last executing test programs: 4m11.795876185s ago: executing program 4 (id=52): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m10.42945483s ago: executing program 4 (id=59): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020003"], 0x0) 4m8.820824332s ago: executing program 4 (id=65): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902480001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m7.272356918s ago: executing program 4 (id=77): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r10, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r13 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r13, 0x4c00, r12) ioctl$LOOP_SET_FD(r13, 0x4c00, r13) dup2(r12, r10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m7.028392605s ago: executing program 4 (id=78): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) close_range(r3, r6, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r7, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000040)='udf\x00', 0x0) 4m6.800581775s ago: executing program 4 (id=80): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) 4m6.598030852s ago: executing program 32 (id=80): getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) 1m13.305599989s ago: executing program 1 (id=1083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1m13.304394874s ago: executing program 1 (id=1084): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="10") 1m9.751437312s ago: executing program 1 (id=1105): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1m9.385183544s ago: executing program 1 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 1m8.952423693s ago: executing program 1 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f00000004c0)="b70000000180", 0x6}, {0x0}], 0x3) 1m8.319970625s ago: executing program 1 (id=1121): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0x4}) 1m8.08962161s ago: executing program 33 (id=1121): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000080)={0xd, 0x4}) 2.478955118s ago: executing program 6 (id=1604): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2.242391372s ago: executing program 6 (id=1611): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 2.170490754s ago: executing program 6 (id=1612): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x5}, {0x5, 0xfffffffe}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x8000000}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x40}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0xd, 0x0, 0x8, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x1000000}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x200}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x6}, {0xfffffffc, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0xfffffffd}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x2000, 0x0, 0x0, 0x1}, {0xfffffffc, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x2, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xd, 0x0, 0x0, 0xfffffffc}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x7ffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xa11b5f369cf453a6}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.168910766s ago: executing program 6 (id=1613): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.136581134s ago: executing program 6 (id=1614): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.398412346s ago: executing program 2 (id=1629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r2, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) 1.240984842s ago: executing program 6 (id=1636): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701020301"], 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x97) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000005, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5903963197640ec6}, 0x20004800) 1.18032225s ago: executing program 5 (id=1637): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 1.177654949s ago: executing program 2 (id=1638): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xd001, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) msgget$private(0x0, 0x100) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0xfffffffffffffdca, &(0x7f0000000080)="c0") readv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1) 1.169048913s ago: executing program 0 (id=1639): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.111302677s ago: executing program 0 (id=1640): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x10}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.052024898s ago: executing program 5 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 1.02395689s ago: executing program 5 (id=1644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 956.356727ms ago: executing program 0 (id=1645): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xcb83, 0x0, 0x2, 0x288}, &(0x7f0000000100), &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 954.367893ms ago: executing program 5 (id=1646): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 919.74605ms ago: executing program 5 (id=1647): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 691.965207ms ago: executing program 3 (id=1654): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 677.982741ms ago: executing program 3 (id=1655): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x1010081, 0x0) lgetxattr(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) 649.907212ms ago: executing program 3 (id=1656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000000000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 610.47013ms ago: executing program 3 (id=1657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 587.17459ms ago: executing program 3 (id=1658): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) pipe2(0x0, 0x84880) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000f008040000cd00000001000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000940)='kfree\x00', r0, 0x0, 0xf6}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 488.373409ms ago: executing program 3 (id=1659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "26adf40d7f4f01000080000000000058", "122000"}, 0x28) sendto$inet6(r0, &(0x7f0000000440)="830b77a3c22d11cf560d377488c7dd5093cf12fd2499050f20642439ed5c289356a6b04b35c1e54567ebf069d81ccd7ebf518e4a372fbc54968fd888fd0627d49e3b848f7dadc1de5b7dd4cf88d33b8b42500bb4fc9cf7aa64de7c0f6ba1a9cc635b994276cef02364cee1e538b04f6d0b1b08000000ac030cacf94e1830cb99395545dce65a7de4c7caadb6c407f1d0aac007b90e39e488f9335f6f5a6b56405141ee01318a7300a3ea975f6b6d79846b38e3a157463ef2c5090112b5f44ad2202c161e1dd7fa200543a0651f417df59d2b9c9b4ec3ea", 0xffffffffffffffe8, 0x4000, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc000000010902"], 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r1, 0xffffffffffffffff, 0x0) 385.46819ms ago: executing program 2 (id=1660): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000140)=0x93, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)={@val={0x1c, 0x820}, @val={0x2, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x3, 0x2f, 0xfa4, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4, 0x1}, 0x1, {0xa}}}, {0x8, 0x22eb, 0x40000000, {{0x4, 0x2, 0x8, 0x1, 0x0, 0x2, 0x2, 0x5}, 0x2, {0x4, 0x7, 0x1, 0x14, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "d4327899e67566f565f3b6f39267f8c1581a1d8e5602fb9e8b83f6e62135bda4a2e2668dee614bc3d82d4cd01b4541722c422f05b5116e84f028cd53bbcfde9ae71d721f04b1bc50aadbf9f369386617c5d7ea8b4f643e92406b0a8b7ed306f46d7267b7b58fd7f498ddf2955dd47068"}}}}}, 0xfb2) 325.111877ms ago: executing program 2 (id=1661): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 252.502343ms ago: executing program 2 (id=1662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x82e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 174.623736ms ago: executing program 2 (id=1663): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 110.220384ms ago: executing program 0 (id=1664): bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 57.358347ms ago: executing program 0 (id=1665): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x14, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 390.447µs ago: executing program 5 (id=1666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x401800, 0x4b) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 0 (id=1667): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f80303"], 0x18}}, 0x2000) kernel console output (not intermixed with test programs): g 0 has no interfaces? [ 263.059672][ T5947] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 263.073597][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.082138][ T5947] usb 4-1: Product: syz [ 263.086412][ T5947] usb 4-1: Manufacturer: syz [ 263.091892][ T5947] usb 4-1: SerialNumber: syz [ 263.136532][ T5947] usb 4-1: config 0 descriptor?? [ 263.317984][ T5878] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 263.360241][ T9432] tipc: Enabled bearer , priority 0 [ 263.367532][ T9432] syzkaller0: entered promiscuous mode [ 263.372978][ T9432] syzkaller0: entered allmulticast mode [ 263.429937][ T9432] tipc: Resetting bearer [ 263.476450][ T9431] tipc: Resetting bearer [ 263.518886][ T9431] tipc: Disabling bearer [ 263.519626][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.555112][ T5878] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.573092][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.593402][ T5878] usb 3-1: config 0 descriptor?? [ 263.693063][ T43] usb 4-1: USB disconnect, device number 75 [ 263.741389][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.754134][ T9442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1123'. [ 263.804273][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 263.812437][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 263.826515][ T5878] usb 3-1: USB disconnect, device number 61 [ 263.849108][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.918712][ T9448] netlink: 'syz.0.1125': attribute type 10 has an invalid length. [ 263.932577][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.960801][ T9448] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 263.978538][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.989573][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.997273][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.012522][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.026561][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.037279][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.267286][ T5878] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 264.294555][ T36] bridge_slave_1: left allmulticast mode [ 264.354433][ T36] bridge_slave_1: left promiscuous mode [ 264.377156][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.413863][ T36] bridge_slave_0: left allmulticast mode [ 264.419833][ T36] bridge_slave_0: left promiscuous mode [ 264.426193][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.467247][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 264.501553][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.519186][ T5878] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 264.530558][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.553053][ T5878] usb 3-1: config 0 descriptor?? [ 264.902751][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.913481][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.928907][ T36] bond0 (unregistering): Released all slaves [ 264.957465][ T5885] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 264.990222][ T5878] kye 0003:0458:5016.000A: control desc unexpectedly large [ 265.012610][ T5878] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000A/input/input44 [ 265.066448][ T36] bond1 (unregistering): Released all slaves [ 265.092353][ T5878] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000A/input/input45 [ 265.117449][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 265.125668][ T5885] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 265.135040][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.152030][ T9449] chnl_net:caif_netlink_parms(): no params data found [ 265.157163][ T5885] usb 6-1: Product: syz [ 265.162974][ T5885] usb 6-1: Manufacturer: syz [ 265.165257][ T5878] kye 0003:0458:5016.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 265.171176][ T5885] usb 6-1: SerialNumber: syz [ 265.229048][ T5885] usb 6-1: config 0 descriptor?? [ 265.271048][ T36] tipc: Left network mode [ 265.352052][ T9476] tipc: Enabled bearer , priority 0 [ 265.359280][ T9449] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.366453][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.380191][ T9449] bridge_slave_0: entered allmulticast mode [ 265.388110][ T9449] bridge_slave_0: entered promiscuous mode [ 265.395411][ T9476] syzkaller0: entered promiscuous mode [ 265.400968][ T9476] syzkaller0: entered allmulticast mode [ 265.411014][ T9449] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.418424][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.425608][ T9449] bridge_slave_1: entered allmulticast mode [ 265.432800][ T9449] bridge_slave_1: entered promiscuous mode [ 265.455182][ T5885] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 265.494205][ T9476] tipc: Resetting bearer [ 265.503819][ T9449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.516426][ T9449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.537076][ T36] hsr_slave_0: left promiscuous mode [ 265.543006][ T36] hsr_slave_1: left promiscuous mode [ 265.548869][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.556279][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.565285][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.567215][ T5947] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 265.580416][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.602190][ T36] veth1_macvtap: left promiscuous mode [ 265.607523][ T10] usb 3-1: USB disconnect, device number 62 [ 265.608470][ T36] veth0_macvtap: left promiscuous mode [ 265.619388][ T36] veth1_vlan: left promiscuous mode [ 265.624910][ T36] veth0_vlan: left promiscuous mode [ 265.696539][ T36] team0 (unregistering): Port device batadv2 removed [ 265.714305][ T36] team0 (unregistering): Port device batadv1 removed [ 265.738939][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 265.746571][ T5947] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 265.755117][ T5947] usb 4-1: config 0 has no interface number 0 [ 265.763404][ T5947] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 265.772649][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.780857][ T5947] usb 4-1: Product: syz [ 265.785103][ T5947] usb 4-1: Manufacturer: syz [ 265.789742][ T5947] usb 4-1: SerialNumber: syz [ 265.802798][ T5947] usb 4-1: config 0 descriptor?? [ 265.813061][ T5947] smsc95xx v2.0.0 [ 265.991065][ T36] team0 (unregistering): Port device team_slave_1 removed [ 266.023534][ T36] team0 (unregistering): Port device team_slave_0 removed [ 266.069526][ T5885] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 266.087321][ T5838] Bluetooth: hci0: command tx timeout [ 266.224499][ T5947] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 266.235388][ T5947] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 266.397946][ T9475] tipc: Resetting bearer [ 266.422605][ T9475] tipc: Disabling bearer [ 266.446726][ T5947] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 266.457837][ T5947] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 266.480775][ T9449] team0: Port device team_slave_0 added [ 266.488655][ T9449] team0: Port device team_slave_1 added [ 266.524868][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.548269][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.577365][ T5878] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 266.614826][ T9449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.663132][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.671582][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.698196][ T9449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.734916][ T9449] hsr_slave_0: entered promiscuous mode [ 266.760483][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 266.768068][ T9449] hsr_slave_1: entered promiscuous mode [ 266.790804][ T5878] usb 3-1: config 0 has no interfaces? [ 266.799134][ T9449] debugfs: 'hsr0' already exists in 'hsr' [ 266.804865][ T9449] Cannot create hsr debugfs directory [ 266.814691][ T5878] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 266.834206][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.867400][ T5878] usb 3-1: Product: syz [ 266.871640][ T5878] usb 3-1: Manufacturer: syz [ 266.893045][ T5878] usb 3-1: SerialNumber: syz [ 266.899919][ T43] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 266.915706][ T5878] usb 3-1: config 0 descriptor?? [ 266.995388][ T9449] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.005185][ T9449] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.016579][ T9449] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.026851][ T9449] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 267.069350][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 267.105212][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 267.116041][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 267.154106][ T43] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 267.170792][ T43] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 267.193272][ T43] usb 1-1: Product: syz [ 267.202138][ T43] usb 1-1: Manufacturer: syz [ 267.206774][ T43] usb 1-1: SerialNumber: syz [ 267.222598][ T43] usb 1-1: config 0 descriptor?? [ 267.251559][ T9449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.269798][ T9449] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.282892][ T3504] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.290071][ T3504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.303553][ T3504] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.310669][ T3504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.400776][ T43] usb 3-1: USB disconnect, device number 63 [ 267.459036][ T1205] usb 1-1: USB disconnect, device number 75 [ 267.476965][ T9449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.633500][ T9449] veth0_vlan: entered promiscuous mode [ 267.645091][ T9449] veth1_vlan: entered promiscuous mode [ 267.670997][ T9449] veth0_macvtap: entered promiscuous mode [ 267.680455][ T9449] veth1_macvtap: entered promiscuous mode [ 267.693939][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.708726][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.721903][ T9449] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.730683][ T9449] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.742565][ T9449] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.751334][ T9449] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.755086][ T43] usb 6-1: USB disconnect, device number 70 [ 267.828078][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 267.828091][ T30] audit: type=1400 audit(1753877999.079:849): avc: denied { write } for pid=9517 comm="syz.5.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 267.854416][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.869525][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.912640][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.923945][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.963770][ T30] audit: type=1400 audit(1753877999.209:850): avc: denied { create } for pid=9522 comm="syz.5.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 268.039126][ T30] audit: type=1400 audit(1753877999.239:851): avc: denied { read } for pid=9522 comm="syz.5.1142" path="socket:[21557]" dev="sockfs" ino=21557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 268.062953][ T30] audit: type=1400 audit(1753877999.289:852): avc: denied { mounton } for pid=9449 comm="syz-executor" path="/root/syzkaller.r1bybp/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 268.088192][ T30] audit: type=1400 audit(1753877999.289:853): avc: denied { mount } for pid=9449 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 268.111983][ T30] audit: type=1400 audit(1753877999.289:854): avc: denied { mount } for pid=9449 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 268.152062][ T9525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.177795][ T5838] Bluetooth: hci0: command tx timeout [ 268.465735][ T30] audit: type=1400 audit(1753877999.299:855): avc: denied { mounton } for pid=9449 comm="syz-executor" path="/root/syzkaller.r1bybp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 268.517272][ T30] audit: type=1400 audit(1753877999.299:856): avc: denied { mounton } for pid=9449 comm="syz-executor" path="/root/syzkaller.r1bybp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 268.555094][ T9527] fuse: Unknown parameter 'fd0x0000000000000003' [ 268.557461][ T43] usb 4-1: USB disconnect, device number 76 [ 268.603132][ T30] audit: type=1400 audit(1753877999.309:857): avc: denied { unmount } for pid=9449 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 268.664688][ T30] audit: type=1400 audit(1753877999.309:858): avc: denied { mounton } for pid=9449 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2788 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 268.927276][ T5947] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 269.098728][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.321583][ T5947] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.336283][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.352895][ T5947] usb 7-1: config 0 descriptor?? [ 269.447346][ T1803] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 269.570615][ T5947] usbhid 7-1:0.0: can't add hid device: -71 [ 269.577761][ T5947] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 269.587622][ T5947] usb 7-1: USB disconnect, device number 2 [ 269.597220][ T5885] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 269.617590][ T1803] usb 6-1: Using ep0 maxpacket: 8 [ 269.625709][ T1803] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 269.634838][ T1803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.642933][ T1803] usb 6-1: Product: syz [ 269.647310][ T1803] usb 6-1: Manufacturer: syz [ 269.651897][ T1803] usb 6-1: SerialNumber: syz [ 269.658232][ T1803] usb 6-1: config 0 descriptor?? [ 269.748940][ T5885] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 269.760710][ T5885] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 269.771875][ T5885] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 269.783182][ T5885] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 269.793960][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.803262][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 269.813097][ T9552] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 269.866671][ T1803] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 269.957202][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 269.963763][ T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 269.971974][ T10] usb 4-1: config 0 has no interface number 0 [ 269.980225][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 269.990285][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.998521][ T10] usb 4-1: Product: syz [ 270.002689][ T10] usb 4-1: Manufacturer: syz [ 270.007355][ T10] usb 4-1: SerialNumber: syz [ 270.013878][ T10] usb 4-1: config 0 descriptor?? [ 270.021018][ T10] smsc95xx v2.0.0 [ 270.022382][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 270.177209][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 270.183718][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.194920][ T43] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 270.204724][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.214952][ T43] usb 7-1: config 0 descriptor?? [ 270.247285][ T5838] Bluetooth: hci0: command tx timeout [ 270.428867][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 270.442269][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 270.469772][ T1803] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 270.625662][ T43] kye 0003:0458:5016.000B: control desc unexpectedly large [ 270.635805][ T43] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.000B/input/input47 [ 270.652242][ T43] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.000B/input/input48 [ 270.652759][ T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 270.676272][ T5885] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 270.684238][ T5885] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input46 [ 270.694003][ T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 270.722003][ T43] kye 0003:0458:5016.000B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 271.229487][ T43] usb 7-1: USB disconnect, device number 3 [ 272.037222][ T5878] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 272.037228][ T5885] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 272.082228][ T43] usb 6-1: USB disconnect, device number 71 [ 272.197297][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 272.207964][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.225759][ T5878] usb 1-1: config 0 has no interfaces? [ 272.235104][ T5878] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 272.251516][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 272.260816][ T5878] usb 1-1: Product: syz [ 272.269792][ T5878] usb 1-1: Manufacturer: syz [ 272.274464][ T5878] usb 1-1: SerialNumber: syz [ 272.282239][ T5878] usb 1-1: config 0 descriptor?? [ 272.327543][ T5838] Bluetooth: hci0: command tx timeout [ 272.333241][ T5885] usb 7-1: Using ep0 maxpacket: 32 [ 272.349698][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 272.398703][ T9578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.547319][ T5885] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 272.680452][ T5885] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 272.689874][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 272.698379][ T5878] usb 1-1: USB disconnect, device number 76 [ 272.705368][ T5885] usb 7-1: Product: syz [ 272.715226][ T5885] usb 7-1: Manufacturer: syz [ 272.715585][ T43] usb 4-1: USB disconnect, device number 77 [ 272.721384][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 272.735121][ T10] usb 3-1: USB disconnect, device number 64 [ 272.746205][ T5885] usb 7-1: SerialNumber: syz [ 272.754258][ T5885] usb 7-1: config 0 descriptor?? [ 272.993586][ T5885] usb 7-1: USB disconnect, device number 4 [ 273.013452][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 273.013467][ T30] audit: type=1400 audit(1753878004.259:872): avc: denied { create } for pid=9587 comm="syz.5.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.043396][ T30] audit: type=1400 audit(1753878004.259:873): avc: denied { setopt } for pid=9587 comm="syz.5.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.065267][ T30] audit: type=1400 audit(1753878004.259:874): avc: denied { connect } for pid=9587 comm="syz.5.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.167266][ T43] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 273.237372][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 273.347183][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 273.353591][ T43] usb 4-1: config 0 has no interfaces? [ 273.360734][ T43] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 273.370398][ T43] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 273.379475][ T43] usb 4-1: Product: syz [ 273.383626][ T43] usb 4-1: Manufacturer: syz [ 273.388213][ T43] usb 4-1: SerialNumber: syz [ 273.393939][ T43] usb 4-1: config 0 descriptor?? [ 273.398964][ T5878] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 273.412001][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.437320][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.447051][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.457822][ T10] usb 3-1: config 0 descriptor?? [ 273.560914][ T5878] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.572001][ T5878] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.582751][ T5878] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.591832][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.601882][ T9591] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 273.615782][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 273.625622][ T5878] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 273.626171][ T5885] usb 4-1: USB disconnect, device number 78 [ 273.666042][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 273.672252][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 273.683093][ T10] usb 3-1: USB disconnect, device number 65 [ 273.787336][ T43] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 273.822927][ T5885] usb 6-1: USB disconnect, device number 72 [ 273.929367][ T43] usb 1-1: device descriptor read/64, error -71 [ 273.957222][ T5946] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 274.107218][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 274.116184][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.127753][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.138645][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 274.148450][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.171856][ T5946] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.181339][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.191346][ T5946] usb 7-1: config 0 descriptor?? [ 274.197564][ T43] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 274.257423][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 274.263872][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.274973][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 274.284007][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.293427][ T10] usb 3-1: config 0 descriptor?? [ 