last executing test programs: 12.473781355s ago: executing program 2 (id=550): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r0, r0, 0x2) syz_io_uring_setup(0x4ee6, &(0x7f0000000180)={0x0, 0xd294, 0x20, 0x3, 0x314, 0x0, r1}, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 11.256816442s ago: executing program 2 (id=554): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x36) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) open(&(0x7f0000000400)='./file0\x00', 0xc0402, 0x107) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[], 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x1, 0x8202, 0x7d000, 0x7}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x2, 0x6, 0x5, 0x0, 0x8}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x10d, 0x3}]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 9.465805124s ago: executing program 2 (id=558): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYBLOB="01030000000000004000050000000800010000e5030000000000", @ANYRES32, @ANYBLOB="0c009900a700000027000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x6040) syz_genetlink_get_family_id$nl80211(0x0, r2) unshare(0x20000400) r4 = io_uring_setup(0x3eae, &(0x7f0000000300)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a440000000010109024400010100000009040000030206000005240600"], 0x0) 8.605065523s ago: executing program 4 (id=563): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0xffff, 0x4, 0x1) 8.101629558s ago: executing program 4 (id=564): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0xec8, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40000000}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x1000000}, 0x1}, [{}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x800}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xbb4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x0) 7.12423525s ago: executing program 1 (id=566): syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @local, 0x4}}, 0x40, 0x7}, 0x90) 6.967158729s ago: executing program 4 (id=567): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000080)) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x80) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000240)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000000)={0x9f0000, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f902, 0x5, '\x00', @p_u32=0x0}}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x50, &(0x7f0000000300)={@random="99177fa54f29", @random="ece65b5c8d9b", @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\x00', 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x83}, "dc94fae9f13e"}}}}}}}, 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80}) 6.836618844s ago: executing program 0 (id=568): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x36) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) open(&(0x7f0000000400)='./file0\x00', 0xc0402, 0x107) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x1, 0x8202, 0x7d000, 0x7}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x2, 0x6, 0x5, 0x0, 0x8}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x10d, 0x3}]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 6.144058225s ago: executing program 1 (id=569): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32], 0x10) 5.983246982s ago: executing program 4 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x8, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 5.337868238s ago: executing program 0 (id=574): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0xffff, 0x4, 0x1) 4.834412945s ago: executing program 1 (id=575): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="02"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="02"], 0x10) 4.695629328s ago: executing program 0 (id=576): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x1000001) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x1300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x4000000, @mcast1, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) ptrace(0x10, r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x19, 0x2, {{0xffff0001, 0x5, 0xfffffffe, 0x5, 0x6462, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x500, 0x9, 0x0, 0x7f}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xf32, 0x1}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4.676835414s ago: executing program 2 (id=577): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24d25133c917be09e30001", @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYBLOB="94121709a1d800fae825b8a7b25023cc4b9d0d71a70064423628a58b1b82e8496561333099a514acec9584beb7a1ee63bfaa82fea79d6801581747868b9578627fef000f88b943e37f4c91d3c91fd43cf5b077452cf398785588c1d66ff7f4bab7953d36c5dd5f8ca3788479d91471427c", @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a0034000202020202020010080000026c090000"], 0x30}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) shutdown(r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) 4.322334438s ago: executing program 3 (id=578): pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r0, r0, 0x2) syz_io_uring_setup(0x4ee6, &(0x7f0000000180)={0x0, 0xd294, 0x20, 0x3, 0x314, 0x0, r1}, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 4.146966853s ago: executing program 3 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) 3.583609586s ago: executing program 1 (id=580): syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @local, 0x4}}, 0x40, 0x7}, 0x90) 3.233267383s ago: executing program 3 (id=581): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) socket$alg(0x26, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000143a889466efbc86c54"], 0x2c}}, 0x0) dup(0xffffffffffffffff) membarrier(0x1, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x8, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x2, 0x8000012f, 0x8004, 0x10000005, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x5, 0xfffffffc, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x800000, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xfff, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7ffc, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x8, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0x7, 0x200, 0xb, 0xfff]}, 0x45c) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r10, @ANYBLOB="200066060a0001000180c2000000000008000f0001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) 3.137768233s ago: executing program 2 (id=582): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) socket$alg(0x26, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000143a889466efbc86c54"], 0x2c}}, 0x0) dup(0xffffffffffffffff) membarrier(0x1, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x8, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x2, 0x8000012f, 0x8004, 0x10000005, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x5, 0xfffffffc, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x800000, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xfff, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7ffc, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x8, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0x7, 0x200, 0xb, 0xfff]}, 0x45c) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r10, @ANYBLOB="200066060a0001000180c2000000000008000f0001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) 2.588041447s ago: executing program 4 (id=583): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000600)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x0) sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x88d1, &(0x7f0000000540)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @empty, 0x5}}, 0x24) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.548149953s ago: executing program 0 (id=584): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000600)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.407898288s ago: executing program 4 (id=585): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x30200400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000020c0)={0x50, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x50}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b10904000001030001000921010100"], 0x0) 2.283899776s ago: executing program 1 (id=586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4001, 0x0, 0x7, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.2306796s ago: executing program 3 (id=587): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0xffff, 0x4, 0x1) 1.921229839s ago: executing program 0 (id=588): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) socket$alg(0x26, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000143a889466efbc86c54"], 0x2c}}, 0x0) dup(0xffffffffffffffff) membarrier(0x1, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x8, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x2, 0x8000012f, 0x8004, 0x10000005, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x5, 0xfffffffc, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x800000, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0xfff, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7ffc, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x8, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0x7, 0x200, 0xb, 0xfff]}, 0x45c) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r10, @ANYBLOB="200066060a0001000180c2000000000008000f0001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) 1.68189098s ago: executing program 2 (id=589): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/41, 0x29}], 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) 1.421740586s ago: executing program 3 (id=590): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r4, &(0x7f0000000100)=[{0x0, 0x30}, {&(0x7f0000000040)=""/86, 0x56}], 0x2, 0xffff, 0x4, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r5) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 70.384759ms ago: executing program 1 (id=591): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x540, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x3f) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffc131}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, &(0x7f0000000240), 0x41000, 0x20, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a1c, r5, 0x0, &(0x7f00000002c0)=[r5, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x9, @void, @value}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000380)) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="020300071200fffffffffffffff400000400030000020000fdffffffffffffff00000000000000000000000000000000050006006c0000000a00000300000000ff0100f7ffffffffffffff000000000100000000000000000500050000800000"], 0x90}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000be9b47926ceecf058d00d3ebd74d5e6b70d426715914be246ad12dc4f6a187080000002bff53cc5667d52c484e09a8df82b49e1260973517392b92eb1bdcbef0cd18d659416737b8e81f8193df9e94ec3bbb1b07f7e8d4b084c866931ca5cb791c4f5ad1b98ea20a46ba8774241e42ae0f5a61801ba8a48a2474674b59cc3f273150474d919fd7c0b9a5dc98e63c0bbc5f721a9602ad175a9784c7f2de0d566148d3f9d35f817b3891db2be1f426a17e31fade4dea8c9058efcebaf2f2846d042661ab01c4f071fc7b47e391", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) 59.505686ms ago: executing program 0 (id=592): creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x73b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x8) ioctl$sock_ifreq(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x20001100, 0x0, @fr=0x0}}) mount$afs(&(0x7f0000000040)=@cell={0x23, 'syz1:', 'syz0', '.backup'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@pspoll={{}, @random=0x1, @random="42830f8f2911", @broadcast}, 0x10) 0s ago: executing program 3 (id=593): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000010c0)={0x8, 0x5, 0x2, {0x2, @pix_mp={0x3fe, 0x200, 0x43564548, 0x5, 0x1, [{0xf, 0xfffffff8}, {0x9, 0xc12b}, {0x8, 0x101}, {0x0, 0x3}, {0x401, 0x6}, {0xfffffff9, 0x32ceb250}, {0x6, 0x9}, {0x6, 0x5}], 0x3, 0x6, 0x6, 0x3, 0x4}}, 0xb658}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b42fac245ae74", "21cb70af1a8d3978b3ad1a2c6ede97acca25f6a9000bab0d716e9ebdee04ab7e", "b65dab43", "9a2c4361134d8abe"}, 0x38) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xfffffffffffff6d5) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="24d25133c917be09e30001", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYBLOB="94121709a1d800fae825b8a7b25023cc4b9d0d71a70064423628a58b1b82e8496561333099a514acec9584beb7a1ee63bfaa82fea79d6801581747868b9578627fef000f88b943e37f4c91d3c91fd43cf5b077452cf398785588c1d66ff7f4bab7953d36c5dd5f8ca3788479d91471427c", @ANYBLOB="0800050002000000"], 0x24}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/703], 0x2bf) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1}, 0x20) shutdown(r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) kernel console output (not intermixed with test programs): lave_0) entered forwarding state [ 59.112412][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.119465][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.149246][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.158924][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.171361][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.182734][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.193884][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.246445][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.256895][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.283932][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.291018][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.302816][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.309863][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.353884][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.382388][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.389496][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.398736][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.398825][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 59.398833][ T30] audit: type=1400 audit(1744170330.561:111): avc: denied { sys_module } for pid=5830 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.405868][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.423322][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.451930][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.533268][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.551215][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.604608][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.621095][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.630828][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.655138][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.662261][ T4174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.673278][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.680434][ T4174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.721393][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.728473][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.764855][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.771940][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.851213][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.903800][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.915564][ T5830] veth0_vlan: entered promiscuous mode [ 59.955120][ T5830] veth1_vlan: entered promiscuous mode [ 59.975924][ T5824] veth0_vlan: entered promiscuous mode [ 60.048435][ T5824] veth1_vlan: entered promiscuous mode [ 60.082728][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.096324][ T5819] veth0_vlan: entered promiscuous mode [ 60.129156][ T5830] veth0_macvtap: entered promiscuous mode [ 60.147015][ T5819] veth1_vlan: entered promiscuous mode [ 60.156694][ T5830] veth1_macvtap: entered promiscuous mode [ 60.183052][ T5824] veth0_macvtap: entered promiscuous mode [ 60.205612][ T5824] veth1_macvtap: entered promiscuous mode [ 60.216683][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.228204][ T5819] veth0_macvtap: entered promiscuous mode [ 60.236366][ T5823] Bluetooth: hci2: command tx timeout [ 60.249213][ T5822] veth0_vlan: entered promiscuous mode [ 60.261990][ T5822] veth1_vlan: entered promiscuous mode [ 60.271813][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.282861][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.296920][ T5819] veth1_macvtap: entered promiscuous mode [ 60.302847][ T5823] Bluetooth: hci1: command tx timeout [ 60.305406][ T54] Bluetooth: hci3: command tx timeout [ 60.308221][ T5823] Bluetooth: hci0: command tx timeout [ 60.315564][ T54] Bluetooth: hci4: command tx timeout [ 60.332703][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.344374][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.356485][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.365579][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.395543][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.408293][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.421402][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.435698][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.447065][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.460179][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.473592][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.484350][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.503292][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.513922][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.525586][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.545815][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.556569][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.566692][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.577782][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.588338][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.612739][ T5822] veth0_macvtap: entered promiscuous mode [ 60.622432][ T5824] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.631289][ T5824] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.641644][ T5824] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.650662][ T5824] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.663044][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.673471][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.682192][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.690997][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.724206][ T5822] veth1_macvtap: entered promiscuous mode [ 60.767238][ T4174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.775982][ T4174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.801869][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.812798][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.822934][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.834952][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.844958][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.855575][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.866961][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.891449][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.902806][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.912689][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.924013][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.933904][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.945229][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.955837][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.976230][ T5818] veth0_vlan: entered promiscuous mode [ 61.004556][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.013988][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.023362][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.032264][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.044444][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.054208][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.068949][ T4174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.078943][ T4174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.093539][ T5818] veth1_vlan: entered promiscuous mode [ 61.099665][ T30] audit: type=1400 audit(1744170332.261:112): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/root/syzkaller.CGIUE9/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 61.124969][ T30] audit: type=1400 audit(1744170332.261:113): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.143723][ T4174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.165520][ T30] audit: type=1400 audit(1744170332.261:114): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/root/syzkaller.CGIUE9/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.198107][ T4174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.207832][ T30] audit: type=1400 audit(1744170332.261:115): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.237277][ T30] audit: type=1400 audit(1744170332.271:116): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/root/syzkaller.CGIUE9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 61.247319][ T5818] veth0_macvtap: entered promiscuous mode [ 61.270801][ T30] audit: type=1400 audit(1744170332.271:117): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/root/syzkaller.CGIUE9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 61.306381][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.314241][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.331695][ T5818] veth1_macvtap: entered promiscuous mode [ 61.345817][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.350357][ T30] audit: type=1400 audit(1744170332.271:118): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 61.373875][ T30] audit: type=1400 audit(1744170332.301:119): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 61.412642][ T30] audit: type=1400 audit(1744170332.301:120): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="gadgetfs" ino=5979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 61.436033][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.449660][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.488498][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.509987][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.517798][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.535668][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.545909][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.558144][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.568104][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.578943][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.589192][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.601523][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.612818][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.660178][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.690150][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.702359][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.713018][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.723042][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.733662][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.744197][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.754916][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.765931][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.154030][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.591072][ T10] IPVS: starting estimator thread 0... [ 62.614539][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.657828][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.675214][ T54] Bluetooth: hci2: command tx timeout [ 62.680650][ T5826] Bluetooth: hci1: command tx timeout [ 62.686037][ T5826] Bluetooth: hci0: command tx timeout [ 62.688569][ T5832] Bluetooth: hci3: command tx timeout [ 62.691492][ T5823] Bluetooth: hci4: command tx timeout [ 62.703015][ T5914] IPVS: using max 42 ests per chain, 100800 per kthread [ 62.706667][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.858074][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.879272][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.069990][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.234154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.376962][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.421188][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.507480][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 63.525576][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.531156][ T5868] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 63.561938][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.581577][ T5868] usb 2-1: config 0 has no interface number 1 [ 63.587684][ T5868] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 63.789605][ T5821] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 63.795918][ T5868] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 63.838756][ T5868] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 63.869709][ T5868] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 63.950961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.109155][ T5821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 64.115941][ T5868] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.129196][ T5821] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.168238][ T5821] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 64.175822][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 64.178337][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.194527][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 64.288063][ T5821] usb 3-1: SerialNumber: syz [ 64.317873][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 64.328551][ T5821] cdc_ether 3-1:1.0: skipping garbage [ 64.336820][ T5868] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 64.349973][ T5821] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 64.360972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.369250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.379150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.734972][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.743259][ T5868] usb 2-1: Product: syz [ 64.747420][ T5868] usb 2-1: Manufacturer: syz [ 64.752050][ T5868] usb 2-1: SerialNumber: syz [ 64.761612][ T5832] Bluetooth: hci2: command tx timeout [ 64.761645][ T5831] Bluetooth: hci4: command tx timeout [ 64.767229][ T5832] Bluetooth: hci0: command tx timeout [ 64.772755][ T5831] Bluetooth: hci1: command tx timeout [ 64.780158][ T54] Bluetooth: hci3: command tx timeout [ 64.784950][ T5821] usb-storage 3-1:1.0: USB Mass Storage device detected [ 64.807115][ T5868] usb 2-1: config 0 descriptor?? [ 64.819250][ T5920] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 64.832005][ T5868] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.847564][ T5868] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.879182][ T5868] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 64.903534][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 64.903546][ T30] audit: type=1400 audit(1744170336.071:163): avc: denied { setopt } for pid=5940 comm="syz.3.10" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.180566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.253922][ T5821] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 65.487420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.630421][ T5959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.705891][ T5920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.717335][ T30] audit: type=1400 audit(1744170336.871:164): avc: denied { bind } for pid=5919 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.751659][ T5920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.832322][ T30] audit: type=1400 audit(1744170336.871:165): avc: denied { setopt } for pid=5919 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.857875][ T30] audit: type=1400 audit(1744170336.921:166): avc: denied { getopt } for pid=5955 comm="syz.4.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.887028][ T30] audit: type=1400 audit(1744170336.921:167): avc: denied { ioctl } for pid=5955 comm="syz.4.11" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.915969][ T5925] usb 2-1: USB disconnect, device number 2 [ 65.933776][ T30] audit: type=1400 audit(1744170336.981:168): avc: denied { create } for pid=5931 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 65.955381][ T30] audit: type=1400 audit(1744170336.991:169): avc: denied { connect } for pid=5931 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.011926][ T30] audit: type=1400 audit(1744170337.051:170): avc: denied { write } for pid=5931 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 66.170012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.353413][ T5925] usb 3-1: USB disconnect, device number 2 [ 66.359702][ T30] audit: type=1400 audit(1744170337.411:171): avc: denied { create } for pid=5967 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.542330][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 66.613720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.622662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.829380][ T30] audit: type=1400 audit(1744170337.411:172): avc: denied { bind } for pid=5967 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.003139][ T5925] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.243661][ T5925] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.359408][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 67.606868][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.685639][ T5988] batadv_slave_1: entered promiscuous mode [ 67.692483][ T5988] batadv_slave_1: left promiscuous mode [ 68.301125][ T5872] IPVS: starting estimator thread 0... [ 68.320064][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 68.328015][ T5986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.344522][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 68.357439][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.365907][ T9] usb 2-1: Product: syz [ 68.370133][ T9] usb 2-1: Manufacturer: syz [ 68.374709][ T9] usb 2-1: SerialNumber: syz [ 68.389858][ T5991] IPVS: using max 79 ests per chain, 189600 per kthread [ 68.403383][ T5986] warning: `syz.3.