last executing test programs: 9.174598414s ago: executing program 2 (id=1235): syz_usb_connect$uac1(0x0, 0xb2, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0xb, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0x9], 0x3}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "000000001a"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x6]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0xa, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="151ba456fae8ccb87dde651d135bec18e9580c09f9f5202c03e2de092e5998cf96438b4300bf20660ff26bd75d4f95ee849b9416a97f73805275951d2c7b147c1157afde", 0x44, 0x44884, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000080)=ANY=[]) (rerun: 64) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8.222465107s ago: executing program 1 (id=1242): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x42e, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0xb1, 0x5d, 0x9c, 0x20, 0x46d, 0x8b8, 0xec1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41c, 0x3, 0x9, 0x39, 0xc0, 0x2, [{{0x9, 0x4, 0x1c, 0xd, 0xa, 0x79, 0xe3, 0xc4, 0xf5, [], [{{0x9, 0x5, 0x1d, 0x0, 0x3ff, 0x4, 0x1, 0x4}}, {{0x9, 0x5, 0x9, 0x1, 0x631, 0xe, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xc, 0xa}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xc, 0x3, 0x65, [@generic={0x71, 0x16, "bc1972ff799b9083e232d3e10f5a3e2e967d2b63c5955ad69fab23272255e0279bcfba8e8c785a7ed11b3618e124eb50630effebd9108915e8c9759fbd6c16548e46afab25a382ce951c7003344d5a68e553be7277a23cccf712f079c89ff400321e33f4c048b18a598179551ccba9"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x0, 0x8, 0x53, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf8, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}]}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x7, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0x9, 0xfffe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xcb, 0xe, 0x10, [@generic={0x36, 0x24, "b15d8cad178369f92819615bd3a2c52eeb54155c68022a24776848538e6b0fe5745b89d9d5e4d45e5cf525fd8c24ac14599aee19"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x0, 0x71, 0x7f, [@generic={0x3a, 0x0, "6f375f57996d63f859f7434c9f6623d89abbbdc281cbd4369f09f44ac9dba1253b363daaa665072c2770a19f5c88b6cdf4c319012693e50b"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x2, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdf, 0x2}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x0, 0x0, 0x5, [@generic={0x5f, 0x0, "0ef5fa6f7d9499d3b7f89caa9c0e04f2e47b1da1971b5947689d00cd578139649d04854982b1ccbeecea1dcfee65ce4f02232f6138d7addcb0ec86646f4df7770df2662e19e6642610913b7741f582fd36eb6a4c46b23270aa3224dbd2"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xd}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0xd9, 0x6, 0x5, [@generic={0xd8, 0x4, "428bc3dfe64ca5598890a58ff92379a4c9ad6d976f79309694b81a3445c6dacc6c4d30fb9991a04d9236b953279c8118ef77b4af0273cff959b16a8d6d4ccc4cdc003b52d7233d719bbb752366fad7d34fd6c288281a9e4fe51cc43b9f05e6835e38e658841a074499e2c500f8d643a49c9b67e6af63f9d9130b68b51654ff3534a0d9f12aa994a9e3db44c05e6ba72a2529d4e97f11eb8b7aabe2bc24404d4c9cabe4916ec835930e7485564382530aa7514eb74839cb16c71002061e0a47939ca19f81f3e81b1535cd65c746fc6d8818d51d48d8ec"}]}}]}}, {{0x9, 0x4, 0xed, 0x7, 0x0, 0xf9, 0xe2, 0x43, 0xf}}, {{0x9, 0x4, 0x30, 0x3, 0x7, 0x62, 0xdc, 0xe6, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x4}, [@selector_unit={0x5, 0x24, 0x5, 0x2, 0xd}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x1, 0x7, 0x4ae, 0x6f, 0x2}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x1, "ca17f3fc"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x6, 0x6b, 0x40, 0x5, 0x1}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x4, 0x8, "f189"}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x1, 0x2, [0xa, 0x4], 0x3}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x2, 0x2c, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7d, 0xf986}]}}, {{0x9, 0x5, 0x9, 0x1c, 0x20, 0x7, 0x4, 0x7, [@generic={0x1f, 0xf, "459b772b498ae6bc6d8807d80483491dec6d30ad244c91f4f6eb8df063"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x80, 0x9, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x3, 0xa0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x3, 0x40, 0x9c, [@generic={0x6f, 0x3, "4616cefa45f575b66135d053df65785f74750edc52fc61d132fd0fa7ab91ca6c1750df4fa2fedbf77280b0c3333f6311b43d946d6f3f78189566f233b9ade9130339df3b116bde2bfba58f2354c4b063dd1811fa9d9a178d66303d36cb9d6ada074c4d9707a95b62cd46b9516b"}, @generic={0x37, 0x8, "900b76b09b66f0c1995a463bf0d939d8b64c2610f353b23597524d38e77991e216ed74fbfcccafdadb5fb4f4e141f65fb1b8ef779a"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x4, 0x85, 0x2}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7, 0x4, 0x7}}]}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x3, 0x2, 0x8, 0x40, 0x3}, 0x119, &(0x7f0000000080)={0x5, 0xf, 0x119, 0x6, [@generic={0xbb, 0x10, 0x3, "d8863474ff51defe97fecb0ea2d9d5f590bb89f9303c36c6def4844402d6cc630acf8155269cc1d117000d322953aa0da0ba3f872fc442f99851528fe7bb77347eb002d1742479e22768c0d2652decaae2f4ed2c4c04a301ee173f5e41ebe8e8e64fd2a12a0ea5b630fa6e455289e9d269885f28bad80136b3f97b58cd60486b12845425ef131bb0310a001e2d6769f8fb5352a4e0a5e381a158b521df7db6e0ea70f1890041a76775a30e9237e7b4930def860f8d5a2fe7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x2, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "bbd9fe5a4091769b392de025ee95636e"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f0ba9a7873f0ed1b8aa740517d83243b"}, @ssp_cap={0x20, 0x10, 0xa, 0xfd, 0x5, 0x9, 0xf, 0x9, [0xff813f, 0xc0, 0xf0, 0x3f00, 0xff0000]}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x75, &(0x7f0000000240)=@string={0x75, 0x3, "dc062335493bbd11e171c4645a84c906d78f67490489cc2c2caacfa518ab9398a62fc7f0bc7ee8f23118a9011184adc37032562b82f8b4a98d81cb331909e7831b83ce88e155c84a092184470e798918199668383f6cd5618bfa8477b40e202f5f53232204d908ef420c6d9a6e6c8eb5565f54"}}, {0xb7, &(0x7f0000000340)=@string={0xb7, 0x3, "5f48e0e9713b21a7ea0a543b0eff428199d583ce016888aa17eea90091092cb45e92ca66c0d818cb7f557d353b04dccb604841586bc48d74fac06ee1bd1b2c799f49a76af8cf54996520ec0e9c7b73bd818122c1f3d998cd58153eb3530aa014118a18a8653e4da8c8cebcd315cc0ee731878a8907fb798dbbb7da87b6f4ce2a3477d4d518f1211776682d6fb5d275af633a30d2633b09f5919645aa650e7eb6aa33c4544c15fbfe84889238bd2903af53956ba10a"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x409}}, {0x47, &(0x7f0000000480)=@string={0x47, 0x3, "e048580843fc6c95aabf05f755909e6ad988f01186a3f2baeca4e3f643b957fefe029ddd156fc1f52b9dea8d275388859295fba3a51b77182bb3a5c703aabd89919ac28f7a"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.110576306s ago: executing program 2 (id=1247): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r5, 0x0, 0x6}, 0x18) (async) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r8 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0xffffcc5f}, 0x0) execve(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, &(0x7f0000000240)={[&(0x7f0000000000)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async) getpid() 6.109549671s ago: executing program 2 (id=1248): syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100032deb4c10c93093009eea0102030109021200017f00c0810904e020000e0101187357ad793e6275b0ff5a42d98608c53485dc729d978c4c072509cab451477100332c7b40f4997f25ab54feced3900d1d5538b91cdba11726ad60b356aef4169794a87a0f9594a66083c9649eee5d547345b9d98f47a1cf553bb5bb3c49980f7bd674519155e0cb341b53650df3a429d551c9d2cd640262ad511574e893513b5aaed97c14720276de67e1d4afe84a99223243b8b153076c50382b23fd2ef747427523b3bf9b2bbd503fce1d54d61a56d30d9b0af125160e510592984f386fdd110d3f4438d98fcf37cf761216599d1c965050a0506e4c43d208da4f61454116ca503c1dd017f789dc2108c9"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250f00000008000600", @ANYRES32=r0, @ANYBLOB='\b\x00'/11, @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24084881}, 0x40001) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = semget$private(0x0, 0x4, 0x0) semop(r6, 0x0, 0x0) semtimedop(r6, &(0x7f0000000000)=[{0x0, 0x9, 0x800}], 0x1, 0x0) r7 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) fcntl$getownex(r5, 0x10, 0x0) syz_usb_connect$uac1(0x1, 0x9c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x7, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x4}, [@mixer_unit={0x5, 0x24, 0x4, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x1, 0x3, "ba"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0xe, 0x8, "ba9de2f34d"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x27}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x5, 0x9, {0x7, 0x25, 0x1, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0xa, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x8, 0x5, {0x7, 0x25, 0x1, 0x1c0, 0x5, 0x5}}}}}}}]}}, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) 5.746190383s ago: executing program 4 (id=1252): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r0, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x69, 0x10, 0x63}, [@ldst={0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80009}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x712e, &(0x7f0000000500)={0x0, 0x7c87, 0x400, 0xfffffffe, 0x1c9}, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setfsuid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x1, 0x6}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4810}, 0x200008d4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getpgrp(r2) socket$rds(0x15, 0x5, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7002fddbdf25570000000c009900000100006d009500b5f70000060095000200000006009500ecd0ca67"], 0x40}, 0x1, 0x0, 0x0, 0x40488d1}, 0x20044844) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8014210}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x474, 0x3f3, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x16, [0x9c51, 0x101, 0x0, 0x4, 0xf, 0x6, 0x5, 0x7, 0x5, 0xf480f74, 0x9, 0x0, 0x4, 0x7, 0x0, 0x9, 0x2, 0x8cbf, 0x5, 0xfffffffb, 0x6f9a, 0x200, 0x7fffffff, 0x3, 0x0, 0xf9f, 0x4, 0x9, 0xa, 0x400, 0x9, 0x8, 0x7fff, 0x9, 0x8, 0x5, 0xffffffff, 0x800, 0x80, 0x8, 0xf, 0xffffffff, 0x5, 0x8, 0x2, 0x7, 0x7a9, 0x8, 0x80000001, 0x6, 0x5, 0x101, 0xe, 0xc, 0x7, 0x2, 0x1, 0xffff, 0x4, 0x4ccea719, 0xbf3a, 0x7b, 0x2, 0x10001], [0x7, 0x2, 0x3, 0x8, 0xe, 0x2efc, 0x4, 0xd31, 0x6, 0xa469, 0x10, 0x5, 0x80000001, 0x4, 0x0, 0x3b9, 0x3, 0xffffffff, 0x0, 0x200, 0x9, 0xfffff573, 0x5, 0x7, 0x40, 0x5, 0x2, 0xc0b, 0x9, 0x1, 0x656, 0x7, 0xd66, 0x5, 0x40, 0x10001, 0xd23, 0xc, 0x8, 0x8000, 0x1, 0xbdc, 0x0, 0x6, 0x4e73, 0x34b9, 0x6, 0x0, 0x10001, 0x0, 0x8, 0x8, 0x4, 0x8, 0x3, 0x1, 0x8, 0x9, 0x2, 0x2, 0x6, 0x5e, 0x3, 0x10], [0x5, 0x9, 0x83, 0x8000, 0x4, 0x4, 0x5, 0x8000, 0xfffffff8, 0x101, 0x3f08, 0x401, 0xe, 0x7fffffff, 0x1, 0x8, 0x7, 0x2a6, 0x9, 0x73c, 0x800, 0x0, 0x0, 0x50, 0x2cf, 0x8000000, 0x3, 0x3, 0x6, 0x400, 0x5, 0x0, 0xf74e, 0x7581, 0x7, 0x4, 0xdf0, 0x1, 0xf, 0x7, 0x10000, 0x2, 0x7ff, 0x8000, 0x6, 0x100, 0x8, 0x10, 0x9, 0x0, 0x15, 0x4, 0xa0, 0x1, 0x6, 0xffffff80, 0x10001, 0x5, 0x8, 0x9, 0x8, 0xfffffff7, 0x10001], [0x5, 0x0, 0x95, 0x7, 0x6, 0x4800000, 0x8, 0x1, 0x0, 0x5, 0x8, 0x0, 0x7, 0x3, 0x4, 0x6, 0xfffffff9, 0x20000000, 0x9f59, 0xff, 0x5, 0x5, 0x401, 0x4, 0x2, 0x7, 0x7fffffff, 0x3, 0xd813, 0x5, 0x3, 0x6, 0x6, 0x40, 0x7fff, 0x4, 0x2, 0xfffff800, 0xf, 0x3, 0x5, 0x6, 0x9, 0x1, 0x602fb800, 0x4, 0x6, 0x8, 0x8c00, 0x8, 0x6, 0xfffffffb, 0xfffffffe, 0x4, 0x7fffffff, 0x9, 0x8, 0x9, 0x0, 0x1, 0x100, 0x2, 0xa6, 0x27], 0x51, ['/dev/vhost-vsock\x00', '!.]\x00', '\'\x00', '/dev/video#\x00', 'syzkaller\x00', '\xce$]#\x00', '/dev/cpu/#/msr\x00', '/dev/video#\x00', '\x00', '/$\x00']}, ["", "", "", "", ""]}, 0x474}}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000180)={&(0x7f0000008600)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c000280080004"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) 4.38656011s ago: executing program 1 (id=1253): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20c}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40000) (async, rerun: 64) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 64) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 4.326606641s ago: executing program 0 (id=1254): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x10000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 4.118716864s ago: executing program 1 (id=1255): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0x4, 0x4, 0x0, 0x6}) 4.066919809s ago: executing program 4 (id=1256): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4001af83, &(0x7f00000000c0)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdfffd00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18) 4.057475226s ago: executing program 0 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 4.046842609s ago: executing program 3 (id=1258): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000040)={0x558, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x52f, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @broadcast, @device_a, @random="14866e497516", {0x1, 0x7}, @value=@ver_80211n={0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x201, 0x5, @broadcast, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x2, 0x1}, {0x4, 0x1}]}, @void, [{0xdd, 0x84, "bc00020a84ef17dfe9d4c54b88c4a94130a03afaaf220d2fef38192f78f9a92f6001aa8fb4e1b511667e4d3f073e6cc124b77b189ccbc236799973978845dcbde2f34d329d85a0a1886c4306f6ab0919ab460607be3487673ce71b047f281fca188b1d6aa977fcc92a7c3030b53aae76a08a6989ad2399ec9321a3108a472be0a6a2f767"}, {0xdd, 0xbc, "6b3973dc6bf9f32f79a3e2668bb22fc6bbdafd28c205ef773ff0f5ef5f1c70ed7cab473261d402303bf1529a784eb72519bae795ade8d4070324fdbd5f3101d81dedfa099d1a9797a55b93061991e086a861e9ff1b4cdbb70557d83f3fa33dbf6bb13161801a905672b25166ff4ccb289acd813f814433d82194061f86774a3b384b25f5b6d3bca9715d07ecc69f075e4012f6f0711039de58c4fb0981a6074c1d0d02eeb9f7549e2b272fcaf90554c16d3f1f886906b8c594de1101"}, {0xdd, 0xdb, "c9b7b1fcc66ef8398ee84d5aaa4ae62b42daa47a4c1e3955872eedf862209a13b00e6c599463fe0b29f1c637b68fb160b77c1f87726b21def4243071a15682bd9fb4295b352a97e31968eb093dc8706d2672d05b54fc07480b77bcef99055b760e802c4622776254e3f5d331db95021d19953e0da8f0e8ff349a1f6c3d2b10bee1be2ad8da2d13f05cca8c0d5285eca68cfe9d3d45e44a0c426039b17bf2c52e6aa6ace67dfd4b42dead36297ffed8e1669492e32dc10e1fb87dec1ed7ca2cef3b06ee8358a10c86d65a5b801f64dc367a5eaf05f76047c5f05dc8"}, {0xdd, 0x22, "da2676a8b6283e83674ff79f47a739aea75994f6dec172e5a32b1744a3b07fde1485"}, {0xdd, 0x9f, "be84c9fecc1bac25cf01252e26cf7a5a596a1aac0db64ae84f642e39fd0b2bae69c5d4e2e296b8cf27f21243a8439f4686880d5ca83a89f270c76b7166721dfa6cc67aaa8ea018dcac893e2145f3194e9df2bd6f73a1fc5b393cdb4e110eaede14624aa81062b7bdc3f65739e2dd4a68484ba2a0821ffc80f19c850dfee643116f3d5e2b9675d42489f6ea4eaaab75e0cee965743ed0026c83759880aa11c6"}, {0xdd, 0xc2, "3ed77985e642a03d2d218cea44a4d4a983ecc382cea325899c6ec55e12dbc44402c43f5aaad0869726815208f5ed843040761489fb5719df5165b5546858b8a211f8de6a4cf1ce6e635e60cfd792b5448a5f1f554f7786e7dceb66c546273f428c76f99ec9950aafccaa3c206de3f140c8fcd6edb0b34455786f6a5f1b9f4f0f3ed6567f1351d5160436983e1e229fdbd60ec13a5bb4d9a9981a8fc551a1353f8062fbd361b9bd69ccbf33d4b13d82d6cd3270227e2adddfb5d9eafca415140beaf6"}, {0xdd, 0x71, "560583230790ebb2292b329b9f2f3f4fb020e3916beaf04aa4fcab49adc974e53437804de6c47a06ca84da5e3d1fbba646c6df78a7ee5fd5d016f880498ea7bb0caa4ce505a61de221c576af87e3f142d5dca599a32f0c168bc74c0cd7d0b955ff7fbb8bba875a9c1f84b52d01f8d97a16"}, {0xdd, 0x22, "e4631133cec8b14430d2df1509aa9eccf8f2b3f2a59d9ced1e3b3fa4fe6cc03492c8"}, {0xdd, 0xb6, "10b390cd3dcd8b78f784bfbe51fa5729550051ab2e768ae86dd4dcbbe5430ef03b934c4ed3304930d3a832aeeac80e2197b05703c7b447672453f02bac40f5476123432506618103ed8750f2ae86a312141be2ac793f7712389c7e525f958670c14bd49a4d1d474e2b030ddca96456fe802fb7f8ad47443fbb34bc2112bc9a1cefff157e36e80e77a3332639af8a37d02d0a08f1e8526655fba2f2b459e2757391fe85ecdd389853d00400bd9b08ad72c3d467f4eb8a"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa0b}]}, 0x558}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000680)={0x0, 0x0, @pic={0x10, 0x2, 0x7, 0x1, 0x9, 0x8, 0x2, 0x7f, 0x8, 0x8, 0xd6, 0x2, 0x1, 0x0, 0x3, 0xe}}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb4e0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x110, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xc7}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20004000) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x7c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000d00)=[@textreal={0x8, &(0x7f0000000cc0)="00841a00f00fb12c0f78b74fde660fae340f01cfd9fa670fd16cd200360f06b82d0c8ee00f017c0b", 0x28}], 0x1, 0x56, &(0x7f0000000d40), 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (rerun: 64) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, r2, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6a8a2c4, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2e14de30155e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="56af6211a944"}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4040084) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, r2, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000894}, 0x91) (async) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000001000)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000001040)={0x18, r6, 0x5, 0x9}) (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000010c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'wpan0\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x60, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xe}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x88000) (async) fcntl$getownex(r4, 0x10, &(0x7f0000001340)={0x0, 0x0}) prlimit64(r14, 0x1, &(0x7f0000001380)={0x8, 0x2}, &(0x7f00000013c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001400)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0xe, 0x6, 0x0, 0x0, 0x20022, 0x1, 0x401, '\x00', r15, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000018c0)={0x24, &(0x7f0000001780)={0x40, 0x33, 0x4d, {0x4d, 0xf, "cb8a328a9410977eafe01509dbaa6e6dbef2b5a051f9ccbfe63fdef160ad55a3b5523db246330efee40d0a46fe0e0780872346a78d6289ccff643749135c4a0689802b8d8430df28af03f3"}}, &(0x7f0000001800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000001840)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xb, "96"}]}}, &(0x7f0000001880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x654}}}}, &(0x7f0000001b80)={0x2c, &(0x7f0000001900)={0x20, 0x8, 0xc9, "fb563cb622402bd80023f6c3d6f0e804a31d855f8312f28ad559f60997f26c6a4f83d4e7bb70d6a15ec829f02fadfbff366c880e9897a55361e4a2821cdf756c0155487d52c8722e1ec7bffb3a8982b6c5fe4824f1a8c03c9e2e6837cf0ea646ee615b813c7de92ff278ab25bb0fa1fff8da1a85cdb042ac901ba8c08dcbb0d4a4a1b5740795e0d973bcbfd5c8610c1532cf7eb1ee09136a5b377eb21330d301497f64fb570429037c7ed39b4c78b128c04732002cd3cf4d66945030e7d966d12a0985e6be1f76f208"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001a80)={0x20, 