last executing test programs: 5.45545981s ago: executing program 4 (id=1840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0xb8}}, 0x0) 5.325234085s ago: executing program 4 (id=1842): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000007c0)={{0xfffffffffffffd64}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20048000}, 0x2000c001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000", @ANYRES16=r3, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffdfffd}, 0x50) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca940a455e7a0deceb768f70a5c0125f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c1000000000950467cc00863a27a54882a63348611196d4439d2c4b0cc8f288f5597a3ae540dec784f43b02fdc14f7a4f2283185f0c2d", 0x91}], 0x1) socket$inet(0xa, 0x801, 0x100) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r8, 0x89e8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033"], 0xfe33) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r5) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)={0x68, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$cgroup_subtree(r7, 0x0, 0xfe33) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0xf0f041, 0x3}) 5.256915602s ago: executing program 1 (id=1843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x69000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) 5.199749435s ago: executing program 1 (id=1844): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000100)=""/182, 0x6c, 0x9) openat$mice(0xffffffffffffff9c, 0x0, 0x400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) 4.818069628s ago: executing program 0 (id=1845): syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc, 0x3}) r4 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r4, 0x0, 0x0, 0x100000000) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) setregid(0xee01, r6) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x9, @mcast1, 0xfffffeff}}}, 0x84) 4.235201537s ago: executing program 1 (id=1848): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000100)=""/182, 0x6c, 0x9) openat$mice(0xffffffffffffff9c, 0x0, 0x400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a0b04000000000000000002000000540004802c0001800b0001006e756d67656e10001c000280080002400000000208000340000000000800014000000015240001800b00010072656a656374000014000280050002001800000008000140000000000900010073797a30000000000900020073797a320000000014000000110001000000000000005773d7d3000a"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) 2.589310698s ago: executing program 2 (id=1858): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xe8, 0x180, 0xfeffffff, 0x2a0, 0x180, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}, @common=@inet=@ecn={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 2.468884152s ago: executing program 2 (id=1859): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071121b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup, r0, 0x36, 0x8, 0x0, @void, @value}, 0x20) 2.434692803s ago: executing program 2 (id=1860): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_io_uring_setup(0x4e2, &(0x7f0000000280)={0x0, 0xc, 0x10100, 0x0, 0x4}, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) r5 = socket(0x1a, 0xa, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe800000000000000000001c0000002cfe8000000000000000000000000004017f040100050204530000000000000a990b5d1f3b862af02a4ef413c498c6e17fa5b22c17804e"], 0x0) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x2141) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000180)={0xc0002000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x0, &(0x7f0000000980)='norecovery') listen(r9, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 2.417836189s ago: executing program 1 (id=1862): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2.345514207s ago: executing program 3 (id=1863): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x140b, 0x1, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8c8) 2.311839124s ago: executing program 3 (id=1864): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x8090) 2.310045065s ago: executing program 0 (id=1865): r0 = syz_open_dev$video4linux(&(0x7f0000000500), 0x322, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000540)={0x2572d8929a6d88f2, 0x0, {0x100, 0x7, 0x200a, 0x5, 0x2, 0x1, 0x2, 0x2}}) 2.133311918s ago: executing program 1 (id=1866): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_io_uring_setup(0x4e2, &(0x7f0000000280)={0x0, 0xc, 0x10100, 0x0, 0x4}, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) r5 = socket(0x1a, 0xa, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000180000fe800000000000000000001c0000002cfe8000000000000000000000000004017f040100050204530000000000000a990b5d1f3b862af02a4ef413c498c6e17fa5b22c17804e"], 0x0) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)}, 0x2141) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000180)={0xc0002000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='xfs\x00', 0x0, &(0x7f0000000980)='norecovery') listen(r9, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 1.936746885s ago: executing program 3 (id=1867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108"], 0x2cc}}, 0x0) 1.935842608s ago: executing program 0 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @vbi={0x7fff, 0x6, 0x10000, 0x604023a, [0x1, 0x101], [0x8dc, 0x2], 0x2}}) socket$alg(0x26, 0x5, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 1.91692703s ago: executing program 2 (id=1869): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000980)={0x2, @sliced={0x395c, [0x7, 0x2, 0x3, 0x80, 0x8001, 0x401, 0x101, 0x7, 0x4, 0x26, 0x2, 0x3, 0xb0e, 0x7bc, 0x1, 0x724a, 0x1000, 0x5, 0xee, 0xf1, 0x2, 0x8, 0x9, 0x28, 0x200, 0x5, 0x7, 0x6, 0x9, 0x8, 0x2, 0xc, 0xc, 0x8, 0x3, 0xd6, 0x0, 0x8001, 0x8be, 0x4, 0x0, 0x1, 0x4, 0x8001, 0xfffa, 0xfff8, 0x3, 0x9], 0x4}}) 1.315145366s ago: executing program 0 (id=1870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x24}}, 0x0) 1.303007049s ago: executing program 3 (id=1871): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000002c0)={0x4, 0xb007}, 0x4) 1.257334411s ago: executing program 2 (id=1872): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000100)=""/182, 0x6c, 0x9) openat$mice(0xffffffffffffff9c, 0x0, 0x400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a0b04000000000000000002000000540004802c0001800b0001006e756d67656e10001c000280080002400000000208000340000000000800014000000015240001800b00010072656a656374000014000280050002001800000008000140000000000900010073797a30000000000900020073797a320000000014000000110001000000000000005773d7d3000a"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) 1.246981674s ago: executing program 1 (id=1873): sched_setaffinity(0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9d7420209058a02"], 0x0) 1.217323041s ago: executing program 3 (id=1874): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000500020000000900020073797a31000000000c00078008000b00000000000500040000000000050001000700000011000300686173683a69702c6d61726b"], 0x58}}, 0x0) 1.188755675s ago: executing program 0 (id=1875): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 1.118367387s ago: executing program 3 (id=1876): syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001b40)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x1c, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xfffd, 0x0, 0x0, {[@nop, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000100)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc, 0x3}) r4 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r4, 0x0, 0x0, 0x100000000) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) setregid(0xee01, r6) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x9, @mcast1, 0xfffffeff}}}, 0x84) 1.060926563s ago: executing program 0 (id=1877): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.045303043s ago: executing program 4 (id=1878): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa, &(0x7f0000000100), &(0x7f0000000240)=0x4) 979.420957ms ago: executing program 4 (id=1879): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) 852.95449ms ago: executing program 4 (id=1880): r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @string=0x0}}) 790.561996ms ago: executing program 4 (id=1881): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000100)=""/182, 0x6c, 0x9) openat$mice(0xffffffffffffff9c, 0x0, 0x400) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x10000, 0x1, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a0b04000000000000000002000000540004802c0001800b0001006e756d67656e10001c000280080002400000000208000340000000000800014000000015240001800b00010072656a656374000014000280050002001800000008000140000000000900010073797a30000000000900020073797a320000000014000000110001000000000000005773d7d3000a"], 0xa8}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) 0s ago: executing program 2 (id=1882): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): pid=11990 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f368c18e169 code=0x7ffc0000 [ 695.290179][ T30] audit: type=1326 audit(1744823658.883:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368c18e169 code=0x7ffc0000 [ 695.399567][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 695.428505][T12005] veth0_vlan: left promiscuous mode [ 695.447634][ T5181] bcm5974 3-1:0.0: could not read from device [ 695.529790][T12005] veth0_vlan: entered promiscuous mode [ 696.345079][ T5181] bcm5974 3-1:0.0: could not read from device [ 696.390174][ T5181] bcm5974 3-1:0.0: could not read from device [ 696.402185][ T30] audit: type=1326 audit(1744823658.883:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11990 comm="syz.1.1296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368c18e169 code=0x7ffc0000 [ 696.428942][ T5910] usb 3-1: USB disconnect, device number 24 [ 696.516394][ T5181] bcm5974 3-1:0.0: could not read from device [ 696.533037][ T92] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 696.651387][ T92] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 696.660628][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.255153][ T92] usb 5-1: config 0 descriptor?? [ 697.555075][ T92] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input64 [ 697.766299][ T5871] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 698.246979][ T5181] bcm5974 5-1:0.0: could not read from device [ 698.262107][ T5181] bcm5974 5-1:0.0: could not read from device [ 698.269627][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 698.299627][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 698.300427][ T5181] bcm5974 5-1:0.0: could not read from device [ 698.314316][ T92] usb 5-1: USB disconnect, device number 22 [ 698.346055][ T5181] bcm5974 5-1:0.0: could not read from device [ 698.389504][ T5871] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 698.540462][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.657203][T12033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12033 comm=syz.1.1304 [ 698.676239][T12033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12033 comm=syz.1.1304 [ 698.682457][ T5871] usb 4-1: config 0 descriptor?? [ 698.691659][T12033] vivid-000: disconnect [ 698.868723][ T5871] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input65 [ 698.886944][T12031] vivid-000: reconnect [ 699.017213][ T5181] bcm5974 4-1:0.0: could not read from device [ 699.817124][ T5181] bcm5974 4-1:0.0: could not read from device [ 699.960797][ T5871] usb 4-1: USB disconnect, device number 28 [ 700.027028][ T5181] bcm5974 4-1:0.0: could not read from device [ 701.012562][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 701.012615][ T30] audit: type=1400 audit(1744823664.903:2042): avc: denied { read } for pid=12051 comm="syz.4.1305" dev="sockfs" ino=29135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 703.199765][ T972] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 703.439681][ T972] usb 2-1: Using ep0 maxpacket: 16 [ 703.447339][ T972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 703.464675][ T972] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 703.474405][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.488634][ T30] audit: type=1400 audit(1744823668.373:2043): avc: denied { read } for pid=5181 comm="acpid" name="event8" dev="devtmpfs" ino=3436 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 704.512624][ T972] usb 2-1: config 0 descriptor?? [ 704.517777][ T30] audit: type=1400 audit(1744823668.373:2044): avc: denied { open } for pid=5181 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3436 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 704.622554][ T972] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input66 [ 704.659361][ T30] audit: type=1400 audit(1744823668.373:2045): avc: denied { ioctl } for pid=5181 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3436 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 704.770514][T12085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12085 comm=syz.0.1317 [ 704.785744][T12085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12085 comm=syz.0.1317 [ 704.802718][T12085] vivid-000: disconnect [ 705.082410][T12083] vivid-000: reconnect [ 705.443732][T12088] fuse: Bad value for 'rootmode' [ 705.463273][ T5181] bcm5974 2-1:0.0: could not read from device [ 705.470512][ T5181] bcm5974 2-1:0.0: could not read from device [ 705.484767][ T972] usb 2-1: USB disconnect, device number 26 [ 705.498966][ T5181] bcm5974 2-1:0.0: could not read from device [ 705.899479][T12093] veth0_vlan: left promiscuous mode [ 705.910671][T12093] veth0_vlan: entered promiscuous mode [ 706.221180][T12099] batadv_slave_1: entered promiscuous mode [ 706.852850][T12096] batadv_slave_1: left promiscuous mode [ 706.904280][ T30] audit: type=1400 audit(1744823670.773:2046): avc: denied { mount } for pid=12100 comm="syz.1.1321" name="/" dev="rpc_pipefs" ino=29233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 706.927501][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.989152][T12107] netlink: 'syz.1.1321': attribute type 5 has an invalid length. [ 707.457401][ T30] audit: type=1400 audit(1744823671.253:2047): avc: denied { open } for pid=12110 comm="syz.3.1323" path="/285/file0" dev="tmpfs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 707.480312][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.127072][ T30] audit: type=1400 audit(1744823671.263:2048): avc: denied { ioctl } for pid=12110 comm="syz.3.1323" path="/285/file0" dev="tmpfs" ino=1522 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 708.199166][ T30] audit: type=1400 audit(1744823671.623:2049): avc: denied { unmount } for pid=5818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 708.438892][ T30] audit: type=1400 audit(1744823672.323:2050): avc: denied { create } for pid=12121 comm="syz.0.