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.415665][ T9] usb 2-1: config 0 descriptor?? [ 68.482942][ T9] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 68.775061][ T5869] IPVS: starting estimator thread 0... [ 69.003304][ T9] gspca_sunplus: reg_w_riv err -110 [ 69.024486][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 69.080096][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.120090][ T6000] IPVS: using max 49 ests per chain, 117600 per kthread [ 70.712684][ T5925] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 70.888852][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.897988][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.144187][ T5869] usb 2-1: USB disconnect, device number 3 [ 71.606449][ T5925] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.616143][ T5925] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.869783][ T5925] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 72.312721][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.320933][ T5925] usb 4-1: SerialNumber: syz [ 72.379450][ T5925] cdc_ether 4-1:1.0: skipping garbage [ 72.397082][ T5925] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 72.432594][ T5925] usb-storage 4-1:1.0: USB Mass Storage device detected [ 72.837995][ T5925] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 73.758468][ T9] usb 4-1: USB disconnect, device number 2 [ 74.046670][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 74.046701][ T30] audit: type=1400 audit(1744170345.151:183): avc: denied { create } for pid=6036 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.966689][ T6058] batadv_slave_1: entered promiscuous mode [ 74.972971][ T6058] batadv_slave_1: left promiscuous mode [ 75.126688][ T1209] IPVS: starting estimator thread 0... [ 75.511214][ T6055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.610816][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.659641][ T6062] IPVS: using max 41 ests per chain, 98400 per kthread [ 76.251704][ T24] cfg80211: failed to load regulatory.db [ 76.309624][ T5869] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.696585][ T6086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.720200][ T5869] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 76.771140][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.788424][ T5869] usb 2-1: Product: syz [ 76.798514][ T5869] usb 2-1: Manufacturer: syz [ 76.809369][ T5869] usb 2-1: SerialNumber: syz [ 76.830134][ T5869] usb 2-1: config 0 descriptor?? [ 76.865854][ T6087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.880372][ T5831] Bluetooth: hci5: urb ffff8880355e8400 submission failed (2) [ 77.060038][ T24] usb 2-1: USB disconnect, device number 4 [ 77.674966][ T30] audit: type=1400 audit(1744170348.841:184): avc: denied { read write } for pid=6092 comm="syz.0.43" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.729453][ T6093] input: syz1 as /devices/virtual/input/input5 [ 77.774065][ T30] audit: type=1400 audit(1744170348.841:185): avc: denied { open } for pid=6092 comm="syz.0.43" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.808856][ T30] audit: type=1400 audit(1744170348.871:186): avc: denied { ioctl } for pid=6092 comm="syz.0.43" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 77.849414][ T30] audit: type=1400 audit(1744170348.941:187): avc: denied { read } for pid=5181 comm="acpid" name="event4" dev="devtmpfs" ino=2761 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.972400][ T30] audit: type=1400 audit(1744170348.941:188): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2761 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.097509][ T30] audit: type=1400 audit(1744170348.941:189): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2761 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.411914][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.610326][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.685007][ T30] audit: type=1400 audit(1744170349.571:190): avc: denied { write } for pid=6095 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 78.789761][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.805241][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.818212][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.916977][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.103543][ T24] usb 1-1: config 0 descriptor?? [ 80.439455][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 80.729681][ T30] audit: type=1400 audit(1744170351.891:191): avc: denied { create } for pid=6110 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.753171][ T24] plantronics 0003:047F:FFFF.0002: global environment stack underflow [ 80.781622][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.000883][ T24] plantronics 0003:047F:FFFF.0002: item 0 2 1 11 parsing failed [ 81.022232][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.036141][ T30] audit: type=1400 audit(1744170351.891:192): avc: denied { bind } for pid=6110 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.055998][ T30] audit: type=1400 audit(1744170351.891:193): avc: denied { connect } for pid=6110 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.075434][ T30] audit: type=1400 audit(1744170351.891:194): avc: denied { write } for pid=6110 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.104366][ T30] audit: type=1400 audit(1744170352.261:195): avc: denied { read write } for pid=6092 comm="syz.0.43" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.145488][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.179014][ T24] plantronics 0003:047F:FFFF.0002: parse failed [ 81.189107][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.202036][ T24] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 81.204899][ T24] usb 1-1: USB disconnect, device number 2 [ 81.222717][ T30] audit: type=1400 audit(1744170352.261:196): avc: denied { open } for pid=6092 comm="syz.0.43" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 81.423197][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 81.441605][ T6123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.452576][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.485482][ T9] usb 2-1: config 0 descriptor?? [ 81.492809][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 81.643048][ T6133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.680070][ T30] audit: type=1400 audit(1744170352.781:197): avc: denied { mount } for pid=6128 comm="syz.4.52" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 82.634843][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 83.247370][ T9] usb 2-1: USB disconnect, device number 5 [ 84.989874][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 85.503856][ T30] audit: type=1400 audit(1744170356.671:198): avc: denied { block_suspend } for pid=6177 comm="syz.0.63" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.133459][ T6189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.372879][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.382228][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.589340][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.659424][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 86.909539][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 86.915773][ T5872] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 86.929551][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.937745][ T5872] usb 1-1: Product: syz [ 86.950760][ T5872] usb 1-1: Manufacturer: syz [ 86.955638][ T5872] usb 1-1: SerialNumber: syz [ 86.964028][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 86.997953][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.026326][ T5872] usb 1-1: config 0 descriptor?? [ 87.047032][ T24] usb 2-1: Product: syz [ 87.088157][ T30] audit: type=1400 audit(1744170358.211:199): avc: denied { create } for pid=6213 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.100614][ T24] usb 2-1: Manufacturer: syz [ 87.108106][ T5831] Bluetooth: hci5: urb ffff888140bcb800 submission failed (2) [ 87.127080][ T30] audit: type=1400 audit(1744170358.251:200): avc: denied { bind } for pid=6213 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.146576][ T30] audit: type=1400 audit(1744170358.251:201): avc: denied { create } for pid=6213 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.155567][ T24] usb 2-1: SerialNumber: syz [ 87.170434][ T30] audit: type=1400 audit(1744170358.251:202): avc: denied { create } for pid=6213 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 87.301385][ T24] usb 2-1: config 0 descriptor?? [ 87.302666][ T5925] usb 1-1: USB disconnect, device number 3 [ 87.337693][ T24] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 88.084762][ T24] gspca_sunplus: reg_w_riv err -110 [ 88.091355][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 88.716105][ T6245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.141029][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 89.299437][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 89.454378][ T5821] usb 2-1: USB disconnect, device number 6 [ 89.605780][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.632009][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.670691][ T24] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 89.698979][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.710279][ T6255] batadv_slave_1: entered promiscuous mode [ 89.728337][ T24] usb 1-1: config 0 descriptor?? [ 89.740054][ T6255] batadv_slave_1: left promiscuous mode [ 89.752285][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 89.927094][ T6255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.055227][ T6263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.144236][ T6275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.302789][ T24] usb 1-1: USB disconnect, device number 4 [ 92.309422][ T1209] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.654510][ T1209] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 92.664195][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.674444][ T1209] usb 1-1: Product: syz [ 92.678604][ T1209] usb 1-1: Manufacturer: syz [ 93.247951][ T1209] usb 1-1: SerialNumber: syz [ 93.269941][ T30] audit: type=1400 audit(1744170363.941:203): avc: denied { open } for pid=6300 comm="syz.4.97" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 93.294807][ T1209] usb 1-1: config 0 descriptor?? [ 93.411237][ T5831] Bluetooth: hci5: urb ffff888144fb2200 submission failed (2) [ 94.310102][ T24] usb 1-1: USB disconnect, device number 5 [ 94.631801][ T5869] IPVS: starting estimator thread 0... [ 94.640785][ T6324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.723412][ T5821] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.731248][ T6325] IPVS: using max 78 ests per chain, 187200 per kthread [ 94.849943][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 94.933197][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.948087][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.962326][ T5821] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 94.973872][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.994339][ T5821] usb 5-1: config 0 descriptor?? [ 95.004006][ T5821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 95.069564][ T24] usb 2-1: device descriptor read/64, error -71 [ 95.339501][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 95.869402][ T24] usb 2-1: device descriptor read/64, error -71 [ 96.410167][ T24] usb usb2-port1: attempt power cycle [ 96.879266][ T24] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 96.880393][ T5821] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 97.050794][ T24] usb 2-1: device descriptor read/8, error -71 [ 97.136342][ T5821] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.178573][ T5821] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.223459][ T5821] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 97.241284][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.258074][ T5821] usb 4-1: SerialNumber: syz [ 97.389393][ T24] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 97.402511][ T5821] cdc_ether 4-1:1.0: skipping garbage [ 97.408039][ T5821] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 97.940240][ T5821] usb-storage 4-1:1.0: USB Mass Storage device detected [ 97.954494][ T9] usb 5-1: USB disconnect, device number 2 [ 97.969052][ T24] usb 2-1: device descriptor read/8, error -71 [ 98.062652][ T5821] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 98.122300][ T24] usb usb2-port1: unable to enumerate USB device [ 98.296517][ T6372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.759409][ T5821] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 99.222707][ T6382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.380786][ T30] audit: type=1400 audit(1744170370.361:204): avc: denied { mounton } for pid=6375 comm="syz.0.117" path="/20/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.411814][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.424739][ T81] usb 4-1: USB disconnect, device number 3 [ 99.457550][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.876362][ T5821] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 99.892922][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.905207][ T5821] usb 5-1: config 0 descriptor?? [ 100.002759][ T5821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 100.859175][ T6395] input: syz1 as /devices/virtual/input/input7 [ 101.274145][ T9] usb 5-1: USB disconnect, device number 3 [ 101.280148][ T1209] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 101.349725][ T81] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.541885][ T81] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.797214][ T81] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.811034][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.821888][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 101.835262][ T1209] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 101.844919][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.860465][ T1209] usb 2-1: config 0 descriptor?? [ 101.915850][ T81] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.929128][ T81] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.939339][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.954368][ T1209] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 101.964817][ T81] usb 4-1: config 0 descriptor?? [ 102.808665][ T81] plantronics 0003:047F:FFFF.0004: global environment stack underflow [ 102.934014][ T6426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.036218][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.224458][ T81] plantronics 0003:047F:FFFF.0004: item 0 2 1 11 parsing failed [ 103.249443][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.265637][ T81] plantronics 0003:047F:FFFF.0004: parse failed [ 103.392268][ T81] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 103.406890][ T81] usb 4-1: USB disconnect, device number 4 [ 103.869506][ T1209] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.947968][ T5821] usb 2-1: USB disconnect, device number 11 [ 105.135251][ T1209] usb 3-1: device descriptor read/64, error -71 [ 105.261940][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 105.302416][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.399981][ T1209] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 105.529403][ T5870] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.619401][ T1209] usb 3-1: device descriptor read/64, error -71 [ 106.087873][ T81] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 106.279000][ T1209] usb usb3-port1: attempt power cycle [ 106.289397][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 106.293346][ T81] usb 2-1: no configurations [ 106.299229][ T81] usb 2-1: can't read configurations, error -22 [ 106.308893][ T5870] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 106.318087][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.326133][ T5870] usb 5-1: Product: syz [ 106.331097][ T5870] usb 5-1: Manufacturer: syz [ 106.349410][ T5873] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.535393][ T81] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 106.740127][ T5873] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 106.751087][ T5870] usb 5-1: SerialNumber: syz [ 106.757992][ T5870] usb 5-1: config 0 descriptor?? [ 106.760030][ T81] usb 2-1: no configurations [ 106.771415][ T5870] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 106.772441][ T81] usb 2-1: can't read configurations, error -22 [ 106.784776][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.795633][ T81] usb usb2-port1: attempt power cycle [ 106.801259][ T5873] usb 1-1: Product: syz [ 106.806647][ T5873] usb 1-1: Manufacturer: syz [ 106.811564][ T5873] usb 1-1: SerialNumber: syz [ 106.818878][ T5873] usb 1-1: config 0 descriptor?? [ 106.834099][ T5831] Bluetooth: hci5: urb ffff888012f67200 submission failed (2) [ 106.936515][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.137'. [ 107.078427][ T9] usb 1-1: USB disconnect, device number 6 [ 107.249463][ T81] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 107.291815][ T81] usb 2-1: no configurations [ 107.297521][ T5870] gspca_sunplus: reg_w_riv err -110 [ 107.303042][ T5870] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 107.342676][ T81] usb 2-1: can't read configurations, error -22 [ 107.919359][ T81] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 107.950539][ T81] usb 2-1: no configurations [ 107.955187][ T81] usb 2-1: can't read configurations, error -22 [ 107.962813][ T81] usb usb2-port1: unable to enumerate USB device [ 108.645743][ T6478] batadv_slave_1: entered promiscuous mode [ 108.659032][ T6478] batadv_slave_1: left promiscuous mode [ 108.723892][ T6478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.931562][ T1209] usb 5-1: USB disconnect, device number 4 [ 110.759730][ T1209] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 110.805737][ T6505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.950606][ T1209] usb 3-1: device descriptor read/64, error -71 [ 111.242051][ T6514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.579913][ T1209] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 111.739565][ T1209] usb 3-1: device descriptor read/64, error -71 [ 111.848476][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 111.857658][ T1209] usb usb3-port1: attempt power cycle [ 112.559402][ T5870] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 112.566997][ T1209] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 113.191505][ T1209] usb 3-1: device descriptor read/8, error -71 [ 113.205621][ T5870] usb 2-1: no configurations [ 113.222658][ T5870] usb 2-1: can't read configurations, error -22 [ 113.834157][ T5870] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 114.048567][ T6537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.092331][ T5870] usb 2-1: no configurations [ 114.100820][ T5870] usb 2-1: can't read configurations, error -22 [ 114.260409][ T5870] usb usb2-port1: attempt power cycle [ 114.375111][ T6545] batadv_slave_1: entered promiscuous mode [ 114.500513][ T6545] batadv_slave_1: left promiscuous mode [ 115.110629][ T6545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.153278][ T5870] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 115.409369][ T5870] usb 2-1: device not accepting address 18, error -71 [ 115.619774][ T30] audit: type=1400 audit(1744170386.781:205): avc: denied { name_bind } for pid=6558 comm="syz.2.164" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 115.681410][ T30] audit: type=1400 audit(1744170386.781:206): avc: denied { connect } for pid=6558 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.099655][ T30] audit: type=1400 audit(1744170386.781:207): avc: denied { write } for pid=6558 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.703090][ T5873] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 116.739341][ T30] audit: type=1400 audit(1744170386.791:208): avc: denied { read } for pid=6558 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 116.739870][ T5873] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.850929][ T81] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 116.860728][ T81] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 116.986267][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.988249][ T30] audit: type=1400 audit(1744170387.811:209): avc: denied { write } for pid=6556 comm="syz.4.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 117.139531][ T81] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.147913][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 117.162934][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 117.179417][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.195621][ T24] usb 4-1: Product: syz [ 117.203316][ T24] usb 4-1: Manufacturer: syz [ 117.207914][ T24] usb 4-1: SerialNumber: syz [ 117.220785][ T24] usb 4-1: config 0 descriptor?? [ 117.377958][ T24] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 117.389489][ T81] usb 1-1: Using ep0 maxpacket: 32 [ 117.408426][ T81] usb 1-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 117.469718][ T81] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.485011][ T81] usb 1-1: Product: syz [ 117.492358][ T81] usb 1-1: Manufacturer: syz [ 117.498505][ T81] usb 1-1: SerialNumber: syz [ 117.987362][ T24] gspca_sunplus: reg_w_riv err -110 [ 118.237093][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 118.450699][ T81] usb 1-1: config 0 descriptor?? [ 118.485733][ T81] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 118.710555][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 118.918192][ T5870] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 119.100647][ T5870] usb 2-1: no configurations [ 119.105717][ T5870] usb 2-1: can't read configurations, error -22 [ 119.489305][ T81] gspca_sunplus: reg_w_riv err -110 [ 119.494586][ T81] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 119.620521][ T10] usb 4-1: USB disconnect, device number 5 [ 119.689364][ T5870] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 119.710569][ T6606] batadv_slave_1: entered promiscuous mode [ 119.717064][ T6606] batadv_slave_1: left promiscuous mode [ 119.791044][ T6606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.889911][ T5870] usb 2-1: no configurations [ 119.918536][ T5870] usb 2-1: can't read configurations, error -22 [ 119.929448][ T5870] usb usb2-port1: attempt power cycle [ 120.595932][ T24] usb 1-1: USB disconnect, device number 7 [ 120.702355][ T5870] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 121.236943][ T5869] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 121.253046][ T5870] usb 2-1: no configurations [ 121.258245][ T5869] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 121.258598][ T5870] usb 2-1: can't read configurations, error -22 [ 121.879367][ T81] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.050430][ T81] usb 5-1: Using ep0 maxpacket: 32 [ 122.513331][ T81] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 122.537238][ T81] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.563085][ T81] usb 5-1: Product: syz [ 122.567316][ T81] usb 5-1: Manufacturer: syz [ 122.572194][ T81] usb 5-1: SerialNumber: syz [ 122.585778][ T81] usb 5-1: config 0 descriptor?? [ 122.615731][ T81] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 123.149813][ T81] gspca_sunplus: reg_w_riv err -110 [ 123.161221][ T81] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 123.375707][ T81] usb 5-1: USB disconnect, device number 5 [ 124.397594][ T5821] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 124.449431][ T5870] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 124.911941][ T5870] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.926194][ T5870] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.943367][ T5821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.963013][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.995230][ T5821] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 125.019056][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.140859][ T5821] usb 3-1: config 0 descriptor?? [ 125.158520][ T5870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 125.194057][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.194511][ T5821] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 125.254369][ T5870] usb 2-1: SerialNumber: syz [ 125.429324][ T5870] usb 2-1: can't set config #1, error -71 [ 126.282384][ T5870] usb 2-1: USB disconnect, device number 24 [ 126.435350][ T6661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.933632][ T5925] usb 3-1: USB disconnect, device number 10 [ 126.989554][ T1209] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 127.160623][ T1209] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.170848][ T1209] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.185112][ T1209] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 127.194254][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.203826][ T1209] usb 4-1: config 0 descriptor?? [ 127.212034][ T1209] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 127.453387][ T5925] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.573572][ T30] audit: type=1400 audit(1744170398.741:210): avc: denied { ioctl } for pid=6682 comm="syz.4.193" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 127.680525][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.690787][ T5925] usb 3-1: config 0 has no interfaces? [ 127.696254][ T5925] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 127.705401][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.202115][ T5925] usb 3-1: config 0 descriptor?? [ 128.329967][ T1209] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 128.513198][ T9] usb 4-1: USB disconnect, device number 6 [ 128.773051][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.781486][ T1209] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 128.809940][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.840554][ T1209] usb 5-1: config 0 descriptor?? [ 129.550501][ T9] usb 3-1: USB disconnect, device number 11 [ 129.559423][ T5925] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 129.745356][ T5925] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 129.760703][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.793725][ T5925] usb 1-1: Product: syz [ 130.067391][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 130.157987][ T5925] usb 1-1: Manufacturer: syz [ 130.168311][ T5925] usb 1-1: SerialNumber: syz [ 130.203862][ T5925] usb 1-1: config 0 descriptor?? [ 130.270511][ T5831] Bluetooth: hci5: urb ffff88814c567700 submission failed (2) [ 130.532870][ T5873] usb 1-1: USB disconnect, device number 8 [ 132.303854][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.342429][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.815438][ T1209] usbhid 5-1:0.0: can't add hid device: -71 [ 132.836008][ T1209] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 132.856920][ T1209] usb 5-1: USB disconnect, device number 6 [ 133.155818][ T6753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.909876][ T6759] batadv_slave_1: entered promiscuous mode [ 133.916644][ T6759] batadv_slave_1: left promiscuous mode [ 133.998886][ T6759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.109335][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.124075][ T30] audit: type=1400 audit(1744170405.291:211): avc: denied { rename } for pid=5178 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.152916][ T30] audit: type=1400 audit(1744170405.291:212): avc: denied { unlink } for pid=5178 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.249038][ T30] audit: type=1400 audit(1744170405.291:213): avc: denied { create } for pid=5178 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.361580][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.376097][ T9] usb 5-1: config 0 has no interfaces? [ 134.394099][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 134.486072][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.496918][ T9] usb 5-1: config 0 descriptor?? [ 134.859658][ T81] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 135.087166][ T5925] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 135.108449][ T5925] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.229203][ T81] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.366480][ T81] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.429360][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.529773][ T81] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 135.546019][ T81] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.564999][ T81] usb 1-1: config 0 descriptor?? [ 135.591823][ T81] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 135.625075][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.674341][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 135.685439][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 135.696075][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.705467][ T9] usb 4-1: Product: syz [ 135.709705][ T9] usb 4-1: Manufacturer: syz [ 135.714283][ T9] usb 4-1: SerialNumber: syz [ 135.724239][ T9] usb 4-1: config 0 descriptor?? [ 135.730997][ T9] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 