0x1, 0xa3, "edf00d2b39895c090e3c75749ac65b81941c17ab37bfcfca627de3e41201ea1e3b3cf194b0054771577b6dc3b89f5b52520871de26376501b9e8e6f9ad685351767c117386aaf97cfd95c91823f70ca951879484b946068a6095973d1471069abfbe26aa94d37a08d0146a775160679bb732f99f0f6a57628759afdb3466909690b38d04f00adce08a590ce127e177efff115f9d32204be1dd0a7102381fc442e7325f"}, &(0x7f0000001b40)={0x20, 0x3, 0x1, 0x5}}) 3.972178159s ago: executing program 1 (id=1259): mkdir(&(0x7f0000000400)='./file0\x00', 0x9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ba9e000000060000faca8427646c33183ff973df94aadb9e7cd142e71f3d5fecc5433f2e39"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) creat(&(0x7f0000000100)='./file0\x00', 0x100) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x94, 0x5b, 0x40, 0x46d, 0x8b7, 0xca8e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xc5, 0x42}}]}}]}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001300"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000200000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r11, 0x0, 0x406f413, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r10, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r12, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) 3.97102773s ago: executing program 4 (id=1260): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002200000085030000a000000095"], &(0x7f0000001300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000ac0)={r5, 0xd0}, &(0x7f0000000b00)=0x8) r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r6, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) timer_create(0x2, 0x0, &(0x7f00000008c0)=0x0) timer_settime(r8, 0x1, &(0x7f0000000900)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.822576705s ago: executing program 0 (id=1261): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r2 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023f000/0x1000)=nil, &(0x7f0000240000/0x2000)=nil, 0x400, 0x0, 0x0, 0x1c3, 0x5a, 0x1b, 0x62, 0x2e}) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff01080000000081004100000c03000000060200"/34], 0x0) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x6e1}], 0x1, 0x20, 0x0) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008244c4a44b710734000000119078000000000000000000004e2000089078"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.84434981s ago: executing program 2 (id=1262): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000240)={r2, 0x2, 0x8, 0x2, &(0x7f0000000080)=[{0xfff, 0x5, 0xf001, 0x7ffe}, {0x5, 0x4, 0x80}]}) getpid() getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000190c0)=ANY=[], 0x18}, 0x4000) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) r9 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x1, 0x2]}) pipe2$watch_queue(0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) 2.73787469s ago: executing program 4 (id=1263): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x181001, 0x0) syz_emit_ethernet(0x42, &(0x7f0000001a40)=ANY=[@ANYRESOCT=r0], 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) (rerun: 64) socket(0x2, 0x3, 0xff) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(0x0) (async, rerun: 64) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, 0x0, 0x0) (async, rerun: 64) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x8400, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x0, 0x8}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1.966626736s ago: executing program 3 (id=1264): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = gettid() ppoll(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) unshare(0x18000400) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) 1.964059475s ago: executing program 4 (id=1265): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 1.607551271s ago: executing program 0 (id=1266): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000000c0)='l2tp\x00', 0x5) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) 1.605862119s ago: executing program 2 (id=1267): r0 = socket(0x10, 0x3, 0x0) sendmsg$alg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001100)="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", 0x1000}, {&(0x7f0000000480)="6a6dd3e5", 0x4}], 0x2, &(0x7f0000000500)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xa38}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x63, "bb9762df9ede5d425e75faee2247e11412abe9c2888fd911c728ecf880cd272f534710984d3af9ad024e3b35c029ee695c5bc6bdf9db907871b027abbefe7ec7f2139a8367f078333e39731eb73eaae7436823e06690e59fbc1bec95542cdff1800884"}, @assoc={0x18, 0x117, 0x4, 0xc}], 0xd8, 0x4000804}, 0x8040040) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003}) 1.055170171s ago: executing program 0 (id=1268): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) (async, rerun: 32) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x200000000048c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x8, 0x1000000085, 0x100, 0x101, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0xec4, 0x5, 0x7}) (async, rerun: 64) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000001b0000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) (async, rerun: 32) process_mrelease(0xffffffffffffffff, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x80000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bind$unix(r4, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) fsopen(&(0x7f0000000240)='jfs\x00', 0x1) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) 778.611798ms ago: executing program 3 (id=1269): ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000000)={0x5, "278af2419abb3a76699a54f73a8b63652f0ecbd8a0c9e46364ddc4992f15a90b", 0x100, 0xfff, 0xfffff800, 0x10, 0x3}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) copy_file_range(r0, &(0x7f00000000c0)=0x1000000000000000, r0, &(0x7f0000000100)=0x6, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000180)) r3 = syz_clone(0x40000, &(0x7f0000000580)="44b9b0653767366428bca7b7eff95f7c24b0c5ba7219c0895a8896b44562edf20abb6196366ffc4072725bbdf0af9e849c266b5ab113ebb3c1cafae3ffa95a9111a727da3ea734efb3d48aec5c88b06c81d3e8d2b8f06351b6ebdbca4ccfd968203c663d656b4e77476f43a7e613d65fe780d26cc2ea345b9df3a41a96ce93d13571fedbf26ee9e1e94389", 0x8b, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="c731102719089506f281187256fe455b9b94ad3e677551860240001e53ff98a372dbfa26aefcf2dcf5e31655589df6196c112158995b09b032de1de3f492a00a95bb0a05b17c28727a1bfc615e9e1816aeae4d5c8137c1709e32e792421827a3a3738c1473f92b5679b7209a1101f11a669a4fc69734b4602cdd9b531f586967") sched_setscheduler(r3, 0x5, &(0x7f0000000740)=0xc) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd) r4 = open$dir(&(0x7f0000000780)='./file0\x00', 0x100200, 0x20) execveat(r4, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000a00)={[&(0x7f0000000800)='#\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='%%$#*,):*/*\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='\xed}/\x00', &(0x7f0000000980)='\x0f\x00', &(0x7f00000009c0)='\x00']}, &(0x7f0000000c00)={[&(0x7f0000000a80)='\x00', &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='@^-\\%{-#([+\x00', &(0x7f0000000b40)='($\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='\x00']}, 0x1000) ioctl$TCFLSH(r0, 0x540b, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c40), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000c80)={0xc}) sendmsg$nl_route_sched(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@gettaction={0x24, 0x32, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000890}, 0x1) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000dc0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x33}, @local, 0x81, 0x200, 0x80, 0x100, 0x9, 0x86}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000e40)={0x2, 0xe6, "490aedf84a785918a0b7b4435ac4651125ad34adc2c0e844b55c40768c272910449897795ecc845dbc969d261eebcca7850c538325aabb85b977ff953344bb031a0689f51318924e0d8b57ca9c623c89d3055e4ff8631581315543a33f249dad1979b9840ac746289fc8e776c8e9a40c55cdd7ff6fdb6a9d427d92299251fbb1c9ec175bb30ae84b3b96824f900f084a000d44934a440bc357027c2af1d18d6f880cdb3b58f0850a9dc27fd209831d9d0bae97491db716726853c14862972a2f0648dc8f6a57fc8e0c4565106bc816fe428b4436a77432cc64cd06213680faeabac9b53f7a1c"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) mq_notify(r5, &(0x7f00000010c0)={0x0, 0x2d, 0x1, @thr={&(0x7f0000000f80)="e5f5825fce273981fbee468c3aa83378b28a0d2e7b399e121da85d15b37e45cb495e2702bde0aa109daa84e649944493dabe3f2cb4abc8925bd6b9834fd87603f1997864a2e926c68128e60b7ce4c4eb7acdb86719a7169ab448d755989f54e5f73671b275912afc09f2373213deead278e861862b261f582b50aacd7bd807d2bd54cb231603f463639b41c2b0ff517e30a58bfb900e0fab93cbaea5c865141e4cbdb148926931f3aa916028f5f2e763588a5932e458d40088b7a8b54817dc1f6af7", &(0x7f0000001080)='x'}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001100)=0x1, 0x4) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x6, 0x4002) socket$nl_netfilter(0x10, 0x3, 0xc) fchmodat(r4, &(0x7f0000001140)='./file0\x00', 0x40) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001180)) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000011c0)) sched_getattr(r3, &(0x7f0000001200)={0x38}, 0x38, 0x0) bind(r6, &(0x7f0000001240)=@isdn={0x22, 0x9, 0x3, 0x6, 0x40}, 0x80) ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f00000012c0)={0x3, 0x2, 0x9, 0x6, 0x1, 0x3, 0x2, 0x6, 0x10c0, 0x2, 0xff, 0x2, 0x5, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001300)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x9}) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) 631.436118ms ago: executing program 3 (id=1270): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4001af83, &(0x7f00000000c0)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdfffd00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x11, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18) 559.894959ms ago: executing program 1 (id=1271): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x33, 0x0) (async, rerun: 32) socket$nl_crypto(0x10, 0x3, 0x15) (async, rerun: 32) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000001140)=0x10000000) r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040c00f000000000000010009210101080122050009058103ff030c0000e864055c14b3b321e8774acc3850055c6bf2e82fa3306bef7a272a265d0f7d98183d59030e74a1fdfcb93c12459285b5df79955328db08889aee8df51829524ddbfd7b4091dd2f156059721967b8391e91de305cbce6355192757018e795079b829cf9e2af3a70d74b87971b66cdba2a06"], 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000001180)='./bus\x00') (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) syz_open_dev$video4linux(0x0, 0x8, 0x0) (async) r6 = syz_open_dev$evdev(0x0, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$EVIOCRMFF(r6, 0x4004550e, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) syz_open_dev$dri(0x0, 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) (rerun: 64) 239.49809ms ago: executing program 3 (id=1272): r0 = eventfd(0x12dc) (async) r1 = memfd_secret(0x0) (async) r2 = eventfd(0xfffffffa) (async) r3 = syz_open_dev$video(&(0x7f0000000440), 0x20000000008, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x2, {0x1, 0x1000, 0x4, 0x5}}) r4 = eventfd(0x7fff) r5 = eventfd2(0x2, 0x80000) io_submit(0x0, 0x5, &(0x7f0000001480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x6, 0xffffffffffffffff, &(0x7f0000000000)="46312d772a123330046225dbd9f50b4becc041654df10f0225178102f513445a81d5a298927461e104e547e106bf8c0262f56fe06767350409054f92fadc3495839db8618453ef9a31d4dc5250b25405d225ee311779784fecda86843f3c484a681dd5ee299217e6a4f5fdbbe35348aeb33fe7138b76d07519221c5ffa46918059036f5773e2ba1bf37ee7284fb6107a0dcf8dc976", 0x95, 0x3, 0x0, 0x1, r0}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000180)="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", 0x1000, 0xff, 0x0, 0x3, r2}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x7fff, r3, &(0x7f00000011c0)="3cd3ca2f37821aadcbb081542856eac1d5c035d9e60339601babae1a7f3a462444f4209d3213c8d288ae679110bb5e80961e49d79fa2a0812c13a4e055beafc39b93790ae7fe3ce92d709d1d4a2ec8b2c1e2406801409ce8dc330ede0d312b42730dc5f3ee6257c97b877773d004ba415cbb09df9e67a6a389938ed539ce965f3854d9cb48699d0359d9682315b6253f94a0ae07f88c9198ef69cc1a49923841654db85b1a98b19165ecd0acb880ac0a45489c2979de680618c850208f5ea136ae3e74d9f014e4a2ddb9a944b63ca5a9d63e514b4dfb2f69bd65c1d5a2d88a2469bf65b241957f35467dfc4dc1e69734", 0xf0, 0xff, 0x0, 0x1, r4}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x4, r3, &(0x7f0000001340)="22a19e685161cc919601985042dc2810bcaf65bc52688db3727b4d8d843bab2128d71f9e6aa8c7e6f8f812742914729d40fdfc50aed25965b9c159cfa8b8c97711e3335c", 0x44, 0x10, 0x0, 0x6, r5}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x5, 0x3, r2, &(0x7f0000001440)="83c48b1778b36678f42a2dbe60019b36a2b4963b44730521ccb3495b38", 0x1d, 0x600000000000000, 0x0, 0x6}]) (async) syz_emit_ethernet(0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a8360081002600080047fa005c0062000001339078ac1414bb7f0000014444ca23ac141436000000070a010102000080ace0000002000000067f00000100000000e000000100000003e0000002000000036401010100000de4640101020000000701000000"], 0x0) 134.727543ms ago: executing program 2 (id=1273): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) socket(0x22, 0x2, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103"], 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r5, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000a80)=ANY=[], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x0, 0x0, 0xf, &(0x7f00000003c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xf9, 0x64, 0x5}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 133.26477ms ago: executing program 0 (id=1274): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e909040000010300000009210500000122050009058103000200"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') getgroups(0x1, &(0x7f0000000040)=[0x0]) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) fchown(r0, r6, r4) close_range(r0, r3, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000a40)={@random="b931b2d41475", @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @private0, @mcast2, {[@hopopts={0x67, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x8, {0xd8508ca7d9f00131, 0x0, 0x2, 0x5}}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0xffff, 0x2}}}}}}}, 0x0) syz_usb_ep_write(r2, 0x81, 0x9b, &(0x7f00000002c0)="1000a863033fccfa4b3f301b58169d2e8a45ac1e5ebce421032642671d5de59cb2a99728256db42a5f5cc51774dc2871329903551acb01fc49b41c1d047beef729c0f5aabc6901cf28bfd3509b11f15b5b59e11b4906ec75c0f08df955341d2e4a76850705e6f91cc9fbb30da330f88b939288248ffa5b5eb9286683e7bc7a515288f95450c7f1b1990e04799912402974028422570b89ad6ab362") syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) 48.616719ms ago: executing program 1 (id=1275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8000, 0x80, 0x0, 0x5edb5396, {{0x7, 0x4, 0x1, 0x4, 0x1c, 0x67, 0x0, 0xd9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@rr={0x7, 0x7, 0xeb, [@remote]}]}}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB="280000000203010100000000000000000300000108090002000000054e000000009d760000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x40010) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x59}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00000003060500000000000000000005addef0faa3c1d76e000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0xffffffffffffff33, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) 18.783011ms ago: executing program 3 (id=1276): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000280)={0x0, 0x10, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0x2, "926a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xc, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0x0, 0x5, 0x7, 0x7, 0x3, 0x6}) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0xb4, 0x30, 0x9, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_csum={0x9c, 0x1c, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff7, 0x4e75, 0x7, 0x5}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfc5, 0x1, 0x1, 0x6}, 0x3e}}]}, {0x35, 0x6, "fbc5b3198c96e5cfab3675cd7bbebbb6881758d7061f316e42090cfcfce47d67a0395f0df24e667a01f96a011ce94041d3"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) kernel console output (not intermixed with test programs): roduct=1bb4, bcdDevice=34.65 [ 276.938703][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.051495][ T919] usb 2-1: Product: syz [ 277.056361][ T919] usb 2-1: Manufacturer: syz [ 277.068511][ T919] usb 2-1: SerialNumber: syz [ 277.129574][ T919] usb 2-1: config 0 descriptor?? [ 277.354317][ T919] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 277.368340][ T919] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 277.384490][ T919] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 277.393532][ T919] usb 2-1: media controller created [ 277.407708][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.469827][ T919] DVB: Unable to find symbol dib7000p_attach() [ 277.490085][ T919] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 277.514412][ T919] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 277.610413][ T919] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 277.651683][ T919] usb 2-1: media controller created [ 277.713972][ T919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.762575][ T919] dib0700: the master dib7090 has to be initialized first [ 277.787152][ T919] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 277.904980][ T919] rc_core: IR keymap rc-dib0700-rc5 not found [ 277.934315][ T919] Registered IR keymap rc-empty [ 277.957148][ T919] dvb-usb: could not initialize remote control. [ 277.974350][ T919] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 278.205516][ T919] usb 2-1: USB disconnect, device number 55 [ 278.283389][ T919] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 279.189636][ T30] audit: type=1400 audit(1754968008.878:933): avc: denied { read write } for pid=9186 comm="syz.0.796" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 279.336327][ T30] audit: type=1400 audit(1754968008.878:934): avc: denied { open } for pid=9186 comm="syz.0.796" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 280.095375][ T30] audit: type=1400 audit(1754968009.778:935): avc: denied { read } for pid=9195 comm="syz.4.800" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 280.146995][ T30] audit: type=1400 audit(1754968009.788:936): avc: denied { open } for pid=9195 comm="syz.4.800" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 280.449765][ T9205] 9pnet: Could not find request transport: rdma_end [ 281.533050][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'. [ 281.775915][ T30] audit: type=1400 audit(1754968011.418:937): avc: denied { read append } for pid=9227 comm="syz.4.807" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 281.808809][ T30] audit: type=1400 audit(1754968011.428:938): avc: denied { open } for pid=9227 comm="syz.4.807" path="/dev/sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 281.859493][ T30] audit: type=1400 audit(1754968011.428:939): avc: denied { ioctl } for pid=9227 comm="syz.4.807" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 281.934633][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.942965][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.950061][ T9233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.957930][ T919] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 282.125549][ T919] usb 2-1: Using ep0 maxpacket: 16 [ 282.132944][ T919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 282.141711][ T919] usb 2-1: config 9 has an invalid interface number: 48 but max is 0 [ 282.150110][ T919] usb 2-1: config 9 has no interface number 0 [ 282.157962][ T919] usb 2-1: config 9 interface 48 has no altsetting 0 [ 282.167200][ T919] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 282.177563][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.186663][ T919] usb 2-1: Product: syz [ 282.191090][ T919] usb 2-1: Manufacturer: syz [ 282.196034][ T919] usb 2-1: SerialNumber: syz [ 282.408882][ T9238] netlink: 72 bytes leftover after parsing attributes in process `syz.0.810'. [ 282.418273][ T919] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 282.480096][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.810'. [ 282.491885][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 283.387111][ T30] audit: type=1400 audit(1754968013.038:940): avc: denied { listen } for pid=9221 comm="syz.1.