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 708.888044][ T30] audit: type=1400 audit(1744823672.523:2051): avc: denied { connect } for pid=12118 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 708.936061][T12120] lo speed is unknown, defaulting to 1000 [ 708.942531][T12120] lo speed is unknown, defaulting to 1000 [ 709.224448][T12129] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 709.613468][T12132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12132 comm=syz.3.1328 [ 709.627225][T12132] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12132 comm=syz.3.1328 [ 710.302203][T12140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12140 comm=syz.1.1329 [ 710.368433][T12140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12140 comm=syz.1.1329 [ 710.388769][T12140] vivid-000: disconnect [ 710.648091][T12136] vivid-000: reconnect [ 710.798714][T12143] netlink: 'syz.0.1331': attribute type 10 has an invalid length. [ 710.806772][T12143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1331'. [ 711.595207][T12155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12155 comm=syz.1.1332 [ 711.696676][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 712.047394][ T30] audit: type=1400 audit(1744823675.573:2052): avc: denied { read } for pid=12148 comm="syz.3.1333" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 712.098536][T12155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12155 comm=syz.1.1332 [ 712.115868][T12155] vivid-000: disconnect [ 712.422608][T12149] vivid-000: reconnect [ 712.449916][T12156] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.586069][T12156] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.755670][T12164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 712.780837][T12164] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 712.791723][T12164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.884803][T12156] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.967822][T12156] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.128620][T12156] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.142171][T12156] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.157796][T12156] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.173593][T12156] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.418086][T12172] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12172 comm=syz.1.1338 [ 714.431514][T12172] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12172 comm=syz.1.1338 [ 714.501395][ T30] audit: type=1400 audit(1744823678.383:2053): avc: denied { read write } for pid=12150 comm="syz.4.1334" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 714.836893][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1340'. [ 714.867132][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 715.889515][ T30] audit: type=1400 audit(1744823678.393:2054): avc: denied { open } for pid=12150 comm="syz.4.1334" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 716.099412][T12182] veth0_vlan: left promiscuous mode [ 716.117531][T12182] veth0_vlan: entered promiscuous mode [ 716.793527][T12191] Invalid source name [ 716.799784][T12191] UBIFS error (pid: 12191): cannot open "/dev/sg0", error -22 [ 716.803012][T12191] virtio-fs: tag not found [ 716.983849][T12193] delete_channel: no stack [ 717.618337][ T30] audit: type=1400 audit(1744823680.843:2055): avc: denied { create } for pid=12186 comm="syz.2.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 717.655394][T12197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 717.664459][T12197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 717.798348][T12200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12200 comm=syz.0.1343 [ 717.817312][T12200] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12200 comm=syz.0.1343 [ 718.430771][ T30] audit: type=1400 audit(1744823682.323:2056): avc: denied { execute } for pid=12201 comm="syz.0.1346" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 718.468197][T12208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12208 comm=syz.1.1345 [ 718.482197][T12208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12208 comm=syz.1.1345 [ 719.043517][T12221] overlay: Unknown parameter 'fsmagic' [ 719.849889][ T92] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 720.129695][ T92] usb 4-1: Using ep0 maxpacket: 16 [ 720.541591][ T30] audit: type=1400 audit(1744823683.993:2057): avc: denied { accept } for pid=12232 comm="syz.2.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 720.561128][ C1] vkms_vblank_simulate: vblank timer overrun [ 721.335774][ T30] audit: type=1400 audit(1744823684.373:2058): avc: denied { create } for pid=12228 comm="syz.4.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 721.356090][ T30] audit: type=1400 audit(1744823684.413:2059): avc: denied { connect } for pid=12228 comm="syz.4.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 721.376305][ T30] audit: type=1400 audit(1744823684.413:2060): avc: denied { setopt } for pid=12228 comm="syz.4.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 721.710625][ T5873] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 721.759683][T12240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12240 comm=syz.4.1354 [ 721.776442][T12240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12240 comm=syz.4.1354 [ 721.793275][T12240] vivid-000: disconnect [ 721.979637][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 722.067212][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 722.199286][ T5873] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 722.279556][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.355340][ T5873] usb 1-1: config 0 descriptor?? [ 722.433406][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input67 [ 722.639961][T12238] vivid-000: reconnect [ 722.705178][ T5181] bcm5974 1-1:0.0: could not read from device [ 722.743042][ T92] usb 4-1: unable to get BOS descriptor or descriptor too short [ 722.754292][ T92] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 722.762895][ T92] usb 4-1: can't read configurations, error -71 [ 722.936762][ T5873] usb 1-1: USB disconnect, device number 25 [ 723.713279][T12255] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12255 comm=syz.1.1357 [ 723.727025][T12255] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12255 comm=syz.1.1357 [ 725.903755][T12274] Cannot find del_set index 0 as target [ 727.063583][T12276] syz.1.1361: attempt to access beyond end of device [ 727.063583][T12276] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 727.188546][T12288] loop6: detected capacity change from 0 to 64 [ 727.239437][ C1] blk_print_req_error: 7 callbacks suppressed [ 727.239454][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.254682][ C1] buffer_io_error: 7 callbacks suppressed [ 727.254694][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.319833][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.328992][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.367636][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80000 phys_seg 8 prio class 0 [ 727.377169][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.385485][ T30] audit: type=1400 audit(1744823691.073:2061): avc: denied { append } for pid=12286 comm="syz.2.1365" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.419473][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.428619][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.466883][ T30] audit: type=1400 audit(1744823691.213:2062): avc: denied { map } for pid=12286 comm="syz.2.1365" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.491083][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.500186][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.508024][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.517118][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 727.526499][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.535622][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.544741][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.553844][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.562141][ T30] audit: type=1400 audit(1744823691.213:2063): avc: denied { execute } for pid=12286 comm="syz.2.1365" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 727.586376][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 727.586392][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.620361][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 0 [ 727.629492][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.649808][T12288] ldm_validate_partition_table(): Disk read failed. [ 728.323548][T12288] Dev loop6: unable to read RDB block 0 [ 728.348045][T12288] loop6: unable to read partition table [ 728.356242][T12288] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 728.610411][T12303] veth0_vlan: left promiscuous mode [ 728.621404][T12303] veth0_vlan: entered promiscuous mode [ 729.309550][ T8444] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 729.459536][ T8444] usb 1-1: Using ep0 maxpacket: 16 [ 729.466433][ T8444] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 729.479990][ T8444] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 729.490534][ T8444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.502879][ T8444] usb 1-1: config 0 descriptor?? [ 729.517296][ T8444] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input68 [ 730.213685][ T5196] ldm_validate_partition_table(): Disk read failed. [ 730.222540][ T5196] Dev loop6: unable to read RDB block 0 [ 730.228947][ T5196] loop6: unable to read partition table [ 730.568452][ T30] audit: type=1400 audit(1744823694.323:2064): avc: denied { create } for pid=12318 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 730.606243][ T5181] bcm5974 1-1:0.0: could not read from device [ 731.076916][ T30] audit: type=1400 audit(1744824147.790:2065): avc: denied { write } for pid=12318 comm="syz.2.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 731.127764][ T5181] bcm5974 1-1:0.0: could not read from device [ 731.128567][ T8444] usb 1-1: USB disconnect, device number 26 [ 731.175296][ T5181] bcm5974 1-1:0.0: could not read from device [ 731.581636][T12332] 9pnet_fd: Insufficient options for proto=fd [ 732.467522][T12344] veth0_vlan: left promiscuous mode [ 732.475505][T12344] veth0_vlan: entered promiscuous mode [ 733.546900][ T30] audit: type=1400 audit(1744824150.440:2066): avc: denied { watch } for pid=12350 comm="syz.1.1380" path="/293" dev="tmpfs" ino=1595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 734.312495][T12352] syz.3.1379: attempt to access beyond end of device [ 734.312495][T12352] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 734.554365][T12364] veth0_vlan: left promiscuous mode [ 734.569508][T12364] veth0_vlan: entered promiscuous mode [ 734.850676][T12367] veth0_vlan: left promiscuous mode [ 734.865534][T12367] veth0_vlan: entered promiscuous mode [ 735.831667][ T30] audit: type=1400 audit(1744824152.680:2067): avc: denied { getopt } for pid=12350 comm="syz.1.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 738.743536][ T30] audit: type=1400 audit(1744824608.627:2068): avc: denied { read } for pid=12389 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 738.777104][T12395] netlink: 'syz.4.1387': attribute type 11 has an invalid length. [ 738.804723][ T30] audit: type=1400 audit(1744824608.697:2069): avc: denied { mount } for pid=12389 comm="syz.4.1387" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 738.887735][ T5871] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 738.999264][ T30] audit: type=1400 audit(1744824608.877:2070): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 739.062123][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 739.068629][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 739.084527][ T5871] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 739.094028][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.116733][ T5871] usb 2-1: config 0 descriptor?? [ 739.136649][ T5871] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input69 [ 739.347992][T12414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12414 comm=syz.2.1395 [ 739.361541][T12414] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12414 comm=syz.2.1395 [ 740.279706][ T972] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 740.402681][ T5181] bcm5974 2-1:0.0: could not read from device [ 740.454021][ T972] usb 1-1: Using ep0 maxpacket: 16 [ 740.504909][ T972] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 740.752425][ T972] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 740.783276][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.800668][T12411] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12411 comm=syz.4.1394 [ 740.920960][ T972] usb 1-1: config 0 descriptor?? [ 742.926070][ T5181] bcm5974 2-1:0.0: could not read from device [ 742.942365][ T5871] usb 2-1: USB disconnect, device number 27 [ 743.028999][ T972] usb 1-1: can't set config #0, error -71 [ 743.073540][ T972] usb 1-1: USB disconnect, device number 27 [ 743.202481][T12434] xt_policy: neither incoming nor outgoing policy selected [ 743.798641][ T30] audit: type=1400 audit(1744824613.687:2071): avc: denied { bind } for pid=12428 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.901058][ T30] audit: type=1400 audit(1744824613.717:2072): avc: denied { listen } for pid=12428 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 743.918800][T12431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12431 comm=syz.0.1400 [ 743.962133][T12431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12431 comm=syz.0.1400 [ 744.038091][T12431] vivid-000: disconnect [ 744.067719][ T30] audit: type=1400 audit(1744824613.827:2073): avc: denied { write } for pid=12428 comm="syz.2.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 744.889044][T12449] veth0_vlan: left promiscuous mode [ 744.896105][T12449] veth0_vlan: entered promiscuous mode [ 744.907217][T12410] vivid-000: reconnect [ 744.943429][ T30] audit: type=1400 audit(1744824614.837:2074): avc: denied { connect } for pid=12452 comm="syz.4.1405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 745.195504][T12453] 9pnet_fd: Insufficient options for proto=fd [ 745.597646][T12464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12464 comm=syz.2.1407 [ 745.613689][T12464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12464 comm=syz.2.1407 [ 746.049574][T12465] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12465 comm=syz.1.1408 [ 746.073782][T12465] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12465 comm=syz.1.1408 [ 746.095162][T12465] vivid-000: disconnect [ 746.356199][T12461] vivid-000: reconnect [ 746.598689][T12476] veth0_vlan: left promiscuous mode [ 746.612123][T12476] veth0_vlan: entered promiscuous mode [ 746.809072][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.336936][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 747.456294][T12485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12485 comm=syz.2.1415 [ 747.477201][T12485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12485 comm=syz.2.1415 [ 747.497207][T12485] vivid-000: disconnect [ 747.685843][T12483] vivid-000: reconnect [ 747.943838][T12492] veth0_vlan: left promiscuous mode [ 747.955562][T12492] veth0_vlan: entered promiscuous mode [ 748.119818][T12486] sysfs: cannot create duplicate filename '/class/ieee80211/!