136.065350][ T9] gspca_sunplus: reg_w_riv err -71 [ 136.071035][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 136.080816][ T9] usb 4-1: USB disconnect, device number 7 [ 136.105717][ T5925] usb 5-1: USB disconnect, device number 7 [ 136.220615][ T81] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 136.229045][ T81] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.299313][ T6794] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.222'. [ 136.973103][ T5925] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.219340][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 137.233894][ T5925] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 137.348102][ T5831] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 137.371103][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.410276][ T1209] usb 1-1: USB disconnect, device number 9 [ 137.427471][ T5925] usb 5-1: Product: syz [ 137.432369][ T5925] usb 5-1: Manufacturer: syz [ 137.436964][ T5925] usb 5-1: SerialNumber: syz [ 137.525248][ T5925] usb 5-1: config 0 descriptor?? [ 137.544493][ T5925] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 138.086869][ T5925] gspca_sunplus: reg_w_riv err -110 [ 138.102624][ T5925] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 138.169417][ T1209] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 138.779477][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.801421][ T1209] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.815941][ T1209] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.847854][ T1209] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 138.857473][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.870053][ T1209] usb 1-1: SerialNumber: syz [ 138.883794][ T1209] usb 1-1: bad CDC descriptors [ 138.889047][ T1209] usb-storage 1-1:1.0: USB Mass Storage device detected [ 138.911831][ T1209] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 139.007682][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 139.031764][ T10] usb 3-1: config 0 has an invalid interface number: 151 but max is 1 [ 139.040099][ T10] usb 3-1: config 0 has no interface number 1 [ 139.046422][ T10] usb 3-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.070838][ T10] usb 3-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 139.105238][ T10] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 139.124657][ T10] usb 3-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 139.135261][ T10] usb 3-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 139.164456][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 139.186099][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 169 [ 139.205886][ T10] usb 3-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 139.229188][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.265188][ T10] usb 3-1: Product: syz [ 139.280248][ T10] usb 3-1: Manufacturer: syz [ 139.298581][ T10] usb 3-1: SerialNumber: syz [ 139.340938][ T9] usb 5-1: USB disconnect, device number 8 [ 139.367428][ T10] usb 3-1: config 0 descriptor?? [ 139.397834][ T6820] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 139.399354][ T81] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.412851][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.444850][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.596940][ T81] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.610046][ T81] usb 4-1: config 0 has no interfaces? [ 139.648793][ T81] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 139.691595][ T9] usb 3-1: USB disconnect, device number 12 [ 139.694429][ T30] audit: type=1400 audit(1744170410.811:214): avc: denied { create } for pid=6818 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.733196][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.786467][ T30] audit: type=1400 audit(1744170410.851:215): avc: denied { ioctl } for pid=6818 comm="syz.2.230" path="socket:[10021]" dev="sockfs" ino=10021 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.834058][ T81] usb 4-1: config 0 descriptor?? [ 140.042947][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.418318][ T6839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.055015][ T10] usb 4-1: USB disconnect, device number 8 [ 141.075292][ T9] usb 1-1: USB disconnect, device number 10 [ 141.168881][ T30] audit: type=1400 audit(1744170412.331:216): avc: denied { map } for pid=6850 comm="syz.0.238" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.194900][ T30] audit: type=1400 audit(1744170412.371:217): avc: denied { read write } for pid=6850 comm="syz.0.238" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 141.233777][ T30] audit: type=1400 audit(1744170412.391:218): avc: denied { execute } for pid=6850 comm="syz.0.238" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 142.182692][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 142.716733][ T6862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.199512][ T5821] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 144.572231][ T5821] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.674097][ T5821] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.798718][ T5821] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 144.810106][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.840519][ T5821] usb 2-1: config 0 descriptor?? [ 145.659569][ T5821] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 145.961619][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.977020][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.991374][ T5821] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 146.012257][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.159627][ T5873] usb 2-1: USB disconnect, device number 25 [ 146.214254][ T5821] usb 4-1: config 0 descriptor?? [ 146.230756][ T5821] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 146.933610][ T6926] input: syz1 as /devices/virtual/input/input14 [ 147.307251][ T6941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.667577][ T5873] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.183742][ T5925] usb 4-1: USB disconnect, device number 9 [ 148.532711][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.546043][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.561738][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.575224][ T5873] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.591492][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.593178][ T30] audit: type=1400 audit(1744170419.761:219): avc: denied { write } for pid=6953 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.666348][ T30] audit: type=1400 audit(1744170419.761:220): avc: denied { connect } for pid=6953 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 148.668812][ T5873] usb 5-1: config 0 descriptor?? [ 148.693727][ T30] audit: type=1400 audit(1744170419.761:221): avc: denied { name_connect } for pid=6953 comm="syz.1.264" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 149.142583][ T5873] plantronics 0003:047F:FFFF.000B: global environment stack underflow [ 149.198458][ T5873] plantronics 0003:047F:FFFF.000B: item 0 2 1 11 parsing failed [ 149.414661][ T6926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.468057][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'. [ 149.734953][ T5873] plantronics 0003:047F:FFFF.000B: parse failed [ 149.741376][ T5873] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 149.765166][ T6926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.823906][ T10] usb 5-1: USB disconnect, device number 9 [ 149.859449][ T5925] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.114311][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.130755][ T5925] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.219095][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 150.582254][ T5925] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 150.591655][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.609371][ T5873] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 150.611161][ T5925] usb 1-1: config 0 descriptor?? [ 150.677095][ T6986] input: syz1 as /devices/virtual/input/input16 [ 150.759482][ T5873] usb 2-1: device descriptor read/64, error -71 [ 150.899355][ T5925] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 151.019411][ T5873] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 151.060092][ T30] audit: type=1400 audit(1744170422.231:222): avc: denied { create } for pid=6988 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.278660][ T81] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.281348][ T5925] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 151.295380][ T30] audit: type=1400 audit(1744170422.251:223): avc: denied { setopt } for pid=6988 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 151.349329][ T5873] usb 2-1: device descriptor read/64, error -71 [ 151.452405][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.464449][ T5873] usb usb2-port1: attempt power cycle [ 151.484749][ T81] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.533902][ T81] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.556934][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.562711][ T81] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.565210][ T5925] usb 4-1: Product: syz [ 151.578121][ T5925] usb 4-1: Manufacturer: syz [ 151.583202][ T5821] usb 1-1: USB disconnect, device number 11 [ 151.586950][ T5925] usb 4-1: SerialNumber: syz [ 151.622716][ T5925] usb 4-1: config 0 descriptor?? [ 151.631508][ T5831] Bluetooth: hci5: urb ffff88814cc18200 submission failed (2) [ 151.651473][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.767487][ T81] usb 5-1: config 0 descriptor?? [ 151.869406][ T5873] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 151.884531][ T5925] usb 4-1: USB disconnect, device number 10 [ 151.889867][ T5873] usb 2-1: device descriptor read/8, error -71 [ 151.963848][ T6995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.215188][ T81] plantronics 0003:047F:FFFF.000C: global environment stack underflow [ 152.224925][ T81] plantronics 0003:047F:FFFF.000C: item 0 2 1 11 parsing failed [ 152.241210][ T81] plantronics 0003:047F:FFFF.000C: parse failed [ 152.247700][ T81] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22 [ 152.492953][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.529909][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.267662][ T81] usb 5-1: USB disconnect, device number 10 [ 153.648159][ T7022] input: syz1 as /devices/virtual/input/input18 [ 153.911821][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.979379][ T5925] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 154.083089][ T10] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 154.094255][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.102645][ T10] usb 4-1: Product: syz [ 154.107036][ T10] usb 4-1: Manufacturer: syz [ 154.112219][ T10] usb 4-1: SerialNumber: syz [ 154.121866][ T10] usb 4-1: config 0 descriptor?? [ 154.130737][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.174577][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.200820][ T5831] Bluetooth: hci5: urb ffff88807e156f00 submission failed (2) [ 154.210771][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.249660][ T5925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.258718][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.422754][ T5870] usb 4-1: USB disconnect, device number 11 [ 154.931659][ T5925] usb 1-1: config 0 descriptor?? [ 155.111432][ T30] audit: type=1400 audit(1744170426.281:224): avc: denied { write } for pid=7036 comm="syz.1.286" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.223778][ T30] audit: type=1400 audit(1744170426.391:225): avc: denied { create } for pid=7039 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.271593][ T30] audit: type=1400 audit(1744170426.411:226): avc: denied { ioctl } for pid=7039 comm="syz.2.287" path="socket:[11457]" dev="sockfs" ino=11457 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 155.347202][ T5925] plantronics 0003:047F:FFFF.000D: global environment stack underflow [ 155.362855][ T5925] plantronics 0003:047F:FFFF.000D: item 0 2 1 11 parsing failed [ 155.371992][ T5925] plantronics 0003:047F:FFFF.000D: parse failed [ 155.378364][ T5925] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 155.500161][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 156.002822][ T7022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.023284][ T7022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.038944][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.041806][ T81] usb 1-1: USB disconnect, device number 12 [ 156.149822][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 156.158721][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 156.167351][ T10] usb 3-1: config 0 has no interface number 0 [ 156.182449][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.197852][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.208025][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 156.221275][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.291015][ T10] usb 3-1: config 0 descriptor?? [ 157.166900][ T30] audit: type=1400 audit(1744170428.331:227): avc: denied { name_bind } for pid=7039 comm="syz.2.287" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 157.199398][ T10] usbhid 3-1:0.1: can't add hid device: -71 [ 157.205378][ T10] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 157.219034][ T10] usb 3-1: USB disconnect, device number 13 [ 157.226470][ T30] audit: type=1400 audit(1744170428.331:228): avc: denied { node_bind } for pid=7039 comm="syz.2.287" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 157.249873][ T30] audit: type=1400 audit(1744170428.331:229): avc: denied { write } for pid=7039 comm="syz.2.287" path="socket:[11556]" dev="sockfs" ino=11556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 157.368929][ T30] audit: type=1400 audit(1744170428.331:230): avc: denied { nlmsg_write } for pid=7039 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 160.231823][ T30] audit: type=1400 audit(1744170431.391:231): avc: denied { mount } for pid=7101 comm="syz.2.304" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 160.329331][ T5821] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 160.368929][ T30] audit: type=1400 audit(1744170431.521:232): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 160.414922][ T7111] input: syz1 as /devices/virtual/input/input20 [ 160.622796][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.657030][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.704556][ T5821] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 160.724703][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.737705][ T5821] usb 5-1: config 0 descriptor?? [ 160.749478][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 160.753534][ T5821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 