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.477953][ T30] audit: type=1400 audit(1754968013.038:941): avc: denied { ioctl } for pid=9221 comm="syz.1.804" path="socket:[22833]" dev="sockfs" ino=22833 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.680313][ T919] gspca_vc032x: reg_w err -71 [ 283.685015][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.690774][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.697349][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.702626][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.709244][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.714519][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.719999][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.725271][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.730598][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.735894][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.741147][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.746527][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.752494][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.758401][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.763670][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.769092][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.774362][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.779661][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.784927][ T919] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.791353][ T919] gspca_vc032x: Unknown sensor... [ 283.796953][ T919] vc032x 2-1:9.48: probe with driver vc032x failed with error -22 [ 283.810146][ T919] usb 2-1: USB disconnect, device number 56 [ 284.258705][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 284.268227][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 284.279072][ T9252] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 284.288366][ T9252] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 284.302698][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 284.313368][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 284.374628][ T9253] Process accounting resumed [ 285.371745][ T30] audit: type=1400 audit(1754968015.058:942): avc: denied { getopt } for pid=9278 comm="syz.4.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.090787][ T30] audit: type=1400 audit(1754968015.778:943): avc: denied { map } for pid=9289 comm="syz.4.824" path="/dev/dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 286.114114][ T30] audit: type=1400 audit(1754968015.778:944): avc: denied { map } for pid=9289 comm="syz.4.824" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 286.139012][ T30] audit: type=1400 audit(1754968015.778:945): avc: denied { execute } for pid=9289 comm="syz.4.824" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 286.226025][ T30] audit: type=1400 audit(1754968015.908:946): avc: denied { write } for pid=9291 comm="syz.4.825" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.258470][ T30] audit: type=1400 audit(1754968015.938:947): avc: denied { read } for pid=9291 comm="syz.4.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 286.402775][ T30] audit: type=1400 audit(1754968016.088:948): avc: denied { create } for pid=9299 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 286.427130][ T30] audit: type=1400 audit(1754968016.088:949): avc: denied { bind } for pid=9299 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 286.462191][ T30] audit: type=1400 audit(1754968016.148:950): avc: denied { read } for pid=9301 comm="syz.4.829" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 286.490665][ T30] audit: type=1400 audit(1754968016.148:951): avc: denied { open } for pid=9301 comm="syz.4.829" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 286.576269][ T10] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 286.741559][ T10] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 286.749778][ T10] usb 2-1: config 0 has no interface number 0 [ 286.761204][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 286.771364][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.779631][ T10] usb 2-1: Product: syz [ 286.783935][ T10] usb 2-1: Manufacturer: syz [ 286.788714][ T10] usb 2-1: SerialNumber: syz [ 286.796173][ T10] usb 2-1: config 0 descriptor?? [ 287.204012][ T9314] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.689063][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.836'. [ 287.731179][ T10] usb 2-1: Firmware version (0.0) predates our first public release. [ 287.755449][ T10] usb 2-1: Please update to version 0.2 or newer [ 287.793599][ T10] usb 2-1: USB disconnect, device number 57 [ 288.283274][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 288.639327][ T5956] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 288.746426][ T9347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.841'. [ 288.756650][ T9347] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 289.169203][ T5956] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 289.207899][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.226463][ T5956] usb 2-1: Product: syz [ 289.231640][ T5956] usb 2-1: Manufacturer: syz [ 289.242039][ T5956] usb 2-1: SerialNumber: syz [ 289.256214][ T5956] usb 2-1: config 0 descriptor?? [ 289.473070][ T5921] usb 2-1: USB disconnect, device number 58 [ 290.540215][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'. [ 290.549111][ T9371] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 291.047502][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 291.059904][ T9378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.849'. [ 291.437809][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 291.437822][ T30] audit: type=1400 audit(1754968021.128:953): avc: denied { append } for pid=9383 comm="syz.2.850" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 291.587734][ T30] audit: type=1400 audit(1754968021.158:954): avc: denied { ioctl } for pid=9383 comm="syz.2.850" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 291.632333][ T30] audit: type=1400 audit(1754968021.158:955): avc: denied { map } for pid=9383 comm="syz.2.850" path="socket:[23182]" dev="sockfs" ino=23182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.517539][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 293.828799][ T9436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.977862][ T9447] netlink: 'syz.4.865': attribute type 39 has an invalid length. [ 296.120141][ T30] audit: type=1400 audit(1754968025.798:956): avc: denied { ioctl } for pid=9468 comm="syz.0.870" path="socket:[23309]" dev="sockfs" ino=23309 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 296.225920][ T30] audit: type=1400 audit(1754968025.798:957): avc: denied { setopt } for pid=9468 comm="syz.0.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.309162][ T9467] trusted_key: encrypted_key: insufficient parameters specified [ 296.395166][ T9467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.403535][ T5847] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 296.638249][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 298.595449][ T5956] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 298.755630][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 298.779212][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.795709][ T5956] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 298.985783][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.004750][ T5956] usb 2-1: config 0 descriptor?? [ 299.379467][ T5858] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 299.644996][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.674767][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.641659][ T9544] input: syz1 as /devices/virtual/input/input27 [ 300.763502][ T30] audit: type=1400 audit(1754968030.448:958): avc: denied { ioctl } for pid=9547 comm="syz.2.889" path="socket:[24423]" dev="sockfs" ino=24423 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 301.592503][ T5921] usb 2-1: USB disconnect, device number 59 [ 301.986642][ T5921] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 302.158252][ T5921] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 302.169243][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.179484][ T5921] usb 2-1: config 0 descriptor?? [ 302.186413][ T5921] cp210x 2-1:0.0: cp210x converter detected [ 302.642551][ T5921] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 302.653924][ T5921] usb 2-1: cp210x converter now attached to ttyUSB0 [ 304.728908][ T5956] usb 2-1: USB disconnect, device number 60 [ 304.783420][ T5956] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 304.792401][ T9574] random: crng reseeded on system resumption [ 304.805770][ T30] audit: type=1400 audit(1754968034.488:959): avc: denied { write } for pid=9573 comm="syz.1.897" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 304.839840][ T30] audit: type=1400 audit(1754968034.488:960): avc: denied { open } for pid=9573 comm="syz.1.897" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 304.864952][ T5956] cp210x 2-1:0.0: device disconnected [ 304.873913][ T30] audit: type=1400 audit(1754968034.528:961): avc: denied { ioctl } for pid=9573 comm="syz.1.897" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 305.062901][ T30] audit: type=1400 audit(1754968034.748:963): avc: denied { setopt } for pid=9578 comm="syz.3.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 305.083595][ T30] audit: type=1400 audit(1754968034.748:962): avc: denied { setopt } for pid=9578 comm="syz.3.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 305.311766][ T30] audit: type=1400 audit(1754968034.998:964): avc: denied { bind } for pid=9583 comm="syz.3.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 305.839862][ T30] audit: type=1400 audit(1754968035.518:965): avc: denied { map } for pid=9587 comm="syz.4.901" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 305.884832][ T30] audit: type=1400 audit(1754968035.518:966): avc: denied { execute } for pid=9587 comm="syz.4.901" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 306.509955][ T5894] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 306.541495][ T5894] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 306.555224][ T5894] usb 1-1: USB disconnect, device number 43 [ 306.996700][ T5894] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 307.155496][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 307.164073][ T5894] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 307.173168][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.181162][ T5894] usb 1-1: Product: syz [ 307.185305][ T5894] usb 1-1: Manufacturer: syz [ 307.189901][ T5894] usb 1-1: SerialNumber: syz [ 307.195986][ T5894] usb 1-1: config 0 descriptor?? [ 307.203482][ T5894] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 307.211847][ T5894] usb 1-1: Detected FT-X [ 307.402194][ T5894] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 307.411958][ T5894] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 307.419158][ T5894] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 307.427066][ T5894] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 307.438950][ T5894] usb 1-1: USB disconnect, device number 44 [ 307.448198][ T5894] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 307.459221][ T5894] ftdi_sio 1-1:0.0: device disconnected [ 307.857965][ T30] audit: type=1400 audit(1754968037.548:967): avc: denied { mount } for pid=9601 comm="syz.2.905" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 307.908199][ T30] audit: type=1400 audit(1754968037.548:968): avc: denied { read write } for pid=9601 comm="syz.2.905" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 307.934789][ T30] audit: type=1400 audit(1754968037.548:969): avc: denied { open } for pid=9601 comm="syz.2.905" path="/157/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 307.970807][ T30] audit: type=1400 audit(1754968037.658:970): avc: denied { unmount } for pid=5844 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 308.022011][ T9604] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 308.045201][ T9604] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 308.057329][ T9604] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 308.132557][ T9608] gretap1: entered promiscuous mode [ 308.140720][ T9608] bond2: (slave gretap1): making interface the new active one [ 308.149656][ T9608] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 308.636932][ T30] audit: type=1400 audit(1754968038.328:971): avc: denied { ioctl } for pid=9616 comm="syz.3.911" path="socket:[24946]" dev="sockfs" ino=24946 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 309.435453][ T5956] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 309.601054][ T5956] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 309.615455][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.636559][ T5956] usb 1-1: config 0 descriptor?? [ 309.652544][ T5956] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 309.941469][ T9633] NILFS (nullb0): couldn't find nilfs on the device [ 310.558226][ T9626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.457586][ T9642] netlink: 14 bytes leftover after parsing attributes in process `syz.2.919'. [ 311.543942][ T9642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.559074][ T9642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.573406][ T9642] bond0 (unregistering): Released all slaves [ 311.610084][ T5928] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 311.625887][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 311.629405][ T5957] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 311.641662][ T5928] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 311.669526][ T9] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 311.671079][ T5957] dvb_usb_az6027 5-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 311.706905][ T9] usb 3-1: USB disconnect, device number 49 [ 311.717544][ T5928] usb 4-1: USB disconnect, device number 34 [ 311.726993][ T5957] usb 5-1: USB disconnect, device number 27 [ 311.796134][ T5956] gspca_stv06xx: I2C: Read error writing address: -71 [ 311.818516][ T5956] usb 1-1: USB disconnect, device number 45 [ 312.035448][ T5957] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 312.045554][ T5928] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 312.085456][ T919] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 312.185429][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 312.196606][ T5957] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.207029][ T5957] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.221316][ T5957] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.226765][ T5928] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 312.231747][ T5957] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 312.241215][ T919] usb 2-1: Using ep0 maxpacket: 32 [ 312.252784][ T5957] usb 5-1: config 0 interface 0 has no altsetting 0 [ 312.267656][ T5928] usb 4-1: config 0 has no interface number 0 [ 312.272282][ T5957] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 312.283114][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.308706][ T5928] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 312.324851][ T5957] usb 5-1: config 0 descriptor?? [ 312.328932][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.340473][ T919] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 312.357053][ T5928] usb 4-1: Product: syz [ 312.367795][ T919] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.385867][ T5928] usb 4-1: Manufacturer: syz [ 312.390814][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.399022][ T5928] usb 4-1: SerialNumber: syz [ 312.409667][ T919] usb 2-1: Product: à š [ 312.413907][ T919] usb 2-1: Manufacturer: 逹쇒䘳â¦îšºä‡™ï§Šì¼¦î°íŸ‘䙻ᜳ焞á”蔧묤加䉩ﶯî®è˜¦ã¯²â…®~嗂斤葿욖跗ㅇèŸá˜§ç’—æ ë¿³ã–£î°¾í¤ãœä©ªìš€è”­î»‰î¦¨ç³¼êœ´ê´¦ã¨¢â‡‰æ†¨æ•¤â‡ƒã´˜Â›è¾•æŠå­“è»é«‰ê›šîº…礤㵿ەí£å½™å¨™îœ†î뗇侺亖ꪂ微寤ìŽê„Œá°§æ‡¤ç‚蔅ઢ蜀ã½ë±›ê›žâ¢ªå°‹ì’²ä‘—⥅ޓ橆ᰧ軟圹 [ 312.444411][ T5928] usb 4-1: config 0 descriptor?? [ 312.457589][ T919] usb 2-1: SerialNumber: syz [ 312.640318][ T30] audit: type=1400 audit(1754968042.328:972): avc: denied { write } for pid=9649 comm="syz.2.