last executing test programs: 9.053505604s ago: executing program 3 (id=1304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() mmap(&(0x7f000045f000/0x3000)=nil, 0x3000, 0xa, 0x810, r0, 0xb35ef000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x4000000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r10 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 7.888360692s ago: executing program 3 (id=1306): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x0) fanotify_mark(0xffffffffffffffff, 0x501, 0x40001032, r0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x82, 0x18, 0xa1, 0x20, 0x56c, 0x8100, 0xf20, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9, 0xe0, 0x8, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe0, 0xc9, 0x72, 0x10}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) cachestat(r1, &(0x7f0000000040)={0x2, 0x7}, &(0x7f00000000c0), 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x2004b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}]}}}]}, 0x3c}}, 0x0) 5.94315558s ago: executing program 3 (id=1314): bpf$MAP_CREATE(0x0, 0x0, 0x48) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0x0, @broadcast}}]}, 0x110) 5.806356704s ago: executing program 3 (id=1316): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="9012", 0x2}], 0x1}}], 0x1, 0xc8040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000700000008000000", @ANYRES32, @ANYBLOB='\x00'/19], 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setreuid(0xee01, 0xee01) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6) ioctl$VT_DISALLOCATE(r0, 0x5608) 4.7046335s ago: executing program 0 (id=1323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x1c, &(0x7f0000000040)=[{&(0x7f00000002c0)="e6c94555b39eecf9ca644d7ee94b02459bff214a01d964c622165724e47d2629e60ef44579ee0ff9431d875e6640eca4dd7e10c0f29e62d29f1d547edab29f28e2810744daa6be29812010f167de78772363c404e31b7f3ca1befc63d137cb1bfadada370c1aa2592e285cc81f803734936e1d1c96a6758e66d549f16d0837621d664e045400795068f3046d29d9515d35c95718975e10314cbc1b31535017d4d988abca888428c614baada1350f"}, {&(0x7f0000000380)="526084ce476314eaf824553a0035460358c86c881b0a447a49489149085a00e16ca5e55649bddf3bc26d9cee36544eff00103afb5aea038f6120947747982c6e0d04bb3d671ac13b2209d7478775c64ec47fc8d65e3b42f99cfe5b7efd2b30b729b83e1027c3a6b79156da9220fbc06f2064979a260bc88b483a9cd89c8f6eb120d9b2db68c04e2c743a18bc8e920bcaaf372d78bbac0e74479b17"}], 0x171}}], 0x400000000000172, 0x4001c00) 4.521999153s ago: executing program 0 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303fffff000000000000500000008000300", @ANYRES32], 0x1c}}, 0x0) 4.405751472s ago: executing program 0 (id=1327): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, r2, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x2c}}, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@xfs={0x1c, 0x81, {0x7, 0x2, 0x7, 0x1000}}, 0x103) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0xae}) 4.280124439s ago: executing program 0 (id=1330): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket(0x1f, 0x2, 0x4efb) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x20040014) rseq(0x0, 0x0, 0x400000000, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) mkdir(0x0, 0x6b76f27452643c0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000580)={0x0, 0x14, 0x1, "f7"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x20, 0x18, 0x9, "9f1c3076a3cee6c4dd"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9}, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4.103865784s ago: executing program 4 (id=1333): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x7, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) 4.001128577s ago: executing program 4 