274.300278][ T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 274.310994][ T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 274.347294][ T43] usb 1-1: device descriptor read/64, error -71 [ 274.457215][ T5878] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 274.465100][ T43] usb usb1-port1: attempt power cycle [ 274.604284][ T5946] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 274.612106][ T5946] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 274.618745][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 274.619884][ T5946] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 274.631897][ T5946] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 274.632678][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 274.639399][ T5946] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 274.644937][ T5946] plantronics 0003:047F:FFFF.000C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 274.648621][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.676420][ T5878] usb 4-1: Product: syz [ 274.680853][ T5878] usb 4-1: Manufacturer: syz [ 274.685450][ T5878] usb 4-1: SerialNumber: syz [ 274.691373][ T5878] usb 4-1: config 0 descriptor?? [ 274.807213][ T43] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 274.827741][ T43] usb 1-1: device descriptor read/8, error -71 [ 274.837324][ T1803] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 274.901075][ T5878] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 274.989008][ T1803] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.000774][ T1803] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 275.012230][ T1803] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 275.024660][ T1803] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 275.033726][ T1803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.044284][ T9604] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 275.067221][ T43] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 275.088447][ T43] usb 1-1: device descriptor read/8, error -71 [ 275.199840][ T43] usb usb1-port1: unable to enumerate USB device [ 275.504111][ T5878] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 275.869608][ T1803] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 275.877734][ T1803] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input49 [ 275.905856][ T1803] usb 3-1: USB disconnect, device number 66 [ 275.916224][ T1803] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 276.513726][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 276.718883][ T30] audit: type=1400 audit(1753878007.969:875): avc: denied { name_bind } for pid=9623 comm="syz.0.1175" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 276.855339][ T5878] usb 7-1: USB disconnect, device number 5 [ 277.054033][ T30] audit: type=1400 audit(1753878008.299:876): avc: denied { create } for pid=9631 comm="syz.6.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 277.276381][ T9635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.591709][ T30] audit: type=1400 audit(1753878008.439:877): avc: denied { wake_alarm } for pid=9631 comm="syz.6.1177" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.688077][ T10] usb 6-1: USB disconnect, device number 73 [ 277.688160][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 277.706002][ T5946] usb 4-1: USB disconnect, device number 79 [ 278.060588][ T9654] tipc: Enabled bearer , priority 0 [ 278.070624][ T9654] syzkaller0: entered promiscuous mode [ 278.076442][ T9654] syzkaller0: entered allmulticast mode [ 278.097399][ T5947] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 278.108230][ T9654] tipc: Resetting bearer [ 278.122380][ T30] audit: type=1400 audit(1753878010.376:878): avc: denied { bind } for pid=9656 comm="syz.2.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.143251][ T30] audit: type=1400 audit(1753878010.376:879): avc: denied { write } for pid=9656 comm="syz.2.1187" path="socket:[21774]" dev="sockfs" ino=21774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.170795][ T9653] tipc: Resetting bearer [ 278.232453][ T9653] tipc: Disabling bearer [ 278.321436][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.337166][ T5947] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.346383][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.359190][ T5947] usb 1-1: config 0 descriptor?? [ 278.487533][ T10] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 278.575216][ T5947] usbhid 1-1:0.0: can't add hid device: -71 [ 278.584808][ T5947] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 278.594528][ T5947] usb 1-1: USB disconnect, device number 81 [ 278.657256][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 278.664742][ T10] usb 6-1: config 0 has no interfaces? [ 278.673685][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 278.685170][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.694174][ T10] usb 6-1: Product: syz [ 278.701242][ T10] usb 6-1: Manufacturer: syz [ 278.705923][ T10] usb 6-1: SerialNumber: syz [ 278.712915][ T10] usb 6-1: config 0 descriptor?? [ 278.877171][ T1803] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 279.007232][ T5947] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 279.027319][ T1803] usb 7-1: Using ep0 maxpacket: 32 [ 279.038824][ T1803] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 279.048631][ T1803] usb 7-1: config 0 has no interface number 0 [ 279.062543][ T1803] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 279.079407][ T1803] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.087585][ T1803] usb 7-1: Product: syz [ 279.091855][ T1803] usb 7-1: Manufacturer: syz [ 279.097318][ T1803] usb 7-1: SerialNumber: syz [ 279.109041][ T1803] usb 7-1: config 0 descriptor?? [ 279.119156][ T1803] smsc95xx v2.0.0 [ 279.167324][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 279.180506][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.200917][ T5947] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 279.216896][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.228682][ T5947] usb 1-1: config 0 descriptor?? [ 279.236732][ T5947] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.248690][ T5947] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.483175][ T9690] netlink: 'syz.3.1200': attribute type 3 has an invalid length. [ 279.522643][ T1803] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 279.620909][ T1803] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 279.825900][ T5878] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 280.124731][ T1803] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 280.137378][ T30] audit: type=1400 audit(1753878012.106:880): avc: denied { firmware_load } for pid=9691 comm="GPL" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 280.172973][ T1803] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 280.184974][ T5947] usb 6-1: USB disconnect, device number 74 [ 280.197344][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 280.204055][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.214249][ T5878] usb 3-1: config 0 has no interfaces? [ 280.221427][ T5878] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 280.230646][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 280.239500][ T5878] usb 3-1: Product: syz [ 280.243694][ T5878] usb 3-1: Manufacturer: syz [ 280.248762][ T5878] usb 3-1: SerialNumber: syz [ 280.254991][ T5878] usb 3-1: config 0 descriptor?? [ 280.417820][ T9694] GPL (9694) used greatest stack depth: 18952 bytes left [ 280.446752][ T30] audit: type=1400 audit(1753878012.696:881): avc: denied { getopt } for pid=9695 comm="syz.3.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 280.483644][ T5947] usb 3-1: USB disconnect, device number 67 [ 280.504992][ T30] audit: type=1400 audit(1753878012.756:882): avc: denied { ioctl } for pid=9698 comm="syz.3.1203" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 280.586222][ T9699] team0 (unregistering): Port device team_slave_0 removed [ 280.596501][ T9699] team0 (unregistering): Port device team_slave_1 removed [ 280.606192][ T9699] team0 (unregistering): Port device batadv1 removed [ 280.719932][ T9703] netlink: 'syz.3.1205': attribute type 10 has an invalid length. [ 280.728456][ T9703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1205'. [ 280.802337][ T9707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1207'. [ 280.818009][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1207'. [ 280.875616][ T10] usb 1-1: USB disconnect, device number 82 [ 280.900680][ T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 281.115684][ T9731] geneve2: entered allmulticast mode [ 281.280033][ T30] audit: type=1400 audit(1753878013.526:883): avc: denied { connect } for pid=9734 comm="syz.5.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.355025][ T30] audit: type=1400 audit(1753878013.586:884): avc: denied { read } for pid=9734 comm="syz.5.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.717306][ T5878] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 281.760594][ T1803] usb 7-1: USB disconnect, device number 6 [ 281.837874][ T30] audit: type=1400 audit(1753878014.086:885): avc: denied { name_bind } for pid=9749 comm="syz.2.1224" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 281.874555][ T30] audit: type=1400 audit(1753878014.086:886): avc: denied { node_bind } for pid=9749 comm="syz.2.1224" saddr=::ffff:127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 281.904068][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 281.904506][ T30] audit: type=1400 audit(1753878014.156:887): avc: denied { mount } for pid=9753 comm="syz.3.1225" name="/" dev="ramfs" ino=22729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 281.918553][ T5878] usb 1-1: config 0 has no interfaces? [ 281.944883][ T5878] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 281.955668][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.968500][ T5878] usb 1-1: Product: syz [ 281.972916][ T5878] usb 1-1: Manufacturer: syz [ 281.981175][ T5878] usb 1-1: SerialNumber: syz [ 281.988990][ T5878] usb 1-1: config 0 descriptor?? [ 282.007534][ T5947] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 282.178529][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.189902][ T5947] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.199128][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.209368][ T5947] usb 6-1: config 0 descriptor?? [ 282.299723][ T5878] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 282.423252][ T5947] usbhid 6-1:0.0: can't add hid device: -71 [ 282.437332][ T10] usb 1-1: USB disconnect, device number 83 [ 282.444629][ T5947] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 282.461368][ T5947] usb 6-1: USB disconnect, device number 75 [ 282.467284][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 282.468616][ T5878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.502865][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.520294][ T5878] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 282.530512][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 282.539534][ T5878] usb 4-1: Product: syz [ 282.543815][ T5878] usb 4-1: Manufacturer: syz [ 282.549696][ T5878] usb 4-1: SerialNumber: syz [ 282.555885][ T5878] usb 4-1: config 0 descriptor?? [ 282.818894][ T5878] usb 4-1: USB disconnect, device number 80 [ 282.927226][ T5947] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 283.087935][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 283.108550][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.149134][ T5947] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 283.168525][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.188327][ T5947] usb 6-1: config 0 descriptor?? [ 283.203336][ T5947] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 283.217272][ T5947] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 283.227581][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 283.253590][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 283.253606][ T30] audit: type=1400 audit(1753878015.506:889): avc: denied { validate_trans } for pid=9782 comm="syz.2.1237" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 283.377327][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 283.383897][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 283.392080][ T10] usb 1-1: config 0 has no interface number 0 [ 283.403157][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 283.412530][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.420578][ T10] usb 1-1: Product: syz [ 283.424779][ T10] usb 1-1: Manufacturer: syz [ 283.429397][ T10] usb 1-1: SerialNumber: syz [ 283.435621][ T10] usb 1-1: config 0 descriptor?? [ 283.437320][ T5878] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 283.445469][ T10] smsc95xx v2.0.0 [ 283.527241][ T1803] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 283.585128][ T9789] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 283.596696][ T9789] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 283.596696][ T30] audit: type=1400 audit(1753878015.846:890): avc: denied { firmware_load } for pid=9788 comm="syz.3.1240" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 283.607659][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 283.639515][ T5878] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.648789][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.656805][ T5878] usb 7-1: Product: syz [ 283.661029][ T5878] usb 7-1: Manufacturer: syz [ 283.665647][ T5878] usb 7-1: SerialNumber: syz [ 283.671996][ T5878] usb 7-1: config 0 descriptor?? [ 283.708684][ T1803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.720250][ T1803] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 283.729323][ T1803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.739656][ T1803] usb 3-1: config 0 descriptor?? [ 283.856040][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 283.866915][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 283.882232][ T5878] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.949884][ T1803] usbhid 3-1:0.0: can't add hid device: -71 [ 283.955937][ T1803] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 283.967846][ T1803] usb 3-1: USB disconnect, device number 68 [ 284.079632][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 284.093592][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 284.397412][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 284.547172][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 284.554595][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.569602][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 284.579934][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.590543][ T10] usb 3-1: config 0 descriptor?? [ 284.815724][ T5946] usb 6-1: USB disconnect, device number 76 [ 284.823269][ T5946] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 284.895627][ T5878] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 284.905430][ T1803] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 285.004551][ T10] kye 0003:0458:5016.000D: control desc unexpectedly large [ 285.019202][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000D/input/input50 [ 285.058473][ T1803] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.072410][ T1803] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.083151][ T1803] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.094857][ T1803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.100609][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000D/input/input51 [ 285.118113][ T9797] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 285.128679][ T1803] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.176338][ T10] kye 0003:0458:5016.000D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 285.343595][ T1803] usb 4-1: USB disconnect, device number 81 [ 285.605752][ T1803] usb 3-1: USB disconnect, device number 69 [ 285.974703][ T10] usb 1-1: USB disconnect, device number 84 [ 286.107634][ T9821] netlink: 'syz.5.1248': attribute type 3 has an invalid length. [ 286.163255][ T30] audit: type=1326 audit(1753878018.416:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 286.220261][ T30] audit: type=1326 audit(1753878018.416:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 286.250889][ T5947] usb 7-1: USB disconnect, device number 7 [ 286.253732][ T30] audit: type=1326 audit(1753878018.416:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 286.316468][ T30] audit: type=1326 audit(1753878018.416:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 286.343578][ T30] audit: type=1326 audit(1753878018.416:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9824 comm="syz.5.