寿' [ 748.236959][T12486] CPU: 0 UID: 0 PID: 12486 Comm: syz.1.1414 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 748.236989][T12486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 748.236999][T12486] Call Trace: [ 748.237005][T12486] [ 748.237013][T12486] dump_stack_lvl+0x16c/0x1f0 [ 748.237040][T12486] sysfs_warn_dup+0x7f/0xa0 [ 748.237060][T12486] sysfs_do_create_link_sd+0x124/0x140 [ 748.237080][T12486] sysfs_create_link+0x61/0xc0 [ 748.237100][T12486] device_add+0x62c/0x1a70 [ 748.237121][T12486] ? __pfx_device_add+0x10/0x10 [ 748.237136][T12486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.237158][T12486] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 748.237189][T12486] wiphy_register+0x1c9c/0x2850 [ 748.237206][T12486] ? netdev_run_todo+0x864/0x1320 [ 748.237230][T12486] ? __dev_printk+0x1a0/0x270 [ 748.237257][T12486] ? __pfx_wiphy_register+0x10/0x10 [ 748.237289][T12486] ieee80211_register_hw+0x2432/0x4020 [ 748.237327][T12486] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 748.237359][T12486] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 748.237379][T12486] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 748.237404][T12486] ? __hrtimer_setup+0x176/0x280 [ 748.237425][T12486] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 748.237458][T12486] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 748.237479][T12486] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 748.237501][T12486] ? __asan_memcpy+0x3c/0x60 [ 748.237530][T12486] hwsim_new_radio_nl+0xb51/0x12c0 [ 748.237552][T12486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 748.237581][T12486] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 748.237615][T12486] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 748.237649][T12486] genl_family_rcv_msg_doit+0x206/0x2f0 [ 748.237679][T12486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 748.237718][T12486] ? bpf_lsm_capable+0x9/0x10 [ 748.237735][T12486] ? security_capable+0x7e/0x260 [ 748.237759][T12486] ? ns_capable+0xd7/0x110 [ 748.237783][T12486] genl_rcv_msg+0x55c/0x800 [ 748.237814][T12486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.237841][T12486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 748.237863][T12486] ? __lock_acquire+0xaa4/0x1ba0 [ 748.237886][T12486] netlink_rcv_skb+0x16a/0x440 [ 748.237910][T12486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.237941][T12486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.237979][T12486] ? __pfx_down_read+0x10/0x10 [ 748.238007][T12486] ? netlink_deliver_tap+0x1ae/0xd30 [ 748.238034][T12486] genl_rcv+0x28/0x40 [ 748.238058][T12486] netlink_unicast+0x53a/0x7f0 [ 748.238087][T12486] ? __pfx_netlink_unicast+0x10/0x10 [ 748.238120][T12486] netlink_sendmsg+0x8d1/0xdd0 [ 748.238149][T12486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.238184][T12486] ____sys_sendmsg+0xa95/0xc70 [ 748.238211][T12486] ? copy_msghdr_from_user+0x10a/0x160 [ 748.238232][T12486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.238262][T12486] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 748.238291][T12486] ___sys_sendmsg+0x134/0x1d0 [ 748.238315][T12486] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.238370][T12486] __sys_sendmsg+0x16d/0x220 [ 748.238392][T12486] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.238412][T12486] ? __x64_sys_futex+0x1e0/0x4c0 [ 748.238443][T12486] ? rcu_is_watching+0x12/0xc0 [ 748.238472][T12486] do_syscall_64+0xcd/0x260 [ 748.238498][T12486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.238515][T12486] RIP: 0033:0x7f368c18e169 [ 748.238529][T12486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.238546][T12486] RSP: 002b:00007f368d05f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.238563][T12486] RAX: ffffffffffffffda RBX: 00007f368c3b6080 RCX: 00007f368c18e169 [ 748.238575][T12486] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 748.238585][T12486] RBP: 00007f368c210a68 R08: 0000000000000000 R09: 0000000000000000 [ 748.238602][T12486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.238611][T12486] R13: 0000000000000000 R14: 00007f368c3b6080 R15: 00007ffda2523e18 [ 748.238636][T12486] [ 749.227705][T12494] syz.0.1416: attempt to access beyond end of device [ 749.227705][T12494] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 750.030288][ T972] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 750.199666][ T972] usb 5-1: Using ep0 maxpacket: 16 [ 750.294497][ T972] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 750.389632][T12517] syz.1.1421: attempt to access beyond end of device [ 750.389632][T12517] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 750.485031][ T972] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 750.497047][ T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.513837][ T972] usb 5-1: config 0 descriptor?? [ 750.542314][ T972] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input70 [ 753.106540][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 753.412457][T12540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12540 comm=syz.0.1426 [ 753.428934][T12540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12540 comm=syz.0.1426 [ 753.445253][T12540] vivid-000: disconnect [ 753.615273][T12534] vivid-000: reconnect [ 754.016452][T12542] veth0_vlan: left promiscuous mode [ 754.026390][T12542] veth0_vlan: entered promiscuous mode [ 754.318613][ T5181] bcm5974 5-1:0.0: could not read from device [ 754.433546][ T972] usb 5-1: USB disconnect, device number 23 [ 754.499240][T12547] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 754.599777][ T8444] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 754.684736][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 755.132658][ T8444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 755.150188][ T8444] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 755.201381][ T8444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 755.229473][ T8444] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 755.270705][ T8444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.302229][ T8444] usb 3-1: config 0 descriptor?? [ 755.371551][ T8444] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 755.454241][ T8444] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 755.558583][ T30] audit: type=1400 audit(1744824625.447:2075): avc: denied { name_connect } for pid=12555 comm="syz.1.1431" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 755.752523][ T8444] usb 3-1: USB disconnect, device number 25 [ 756.564803][ T30] audit: type=1400 audit(1744824626.457:2076): avc: denied { create } for pid=12569 comm="syz.2.1434" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 758.004659][T12591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12591 comm=syz.1.1441 [ 758.125402][ T5871] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 758.137744][T12592] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12592 comm=syz.1.1441 [ 758.230207][T12591] vivid-000: disconnect [ 758.546302][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 759.155019][T12584] vivid-000: reconnect [ 759.261603][ T5871] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 759.276056][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.285916][ T5871] usb 1-1: config 0 descriptor?? [ 759.333173][T12602] block nbd2: NBD_DISCONNECT [ 759.789585][ T8444] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 759.951446][ T8444] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 759.979493][T10903] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 759.987918][ T8444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 760.315820][ T8444] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 760.344736][ T8444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.356042][ T8444] usb 2-1: Product: syz [ 760.360700][ T8444] usb 2-1: Manufacturer: syz [ 760.365293][ T8444] usb 2-1: SerialNumber: syz [ 760.371704][ T8444] usb 2-1: config 0 descriptor?? [ 760.388013][ T8444] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 760.700745][T12618] lo speed is unknown, defaulting to 1000 [ 760.715448][T12618] lo speed is unknown, defaulting to 1000 [ 760.970352][T10903] usb 5-1: Using ep0 maxpacket: 16 [ 761.585121][ T5873] usb 2-1: USB disconnect, device number 28 [ 761.819534][ T8444] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 762.247222][ T5871] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 762.257237][ T5871] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 762.273495][ T5871] asix 1-1:0.0: probe with driver asix failed with error -71 [ 762.300070][ T5871] usb 1-1: USB disconnect, device number 28 [ 762.308699][T10903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 762.336422][T10903] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 762.348957][ T30] audit: type=1400 audit(1744824632.237:2077): avc: denied { getopt } for pid=12623 comm="syz.2.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 762.371694][T10903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.381290][ T30] audit: type=1400 audit(1744824632.267:2078): avc: denied { getattr } for pid=12623 comm="syz.2.1448" path="socket:[31133]" dev="sockfs" ino=31133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 762.410228][T10903] usb 5-1: config 0 descriptor?? [ 762.423991][T10903] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input72 [ 762.548486][ T8444] usb 4-1: Using ep0 maxpacket: 32 [ 762.555797][ T8444] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 762.564155][ T8444] usb 4-1: config 0 has no interface number 0 [ 762.570469][ T8444] usb 4-1: config 0 interface 196 has no altsetting 0 [ 762.579358][ T8444] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 762.588566][ T8444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.596947][ T8444] usb 4-1: Product: syz [ 762.601157][ T8444] usb 4-1: Manufacturer: syz [ 762.605735][ T8444] usb 4-1: SerialNumber: syz [ 762.612208][ T8444] usb 4-1: config 0 descriptor?? [ 762.709684][ T5871] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 763.108164][ T8444] ipheth 4-1:0.196: Unable to find endpoints [ 763.123321][ T8444] usb 4-1: USB disconnect, device number 31 [ 763.263330][ T5181] bcm5974 5-1:0.0: could not read from device [ 763.280412][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 764.042432][T12634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12634 comm=syz.1.1450 [ 764.058259][T12634] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12634 comm=syz.1.1450 [ 766.115927][ T5181] bcm5974 5-1:0.0: could not read from device [ 766.208271][T10903] usb 5-1: USB disconnect, device number 24 [ 766.214754][ T5871] usb 1-1: unable to read config index 0 descriptor/all [ 766.222703][ T5871] usb 1-1: can't read configurations, error -71 [ 766.719466][ T5873] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 766.789856][ T972] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 766.869234][T12650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12650 comm=syz.3.1455 [ 766.882449][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 766.911378][T12650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12650 comm=syz.3.1455 [ 766.930757][T12650] vivid-000: disconnect [ 767.034037][ T972] usb 2-1: config 3 has an invalid interface number: 7 but max is 0 [ 767.049765][ T972] usb 2-1: config 3 has no interface number 0 [ 767.067509][ T972] usb 2-1: config 3 interface 7 altsetting 6 has an endpoint descriptor with address 0x1A, changing to 0xA [ 767.126282][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 767.137154][ T972] usb 2-1: config 3 interface 7 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.151713][T12647] vivid-000: reconnect [ 767.158982][ T972] usb 2-1: config 3 interface 7 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.179984][ T5873] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 767.193637][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.220722][ T972] usb 2-1: config 3 interface 7 has no altsetting 0 [ 767.230942][ T5873] usb 3-1: Product: syz [ 767.235117][ T5873] usb 3-1: Manufacturer: syz [ 767.247371][ T972] usb 2-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b [ 767.256598][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.268333][ T5873] usb 3-1: SerialNumber: syz [ 767.279453][ T972] usb 2-1: Product: syz [ 767.292782][ T5873] usb 3-1: config 0 descriptor?? [ 767.299832][ T972] usb 2-1: Manufacturer: syz [ 767.304421][ T972] usb 2-1: SerialNumber: syz [ 767.396384][ T5873] usb 3-1: can't set config #0, error -71 [ 767.404283][ T5873] usb 3-1: USB disconnect, device number 26 [ 767.510428][T12659] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12659 comm=syz.3.1457 [ 767.527230][T12659] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12659 comm=syz.3.1457 [ 767.656892][ T972] radio-si470x 2-1:3.7: si470x_get_report: usb_control_msg returned -71 [ 767.866441][ T972] radio-si470x 2-1:3.7: probe with driver radio-si470x failed with error -5 [ 767.882615][ T972] usb 2-1: USB disconnect, device number 29 [ 769.142986][T12673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12673 comm=syz.1.1460 [ 769.229155][T12677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12677 comm=syz.1.1460 [ 769.287353][T12672] vivid-000: disconnect [ 769.292092][T12670] vivid-000: reconnect [ 769.730534][T12684] syz.1.1462: attempt to access beyond end of device [ 769.730534][T12684] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 769.890124][T10903] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 770.042738][T10903] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 770.051910][T10903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.060675][T10903] usb 3-1: Product: syz [ 770.066034][T10903] usb 3-1: Manufacturer: syz [ 770.070913][T10903] usb 3-1: SerialNumber: syz [ 770.099478][ T5871] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 770.108096][T10903] usb 3-1: config 0 descriptor?? [ 770.122929][T10903] gspca_main: touptek-2.14.0 probing 0547:6801 [ 770.403765][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 771.230244][ T5871] usb 4-1: config 8 has an invalid interface number: 206 but max is 0 [ 771.250366][ T5871] usb 4-1: config 8 has no interface number 0 [ 771.257025][ T5871] usb 4-1: config 8 interface 206 has no altsetting 0 [ 771.266183][ T5871] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 771.278612][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.291817][ T5871] usb 4-1: Product: syz [ 771.295974][ T5871] usb 4-1: Manufacturer: syz [ 771.300578][ T5871] usb 4-1: SerialNumber: syz [ 771.519062][ T5871] garmin_gps 4-1:8.206: Garmin GPS usb/tty converter detected [ 771.529572][ T5873] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 771.530393][ T5871] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 771.545248][ T5871] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 771.582094][ T5871] usb 4-1: USB disconnect, device number 32 [ 771.624370][ T5871] garmin_gps 4-1:8.206: device disconnected [ 771.679553][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 771.688912][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 771.702728][ T5873] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 771.712533][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.722660][ T5873] usb 5-1: config 0 descriptor?? [ 771.735240][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 771.892376][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 772.204499][T12707] veth0_vlan: left promiscuous mode [ 772.216456][T12707] veth0_vlan: entered promiscuous mode [ 772.288712][T12708] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 772.308404][T12708] batadv1: entered promiscuous mode [ 772.325248][T12708] batadv1: entered allmulticast mode [ 772.758597][T12717] tipc: Started in network mode [ 772.763633][T12717] tipc: Node identity ac14140f, cluster identity 4711 [ 772.771864][T12717] tipc: New replicast peer: 255.255.255.255 [ 772.778963][T12717] tipc: Enabled bearer , priority 10 [ 772.950863][ T30] audit: type=1400 audit(1744824642.527:2079): avc: denied { append } for pid=12706 comm="syz.3.1469" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 773.201815][ T972] usb 3-1: USB disconnect, device number 27 [ 773.289486][ T30] audit: type=1400 audit(1744824642.727:2080): avc: denied { create } for pid=12710 comm="syz.1.