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x1c, &(0x7f0000000040)=[{&(0x7f00000002c0)="e6c94555b39eecf9ca644d7ee94b02459bff214a01d964c622165724e47d2629e60ef44579ee0ff9431d875e6640eca4dd7e10c0f29e62d29f1d547edab29f28e2810744daa6be29812010f167de78772363c404e31b7f3ca1befc63d137cb1bfadada370c1aa2592e285cc81f803734936e1d1c96a6758e66d549f16d0837621d664e045400795068f3046d29d9515d35c95718975e10314cbc1b31535017d4d988abca888428c614baada1350f"}, {&(0x7f0000000380)="526084ce476314eaf824553a0035460358c86c881b0a447a49489149085a00e16ca5e55649bddf3bc26d9cee36544eff00103afb5aea038f6120947747982c6e0d04bb3d671ac13b2209d7478775c64ec47fc8d65e3b42f99cfe5b7efd2b30b729b83e1027c3a6b79156da9220fbc06f2064979a260bc88b483a9cd89c8f6eb120d9b2db68c04e2c743a18bc8e920bcaaf372d78bbac0e74479b17"}], 0x171}}], 0x400000000000172, 0x4001c00) 3.797865827s ago: executing program 4 (id=1337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000300)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0xe, 0x0, &(0x7f0000000d00)) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00b8c744daf012e7ce08000800000002000000a0702a8ff772c331643f0d6e05c636ce5cfdb384fadcf4fbbe679cf9837ccc03270deff10200000049ce44737bb65f12cf4e020c7488eccc368a5bd71513cb7377a43d374d4b5e0d0d4c5ebb513672ab2b48de562f5714e87f384244153db4a84c5c269124c6d60327835ea3230fc092675c91eda0586b9e1bcf86640fba610995fd1c6995aa99de03b272b6194236626886850f51e5", @ANYRES32, @ANYBLOB="b22f00"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0200000004000000020000000600"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r8}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x20, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0xfffffffa, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2000000, 0x25a8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xfffe, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.700376017s ago: executing program 3 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140), 0x9, 0x20c000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0x1, 0x9, {{0x1a, 0x4, 0x1, 0x1d, 0x68, 0x66, 0x0, 0xe, 0x29, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x14, 0x2, [{0x2, 0x2}, {0x5, 0x9, "18bdaaceffe04e"}, {0x7, 0x3, 'B'}]}, @ssrr={0x89, 0x13, 0x25, [@empty, @empty, @empty, @remote]}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0xf, [{@loopback, 0x3}]}, @ssrr={0x89, 0x7, 0x68, [@multicast2]}, @noop, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x5, 0x12, "95bc7b455a4dba5aa1d4b8a6856dd743"}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x8, 0x10, 0x1, 0x20b5, {{0x2d, 0x4, 0x1, 0x18, 0xb4, 0x64, 0x0, 0x6, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x42}, {[@noop, @cipso={0x86, 0x48, 0x3, [{0x0, 0x3, "a6"}, {0x5, 0x2}, {0x1, 0xc, "a75e4cff58e5ed83a515"}, {0x7, 0x7, "80bd29fa0f"}, {0x2, 0xb, "08815f238ea224f066"}, {0x7, 0x3, "b7"}, {0x2, 0xf, "a5d523a50ab065b8aa8cde1185"}, {0x2, 0xd, "2e38d8969647f1e9d9e2df"}]}, @generic={0x44, 0xa, "ea544a9a6c03a36e"}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0xe6, [@multicast2]}, @rr={0x7, 0x1b, 0xe1, [@dev={0xac, 0x14, 0x14, 0xc}, @remote, @broadcast, @empty, @empty, @broadcast]}, @ssrr={0x89, 0xf, 0x52, [@dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @rr={0x7, 0x13, 0x66, [@private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @ra={0x94, 0x4}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc97f61fb6ebb0994}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000081}, 0x802) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000402505a1a440000102030109024400010108a06b0904000702020600050724060000648c05240004000d240f01760b00000000350ceb07240af004f99409058202d2e9af9b01090f00000000000000"], &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x8, 