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 312.800240][ T9644] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 312.814331][ T9653] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 312.816694][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.838938][ T5957] hid-thrustmaster 0003:044F:B65D.000A: invalid report_count 29987 [ 312.850226][ T5957] hid-thrustmaster 0003:044F:B65D.000A: item 0 2 1 9 parsing failed [ 312.859747][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.871350][ T5957] hid-thrustmaster 0003:044F:B65D.000A: parse failed with error -22 [ 312.883575][ T5957] hid-thrustmaster 0003:044F:B65D.000A: probe with driver hid-thrustmaster failed with error -22 [ 312.904533][ T919] cdc_ncm 2-1:1.0: bind() failure [ 312.926870][ T919] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 312.933733][ T919] cdc_ncm 2-1:1.1: bind() failure [ 312.950755][ T919] usb 2-1: USB disconnect, device number 61 [ 313.051055][ T9635] netlink: 44 bytes leftover after parsing attributes in process `syz.4.917'. [ 313.061895][ T5957] usb 5-1: USB disconnect, device number 28 [ 313.873582][ T5928] usb 4-1: Firmware version (0.0) predates our first public release. [ 313.886590][ T5928] usb 4-1: Please update to version 0.2 or newer [ 313.953005][ T5928] usb 4-1: USB disconnect, device number 35 [ 314.145443][ T44] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 314.222416][ T30] audit: type=1400 audit(1754968043.908:973): avc: denied { getopt } for pid=9678 comm="syz.0.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 315.144168][ T30] audit: type=1400 audit(1754968044.828:974): avc: denied { create } for pid=9736 comm="syz.4.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 315.372766][ T30] audit: type=1400 audit(1754968045.058:975): avc: denied { map } for pid=9744 comm="syz.0.936" path="socket:[25885]" dev="sockfs" ino=25885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.879433][ T9757] NILFS (nbd2): device size too small [ 315.890272][ T9757] binder: 9756:9757 unknown command 0 [ 315.895808][ T9757] binder: 9756:9757 ioctl c0306201 200000000080 returned -22 [ 315.909023][ T30] audit: type=1400 audit(1754968045.598:976): avc: denied { call } for pid=9756 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 315.909323][ T9757] binder: 9756:9757 ioctl c0306201 200000000280 returned -14 [ 315.994943][ T30] audit: type=1400 audit(1754968045.638:977): avc: denied { getopt } for pid=9756 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 316.843046][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.896134][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.018615][ T9771] No control pipe specified [ 317.039303][ T30] audit: type=1400 audit(1754968046.718:978): avc: denied { write } for pid=9765 comm="syz.3.943" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 317.084785][ T30] audit: type=1400 audit(1754968046.718:979): avc: denied { ioctl } for pid=9765 comm="syz.3.943" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 317.217927][ T5894] IPVS: starting estimator thread 0... [ 317.282163][ T30] audit: type=1400 audit(1754968046.728:980): avc: denied { ioctl } for pid=9765 comm="syz.3.943" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 317.390184][ T9774] IPVS: using max 76 ests per chain, 182400 per kthread [ 317.451064][ T30] audit: type=1400 audit(1754968046.798:981): avc: denied { execute } for pid=9762 comm="syz.4.942" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 318.993486][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 318.993501][ T30] audit: type=1400 audit(1754968048.668:983): avc: denied { watch } for pid=9816 comm="syz.4.955" path="/229" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 319.215582][ T919] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 319.856045][ T9835] netlink: 68 bytes leftover after parsing attributes in process `syz.4.957'. [ 319.965116][ T30] audit: type=1400 audit(1754968049.648:984): avc: denied { write } for pid=9842 comm="syz.3.962" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 320.416528][ T44] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 320.573874][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 320.750024][ T9858] kernel read not supported for file /z¿ (pid: 9858 comm: syz.0.966) [ 320.760248][ T30] audit: type=1800 audit(1754968050.448:985): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.966" name=7ABF17 dev="mqueue" ino=25485 res=0 errno=0 [ 320.787353][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 320.817854][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 320.844174][ T44] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 320.853839][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.880962][ T44] usb 2-1: config 0 descriptor?? [ 320.904666][ T9845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 320.965564][ T5957] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 321.057161][ T5928] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 321.125462][ T919] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 321.139174][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 321.150751][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.161861][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.171941][ T5957] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 321.181095][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.190394][ T5957] usb 3-1: config 0 descriptor?? [ 321.205713][ T5894] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 321.215512][ T5928] usb 4-1: Using ep0 maxpacket: 16 [ 321.221891][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.233098][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.243436][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.251311][ T5928] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 321.261414][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.271156][ T5928] usb 4-1: config 0 descriptor?? [ 321.276623][ T919] usb 1-1: Using ep0 maxpacket: 16 [ 321.286745][ T919] usb 1-1: config 1 interface 0 has no altsetting 0 [ 321.297075][ T919] usb 1-1: New USB device found, idVendor=1784, idProduct=0016, bcdDevice= 0.40 [ 321.306905][ T919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.314895][ T919] usb 1-1: Product: Ñ— [ 321.320273][ T919] usb 1-1: Manufacturer: á½ê’朻ì—헎蟇ᑥ轥젼á„㳫ᵮ莟ꡚ勞ëªà§¢ì—‡Êªîµ¨ï¤²ë¥•ì°ç€¼ï“•í‚¼è–垗싵翷é¡í•¸ç‡‰ê‡ã”¦â Ÿìº°ë©°ï­î™’è’㑔溯勻䢭졞쒮㮚缯ä«ã¡¿ã½¯á–¾ã µæµî··ã½¤çŠ«ä‰·ï¤…꾑쨧散èºë‹¼â„ŠìºŒîœ§ã§‡ë«´áž£áªºîº’î²á„½Nﮦã ë´íŒ¥ã½·ï˜’㧺铟뮫ï’瞆੿ä±ã†’퉃暜㪘둜 [ 321.330442][ T44] apple 0003:05AC:0264.000B: unbalanced collection at end of report description [ 321.353987][ T919] usb 1-1: SerialNumber: 螹⽛䟊筼콽纕㣩ಸᰢ㔕롩ç¹âµ²á½Œâ—›á­©á… â‹½ï»ºé•á‚³è‘‘ã¶à½‡á’Šãž„í‘éºç‚¬ç“½ï‹›à£˜æž¿è¨²î©¢äººî˜ã²ê›Ÿç»”ç è¾™ë€è»°å¦›ï¥…ㅜ瞅樠슗崆쒥暼钪髶薄胴㤖䘀痧ì‘궰䔨媱㉠Ꙕ欂駇煙拹è†å°«çƒ¦é©§ïŠ€æŒ„î”欽鈮äƒä«ã©‚㬜㉞털㫎牒â¶ìªì’¹ã°ï±˜è¡—൜ꎉ隌緹笤ꢆí‘଎ꆪ詙䄂ç¢æ¾ã¶½ì£î¦¶ä·¦ì¿°Ý¶Åî„ [ 321.360954][ T44] apple 0003:05AC:0264.000B: parse failed [ 321.399448][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 321.407115][ T44] apple 0003:05AC:0264.000B: probe with driver apple failed with error -22 [ 321.409425][ T5894] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 321.431127][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.441289][ T5894] usb 5-1: config 0 descriptor?? [ 321.451691][ T5894] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 321.459038][ T5894] gspca_mr97310a: reg write [21] error -22 [ 321.464905][ T5894] mr97310a 5-1:0.0: probe with driver mr97310a failed with error -22 [ 321.617746][ T5957] usbhid 3-1:0.0: can't add hid device: -71 [ 321.624272][ T5957] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 321.635787][ T5957] usb 3-1: USB disconnect, device number 50 [ 321.659484][ T30] audit: type=1326 audit(1754968051.348:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9866 comm="syz.4.969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f812518ebe9 code=0x0 [ 321.700241][ T5928] cougar 0003:060B:500A.000C: unexpected long global item [ 321.708272][ T5928] cougar 0003:060B:500A.000C: parse failed [ 321.714147][ T5928] cougar 0003:060B:500A.000C: probe with driver cougar failed with error -22 [ 321.831506][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.840250][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.866966][ T919] usbhid 1-1:1.0: can't add hid device: -71 [ 321.879890][ T919] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 321.897255][ T919] usb 1-1: USB disconnect, device number 46 [ 321.936706][ T9862] syzkaller0: entered promiscuous mode [ 321.947920][ T9862] syzkaller0 (unregistering): left promiscuous mode [ 322.033673][ T5928] usb 4-1: USB disconnect, device number 36 [ 322.725554][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 322.775292][ T5928] usb 2-1: USB disconnect, device number 62 [ 322.924089][ T9879] bond0: (slave bond_slave_1): Releasing backup interface [ 323.475399][ T5957] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 323.528809][ T44] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 323.556523][ T44] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.655531][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 323.671129][ T5957] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.680220][ T9906] netlink: 10 bytes leftover after parsing attributes in process `syz.3.975'. [ 323.731359][ T5957] usb 2-1: config 0 interface 0 has no altsetting 0 [ 323.759465][ T5957] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 323.784466][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.915501][ T5928] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 324.136591][ T5928] usb 3-1: config 4 has an invalid interface number: 1 but max is 0 [ 324.217028][ T5928] usb 3-1: config 4 has no interface number 0 [ 324.233356][ T5928] usb 3-1: config 4 interface 1 has no altsetting 0 [ 324.255500][ T5928] usb 3-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=21.c0 [ 324.258497][ T5957] usb 2-1: config 0 descriptor?? [ 324.269758][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.287990][ T5928] usb 3-1: Product: syz [ 324.293808][ T44] usb 5-1: USB disconnect, device number 31 [ 324.318244][ T5928] usb 3-1: Manufacturer: syz [ 324.330718][ T5928] usb 3-1: SerialNumber: syz [ 324.393591][ T5858] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 324.581222][ T9905] wlan0 speed is unknown, defaulting to 1000 [ 324.588622][ T9905] wlan0 speed is unknown, defaulting to 1000 [ 324.596709][ T9905] wlan0 speed is unknown, defaulting to 1000 [ 324.611362][ T9905] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 324.705900][ T9905] wlan0 speed is unknown, defaulting to 1000 [ 324.706162][ T44] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 324.713419][ T9905] wlan0 speed is unknown, defaulting to 1000 [ 324.734470][ T9905] wlan0 speed is unknown, defaulting to 1000 [ 324.754085][ T9905] wlan0 speed is unknown, defaulting to 1000 [ 324.782022][ T5957] aquacomputer_d5next 0003:0C70:F00E.000E: unknown main item tag 0x0 [ 324.792465][ T9905] wlan0 speed is unknown, defaulting to 1000 [ 324.839619][ T5957] aquacomputer_d5next 0003:0C70:F00E.000E: unknown main item tag 0x0 [ 324.849752][ T5957] aquacomputer_d5next 0003:0C70:F00E.000E: unknown main item tag 0x0 [ 324.858979][ T5957] aquacomputer_d5next 0003:0C70:F00E.000E: unknown main item tag 0x0 [ 324.878200][ T5957] aquacomputer_d5next 0003:0C70:F00E.000E: unknown main item tag 0x0 [ 324.923640][ T5957] aquacomputer_d5next 0003:0C70:F00E.000E: hidraw1: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 324.923945][ T5928] xsens_mt 3-1:4.1: xsens_mt converter detected [ 325.091029][ T9929] tipc: Started in network mode [ 325.105834][ T44] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.106306][ T5928] usb 3-1: xsens_mt converter now attached to ttyUSB0 [ 325.132528][ T5928] usb 3-1: USB disconnect, device number 51 [ 325.185710][ T5928] xsens_mt ttyUSB0: xsens_mt converter now disconnected from ttyUSB0 [ 325.194080][ T9929] tipc: Node identity aaaaaaaaaa17, cluster identity 4711 [ 325.210754][ T5928] xsens_mt 3-1:4.1: device disconnected [ 325.240568][ T9929] tipc: Enabled bearer , priority 0 [ 325.246904][ T44] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.261820][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 325.357601][ T44] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 325.368358][ T44] usb 5-1: Product: syz [ 325.372957][ T44] usb 5-1: Manufacturer: syz [ 325.548325][ T44] hub 5-1:4.0: USB hub found [ 325.705410][ T30] audit: type=1400 audit(1754968055.288:987): avc: denied { checkpoint_restore } for pid=9932 comm="syz.0.980" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.797058][ T44] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 326.217163][ T30] audit: type=1400 audit(1754968055.708:988): avc: denied { bind } for pid=9940 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 326.237579][ T44] tipc: Node number set to 12429994 [ 326.255926][ T5928] usb 5-1: USB disconnect, device number 32 [ 326.575553][ T44] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 326.624026][ T30] audit: type=1400 audit(1754968055.718:989): avc: denied { accept } for pid=9940 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 327.203087][ T30] audit: type=1400 audit(1754968055.758:990): avc: denied { read } for pid=9940 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 327.430540][ T44] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 327.446271][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.446289][ T30] audit: type=1400 audit(1754968057.128:991): avc: denied { mount } for pid=9954 comm="syz.2.984" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 327.535418][ T5928] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 327.592037][ T44] usb 1-1: Product: syz [ 327.612075][ T44] usb 1-1: Manufacturer: syz [ 327.637604][ T44] usb 1-1: SerialNumber: syz [ 327.660439][ T44] usb 1-1: config 0 descriptor?? [ 327.695836][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 327.831642][ T919] usb 2-1: USB disconnect, device number 63 [ 327.840428][ T5928] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.908668][ T9962] overlayfs: failed to resolve './file0': -2 [ 327.980554][ T30] audit: type=1400 audit(1754968057.648:992): avc: denied { append } for pid=9959 comm="syz.2.985" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 328.266145][ T5928] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.294966][ T5928] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 328.310308][ T5928] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 328.326326][ T5928] usb 5-1: Product: syz [ 328.335158][ T5928] usb 5-1: Manufacturer: syz [ 328.359870][ T5928] hub 5-1:4.0: USB hub found [ 329.873979][ T9969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.893920][ T30] audit: type=1400 audit(1754968059.578:993): avc: denied { ioctl } for pid=9964 comm="syz.2.987" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 329.929558][ T9969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.113648][ T9977] wlan0 speed is unknown, defaulting to 1000 [ 330.148219][ T919] usb 1-1: USB disconnect, device number 47 [ 330.191140][ T5928] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 330.205547][ T5957] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 330.237823][ T5928] usb 5-1: USB disconnect, device number 33 [ 330.355520][ T44] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 330.378994][ T5957] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 330.410663][ T5957] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 330.421750][ T5957] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 330.432649][ T5957] usb 3-1: config 1 has no interface number 1 [ 330.439771][ T5957] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 330.455032][ T5957] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.464372][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.472587][ T5957] usb 3-1: Product: syz [ 330.476854][ T5957] usb 3-1: Manufacturer: syz [ 330.481441][ T5957] usb 3-1: SerialNumber: syz [ 330.507796][ T44] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 330.543256][ T44] usb 4-1: config 0 has no interface number 0 [ 330.554369][ T44] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 330.563682][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.571912][ T44] usb 4-1: Product: syz [ 330.576117][ T44] usb 4-1: Manufacturer: syz [ 330.580718][ T44] usb 4-1: SerialNumber: syz [ 330.587582][ T44] usb 4-1: config 0 descriptor?? [ 330.647109][ T9986] sctp: [Deprecated]: syz.1.990 (pid 9986) Use of int in maxseg socket option. [ 330.647109][ T9986] Use struct sctp_assoc_value instead [ 330.718066][ T5957] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 330.747748][ T5957] usb 3-1: MIDIStreaming interface descriptor not found [ 330.801445][ T5957] usb 3-1: USB disconnect, device number 52 [ 330.849322][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.255409][ T5928] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 331.311538][ T44] usb 4-1: Firmware version (0.0) predates our first public release. [ 331.319756][ T44] usb 4-1: Please update to version 0.2 or newer [ 331.367643][ T44] usb 4-1: USB disconnect, device number 37 [ 331.416097][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 331.434628][ T5928] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 331.452829][ T5928] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 331.483995][ T5928] usb 5-1: config 0 has no interface number 0 [ 331.499944][ T5928] usb 5-1: too many endpoints for config 0 interface 180 altsetting 62: 60, using maximum allowed: 30 [ 331.512023][ T5928] usb 5-1: config 0 interface 180 altsetting 62 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 331.531541][ T5928] usb 5-1: config 0 interface 180 has no altsetting 0 [ 331.550597][ T5928] usb 5-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice=b9.a2 [ 331.563780][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.572237][ T5928] usb 5-1: Product: syz [ 331.576854][ T5928] usb 5-1: Manufacturer: syz [ 331.581461][ T5928] usb 5-1: SerialNumber: syz [ 331.588351][ T5928] usb 5-1: config 0 descriptor?? [ 331.670652][T10009] overlayfs: missing 'workdir' [ 331.820043][ T5956] usb 5-1: USB disconnect, device number 34 [ 331.907125][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 331.951961][T10009] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 332.224512][T10009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.282458][T10017] block device autoloading is deprecated and will be removed. [ 332.324994][T10020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.998'. [ 332.391910][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.998'. [ 332.656100][ T44] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 332.815399][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 332.952045][ T30] audit: type=1400 audit(1754968062.628:994): avc: denied { listen } for pid=10026 comm="syz.3.