160.909399][ T5872] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 160.946181][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.089102][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.103181][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.116498][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.129998][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.142182][ T1209] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 161.151414][ T10] usb 2-1: config 0 descriptor?? [ 161.180272][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.226102][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.278288][ T5872] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 161.305437][ T1209] usb 3-1: config index 0 descriptor too short (expected 65348, got 68) [ 161.314236][ T1209] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 161.325344][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.328335][ T1209] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 161.355536][ T1209] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 161.366359][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.366980][ T5872] usb 1-1: config 0 descriptor?? [ 161.377726][ T1209] usb 3-1: SerialNumber: syz [ 161.386086][ T1209] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 161.400765][ T1209] usb 3-1: no configuration chosen from 1 choice [ 161.441419][ T5872] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 161.567248][ T10] plantronics 0003:047F:FFFF.000E: global environment stack underflow [ 161.588522][ T10] plantronics 0003:047F:FFFF.000E: item 0 2 1 11 parsing failed [ 161.597136][ T10] plantronics 0003:047F:FFFF.000E: parse failed [ 161.608314][ T10] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 162.002440][ T7112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.158756][ T10] usb 5-1: USB disconnect, device number 11 [ 162.173664][ T7112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.320094][ T10] usb 2-1: USB disconnect, device number 30 [ 163.719202][ T5821] usb 3-1: USB disconnect, device number 14 [ 163.732150][ T10] usb 1-1: USB disconnect, device number 13 [ 164.359403][ T5821] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 164.486676][ T7160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.029744][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.062278][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.075641][ T5821] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 165.099978][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.124017][ T5821] usb 5-1: config 0 descriptor?? [ 165.142989][ T5821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 165.902887][ T5870] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 166.062983][ T5870] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 166.110232][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.118342][ T5870] usb 4-1: Product: syz [ 166.125115][ T5870] usb 4-1: Manufacturer: syz [ 166.131249][ T5870] usb 4-1: SerialNumber: syz [ 166.138245][ T5870] usb 4-1: config 0 descriptor?? [ 166.154780][ T5831] Bluetooth: hci5: urb ffff888012f67800 submission failed (2) [ 166.686002][ T5873] usb 4-1: USB disconnect, device number 12 [ 166.805749][ T1209] usb 5-1: USB disconnect, device number 12 [ 167.526287][ T1209] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 168.062844][ T5870] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 168.160846][ T1209] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.318763][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.919656][ T5870] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.935223][ T1209] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 168.965162][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 168.978812][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.995146][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.008183][ T1209] usb 2-1: config 0 descriptor?? [ 169.038335][ T5870] usb 5-1: SerialNumber: syz [ 169.045391][ T1209] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 169.119849][ T5870] usb-storage 5-1:1.0: USB Mass Storage device detected [ 169.266890][ T5870] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 169.447698][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 170.008548][ T30] audit: type=1400 audit(1744170441.171:233): avc: denied { mounton } for pid=7225 comm="syz.3.336" path="/proc/240/task" dev="proc" ino=11810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 170.439971][ T5873] usb 2-1: USB disconnect, device number 31 [ 170.667387][ T5873] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 170.764032][ T5873] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.909380][ T5872] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 171.250987][ T7241] batadv_slave_1: entered promiscuous mode [ 171.257664][ T7241] batadv_slave_1: left promiscuous mode [ 171.322947][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.494674][ T5873] usb 5-1: USB disconnect, device number 13 [ 171.542034][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 171.551900][ T5872] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 171.571375][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.583446][ T5872] usb 2-1: Product: syz [ 171.587610][ T5872] usb 2-1: Manufacturer: syz [ 171.592397][ T5872] usb 2-1: SerialNumber: syz [ 171.601607][ T5872] usb 2-1: config 0 descriptor?? [ 171.611723][ T5872] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 172.136237][ T5872] gspca_sunplus: reg_w_riv err -110 [ 172.249369][ T5873] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 172.273182][ T5872] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 172.400840][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.417570][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.580196][ T5873] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 172.596973][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.615479][ T5873] usb 5-1: config 0 descriptor?? [ 172.636954][ T5873] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 173.820264][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 175.244031][ T5873] usb 2-1: USB disconnect, device number 32 [ 175.538755][ T1209] usb 5-1: USB disconnect, device number 14 [ 175.599335][ T5870] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 176.030626][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.041186][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 176.054672][ T5870] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 176.063993][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.081301][ T5870] usb 4-1: config 0 descriptor?? [ 176.098396][ T5870] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 178.229734][ T5821] usb 4-1: USB disconnect, device number 13 [ 178.870162][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 178.890224][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 179.117671][ T5872] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 179.282557][ T10] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 179.416855][ T10] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.089386][ T5870] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 180.799459][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 180.808754][ T30] audit: type=1400 audit(1744170451.971:234): avc: denied { read write } for pid=7329 comm="syz.3.361" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.846597][ T5870] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 180.856573][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.869084][ T30] audit: type=1400 audit(1744170451.971:235): avc: denied { open } for pid=7329 comm="syz.3.361" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.893854][ T5870] usb 2-1: Product: syz [ 180.898320][ T5870] usb 2-1: Manufacturer: syz [ 180.902995][ T5870] usb 2-1: SerialNumber: syz [ 180.975694][ T5870] usb 2-1: config 0 descriptor?? [ 180.998771][ T5870] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 181.519534][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 181.525604][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 181.531701][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 181.537703][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 181.537808][ T5870] gspca_sunplus: reg_w_riv err -110 [ 181.549515][ T5870] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 181.619423][ T5821] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 181.881280][ T5821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.891614][ T5821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.902244][ T5821] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 181.911291][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.944238][ T5821] usb 4-1: SerialNumber: syz [ 182.618551][ T30] audit: type=1400 audit(1744170453.781:236): avc: denied { override_creds } for pid=7329 comm="syz.3.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 184.084565][ T5870] usb 2-1: USB disconnect, device number 33 [ 184.109429][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 184.408827][ T10] usb 3-1: config index 0 descriptor too short (expected 65348, got 68) [ 184.493903][ T10] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 184.596231][ T7375] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.370'. [ 184.636586][ T5821] usb 4-1: 0:2 : does not exist [ 184.639307][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 184.800165][ T5821] usb 4-1: USB disconnect, device number 14 [ 184.841264][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 184.869301][ T5873] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 184.947124][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 184.955313][ T10] usb 3-1: SerialNumber: syz [ 184.992966][ T10] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 185.004760][ T10] usb 3-1: no configuration chosen from 1 choice [ 185.058115][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.534861][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.581906][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.619611][ T5873] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 185.751462][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.763096][ T5873] usb 5-1: config 0 descriptor?? [ 185.770714][ T5873] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 185.782038][ T5873] usb 3-1: USB disconnect, device number 16 [ 186.462143][ T7396] input: syz1 as /devices/virtual/input/input26 [ 186.589436][ T5925] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 187.153131][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.188252][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.222694][ T5925] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 187.242613][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.259327][ T5821] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 187.275749][ T5925] usb 1-1: config 0 descriptor?? [ 187.306822][ T5925] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 187.429481][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 187.430589][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.449953][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.459750][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.472803][ T5821] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.481911][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.492243][ T5821] usb 4-1: config 0 descriptor?? [ 187.580941][ T5870] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 187.592475][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.604022][ T5872] usb 5-1: USB disconnect, device number 15 [ 187.609948][ T5870] usb 3-1: config 0 descriptor?? [ 187.617361][ T5870] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 187.969504][ T7407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.996465][ T5821] plantronics 0003:047F:FFFF.0011: global environment stack underflow [ 188.013267][ T5821] plantronics 0003:047F:FFFF.0011: item 0 2 1 11 parsing failed [ 188.027812][ T5821] plantronics 0003:047F:FFFF.0011: parse failed [ 188.063933][ T5821] plantronics 0003:047F:FFFF.0011: probe with driver plantronics failed with error -22 [ 188.426633][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.478586][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.495744][ T10] usb 4-1: USB disconnect, device number 15 [ 188.656762][ T5872] usb 1-1: USB disconnect, device number 14 [ 188.710568][ T5870] gspca_cpia1: usb_control_msg 05, error -110 [ 188.724150][ T5870] gspca_cpia1: usb_control_msg 01, error -32 [ 188.746394][ T5870] gspca_cpia1: usb_control_msg 01, error -32 [ 188.761755][ T5870] gspca_cpia1: usb_control_msg 01, error -32 [ 188.789440][ T5870] gspca_cpia1: usb_control_msg 01, error -32 [ 188.795436][ T5870] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 189.482056][ T5925] usb 3-1: USB disconnect, device number 17 [ 189.828965][ T7433] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.382'. [ 191.792803][ T5821] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 192.016447][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.076830][ T5821] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.082304][ T5870] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 192.135444][ T5821] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 192.168890][ T7455] batadv_slave_1: entered promiscuous mode [ 192.189114][ T7455] batadv_slave_1: left promiscuous mode [ 192.190421][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.320095][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.334658][ T7458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.344594][ T5870] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.842157][ T5870] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 192.851234][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.861020][ T5870] usb 1-1: config 0 descriptor?? [ 192.868490][ T5821] usb 3-1: SerialNumber: syz [ 192.869998][ T5870] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 192.904328][ T5821] usb 3-1: bad CDC descriptors [ 192.914903][ T5821] usb-storage 3-1:1.0: USB Mass Storage device detected [ 193.059686][ T5821] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 193.277801][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 193.839759][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.846131][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.750103][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 195.025002][ T5821] usb 3-1: USB disconnect, device number 18 [ 195.059674][ T5925] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 195.117449][ T7480] batadv_slave_1: entered promiscuous mode [ 195.126776][ T7480] batadv_slave_1: left promiscuous mode [ 195.186177][ T7480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.221989][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.249799][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.343521][ T5925] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 195.356956][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.385372][ T5925] usb 2-1: config 0 descriptor?? [ 195.394384][ T5925] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 195.537636][ T5821] usb 1-1: USB disconnect, device number 15 [ 196.477022][ T7499] input: syz1 as /devices/virtual/input/input28 [ 196.700024][ T5870] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 196.728963][ T10] usb 2-1: USB disconnect, device number 34 [ 196.949422][ T81] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 197.242410][ T5870] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 197.253628][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.318308][ T5870] usb 1-1: Product: syz [ 197.323165][ T5870] usb 1-1: Manufacturer: syz [ 197.327812][ T5870] usb 1-1: SerialNumber: syz [ 197.347251][ T5870] usb 1-1: config 0 descriptor?? [ 197.384255][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.773875][ T5823] Bluetooth: hci5: urb ffff8880358cf200 submission failed (2) [ 197.787029][ T81] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.798258][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.811639][ T81] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.821220][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.831873][ T81] usb 3-1: config 0 descriptor?? [ 197.904603][ T7513] batadv_slave_1: entered promiscuous mode [ 197.911423][ T7513] batadv_slave_1: left promiscuous mode [ 197.979439][ T7513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.996861][ T10] usb 1-1: USB disconnect, device number 16 [ 198.293507][ T81] plantronics 0003:047F:FFFF.0012: global environment stack underflow [ 198.303278][ T81] plantronics 0003:047F:FFFF.0012: item 0 2 1 11 parsing failed [ 198.311431][ T81] plantronics 0003:047F:FFFF.0012: parse failed [ 198.319140][ T81] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 198.942654][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.960776][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.022802][ T5821] usb 3-1: USB disconnect, device number 19 [ 199.477673][ T7528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.622239][ T7539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.910456][ T10] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 199.914019][ T7543] batadv_slave_1: entered promiscuous mode [ 199.965939][ T7543] batadv_slave_1: left promiscuous mode [ 200.060160][ T7543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.226418][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.244417][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.258512][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 200.276530][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.566536][ T10] usb 2-1: config 0 descriptor?? [ 200.625006][ T5925] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 200.702555][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 200.881401][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.907845][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.956103][ T5925] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 200.996763][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.079885][ T5925] usb 4-1: config 0 descriptor?? [ 201.172479][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'. [ 201.572506][ T5925] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 201.894141][ T7556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.861357][ T5870] usb 2-1: USB disconnect, device number 35 [ 203.183312][ T5872] usb 4-1: USB disconnect, device number 16 [ 204.693667][ T7587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.775438][ T5872] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 205.250995][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.279410][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 205.295110][ T5872] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 205.304366][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.316435][ T5872] usb 2-1: config 0 descriptor?? [ 205.328493][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 205.347476][ T5872] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 206.049065][ T7612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.067401][ T5925] usb 2-1: USB disconnect, device number 36 [ 207.370226][ T5873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 207.860975][ T5873] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 208.333604][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.343870][ T5873] usb 1-1: Product: syz [ 208.348039][ T5873] usb 1-1: Manufacturer: syz [ 208.355786][ T5873] usb 1-1: SerialNumber: syz [ 208.362598][ T5873] usb 1-1: config 0 descriptor?? [ 208.563260][ T5823] Bluetooth: hci5: urb ffff888033a0bc00 submission failed (2) [ 208.592887][ T5873] usb 1-1: USB disconnect, device number 17 [ 209.438032][ T30] audit: type=1400 audit(1744170480.601:237): avc: denied { ioctl } for pid=7651 comm="syz.4.439" path="socket:[13251]" dev="sockfs" ino=13251 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.466936][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.490837][ T7652] syz_tun: entered promiscuous mode [ 209.498842][ T7652] syz_tun: left promiscuous mode [ 210.830264][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.442'. [ 212.099441][ T81] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 212.362864][ T81] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.373409][ T81] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.389379][ T81] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 212.399027][ T81] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.550836][ T5873] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 212.903749][ T81] usb 2-1: config 0 descriptor?? [ 212.912290][ T81] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 213.022767][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.047533][ T5873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.073098][ T5873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 213.226022][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.234240][ T5873] usb 1-1: SerialNumber: syz [ 213.662047][ T5873] usb-storage 1-1:1.0: USB Mass Storage device detected [ 213.715929][ T5873] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 214.317515][ T5925] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 214.340954][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 214.348775][ T5925] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.512977][ T10] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 214.523846][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.535862][ T10] usb 3-1: Product: syz [ 214.543810][ T10] usb 3-1: Manufacturer: syz [ 214.553586][ T10] usb 3-1: SerialNumber: syz [ 214.563842][ T10] usb 3-1: config 0 descriptor?? [ 214.579322][ T1209] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.611227][ T5823] Bluetooth: hci5: urb ffff888034feb000 submission failed (2) [ 214.632634][ T81] usb 2-1: USB disconnect, device number 37 [ 214.758712][ T7711] batadv_slave_1: entered promiscuous mode [ 214.765174][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 214.773473][ T7711] batadv_slave_1: left promiscuous mode [ 214.785774][ T1209] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af [ 214.802980][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.813826][ T10] usb 3-1: USB disconnect, device number 20 [ 214.841055][ T7714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.841382][ T1209] usb 5-1: Product: syz [ 214.877388][ T1209] usb 5-1: Manufacturer: syz [ 214.887508][ T1209] usb 5-1: SerialNumber: syz [ 214.908642][ T1209] usb 5-1: config 0 descriptor?? [ 214.918795][ T1209] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 215.711708][ T1209] gspca_sunplus: reg_w_riv err -110 [ 215.721732][ T1209] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 215.869433][ T5873] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 216.030876][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.100644][ T81] usb 1-1: USB disconnect, device number 18 [ 216.134449][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.721087][ T5873] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 216.731042][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.744163][ T5873] usb 2-1: config 0 descriptor?? [ 216.757986][ T5873] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 216.956595][ T81] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 217.181310][ T81] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.309186][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.322800][ T81] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 217.332443][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.460681][ T81] usb 3-1: config 0 descriptor?? [ 217.530127][ T81] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 218.207225][ T5821] usb 2-1: USB disconnect, device number 38 [ 218.857118][ T9] usb 5-1: USB disconnect, device number 16 [ 219.126425][ T9] usb 3-1: USB disconnect, device number 21 [ 220.359393][ T7768] batadv_slave_1: entered promiscuous mode [ 220.375805][ T7768] batadv_slave_1: left promiscuous mode [ 220.445373][ T7768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.579296][ T5873] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 223.019393][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 223.201040][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.240184][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.256385][ T5873] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 223.269421][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 223.298769][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.327784][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.337331][ T9] usb 1-1: config 0 descriptor?? [ 223.357127][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 223.372576][ T5873] usb 5-1: Product: syz [ 223.376745][ T5873] usb 5-1: Manufacturer: syz [ 223.399420][ T5873] usb 5-1: SerialNumber: syz [ 223.423978][ T5873] usb 5-1: config 0 descriptor?? [ 223.615367][ T5823] Bluetooth: hci5: urb ffff888012f94800 submission failed (2) [ 223.881343][ T1209] usb 5-1: USB disconnect, device number 17 [ 224.284709][ T7835] input: syz1 as /devices/virtual/input/input34 [ 224.680244][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 224.854260][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.909708][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.985314][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.046306][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.073302][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.116466][ T9] usb 3-1: config 0 descriptor?? [ 225.545550][ T9] plantronics 0003:047F:FFFF.0014: global environment stack underflow [ 225.559747][ T5821] usb 1-1: USB disconnect, device number 19 [ 225.645314][ T9] plantronics 0003:047F:FFFF.0014: item 0 2 1 11 parsing failed [ 225.811405][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.822130][ T10] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 225.839111][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.847520][ T9] plantronics 0003:047F:FFFF.0014: parse failed [ 225.958660][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.454263][ T9] plantronics 0003:047F:FFFF.0014: probe with driver plantronics failed with error -22 [ 226.559586][ T9] usb 3-1: USB disconnect, device number 22 [ 226.613433][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.668850][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.739968][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 226.872532][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.361211][ T10] usb 5-1: SerialNumber: syz [ 227.404984][ T10] usb 5-1: bad CDC descriptors [ 227.560054][ T81] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 227.828382][ T10] usb-storage 5-1:1.0: USB Mass Storage device detected [ 227.907450][ T10] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 227.983536][ T81] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.092937][ T81] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.108372][ T81] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 228.117505][ T81] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.157052][ T81] usb 4-1: config 0 descriptor?? [ 228.733399][ T81] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 229.722359][ T10] usb 4-1: USB disconnect, device number 17 [ 229.741296][ T81] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 229.801607][ T5873] usb 5-1: USB disconnect, device number 18 [ 229.967387][ T81] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.991625][ T81] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.082485][ T81] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 230.249566][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.263119][ T81] usb 3-1: config 0 descriptor?? [ 230.273156][ T81] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 231.174000][ T7930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.208207][ T30] audit: type=1400 audit(1744170502.241:238): avc: denied { sys_module } for pid=7923 comm="syz.1.506" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 231.247956][ T7931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.018016][ T5873] usb 3-1: USB disconnect, device number 23 [ 233.279364][ T5873] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 233.483131][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.507036][ T5873] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.660514][ T5873] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 233.680558][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.695485][ T5873] usb 4-1: SerialNumber: syz [ 233.745286][ T5873] usb 4-1: bad CDC descriptors [ 233.759827][ T5873] usb-storage 4-1:1.0: USB Mass Storage device detected [ 233.789103][ T5873] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 234.708639][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.025856][ T7995] Zero length message leads to an empty skb [ 235.577039][ T10] usb 4-1: USB disconnect, device number 18 [ 235.699642][ T8000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.769724][ T5821] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 236.953183][ T8031] batadv_slave_1: entered promiscuous mode [ 236.961043][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.039628][ T8031] batadv_slave_1: left promiscuous mode [ 237.043423][ T5821] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.153398][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.189123][ T5821] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 237.198266][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.209023][ T5821] usb 5-1: config 0 descriptor?? [ 237.217833][ T5821] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 