0x5, 0x3, 0x8, 0x7}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0xfa, 0x6, 0xa34, 0x78f, 0x1, [0xffc000, 0x3f00, 0xff0030, 0xff000f, 0x3f30, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e84aafea719d4679a1c3ae938e76b389"}]}, 0x2, [{0x90, &(0x7f0000000180)=@string={0x90, 0x3, "ee287bfd16c3dab14f665f21fb8f19e82e729adf1a58a9b74b5313d5fd0aa556e68441f9c18511061458b2b1850a2a15ddd806dc4b07f67f0bdd1ff5092f96e275e55be9ba808d84f52aad69cd0fa8310967a6dd480cd434fd8fd1f2e75a34fa5942525fb0329f1326e65a86126f3f4130a87f3d4155d364b385ba82772194a5a7915875928b586cb518497bcc6e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}]}) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x1}) syz_usb_control_io(r9, 0x0, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r11, 0x4b2f, 0x7) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) 2.512754097s ago: executing program 0 (id=1341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC=0x0], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000160a01010000000000000000020000000900020073797a31000000000900010073797a30000000002c000380080002400000000008000140000000001800038014000100776c616e3000000000000000000000000800074000000001"], 0x88}}, 0xc4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bc7cacdd4ccbfcda0706465c09d1728e0ca0c7bb5b4e32d73a766dec38d7378ce59bf7bc1f398aa01da8bba29981d96fd016e1001d21886772ab36b9c3ca4ec33c57d361f718a4e3ceb565dc9641d6972a3bd13729c2a237f61a414eea9be78eb11db0eb1d4b1fdd2c646c6248dbe7e75b114b906c0c6d9c46686aacd72b3c03d3c9916a3df3f023e408e4c7eb8956565c4b3b68696e1f07036e5c99071bd93a567d518e80409fae79e235e615cb1d71ca698f6b84febd673374e3d0a06d5a67d0236ddda28bbfdaadf9f00000"], 0x50) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/consoles\x00', 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000c00)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0xffffffffffff0001, 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) epoll_create1(0x80000) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x80000, 0x1, &(0x7f00000000c0)) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x0, 0xff, 0x2}, 0x1}, 0x18) 2.041504817s ago: executing program 0 (id=1342): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_connect(0x1, 0x737, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x49, 0x21, 0xc1, 0x40, 0x499, 0x2003, 0xa691, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x725, 0x3, 0x1, 0x9, 0x60, 0xf, [{{0x9, 0x4, 0xd3, 0x7, 0xa, 0xf3, 0x1e, 0x32, 0xd3, [], [{{0x9, 0x5, 0x2, 0x0, 0x30, 0x4, 0x6c, 0xa}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x6, 0x5, 0xf}}, {{0x9, 0x5, 0xe74a68ab56ae809f, 0xc, 0x400, 0x7, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0x7}, @generic={0x86, 0x4, "a48e737bb5bd17bde3325c9768b76d4d3e421759a23453e789b5796a22f05bbe4dfc72da874dd5c6389236aed18463669120219c7e3b5b91b54943aa9d977dd4c6bf637b9c31fa2d0c60268d8d37046d3e1afab53f88a3adb9a88d0af8c017d7e68f40d714948e9ecf8282581accc41f882ec2a641dcc56fba93713b08f378df9cf79c7c"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x8, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xf801}, @generic={0x52, 0x30, "3e9f29b6557fc55bb9e34a29d0d3e3a5ac1a25950ab8a5beadc7c5b8043d1b32d7a0e5e4717d6fb3c1b4614e87af6e3cd9e753f874500c0f482947861977b3eaabfab2761f870a587a48a40bb83bf55e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x8, 0x1, 0x8, [@generic={0x43, 0x9, "ff471baa2a7e5fbf0238dcddd09c63fa7ecf5bd04991ac2b990f91157d1892a23ad25c11fa8b80cf7636e87dc1e5c0e884201724517b71a93e16048cd53604ec2b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0x9}]}}, {{0x9, 0x5, 0x80, 0xc, 0x20, 0x4, 0x7, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0xd6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0xff, 