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 333.517872][T10030] netlink: 'syz.1.1000': attribute type 39 has an invalid length. [ 334.287319][ T44] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 335.027052][ T44] usb 1-1: config 179 has no interface number 0 [ 335.033994][ T44] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.050630][ T44] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 335.062857][ T44] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.074609][ T44] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 335.086217][ T44] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 335.099921][ T44] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.109137][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.124613][T10020] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.255686][ T5928] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 335.326922][ T30] audit: type=1400 audit(1754968065.018:995): avc: denied { ioctl } for pid=10040 comm="syz.4.1005" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 335.345423][ T44] usb 1-1: USB disconnect, device number 48 [ 335.351470][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 335.351512][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 335.433498][ T5928] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 335.448455][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.459192][ T5928] usb 3-1: Product: syz [ 335.523989][ T5928] usb 3-1: Manufacturer: syz [ 335.551702][ T5928] usb 3-1: SerialNumber: syz [ 336.349316][ T5928] usb 3-1: config 0 descriptor?? [ 336.377923][ T5928] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 337.077897][T10068] wlan0 speed is unknown, defaulting to 1000 [ 337.227082][ T5928] gspca_sunplus: reg_r err -71 [ 337.273950][ T5928] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 337.407454][ T5928] usb 3-1: USB disconnect, device number 53 [ 337.961704][T10073] syzkaller0: entered promiscuous mode [ 337.967656][ T5956] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 337.983099][T10073] syzkaller0: entered allmulticast mode [ 338.003283][ T30] audit: type=1326 audit(1754968067.688:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10072 comm="syz.1.1014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32d238ebe9 code=0x0 [ 338.071781][T10077] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 338.126817][T10078] netlink: 'syz.1.1014': attribute type 12 has an invalid length. [ 338.135046][T10078] netlink: 'syz.1.1014': attribute type 29 has an invalid length. [ 338.148064][ T5956] usb 4-1: not running at top speed; connect to a high speed hub [ 338.162995][ T5956] usb 4-1: config 3 has an invalid interface number: 115 but max is 0 [ 338.189289][T10078] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1014'. [ 338.195366][ T5956] usb 4-1: config 3 has no interface number 0 [ 338.198988][T10078] netlink: 'syz.1.1014': attribute type 2 has an invalid length. [ 338.212278][ T5956] usb 4-1: config 3 interface 115 altsetting 11 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 338.212310][ T5956] usb 4-1: config 3 interface 115 has no altsetting 0 [ 338.214258][ T5956] usb 4-1: New USB device found, idVendor=06e0, idProduct=f110, bcdDevice=83.4e [ 338.237027][T10078] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1014'. [ 338.252880][T10077] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 338.301208][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.321173][ T5956] usb 4-1: Product: à „ [ 338.322702][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 338.326971][ T5956] usb 4-1: Manufacturer: Ј [ 338.342586][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 338.359977][ T5956] usb 4-1: SerialNumber: 儨éƒê‚¼ì¹¡ë‡¶ê¼½ëŸ¹ë¼¢í–䈙ç¼æ—堺ۋ䴣å•äƒ¾å’½â¦´á¼®ïŸ¼äŽîŠ¿á˜»ë¤§ë®—횥î—앓調￘ [ 338.584486][ T30] audit: type=1400 audit(1754968068.268:997): avc: denied { ioctl } for pid=10070 comm="syz.3.1013" path="socket:[27025]" dev="sockfs" ino=27025 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 338.609505][ T44] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 338.619128][ T5956] ti_usb_3410_5052 4-1:3.115: required endpoints missing [ 338.625825][ T5928] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 338.630410][ T5956] usb 4-1: USB disconnect, device number 38 [ 338.785446][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 338.785885][ T5928] usb 1-1: no configurations [ 338.793694][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.795242][ T5928] usb 1-1: can't read configurations, error -22 [ 338.805544][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 338.822903][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.836100][ T44] usb 3-1: config 0 descriptor?? [ 338.957484][ T5928] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 339.147234][ T5928] usb 1-1: no configurations [ 339.219691][ T5928] usb 1-1: can't read configurations, error -22 [ 339.227925][ T5928] usb usb1-port1: attempt power cycle [ 339.484014][ T30] audit: type=1400 audit(1754968069.168:998): avc: denied { setopt } for pid=10102 comm="syz.4.1024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 339.634967][T10110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.671796][T10110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.915519][ T5928] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 339.933739][ T30] audit: type=1400 audit(1754968069.428:999): avc: denied { ioctl } for pid=10104 comm="syz.1.1023" path="socket:[27873]" dev="sockfs" ino=27873 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 340.025400][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'. [ 340.122864][ T30] audit: type=1400 audit(1754968069.628:1000): avc: denied { accept } for pid=10104 comm="syz.1.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 340.206722][ T5928] usb 1-1: no configurations [ 340.220468][ T5928] usb 1-1: can't read configurations, error -22 [ 340.400913][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'. [ 340.478226][ T5928] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 340.506432][ T5928] usb 1-1: no configurations [ 340.507250][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1017'. [ 340.511179][ T5928] usb 1-1: can't read configurations, error -22 [ 340.684642][ T5928] usb usb1-port1: unable to enumerate USB device [ 340.695778][ T44] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 340.765512][ T5956] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 340.825451][ T44] usb 5-1: device descriptor read/64, error -71 [ 340.905538][ T5956] usb 2-1: device descriptor read/64, error -71 [ 341.065436][ T44] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 341.145441][ T5956] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 341.205531][ T44] usb 5-1: device descriptor read/64, error -71 [ 341.285498][ T5956] usb 2-1: device descriptor read/64, error -71 [ 341.316391][ T44] usb usb5-port1: attempt power cycle [ 341.381135][T10128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.388898][T10128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.400930][ T5956] usb usb2-port1: attempt power cycle [ 341.409510][T10128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.419723][T10128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.464568][T10128] bond0: (slave batadv0): Releasing backup interface [ 341.687481][ T44] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 341.785429][ T5956] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 341.809923][ T44] usb 5-1: device descriptor read/8, error -71 [ 341.812445][ T5928] usb 3-1: USB disconnect, device number 54 [ 341.819686][ T5956] usb 2-1: device descriptor read/8, error -71 [ 342.199770][ T5956] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 342.210508][ T5957] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 342.512507][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 342.517849][ T5956] usb 2-1: device descriptor read/8, error -71 [ 342.529094][ T44] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 342.645720][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 342.652901][ T5956] usb usb2-port1: unable to enumerate USB device [ 342.674536][ T5957] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.689488][ T5957] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.698992][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.745664][ T44] usb 5-1: device not accepting address 38, error -71 [ 342.764304][ T44] usb usb5-port1: unable to enumerate USB device [ 342.778605][ T5957] usb 1-1: config 0 descriptor?? [ 342.824017][ T5928] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 343.025824][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.050078][ T5928] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 343.053675][ T5957] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 343.065978][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.106388][ T5928] usb 3-1: Product: syz [ 343.118993][ T5928] usb 3-1: Manufacturer: syz [ 343.123953][ T5928] usb 3-1: SerialNumber: syz [ 343.148220][ T5928] usb 3-1: config 0 descriptor?? [ 343.160502][ T5928] gspca_main: spca501-2.14.0 probing 0000:0000 [ 343.345493][ T5957] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 343.463133][ T44] usb 1-1: USB disconnect, device number 53 [ 343.508166][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.553840][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.577009][ T5957] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 343.594425][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.631759][ T5957] usb 4-1: config 0 descriptor?? [ 343.802595][ T5928] gspca_spca501: reg write: error -110 [ 343.987526][ T5928] spca501 3-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 343.994535][ T5928] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 344.004258][ T5928] usb 3-1: Found UVC 0.00 device syz (0000:0000) [ 344.018508][ T5928] usb 3-1: No valid video chain found. [ 344.283759][ T5957] usbhid 4-1:0.0: can't add hid device: -71 [ 344.292938][ T5957] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 344.340895][ T5957] usb 4-1: USB disconnect, device number 39 [ 344.545410][ T5928] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 344.839243][ T44] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 345.220033][ T5928] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 345.226297][ T5958] usb 3-1: USB disconnect, device number 55 [ 345.250834][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.274267][ T30] audit: type=1400 audit(1754968074.958:1001): avc: denied { lock } for pid=10176 comm="syz.2.1043" path="socket:[27315]" dev="sockfs" ino=27315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 345.280196][ T5928] usb 2-1: config 0 descriptor?? [ 345.320794][ T44] usb 1-1: config 4 has an invalid interface number: 44 but max is 0 [ 345.323106][ T5928] bfusb 2-1:0.0: probe with driver bfusb failed with error -5 [ 345.338172][ T44] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 345.381166][ T44] usb 1-1: config 4 has no interface number 0 [ 345.481955][ T44] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 345.493561][ T44] usb 1-1: config 4 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.495531][T10186] syz.3.1044 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 345.525957][ T44] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 345.535071][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.557075][ T44] usb 1-1: Product: syz [ 345.560161][ T5928] usb 2-1: USB disconnect, device number 68 [ 345.563219][ T44] usb 1-1: Manufacturer: syz [ 345.637500][ T44] usb 1-1: SerialNumber: syz [ 346.057056][ T44] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 346.097045][ T44] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 346.116298][ T44] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 346.123291][ T44] usb 1-1: media controller created [ 346.157986][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.212257][ T44] DVB: Unable to find symbol dib7000p_attach() [ 346.236061][ T44] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 346.324562][ T44] rc_core: IR keymap rc-dib0700-rc5 not found [ 346.330729][ T44] Registered IR keymap rc-empty [ 346.377991][ T44] dvb-usb: could not initialize remote control. [ 346.384235][ T44] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 346.418874][ T44] usb 1-1: USB disconnect, device number 54 [ 347.054127][ T44] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 347.561387][ T30] audit: type=1400 audit(1754968077.248:1002): avc: denied { watch } for pid=10211 comm="syz.1.1052" path="/178/file1" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 347.658889][ T30] audit: type=1400 audit(1754968077.248:1003): avc: denied { watch_sb watch_reads } for pid=10211 comm="syz.1.1052" path="/178/file1" dev="tmpfs" ino=962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 347.726209][ T30] audit: type=1326 audit(1754968077.388:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10222 comm="syz.2.1054" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b1418ebe9 code=0x0 [ 347.840431][ T30] audit: type=1400 audit(1754968077.528:1005): avc: denied { mounton } for pid=10229 comm="syz.0.1056" path="/218/file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 347.906659][ T44] IPVS: starting estimator thread 0... [ 347.912229][T10232] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 348.039614][T10234] IPVS: using max 76 ests per chain, 182400 per kthread [ 348.531436][ T30] audit: type=1400 audit(1754968078.218:1006): avc: denied { append } for pid=10246 comm="syz.4.1062" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 348.617641][ T30] audit: type=1400 audit(1754968078.268:1007): avc: denied { map } for pid=10246 comm="syz.4.1062" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 348.695743][ T5928] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 348.802720][ T30] audit: type=1400 audit(1754968078.268:1008): avc: denied { write execute } for pid=10246 comm="syz.4.1062" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 348.965506][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 348.989076][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 348.999097][ T5928] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 349.049541][ T30] audit: type=1400 audit(1754968078.738:1009): avc: denied { ioctl } for pid=10246 comm="syz.4.1062" path="socket:[27491]" dev="sockfs" ino=27491 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.085595][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.104713][ T5928] usb 4-1: config 0 descriptor?? [ 349.718735][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.729623][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.064434][T10275] vlan0: entered promiscuous mode [ 350.092890][T10275] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 350.386855][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 350.565744][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 350.842505][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 350.855131][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.866489][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.039011][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 351.049954][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.063356][ T9] usb 3-1: Product: syz [ 351.067932][ T9] usb 3-1: Manufacturer: syz [ 351.073056][ T9] usb 3-1: SerialNumber: syz [ 351.081989][ T9] usb 3-1: config 0 descriptor?? [ 351.096300][ T9] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 351.103925][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 351.117172][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 351.127510][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 351.136275][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 351.143988][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 351.152176][ T30] audit: type=1400 audit(1754968080.828:1010): avc: denied { connect } for pid=10294 comm="syz.4.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 351.172113][ T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 351.188178][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 351.402859][T10303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 351.422465][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.446724][T10303] loop2: detected capacity change from 0 to 7 [ 351.462112][T10303] Dev loop2: unable to read RDB block 7 [ 351.467765][T10303] loop2: unable to read partition table [ 351.473547][T10303] loop2: partition table beyond EOD, truncated [ 351.493003][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.501004][T10303] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 351.527523][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 351.543820][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 351.560436][ T919] usb 3-1: USB disconnect, device number 56 [ 351.585077][ T919] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 351.611231][ T5928] usb 4-1: USB disconnect, device number 40 [ 351.622131][ T919] keyspan 3-1:0.0: device disconnected [ 351.806261][ T9] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 352.134294][T10336] evm: overlay not supported [ 352.152422][ T9] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 352.284342][ T9] usb 2-1: config 0 has no interface number 0 [ 352.349202][ T30] audit: type=1400 audit(1754968082.028:1011): avc: denied { ioctl } for pid=10338 comm="syz.0.1083" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 352.394582][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 352.599852][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.675675][ T9] usb 2-1: Product: syz [ 352.682823][ T9] usb 2-1: Manufacturer: syz [ 352.705195][ T9] usb 2-1: SerialNumber: syz [ 352.721896][ T9] usb 2-1: config 0 descriptor?? [ 352.807258][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 352.846353][ T30] audit: type=1400 audit(1754968082.538:1012): avc: denied { bind } for pid=10344 comm="syz.2.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 353.159694][ T30] audit: type=1400 audit(1754968082.838:1013): avc: denied { setattr } for pid=10350 comm="syz.0.1086" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 354.175414][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 354.193636][ T9] usb 2-1: Please update to version 0.2 or newer [ 354.355949][ T9] usb 2-1: USB disconnect, device number 69 [ 354.534114][ T30] audit: type=1400 audit(1754968084.218:1014): avc: denied { getopt } for pid=10368 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 354.955392][ T5928] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 354.991002][ T30] audit: type=1400 audit(1754968084.678:1015): avc: denied { getopt } for pid=10385 comm="syz.4.