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 773.334458][T12712] blktrace: Concurrent blktraces are not allowed on sg0 [ 773.422217][ T5181] bcm5974 5-1:0.0: could not read from device [ 773.769522][ T5871] tipc: Node number set to 2886997007 [ 774.788087][ T5181] bcm5974 5-1:0.0: could not read from device [ 774.852910][ T5181] bcm5974 5-1:0.0: could not read from device [ 774.862085][ T5873] usb 5-1: USB disconnect, device number 25 [ 774.875524][T12723] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12723 comm=syz.1.1473 [ 774.888869][T12723] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12723 comm=syz.1.1473 [ 774.902023][T12723] vivid-000: disconnect [ 774.906472][T12721] vivid-000: reconnect [ 775.101910][T12731] veth0_vlan: left promiscuous mode [ 775.128599][T12731] veth0_vlan: entered promiscuous mode [ 775.439703][ T5821] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 775.617342][ T5821] usb 1-1: Using ep0 maxpacket: 8 [ 775.662305][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.761321][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 775.862427][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 775.950691][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 776.032299][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 776.115004][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 776.184628][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.282252][ T5821] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 776.339807][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.413044][ T5821] usb 1-1: Product: syz [ 776.417226][ T5821] usb 1-1: Manufacturer: syz [ 776.474351][ T5821] usb 1-1: SerialNumber: syz [ 776.560325][ T5821] usb 1-1: config 0 descriptor?? [ 776.721679][T12728] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 776.755360][ T5821] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 777.222904][T12754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12754 comm=syz.1.1480 [ 777.236358][T12754] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12754 comm=syz.1.1480 [ 778.063682][ T5873] usb 1-1: USB disconnect, device number 31 [ 778.159784][T12756] overlayfs: missing 'lowerdir' [ 778.297337][T12757] lo speed is unknown, defaulting to 1000 [ 778.310927][T12757] lo speed is unknown, defaulting to 1000 [ 778.321236][T12757] lo speed is unknown, defaulting to 1000 [ 778.683464][T12757] infiniband sz1: set active [ 778.688396][T12757] infiniband sz1: added lo [ 778.757713][T12757] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 778.761808][T12757] infiniband sz1: Couldn't open port 1 [ 778.934914][T12757] RDS/IB: sz1: added [ 778.939579][T12757] smc: adding ib device sz1 with port count 1 [ 778.945850][T12757] smc: ib device sz1 port 1 has pnetid [ 778.953902][T12757] lo speed is unknown, defaulting to 1000 [ 778.965749][T10903] lo speed is unknown, defaulting to 1000 [ 778.980177][T10903] lo speed is unknown, defaulting to 1000 [ 779.195070][T12757] lo speed is unknown, defaulting to 1000 [ 779.284797][T12757] lo speed is unknown, defaulting to 1000 [ 779.339603][ T5873] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 779.376065][T12757] lo speed is unknown, defaulting to 1000 [ 779.475926][T12757] lo speed is unknown, defaulting to 1000 [ 779.511883][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 779.518820][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 779.527803][ T5873] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 779.539479][ T5873] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 779.548155][ T5873] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 779.561143][ T5873] usb 1-1: config 7 has no interface number 0 [ 779.567233][ T5873] usb 1-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 779.581955][ T5873] usb 1-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 779.592209][ T5873] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 779.609869][ T5873] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 779.625202][ T5873] usb 1-1: config 7 interface 128 has no altsetting 0 [ 779.634372][ T5873] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 779.646266][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.664998][ T5873] usb 1-1: Product: syz [ 779.669160][ T5873] usb 1-1: Manufacturer: syz [ 779.674128][ T5873] usb 1-1: SerialNumber: syz [ 779.689965][T12768] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 779.913007][ T5873] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 779.921566][ T5873] usb 1-1: MIDIStreaming interface descriptor not found [ 779.945771][ T5873] usb 1-1: USB disconnect, device number 32 [ 780.169494][T10903] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 780.200260][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.499579][T10903] usb 2-1: Using ep0 maxpacket: 16 [ 780.513405][T10903] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 780.540325][T10903] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 780.559486][T10903] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 780.577792][T10903] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 780.596870][T10903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 780.616068][T10903] usb 2-1: config 0 has no interface number 0 [ 780.624043][T10903] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 780.638229][T10903] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 780.662292][T10903] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 780.695613][T10903] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.709564][ T5871] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 780.714218][T12785] syz.3.1489: attempt to access beyond end of device [ 780.714218][T12785] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 780.775056][ T5873] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 780.783235][T10903] usb 2-1: config 0 interface 125 has no altsetting 0 [ 780.803432][T10903] usb 2-1: config 0 interface 125 has no altsetting 2 [ 780.882541][T10903] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 780.891761][T10903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.934100][T10903] usb 2-1: Product: syz [ 780.956609][T10903] usb 2-1: Manufacturer: syz [ 780.961764][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 780.988082][T10903] usb 2-1: SerialNumber: syz [ 780.994753][ T5873] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 781.044257][T10903] usb 2-1: config 0 descriptor?? [ 781.094968][T10903] usb 2-1: selecting invalid altsetting 2 [ 781.133612][ T5873] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 781.145295][ T5873] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 781.157462][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.167669][ T5871] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 781.176377][ T5873] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 781.186971][ T5873] usb 1-1: invalid MIDI out EP 0 [ 781.190088][ T5871] usb 5-1: config 0 has no interface number 0 [ 781.213728][ T5871] usb 5-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=16.d4 [ 781.223236][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.231484][ T5871] usb 5-1: Product: syz [ 781.235818][ T5871] usb 5-1: Manufacturer: syz [ 781.240543][ T5871] usb 5-1: SerialNumber: syz [ 781.247796][ T5871] usb 5-1: config 0 descriptor?? [ 781.254406][ T5873] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 781.257194][ T5871] pl2303 5-1:0.106: required interrupt-in endpoint missing [ 781.302912][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 781.332618][ C1] usb 2-1: async_complete: urb error -71 [ 781.338314][ C1] usb 2-1: async_complete: urb error -71 [ 781.343966][ C1] usb 2-1: async_complete: urb error -71 [ 781.349613][ C1] usb 2-1: async_complete: urb error -71 [ 781.360702][T10903] get_1284_register: usb error -71 [ 781.365892][T10903] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 781.388556][T10903] usb 2-1: USB disconnect, device number 30 [ 781.459574][ T8444] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 781.779481][ T8444] usb 3-1: Using ep0 maxpacket: 16 [ 781.786709][ T8444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 781.833894][ T5871] usb 5-1: USB disconnect, device number 26 [ 782.316686][ T8444] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 782.374650][ T8444] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 782.396410][ T8444] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 782.418611][ T8444] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 782.428048][ T8444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.447469][ T8444] usb 3-1: Product: syz [ 782.456880][ T8444] usb 3-1: Manufacturer: syz [ 782.461891][ T8444] usb 3-1: SerialNumber: syz [ 782.472734][ T8444] usb 3-1: config 0 descriptor?? [ 782.481773][T12787] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 782.518696][ C0] port100 3-1:0.0: NFC: Urb failure (status -71) [ 782.652794][ T8444] port100 3-1:0.0: NFC: Could not get supported command types [ 783.073899][T12802] veth0_vlan: left promiscuous mode [ 783.079990][T12802] veth0_vlan: entered promiscuous mode [ 783.091062][ T5873] usb 3-1: USB disconnect, device number 28 [ 783.108155][T12803] lo speed is unknown, defaulting to 1000 [ 783.115568][T12803] lo speed is unknown, defaulting to 1000 [ 783.122602][T12803] lo speed is unknown, defaulting to 1000 [ 783.576914][T12808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12808 comm=syz.1.1493 [ 783.592883][T12808] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12808 comm=syz.1.1493 [ 784.021171][ T5873] usb 1-1: USB disconnect, device number 33 [ 784.919480][ T5871] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 784.927396][T10903] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 785.089559][ T5871] usb 2-1: Using ep0 maxpacket: 16 [ 785.118058][T10903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.169652][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short [ 785.238569][T10903] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74 [ 785.254330][T10903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.262996][ T5871] usb 2-1: config 7 interface 0 has no altsetting 0 [ 785.270104][T10903] usb 4-1: Product: syz [ 785.274537][T10903] usb 4-1: Manufacturer: syz [ 785.279382][T10903] usb 4-1: SerialNumber: syz [ 785.285561][ T5871] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=8f.26 [ 785.296332][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.299503][ T5873] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 785.305444][T10903] usb 4-1: config 0 descriptor?? [ 785.318687][ T5871] usb 2-1: Product: syz [ 785.323440][ T5871] usb 2-1: Manufacturer: syz [ 785.329858][T10903] rndis_host 4-1:0.0: skipping garbage [ 785.335891][T10903] usb 4-1: bad CDC descriptors [ 785.341052][ T5871] usb 2-1: SerialNumber: syz [ 785.346126][T10903] cdc_acm 4-1:0.0: skipping garbage [ 785.489447][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 785.501168][ T5873] usb 1-1: unable to get BOS descriptor or descriptor too short [ 785.521595][ T5873] usb 1-1: config 2 has an invalid interface number: 11 but max is 0 [ 785.539535][ T5873] usb 1-1: config 2 has no interface number 0 [ 785.551328][ T5873] usb 1-1: config 2 interface 11 has no altsetting 0 [ 785.572704][ T5873] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=86.c4 [ 785.577319][ T5871] usb 2-1: USB disconnect, device number 31 [ 785.600723][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.610810][ T8444] usb 4-1: USB disconnect, device number 33 [ 785.622165][ T5873] usb 1-1: Product: syz [ 785.626332][ T5873] usb 1-1: Manufacturer: syz [ 785.636162][ T5873] usb 1-1: SerialNumber: syz [ 785.911445][T12835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12835 comm=syz.4.1502 [ 785.960186][T12835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12835 comm=syz.4.1502 [ 786.310820][ T5873] usb 1-1: Expected 3 endpoints, found: 0 [ 786.317119][T12832] vivid-000: disconnect [ 786.327437][T12831] vivid-000: reconnect [ 786.364956][ T5873] usb 1-1: USB disconnect, device number 34 [ 786.539503][ T5871] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 786.785526][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 786.807905][T12854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12854 comm=syz.2.1508 [ 786.823783][T12854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12854 comm=syz.2.1508 [ 786.877046][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 787.167033][ T5871] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 787.179473][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.195368][ T5871] usb 2-1: config 0 descriptor?? [ 787.214459][T12839] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 787.389584][ T5873] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 787.489236][ T5913] usb 2-1: USB disconnect, device number 32 [ 787.571475][ T5873] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 787.606507][ T5873] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.796929][T12869] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12869 comm=syz.4.1512 [ 787.817934][T12869] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12869 comm=syz.4.1512 [ 787.947246][ T5873] usb 1-1: config 0 has no interface number 0 [ 788.064434][ T5873] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 788.073650][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.238624][ T5873] usb 1-1: config 0 descriptor?? [ 788.307708][ T5873] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 788.665029][T12888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12888 comm=syz.2.1516 [ 788.681265][T12888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12888 comm=syz.2.1516 [ 789.216496][ T5872] usb 1-1: USB disconnect, device number 35 [ 789.225938][ T12] usb 1-1: Failed to submit usb control message: -71 [ 789.236350][ T12] usb 1-1: unable to send the bmi data to the device: -71 [ 789.249881][ T12] usb 1-1: unable to get target info from device [ 789.257439][ T12] usb 1-1: could not get target info (-71) [ 789.265599][ T12] usb 1-1: could not probe fw (-71) [ 789.728834][T12902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12902 comm=syz.4.1517 [ 789.729515][T10903] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 789.742418][T12902] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12902 comm=syz.4.1517 [ 789.836971][T12902] vivid-000: disconnect [ 789.839589][T12904] syz.2.1521: attempt to access beyond end of device [ 789.839589][T12904] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 790.211887][T10903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.223355][T10903] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 790.298628][T10903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 790.340511][T10903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 790.353302][T10903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 790.364373][T10903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 31408, setting to 64 [ 790.613623][T12914] veth0_vlan: left promiscuous mode [ 790.624979][T12914] veth0_vlan: entered promiscuous mode [ 790.692867][T12892] vivid-000: reconnect [ 790.720141][T10903] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.736135][T10903] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 