0x9, 0xf}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0xf, 0x1, 0x200, 0x6, 0x0, 0x9}}]}}, {{0x9, 0x4, 0xfc, 0xd4, 0x1, 0x44, 0x1d, 0xb8, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x60}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x204, 0x5, 0x5, 0x7, 0x80, 0x4}, @feature_unit={0xd, 0x24, 0x6, 0x1, 0x2, 0x3, [0x4, 0x0, 0x7], 0xd}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0xee4, 0x3, "2af8881d"}]}, @hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0xd7d}}], [{{0x9, 0x5, 0x80, 0x0, 0x440, 0x9, 0x6, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x800}]}}]}}, {{0x9, 0x4, 0xb9, 0x4, 0xd, 0x29, 0x3c, 0xb4, 0xfa, [], [{{0x9, 0x5, 0x19, 0x0, 0x40, 0x9, 0x9, 0xb}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x0, 0x3, 0x0, [@generic={0xd6, 0xe, "f4751bd34023383b191d4d5e7eb8518b32b7876cfad95b5fb4ab3fd9da3259b7e0ac09eed41ebcde67b9f2cf3c10ab481c00a63dba5a3bf2149e4e19e4fc1ae2d15b77d425dda772dcfd89ee54f8513ce198f1acb90da3bee65d1fbda7a2adbf995214a39a247809594642e1cd17b6ac59f61738f4a68cf31a71608f6d516e3aa57ccc74a4148ff0c091efc5560ae0a94e105c4c1e8217146b1a267570b4163e1c37a1f40f194d8857788a787c4dea2f9e743005ea17dd6de56fbd54967a199562954686fc06a0118cdc88889f59988f968e6ab1"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x0, 0x7, 0xe, [@generic={0x1c, 0x24, "6cc97b271965657529d38d2db030e2d2c1f451c53ede048772e1"}, @generic={0xbb, 0x21, "079900ebc1d57fc3b146380fdf18f4b1352e92b4934f09d6b6e331b76ce1d2266460a4f8922bb22ffa048b2fb778c0c46ecd21583086824aa0b31abfca49ba7a40c215a44d4caf5cef43f03ebeff75398ee6f6cd0956d78f2ffb86d08f72c177971c24b05cdd1562ed2ea972bd1f742c8e3d08c9f48192f8c5751ad070d0e38abdb574aecef99b357db36e5be83616906a210e2d6abac42612a0e3e8d475cbcd85ca85d6e474bbb2798a57f9605fd2e1eb5d9b951430d1709c"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x7, 0x8, 0x40, [@generic={0xa2, 0x9, "7079fc2db59bd7d64db8f1fc571f113b78c1c82f65bbdf006b2f22f5fdcfb5367ed715a5c418ee27f2f90b475f64f448c0a57e3934cd55969e4867c62778fc3e07919e203c7ad5c564bc1290c9f123ee347dc2ef72ea91770fe1350422a3aa1f4bf73333ba1ec1977404c7a682dbcd370d28c772ccccf5cd2bb94689b74ef79c7d98d9a89246c6a2d7f72af64c0d6340c25faed222df39245699976f9edf4247"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x5, 0x7, 0x3, [@generic={0xb1, 0x10, "a6ddb83e29bb60420e54e89f1cf92a2bb542e38332237bed1c69623e6da5c859f0cd244f2503186188d5e6008c175c10e5b1918570f62a2512325e11c65191b59ef02f0d6b5b2c299a0143be54f1485fe8f54a18e53a4b0752a209dac40480f9cd584348fb1e7447f22b28950f5b92bf07766e3e53ae7c91a4b040177657360cdef07e3e33bdc04ebbf48a9f3632b0a833c009031eaea9adfa9a54806fa60ec9a1463d178c50f7ed39b5c331d3d48d"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x8, 0x2, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xfe, 0x3}]}}, {{0x9, 0x5, 0x0, 0x3, 0x260, 0x8, 0x1e, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xe}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0x3, 0x5, 0x9}}, {{0x9, 0x5, 0x8b, 0xc, 0x40, 0x4, 0x3, 0xbf, [@generic={0xb6, 0x1, "fc629ff6f27491aa1fd092d1acf9f68cbb260f2eb392e709526408b2b09de620f0c02a2d442445b06aabbf326f9c616256fe0971a471cc2e656853928789abea5f16047097d2fd6cf94de385f8fcc43de8ac850deb351e495af2f4b4569000ff3d43b1699622f0f104462885a53193bfc99e9fd98ff0e365f7f1a49971b166d8cfbce110ea914765b0e84bbf4eb938cc3919f1721d36d330a13aeb4063cc6fbc2fc1406221d1ae32b5e552cf4c68dd07bf40d668"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0x1}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x8}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0xba, 0x7, 0x3}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x1, 0xed, 0x5f, [@generic={0x28, 0xd, "9b3e70a35a22b111f39411dba47cd799285c96a537559859b159f106790b369a94209c844dbc"}, @generic={0x70, 