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.115998][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 355.124834][ T5928] usb 1-1: not running at top speed; connect to a high speed hub [ 355.145502][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 355.265413][ T44] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 355.273406][T10394] netlink: 'syz.4.1098': attribute type 10 has an invalid length. [ 355.297435][ T5928] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 355.320020][ T5928] usb 1-1: New USB device found, idVendor=05da, idProduct=80a3, bcdDevice=4c.7a [ 355.338507][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.348464][ T5928] usb 1-1: Product: syz [ 355.352634][ T5928] usb 1-1: Manufacturer: syz [ 355.357880][ T5928] usb 1-1: SerialNumber: syz [ 355.426390][ T44] usb 3-1: too many configurations: 104, using maximum allowed: 8 [ 355.437035][ T44] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 355.444688][ T44] usb 3-1: can't read configurations, error -61 [ 355.455644][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 355.464084][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.746691][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 355.756269][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.767756][ T9] usb 4-1: config 0 descriptor?? [ 355.795566][ T44] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 355.946019][ T44] usb 3-1: too many configurations: 104, using maximum allowed: 8 [ 355.956736][ T44] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 355.964424][ T44] usb 3-1: can't read configurations, error -61 [ 355.971180][ T44] usb usb3-port1: attempt power cycle [ 356.333592][T10406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.342754][T10406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.350759][ T44] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 356.492579][ T44] usb 3-1: too many configurations: 104, using maximum allowed: 8 [ 356.518479][ T44] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 356.661438][ T44] usb 3-1: can't read configurations, error -61 [ 356.805526][ T44] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 356.837262][ T44] usb 3-1: too many configurations: 104, using maximum allowed: 8 [ 356.846834][ T44] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 356.854470][ T44] usb 3-1: can't read configurations, error -61 [ 356.861172][ T44] usb usb3-port1: unable to enumerate USB device [ 357.405395][ T44] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 357.554602][ T5928] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 357.567796][ T5928] usb 1-1: USB disconnect, device number 55 [ 357.577634][ T44] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 357.586915][ T44] usb 2-1: config 0 has no interface number 0 [ 357.605241][ T44] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 357.618903][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.627700][ T44] usb 2-1: Product: syz [ 357.632019][ T44] usb 2-1: Manufacturer: syz [ 357.637013][ T44] usb 2-1: SerialNumber: syz [ 357.645300][ T44] usb 2-1: config 0 descriptor?? [ 357.922678][ T5958] usb 4-1: USB disconnect, device number 41 [ 357.965399][ T5928] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 358.450807][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 358.471692][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 358.480327][ T5928] usb 1-1: no configurations [ 358.484987][ T5928] usb 1-1: can't read configurations, error -22 [ 358.811776][ T5928] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 358.830851][ T44] usb 2-1: Firmware version (0.0) predates our first public release. [ 358.855050][ T44] usb 2-1: Please update to version 0.2 or newer [ 358.864671][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1110'. [ 358.966628][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 359.002248][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 359.340521][ T44] usb 2-1: USB disconnect, device number 70 [ 359.947855][ T5928] usb 1-1: no configurations [ 360.014761][ T5928] usb 1-1: can't read configurations, error -22 [ 360.118386][ T5928] usb usb1-port1: attempt power cycle [ 360.244412][T10435] veth3: entered promiscuous mode [ 360.613596][ T5928] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 360.649990][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 360.651188][T10459] netlink: 'syz.2.1115': attribute type 1 has an invalid length. [ 360.688286][ T5928] usb 1-1: device descriptor read/all, error -71 [ 361.041385][T10466] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 361.051703][T10466] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 361.067897][T10466] bond0: (slave vti0): making interface the new active one [ 361.076721][T10466] bond0: (slave vti0): Enslaving as an active interface with an up link [ 361.132171][T10468] tipc: Started in network mode [ 361.137368][T10468] tipc: Node identity 62e35e625d9, cluster identity 4711 [ 361.144574][T10468] tipc: Enabled bearer , priority 0 [ 361.153014][T10468] syzkaller0: entered promiscuous mode [ 361.159055][T10468] syzkaller0: entered allmulticast mode [ 361.175519][ T5928] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 361.219125][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 361.245504][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.264617][ T5928] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 361.283493][T10468] tipc: Resetting bearer [ 361.353940][T10468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1117'. [ 361.363351][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.388863][ T5928] usb 1-1: config 0 descriptor?? [ 361.393048][T10467] tipc: Resetting bearer [ 361.445063][T10467] tipc: Disabling bearer [ 361.495473][ T5958] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 361.668691][ T5958] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.687498][ T5958] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 361.717580][ T5958] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.733151][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.764201][ T5958] usb 5-1: Product: syz [ 361.775065][ T5958] usb 5-1: Manufacturer: syz [ 361.784697][ T5958] usb 5-1: SerialNumber: syz [ 361.835523][ T5928] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 361.955565][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.964314][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.997131][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 362.057331][ T919] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 362.064110][T10473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.069481][ T5928] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.170728][T10473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.177362][ T5928] usb 4-1: config 0 has no interface number 0 [ 362.313173][ T919] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 362.370245][ T919] usb 2-1: config 0 has no interface number 0 [ 362.380232][ T5928] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 362.391427][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.402039][ T5928] usb 4-1: Product: syz [ 362.408162][ T5928] usb 4-1: Manufacturer: syz [ 362.412897][ T919] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 362.429595][ T30] audit: type=1400 audit(1754968092.108:1016): avc: denied { listen } for pid=10472 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 362.453467][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.458596][ T5958] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 362.461797][ T5928] usb 4-1: SerialNumber: syz [ 362.485613][ T919] usb 2-1: Product: syz [ 362.493916][ T5958] usb 5-1: USB disconnect, device number 39 [ 362.495617][ T919] usb 2-1: Manufacturer: syz [ 362.517682][ T5928] usb 4-1: config 0 descriptor?? [ 362.528564][ T919] usb 2-1: SerialNumber: syz [ 362.536982][ T5928] usb 4-1: selecting invalid altsetting 2 [ 362.547936][ T919] usb 2-1: config 0 descriptor?? [ 362.556310][ T5928] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 362.754876][ T5928] usb 4-1: USB disconnect, device number 42 [ 362.755482][ T30] audit: type=1400 audit(1754968092.448:1017): avc: denied { ioctl } for pid=10495 comm="syz.2.1125" path="socket:[28619]" dev="sockfs" ino=28619 ioctlcmd=0x5532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 362.925786][ T5957] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 363.063771][T10511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1127'. [ 363.073298][ T5957] usb 5-1: device descriptor read/64, error -71 [ 363.370503][ T919] usb 2-1: Firmware version (0.0) predates our first public release. [ 363.455570][ T5957] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 363.470770][ T919] usb 2-1: Please update to version 0.2 or newer [ 363.530481][ T919] usb 2-1: USB disconnect, device number 71 [ 363.645617][T10524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1129'. [ 363.654918][ T30] audit: type=1400 audit(1754968093.328:1018): avc: denied { nlmsg_read } for pid=10517 comm="syz.3.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 363.658915][ T5957] usb 5-1: device descriptor read/64, error -71 [ 363.899509][ T9] usb 1-1: USB disconnect, device number 59 [ 364.065935][ T5957] usb usb5-port1: attempt power cycle [ 364.294229][ T44] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 364.316326][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 364.495586][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 364.500805][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 364.507706][ T9] usb 1-1: too many configurations: 29, using maximum allowed: 8 [ 364.507754][ T44] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 364.542672][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.544720][ T9] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 364.565807][ T5957] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 364.589443][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.589996][ T44] usb 2-1: config 0 descriptor?? [ 364.614543][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 364.634367][ T9] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 364.645402][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.657854][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 364.675898][ T9] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 364.703972][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.715413][ T5957] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 364.721488][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 364.747447][ T9] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 364.748170][ T5957] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 364.826587][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.836415][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 365.089200][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 365.136226][ T5957] usb 5-1: config 0 descriptor?? [ 365.141148][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.146426][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 365.173276][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.201293][ T9] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 365.211294][ T44] usb 2-1: media controller created [ 365.224016][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.240424][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.250196][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.288414][ T9] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 365.310343][ T30] audit: type=1400 audit(1754968094.988:1019): avc: denied { setopt } for pid=10549 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 365.327388][ T44] az6027: usb out operation failed. (-71) [ 365.331936][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.338687][ T44] az6027: usb out operation failed. (-71) [ 365.352101][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.370363][ T9] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 365.685024][ T44] stb0899_attach: Driver disabled by Kconfig [ 365.702232][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.704939][ T44] az6027: no front-end attached [ 365.704939][ T44] [ 365.721937][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.744648][ T44] az6027: usb out operation failed. (-71) [ 365.745665][ T9] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 365.750749][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 365.791647][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30 [ 365.868949][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.874120][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 365.896433][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.942485][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 365.982550][ T44] usb 2-1: USB disconnect, device number 72 [ 366.008267][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.029027][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.041753][ T9] usb 1-1: SerialNumber: syz [ 366.072468][ T9] hub 1-1:1.0: Invalid hub with more than one config or interface [ 366.090559][ T9] hub 1-1:1.0: probe with driver hub failed with error -22 [ 366.098650][ T9] cdc_ether 1-1:1.0: skipping garbage [ 366.105402][ T9] usb 1-1: bad CDC descriptors [ 366.315779][ T5958] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 366.319104][ T919] usb 1-1: USB disconnect, device number 60 [ 366.390978][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 366.526069][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 366.536771][ T5958] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 366.545903][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.553878][ T5958] usb 4-1: Product: syz [ 366.558300][ T5958] usb 4-1: Manufacturer: syz [ 366.562883][ T5958] usb 4-1: SerialNumber: syz [ 366.569527][ T5958] usb 4-1: config 0 descriptor?? [ 366.579878][ T5958] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 366.588689][ T5958] usb 4-1: Detected FT232H [ 366.775501][ T44] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 366.783214][ T5958] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 366.935814][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 366.955106][ T44] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 366.970058][ T44] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 367.225514][ T44] usb 2-1: Product: syz [ 367.231108][ T44] usb 2-1: Manufacturer: syz [ 367.237619][ T44] usb 2-1: SerialNumber: syz [ 367.247209][ T5958] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 367.256438][ T44] usb 2-1: config 0 descriptor?? [ 367.866072][ T30] audit: type=1400 audit(1754968097.478:1020): avc: denied { connect } for pid=10574 comm="syz.0.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 367.896804][ T5957] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 367.931861][ T5957] asix 5-1:0.0: probe with driver asix failed with error -71 [ 367.955811][ T5858] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 368.152122][ T5957] usb 5-1: USB disconnect, device number 43 [ 369.637771][ T5958] usb 4-1: USB disconnect, device number 43 [ 369.739507][ T30] audit: type=1400 audit(1754968099.428:1021): avc: denied { connect } for pid=10591 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 370.055503][ T5958] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 370.112650][ T5958] ftdi_sio 4-1:0.0: device disconnected [ 370.204521][ T44] usb 2-1: USB disconnect, device number 73 [ 370.615430][ T44] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 370.645575][ T5957] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 370.715591][ T30] audit: type=1400 audit(1754968100.338:1022): avc: denied { bind } for pid=10604 comm="syz.0.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.891864][ T44] usb 2-1: config 0 has no interfaces? [ 370.897499][ T5957] usb 4-1: Using ep0 maxpacket: 16 [ 371.021226][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.032752][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.041196][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.054606][ T5957] usb 4-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b0.ea [ 371.063929][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.075046][ T44] usb 2-1: config 0 descriptor?? [ 371.082860][ T5957] usb 4-1: Product: syz [ 371.093041][ T5957] usb 4-1: Manufacturer: syz [ 371.104092][ T5957] usb 4-1: SerialNumber: syz [ 371.117749][ T5957] usb 4-1: config 0 descriptor?? [ 371.130021][ T5957] gl620a 4-1:0.0: probe with driver gl620a failed with error -22 [ 371.697302][ T919] usb 4-1: USB disconnect, device number 44 [ 372.943644][T10626] : Can't lookup blockdev [ 372.954932][ T30] audit: type=1400 audit(1754968102.598:1023): avc: denied { create } for pid=10620 comm="syz.4.1157" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.213450][T10636] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1158'. [ 373.374505][ T9] usb 2-1: USB disconnect, device number 74 [ 373.506655][ T919] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 373.694909][ T919] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.707823][ T919] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.741405][ T919] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.829538][ T919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.917390][T10638] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 373.917409][T10636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.958044][T10654] overlayfs: statfs failed on './file0' [ 373.989415][ T30] audit: type=1400 audit(1754968103.638:1024): avc: denied { getattr } for pid=10652 comm="syz.1.1163" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 374.278194][ T919] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.314424][T10636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.359609][ T919] usb 1-1: USB disconnect, device number 61 [ 374.382790][T10636] bond0 (unregistering): Released all slaves [ 374.641738][ T30] audit: type=1400 audit(1754968104.328:1025): avc: denied { unlink } for pid=5851 comm="syz-executor" name="file0" dev="tmpfs" ino=1502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 375.415439][ T5957] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 375.637169][ T5957] usb 5-1: unable to get BOS descriptor or descriptor too short [ 375.645920][ T5957] usb 5-1: config 1 interface 0 altsetting 155 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 375.659382][ T5957] usb 5-1: config 1 interface 0 has no altsetting 0 [ 375.671064][ T5957] usb 5-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 