790.746614][T10903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.764065][T10903] usb 4-1: Product: syz [ 790.810106][T10903] usb 4-1: Manufacturer: syz [ 790.845573][T10903] usb 4-1: SerialNumber: syz [ 790.894239][T10903] usb 4-1: config 0 descriptor?? [ 790.899221][ T30] audit: type=1400 audit(1744824660.787:2081): avc: denied { mounton } for pid=12919 comm="syz.4.1526" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:var_auth_t tclass=dir permissive=1 [ 790.900860][T12920] /dev/nullb0: Can't open blockdev [ 791.283414][T12922] syz.1.1525: attempt to access beyond end of device [ 791.283414][T12922] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 791.327744][T12896] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 791.336901][T12896] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 791.699483][ T8444] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 792.099796][ T8444] usb 3-1: Using ep0 maxpacket: 32 [ 792.106742][ T8444] usb 3-1: config 0 interface 0 has no altsetting 0 [ 792.116177][ T8444] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 792.126188][ T8444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.134447][ T8444] usb 3-1: Product: syz [ 792.138647][ T8444] usb 3-1: Manufacturer: syz [ 792.143532][ T8444] usb 3-1: SerialNumber: syz [ 792.150943][T12938] 9pnet: Unknown protocol version 9 [ 792.200965][T12939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12939 comm=syz.0.1530 [ 792.216921][T12939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12939 comm=syz.0.1530 [ 792.259569][ T8444] usb 3-1: config 0 descriptor?? [ 792.552452][ T8444] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 792.589627][T10903] rc_core: IR keymap rc-snapstream-firefly not found [ 792.589776][ T8444] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 792.597408][T10903] Registered IR keymap rc-empty [ 792.624009][ T8444] usb 3-1: USB disconnect, device number 29 [ 792.633330][T10903] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 792.655014][T10903] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74 [ 792.686341][T10903] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input75 [ 792.743767][T10903] usb 4-1: USB disconnect, device number 34 [ 792.749911][ C1] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 793.103767][T12948] syz.1.1533: attempt to access beyond end of device [ 793.103767][T12948] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 793.329580][ T5871] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 793.407142][T12952] veth0_vlan: left promiscuous mode [ 793.427264][T12952] veth0_vlan: entered promiscuous mode [ 793.528476][ T5871] usb 1-1: Using ep0 maxpacket: 8 [ 793.548303][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.560772][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 793.574863][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 793.587374][ T5871] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.640362][ T5871] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 793.662167][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.789051][ T5871] usb 1-1: config 0 descriptor?? [ 793.951529][ T5871] hso 1-1:0.0: Can't find BULK IN endpoint [ 794.115139][ T5871] usb 1-1: USB disconnect, device number 36 [ 794.329453][T12972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12972 comm=syz.2.1542 [ 794.350338][T12972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12972 comm=syz.2.1542 [ 794.483039][ T8444] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 794.663290][ T8444] usb 4-1: Using ep0 maxpacket: 32 [ 794.670058][ T8444] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 794.678184][ T8444] usb 4-1: config 0 has no interface number 0 [ 794.685878][ T8444] usb 4-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 794.697062][ T8444] usb 4-1: config 0 interface 5 has no altsetting 0 [ 794.706679][ T8444] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 794.716373][ T8444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.727672][ T8444] usb 4-1: Product: syz [ 794.732668][ T8444] usb 4-1: Manufacturer: syz [ 794.738435][ T8444] usb 4-1: SerialNumber: syz [ 794.754245][ T8444] usb 4-1: config 0 descriptor?? [ 794.791127][ T5873] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 794.969638][ T5913] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 794.983188][ T8444] radio-si470x 4-1:0.5: could not find interrupt in endpoint [ 795.005849][ T5873] usb 3-1: config 255 has an invalid interface number: 2 but max is 1 [ 795.073738][ T5873] usb 3-1: config 255 has an invalid interface number: 176 but max is 1 [ 795.084245][ T8444] radio-si470x 4-1:0.5: probe with driver radio-si470x failed with error -5 [ 795.105142][ T5873] usb 3-1: config 255 has 3 interfaces, different from the descriptor's value: 2 [ 795.265529][T12990] hub 9-0:1.0: USB hub found [ 795.271142][T12990] hub 9-0:1.0: 1 port detected [ 796.067514][ T5873] usb 3-1: config 255 has no interface number 1 [ 796.073902][ T5873] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 796.087721][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.096103][ T8444] radio-raremono 4-1:0.5: this is not Thanko's Raremono. [ 796.103467][ T8444] usbhid 4-1:0.5: couldn't find an input interrupt endpoint [ 796.248369][ T8444] usb 4-1: USB disconnect, device number 35 [ 796.254308][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 796.289836][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 796.309671][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 796.318758][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.333568][ T5913] usb 5-1: config 0 descriptor?? [ 796.350881][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input76 [ 796.442517][ T5873] usb 3-1: string descriptor 0 read error: -71 [ 796.582349][ T5873] usb 3-1: Could not set interface, error -71 [ 796.761605][T13002] tipc: Started in network mode [ 796.766638][T13002] tipc: Node identity ac14140f, cluster identity 4711 [ 796.774988][T13002] tipc: New replicast peer: 255.255.255.255 [ 796.782560][T13002] tipc: Enabled bearer , priority 10 [ 797.790215][ T5873] usb 3-1: USB disconnect, device number 30 [ 797.853043][ T5181] bcm5974 5-1:0.0: could not read from device [ 797.866047][ T5181] bcm5974 5-1:0.0: could not read from device [ 797.953643][ T5821] tipc: Node number set to 2886997007 [ 798.071817][T13011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13011 comm=syz.1.1553 [ 798.087602][T13011] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13011 comm=syz.1.1553 [ 798.419873][ T5181] bcm5974 5-1:0.0: could not read from device [ 798.472287][T13012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13012 comm=syz.0.1552 [ 798.503651][T13012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13012 comm=syz.0.1552 [ 798.519779][ T5913] usb 5-1: USB disconnect, device number 27 [ 798.532812][T13012] vivid-000: disconnect [ 798.630040][ T5181] bcm5974 5-1:0.0: could not read from device [ 798.781954][T13005] vivid-000: reconnect [ 798.819456][ T5873] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 798.969548][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 798.977328][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 798.999645][ T5873] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 799.012812][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.069591][ T8444] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 799.082592][ T5873] usb 3-1: config 0 descriptor?? [ 799.174776][T13027] overlayfs: missing 'lowerdir' [ 799.258074][T13028] rdma_rxe: rxe_newlink: failed to add lo [ 799.600827][T13029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13029 comm=syz.3.1560 [ 799.643377][T13029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13029 comm=syz.3.1560 [ 799.675733][T13029] vivid-000: disconnect [ 799.926708][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input77 [ 799.952253][ T8444] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 799.987113][ T8444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.999631][ T5181] bcm5974 3-1:0.0: could not read from device [ 800.005976][ T8444] usb 2-1: Product: syz [ 800.010666][ T8444] usb 2-1: Manufacturer: syz [ 800.015267][ T8444] usb 2-1: SerialNumber: syz [ 800.021523][ T8444] usb 2-1: config 0 descriptor?? [ 800.028074][ T8444] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 800.038500][T13024] vivid-000: reconnect [ 800.067860][ T5873] usb 3-1: USB disconnect, device number 31 [ 800.143358][ T30] audit: type=1400 audit(1744824670.037:2082): avc: denied { setopt } for pid=13035 comm="syz.3.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 800.234974][ T8444] gspca_sunplus: reg_r err -71 [ 800.246532][ T8444] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 800.332376][ T8444] usb 2-1: USB disconnect, device number 33 [ 800.643606][T13044] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 800.879810][ T5873] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 801.051768][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 801.067564][ T5873] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.080873][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.089015][ T5873] usb 4-1: Product: syz [ 801.095671][ T5873] usb 4-1: Manufacturer: syz [ 801.100346][ T5873] usb 4-1: SerialNumber: syz [ 801.397653][T13053] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13053 comm=syz.1.1566 [ 801.419314][T13053] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13053 comm=syz.1.1566 [ 801.717865][T13054] syz.2.1565: attempt to access beyond end of device [ 801.717865][T13054] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 802.009241][ T5873] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 802.065274][ T5873] usb 4-1: found format II with max.bitrate = 128, frame size=4 [ 802.162405][T13057] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13057 comm=syz.1.1567 [ 802.178894][T13057] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13057 comm=syz.1.1567 [ 802.195672][T13057] vivid-000: disconnect [ 802.418591][ T5873] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 802.427367][T13055] vivid-000: reconnect [ 802.448029][ T5873] usb 4-1: USB disconnect, device number 36 [ 802.659154][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 802.888253][T13068] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13068 comm=syz.3.1571 [ 802.950937][T13069] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13069 comm=syz.3.1571 [ 803.006389][T13068] vivid-000: disconnect [ 803.138252][ T30] audit: type=1400 audit(1744824673.027:2083): avc: denied { getopt } for pid=13067 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 803.142231][T13064] vivid-000: reconnect [ 803.423136][T13079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13079 comm=syz.2.1573 [ 803.438772][T13079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13079 comm=syz.2.1573 [ 804.729743][T13090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 804.739511][T13090] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 804.750381][T13090] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 805.470863][T13097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13097 comm=syz.3.1578 [ 805.485121][T13097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13097 comm=syz.3.1578 [ 805.509688][T10903] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 805.510033][T13097] vivid-000: disconnect [ 805.689605][T10903] usb 2-1: Using ep0 maxpacket: 16 [ 805.706558][T10903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 805.723373][T10903] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 805.732639][T10903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.743519][T10903] usb 2-1: config 0 descriptor?? [ 805.751217][T10903] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input78 [ 806.222890][T13095] vivid-000: reconnect [ 806.979601][ T5181] bcm5974 2-1:0.0: could not read from device [ 807.071505][T10903] usb 2-1: USB disconnect, device number 34 [ 807.252736][T13106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13106 comm=syz.3.1581 [ 807.282020][T13106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13106 comm=syz.3.1581 [ 807.313751][T13106] vivid-000: disconnect [ 807.564753][T13104] vivid-000: reconnect [ 807.569805][ T30] audit: type=1400 audit(1744824677.447:2084): avc: denied { bind } for pid=13109 comm="syz.2.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 807.779871][T13114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13114 comm=syz.0.1582 [ 807.795885][T13114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13114 comm=syz.0.1582 [ 808.280133][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.761163][T13121] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌ' [ 808.769526][T13121] CPU: 0 UID: 0 PID: 13121 Comm: syz.3.1587 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 808.769549][T13121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 808.769558][T13121] Call Trace: [ 808.769564][T13121] [ 808.769570][T13121] dump_stack_lvl+0x16c/0x1f0 [ 808.769598][T13121] sysfs_warn_dup+0x7f/0xa0 [ 808.769617][T13121] sysfs_do_create_link_sd+0x124/0x140 [ 808.769644][T13121] sysfs_create_link+0x61/0xc0 [ 808.769661][T13121] device_add+0x62c/0x1a70 [ 808.769681][T13121] ? __pfx_device_add+0x10/0x10 [ 808.769695][T13121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 808.769716][T13121] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 808.769745][T13121] wiphy_register+0x1c9c/0x2850 [ 808.769760][T13121] ? netdev_run_todo+0x864/0x1320 [ 808.769781][T13121] ? __dev_printk+0x1a0/0x270 [ 808.769809][T13121] ? __pfx_wiphy_register+0x10/0x10 [ 808.769840][T13121] ieee80211_register_hw+0x2432/0x4020 [ 808.769877][T13121] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 808.769908][T13121] ? find_held_lock+0x2b/0x80 [ 808.769931][T13121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 808.769948][T13121] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 808.769971][T13121] ? __hrtimer_setup+0x176/0x280 [ 808.769991][T13121] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 808.770024][T13121] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 808.770045][T13121] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 808.770064][T13121] ? __asan_memcpy+0x3c/0x60 [ 808.770093][T13121] hwsim_new_radio_nl+0xb51/0x12c0 [ 808.770114][T13121] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 808.770140][T13121] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 808.770165][T13121] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 808.770195][T13121] genl_family_rcv_msg_doit+0x206/0x2f0 [ 808.770223][T13121] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 808.770258][T13121] ? bpf_lsm_capable+0x9/0x10 [ 808.770274][T13121] ? security_capable+0x7e/0x260 [ 808.770294][T13121] ? ns_capable+0xd7/0x110 [ 808.770315][T13121] genl_rcv_msg+0x55c/0x800 [ 808.770342][T13121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 808.770367][T13121] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 808.770388][T13121] ? __lock_acquire+0xaa4/0x1ba0 [ 808.770410][T13121] netlink_rcv_skb+0x16a/0x440 [ 808.770433][T13121] ? __pfx_genl_rcv_msg+0x10/0x10 [ 808.770458][T13121] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 808.770494][T13121] ? __pfx_down_read+0x10/0x10 [ 808.770519][T13121] ? netlink_deliver_tap+0x1ae/0xd30 [ 