237.989365][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 238.253700][ T8046] netlink: 'syz.0.537': attribute type 72 has an invalid length. [ 238.285950][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.351899][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.371991][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 238.386279][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.407368][ T10] usb 4-1: config 0 descriptor?? [ 238.420496][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 238.716106][ T5873] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 239.185393][ T10] usb 5-1: USB disconnect, device number 19 [ 239.538599][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.551792][ T5873] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.583597][ T5873] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 239.599380][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 239.609828][ T5873] usb 3-1: SerialNumber: syz [ 239.669845][ T9] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 239.688618][ T5873] usb 3-1: bad CDC descriptors [ 239.694449][ T5873] usb-storage 3-1:1.0: USB Mass Storage device detected [ 239.704488][ T5873] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 239.852023][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.866250][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.909643][ T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 239.944421][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.993047][ T9] usb 1-1: config 0 descriptor?? [ 240.033459][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 240.552403][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.543'. [ 240.647068][ T10] usb 4-1: USB disconnect, device number 19 [ 241.397673][ T5821] usb 3-1: USB disconnect, device number 24 [ 242.060816][ T81] usb 1-1: USB disconnect, device number 20 [ 242.267147][ T8099] batadv_slave_1: entered promiscuous mode [ 242.277647][ T8099] batadv_slave_1: left promiscuous mode [ 242.300661][ T10] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 242.384495][ T8105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.462959][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.474975][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.497783][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 242.536391][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.558156][ T10] usb 2-1: config 0 descriptor?? [ 242.589987][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 243.415323][ T8112] input: syz1 as /devices/virtual/input/input39 [ 243.779336][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 243.820537][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.354685][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.365688][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.379606][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.422522][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.432556][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.447167][ T10] usb 5-1: config 0 descriptor?? [ 244.472209][ T1209] usb 2-1: USB disconnect, device number 39 [ 244.967005][ T10] plantronics 0003:047F:FFFF.0015: global environment stack underflow [ 244.977040][ T10] plantronics 0003:047F:FFFF.0015: item 0 2 1 11 parsing failed [ 245.149398][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.292032][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.438206][ T10] plantronics 0003:047F:FFFF.0015: parse failed [ 245.607001][ T10] plantronics 0003:047F:FFFF.0015: probe with driver plantronics failed with error -22 [ 245.662635][ T10] usb 5-1: USB disconnect, device number 20 [ 245.810027][ T8144] netlink: 'syz.3.559': attribute type 72 has an invalid length. [ 246.114520][ T5821] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 246.907316][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.917622][ T5821] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.949879][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 246.950630][ T5821] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 246.979580][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.995486][ T5821] usb 3-1: SerialNumber: syz [ 247.128741][ T5821] usb 3-1: bad CDC descriptors [ 247.134101][ T5821] usb-storage 3-1:1.0: USB Mass Storage device detected [ 247.546088][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.565271][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.588681][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 247.631867][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.647561][ T5821] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 247.667402][ T10] usb 4-1: config 0 descriptor?? [ 247.675081][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 248.525675][ T8178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.226823][ T81] usb 4-1: USB disconnect, device number 20 [ 249.509604][ T5821] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 250.117965][ T1209] usb 3-1: USB disconnect, device number 25 [ 250.199351][ T5821] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 250.548055][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.613368][ T5821] usb 5-1: Product: syz [ 250.617644][ T5821] usb 5-1: Manufacturer: syz [ 250.619869][ T8206] batadv_slave_1: entered promiscuous mode [ 250.622837][ T5821] usb 5-1: SerialNumber: syz [ 250.633164][ T8206] batadv_slave_1: left promiscuous mode [ 250.636837][ T5821] usb 5-1: config 0 descriptor?? [ 250.669137][ T5823] Bluetooth: hci5: urb ffff88802a539900 submission failed (2) [ 250.711278][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.354818][ T1209] usb 5-1: USB disconnect, device number 21 [ 251.915232][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 252.612614][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 253.963487][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 255.016352][ T8256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.059418][ C1] ------------[ cut here ]------------ [ 255.065100][ C1] ODEBUG: activate active (active state 0) object: ffff888077fd9e58 object type: rcu_head hint: 0x0 [ 255.076095][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 255.085284][ C1] Modules linked in: [ 255.089213][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 255.100849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.110895][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 255.116704][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 76 f4 8b 4c 89 e6 48 c7 c7 20 6b f4 8b e8 6f e1 a5 fc 90 <0f> 0b 90 90 58 83 05 26 95 b1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 255.136301][ C1] RSP: 0018:ffffc90000a08ad8 EFLAGS: 00010286 [ 255.142350][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ad098 [ 255.150316][ C1] RDX: ffff88801daf2440 RSI: ffffffff817ad0a5 RDI: 0000000000000001 [ 255.158260][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 255.166214][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf47140 [ 255.174181][ C1] R13: ffffffff8b8e97c0 R14: 0000000000000000 R15: ffffc90000a08b98 [ 255.182149][ C1] FS: 0000000000000000(0000) GS:ffff888124ab3000(0000) knlGS:0000000000000000 [ 255.182263][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.191079][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.203893][ C1] CR2: 0000001b2fa0aff8 CR3: 00000000798aa000 CR4: 00000000003526f0 [ 255.211849][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.219816][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.227761][ C1] Call Trace: [ 255.231027][ C1] [ 255.233857][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.239670][ C1] debug_object_activate+0x2bc/0x4c0 [ 255.244933][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 255.250740][ C1] ? try_to_wake_up+0xa25/0x1680 [ 255.255653][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 255.260836][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 255.266875][ C1] __call_rcu_common.constprop.0+0x2c/0x9f0 [ 255.272753][ C1] delete_node+0x1fc/0x8d0 [ 255.277155][ C1] ? find_held_lock+0x2b/0x80 [ 255.281832][ C1] __radix_tree_delete+0x193/0x3d0 [ 255.286920][ C1] radix_tree_delete_item+0xea/0x230 [ 255.292188][ C1] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 255.298057][ C1] ? queue_work_on+0x12a/0x1f0 [ 255.302805][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.307998][ C1] ? queue_work_on+0x8b/0x1f0 [ 255.312666][ C1] ? rcu_core+0x797/0x14e0 [ 255.317057][ C1] ? rcu_core+0x797/0x14e0 [ 255.321455][ C1] afs_cell_destroy+0x1db/0x310 [ 255.326295][ C1] rcu_core+0x799/0x14e0 [ 255.330524][ C1] ? __pfx_rcu_core+0x10/0x10 [ 255.335176][ C1] ? run_timer_base+0x121/0x190 [ 255.340018][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 255.345195][ C1] handle_softirqs+0x216/0x8e0 [ 255.349948][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 255.355222][ C1] __irq_exit_rcu+0x109/0x170 [ 255.359882][ C1] irq_exit_rcu+0x9/0x30 [ 255.364098][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 255.369715][ C1] [ 255.372622][ C1] [ 255.375528][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.381491][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 255.387096][ C1] Code: 95 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bc 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 255.406684][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 255.412735][ C1] RAX: 0000000000f53365 RBX: 0000000000000001 RCX: ffffffff8b723439 [ 255.420704][ C1] RDX: 0000000000000000 RSI: ffffffff8dbeef8e RDI: ffffffff8bf465c0 [ 255.428658][ C1] RBP: ffffed1003b5e488 R08: 0000000000000001 R09: ffffed10170a65bd [ 255.436623][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 255.444592][ C1] R13: ffff88801daf2440 R14: ffffffff90865310 R15: 0000000000000000 [ 255.452548][ C1] ? ct_kernel_exit+0x139/0x190 [ 255.457376][ C1] default_idle+0x13/0x20 [ 255.461704][ C1] default_idle_call+0x6d/0xb0 [ 255.466443][ C1] do_idle+0x391/0x510 [ 255.470501][ C1] ? __pfx_do_idle+0x10/0x10 [ 255.475068][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 255.480265][ C1] cpu_startup_entry+0x4f/0x60 [ 255.485016][ C1] start_secondary+0x21d/0x2b0 [ 255.489761][ C1] ? __pfx_start_secondary+0x10/0x10 [ 255.495021][ C1] common_startup_64+0x13e/0x148 [ 255.499947][ C1] [ 255.502945][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 255.510198][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc1-syzkaller-00025-gbec7dcbc242c #0 PREEMPT(full) [ 255.521792][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.531819][ C1] Call Trace: [ 255.535085][ C1] [ 255.537901][ C1] dump_stack_lvl+0x3d/0x1f0 [ 255.542477][ C1] panic+0x71c/0x800 [ 255.546358][ C1] ? __pfx_panic+0x10/0x10 [ 255.550753][ C1] ? show_trace_log_lvl+0x29b/0x3e0 [ 255.555927][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 255.561014][ C1] ? debug_print_object+0x1a2/0x2b0 [ 255.566197][ C1] check_panic_on_warn+0xab/0xb0 [ 255.571108][ C1] __warn+0xf6/0x3c0 [ 255.574975][ C1] ? debug_print_object+0x1a2/0x2b0 [ 255.580151][ C1] report_bug+0x3c3/0x580 [ 255.584453][ C1] ? debug_print_object+0x1a2/0x2b0 [ 255.589624][ C1] handle_bug+0x184/0x210 [ 255.593929][ C1] exc_invalid_op+0x17/0x50 [ 255.598404][ C1] asm_exc_invalid_op+0x1a/0x20 [ 255.603233][ C1] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 255.609017][ C1] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd a0 76 f4 8b 4c 89 e6 48 c7 c7 20 6b f4 8b e8 6f e1 a5 fc 90 <0f> 0b 90 90 58 83 05 26 95 b1 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 255.628596][ C1] RSP: 0018:ffffc90000a08ad8 EFLAGS: 00010286 [ 255.634635][ C1] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817ad098 [ 255.642579][ C1] RDX: ffff88801daf2440 RSI: ffffffff817ad0a5 RDI: 0000000000000001 [ 255.650523][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 255.658465][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff8bf47140 [ 255.666406][ C1] R13: ffffffff8b8e97c0 R14: 0000000000000000 R15: ffffc90000a08b98 [ 255.674355][ C1] ? __warn_printk+0x198/0x350 [ 255.679091][ C1] ? __warn_printk+0x1a5/0x350 [ 255.683831][ C1] ? debug_print_object+0x1a1/0x2b0 [ 255.689004][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.694785][ C1] debug_object_activate+0x2bc/0x4c0 [ 255.700047][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 255.705827][ C1] ? try_to_wake_up+0xa25/0x1680 [ 255.710739][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 255.715911][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 255.721951][ C1] __call_rcu_common.constprop.0+0x2c/0x9f0 [ 255.727820][ C1] delete_node+0x1fc/0x8d0 [ 255.732208][ C1] ? find_held_lock+0x2b/0x80 [ 255.736862][ C1] __radix_tree_delete+0x193/0x3d0 [ 255.741948][ C1] radix_tree_delete_item+0xea/0x230 [ 255.747207][ C1] ? __pfx_radix_tree_delete_item+0x10/0x10 [ 255.753074][ C1] ? queue_work_on+0x12a/0x1f0 [ 255.757812][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.762984][ C1] ? queue_work_on+0x8b/0x1f0 [ 255.767638][ C1] ? rcu_core+0x797/0x14e0 [ 255.772028][ C1] ? rcu_core+0x797/0x14e0 [ 255.776416][ C1] afs_cell_destroy+0x1db/0x310 [ 255.781244][ C1] rcu_core+0x799/0x14e0 [ 255.785463][ C1] ? __pfx_rcu_core+0x10/0x10 [ 255.790112][ C1] ? run_timer_base+0x121/0x190 [ 255.794963][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 255.800146][ C1] handle_softirqs+0x216/0x8e0 [ 255.804890][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 255.810156][ C1] __irq_exit_rcu+0x109/0x170 [ 255.814808][ C1] irq_exit_rcu+0x9/0x30 [ 255.819028][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 255.824637][ C1] [ 255.827542][ C1] [ 255.830452][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.836410][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 255.842030][ C1] Code: 95 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 bc 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 255.861623][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 255.867663][ C1] RAX: 0000000000f53365 RBX: 0000000000000001 RCX: ffffffff8b723439 [ 255.875607][ C1] RDX: 0000000000000000 RSI: ffffffff8dbeef8e RDI: ffffffff8bf465c0 [ 255.883555][ C1] RBP: ffffed1003b5e488 R08: 0000000000000001 R09: ffffed10170a65bd [ 255.891500][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 255.899444][ C1] R13: ffff88801daf2440 R14: ffffffff90865310 R15: 0000000000000000 [ 255.907392][ C1] ? ct_kernel_exit+0x139/0x190 [ 255.912232][ C1] default_idle+0x13/0x20 [ 255.916537][ C1] default_idle_call+0x6d/0xb0 [ 255.921275][ C1] do_idle+0x391/0x510 [ 255.925320][ C1] ? __pfx_do_idle+0x10/0x10 [ 255.929884][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 255.935061][ C1] cpu_startup_entry+0x4f/0x60 [ 255.939800][ C1] start_secondary+0x21d/0x2b0 [ 255.944535][ C1] ? __pfx_start_secondary+0x10/0x10 [ 255.949795][ C1] common_startup_64+0x13e/0x148 [ 255.954711][ C1] [ 255.957882][ C1] Kernel Offset: disabled [ 255.962180][ C1] Rebooting in 86400 seconds..