375.680685][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.690738][ T5957] usb 5-1: Product: syz [ 375.698188][ T5957] usb 5-1: Manufacturer: syz [ 375.707215][ T5957] usb 5-1: SerialNumber: syz [ 375.850955][T10684] fuse: Bad value for 'user_id' [ 375.896192][T10684] fuse: Bad value for 'user_id' [ 375.939444][ T5957] usbhid 5-1:1.0: can't add hid device: -71 [ 375.954431][ T5957] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 375.993741][ T5957] usb 5-1: USB disconnect, device number 44 [ 376.182011][T10693] delete_channel: no stack [ 376.201853][T10695] vlan2: entered promiscuous mode [ 376.249186][T10695] vlan2: entered allmulticast mode [ 376.293645][T10698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1172'. [ 376.303617][T10695] hsr_slave_1: entered allmulticast mode [ 376.324065][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1172'. [ 376.388340][ T30] audit: type=1400 audit(1754968106.078:1026): avc: denied { read } for pid=10701 comm="syz.2.1176" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 376.412568][ T30] audit: type=1400 audit(1754968106.078:1027): avc: denied { open } for pid=10701 comm="syz.2.1176" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 376.476610][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'. [ 376.521310][T10700] syzkaller1: entered promiscuous mode [ 376.526916][T10700] syzkaller1: entered allmulticast mode [ 376.625433][ T5957] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 376.856146][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 376.871625][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.892098][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.910382][ T5957] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 376.919787][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.929320][ T5957] usb 3-1: config 0 descriptor?? [ 377.071979][ T919] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 377.150058][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 377.217613][ T30] audit: type=1400 audit(1754968106.908:1028): avc: denied { bind } for pid=10734 comm="syz.3.1185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 377.277893][ T30] audit: type=1400 audit(1754968106.908:1029): avc: denied { name_bind } for pid=10734 comm="syz.3.1185" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 377.300977][ T919] usb 2-1: Using ep0 maxpacket: 32 [ 377.337072][ T919] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 377.343465][ T30] audit: type=1400 audit(1754968106.908:1030): avc: denied { node_bind } for pid=10734 comm="syz.3.1185" saddr=255.255.255.255 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 377.355368][ T919] usb 2-1: config 0 has no interface number 0 [ 377.371414][ T5957] hid (null): global environment stack underflow [ 377.374282][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 377.434923][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.456927][ T919] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 377.466465][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.476564][ T919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.485296][ T919] usb 2-1: Product: syz [ 377.492928][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 377.510641][ T919] usb 2-1: Manufacturer: syz [ 377.517619][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 377.541311][ T919] usb 2-1: SerialNumber: syz [ 377.562416][ T9] usb 5-1: Product: syz [ 377.567817][ T919] usb 2-1: config 0 descriptor?? [ 377.570316][ T5957] usb 3-1: string descriptor 0 read error: -71 [ 377.575267][ T9] usb 5-1: Manufacturer: syz [ 377.595145][ T919] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 377.601363][ T30] audit: type=1400 audit(1754968107.288:1031): avc: denied { write } for pid=10741 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 377.609919][ T9] hub 5-1:4.0: USB hub found [ 377.631226][ T30] audit: type=1400 audit(1754968107.318:1032): avc: denied { read } for pid=10741 comm="syz.0.1187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 377.651290][ T5957] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 377.662658][ T5957] letsketch 0003:6161:4D15.000F: probe with driver letsketch failed with error -32 [ 377.687104][ T5957] usb 3-1: USB disconnect, device number 61 [ 377.792579][ T919] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 377.808272][ T919] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 377.837342][ T9] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 377.895470][ T5928] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 377.906699][ T9] usb 5-1: USB disconnect, device number 45 [ 378.413346][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.416413][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 378.419753][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.429179][ T919] usb 2-1: USB disconnect, device number 75 [ 378.467618][ T919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 378.526382][ T919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 378.572173][ T919] quatech2 2-1:0.51: device disconnected [ 378.579731][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.599379][ T5928] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 378.657722][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.694338][ T30] audit: type=1400 audit(1754968108.378:1033): avc: denied { ioctl } for pid=10758 comm="syz.2.1191" path="socket:[30270]" dev="sockfs" ino=30270 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 378.758119][ T5928] usb 4-1: config 0 descriptor?? [ 378.768971][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 378.853497][ T30] audit: type=1400 audit(1754968108.538:1034): avc: denied { mounton } for pid=10764 comm="syz.0.1194" path="/240/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 378.949294][T10769] binder: 10768:10769 ioctl c400941d 200000000040 returned -22 [ 378.976121][ T5957] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 378.983755][ T5958] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 379.126031][ T5958] usb 5-1: device descriptor read/64, error -71 [ 379.162556][ T5957] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 379.171730][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.197521][ T5957] usb 3-1: config 0 descriptor?? [ 379.215393][ T44] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 379.365598][ T5958] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 379.370647][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 379.384524][T10745] ubi31: attaching mtd0 [ 379.393572][T10745] ubi31: scanning is finished [ 379.396053][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 379.405073][T10745] ubi31: empty MTD device detected [ 379.418674][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.427652][ T44] usb 1-1: config 0 has no interface number 0 [ 379.436809][ T44] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 379.450057][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.459823][ T44] usb 1-1: Product: syz [ 379.464001][ T44] usb 1-1: Manufacturer: syz [ 379.468675][ T44] usb 1-1: SerialNumber: syz [ 379.479382][ T44] usb 1-1: config 0 descriptor?? [ 379.490361][ T44] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 379.499938][ T44] usb 1-1: selecting invalid altsetting 1 [ 379.505999][ T5958] usb 5-1: device descriptor read/64, error -71 [ 379.513423][ T44] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 379.524703][T10745] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 379.537007][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 379.549173][T10745] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 379.556972][ T44] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 379.566169][T10745] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 379.573277][ T44] usb 1-1: media controller created [ 379.585399][T10745] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 379.595494][T10745] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 379.600655][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.602371][T10745] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 379.624967][T10745] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3420993715 [ 379.625922][ T5958] usb usb5-port1: attempt power cycle [ 379.640753][ T1224] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 379.648425][T10745] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 379.649689][T10776] ubi31: background thread "ubi_bgt31d" started, PID 10776 [ 379.736548][ T5928] pwc: recv_control_msg error -71 req 02 val 2c00 [ 379.757426][ T5928] pwc: recv_control_msg error -71 req 04 val 1000 [ 379.774566][ T5928] pwc: recv_control_msg error -71 req 04 val 1300 [ 379.791758][ T5928] pwc: recv_control_msg error -71 req 04 val 1400 [ 379.807758][ T5928] pwc: recv_control_msg error -71 req 02 val 2000 [ 379.862140][ T5928] pwc: recv_control_msg error -71 req 02 val 2100 [ 379.879449][ T5928] pwc: recv_control_msg error -71 req 04 val 1500 [ 379.897423][ T5928] pwc: recv_control_msg error -71 req 02 val 2500 [ 379.908057][T10777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.926906][ T5928] pwc: recv_control_msg error -71 req 02 val 2400 [ 379.934535][ T5928] pwc: recv_control_msg error -71 req 02 val 2600 [ 379.945057][ T5928] pwc: recv_control_msg error -71 req 02 val 2900 [ 379.953057][ T5928] pwc: recv_control_msg error -71 req 02 val 2800 [ 379.963967][ T5928] pwc: recv_control_msg error -71 req 04 val 1100 [ 379.974424][ T5928] pwc: recv_control_msg error -71 req 04 val 1200 [ 379.991116][ T5928] pwc: Registered as video103. [ 380.011890][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 380.062353][ T5928] usb 4-1: USB disconnect, device number 45 [ 380.088983][ T44] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 380.097141][ T44] zl10353_read_register: readreg error (reg=127, ret==-71) [ 380.105850][ T44] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 380.113444][ T5957] usb 3-1: Cannot read MAC address [ 380.119101][ T5957] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 380.165819][ T5957] usb 3-1: USB disconnect, device number 62 [ 380.175423][ T1224] usb 2-1: Using ep0 maxpacket: 32 [ 380.184587][ T1224] usb 2-1: config 0 has an invalid interface number: 54 but max is 0 [ 380.195029][ T1224] usb 2-1: config 0 has no interface number 0 [ 380.203668][ T1224] usb 2-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 380.218258][ T1224] usb 2-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 380.228354][ T1224] usb 2-1: config 0 interface 54 has no altsetting 0 [ 380.244366][ T44] usb 1-1: USB disconnect, device number 62 [ 380.258979][ T1224] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 380.270377][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.281057][ T1224] usb 2-1: Product: syz [ 380.285818][ T1224] usb 2-1: Manufacturer: syz [ 380.290458][ T1224] usb 2-1: SerialNumber: syz [ 380.303754][ T1224] usb 2-1: config 0 descriptor?? [ 380.312392][T10774] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 380.335959][T10774] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 380.356941][ T5958] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 380.500431][ T5958] usb 5-1: device descriptor read/8, error -71 [ 380.766009][ T5847] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 380.778939][ T1224] ums_eneub6250 2-1:0.54: USB Mass Storage device detected [ 380.843378][ T1224] scsi host1: usb-storage 2-1:0.54 [ 380.887673][ T5958] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 380.915910][ T5958] usb 5-1: device descriptor read/8, error -71 [ 380.937049][ T1224] ums_eneub6250 2-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 380.965680][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 380.974607][ T1224] usb 2-1: USB disconnect, device number 76 [ 381.025882][ T5958] usb usb5-port1: unable to enumerate USB device [ 381.035831][ T5928] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 381.105462][ T919] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 381.195931][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 381.208929][ T5928] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.219531][ T5928] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.228847][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.244736][ T5928] usb 3-1: config 0 descriptor?? [ 381.255540][ T919] usb 4-1: Using ep0 maxpacket: 16 [ 381.274044][ T919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.303887][ T919] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.315579][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.332927][ T919] usb 4-1: config 0 descriptor?? [ 381.875447][ T5958] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 381.943472][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.962368][T10805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.965459][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.974333][T10805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.216983][ T5958] usb 1-1: config 2 has an invalid descriptor of length 146, skipping remainder of the config [ 382.361414][ T5958] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.744611][ T5958] usb 1-1: config 2 interface 0 has no altsetting 0 [ 382.787113][ T5958] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 382.822343][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.831360][ T5958] usb 1-1: Product: syz [ 382.837339][ T5958] usb 1-1: Manufacturer: syz [ 382.842220][ T5958] usb 1-1: SerialNumber: syz [ 383.045434][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 383.184266][T10815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 383.282442][ T30] audit: type=1400 audit(1754968112.968:1035): avc: denied { read } for pid=10809 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.329055][T10801] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 800c6613, magic 66 != 6b] [ 383.545489][ T30] audit: type=1400 audit(1754968113.018:1036): avc: denied { read } for pid=10800 comm="syz.0.1205" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 383.817954][ T30] audit: type=1400 audit(1754968113.018:1037): avc: denied { open } for pid=10800 comm="syz.0.1205" path="/245/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 383.842169][ T30] audit: type=1400 audit(1754968113.018:1038): avc: denied { ioctl } for pid=10800 comm="syz.0.1205" path="/245/file0/file0" dev="fuse" ino=0 ioctlcmd=0x6613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 383.869368][ T30] audit: type=1400 audit(1754968113.508:1039): avc: denied { ioctl } for pid=10826 comm="syz.4.1209" path="socket:[30416]" dev="sockfs" ino=30416 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 384.290074][ T1224] usb 4-1: USB disconnect, device number 46 [ 384.644863][ T919] usb 3-1: USB disconnect, device number 63 [ 384.792739][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 384.838519][T10839] geneve2: entered promiscuous mode [ 385.224450][ T30] audit: type=1326 audit(1754968114.908:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.4.1213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f812518ebe9 code=0x0 [ 385.295192][ T5958] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22 [ 385.345183][ T5958] usb 1-1: USB disconnect, device number 63 [ 385.373327][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 385.397035][ T5847] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 385.545820][T10846] netlink: 'syz.2.1215': attribute type 1 has an invalid length. [ 385.567610][T10846] nbd: error processing sock list [ 385.578961][T10846] block nbd0: shutting down sockets [ 385.925844][ T30] audit: type=1400 audit(1754968115.598:1041): avc: denied { connect } for pid=10849 comm="syz.0.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 386.118681][ T30] audit: type=1400 audit(1754968115.808:1042): avc: denied { audit_read } for pid=10866 comm="syz.1.1220" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 386.755781][T10862] could not allocate digest TFM handle blake2s-256 [ 386.941577][ T30] audit: type=1400 audit(1754968116.628:1043): avc: denied { mounton } for pid=10879 comm="syz.1.1223" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 387.414279][T10897] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[10897] [ 387.525423][ T5894] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 387.533850][ T919] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 387.705455][ T5894] usb 2-1: device descriptor read/64, error -71 [ 387.715462][ T919] usb 3-1: Using ep0 maxpacket: 32 [ 387.771351][ T919] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.810548][ T919] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0x97, changing to 0x87 [ 387.851637][ T919] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x87 has an invalid bInterval 30, changing to 7 [ 387.908994][ T919] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x87 has invalid maxpacket 18297, setting to 1024 [ 387.935455][ T919] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 387.949818][ T919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 387.975467][ T919] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 387.987481][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.058987][ T5894] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 388.074379][ T919] usb 3-1: config 0 descriptor?? [ 388.195768][ T5894] usb 2-1: device descriptor read/64, error -71 [ 388.374480][ T5894] usb usb2-port1: attempt power cycle [ 388.745632][ T5894] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 388.771062][ T919] usbhid 3-1:0.0: can't add hid device: -71 [ 388.831069][ T919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 388.851717][ T919] usb 3-1: USB disconnect, device number 64 [ 388.866305][ T5894] usb 2-1: device descriptor read/8, error -71 [ 389.138157][ T5894] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 389.144047][T10920] trusted_key: encrypted_key: hex blob is missing [ 389.176026][ T5894] usb 2-1: device descriptor read/8, error -71 [ 389.229234][ T30] audit: type=1400 audit(1754968118.918:1044): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 389.302989][ T5894] usb usb2-port1: unable to enumerate USB device [ 389.909818][T10929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.929014][T10929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.954385][ T30] audit: type=1326 audit(1754968119.638:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10931 comm="syz.3.1236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e3918ebe9 code=0x0 [ 390.135500][ T5894] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 390.173818][ T30] audit: type=1400 audit(1754968119.858:1046): avc: denied { write } for pid=10937 comm="syz.1.