0xf, "3c67de79ad508ec71f242971bbfeccf633fe81f89272e94962741b98a97f4fba1a693bb36f96acc0caaf8bc3ea68561887456e5ef21492031b42e283e54746cef023d55d7fcb95afa6f2d48786dbc9cb93c9bfb86d3e06c1600e177854eb6504178ebf0f24a37cd034f573bfba86"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x5, 0x9, 0xe, [@generic={0x36, 0xa, "d10d1f2ccdd4a602d072dc2f4bb1e6864f0007ff21e046d1c0c79e8c52da76964099051716fde6c054203d0275def1709b6b77fe"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xfff}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x81, 0x7, 0x6d, 0xff, 0x40}, 0x73, &(0x7f0000000080)={0x5, 0xf, 0x73, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x8, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x0, 0x22, 0x4, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x1, 0x8, 0x1}, @generic={0x52, 0x10, 0x2, "f5bb2831c18a7b4b8d16065d5102ecce4fb515f49445acc8d2641dd8b68a5d0cd6cd26d5d4c113885dd7485de60ab067033c041e76fc338c147d6bf15d887be8918a0bbd84137dfdb582a721f87b59"}]}, 0x1, [{0xcd, &(0x7f00000001c0)=@string={0xcd, 0x3, "3d31bf380fe698ab76fc8c339e609ad41bfa2b048bec736f4ee134cb05e738c79dcc6249b5eae1fc09f37b1dd8fa0041160442bd88e426c9cf3a52d2c46c74f9e1969783bce1205b46955684049f85e831fee5b6357315d8c99e90b6eabc0b9463f72212f9b59728127d6c7e3c31a194ef1686503b00f89cadf3854e4bca926874701964882811290ff40beaf98b68eaa8737d9b11e98d8bc3afcd08a05e857b7b48eaf71bca1869766c00cc93b4e1d7d34a60447c989126b8f26bc6316f97c76e4b45fa19d9f1c6a81a73"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x17, 0x2, "1d3a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a0007616000008009f000d000000080026000816"], 0x40}}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000000)=0x7f) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/2, 0x2) socket$netlink(0x10, 0x3, 0xe) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) 2.040361303s ago: executing program 2 (id=1343): r0 = inotify_init() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000027c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x16cc, 0xe, 0xa, 0x701, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1694, 0x3, 0x0, 0x1, [{0x15d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x1e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x75, 0x1, "ce8cd3e207f0e3c0fba7f46143c0de47b230fcb335b446530fb36d22538ba667b74817c210f83e69a801f55c4f6d8818cd0f1c1e573b9cf58d9a3ea505926b66e80c3b77aa4bdd9968273f20f36d3f137533bfb2af530b454398b92badc27feed8177de263ac78d5db5cf67116020ea062"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb4, 0x1, "91be1fb77d1396ee2de4a6143433fe174f4d7d75329899cdb62adc3d64e4ab56502f3fda98489bb9adb79a61fc448065a9d0717a53b45b2fd992cdf5b447e4b2f6fd391a3683a3a6e2136a0465180ae1a32689f64ca9bad97c449521175a82e56e0c10c80f4db706d7b5ec7a064efa0609dbec2c40e58c3a50bc157b9bb095e0625eaa94912a1f07511bd88b27a04862dad7ff9a346cdeda37e77c4674e7e0a3ba5d44adbbe83c3a453d36c25eb6627f"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x29e}, @NFTA_SET_ELEM_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "84cb48238ec9e199ec17e5cae8749e3889e1"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x1ac, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}, @NFTA_DATA_VALUE={0xed, 0x1, "d752eb1aa82ef6a004753525e44cd57914fd3043559776db783b22997bcc11b909b1ec493ef7b53fdfd616776173c9d61047ee8b6a4f2c1d2b6e88c1112e7a3f8c52a1dbbcfbda62b76758eb841638c9867ddc908039c3611a44a92e479b705c2d66077ec33babfb7e571f7f6c9b8a18d28a6717babd6eee577629bd2d54c1010b81442c6197784c9e0f1c84eb5a5fd2855570edc9309773501dd764d4e47244cae5065753fdd9180dba1fd356315ef8e8fbc330270bc2338ba19ee62940599bea290137d86e583c6da7819b8c5eb8e8287fc4ff2da6051861793634d7e9082d7eeb84a4271762ef3e"}, @NFTA_DATA_VALUE={0x49, 