808.770544][T13121] genl_rcv+0x28/0x40 [ 808.770566][T13121] netlink_unicast+0x53a/0x7f0 [ 808.770593][T13121] ? __pfx_netlink_unicast+0x10/0x10 [ 808.770625][T13121] netlink_sendmsg+0x8d1/0xdd0 [ 808.770664][T13121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.770699][T13121] ____sys_sendmsg+0xa95/0xc70 [ 808.770725][T13121] ? copy_msghdr_from_user+0x10a/0x160 [ 808.770745][T13121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.770770][T13121] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 808.770795][T13121] ___sys_sendmsg+0x134/0x1d0 [ 808.770814][T13121] ? __pfx____sys_sendmsg+0x10/0x10 [ 808.770864][T13121] __sys_sendmsg+0x16d/0x220 [ 808.770885][T13121] ? __pfx___sys_sendmsg+0x10/0x10 [ 808.770905][T13121] ? __x64_sys_futex+0x1e0/0x4c0 [ 808.770936][T13121] ? rcu_is_watching+0x12/0xc0 [ 808.770964][T13121] do_syscall_64+0xcd/0x260 [ 808.770991][T13121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.771007][T13121] RIP: 0033:0x7fca9358e169 [ 808.771023][T13121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.771040][T13121] RSP: 002b:00007fca94450038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.771057][T13121] RAX: ffffffffffffffda RBX: 00007fca937b6080 RCX: 00007fca9358e169 [ 808.771067][T13121] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 808.771076][T13121] RBP: 00007fca93610a68 R08: 0000000000000000 R09: 0000000000000000 [ 808.771086][T13121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.771095][T13121] R13: 0000000000000000 R14: 00007fca937b6080 R15: 00007ffe7ca98d28 [ 808.771117][T13121] [ 809.374813][T13125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13125 comm=syz.0.1586 [ 809.392072][T13125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13125 comm=syz.0.1586 [ 809.410111][T13125] vivid-000: disconnect [ 809.551080][T13117] vivid-000: reconnect [ 810.273829][T13139] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1592'. [ 810.688989][T13149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13149 comm=syz.3.1593 [ 810.712351][T13149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13149 comm=syz.3.1593 [ 810.731731][T13149] vivid-000: disconnect [ 810.949598][T13152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13152 comm=syz.2.1596 [ 810.965769][T13151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13151 comm=syz.2.1596 [ 810.996998][T13141] vivid-000: reconnect [ 811.416468][T13166] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌ' [ 811.424869][T13166] CPU: 0 UID: 0 PID: 13166 Comm: syz.1.1600 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 811.424893][T13166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 811.424904][T13166] Call Trace: [ 811.424911][T13166] [ 811.424918][T13166] dump_stack_lvl+0x16c/0x1f0 [ 811.424943][T13166] sysfs_warn_dup+0x7f/0xa0 [ 811.424955][T13166] sysfs_do_create_link_sd+0x124/0x140 [ 811.424968][T13166] sysfs_create_link+0x61/0xc0 [ 811.424978][T13166] device_add+0x62c/0x1a70 [ 811.424992][T13166] ? __pfx_device_add+0x10/0x10 [ 811.425001][T13166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 811.425015][T13166] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 811.425035][T13166] wiphy_register+0x1c9c/0x2850 [ 811.425052][T13166] ? __pfx_wiphy_register+0x10/0x10 [ 811.425066][T13166] ? ieee80211_register_hw+0x2264/0x4020 [ 811.425083][T13166] ? ieee80211_register_hw+0x23e5/0x4020 [ 811.425101][T13166] ieee80211_register_hw+0x2432/0x4020 [ 811.425123][T13166] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 811.425142][T13166] ? find_held_lock+0x2b/0x80 [ 811.425156][T13166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 811.425167][T13166] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 811.425182][T13166] ? __hrtimer_setup+0x176/0x280 [ 811.425194][T13166] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 811.425215][T13166] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 811.425229][T13166] ? hwsim_new_radio_nl+0xa4f/0x12c0 [ 811.425241][T13166] hwsim_new_radio_nl+0xb51/0x12c0 [ 811.425255][T13166] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 811.425265][T13166] ? lockdep_hardirqs_on+0x7c/0x110 [ 811.425283][T13166] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 811.425297][T13166] genl_family_rcv_msg_doit+0x206/0x2f0 [ 811.425315][T13166] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 811.425336][T13166] ? bpf_lsm_capable+0x9/0x10 [ 811.425346][T13166] ? security_capable+0x7e/0x260 [ 811.425359][T13166] ? ns_capable+0xd7/0x110 [ 811.425374][T13166] genl_rcv_msg+0x55c/0x800 [ 811.425391][T13166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.425408][T13166] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 811.425422][T13166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.425439][T13166] netlink_rcv_skb+0x16a/0x440 [ 811.425453][T13166] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.425470][T13166] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 811.425491][T13166] ? __pfx_down_read+0x10/0x10 [ 811.425507][T13166] ? __pfx_genl_rcv+0x10/0x10 [ 811.425524][T13166] genl_rcv+0x28/0x40 [ 811.425538][T13166] netlink_unicast+0x53a/0x7f0 [ 811.425554][T13166] ? __pfx_netlink_unicast+0x10/0x10 [ 811.425573][T13166] netlink_sendmsg+0x8d1/0xdd0 [ 811.425590][T13166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.425605][T13166] ? security_socket_sendmsg+0x18/0x240 [ 811.425621][T13166] ____sys_sendmsg+0xa95/0xc70 [ 811.425637][T13166] ? copy_msghdr_from_user+0x10a/0x160 [ 811.425650][T13166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.425669][T13166] ? __pfx___schedule+0x10/0x10 [ 811.425682][T13166] ? lockdep_hardirqs_on+0x7c/0x110 [ 811.425699][T13166] ___sys_sendmsg+0x134/0x1d0 [ 811.425712][T13166] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.425739][T13166] ? __pfx_lockdep_hardirqs_on+0x10/0x10 [ 811.425756][T13166] __sys_sendmsg+0x16d/0x220 [ 811.425769][T13166] ? __pfx___sys_sendmsg+0x10/0x10 [ 811.425781][T13166] ? rcu_is_watching+0x12/0xc0 [ 811.425800][T13166] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 811.425814][T13166] do_syscall_64+0xcd/0x260 [ 811.425830][T13166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.425841][T13166] RIP: 0033:0x7f368c18e169 [ 811.425850][T13166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 811.425861][T13166] RSP: 002b:00007f368d05f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.425871][T13166] RAX: ffffffffffffffda RBX: 00007f368c3b6080 RCX: 00007f368c18e169 [ 811.425878][T13166] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 811.425884][T13166] RBP: 00007f368c210a68 R08: 0000000000000000 R09: 0000000000000000 [ 811.425890][T13166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.425895][T13166] R13: 0000000000000000 R14: 00007f368c3b6080 R15: 00007ffda2523e18 [ 811.425909][T13166] [ 812.342252][T13174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13174 comm=syz.3.1605 [ 812.356677][T13174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13174 comm=syz.3.1605 [ 812.378727][T13174] vivid-000: disconnect [ 812.384462][T13173] vivid-000: reconnect [ 812.439569][ T5872] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 812.541387][T13186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13186 comm=syz.1.1607 [ 812.559648][T13186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13186 comm=syz.1.1607 [ 812.578981][T13186] vivid-000: disconnect [ 812.609712][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 812.609849][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 812.782136][T13183] vivid-000: reconnect [ 812.791000][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 812.836114][ T5872] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 812.848614][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.870745][ T5872] usb 1-1: config 0 descriptor?? [ 812.918810][ T5872] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input79 [ 813.067906][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1610'. [ 813.383688][ T5181] bcm5974 1-1:0.0: could not read from device [ 813.512467][ T5181] bcm5974 1-1:0.0: could not read from device [ 813.519253][ T5181] bcm5974 1-1:0.0: could not read from device [ 813.540448][ T5872] usb 1-1: USB disconnect, device number 37 [ 813.901287][T13203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13203 comm=syz.1.1617 [ 813.918567][T13203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13203 comm=syz.1.1617 [ 813.931706][T13203] vivid-000: disconnect [ 813.936157][T13202] vivid-000: reconnect [ 814.055787][T13212] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌ' [ 814.064119][T13212] CPU: 0 UID: 0 PID: 13212 Comm: syz.1.1618 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 814.064150][T13212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 814.064159][T13212] Call Trace: [ 814.064164][T13212] [ 814.064170][T13212] dump_stack_lvl+0x16c/0x1f0 [ 814.064199][T13212] sysfs_warn_dup+0x7f/0xa0 [ 814.064217][T13212] sysfs_do_create_link_sd+0x124/0x140 [ 814.064237][T13212] sysfs_create_link+0x61/0xc0 [ 814.064256][T13212] device_add+0x62c/0x1a70 [ 814.064278][T13212] ? __pfx_device_add+0x10/0x10 [ 814.064294][T13212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 814.064316][T13212] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 814.064347][T13212] wiphy_register+0x1c9c/0x2850 [ 814.064364][T13212] ? netdev_run_todo+0x864/0x1320 [ 814.064388][T13212] ? __dev_printk+0x1a0/0x270 [ 814.064420][T13212] ? __pfx_wiphy_register+0x10/0x10 [ 814.064452][T13212] ieee80211_register_hw+0x2432/0x4020 [ 814.064492][T13212] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 814.064524][T13212] ? find_held_lock+0x2b/0x80 [ 814.064554][T13212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 814.064573][T13212] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 814.064597][T13212] ? __hrtimer_setup+0x176/0x280 [ 814.064618][T13212] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 814.064646][T13212] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 814.064666][T13212] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 814.064688][T13212] ? __asan_memcpy+0x3c/0x60 [ 814.064718][T13212] hwsim_new_radio_nl+0xb51/0x12c0 [ 814.064743][T13212] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 814.064773][T13212] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 814.064801][T13212] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 814.064835][T13212] genl_family_rcv_msg_doit+0x206/0x2f0 [ 814.064864][T13212] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 814.064901][T13212] ? bpf_lsm_capable+0x9/0x10 [ 814.064917][T13212] ? security_capable+0x7e/0x260 [ 814.064939][T13212] ? ns_capable+0xd7/0x110 [ 814.064964][T13212] genl_rcv_msg+0x55c/0x800 [ 814.064994][T13212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 814.065019][T13212] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 814.065039][T13212] ? __lock_acquire+0xaa4/0x1ba0 [ 814.065060][T13212] netlink_rcv_skb+0x16a/0x440 [ 814.065085][T13212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 814.065114][T13212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 814.065153][T13212] ? __pfx_down_read+0x10/0x10 [ 814.065181][T13212] ? netlink_deliver_tap+0x1ae/0xd30 [ 814.065215][T13212] genl_rcv+0x28/0x40 [ 814.065239][T13212] netlink_unicast+0x53a/0x7f0 [ 814.065268][T13212] ? __pfx_netlink_unicast+0x10/0x10 [ 814.065301][T13212] netlink_sendmsg+0x8d1/0xdd0 [ 814.065331][T13212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.065368][T13212] ____sys_sendmsg+0xa95/0xc70 [ 814.065397][T13212] ? copy_msghdr_from_user+0x10a/0x160 [ 814.065417][T13212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 814.065445][T13212] ? sched_clock_cpu+0x6c/0x530 [ 814.065479][T13212] ___sys_sendmsg+0x134/0x1d0 [ 814.065501][T13212] ? __pfx____sys_sendmsg+0x10/0x10 [ 814.065553][T13212] ? __pfx_lockdep_hardirqs_on+0x10/0x10 [ 814.065587][T13212] __sys_sendmsg+0x16d/0x220 [ 814.065611][T13212] ? __pfx___sys_sendmsg+0x10/0x10 [ 814.065632][T13212] ? rcu_is_watching+0x12/0xc0 [ 814.065667][T13212] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 814.065693][T13212] do_syscall_64+0xcd/0x260 [ 814.065719][T13212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.065737][T13212] RIP: 0033:0x7f368c18e169 [ 814.065752][T13212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.065769][T13212] RSP: 002b:00007f368d05f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 814.065785][T13212] RAX: ffffffffffffffda RBX: 00007f368c3b6080 RCX: 00007f368c18e169 [ 814.065796][T13212] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 814.065806][T13212] RBP: 00007f368c210a68 R08: 0000000000000000 R09: 0000000000000000 [ 814.065816][T13212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.065825][T13212] R13: 0000000000000000 R14: 00007f368c3b6080 R15: 00007ffda2523e18 [ 814.065849][T13212] [ 815.008446][T13228] netlink: 'syz.0.1620': attribute type 1 has an invalid length. [ 815.038686][T13228] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1620'. [ 815.172720][T13231] syz.1.1621: attempt to access beyond end of device [ 815.172720][T13231] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 815.999908][T13246] veth0_vlan: left promiscuous mode [ 816.020907][T13246] veth0_vlan: entered promiscuous mode [ 816.734647][T13266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1634'. [ 817.358108][T13272] selinux_netlink_send: 2 callbacks suppressed [ 817.358119][T13272] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13272 comm=syz.3.1635 [ 817.378173][T13272] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13272 comm=syz.3.1635 [ 817.379506][ T5873] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 817.460008][T13272] vivid-000: disconnect [ 817.464546][T13270] vivid-000: reconnect [ 817.654148][ T5873] usb 3-1: unable to get BOS descriptor or descriptor too short [ 817.663984][ T5873] usb 3-1: config 16 has an invalid interface number: 229 but max is 0 [ 817.673183][ T5873] usb 3-1: config 16 has no interface number 0 [ 817.680314][ T5873] usb 3-1: config 16 interface 229 altsetting 4 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 817.692164][ T5873] usb 3-1: config 16 interface 229 has no altsetting 0 [ 817.703423][ T5873] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=95.62 [ 817.713425][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.727907][ T5873] usb 3-1: Product: syz [ 817.732394][ T5873] usb 3-1: Manufacturer: syz [ 817.737170][ T5873] usb 3-1: SerialNumber: syz [ 817.926750][T13291] netlink: 'syz.4.1640': attribute type 25 has an invalid length. [ 817.935363][T13291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1640'. [ 817.976279][ T5873] kvaser_usb 3-1:16.229: error -ENODEV: Cannot get usb endpoint(s) [ 817.987412][ T5873] usb 3-1: USB disconnect, device number 32 [ 818.070602][ T5872] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 818.304073][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 818.345616][ T5872] usb 4-1: config 0 has an invalid interface number: 172 but max is 2 [ 818.353830][ T5872] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 818.370683][ T5872] usb 4-1: config 0 has no interface number 1 [ 818.390540][ T5872] usb 4-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 818.419528][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=22 [ 818.442697][ T5872] usb 4-1: Product: syz [ 818.462885][ T5872] usb 4-1: Manufacturer: syz [ 818.467498][ T5872] usb 4-1: SerialNumber: syz [ 818.490581][ T5872] usb 