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 286.367702][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 286.373766][ T30] audit: type=1326 audit(1753878018.456:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 286.399082][ T30] audit: type=1326 audit(1753878018.456:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 286.426160][ T30] audit: type=1326 audit(1753878018.456:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9827 comm="syz.5.1252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 286.452176][ T5946] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 286.547207][ T1803] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 286.547445][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 286.565078][ T10] usb 1-1: config 0 has no interfaces? [ 286.574591][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 286.588796][ T10] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 286.599834][ T10] usb 1-1: Product: syz [ 286.604006][ T10] usb 1-1: Manufacturer: syz [ 286.609920][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 286.615395][ T10] usb 1-1: SerialNumber: syz [ 286.640116][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.659363][ T10] usb 1-1: config 0 descriptor?? [ 286.664584][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.684533][ T5946] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 286.694031][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 286.698437][ T1803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.734889][ T5947] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 286.737749][ T1803] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.744236][ T5946] usb 4-1: Product: syz [ 286.755679][ T1803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.758685][ T5946] usb 4-1: Manufacturer: syz [ 286.773757][ T1803] usb 3-1: config 0 descriptor?? [ 286.851500][ T5946] usb 4-1: SerialNumber: syz [ 286.862409][ T5946] usb 4-1: config 0 descriptor?? [ 286.882615][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 286.893172][ T43] usb 1-1: USB disconnect, device number 85 [ 286.917272][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 286.923734][ T5947] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 286.931978][ T5947] usb 7-1: config 0 has no interface number 0 [ 286.940036][ T5947] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 286.949673][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.957993][ T5947] usb 7-1: Product: syz [ 286.962589][ T5947] usb 7-1: Manufacturer: syz [ 286.968078][ T5947] usb 7-1: SerialNumber: syz [ 286.974936][ T5947] usb 7-1: config 0 descriptor?? [ 286.982756][ T1803] usbhid 3-1:0.0: can't add hid device: -71 [ 286.992339][ T5947] smsc95xx v2.0.0 [ 286.996339][ T1803] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 287.016007][ T1803] usb 3-1: USB disconnect, device number 70 [ 287.111933][ T43] usb 4-1: USB disconnect, device number 82 [ 287.397233][ T5947] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 287.412667][ T5947] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 287.487295][ T1803] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 287.634569][ T5947] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 287.637192][ T1803] usb 3-1: Using ep0 maxpacket: 32 [ 287.650659][ T5947] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 287.652410][ T1803] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.669951][ T1803] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 287.679023][ T1803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.689421][ T1803] usb 3-1: config 0 descriptor?? [ 287.695813][ T1803] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 287.705789][ T1803] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 287.714237][ T43] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 287.727254][ T5946] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 287.849308][ T9853] netlink: 'syz.3.1262': attribute type 3 has an invalid length. [ 287.878640][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.895420][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 287.895485][ T5946] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 287.920769][ T43] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 287.926173][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.932158][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 287.946945][ T5946] usb 6-1: config 0 descriptor?? [ 287.948328][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.963303][ T9849] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 287.979922][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.157556][ T5946] usbhid 6-1:0.0: can't add hid device: -71 [ 288.163598][ T5946] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 288.174387][ T5946] usb 6-1: USB disconnect, device number 77 [ 288.189038][ T5947] usb 1-1: USB disconnect, device number 86 [ 288.207212][ T1803] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 288.337247][ T1803] usb 4-1: device descriptor read/64, error -71 [ 288.577244][ T1803] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 288.597196][ T5946] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 288.707260][ T1803] usb 4-1: device descriptor read/64, error -71 [ 288.747241][ T5946] usb 6-1: Using ep0 maxpacket: 16 [ 288.754797][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.765803][ T5946] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 288.774863][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.784201][ T5946] usb 6-1: config 0 descriptor?? [ 288.817522][ T1803] usb usb4-port1: attempt power cycle [ 288.933206][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 288.933222][ T30] audit: type=1400 audit(1753878021.186:909): avc: denied { read } for pid=9861 comm="syz.0.1264" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 288.965038][ T30] audit: type=1400 audit(1753878021.186:910): avc: denied { open } for pid=9861 comm="syz.0.1264" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 288.990716][ T30] audit: type=1400 audit(1753878021.186:911): avc: denied { ioctl } for pid=9861 comm="syz.0.1264" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 289.157191][ T1803] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 289.177750][ T1803] usb 4-1: device descriptor read/8, error -71 [ 289.205802][ T5946] kye 0003:0458:5016.000E: control desc unexpectedly large [ 289.216799][ T5946] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.000E/input/input52 [ 289.287233][ T5972] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 289.297423][ T5946] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.000E/input/input53 [ 289.320835][ T43] usb 3-1: USB disconnect, device number 71 [ 289.330393][ T43] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 289.351752][ T30] audit: type=1400 audit(1753878021.606:912): avc: denied { setcheckreqprot } for pid=9866 comm="syz.2.1266" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 289.354841][ T5946] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 289.425655][ T5946] usb 7-1: USB disconnect, device number 8 [ 289.438156][ T1803] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 289.457599][ T5972] usb 1-1: Using ep0 maxpacket: 8 [ 289.463852][ T1803] usb 4-1: device descriptor read/8, error -71 [ 289.477375][ T5972] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 289.496335][ T30] audit: type=1400 audit(1753878021.746:913): avc: denied { create } for pid=9871 comm="syz.6.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 289.499943][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.556574][ T5972] usb 1-1: Product: syz [ 289.570472][ T5972] usb 1-1: Manufacturer: syz [ 289.581867][ T5972] usb 1-1: SerialNumber: syz [ 289.588404][ T1803] usb usb4-port1: unable to enumerate USB device [ 289.598543][ T5972] usb 1-1: config 0 descriptor?? [ 289.754754][ T30] audit: type=1326 audit(1753878022.006:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 289.756733][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1273'. [ 289.780979][ T30] audit: type=1326 audit(1753878022.006:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 289.810553][ T5972] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 289.812658][ T30] audit: type=1326 audit(1753878022.006:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 289.846824][ T43] usb 6-1: USB disconnect, device number 78 [ 289.855122][ T30] audit: type=1326 audit(1753878022.006:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 289.879121][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'. [ 289.879680][ T30] audit: type=1326 audit(1753878022.006:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9881 comm="syz.2.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 289.911550][ T1803] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 290.067270][ T1803] usb 7-1: Using ep0 maxpacket: 32 [ 290.089386][ T1803] usb 7-1: config 0 has no interfaces? [ 290.096609][ T1803] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 290.110085][ T1803] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 290.122839][ T1803] usb 7-1: Product: syz [ 290.127054][ T1803] usb 7-1: Manufacturer: syz [ 290.134424][ T1803] usb 7-1: SerialNumber: syz [ 290.141750][ T1803] usb 7-1: config 0 descriptor?? [ 290.186544][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1274'. [ 290.352610][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1271'. [ 290.372101][ T1803] usb 7-1: USB disconnect, device number 9 [ 290.822442][ T5972] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 290.977389][ T1803] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 291.151361][ T9898] tipc: Enabled bearer , priority 0 [ 291.162367][ T9898] syzkaller0: entered promiscuous mode [ 291.167881][ T9898] syzkaller0: entered allmulticast mode [ 291.193166][ T9898] tipc: Resetting bearer [ 291.205063][ T9896] tipc: Resetting bearer [ 291.254082][ T9896] tipc: Disabling bearer [ 291.317474][ T1803] usb 6-1: Using ep0 maxpacket: 16 [ 291.360966][ T9902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.707724][ T1803] usb 6-1: config 0 has no interfaces? [ 291.735460][ T1803] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 291.748548][ T1803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.761642][ T1803] usb 6-1: Product: syz [ 291.765845][ T1803] usb 6-1: Manufacturer: syz [ 291.774868][ T1803] usb 6-1: SerialNumber: syz [ 291.790897][ T1803] usb 6-1: config 0 descriptor?? [ 292.081520][ T5972] usb 1-1: USB disconnect, device number 87 [ 292.527202][ T1205] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 292.908602][ T9942] netlink: 'syz.2.1289': attribute type 3 has an invalid length. [ 292.922884][ T5972] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 293.008740][ T1205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.028905][ T1205] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 293.045807][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.073898][ T1205] usb 4-1: config 0 descriptor?? [ 293.087277][ T5972] usb 7-1: device descriptor read/64, error -71 [ 293.294004][ T1205] usbhid 4-1:0.0: can't add hid device: -71 [ 293.303176][ T1205] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 293.313880][ T1205] usb 4-1: USB disconnect, device number 87 [ 293.327992][ T5972] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 293.347205][ T5947] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 293.454663][ T1803] usb 6-1: USB disconnect, device number 79 [ 293.467934][ T5972] usb 7-1: device descriptor read/64, error -71 [ 293.507739][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 293.515517][ T5947] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 293.528474][ T5947] usb 3-1: can't read configurations, error -61 [ 293.598715][ T5972] usb usb7-port1: attempt power cycle [ 293.680868][ T5947] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 293.757392][ T1205] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 293.847191][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 293.866442][ T5947] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 293.879315][ T5947] usb 3-1: can't read configurations, error -61 [ 293.885901][ T5947] usb usb3-port1: attempt power cycle [ 294.155269][ T1205] usb 4-1: Using ep0 maxpacket: 16 [ 294.160795][ T5972] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 294.169295][ T1205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.180625][ T1205] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 294.196266][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.207605][ T5972] usb 7-1: device descriptor read/8, error -71 [ 294.226162][ T1205] usb 4-1: config 0 descriptor?? [ 294.451537][ T5947] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 294.467178][ T5972] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 294.490564][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 294.500783][ T5972] usb 7-1: device descriptor read/8, error -71 [ 294.508398][ T5947] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 294.516159][ T5947] usb 3-1: can't read configurations, error -61 [ 294.627539][ T5972] usb