0x1, "1a001ab74f7103fb325e7c144b0b7442590e01c94b93b0392c5c9b3069e111be6bbd2892e87048b585f7ecdf22b230dcb5df565324a2b0923007454cdd0100160400000000"}]}, @NFTA_SET_ELEM_KEY_END={0x1154, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xda, 0x1, "7264a26b8a9367b7a68a9e3296da8d5203752f139cd4b2a23cecb51d58c71747bbe1ee7cee621957959866bcfa7a05f6c348cb600e301af86208ca988ce1106dfb3b10f1e59b80f5f12d70ac6b9d3ab2217f5526d6878c5712c900a53850ac3f2d713b820d4937125673b13632f4fea9106f94aef686e5ee0a99b2ba7900399c007aaff497666c122f34f3c46a3ad4508c570ccb0ffb35ee824acbac244b9b56f471570b646d05c8b043d552747797a80cbc64ad0dba4333615aa3085300efa5380dd7133ae681550d9e9dcc8c95d974ff66730e1ff6"}, @NFTA_DATA_VALUE={0x4e, 0x1, "5955722d3f68bf1c5c66714966b68ce3f0bff2a1bb2ad72d29e16593f3f3aece726e21e282a6a34bedb8b3e024cc3b3f2605b6e01a8e2ec2004472b1cd97e7ef5996cf0a8f81df189304"}]}]}, {0x4}, {0xb8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x58, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x2d4, 0x18, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x368, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30c, 0x4, 0x0, 0x1, [{0x2d8, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2cc, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x100, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x68, 0x1, "f00934513bdf8e8f37031086fe6522d9031b898a44a60ac8f693b0d183930e5c21a0d0c89ffa7a65064dcdfdca78bb6e45c02d635997cb45e07abb915ac95b240dffa7bcd411ac2a87b3de53daf1bde24a64e48c062aefcdc94b3c7cd08cded081dfc9a1"}, @NFTA_DATA_VALUE={0x1b, 0x1, "487d0f29a5f37315fb600673d1da0577be0efa8e036151"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_DATA={0x2c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x24, 0x1, "2d8fa0fc7e7abfaa7614f06fad45b6a49362577e69fa1279fb73ba37dd3e4c72"}]}, @NFTA_CMP_DATA={0x194, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "9ad6fafc8e1e6470d8d4b68df7ad0c1367a35267cf2c4b744200ac38ca66fb054b7356f33e067755f848c1761fa0cc56087097ee1cb69c5a7e47d5688de72ce63073126b1a9d720a17745e41f01b0102c9b5a4bf9514ff91fa88c07a831db9ca56ef88e3dc593784d966e06f313abbabd285b958a1bf8bfedcd5923473e7714604507ab1089dffcee7d03c103c234f787ac58ae326e336d8d5df32ce55379c41d3b0a088e7b3cbb7d9f23942e18854b38f41289a1c868af07cbef58adf86be4157634f5016c3f6a80bcab574e0ca960ab55e2bc4bffdbc0822ad385755f498ad90d1a4cccc02c5500deff6e29c"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x57, 0x1, "5390e3bf993e684bea5888692b02bbabff5ea3ef0f144a0ab74cdd83b9463dbdbf885fc21b76295908855406d1f1cd8578cda31982777cf2f218dc0749a376087baf9f2b75dd947b85dc3beab10c29e2efac78"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x1dbc}, 0x1, 0x0, 0x0, 0x8180}, 0x20004000) r3 = syz_io_uring_setup(0x3dfc, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xfb, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@newlink={0x6c, 0x10, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x10, 0x8c86}, [@IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xa8e3}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3ff}, @IFLA_EVENT={0x8, 0x2c, 0xbed}]}, 0x6c}, 0x1, 0x0, 0x0, 0x801}, 0x400c881) 1.995658853s ago: executing program 2 (id=1345): socket$inet(0x2, 0x801, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000200)='vfat\x00', 0x30800a, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000000000000000100396500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0)="0000ffffffffa000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x25e, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x121500) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000340)=0xb960000) 1.527422123s ago: executing program 2 (id=1346): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@arm64={0x8, 