4-1: config 0 descriptor?? [ 818.513926][ T5872] usb 4-1: unknown number of interfaces: 2 [ 818.786196][ T5873] usb 4-1: USB disconnect, device number 37 [ 819.539459][ T972] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 819.661895][T13315] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1649'. [ 819.735367][ T972] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 819.779160][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.800220][ T972] usb 1-1: Product: syz [ 819.804473][ T972] usb 1-1: Manufacturer: syz [ 819.809126][ T972] usb 1-1: SerialNumber: syz [ 819.903038][ T972] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 820.016653][ T30] audit: type=1400 audit(1744824689.907:2085): avc: denied { firmware_load } for pid=5913 comm="kworker/0:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 820.115478][ T5913] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 820.307741][T13325] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13325 comm=syz.3.1650 [ 820.322492][T13325] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13325 comm=syz.3.1650 [ 821.238250][T10903] usb 1-1: USB disconnect, device number 38 [ 821.250328][ T5913] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 821.260191][ T5913] ath9k_htc: Failed to initialize the device [ 821.268169][T10903] usb 1-1: ath9k_htc: USB layer deinitialized [ 821.631037][T13334] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 821.681231][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1658'. [ 822.257911][T13338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13338 comm=syz.2.1659 [ 822.271222][T13338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13338 comm=syz.2.1659 [ 822.291645][T13329] syz.1.1653: attempt to access beyond end of device [ 822.291645][T13329] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 822.316583][T13338] vivid-000: disconnect [ 822.321463][T13337] vivid-000: reconnect [ 822.747665][T13360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13360 comm=syz.0.1664 [ 822.769361][T13360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13360 comm=syz.0.1664 [ 822.789046][T13360] vivid-000: disconnect [ 822.985698][T13354] vivid-000: reconnect [ 823.109553][ T8444] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 823.321290][ T8444] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 823.464842][T13372] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1668'. [ 823.566858][T13378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1671'. [ 823.769741][T13382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13382 comm=syz.0.1672 [ 823.789539][T13382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13382 comm=syz.0.1672 [ 823.806903][T13382] vivid-000: disconnect [ 823.811959][ T8444] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 823.879651][ T8444] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 823.976841][ T8444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.992086][T13380] vivid-000: reconnect [ 824.175826][ T8444] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 824.200844][ T8444] usb 4-1: invalid MIDI out EP 0 [ 824.320656][T13392] syz.0.1673: attempt to access beyond end of device [ 824.320656][T13392] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 824.489454][ T5913] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 824.689522][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 824.700640][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 825.173085][ T8444] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 825.182215][ T5913] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 825.199199][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.209868][ T5913] usb 2-1: config 0 descriptor?? [ 825.217820][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input80 [ 825.255656][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.523975][T13403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13403 comm=syz.2.1677 [ 825.540302][T13403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13403 comm=syz.2.1677 [ 825.556519][T13403] vivid-000: disconnect [ 825.960777][ T5181] bcm5974 2-1:0.0: could not read from device [ 825.965709][T13388] syz.4.1674: attempt to access beyond end of device [ 825.965709][T13388] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 826.051462][T13400] vivid-000: reconnect [ 826.220406][ T5181] bcm5974 2-1:0.0: could not read from device [ 826.296540][ T8444] usb 4-1: USB disconnect, device number 38 [ 826.319698][ T5913] usb 2-1: USB disconnect, device number 35 [ 826.635293][ T30] audit: type=1400 audit(1744824696.527:2086): avc: denied { bind } for pid=13408 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 827.171670][T13433] syz.2.1683: attempt to access beyond end of device [ 827.171670][T13433] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 827.249859][T10903] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 827.429616][T10903] usb 2-1: Using ep0 maxpacket: 16 [ 827.436168][T10903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 827.882673][T10903] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 827.892532][T10903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.910673][T10903] usb 2-1: config 0 descriptor?? [ 827.923473][T10903] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input81 [ 828.421726][ T5181] bcm5974 2-1:0.0: could not read from device [ 829.083683][ T5829] bcm5974 2-1:0.0: could not read from device [ 829.099966][ T5181] bcm5974 2-1:0.0: could not read from device [ 829.180739][ T5181] bcm5974 2-1:0.0: could not read from device [ 829.231310][ T8444] usb 2-1: USB disconnect, device number 36 [ 829.534213][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1691'. [ 829.734663][ T30] audit: type=1400 audit(1744824699.627:2087): avc: denied { bind } for pid=13447 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 830.984538][T13442] netlink: 'syz.0.1688': attribute type 15 has an invalid length. [ 831.006920][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 831.359796][ T8444] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 831.526818][ T30] audit: type=1400 audit(1744824701.417:2088): avc: denied { getopt } for pid=13483 comm="syz.0.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 831.546360][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.600113][ T8444] usb 2-1: Using ep0 maxpacket: 16 [ 831.602039][T13475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13475 comm=syz.4.1702 [ 831.608292][ T8444] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 831.625146][T13475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13475 comm=syz.4.1702 [ 831.639237][ T8444] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 831.656206][ T8444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.676663][ T8444] usb 2-1: config 0 descriptor?? [ 831.687886][ T8444] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input82 [ 831.786613][T13475] vivid-000: disconnect [ 831.798556][T13473] vivid-000: reconnect [ 831.893074][T13496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13496 comm=syz.0.1709 [ 832.541471][T13493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13493 comm=syz.2.1707 [ 832.565511][T13493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13493 comm=syz.2.1707 [ 832.586186][T13493] vivid-000: disconnect [ 832.696394][ T5181] bcm5974 2-1:0.0: could not read from device [ 832.705667][T13487] vivid-000: reconnect [ 832.743907][ T8444] usb 2-1: USB disconnect, device number 37 [ 832.957589][T13508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13508 comm=syz.3.1711 [ 833.065219][T13512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13512 comm=syz.2.1716 [ 833.093302][T13512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13512 comm=syz.2.1716 [ 833.119909][T13512] vivid-000: disconnect [ 833.311964][T13511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13511 comm=syz.3.1711 [ 833.481000][T13520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'. [ 833.491234][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'. [ 833.549138][T13523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1719'. [ 833.733908][T13500] vivid-000: reconnect [ 833.818642][T13529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13529 comm=syz.2.1720 [ 834.641916][ T30] audit: type=1400 audit(1744824704.487:2089): avc: denied { getopt } for pid=13531 comm="syz.2.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 834.859472][T10903] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 835.020911][T10903] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.058541][T10903] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 835.098707][T10903] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.132205][T10903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.187074][T10903] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 835.208215][T10903] usb 3-1: invalid MIDI out EP 0 [ 835.264717][T10903] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 835.311950][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 835.485110][T13549] vivid-000: disconnect [ 835.490421][T13548] vivid-000: reconnect [ 836.553202][T13560] vivid-000: disconnect [ 836.810191][ T30] audit: type=1400 audit(1744824706.677:2090): avc: denied { read } for pid=13561 comm="syz.0.1731" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 836.842426][ T30] audit: type=1400 audit(1744824706.677:2091): avc: denied { open } for pid=13561 comm="syz.0.1731" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 836.888400][T13558] vivid-000: reconnect [ 837.090529][T13568] selinux_netlink_send: 4 callbacks suppressed [ 837.090562][T13568] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13568 comm=syz.0.1732 [ 837.473204][T13545] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13545 comm=syz.4.1725 [ 837.492233][T13545] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13545 comm=syz.4.1725 [ 837.507132][T13569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13569 comm=syz.3.1733 [ 837.521903][T13569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13569 comm=syz.3.1733 [ 837.543346][T13569] vivid-000: disconnect [ 837.580326][T13543] vivid-000: reconnect [ 837.666288][ T5873] usb 3-1: USB disconnect, device number 33 [ 837.828762][ T30] audit: type=1400 audit(1744824707.607:2092): avc: denied { getopt } for pid=13579 comm="syz.1.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 837.908376][T13592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1744'. [ 837.955968][T13592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1744'. [ 838.322293][T13608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13608 comm=syz.4.1736 [ 838.339016][T13608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13608 comm=syz.4.1736 [ 840.336442][T13631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13631 comm=syz.0.1752 [ 840.980702][ T5873] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 841.168262][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 841.294964][T13647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13647 comm=syz.0.1759 [ 841.318158][T13647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13647 comm=syz.0.1759 [ 841.339450][T13647] vivid-000: disconnect [ 841.417945][T13642] vivid-000: reconnect [ 841.550314][ T30] audit: type=1400 audit(1744824711.437:2093): avc: denied { append } for pid=13652 comm="syz.0.1761" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 841.739825][ T30] audit: type=1400 audit(1744824711.447:2094): avc: denied { ioctl } for pid=13652 comm="syz.0.1761" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 841.845997][T13655] vivid-000: disconnect [ 841.915786][T13651] vivid-000: reconnect [ 842.014412][ T30] audit: type=1400 audit(1744824711.907:2095): avc: denied { setopt } for pid=13658 comm="syz.0.1763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 842.251500][T13662] veth0_vlan: left promiscuous mode [ 842.283648][T13662] veth0_vlan: entered promiscuous mode [ 842.808083][T13681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13681 comm=syz.3.1769 [ 842.935201][ T5873] usb 2-1: unable to get BOS descriptor or descriptor too short [ 842.987253][ T5873] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 843.005626][ T5873] usb 2-1: can't read configurations, error -71 [ 843.114020][T13689] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1770'. [ 843.920733][T13693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13693 comm=syz.4.1774 [ 844.139842][T13706] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1778'. [ 844.389527][T13714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13714 comm=syz.1.1782 [ 844.405639][T13714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13714 comm=syz.1.1782 [ 844.921441][T13721] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13721 comm=syz.2.1780 [ 845.061328][T13723] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13723 comm=syz.2.1780 [ 845.135258][T13724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13724 comm=syz.3.1785 [ 845.151657][T13724] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13724 comm=syz.3.1785 [ 845.477738][T10903] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 845.490921][T13721] vivid-000: disconnect [ 845.718163][T13717] vivid-000: reconnect [ 845.765336][T13726] program syz.1.1786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 845.792752][T13726] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 845.846242][T13728] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 845.989638][T10903] usb 5-1: Using ep0 maxpacket: 8 [ 846.065463][T13738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13738 comm=syz.0.1788 [ 847.919803][ T5822] Bluetooth: hci0: command tx timeout [ 848.243961][T13745] veth0_vlan: left promiscuous mode [ 848.252680][T13745] veth0_vlan: entered promiscuous mode [ 848.275419][T10903] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 848.336055][T10903] usb 5-1: config 0 has no interface number 0 [ 848.574965][T13752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13752 comm=syz.3.1794 [ 848.590586][T13752] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13752 comm=syz.3.1794 [ 849.096699][T13753] veth0_vlan: left promiscuous mode [ 849.106302][T13753] veth0_vlan: entered promiscuous mode [ 849.578491][T10903] usb 5-1: string descriptor 0 read error: -71 [ 849.587178][T10903] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 849.624569][T10903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.690452][T13763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13763 comm=syz.3.1796 [ 849.706708][T13763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13763 comm=syz.3.1796 [ 850.210660][T10903] usb 5-1: config 0 descriptor?? [ 850.216297][T10903] usb 5-1: can't set config #0, error -71 [ 850.228493][T10903] usb 5-1: USB disconnect, device number 28 [ 850.488791][T13769] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 850.678393][T13769] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1799'. [ 850.890847][T13774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13774 comm=syz.3.1802 [ 850.904137][T13774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13774 comm=syz.3.1802 [ 850.917302][T13774] vivid-000: disconnect [ 850.924164][T13773] vivid-000: reconnect [ 851.683848][T13787] veth0_vlan: left promiscuous mode [ 851.689621][T13787] veth0_vlan: entered promiscuous mode [ 