usb7-port1: unable to enumerate USB device [ 294.667211][ T5947] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 294.667929][ T1205] kye 0003:0458:5016.000F: control desc unexpectedly large [ 294.708136][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 294.723602][ T5947] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 294.730275][ T1205] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000F/input/input54 [ 294.731774][ T5947] usb 3-1: can't read configurations, error -61 [ 294.759380][ T5947] usb usb3-port1: unable to enumerate USB device [ 294.772547][ T1205] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000F/input/input55 [ 294.886836][ T1205] kye 0003:0458:5016.000F: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 295.127478][ T1205] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 295.332770][ T1205] usb 7-1: device descriptor read/64, error -71 [ 295.346328][ T5972] usb 4-1: USB disconnect, device number 88 [ 295.467317][ T43] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 295.709665][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 295.741649][ T43] usb 1-1: config 0 has no interfaces? [ 295.754923][ T43] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 295.764539][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.772544][ T43] usb 1-1: Product: syz [ 295.776689][ T43] usb 1-1: Manufacturer: syz [ 295.781996][ T43] usb 1-1: SerialNumber: syz [ 295.792122][ T43] usb 1-1: config 0 descriptor?? [ 296.730033][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 296.730045][ T30] audit: type=1400 audit(1753878028.946:959): avc: denied { compute_member } for pid=10016 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 296.758214][ T43] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 296.767211][ T5947] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 296.897403][ T43] usb 3-1: device descriptor read/64, error -71 [ 296.917677][T10024] bridge0: port 3(dummy0) entered disabled state [ 296.924183][T10024] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.932301][T10024] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.946027][T10024] bridge0: entered promiscuous mode [ 296.949157][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.951937][T10024] bridge0: entered allmulticast mode [ 296.971610][ T5947] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.989414][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.004373][ T5947] usb 7-1: config 0 descriptor?? [ 297.026089][T10024] bridge0: port 3(dummy0) entered blocking state [ 297.032579][T10024] bridge0: port 3(dummy0) entered forwarding state [ 297.039244][T10024] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.046350][T10024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.053709][T10024] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.060818][T10024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.121043][ T9969] Set syz1 is full, maxelem 65536 reached [ 297.137203][ T43] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 297.194125][ T30] audit: type=1400 audit(1753878029.446:960): avc: denied { listen } for pid=10027 comm="syz.3.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.218116][T10028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1323'. [ 297.220868][ T5947] usbhid 7-1:0.0: can't add hid device: -71 [ 297.238596][ T5947] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 297.249391][ T5947] usb 7-1: USB disconnect, device number 16 [ 297.255716][ T30] audit: type=1400 audit(1753878029.466:961): avc: denied { accept } for pid=10027 comm="syz.3.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 297.297861][ T43] usb 3-1: device descriptor read/64, error -71 [ 297.310012][ T30] audit: type=1400 audit(1753878029.566:962): avc: denied { execute } for pid=10029 comm="syz.5.1325" name="file1" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 297.334069][ T30] audit: type=1400 audit(1753878029.566:963): avc: denied { execute_no_trans } for pid=10029 comm="syz.5.1325" path="/216/file1" dev="tmpfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 297.407498][ T43] usb usb3-port1: attempt power cycle [ 297.549608][ T30] audit: type=1326 audit(1753878029.806:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 297.574315][ T30] audit: type=1326 audit(1753878029.806:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 297.597768][ T30] audit: type=1326 audit(1753878029.806:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb04118e9a9 code=0x7ffc0000 [ 297.621288][ T30] audit: type=1326 audit(1753878029.826:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb04118d310 code=0x7ffc0000 [ 297.645831][ T30] audit: type=1326 audit(1753878029.826:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10036 comm="syz.5.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb04118e5ab code=0x7ffc0000 [ 297.677216][ T5972] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 297.747349][ T43] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 297.767698][ T43] usb 3-1: device descriptor read/8, error -71 [ 297.797174][ T5947] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 297.807293][ T5946] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 297.827159][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 297.833842][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 297.842582][ T5972] usb 4-1: can't read configurations, error -61 [ 297.947249][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 297.954254][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.965382][ T5947] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 297.974518][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 297.979603][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.990510][ T5972] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 298.001223][ T5947] usb 7-1: config 0 descriptor?? [ 298.004853][ T5878] usb 1-1: USB disconnect, device number 88 [ 298.017824][ T43] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 298.069084][ T43] usb 3-1: device descriptor read/8, error -71 [ 298.179810][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 298.186073][ T43] usb usb3-port1: unable to enumerate USB device [ 298.197697][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 298.205304][ T5972] usb 4-1: can't read configurations, error -61 [ 298.212013][ T5972] usb usb4-port1: attempt power cycle [ 298.260803][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1329'. [ 298.442001][ T5947] kye 0003:0458:5016.0010: control desc unexpectedly large [ 298.453661][ T5947] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0010/input/input56 [ 298.568385][ T5972] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 298.590897][ T5947] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0010/input/input57 [ 298.604901][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 298.613814][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 298.657442][ T5972] usb 4-1: can't read configurations, error -61 [ 298.721701][ T5947] kye 0003:0458:5016.0010: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 298.797190][ T5972] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 298.817674][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 298.824770][ T5972] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 298.836708][ T5972] usb 4-1: can't read configurations, error -61 [ 298.849812][ T5972] usb usb4-port1: unable to enumerate USB device [ 299.144325][ T5972] usb 7-1: USB disconnect, device number 17 [ 299.427334][ T5947] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 299.577205][ T5947] usb 1-1: Using ep0 maxpacket: 8 [ 299.585395][ T5947] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 299.594748][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.602962][ T5947] usb 1-1: Product: syz [ 299.607209][ T5947] usb 1-1: Manufacturer: syz [ 299.611808][ T5947] usb 1-1: SerialNumber: syz [ 299.619009][ T5947] usb 1-1: config 0 descriptor?? [ 299.829025][ T5947] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 299.857356][ T5885] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 300.020734][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 300.052793][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 300.063871][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 300.073721][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 300.087350][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 300.096498][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.109766][ T5885] usb 3-1: config 0 descriptor?? [ 300.307213][ T5878] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 300.459579][ T5878] usb 7-1: Using ep0 maxpacket: 16 [ 300.473443][ T5878] usb 7-1: config 0 has no interfaces? [ 300.485186][ T5878] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 300.508953][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.532879][ T5946] usb 6-1: unable to get BOS descriptor or descriptor too short [ 300.538503][ T5878] usb 7-1: Product: syz [ 300.545182][ T5878] usb 7-1: Manufacturer: syz [ 300.553188][ T5885] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 300.555612][ T5878] usb 7-1: SerialNumber: syz [ 300.583532][ T5878] usb 7-1: config 0 descriptor?? [ 300.587468][ T5946] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 300.599102][ T5946] usb 6-1: can't read configurations, error -71 [ 301.225294][ T5947] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 301.293748][ T5947] usb 3-1: USB disconnect, device number 80 [ 301.357259][ T5885] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 301.508410][ T5885] usb 4-1: no configurations [ 301.516358][ T5885] usb 4-1: can't read configurations, error -22 [ 301.647243][ T5885] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 301.797852][ T5885] usb 4-1: no configurations [ 301.802577][ T5885] usb 4-1: can't read configurations, error -22 [ 301.809382][ T5885] usb usb4-port1: attempt power cycle [ 302.167290][ T5885] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 302.188217][ T5885] usb 4-1: no configurations [ 302.192914][ T5885] usb 4-1: can't read configurations, error -22 [ 302.199274][ T5946] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 302.248302][ T5947] usb 1-1: USB disconnect, device number 89 [ 302.333795][T10099] IPv4: Oversized IP packet from 127.202.26.0 [ 302.340812][ T5885] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 302.367356][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 302.373827][ T5885] usb 4-1: no configurations [ 302.378669][ T5946] usb 6-1: no configurations [ 302.383467][ T5885] usb 4-1: can't read configurations, error -22 [ 302.390076][ T5946] usb 6-1: can't read configurations, error -22 [ 302.397007][ T5946] usb usb6-port1: attempt power cycle [ 302.402558][ T5885] usb usb4-port1: unable to enumerate USB device [ 302.555865][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 302.555882][ T30] audit: type=1400 audit(1753878035.798:992): avc: denied { bind } for pid=10106 comm="syz.0.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 302.759904][ T5946] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 302.805542][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 302.811661][ T5946] usb 6-1: no configurations [ 302.816523][ T5946] usb 6-1: can't read configurations, error -22 [ 302.867643][ T5878] usb 7-1: USB disconnect, device number 18 [ 303.007223][ T5946] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 303.039583][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 303.045191][ T5946] usb 6-1: no configurations [ 303.049877][ T5946] usb 6-1: can't read configurations, error -22 [ 303.056326][ T5946] usb usb6-port1: unable to enumerate USB device [ 303.146070][T10126] netlink: 'syz.2.1362': attribute type 3 has an invalid length. [ 303.197223][ T5878] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 303.347675][ T5878] usb 7-1: Using ep0 maxpacket: 8 [ 303.356381][ T5878] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 303.365721][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.373892][ T5878] usb 7-1: Product: syz [ 303.380605][ T5878] usb 7-1: Manufacturer: syz [ 303.397176][ T5878] usb 7-1: SerialNumber: syz [ 303.404690][ T5878] usb 7-1: config 0 descriptor?? [ 303.429285][ T30] audit: type=1400 audit(1753878036.678:993): avc: denied { getopt } for pid=10137 comm="syz.2.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.625853][ T5878] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 303.827207][ T5946] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 303.842480][T10150] netlink: 'syz.3.1373': attribute type 3 has an invalid length. [ 303.933730][ T30] audit: type=1326 audit(1753878037.178:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ff18e9a9 code=0x7ffc0000 [ 303.959691][T10154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1375'. [ 303.998767][ T30] audit: type=1326 audit(1753878037.178:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ff18e9a9 code=0x7ffc0000 [ 304.024950][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1375'. [ 304.037182][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 304.047317][ T30] audit: type=1326 audit(1753878037.208:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc7ff18e9a9 code=0x7ffc0000 [ 304.074620][ T5946] usb 3-1: config 0 has no interfaces? [ 304.080177][ T30] audit: type=1326 audit(1753878037.208:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ff18e9a9 code=0x7ffc0000 [ 304.104052][ T30] audit: type=1326 audit(1753878037.208:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ff18e9a9 code=0x7ffc0000 [ 304.133570][ T5946] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 304.143000][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.154096][ T5946] usb 3-1: Product: syz [ 304.158466][ T5946] usb 3-1: Manufacturer: syz [ 304.163430][ T30] audit: type=1326 audit(1753878037.208:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc7ff18e9a9 code=0x7ffc0000 [ 304.186919][ T5946] usb 3-1: SerialNumber: syz [ 304.187004][ T30] audit: type=1326 audit(1753878037.208:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ff18e9a9 code=0x7ffc0000 [ 304.195228][ T5946] usb 3-1: config 0 descriptor?? [ 304.220136][ T30] audit: type=1326 audit(1753878037.208:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10153 comm="syz.3.