ 215.884118][ T2785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.634027][ T2793] fuse: Unknown parameter 'group_id00000000000000000000' [ 218.927700][ T2810] device syzkaller0 entered promiscuous mode [ 219.684035][ T420] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 219.904046][ T420] usb 2-1: device descriptor read/64, error -71 [ 220.174106][ T420] usb 2-1: device descriptor read/64, error -71 [ 220.192636][ T2830] device veth3 entered promiscuous mode [ 220.218081][ T2833] fuse: Unknown parameter 'group_id00000000000000000000' [ 220.494043][ T420] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 220.674160][ T420] usb 2-1: device descriptor read/64, error -71 [ 221.154073][ T420] usb 2-1: device descriptor read/64, error -71 [ 221.553012][ T420] usb usb2-port1: attempt power cycle [ 222.144318][ T420] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 222.187584][ T420] usb 2-1: device descriptor read/8, error -71 [ 222.224350][ T2029] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 222.366253][ T420] usb 2-1: device descriptor read/8, error -71 [ 222.414432][ T2029] usb 4-1: Using ep0 maxpacket: 8 [ 222.488225][ T2866] netlink: 'syz.2.674': attribute type 195 has an invalid length. [ 222.500601][ T2029] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.564022][ T2029] usb 4-1: config 179 has no interface number 0 [ 222.617880][ T2029] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 222.670497][ T2029] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 222.690670][ T2029] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 222.710032][ T2029] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 222.747684][ T2029] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 222.807698][ T2029] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 222.826686][ T2029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.872804][ T2858] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.896930][ T2029] xpad: probe of 4-1:179.65 failed with error -5 [ 223.272585][ T1818] usb 4-1: USB disconnect, device number 15 [ 223.671837][ T28] audit: type=1400 audit(1762972165.846:383): avc: denied { create } for pid=2881 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 223.691569][ T28] audit: type=1400 audit(1762972165.866:384): avc: denied { setopt } for pid=2881 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 223.933819][ T28] audit: type=1400 audit(1762972166.086:385): avc: denied { write } for pid=2881 comm="syz.0.679" name="snmp6" dev="proc" ino=4026532347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 227.314631][ T2919] fuse: Bad value for 'user_id' [ 229.474996][ T2934] netlink: 'syz.3.694': attribute type 195 has an invalid length. [ 230.574273][ T2926] device veth3 entered promiscuous mode [ 231.440558][ T2959] fuse: Bad value for 'user_id' [ 235.386941][ T3001] fuse: Bad value for 'user_id' [ 238.390116][ T3024] netlink: 'syz.2.718': attribute type 195 has an invalid length. [ 243.631726][ T3070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.731'. [ 249.816259][ T3140] netlink: 'syz.4.747': attribute type 195 has an invalid length. [ 251.567631][ T3148] device veth5 entered promiscuous mode [ 257.734945][ T28] audit: type=1400 audit(1762972199.916:386): avc: denied { bind } for pid=3191 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.767735][ T3192] syz.4.761[3192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.767843][ T3192] syz.4.761[3192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.803857][ T28] audit: type=1400 audit(1762972199.936:387): avc: denied { listen } for pid=3191 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 257.937300][ T28] audit: type=1400 audit(1762972199.936:388): avc: denied { connect } for pid=3191 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 260.205972][ T28] audit: type=1326 audit(1762972202.386:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 260.368624][ T3233] netlink: 'syz.3.770': attribute type 195 has an invalid length. [ 260.491570][ T28] audit: type=1326 audit(1762972202.416:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 261.409528][ T3239] binder: 3236:3239 ioctl 4018620d 0 returned -22 [ 261.744001][ T28] audit: type=1326 audit(1762972202.416:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 261.843999][ T28] audit: type=1326 audit(1762972202.416:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 261.885344][ T28] audit: type=1326 audit(1762972202.416:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 262.753383][ T28] audit: type=1326 audit(1762972202.416:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 262.842701][ T28] audit: type=1326 audit(1762972202.416:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 262.936479][ T28] audit: type=1326 audit(1762972202.416:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 263.009219][ T28] audit: type=1326 audit(1762972202.416:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 263.083139][ T28] audit: type=1326 audit(1762972202.416:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 263.117193][ T28] audit: type=1326 audit(1762972202.416:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 263.140728][ T28] audit: type=1326 audit(1762972202.416:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 263.164029][ T28] audit: type=1326 audit(1762972202.416:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 263.187552][ T28] audit: type=1326 audit(1762972202.416:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3231 comm="syz.1.772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9da98f6c9 code=0x7ffc0000 [ 264.384117][ T19] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 264.617955][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 264.627530][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.844543][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.084548][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.092641][ T19] usb 2-1: Product: syz [ 266.097048][ T19] usb 2-1: Manufacturer: syz [ 266.101681][ T19] usb 2-1: SerialNumber: syz [ 266.254114][ T2555] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 266.433976][ T2555] usb 5-1: Using ep0 maxpacket: 8 [ 266.440374][ T2555] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 266.448953][ T2555] usb 5-1: config 179 has no interface number 0 [ 266.455560][ T2555] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 266.466967][ T2555] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 266.478538][ T2555] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 266.490161][ T2555] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 266.501974][ T2555] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 266.515604][ T2555] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 266.524908][ T2555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.534709][ T3291] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 266.911348][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 266.919773][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 266.929286][ T2555] usb 5-1: USB disconnect, device number 17 [ 267.874106][ T2555] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 267.874174][ T540] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 268.084018][ T2555] usb 1-1: Using ep0 maxpacket: 8 [ 268.089505][ T540] usb 4-1: Using ep0 maxpacket: 8 [ 268.098038][ T2555] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.112571][ T540] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.126569][ T2555] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.137253][ T2555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.147931][ T2555] usb 1-1: Product: syz [ 268.152571][ T540] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.163248][ T2555] usb 1-1: Manufacturer: syz [ 268.169080][ T540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.178396][ T2555] usb 1-1: SerialNumber: syz [ 268.213900][ T540] usb 4-1: Product: syz [ 268.232763][ T540] usb 4-1: Manufacturer: syz [ 268.238579][ T540] usb 4-1: SerialNumber: syz [ 268.335140][ T19] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 268.341629][ T19] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 268.631512][ T19] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 268.649182][ T19] usb 2-1: USB disconnect, device number 16 [ 268.655625][ T19] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 268.702107][ T3312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.735032][ T3314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.735630][ T3312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.755068][ T3314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.774054][ T1089] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 268.966952][ T3312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.986766][ T1089] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.995562][ T3312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.004769][ T3314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.006368][ T1089] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 269.023340][ T1089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.025859][ T3314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.050580][ T1089] usb 3-1: config 0 descriptor?? [ 269.230147][ T3312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.241117][ T3312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.275050][ T3314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.289916][ T3314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.474458][ T1089] lenovo 0003:17EF:6047.000F: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 269.862519][ T2555] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 269.869218][ T540] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 269.869794][ T1089] lenovo 0003:17EF:6047.000F: Failed to switch middle button: -71 [ 269.884042][ T540] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 269.889793][ T2555] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 269.898954][ T1089] lenovo 0003:17EF:6047.000F: Fn-lock setting failed: -71 [ 269.907395][ T1089] lenovo 0003:17EF:6047.000F: Sensitivity setting failed: -71 [ 269.919650][ T1089] usb 3-1: USB disconnect, device number 13 [ 269.960765][ T3331] fido_id[3331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 270.103808][ T2555] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 270.143543][ T540] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 270.383845][ T2555] usb 1-1: USB disconnect, device number 11 [ 270.468324][ T540] usb 4-1: USB disconnect, device number 16 [ 270.593275][ T2555] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 270.607733][ T540] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 275.074110][ T2555] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 275.364381][ T2555] usb 2-1: Using ep0 maxpacket: 8 [ 275.379448][ T2555] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.398743][ T2555] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.408216][ T540] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 275.424555][ T2555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.443171][ T2555] usb 2-1: Product: syz [ 275.448407][ T2555] usb 2-1: Manufacturer: syz [ 275.464087][ T2555] usb 2-1: SerialNumber: syz [ 276.171245][ T540] usb 3-1: Using ep0 maxpacket: 8 [ 276.177815][ T540] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.191030][ T540] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.200361][ T540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.208580][ T540] usb 3-1: Product: syz [ 276.212795][ T540] usb 3-1: Manufacturer: syz [ 276.219783][ T28] audit: type=1326 audit(1762972218.396:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.224005][ T540] usb 3-1: SerialNumber: syz [ 276.246062][ T28] audit: type=1326 audit(1762972218.426:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.296845][ T28] audit: type=1326 audit(1762972218.426:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.323825][ T28] audit: type=1326 audit(1762972218.426:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.348270][ T28] audit: type=1326 audit(1762972218.426:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.372206][ T28] audit: type=1326 audit(1762972218.426:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.406201][ T28] audit: type=1326 audit(1762972218.426:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.429847][ T28] audit: type=1326 audit(1762972218.426:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.453814][ T28] audit: type=1326 audit(1762972218.426:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.482849][ T28] audit: type=1326 audit(1762972218.426:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3417 comm="syz.4.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa82038f6c9 code=0x7ffc0000 [ 276.506778][ T3386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.515460][ T3386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.504964][ T3428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.514171][ T3428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.519085][ T3429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.532541][ T3429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.161691][ T3394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.174271][ T3394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.185023][ T3386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.195321][ T3386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.568133][ T3394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.588371][ T3394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.915193][ T2555] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 278.935128][ T2555] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 279.146511][ T540] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 279.161470][ T2555] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 279.176608][ T540] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 279.323086][ T2555] usb 2-1: USB disconnect, device number 17 [ 279.387809][ T540] cdc_ncm 3-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 279.531668][ T2555] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 279.570081][ T540] usb 3-1: USB disconnect, device number 14 [ 279.687896][ T540] cdc_ncm 3-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 279.850298][ T1818] ================================================================== [ 279.858495][ T1818] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 279.866449][ T1818] Read of size 8 at addr ffff88811571ccf0 by task kworker/1:10/1818 [ 279.874451][ T1818] [ 279.876795][ T1818] CPU: 1 PID: 1818 Comm: kworker/1:10 Not tainted syzkaller #0 [ 279.884358][ T1818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.894435][ T1818] Workqueue: events nfc_urelease_event_work [ 279.900388][ T1818] Call Trace: [ 279.903692][ T1818] [ 279.906640][ T1818] __dump_stack+0x21/0x24 [ 279.910996][ T1818] dump_stack_lvl+0xee/0x150 [ 279.915969][ T1818] ? __cfi_dump_stack_lvl+0x8/0x8 [ 279.921049][ T1818] ? __list_del_entry_valid+0xa6/0x130 [ 279.926615][ T1818] print_address_description+0x71/0x200 [ 279.932180][ T1818] print_report+0x4a/0x60 [ 279.936619][ T1818] kasan_report+0x122/0x150 [ 279.941159][ T1818] ? __list_del_entry_valid+0xa6/0x130 [ 279.946734][ T1818] __asan_report_load8_noabort+0x14/0x20 [ 279.952444][ T1818] __list_del_entry_valid+0xa6/0x130 [ 279.957773][ T1818] process_one_work+0x4b9/0xc40 [ 279.962663][ T1818] worker_thread+0xa29/0x11f0 [ 279.967459][ T1818] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 279.973036][ T1818] ? __kthread_parkme+0x142/0x180 [ 279.978086][ T1818] kthread+0x281/0x320 [ 279.982258][ T1818] ? __cfi_worker_thread+0x10/0x10 [ 279.987385][ T1818] ? __cfi_kthread+0x10/0x10 [ 279.991991][ T1818] ret_from_fork+0x1f/0x30 [ 279.996431][ T1818] [ 279.999466][ T1818] [ 280.001810][ T1818] Allocated by task 2555: [ 280.006152][ T1818] kasan_set_track+0x4b/0x70 [ 280.010784][ T1818] kasan_save_alloc_info+0x25/0x30 [ 280.015940][ T1818] __kasan_kmalloc+0x95/0xb0 [ 280.020566][ T1818] __kmalloc_node+0xb2/0x1e0 [ 280.025194][ T1818] kvmalloc_node+0x294/0x480 [ 280.029849][ T1818] alloc_netdev_mqs+0x8d/0xf90 [ 280.034656][ T1818] alloc_etherdev_mqs+0x37/0x40 [ 280.039535][ T1818] usbnet_probe+0x20c/0x2780 [ 280.044152][ T1818] usb_probe_interface+0x610/0xaf0 [ 280.049284][ T1818] really_probe+0x2cb/0x960 [ 280.053807][ T1818] __driver_probe_device+0x198/0x280 [ 280.059118][ T1818] driver_probe_device+0x54/0x3e0 [ 280.064158][ T1818] __device_attach_driver+0x2e9/0x4a0 [ 280.069550][ T1818] bus_for_each_drv+0x183/0x210 [ 280.074426][ T1818] __device_attach+0x2a2/0x400 [ 280.079207][ T1818] device_initial_probe+0x1a/0x20 [ 280.084249][ T1818] bus_probe_device+0xc0/0x1f0 [ 280.089033][ T1818] device_add+0xb4d/0xef0 [ 280.093385][ T1818] usb_set_configuration+0x19c2/0x1f10 [ 280.099041][ T1818] usb_generic_driver_probe+0x91/0x150 [ 280.104526][ T1818] usb_probe_device+0x159/0x270 [ 280.109394][ T1818] really_probe+0x2cb/0x960 [ 280.113917][ T1818] __driver_probe_device+0x198/0x280 [ 280.119219][ T1818] driver_probe_device+0x54/0x3e0 [ 280.124257][ T1818] __device_attach_driver+0x2e9/0x4a0 [ 280.129649][ T1818] bus_for_each_drv+0x183/0x210 [ 280.134559][ T1818] __device_attach+0x2a2/0x400 [ 280.139426][ T1818] device_initial_probe+0x1a/0x20 [ 280.144481][ T1818] bus_probe_device+0xc0/0x1f0 [ 280.149269][ T1818] device_add+0xb4d/0xef0 [ 280.153619][ T1818] usb_new_device+0xa70/0x1520 [ 280.158517][ T1818] hub_event+0x2850/0x4350 [ 280.162964][ T1818] process_one_work+0x71f/0xc40 [ 280.167925][ T1818] worker_thread+0xa29/0x11f0 [ 280.172628][ T1818] kthread+0x281/0x320 [ 280.176722][ T1818] ret_from_fork+0x1f/0x30 [ 280.181158][ T1818] [ 280.183487][ T1818] Freed by task 2555: [ 280.187476][ T1818] kasan_set_track+0x4b/0x70 [ 280.192082][ T1818] kasan_save_free_info+0x31/0x50 [ 280.197133][ T1818] ____kasan_slab_free+0x132/0x180 [ 280.202267][ T1818] __kasan_slab_free+0x11/0x20 [ 280.207051][ T1818] slab_free_freelist_hook+0xc2/0x190 [ 280.212452][ T1818] __kmem_cache_free+0xb7/0x1b0 [ 280.217326][ T1818] kfree+0x6f/0xf0 [ 280.221081][ T1818] kvfree+0x35/0x40 [ 280.224928][ T1818] netdev_freemem+0x3f/0x60 [ 280.229466][ T1818] netdev_release+0x7f/0xb0 [ 280.233985][ T1818] device_release+0xa4/0x1d0 [ 280.238600][ T1818] kobject_put+0x19d/0x280 [ 280.243054][ T1818] put_device+0x1f/0x30 [ 280.247237][ T1818] free_netdev+0x392/0x490 [ 280.251680][ T1818] usbnet_disconnect+0x25a/0x3b0 [ 280.256646][ T1818] usb_unbind_interface+0x223/0x8d0 [ 280.261878][ T1818] device_release_driver_internal+0x508/0x820 [ 280.267978][ T1818] device_release_driver+0x19/0x20 [ 280.273110][ T1818] bus_remove_device+0x2ee/0x350 [ 280.278159][ T1818] device_del+0x6a4/0xeb0 [ 280.282503][ T1818] usb_disable_device+0x3a8/0x750 [ 280.287641][ T1818] usb_disconnect+0x31e/0x860 [ 280.292342][ T1818] hub_event+0x1a78/0x4350 [ 280.296793][ T1818] process_one_work+0x71f/0xc40 [ 280.301672][ T1818] worker_thread+0xd2e/0x11f0 [ 280.306374][ T1818] kthread+0x281/0x320 [ 280.310549][ T1818] ret_from_fork+0x1f/0x30 [ 280.314988][ T1818] [ 280.317319][ T1818] Last potentially related work creation: [ 280.323045][ T1818] kasan_save_stack+0x3a/0x60 [ 280.327768][ T1818] __kasan_record_aux_stack+0xb6/0xc0 [ 280.333169][ T1818] kasan_record_aux_stack_noalloc+0xb/0x10 [ 280.339006][ T1818] insert_work+0x51/0x300 [ 280.343360][ T1818] __queue_work+0x9b1/0xd30 [ 280.347901][ T1818] queue_work_on+0xd2/0x140 [ 280.352435][ T1818] usbnet_link_change+0x189/0x1b0 [ 280.357486][ T1818] usbnet_probe+0x1d55/0x2780 [ 280.362251][ T1818] usb_probe_interface+0x610/0xaf0 [ 280.367561][ T1818] really_probe+0x2cb/0x960 [ 280.372083][ T1818] __driver_probe_device+0x198/0x280 [ 280.377390][ T1818] driver_probe_device+0x54/0x3e0 [ 280.382470][ T1818] __device_attach_driver+0x2e9/0x4a0 [ 280.387862][ T1818] bus_for_each_drv+0x183/0x210 [ 280.392739][ T1818] __device_attach+0x2a2/0x400 [ 280.397531][ T1818] device_initial_probe+0x1a/0x20 [ 280.402589][ T1818] bus_probe_device+0xc0/0x1f0 [ 280.407383][ T1818] device_add+0xb4d/0xef0 [ 280.411750][ T1818] usb_set_configuration+0x19c2/0x1f10 [ 280.417276][ T1818] usb_generic_driver_probe+0x91/0x150 [ 280.422764][ T1818] usb_probe_device+0x159/0x270 [ 280.427632][ T1818] really_probe+0x2cb/0x960 [ 280.432161][ T1818] __driver_probe_device+0x198/0x280 [ 280.437458][ T1818] driver_probe_device+0x54/0x3e0 [ 280.442503][ T1818] __device_attach_driver+0x2e9/0x4a0 [ 280.447890][ T1818] bus_for_each_drv+0x183/0x210 [ 280.452745][ T1818] __device_attach+0x2a2/0x400 [ 280.457519][ T1818] device_initial_probe+0x1a/0x20 [ 280.462555][ T1818] bus_probe_device+0xc0/0x1f0 [ 280.467351][ T1818] device_add+0xb4d/0xef0 [ 280.471692][ T1818] usb_new_device+0xa70/0x1520 [ 280.476480][ T1818] hub_event+0x2850/0x4350 [ 280.480901][ T1818] process_one_work+0x71f/0xc40 [ 280.485744][ T1818] worker_thread+0xa29/0x11f0 [ 280.490411][ T1818] kthread+0x281/0x320 [ 280.494490][ T1818] ret_from_fork+0x1f/0x30 [ 280.498901][ T1818] [ 280.501215][ T1818] The buggy address belongs to the object at ffff88811571c000 [ 280.501215][ T1818] which belongs to the cache kmalloc-4k of size 4096 [ 280.515267][ T1818] The buggy address is located 3312 bytes inside of [ 280.515267][ T1818] 4096-byte region [ffff88811571c000, ffff88811571d000) [ 280.528703][ T1818] [ 280.531018][ T1818] The buggy address belongs to the physical page: [ 280.537414][ T1818] page:ffffea000455c600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115718 [ 280.547649][ T1818] head:ffffea000455c600 order:3 compound_mapcount:0 compound_pincount:0 [ 280.555978][ T1818] flags: 0x4000000000010200(slab|head|zone=1) [ 280.562059][ T1818] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 280.570661][ T1818] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 280.579244][ T1818] page dumped because: kasan: bad access detected [ 280.585677][ T1818] page_owner tracks the page as allocated [ 280.591386][ T1818] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 116, tgid 116 (udevd), ts 6199511777, free_ts 0 [ 280.611014][ T1818] post_alloc_hook+0x1f5/0x210 [ 280.615882][ T1818] prep_new_page+0x1c/0x110 [ 280.620388][ T1818] get_page_from_freelist+0x2c7b/0x2cf0 [ 280.625945][ T1818] __alloc_pages+0x1c3/0x450 [ 280.630545][ T1818] alloc_slab_page+0x6e/0xf0 [ 280.635147][ T1818] new_slab+0x98/0x3d0 [ 280.639305][ T1818] ___slab_alloc+0x6bd/0xb20 [ 280.643901][ T1818] __slab_alloc+0x5e/0xa0 [ 280.648332][ T1818] __kmem_cache_alloc_node+0x203/0x2c0 [ 280.653795][ T1818] __kmalloc_node+0xa1/0x1e0 [ 280.658406][ T1818] kvmalloc_node+0x294/0x480 [ 280.662986][ T1818] seq_read_iter+0x1fc/0xdd0 [ 280.667577][ T1818] kernfs_fop_read_iter+0x14a/0x4e0 [ 280.672788][ T1818] vfs_read+0x41e/0x8c0 [ 280.676954][ T1818] ksys_read+0x140/0x240 [ 280.681248][ T1818] __x64_sys_read+0x7b/0x90 [ 280.685744][ T1818] page_owner free stack trace missing [ 280.691114][ T1818] [ 280.693425][ T1818] Memory state around the buggy address: [ 280.699041][ T1818] ffff88811571cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.707092][ T1818] ffff88811571cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.715146][ T1818] >ffff88811571cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.723210][ T1818] ^ [ 280.730912][ T1818] ffff88811571cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.738966][ T1818] ffff88811571cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 280.747013][ T1818] ================================================================== [ 280.755061][ T1818] Disabling lock debugging due to kernel taint [ 281.069015][ T3476] netlink: 'syz.1.827': attribute type 195 has an invalid length.