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 390.298075][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 390.304590][ T5894] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 390.314984][ T5894] usb 3-1: config 0 has no interface number 0 [ 390.321394][T10940] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 390.330765][T10940] overlayfs: missing 'lowerdir' [ 390.335793][ T5958] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 390.346541][ T5894] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.358197][ T5894] usb 3-1: config 0 interface 85 has no altsetting 0 [ 390.368019][T10940] 9pnet_fd: Insufficient options for proto=fd [ 390.374915][ T5894] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 390.393896][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.402558][ T5894] usb 3-1: Product: syz [ 390.406848][ T5894] usb 3-1: Manufacturer: syz [ 390.411439][ T5894] usb 3-1: SerialNumber: syz [ 390.426373][ T5894] usb 3-1: config 0 descriptor?? [ 390.505478][ T5958] usb 5-1: Using ep0 maxpacket: 8 [ 390.513754][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.528975][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.540068][ T5958] usb 5-1: New USB device found, idVendor=0404, idProduct=c20e, bcdDevice= 0.00 [ 390.556967][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.587782][ T5958] usb 5-1: config 0 descriptor?? [ 390.797631][ T5958] usbhid 5-1:0.0: can't add hid device: -71 [ 390.805715][ T5958] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 390.828591][ T5958] usb 5-1: USB disconnect, device number 50 [ 390.844954][ T5894] appletouch 3-1:0.85: Geyser mode initialized. [ 390.878019][ T5894] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input34 [ 391.125397][ T1224] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 391.275446][ T1224] usb 2-1: Using ep0 maxpacket: 32 [ 391.281866][ T1224] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 391.290016][ T1224] usb 2-1: config 0 has no interface number 0 [ 391.297883][ T1224] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 391.306954][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.314930][ T1224] usb 2-1: Product: syz [ 391.319390][ T1224] usb 2-1: Manufacturer: syz [ 391.332810][ T1224] usb 2-1: SerialNumber: syz [ 391.351665][ T1224] usb 2-1: config 0 descriptor?? [ 391.358423][ T1224] smsc95xx v2.0.0 [ 391.457445][ T5894] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 391.575535][ T5958] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 391.617987][ T5894] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 391.627696][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.638504][ T5894] usb 1-1: config 0 descriptor?? [ 391.727007][ T5958] usb 5-1: Using ep0 maxpacket: 32 [ 391.733597][ T5958] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 391.742804][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.753400][ T5958] usb 5-1: config 0 descriptor?? [ 391.765432][ T1224] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 391.776228][ T1224] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 391.858440][ T5894] kaweth 1-1:0.0: Firmware present in device. [ 391.962787][ T5958] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 391.973472][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 391.983383][ T5958] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 391.990615][ T5958] usb 5-1: media controller created [ 392.007313][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.049556][ T5894] kaweth 1-1:0.0: Statistics collection: 0 [ 392.055855][ T5894] kaweth 1-1:0.0: Multicast filter limit: 0 [ 392.061871][ T5894] kaweth 1-1:0.0: MTU: 0 [ 392.066150][ T5894] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 392.164690][ T5958] az6027: usb out operation failed. (-71) [ 392.173525][ T5958] az6027: usb out operation failed. (-71) [ 392.179333][ T5958] stb0899_attach: Driver disabled by Kconfig [ 392.185542][ T5958] az6027: no front-end attached [ 392.185542][ T5958] [ 392.194573][ T5958] az6027: usb out operation failed. (-71) [ 392.200594][ T5958] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 392.209292][ T5958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 392.222403][ T5958] dvb-usb: schedule remote query interval to 400 msecs. [ 392.230033][ T5958] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 392.242792][ T5958] usb 5-1: USB disconnect, device number 51 [ 392.279111][ T5958] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 392.493151][ T5894] kaweth 1-1:0.0: Error setting SOFS wait [ 392.501571][ T5894] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 392.512181][ T5894] usb 1-1: USB disconnect, device number 64 [ 392.899110][ T5894] usb 3-1: USB disconnect, device number 65 [ 392.925190][ T5894] appletouch 3-1:0.85: input: appletouch disconnected [ 393.005996][ T1224] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 393.009782][T10967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10967 comm=syz.3.1249 [ 393.020447][ T1224] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 393.041583][ T1224] usb 2-1: USB disconnect, device number 81 [ 393.053800][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1249'. [ 393.172063][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 393.275497][ T5894] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 393.296988][T10977] netlink: 'syz.3.1251': attribute type 1 has an invalid length. [ 393.342646][T10977] bond3: entered promiscuous mode [ 393.348160][T10977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.375137][T10977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.382067][T10977] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 393.392515][T10977] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 393.404718][T10977] bond3: (slave vcan1): making interface the new active one [ 393.412294][T10977] vcan1: entered promiscuous mode [ 393.418542][T10977] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 393.435470][ T5894] usb 3-1: Using ep0 maxpacket: 16 [ 393.576421][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1252'. [ 393.692906][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.702967][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.262280][T10988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.925216][ T30] audit: type=1400 audit(1754968124.608:1047): avc: denied { execstack } for pid=10994 comm="syz.0.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 395.414109][ T30] audit: type=1400 audit(1754968125.088:1048): avc: denied { append } for pid=11006 comm="syz.4.1260" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 395.885866][ T30] audit: type=1400 audit(1754968125.308:1049): avc: denied { mount } for pid=11008 comm="syz.1.1259" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 396.140022][ T30] audit: type=1400 audit(1754968125.308:1050): avc: denied { search } for pid=11008 comm="syz.1.1259" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.168591][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 396.183609][ T30] audit: type=1400 audit(1754968125.308:1051): avc: denied { search } for pid=11008 comm="syz.1.1259" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.214580][ T5894] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 396.221205][ T30] audit: type=1400 audit(1754968125.318:1052): avc: denied { search } for pid=11008 comm="syz.1.1259" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.244461][ T5894] usb 3-1: can't read configurations, error -71 [ 396.385607][ T919] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 396.730019][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 396.747323][ T919] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 396.747596][ T30] audit: type=1400 audit(1754968126.398:1053): avc: denied { setopt } for pid=11011 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 396.768736][ T919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.779785][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 397.051612][ T919] pwc: Logitech ViewPort AV 100 webcam detected. [ 397.267055][T11022] comedi comedi2: comedi_config --init_data is deprecated [ 397.358833][ T30] audit: type=1400 audit(1754968126.988:1054): avc: denied { search } for pid=11008 comm="syz.1.1259" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 397.415893][ T30] audit: type=1400 audit(1754968126.988:1055): avc: denied { search } for pid=11008 comm="syz.1.1259" name="/" dev="configfs" ino=1201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 398.415589][ T919] pwc: Failed to set LED on/off time (-71) [ 398.433406][ T919] pwc: send_video_command error -71 [ 398.510980][ T919] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 398.531079][ T919] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71 [ 398.595694][ T919] usb 2-1: USB disconnect, device number 82 [ 399.087387][T11074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1275'. [ 504.185272][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 504.192242][ C0] rcu: 1-...!: (1 GPs behind) idle=0c1c/1/0x4000000000000000 softirq=50564/50566 fqs=0 [ 504.202799][ C0] rcu: (detected by 0, t=10506 jiffies, g=43081, q=238 ncpus=2) [ 504.210513][ C0] Sending NMI from CPU 0 to CPUs 1: [ 504.210539][ C1] NMI backtrace for cpu 1 [ 504.210551][ C1] CPU: 1 UID: 0 PID: 11073 Comm: syz.1.1275 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 504.210567][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.210575][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 504.210596][ C1] Code: 16 c8 55 00 48 89 df 5b e9 ed 4e 5b 00 be 03 00 00 00 5b e9 12 a8 27 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 e8 9c 1a 12 65 8b 05 f9 9c 1a [ 504.210608][ C1] RSP: 0018:ffffc90000a08d88 EFLAGS: 00000002 [ 504.210620][ C1] RAX: 0000000080010000 RBX: 0000000000000001 RCX: ffffffff89a754c7 [ 504.210628][ C1] RDX: ffff888029160000 RSI: 0000000000000000 RDI: 0000000000000001 [ 504.210636][ C1] RBP: ffff888056e20c00 R08: 0000000000000001 R09: 0000000000000000 [ 504.210644][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 18692c1418000000 [ 504.210652][ C1] R13: 18692c1418000000 R14: 0000000000000000 R15: ffff888056e3f800 [ 504.210660][ C1] FS: 000055556d7e3500(0000) GS:ffff8881247bd000(0000) knlGS:0000000000000000 [ 504.210674][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.210683][ C1] CR2: 00007f2e393b6080 CR3: 0000000075a7a000 CR4: 00000000003526f0 [ 504.210691][ C1] Call Trace: [ 504.210696][ C1] [ 504.210701][ C1] advance_sched+0x6b7/0xc80 [ 504.210724][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 504.210740][ C1] ? __pfx_advance_sched+0x10/0x10 [ 504.210755][ C1] __hrtimer_run_queues+0x202/0xad0 [ 504.210774][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 504.210788][ C1] ? read_tsc+0x9/0x20 [ 504.210809][ C1] hrtimer_interrupt+0x397/0x8e0 [ 504.210834][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 504.210849][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 504.210871][ C1] [ 504.210875][ C1] [ 504.210879][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 504.210895][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 504.210910][ C1] Code: e9 ed 4e 5b 00 be 03 00 00 00 5b e9 12 a8 27 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 34 24 <65> 48 8b 15 e8 9c 1a 12 65 8b 05 f9 9c 1a 12 a9 00 01 ff 00 74 1d [ 504.210922][ C1] RSP: 0018:ffffc9000e307bd0 EFLAGS: 00000282 [ 504.210932][ C1] RAX: fffff52001c60fa1 RBX: ffffc9000e307cd0 RCX: ffffc9000e307d08 [ 504.210941][ C1] RDX: ffff888029160000 RSI: ffffffff81a82523 RDI: ffffc9000e307cd0 [ 504.210949][ C1] RBP: ffffc9000e307cd0 R08: 0000000000000005 R09: 0000000000000000 [ 504.210957][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000e307cd0 [ 504.210965][ C1] R13: 0000000000000002 R14: dffffc0000000000 R15: 00007f32d25b5fac [ 504.210977][ C1] ? hrtimer_active+0x103/0x240 [ 504.210991][ C1] hrtimer_active+0x103/0x240 [ 504.211007][ C1] hrtimer_try_to_cancel+0x25/0x2f0 [ 504.211021][ C1] ? ktime_add_safe+0x60/0x70 [ 504.211034][ C1] hrtimer_cancel+0x16/0x40 [ 504.211048][ C1] futex_wait+0xfd/0x380 [ 504.211062][ C1] ? __pfx_futex_wait+0x10/0x10 [ 504.211074][ C1] ? __lock_acquire+0xb97/0x1ce0 [ 504.211094][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 504.211112][ C1] do_futex+0x229/0x350 [ 504.211131][ C1] ? __pfx_do_futex+0x10/0x10 [ 504.211148][ C1] ? rcu_is_watching+0x12/0xc0 [ 504.211163][ C1] ? ktime_get+0x200/0x310 [ 504.211179][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.211191][ C1] ? read_tsc+0x9/0x20 [ 504.211208][ C1] __x64_sys_futex+0x1e0/0x4c0 [ 504.211228][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 504.211246][ C1] ? xfd_validate_state+0x61/0x180 [ 504.211269][ C1] do_syscall_64+0xcd/0x4c0 [ 504.211283][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.211296][ C1] RIP: 0033:0x7f32d238ebe9 [ 504.211307][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.211318][ C1] RSP: 002b:00007ffdd4b848b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 504.211330][ C1] RAX: ffffffffffffffda RBX: 00000000000616f3 RCX: 00007f32d238ebe9 [ 504.211338][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f32d25b5fac [ 504.211346][ C1] RBP: 0000000000000032 R08: 00007f32d32a1000 R09: 0000000fd4b84baf [ 504.211354][ C1] R10: 00007ffdd4b849b0 R11: 0000000000000246 R12: 00007f32d25b5fac [ 504.211362][ C1] R13: 00007ffdd4b849b0 R14: 0000000000061725 R15: 00007ffdd4b849d0 [ 504.211376][ C1] [ 504.211532][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g43081 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 504.653064][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 504.663021][ C0] rcu: RCU grace-period kthread stack dump: [ 504.668892][ C0] task:rcu_preempt state:R running task stack:28760 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 504.682382][ C0] Call Trace: [ 504.685661][ C0] [ 504.688599][ C0] __schedule+0x1190/0x5de0 [ 504.693119][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 504.698059][ C0] ? __pfx___schedule+0x10/0x10 [ 504.702909][ C0] ? find_held_lock+0x2b/0x80 [ 504.707575][ C0] ? schedule+0x2d7/0x3a0 [ 504.711904][ C0] schedule+0xe7/0x3a0 [ 504.715969][ C0] schedule_timeout+0x123/0x290 [ 504.720819][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 504.726188][ C0] ? __pfx_process_timeout+0x10/0x10 [ 504.731468][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 504.737267][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 504.742724][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 504.747476][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 504.752749][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.757935][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 504.762858][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 504.767699][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 504.773503][ C0] rcu_gp_kthread+0x270/0x380 [ 504.778168][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 504.783350][ C0] ? rcu_is_watching+0x12/0xc0 [ 504.788110][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 504.793294][ C0] ? __kthread_parkme+0x19e/0x250 [ 504.798312][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 504.803496][ C0] kthread+0x3c5/0x780 [ 504.807559][ C0] ? __pfx_kthread+0x10/0x10 [ 504.812142][ C0] ? rcu_is_watching+0x12/0xc0 [ 504.816895][ C0] ? __pfx_kthread+0x10/0x10 [ 504.821478][ C0] ret_from_fork+0x5d7/0x6f0 [ 504.826054][ C0] ? __pfx_kthread+0x10/0x10 [ 504.830646][ C0] ret_from_fork_asm+0x1a/0x30 [ 504.835433][ C0] [ 504.838448][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 504.844767][ C0] CPU: 0 UID: 0 PID: 11075 Comm: syz.4.1277 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 504.855086][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.865127][ C0] RIP: 0010:smp_call_function_single+0x1f4/0x6b0 [ 504.871464][ C0] Code: 00 00 00 66 44 89 ac 24 ce 00 00 00 48 89 de e8 82 fa ff ff 41 89 c5 0f 1f 44 00 00 e8 f5 ef 0b 00 eb 07 e8 ee ef 0b 00 f3 90 <8b> 9c 24 c8 00 00 00 31 ff 83 e3 01 89 de e8 19 eb 0b 00 85 db 75 [ 504.891080][ C0] RSP: 0018:ffffc9000c98fb40 EFLAGS: 00000293 [ 504.897147][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81afa347 [ 504.905104][ C0] RDX: ffff88802e894880 RSI: ffffffff81afa332 RDI: 0000000000000005 [ 504.913060][ C0] RBP: ffffc9000c98fc90 R08: 0000000000000005 R09: 0000000000000000 [ 504.921016][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff92001931f70 [ 504.928973][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 504.936969][ C0] FS: 00005555642e2500(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 504.945890][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.952462][ C0] CR2: 000000110c26b1dc CR3: 0000000035d8e000 CR4: 00000000003526f0 [ 504.960422][ C0] DR0: 0000000000000060 DR1: 0000000000000000 DR2: 0000000000000000 [ 504.968377][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 504.976332][ C0] Call Trace: [ 504.979598][ C0] [ 504.982521][ C0] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 504.988152][ C0] ? __pfx_smp_call_function_single+0x10/0x10 [ 504.994211][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 504.999227][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 505.004241][ C0] ? __pfx_rcu_barrier_handler+0x10/0x10 [ 505.009869][ C0] ? mark_held_locks+0x49/0x80 [ 505.014630][ C0] rcu_barrier+0x28d/0x6e0 [ 505.019052][ C0] kvm_mmu_uninit_vm+0x85/0x90 [ 505.023810][ C0] kvm_arch_destroy_vm+0x207/0x2f0 [ 505.028925][ C0] kvm_put_kvm+0x4f2/0xb40 [ 505.033333][ C0] ? __pfx_kvm_vm_release+0x10/0x10 [ 505.038520][ C0] kvm_vm_release+0x3c/0x50 [ 505.043012][ C0] __fput+0x3ff/0xb70 [ 505.046989][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 505.052183][ C0] task_work_run+0x150/0x240 [ 505.056766][ C0] ? __pfx_task_work_run+0x10/0x10 [ 505.061868][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 505.067579][ C0] exit_to_user_mode_loop+0xeb/0x110 [ 505.072850][ C0] do_syscall_64+0x3f6/0x4c0 [ 505.077438][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.083320][ C0] RIP: 0033:0x7f812518ebe9 [ 505.087720][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.107314][ C0] RSP: 002b:00007ffeb4dcbba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 505.115713][ C0] RAX: 0000000000000000 RBX: 00000000000616ef RCX: 00007f812518ebe9 [ 505.123669][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 505.131627][ C0] RBP: 00007f81253b7da0 R08: 0000000000000001 R09: 00000009b4dcbe9f [ 505.139581][ C0] R10: 0000001b31120000 R11: 0000000000000246 R12: 00007f81253b5fac [ 505.147534][ C0] R13: 00007f81253b5fa0 R14: ffffffffffffffff R15: 00007ffeb4dcbcc0 [ 505.155505][ C0]