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ff18e9a9 code=0x7ffc0000 [ 304.537193][ T5946] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 304.649825][ T5878] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 304.690178][ T5972] usb 3-1: USB disconnect, device number 81 [ 304.698458][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 304.710829][ T5946] usb 4-1: config 0 has no interfaces? [ 304.720547][ T5946] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 304.731862][ T5946] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 304.741520][ T5946] usb 4-1: Product: syz [ 304.745696][ T5946] usb 4-1: Manufacturer: syz [ 304.750669][ T5946] usb 4-1: SerialNumber: syz [ 304.756406][ T5946] usb 4-1: config 0 descriptor?? [ 304.887195][ T5947] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 304.964082][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 304.974994][ T5878] usb 4-1: USB disconnect, device number 97 [ 305.037273][ T5885] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 305.046390][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.057333][ T5947] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 305.066372][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.075589][ T5947] usb 1-1: config 0 descriptor?? [ 305.187684][ T5885] usb 6-1: no configurations [ 305.192358][ T5885] usb 6-1: can't read configurations, error -22 [ 305.283704][ T5947] usbhid 1-1:0.0: can't add hid device: -71 [ 305.289913][ T5947] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 305.299142][ T5947] usb 1-1: USB disconnect, device number 90 [ 305.327359][ T5885] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 305.467391][ T5972] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 305.477867][ T5885] usb 6-1: no configurations [ 305.482497][ T5885] usb 6-1: can't read configurations, error -22 [ 305.495303][ T5885] usb usb6-port1: attempt power cycle [ 305.628844][ T5972] usb 3-1: Using ep0 maxpacket: 32 [ 305.638312][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 305.652523][ T5972] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 305.663816][ T5972] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 305.673506][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 305.681714][ T5972] usb 3-1: Product: syz [ 305.685886][ T5972] usb 3-1: Manufacturer: syz [ 305.692947][ T5972] usb 3-1: SerialNumber: syz [ 305.698893][ T5972] usb 3-1: config 0 descriptor?? [ 305.727881][ T5946] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 305.837282][ T5885] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 305.868879][ T5885] usb 6-1: no configurations [ 305.873494][ T5885] usb 6-1: can't read configurations, error -22 [ 305.887193][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 305.887237][ T5878] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 305.894445][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.911231][ T5946] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 305.920411][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.929682][ T1803] usb 3-1: USB disconnect, device number 82 [ 305.936706][ T5946] usb 1-1: config 0 descriptor?? [ 305.951204][ T5946] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 305.953212][ T1205] usb 7-1: USB disconnect, device number 19 [ 305.961551][ T5946] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 306.017363][ T5885] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 306.049426][ T5885] usb 6-1: no configurations [ 306.054020][ T5885] usb 6-1: can't read configurations, error -22 [ 306.063431][ T5885] usb usb6-port1: unable to enumerate USB device [ 306.068591][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 306.076983][ T5878] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 306.089939][ T5878] usb 4-1: config 0 has no interface number 0 [ 306.100435][ T5878] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 306.111306][T10189] SELinux: Context system_u:object is not valid (left unmapped). [ 306.111656][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.132805][ T5878] usb 4-1: Product: syz [ 306.138343][ T5878] usb 4-1: Manufacturer: syz [ 306.144174][ T5878] usb 4-1: SerialNumber: syz [ 306.154425][ T5878] usb 4-1: config 0 descriptor?? [ 306.163250][ T5878] smsc95xx v2.0.0 [ 306.211135][T10193] netlink: 'syz.6.1392': attribute type 3 has an invalid length. [ 306.569599][ T5878] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 306.580910][ T5878] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.717289][ T1205] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 306.791288][ T5878] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 306.802662][ T5878] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 306.877187][ T1205] usb 7-1: Using ep0 maxpacket: 16 [ 306.883821][ T1205] usb 7-1: config 0 has no interfaces? [ 306.891040][ T1205] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 306.900146][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.908171][ T1205] usb 7-1: Product: syz [ 306.912311][ T1205] usb 7-1: Manufacturer: syz [ 306.916877][ T1205] usb 7-1: SerialNumber: syz [ 306.922933][ T1205] usb 7-1: config 0 descriptor?? [ 307.087217][ T5878] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 307.247271][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 307.255480][ T5878] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 307.264585][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.273480][ T5878] usb 3-1: Product: syz [ 307.277726][ T5878] usb 3-1: Manufacturer: syz [ 307.282324][ T5878] usb 3-1: SerialNumber: syz [ 307.289968][ T5878] usb 3-1: config 0 descriptor?? [ 307.499449][ T5878] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 307.661728][ T1205] usb 1-1: USB disconnect, device number 91 [ 307.670337][ T1205] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 308.087366][ T1205] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 308.401869][ T1205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.422110][ T1205] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 308.440414][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.456157][ T1205] usb 1-1: config 0 descriptor?? [ 308.467904][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 308.505307][ T5878] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 308.687835][ T5885] usb 4-1: USB disconnect, device number 98 [ 308.873377][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 308.891904][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 308.909575][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 308.916803][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 308.924078][ T1205] pwc: recv_control_msg error -32 req 04 val 1300 [ 308.932123][ T1205] pwc: recv_control_msg error -32 req 04 val 1400 [ 308.939586][ T1205] pwc: recv_control_msg error -32 req 02 val 2000 [ 308.946944][ T1205] pwc: recv_control_msg error -71 req 02 val 2100 [ 308.954019][ T1205] pwc: recv_control_msg error -71 req 04 val 1500 [ 308.962096][ T1205] pwc: recv_control_msg error -71 req 02 val 2500 [ 308.974341][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 308.982050][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 308.992622][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 308.999546][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 309.006603][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 309.018953][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 309.027643][ T1205] pwc: Registered as video103. [ 309.033899][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 309.055200][ T1205] usb 1-1: USB disconnect, device number 92 [ 309.087177][ T5885] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 309.275370][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 309.290636][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 309.327154][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 309.337731][ T5947] usb 7-1: USB disconnect, device number 20 [ 309.357989][ T5885] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 309.367054][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 309.407156][ T5885] usb 4-1: Product: syz [ 309.411359][ T5885] usb 4-1: Manufacturer: syz [ 309.415955][ T5885] usb 4-1: SerialNumber: syz [ 309.439781][ T5885] usb 4-1: config 0 descriptor?? [ 309.684094][ T5972] usb 4-1: USB disconnect, device number 99 [ 309.878497][ T1205] usb 3-1: USB disconnect, device number 83 [ 309.979002][ T5947] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 310.054723][T10254] team0 (unregistering): Port device team_slave_0 removed [ 310.066264][T10254] team0 (unregistering): Port device team_slave_1 removed [ 310.140373][ T5947] usb 7-1: no configurations [ 310.146350][ T5947] usb 7-1: can't read configurations, error -22 [ 310.219131][ T1205] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 310.232932][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1415'. [ 310.251443][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 310.251460][ T30] audit: type=1326 audit(1753878043.478:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.281538][ T30] audit: type=1326 audit(1753878043.478:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.307600][ T5947] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 310.315421][ T30] audit: type=1326 audit(1753878043.478:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.346866][ T30] audit: type=1326 audit(1753878043.478:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.374793][ T30] audit: type=1326 audit(1753878043.478:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.400720][ T30] audit: type=1326 audit(1753878043.478:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.429091][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 310.454167][ T30] audit: type=1326 audit(1753878043.478:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.517016][ T30] audit: type=1326 audit(1753878043.478:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.560173][ T5947] usb 7-1: no configurations [ 310.564304][ T30] audit: type=1326 audit(1753878043.528:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.565101][ T5947] usb 7-1: can't read configurations, error -22 [ 310.590137][ T1205] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.606512][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 310.620494][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 310.631844][ T5947] usb usb7-port1: attempt power cycle [ 310.640560][ T1205] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.667499][ T30] audit: type=1326 audit(1753878043.528:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.0.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6498e9a9 code=0x7ffc0000 [ 310.694479][ T1205] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.703623][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.765915][ T1205] usb 3-1: config 0 descriptor?? [ 311.007354][ T5947] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 311.039150][ T5947] usb 7-1: no configurations [ 311.043942][ T5947] usb 7-1: can't read configurations, error -22 [ 311.179601][ T5947] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 311.198722][ T1205] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 311.208030][ T5947] usb 7-1: no configurations [ 311.215708][ T5947] usb 7-1: can't read configurations, error -22 [ 311.223946][ T5947] usb usb7-port1: unable to enumerate USB device [ 311.303020][T10222] syz.5.1403: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 311.327228][T10222] CPU: 0 UID: 0 PID: 10222 Comm: syz.5.1403 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 311.327257][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.327268][T10222] Call Trace: [ 311.327275][T10222] [ 311.327282][T10222] dump_stack_lvl+0x16c/0x1f0 [ 311.327310][T10222] warn_alloc+0x248/0x3a0 [ 311.327331][T10222] ? __pfx_warn_alloc+0x10/0x10 [ 311.327361][T10222] ? rcu_is_watching+0x12/0xc0 [ 311.327385][T10222] ? trace_kmalloc+0x2b/0xd0 [ 311.327404][T10222] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 311.327440][T10222] ? hash_netiface_create+0x3ec/0x1250 [ 311.327461][T10222] ? __vmalloc_node_noprof+0xad/0xf0 [ 311.327492][T10222] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 311.327527][T10222] ? hash_netiface_create+0x3ec/0x1250 [ 311.327555][T10222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.327591][T10222] ? hash_netiface_create+0x3ec/0x1250 [ 311.327611][T10222] __vmalloc_node_noprof+0xad/0xf0 [ 311.327636][T10222] ? hash_netiface_create+0x3ec/0x1250 [ 311.327660][T10222] __vmalloc_node_range_noprof+0xb73/0x14b0 [ 311.327695][T10222] ? hash_netiface_create+0x3ec/0x1250 [ 311.327723][T10222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.327750][T10222] ? __alloc_pages_noprof+0xb/0x1b0 [ 311.327766][T10222] ? ___kmalloc_large_node+0x84/0x1e0 [ 311.327804][T10222] __kvmalloc_node_noprof+0x30a/0x620 [ 311.327832][T10222] ? hash_netiface_create+0x3ec/0x1250 [ 311.327854][T10222] ? hash_netiface_create+0x3ec/0x1250 [ 311.327880][T10222] ? hash_netiface_create+0x3ec/0x1250 [ 311.327899][T10222] hash_netiface_create+0x3ec/0x1250 [ 311.327921][T10222] ? __nla_validate+0x3b/0x50 [ 311.327940][T10222] ? __pfx_hash_netiface_create+0x10/0x10 [ 311.327963][T10222] ip_set_create+0x7e1/0x14d0 [ 311.327989][T10222] ? __pfx_ip_set_create+0x10/0x10 [ 311.328008][T10222] ? trace_contention_end+0xdd/0x130 [ 311.328044][T10222] ? find_held_lock+0x2b/0x80 [ 311.328075][T10222] nfnetlink_rcv_msg+0x9fc/0x1200 [ 311.328103][T10222] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 311.328124][T10222] ? __lock_acquire+0x622/0x1c90 [ 311.328176][T10222] ? avc_has_perm_noaudit+0x149/0x3b0 [ 311.328209][T10222] netlink_rcv_skb+0x155/0x420 [ 311.328235][T10222] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 311.328254][T10222] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.328293][T10222] ? ns_capable+0xd7/0x110 [ 311.328317][T10222] nfnetlink_rcv+0x1b3/0x430 [ 311.328335][T10222] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 311.328351][T10222] ? netlink_deliver_tap+0x1ae/0xd30 [ 311.328381][T10222] netlink_unicast+0x58d/0x850 [ 311.328411][T10222] ? __pfx_netlink_unicast+0x10/0x10 [ 311.328444][T10222] netlink_sendmsg+0x8d1/0xdd0 [ 311.328475][T10222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.328511][T10222] ____sys_sendmsg+0xa98/0xc70 [ 311.328538][T10222] ? copy_msghdr_from_user+0x10a/0x160 [ 311.328560][T10222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.328594][T10222] ? __pfx_futex_wake_mark+0x10/0x10 [ 311.328619][T10222] ___sys_sendmsg+0x134/0x1d0 [ 311.328638][T10222] ? futex_private_hash_put+0x176/0x300 [ 311.328667][T10222] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.328687][T10222] ? __lock_acquire+0x622/0x1c90 [ 311.328748][T10222] __sys_sendmsg+0x16d/0x220 [ 311.328771][T10222] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.328797][T10222] ? __x64_sys_futex+0x1e0/0x4c0 [ 311.328830][T10222] do_syscall_64+0xcd/0x4c0 [ 311.328854][T10222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.328873][T10222] RIP: 0033:0x7fb04118e9a9 [ 311.328888][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.328905][T10222] RSP: 002b:00007fb042096038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.328924][T10222] RAX: ffffffffffffffda RBX: 00007fb0413b5fa0 RCX: 00007fb04118e9a9 [ 311.328936][T10222] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 311.328947][T10222] RBP: 00007fb041210d69 R08: 0000000000000000 R09: 0000000000000000 [ 