851.932287][T13799] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13799 comm=syz.2.1808 [ 852.105529][T13799] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13799 comm=syz.2.1808 [ 852.106189][T13807] vivid-000: disconnect [ 852.579157][T13809] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1813'. [ 852.680734][T13794] vivid-000: reconnect [ 853.796209][T13834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1820'. [ 853.925938][T13842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1824'. [ 854.061409][T13845] veth0_vlan: left promiscuous mode [ 854.073802][T13845] veth0_vlan: entered promiscuous mode [ 854.340130][T13848] veth0_vlan: left promiscuous mode [ 854.359943][T13848] veth0_vlan: entered promiscuous mode [ 854.676317][T13861] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 854.686617][T13861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1831'. [ 854.749918][ T5872] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 854.986729][ T5872] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 855.053746][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.063016][ T5872] usb 3-1: config 0 descriptor?? [ 855.541482][ T5872] [drm] vendor descriptor length:b9 data:b9 00 00 00 00 00 00 00 00 00 00 [ 855.562261][ T5872] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 855.572916][ T5872] [drm:udl_init] *ERROR* Selecting channel failed [ 855.579607][ T5873] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 855.636060][ T5872] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 855.642938][ T5872] [drm] Initialized udl on minor 2 [ 855.652202][ T5872] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 855.664516][ T5872] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 855.680731][T10903] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 855.705796][ T5872] usb 3-1: USB disconnect, device number 34 [ 855.716492][T10903] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 855.749518][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 855.768806][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 855.793000][ T5873] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 855.804473][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.827574][ T5873] usb 4-1: config 0 descriptor?? [ 856.723439][T13906] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 856.740982][ T5873] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input83 [ 856.773228][ T5181] bcm5974 4-1:0.0: could not read from device [ 856.814913][ T5873] usb 4-1: USB disconnect, device number 39 [ 856.824773][ T5181] bcm5974 4-1:0.0: could not read from device [ 857.079583][T10903] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 857.160802][ T5181] bcm5974 4-1:0.0: could not read from device [ 857.275515][T13896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13896 comm=syz.4.1842 [ 857.290433][T13896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13896 comm=syz.4.1842 [ 857.304709][T13896] vivid-000: disconnect [ 857.309638][T10903] usb 2-1: Using ep0 maxpacket: 16 [ 857.316164][T10903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 857.329574][T10903] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 857.338753][T10903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.347107][T13920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 857.356177][T13920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 857.366845][T10903] usb 2-1: config 0 descriptor?? [ 857.385932][T10903] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input84 [ 857.419143][T13893] vivid-000: reconnect [ 857.665582][ T5181] bcm5974 2-1:0.0: could not read from device [ 857.767144][ T5181] bcm5974 2-1:0.0: could not read from device [ 857.783467][ T5181] bcm5974 2-1:0.0: could not read from device [ 857.789656][T10903] usb 2-1: USB disconnect, device number 40 [ 857.868590][T13932] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13932 comm=syz.3.1853 [ 858.461620][T13938] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 859.113718][T13958] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1867'. [ 859.308561][T13965] veth0_vlan: left promiscuous mode [ 859.317534][T13965] veth0_vlan: entered promiscuous mode [ 859.873582][ T30] audit: type=1400 audit(1744824729.767:2096): avc: denied { bind } for pid=13977 comm="syz.0.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 860.000498][ T30] audit: type=1400 audit(1744824729.897:2097): avc: denied { getopt } for pid=13984 comm="syz.4.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 860.040027][ T972] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 860.099567][ T5873] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 860.169523][T10903] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 860.189522][ T972] usb 3-1: Using ep0 maxpacket: 16 [ 860.195919][ T972] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 860.239329][ T972] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 860.248600][ T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.257839][ T972] usb 3-1: config 0 descriptor?? [ 860.265092][ T972] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input85 [ 860.277048][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 860.284987][ T5873] usb 2-1: config 4 has an invalid interface number: 8 but max is 0 [ 860.294771][ T5873] usb 2-1: config 4 has no interface number 0 [ 860.300911][ T5873] usb 2-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 860.314096][ T5873] usb 2-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 860.322617][T10903] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 860.324113][ T5873] usb 2-1: config 4 interface 8 has no altsetting 0 [ 860.342929][ T5873] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 860.352437][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.362229][ T5873] usb 2-1: Product: syz [ 860.366389][ T5873] usb 2-1: Manufacturer: syz [ 860.371173][ T5873] usb 2-1: SerialNumber: syz [ 860.410446][T10903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.438903][T10903] usb 1-1: Product: syz [ 860.443417][T10903] usb 1-1: Manufacturer: syz [ 860.448087][T10903] usb 1-1: SerialNumber: syz [ 860.458701][T10903] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 860.475511][ T5181] bcm5974 3-1:0.0: could not read from device [ 860.493125][ T972] usb 3-1: USB disconnect, device number 35 [ 860.494986][ T5871] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 860.508454][ T5181] bcm5974 3-1:0.0: could not read from device [ 860.608851][ T5873] opticon 2-1:4.8: opticon converter detected [ 860.637086][ T5873] usb 2-1: opticon converter now attached to ttyUSB0 [ 860.659513][ T5913] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 860.690955][ T5873] usb 2-1: USB disconnect, device number 41 [ 860.729210][ T5873] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 860.748762][ T5873] opticon 2-1:4.8: device disconnected [ 860.839458][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 860.965119][ T5873] usb 1-1: USB disconnect, device number 39 [ 860.990443][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 861.021871][ T5913] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 861.031036][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.047006][ T5913] usb 5-1: config 0 descriptor?? [ 861.065896][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input86 [ 861.071399][T13996] [ 861.077355][T13996] ====================================================== [ 861.084366][T13996] WARNING: possible circular locking dependency detected [ 861.091366][T13996] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 861.098443][T13996] ------------------------------------------------------ [ 861.105427][T13996] syz.2.1882/13996 is trying to acquire lock: [ 861.111474][T13996] ffffffff9012caa8 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x2042/0x4420 [ 861.120681][T13996] [ 861.120681][T13996] but task is already holding lock: [ 861.128016][T13996] ffff88805c3d8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 861.138073][T13996] [ 861.138073][T13996] which lock already depends on the new lock. [ 861.138073][T13996] [ 861.148446][T13996] [ 861.148446][T13996] the existing dependency chain (in reverse order) is: [ 861.157432][T13996] [ 861.157432][T13996] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 861.166012][T13996] __mutex_lock+0x199/0xb90 [ 861.171044][T13996] smc_switch_to_fallback+0x2d/0x9f0 [ 861.176844][T13996] smc_sendmsg+0x13d/0x520 [ 861.181765][T13996] __sys_sendto+0x495/0x510 [ 861.186771][T13996] __x64_sys_sendto+0xe0/0x1c0 [ 861.192038][T13996] do_syscall_64+0xcd/0x260 [ 861.197061][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.203464][T13996] [ 861.203464][T13996] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 861.211097][T13996] lock_sock_nested+0x41/0xf0 [ 861.216285][T13996] sockopt_lock_sock+0x54/0x70 [ 861.221556][T13996] do_ip_setsockopt+0xfe/0x3240 [ 861.226919][T13996] ip_setsockopt+0x59/0xf0 [ 861.231836][T13996] udp_setsockopt+0x7d/0xd0 [ 861.236851][T13996] do_sock_setsockopt+0x221/0x470 [ 861.242388][T13996] __sys_setsockopt+0x1a0/0x230 [ 861.247745][T13996] __x64_sys_setsockopt+0xbd/0x160 [ 861.253363][T13996] do_syscall_64+0xcd/0x260 [ 861.258374][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.264771][T13996] [ 861.264771][T13996] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 861.271984][T13996] __lock_acquire+0x1173/0x1ba0 [ 861.277336][T13996] lock_acquire+0x179/0x350 [ 861.282342][T13996] __mutex_lock+0x199/0xb90 [ 861.287351][T13996] do_ipv6_setsockopt+0x2042/0x4420 [ 861.293056][T13996] ipv6_setsockopt+0xcb/0x170 [ 861.298234][T13996] tcp_setsockopt+0xa4/0x100 [ 861.303324][T13996] smc_setsockopt+0x1b3/0xa00 [ 861.308499][T13996] do_sock_setsockopt+0x221/0x470 [ 861.314029][T13996] __sys_setsockopt+0x1a0/0x230 [ 861.319384][T13996] __x64_sys_setsockopt+0xbd/0x160 [ 861.325027][T13996] do_syscall_64+0xcd/0x260 [ 861.330046][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.336448][T13996] [ 861.336448][T13996] other info that might help us debug this: [ 861.336448][T13996] [ 861.346662][T13996] Chain exists of: [ 861.346662][T13996] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 861.346662][T13996] [ 861.360237][T13996] Possible unsafe locking scenario: [ 861.360237][T13996] [ 861.367677][T13996] CPU0 CPU1 [ 861.373019][T13996] ---- ---- [ 861.378360][T13996] lock(&smc->clcsock_release_lock); [ 861.383716][T13996] lock(sk_lock-AF_INET); [ 861.390630][T13996] lock(&smc->clcsock_release_lock); [ 861.398500][T13996] lock(rtnl_mutex); [ 861.402462][T13996] [ 861.402462][T13996] *** DEADLOCK *** [ 861.402462][T13996] [ 861.410581][T13996] 1 lock held by syz.2.1882/13996: [ 861.415663][T13996] #0: ffff88805c3d8aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 861.426167][T13996] [ 861.426167][T13996] stack backtrace: [ 861.432033][T13996] CPU: 1 UID: 0 PID: 13996 Comm: syz.2.1882 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 861.432050][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 861.432058][T13996] Call Trace: [ 861.432063][T13996] [ 861.432067][T13996] dump_stack_lvl+0x116/0x1f0 [ 861.432086][T13996] print_circular_bug+0x275/0x350 [ 861.432110][T13996] check_noncircular+0x14c/0x170 [ 861.432132][T13996] __lock_acquire+0x1173/0x1ba0 [ 861.432148][T13996] lock_acquire+0x179/0x350 [ 861.432159][T13996] ? do_ipv6_setsockopt+0x2042/0x4420 [ 861.432179][T13996] ? __pfx___might_resched+0x10/0x10 [ 861.432199][T13996] __mutex_lock+0x199/0xb90 [ 861.432217][T13996] ? do_ipv6_setsockopt+0x2042/0x4420 [ 861.432236][T13996] ? lock_acquire+0x179/0x350 [ 861.432252][T13996] ? do_ipv6_setsockopt+0x2042/0x4420 [ 861.432270][T13996] ? __pfx___mutex_lock+0x10/0x10 [ 861.432288][T13996] ? finish_task_switch.isra.0+0x221/0xc10 [ 861.432306][T13996] ? rcu_is_watching+0x12/0xc0 [ 861.432322][T13996] ? trace_sched_exit_tp+0xde/0x130 [ 861.432343][T13996] ? do_ipv6_setsockopt+0x2042/0x4420 [ 861.432360][T13996] ? rtnl_lock+0x9/0x20 [ 861.432373][T13996] do_ipv6_setsockopt+0x2042/0x4420 [ 861.432392][T13996] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 861.432411][T13996] ? __lock_acquire+0xaa4/0x1ba0 [ 861.432425][T13996] ? __mutex_trylock_common+0xe9/0x250 [ 861.432438][T13996] ? __pfx___mutex_trylock_common+0x10/0x10 [ 861.432451][T13996] ? __pfx___might_resched+0x10/0x10 [ 861.432469][T13996] ? rcu_is_watching+0x12/0xc0 [ 861.432485][T13996] ? trace_contention_end+0xdd/0x130 [ 861.432499][T13996] ? __mutex_lock+0x1ca/0xb90 [ 861.432517][T13996] ? avc_has_perm+0x11a/0x1c0 [ 861.432530][T13996] ? __pfx_avc_has_perm+0x10/0x10 [ 861.432541][T13996] ? smc_setsockopt+0x100/0xa00 [ 861.432553][T13996] ? __pfx___mutex_lock+0x10/0x10 [ 861.432572][T13996] ? ipv6_setsockopt+0xcb/0x170 [ 861.432589][T13996] ipv6_setsockopt+0xcb/0x170 [ 861.432607][T13996] tcp_setsockopt+0xa4/0x100 [ 861.432622][T13996] smc_setsockopt+0x1b3/0xa00 [ 861.432635][T13996] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 861.432656][T13996] ? __pfx_smc_setsockopt+0x10/0x10 [ 861.432670][T13996] ? selinux_socket_setsockopt+0x6a/0x80 [ 861.432687][T13996] ? __pfx_smc_setsockopt+0x10/0x10 [ 861.432699][T13996] do_sock_setsockopt+0x221/0x470 [ 861.432718][T13996] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 861.432741][T13996] __sys_setsockopt+0x1a0/0x230 [ 861.432757][T13996] __x64_sys_setsockopt+0xbd/0x160 [ 861.432774][T13996] ? do_syscall_64+0x91/0x260 [ 861.432791][T13996] ? lockdep_hardirqs_on+0x7c/0x110 [ 861.432808][T13996] do_syscall_64+0xcd/0x260 [ 861.432826][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.432839][T13996] RIP: 0033:0x7f93c338e169 [ 861.432851][T13996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.432864][T13996] RSP: 002b:00007f93c42b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 861.432876][T13996] RAX: ffffffffffffffda RBX: 00007f93c35b5fa0 RCX: 00007f93c338e169 [ 861.432886][T13996] RDX: 0000000000000001 RSI: 0000000000000029 RDI: 0000000000000003 [ 861.432894][T13996] RBP: 00007f93c3410a68 R08: 0000000000000000 R09: 0000000000000000 [ 861.432903][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.432911][T13996] R13: 0000000000000000 R14: 00007f93c35b5fa0 R15: 00007ffe41cd2e18 [ 861.432924][T13996] [ 861.772037][ T5871] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 861.778988][ T5871] ath9k_htc: Failed to initialize the device [ 861.785487][ T5873] usb 1-1: ath9k_htc: USB layer deinitialized [ 861.887456][ T5181] bcm5974 5-1:0.0: could not read from device [ 862.029083][ T5181] bcm5974: mode switch failed [ 862.071718][ T5181] bcm5974 5-1:0.0: could not read from device [ 862.078045][ T5181] bcm5974: mode switch failed [ 862.087881][ T5913] usb 5-1: USB disconnect, device number 29 [ 862.114651][ T5181] bcm5974 5-1:0.0: could not read from device [ 862.138010][ T5181] bcm5974: mode switch failed [ 862.145923][ T5181] bcm5974 5-1:0.0: could not read from device [ 862.155841][ T5181] bcm5974: mode switch failed [ 862.278902][ T5829] bcm5974 5-1:0.0: could not read from device [ 862.309931][ T5829] bcm5974: mode switch failed [ 862.334680][ T5181] bcm5974 5-1:0.0: could not read from device [ 862.370205][ T5181] bcm5974: mode switch failed [ 862.413392][ T5181] bcm5974 5-1:0.0: could not read from device [ 862.446108][ T5181] bcm5974: mode switch failed [ 862.467738][ T5181] bcm5974 5-1:0.0: could not read from device [ 862.508391][ T5181] bcm5974: mode switch failed [ 869.680608][ T1297] ieee802154 phy1 wpan1: encryption failed: -22