311.328957][T10222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.328968][T10222] R13: 0000000000000000 R14: 00007fb0413b5fa0 R15: 00007ffe9bc7c4e8 [ 311.328993][T10222] [ 311.329000][T10222] Mem-Info: [ 311.741653][T10222] active_anon:5288 inactive_anon:1007 isolated_anon:0 [ 311.741653][T10222] active_file:1189 inactive_file:41052 isolated_file:0 [ 311.741653][T10222] unevictable:768 dirty:208 writeback:0 [ 311.741653][T10222] slab_reclaimable:11371 slab_unreclaimable:107422 [ 311.741653][T10222] mapped:30474 shmem:1372 pagetables:1238 [ 311.741653][T10222] sec_pagetables:0 bounce:0 [ 311.741653][T10222] kernel_misc_reclaimable:0 [ 311.741653][T10222] free:1263282 free_pcp:23979 free_cma:0 [ 311.871606][T10222] Node 0 active_anon:21252kB inactive_anon:4028kB active_file:4636kB inactive_file:163996kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121836kB dirty:832kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12368kB pagetables:4836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.947196][T10222] Node 1 active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.980937][T10222] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.009981][T10222] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 312.017402][T10222] Node 0 DMA32 free:1131784kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23736kB inactive_anon:4028kB active_file:4636kB inactive_file:162672kB unevictable:1536kB writepending:832kB present:3129332kB managed:2540140kB mlocked:0kB bounce:0kB free_pcp:78828kB local_pcp:58392kB free_cma:0kB [ 312.050586][T10222] lowmem_reserve[]: 0 0 1 1 [ 312.052925][ T1205] usb 3-1: USB disconnect, device number 84 [ 312.064600][T10222] 1 [ 312.070978][T10222] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 312.110741][T10222] lowmem_reserve[]: 0 0 0 0 0 [ 312.115612][T10222] Node 1 Normal free:3905972kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:212kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13976kB local_pcp:6952kB free_cma:0kB [ 312.152842][T10222] lowmem_reserve[]: 0 0 0 0 0 [ 312.158865][T10222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 312.176542][T10222] Node 0 DMA32: 66*4kB (UME) 6*8kB (UM) 146*16kB (UME) 32*32kB (UME) 76*64kB (UME) 48*128kB (UM) 24*256kB (UME) 72*512kB (UM) 57*1024kB (UME) 16*2048kB (UM) 240*4096kB (UM) = 1131864kB [ 312.197283][T10222] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 312.209854][T10222] Node 1 Normal: 129*4kB (UME) 40*8kB (UME) 43*16kB (UME) 108*32kB (UME) 37*64kB (UME) 6*128kB (UME) 6*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (UME) 949*4096kB (M) = 3905972kB [ 312.229616][T10222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.239220][T10222] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.248638][T10222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.259394][T10222] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.276232][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1422'. [ 312.286378][T10222] 43636 total pagecache pages [ 312.293019][T10222] 27 pages in swap cache [ 312.305588][T10222] Free swap = 112488kB [ 312.311842][T10222] Total swap = 124996kB [ 312.316355][T10222] 2097051 pages RAM [ 312.320850][T10222] 0 pages HighMem/MovableOnly [ 312.325584][T10222] 430038 pages reserved [ 312.330126][T10222] 0 pages cma reserved [ 312.737275][ T5947] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 312.834399][T10298] SET target dimension over the limit! [ 312.891170][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 312.915913][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 312.937168][ T5947] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 313.106585][ T5947] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 313.126063][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 313.171896][ T5947] usb 4-1: Product: syz [ 313.187161][ T5947] usb 4-1: Manufacturer: syz [ 313.217901][ T5947] usb 4-1: SerialNumber: syz [ 313.249185][ T5947] usb 4-1: config 0 descriptor?? [ 313.391061][T10316] bridge0: port 3(syz_tun) entered blocking state [ 313.545964][ T5947] usb 4-1: USB disconnect, device number 100 [ 313.572407][T10316] bridge0: port 3(syz_tun) entered disabled state [ 313.674993][T10316] syz_tun: entered allmulticast mode [ 314.110942][T10316] syz_tun: entered promiscuous mode [ 314.116983][T10316] bridge0: port 3(syz_tun) entered blocking state [ 314.124418][T10316] bridge0: port 3(syz_tun) entered forwarding state [ 314.380739][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1445'. [ 314.425946][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1445'. [ 314.435198][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1445'. [ 314.444782][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1445'. [ 315.067177][ T5947] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 315.137470][ T5972] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 315.228092][ T5947] usb 1-1: no configurations [ 315.232744][ T5947] usb 1-1: can't read configurations, error -22 [ 315.265078][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 315.265095][ T30] audit: type=1326 audit(1753878049.511:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 315.269650][T10361] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1458'. [ 315.274389][ T30] audit: type=1326 audit(1753878049.511:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 315.345011][ T30] audit: type=1326 audit(1753878049.521:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 315.369084][ T5972] usb 6-1: Using ep0 maxpacket: 32 [ 315.390466][ T5947] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 315.408443][ T5972] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 315.412242][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1458'. [ 315.416653][ T5972] usb 6-1: config 0 has no interface number 0 [ 315.485501][ T5972] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 315.495004][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.503083][ T30] audit: type=1326 audit(1753878049.521:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 315.536893][ T5972] usb 6-1: Product: syz [ 315.542557][ T5972] usb 6-1: Manufacturer: syz [ 315.643444][ T30] audit: type=1326 audit(1753878049.521:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 315.705528][ T30] audit: type=1326 audit(1753878049.521:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 315.718285][ T5972] usb 6-1: SerialNumber: syz [ 316.254870][ T5972] usb 6-1: config 0 descriptor?? [ 316.261315][ T5972] smsc95xx v2.0.0 [ 316.266190][ T5947] usb 1-1: no configurations [ 316.270839][ T5947] usb 1-1: can't read configurations, error -22 [ 316.277285][ T5947] usb usb1-port1: attempt power cycle [ 316.301688][ T30] audit: type=1326 audit(1753878049.521:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 316.327352][ T30] audit: type=1326 audit(1753878049.521:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 316.362015][ T30] audit: type=1326 audit(1753878049.521:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 316.510790][ T30] audit: type=1326 audit(1753878049.641:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10360 comm="syz.6.1458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 316.655346][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.662659][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.669522][ T5972] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 316.684269][ T5972] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 316.717197][ T5947] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 316.745459][ T5947] usb 1-1: no configurations [ 316.765218][ T5947] usb 1-1: can't read configurations, error -22 [ 316.897313][ T1205] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 316.902057][ T5947] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 316.913387][ T5972] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 316.928020][ T5972] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -61 [ 316.938411][ T5947] usb 1-1: no configurations [ 316.943021][ T5947] usb 1-1: can't read configurations, error -22 [ 316.954030][ T5947] usb usb1-port1: unable to enumerate USB device [ 317.047451][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 317.055643][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 317.067670][ T1205] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 317.082101][ T1205] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 317.086033][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'. [ 317.092035][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 317.092059][ T1205] usb 3-1: Product: syz [ 317.092073][ T1205] usb 3-1: Manufacturer: syz [ 317.092087][ T1205] usb 3-1: SerialNumber: syz [ 317.102264][ T1205] usb 3-1: config 0 descriptor?? [ 317.141726][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1471'. [ 317.295238][ T5947] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 317.377184][ T5946] usb 3-1: USB disconnect, device number 85 [ 317.900797][ T5947] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.912698][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 317.924003][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 317.935035][ T5947] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.949391][ T5947] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.961004][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.972267][ T5947] usb 7-1: config 0 descriptor?? [ 318.205620][ T5946] usb 6-1: USB disconnect, device number 88 [ 318.413193][ T5947] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 318.502524][T10423] bridge0: entered promiscuous mode [ 318.532708][T10423] bridge0: entered allmulticast mode [ 318.797294][ T1205] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 318.867239][ T5878] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 318.957203][ T1205] usb 4-1: Using ep0 maxpacket: 8 [ 318.968513][ T1205] usb 4-1: config 0 has no interfaces? [ 318.974181][ T1205] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 318.992656][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.021372][ T1205] usb 4-1: config 0 descriptor?? [ 319.067807][ T5878] usb 6-1: no configurations [ 319.074348][ T5878] usb 6-1: can't read configurations, error -22 [ 319.131125][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 319.209038][ T5878] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 319.236056][ T1205] usb 4-1: USB disconnect, device number 101 [ 319.253038][ T5947] usb 7-1: USB disconnect, device number 25 [ 319.368733][ T5878] usb 6-1: no configurations [ 319.373581][ T5878] usb 6-1: can't read configurations, error -22 [ 319.408360][ T5878] usb usb6-port1: attempt power cycle [ 319.747533][ T5878] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 319.790166][ T5878] usb 6-1: no configurations [ 319.794888][ T5878] usb 6-1: can't read configurations, error -22 [ 320.023368][ T5878] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 320.136942][ T5878] usb 6-1: no configurations [ 320.141835][ T5878] usb 6-1: can't read configurations, error -22 [ 320.182083][ T5878] usb usb6-port1: unable to enumerate USB device [ 320.414399][T10478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1501'. [ 320.437289][ T1205] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 320.496512][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1502'. [ 320.577017][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 320.577032][ T30] audit: type=1400 audit(1753878054.821:1278): avc: denied { write } for pid=10484 comm="syz.6.1504" name="file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 320.621339][ T1205] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.628126][ T30] audit: type=1400 audit(1753878054.851:1279): avc: denied { open } for pid=10484 comm="syz.6.1504" path="/71/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 320.635883][ T1205] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 320.682152][ T1205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.685273][ T30] audit: type=1400 audit(1753878054.861:1280): avc: denied { ioctl } for pid=10484 comm="syz.6.1504" path="/71/file0" dev="tmpfs" ino=379 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 320.725172][ T1205] usb 4-1: config 0 descriptor?? [ 320.743564][ T1205] pwc: Askey VC010 type 2 USB webcam detected. [ 321.145676][ T1205] pwc: recv_control_msg error -32 req 02 val 2b00 [ 321.155545][T10506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.182810][ T1205] pwc: recv_control_msg error -32 req 02 val 2700 [ 321.211154][ T1205] pwc: recv_control_msg error -32 req 02 val 2c00 [ 321.292834][ T1205] pwc: recv_control_msg error -32 req 04 val 1000 [ 321.311383][ T1205] pwc: recv_control_msg error -32 req 04 val 1300 [ 321.320958][ T1205] pwc: recv_control_msg error -32 req 04 val 1400 [ 321.630078][ T1205] pwc: recv_control_msg error -71 req 02 val 2100 [ 321.670205][ T1205] pwc: recv_control_msg error -71 req 04 val 1500 [ 321.683496][ T1205] pwc: recv_control_msg error -71 req 02 val 2500 [ 321.692346][ T1205] pwc: recv_control_msg error -71 req 02 val 2400 [ 321.702158][ T1205] pwc: recv_control_msg error -71 req 02 val 2600 [ 321.715046][ T1205] pwc: recv_control_msg error -71 req 02 val 2900 [ 321.723732][ T1205] pwc: recv_control_msg error -71 req 02 val 2800 [ 321.742224][ T1205] pwc: recv_control_msg error -71 req 04 val 1100 [ 322.367678][ T1205] pwc: recv_control_msg error -71 req 04 val 1200 [ 322.388345][ T1205] pwc: Registered as video103. [ 322.399870][ T1205] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input62 [ 322.441200][ T1205] usb 4-1: USB disconnect, device number 102 [ 322.615129][ T30] audit: type=1400 audit(1753878057.853:1281): avc: denied { read write } for pid=10528 comm="syz.2.1519" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 322.735540][ T30] audit: type=1400 audit(1753878057.853:1282): avc: denied { open } for pid=10528 comm="syz.2.1519" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 322.886396][ T30] audit: type=1326 audit(1753878057.853:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 322.970066][ T30] audit: type=1326 audit(1753878057.853:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 323.063639][ T30] audit: type=1326 audit(1753878057.853:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 323.116004][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1524'. [ 323.121785][ T30] audit: type=1326 audit(1753878057.853:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 323.157316][ T30] audit: type=1326 audit(1753878057.853:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10528 comm="syz.2.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc22f58e9a9 code=0x7ffc0000 [ 323.181589][ T1205] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 323.210164][T10547] sch_fq: defrate 4294967295 ignored. [ 323.309299][T10548] bridge_slave_1: left allmulticast mode [ 323.314999][T10548] bridge_slave_1: left promiscuous mode [ 323.322672][T10548] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.327175][ T1205] usb 4-1: device descriptor read/64, error -71 [ 323.345908][T10548] bridge_slave_0: left allmulticast mode [ 323.365973][T10548] bridge_slave_0: left promiscuous mode [ 323.375620][T10548] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.407181][ T5947] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 323.447230][ T5946] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 323.567722][ T1205] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 323.584774][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 323.643010][ T5947] usb 7-1: config 0 has no interfaces? [ 323.648914][ T5946] usb 3-1: no configurations [ 323.653778][ T5946] usb 3-1: can't read configurations, error -22 [ 323.661790][ T5947] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 323.670974][ T5947] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 323.687305][ T5947] usb 7-1: Product: syz [ 323.691489][ T5947] usb 7-1: Manufacturer: syz [ 323.696082][ T5947] usb 7-1: SerialNumber: syz [ 323.697218][ T1205] usb 4-1: device descriptor read/64, error -71 [ 323.718477][ T5947] usb 7-1: config 0 descriptor?? [ 323.808651][ T5946] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 323.828401][ T1205] usb usb4-port1: attempt power cycle [ 323.931364][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1526'. [ 323.952495][ T5878] usb 7-1: USB disconnect, device number 26 [ 324.027225][ T5946] usb 3-1: no configurations [ 324.037326][ T5946] usb 3-1: can't read configurations, error -22 [ 324.112863][ T5946] usb usb3-port1: attempt power cycle [ 324.185778][ T1205] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 324.209750][ T1205] usb 4-1: device descriptor read/8, error -71 [ 324.459070][ T1205] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 324.492285][ T1205] usb 4-1: device descriptor read/8, error -71 [ 324.537162][ T5946] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 324.572999][ T5946] usb 3-1: no configurations [ 324.578782][ T5946] usb 3-1: can't read configurations, error -22 [ 324.592015][T10580] 9pnet: Could not find request transport: 0xffffffffffffffff [ 324.607934][ T1205] usb usb4-port1: unable to enumerate USB device [ 324.679453][T10583] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 324.821317][ T5946] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 324.852750][ T5946] usb 3-1: no configurations [ 324.862383][ T5946] usb 3-1: can't read configurations, error -22 [ 324.879252][ T5946] usb usb3-port1: unable to enumerate USB device [ 326.876260][T10541] Set syz1 is full, maxelem 65536 reached [ 326.999865][T10612] lo: MTU too low for tipc bearer [ 327.006030][T10612] tipc: Enabling of bearer rejected, failed to enable media [ 327.020949][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 327.020963][ T30] audit: type=1326 audit(1753878062.273:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.6.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.088935][ T30] audit: type=1326 audit(1753878062.273:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.6.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.161262][ T30] audit: type=1326 audit(1753878062.303:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.6.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.215785][ T30] audit: type=1326 audit(1753878062.303:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.6.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.262305][ T30] audit: type=1326 audit(1753878062.303:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.6.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.302220][ T30] audit: type=1326 audit(1753878062.553:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.332653][ T30] audit: type=1326 audit(1753878062.573:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.356677][ T30] audit: type=1326 audit(1753878062.583:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.489380][ T30] audit: type=1326 audit(1753878062.583:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.513247][ T30] audit: type=1326 audit(1753878062.583:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10627 comm="syz.6.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ad8e9a9 code=0x7ffc0000 [ 327.647389][ T5878] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 327.677316][ T1205] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 327.691968][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 328.335332][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1579'. [ 328.389418][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 328.604773][T10694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.612267][T10694] IPv6: NLM_F_CREATE should be set when creating new route [ 328.750974][T10703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.102632][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1597'. [ 329.136958][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 330.578763][T10792] serio: Serial port ptm0 [ 331.783156][T10862] netlink: 'syz.5.1666': attribute type 10 has an invalid length. [ 331.802361][T10862] team0: Port device dummy0 added [ 331.812512][T10862] netlink: 'syz.5.1666': attribute type 10 has an invalid length. [ 331.821418][T10862] [ 331.823738][T10862] ====================================================== [ 331.830736][T10862] WARNING: possible circular locking dependency detected [ 331.837733][T10862] 6.16.0-syzkaller-04405-g4b290aae788e #0 Not tainted [ 331.844473][T10862] ------------------------------------------------------ [ 331.851467][T10862] syz.5.1666/10862 is trying to acquire lock: [ 331.857510][T10862] ffff88806be68e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_device_event+0x11d/0x770 [ 331.867429][T10862] [ 331.867429][T10862] but task is already holding lock: [ 331.874788][T10862] ffff88806befcd38 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink.constprop.0+0x2e9/0x4380 [ 331.885484][T10862] [ 331.885484][T10862] which lock already depends on the new lock. [ 331.885484][T10862] [ 331.895865][T10862] [ 331.895865][T10862] the existing dependency chain (in reverse order) is: [ 331.904858][T10862] [ 331.904858][T10862] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 331.913278][T10862] __mutex_lock+0x191/0x1070 [ 331.918391][T10862] dev_set_mtu+0xa2/0x260 [ 331.923251][T10862] team_add_slave+0x90f/0x21a0 [ 331.928537][T10862] do_set_master+0x40f/0x730 [ 331.933642][T10862] do_setlink.constprop.0+0xbd8/0x4380 [ 331.939616][T10862] rtnl_newlink+0x1446/0x2000 [ 331.944807][T10862] rtnetlink_rcv_msg+0x95e/0xe90 [ 331.950254][T10862] netlink_rcv_skb+0x155/0x420 [ 331.955528][T10862] netlink_unicast+0x58d/0x850 [ 331.960806][T10862] netlink_sendmsg+0x8d1/0xdd0 [ 331.966079][T10862] ____sys_sendmsg+0xa98/0xc70 [ 331.971352][T10862] ___sys_sendmsg+0x134/0x1d0 [ 331.976535][T10862] __sys_sendmsg+0x16d/0x220 [ 331.981629][T10862] do_syscall_64+0xcd/0x4c0 [ 331.986641][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.993041][T10862] [ 331.993041][T10862] -> #0 (team->team_lock_key#6){+.+.}-{4:4}: [ 332.001197][T10862] __lock_acquire+0x126f/0x1c90 [ 332.006570][T10862] lock_acquire+0x179/0x350 [ 332.011588][T10862] __mutex_lock+0x191/0x1070 [ 332.016689][T10862] team_device_event+0x11d/0x770 [ 332.022139][T10862] notifier_call_chain+0xb9/0x410 [ 332.027675][T10862] call_netdevice_notifiers_info+0xbe/0x140 [ 332.034079][T10862] __dev_notify_flags+0x1f7/0x2e0 [ 332.039607][T10862] netif_change_flags+0x108/0x160 [ 332.045135][T10862] do_setlink.constprop.0+0xb53/0x4380 [ 332.051116][T10862] rtnl_newlink+0x1446/0x2000 [ 332.056302][T10862] rtnetlink_rcv_msg+0x95e/0xe90 [ 332.061747][T10862] netlink_rcv_skb+0x155/0x420 [ 332.067024][T10862] netlink_unicast+0x58d/0x850 [ 332.072294][T10862] netlink_sendmsg+0x8d1/0xdd0 [ 332.077564][T10862] ____sys_sendmsg+0xa98/0xc70 [ 332.082841][T10862] ___sys_sendmsg+0x134/0x1d0 [ 332.088034][T10862] __sys_sendmsg+0x16d/0x220 [ 332.093150][T10862] do_syscall_64+0xcd/0x4c0 [ 332.098179][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.104584][T10862] [ 332.104584][T10862] other info that might help us debug this: [ 332.104584][T10862] [ 332.114793][T10862] Possible unsafe locking scenario: [ 332.114793][T10862] [ 332.122221][T10862] CPU0 CPU1 [ 332.127578][T10862] ---- ---- [ 332.132933][T10862] lock(&dev_instance_lock_key#3); [ 332.138132][T10862] lock(team->team_lock_key#6); [ 332.145600][T10862] lock(&dev_instance_lock_key#3); [ 332.153316][T10862] lock(team->team_lock_key#6); [ 332.158251][T10862] [ 332.158251][T10862] *** DEADLOCK *** [ 332.158251][T10862] [ 332.166374][T10862] 2 locks held by syz.5.1666/10862: [ 332.171550][T10862] #0: ffffffff90347528 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 332.180612][T10862] #1: ffff88806befcd38 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink.constprop.0+0x2e9/0x4380 [ 332.191754][T10862] [ 332.191754][T10862] stack backtrace: [ 332.197625][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.5.1666 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 332.197646][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.197655][T10862] Call Trace: [ 332.197662][T10862] [ 332.197668][T10862] dump_stack_lvl+0x116/0x1f0 [ 332.197687][T10862] print_circular_bug+0x275/0x350 [ 332.197710][T10862] check_noncircular+0x14c/0x170 [ 332.197734][T10862] __lock_acquire+0x126f/0x1c90 [ 332.197759][T10862] lock_acquire+0x179/0x350 [ 332.197771][T10862] ? team_device_event+0x11d/0x770 [ 332.197792][T10862] ? __pfx___might_resched+0x10/0x10 [ 332.197813][T10862] ? team_device_event+0x11d/0x770 [ 332.197832][T10862] __mutex_lock+0x191/0x1070 [ 332.197849][T10862] ? team_device_event+0x11d/0x770 [ 332.197868][T10862] ? __lock_acquire+0xb8a/0x1c90 [ 332.197891][T10862] ? __pfx___mutex_lock+0x10/0x10 [ 332.197913][T10862] ? team_device_event+0x11d/0x770 [ 332.197931][T10862] team_device_event+0x11d/0x770 [ 332.197952][T10862] notifier_call_chain+0xb9/0x410 [ 332.197973][T10862] ? __pfx_team_device_event+0x10/0x10 [ 332.197994][T10862] call_netdevice_notifiers_info+0xbe/0x140 [ 332.198017][T10862] __dev_notify_flags+0x1f7/0x2e0 [ 332.198034][T10862] ? __pfx___dev_notify_flags+0x10/0x10 [ 332.198052][T10862] ? __pfx___dev_change_flags+0x10/0x10 [ 332.198071][T10862] netif_change_flags+0x108/0x160 [ 332.198088][T10862] do_setlink.constprop.0+0xb53/0x4380 [ 332.198110][T10862] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 332.198129][T10862] ? __wake_up_klogd.part.0+0x99/0xf0 [ 332.198144][T10862] ? vprintk_emit+0x1e6/0x6d0 [ 332.198163][T10862] ? __lock_acquire+0xb8a/0x1c90 [ 332.198185][T10862] ? find_held_lock+0x2b/0x80 [ 332.198203][T10862] ? __mutex_trylock_common+0xe9/0x250 [ 332.198217][T10862] ? __pfx___mutex_trylock_common+0x10/0x10 [ 332.198230][T10862] ? __pfx___might_resched+0x10/0x10 [ 332.198249][T10862] ? rcu_is_watching+0x12/0xc0 [ 332.198267][T10862] ? trace_contention_end+0xdd/0x130 [ 332.198280][T10862] ? __mutex_lock+0x1c2/0x1070 [ 332.198298][T10862] ? __pfx___mutex_lock+0x10/0x10 [ 332.198315][T10862] ? cap_capable+0xb3/0x250 [ 332.198340][T10862] rtnl_newlink+0x1446/0x2000 [ 332.198360][T10862] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.198377][T10862] ? find_held_lock+0x2b/0x80 [ 332.198393][T10862] ? avc_has_perm_noaudit+0x117/0x3b0 [ 332.198415][T10862] ? avc_has_perm_noaudit+0x149/0x3b0 [ 332.198435][T10862] ? __lock_acquire+0x622/0x1c90 [ 332.198461][T10862] ? find_held_lock+0x2b/0x80 [ 332.198478][T10862] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.198495][T10862] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.198511][T10862] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 332.198529][T10862] ? __pfx_rtnl_newlink+0x10/0x10 [ 332.198546][T10862] rtnetlink_rcv_msg+0x95e/0xe90 [ 332.198565][T10862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.198589][T10862] ? ref_tracker_free+0x37c/0x830 [ 332.198610][T10862] netlink_rcv_skb+0x155/0x420 [ 332.198631][T10862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.198649][T10862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.198672][T10862] ? netlink_deliver_tap+0x1ae/0xd30 [ 332.198692][T10862] netlink_unicast+0x58d/0x850 [ 332.198712][T10862] ? __pfx_netlink_unicast+0x10/0x10 [ 332.198734][T10862] netlink_sendmsg+0x8d1/0xdd0 [ 332.198754][T10862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.198782][T10862] ____sys_sendmsg+0xa98/0xc70 [ 332.198804][T10862] ? copy_msghdr_from_user+0x10a/0x160 [ 332.198821][T10862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.198843][T10862] ? __pfx_futex_wake_mark+0x10/0x10 [ 332.198861][T10862] ___sys_sendmsg+0x134/0x1d0 [ 332.198876][T10862] ? futex_private_hash_put+0x176/0x300 [ 332.198897][T10862] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.198913][T10862] ? __lock_acquire+0x622/0x1c90 [ 332.198944][T10862] __sys_sendmsg+0x16d/0x220 [ 332.198961][T10862] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.198977][T10862] ? __x64_sys_futex+0x1e0/0x4c0 [ 332.198994][T10862] do_syscall_64+0xcd/0x4c0 [ 332.199011][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.199027][T10862] RIP: 0033:0x7fb04118e9a9 [ 332.199038][T10862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.199052][T10862] RSP: 002b:00007fb042096038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.199066][T10862] RAX: ffffffffffffffda RBX: 00007fb0413b5fa0 RCX: 00007fb04118e9a9 [ 332.199076][T10862] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 332.199084][T10862] RBP: 00007fb041210d69 R08: 0000000000000000 R09: 0000000000000000 [ 332.199093][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.199102][T10862] R13: 0000000000000000 R14: 00007fb0413b5fa0 R15: 00007ffe9bc7c4e8 [ 332.199114][T10862] [ 332.655494][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.665836][T10862] team0: Port device dummy0 removed [ 332.685049][T10862] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 332.688999][ T30] kauditd_printk_skb: 445 callbacks suppressed [ 332.689013][ T30] audit: type=1400 audit(1753878067.933:1763): avc: denied { read write } for pid=5822 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.723943][ T30] audit: type=1400 audit(1753878067.953:1764): avc: denied { read write } for pid=5835 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.748395][ T30] audit: type=1400 audit(1753878067.983:1765): avc: denied { read write } for pid=6271 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.772512][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.992034][ T30] audit: type=1400 audit(1753878068.243:1766): avc: denied { read write } for pid=5832 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 333.016180][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.606768][ T30] audit: type=1400 audit(1753878068.853:1767): avc: denied { read write } for pid=9449 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0