0x0, 0xd, '\x00', 0x200000}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x78bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r5, 0xa2e89, 0x56211}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x3d9b}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="5c0000007a006bcd9e3fe3dc6e0817000700005425000000488bc3a00000e517d34460bc24fff3000005251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a600"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000240)) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x6c, r9, 0x201, 0x70bd2d, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x6c}, 0x8, 0x3000000000002}, 0x40000) r10 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0x80087601, &(0x7f0000000100)) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x170001, 0x0, [0xfffffffffffffff7, 0x7ffd, 0xf7, 0x2000001ff, 0x1, 0x200000000000006, 0x5, 0x319]}) 1.265163246s ago: executing program 2 (id=1347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x1c, &(0x7f0000000040)=[{&(0x7f00000002c0)="e6c94555b39eecf9ca644d7ee94b02459bff214a01d964c622165724e47d2629e60ef44579ee0ff9431d875e6640eca4dd7e10c0f29e62d29f1d547edab29f28e2810744daa6be29812010f167de78772363c404e31b7f3ca1befc63d137cb1bfadada370c1aa2592e285cc81f803734936e1d1c96a6758e66d549f16d0837621d664e045400795068f3046d29d9515d35c95718975e10314cbc1b31535017d4d988abca888428c614baada1350f"}, {&(0x7f0000000380)="526084ce476314eaf824553a0035460358c86c881b0a447a49489149085a00e16ca5e55649bddf3bc26d9cee36544eff00103afb5aea038f6120947747982c6e0d04bb3d671ac13b2209d7478775c64ec47fc8d65e3b42f99cfe5b7efd2b30b729b83e1027c3a6b79156da9220fbc06f2064979a260bc88b483a9cd89c8f6eb120d9b2db68c04e2c743a18bc8e920bcaaf372d78bbac0e74479b17"}], 0x171}}], 0x400000000000172, 0x4001c00) 1.07766747s ago: executing program 1 (id=1348): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x801, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000001c0)) setresuid(0xee00, 0xee01, 0x0) mq_open(&(0x7f00000000c0)='GPL\x00', 0x40, 0x2, &(0x7f0000000100)={0x6c8, 0x80000001, 0x2, 0x8000}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x10, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) 1.042242669s ago: executing program 2 (id=1349): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x10d480) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000001c0)) setresuid(0xee00, 0xee01, 0x0) mq_open(&(0x7f00000000c0)='GPL\x00', 0x40, 0x2, &(0x7f0000000100)={0x6c8, 0x80000001, 0x2, 0x8000}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x10, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) 1.00584036s ago: executing program 2 (id=1350): madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="260f01cfbaf80c66b835b9ca8166efbafc0cec66640f32baf80c66b83065cd8966efbafc0c66b88f9b000066efbaf80c66b8a8a86e8866efbafc0c66b80100000066efbaf80c66b8983d448366efbafc0cb000eeea012b5d00660ff96700c4e2bddfdd0f01c2", 0x66}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0xfffffffffffffee6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000040), &(0x7f0000000100)=0x6c1c) 960.799283ms ago: executing program 1 (id=1351): mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/176, 0xb0) chdir(&(0x7f0000000080)='./file0\x00') r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)=0x3) 877.232877ms ago: executing program 1 (id=1352): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0xbb6, 0x13}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x34}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) r6 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r6, &(0x7f00003e8000/0x1000)=nil, 0x4000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r9 = memfd_create(&(0x7f00000008c0)='\x00\xac=\x9d\xd2\xff\x03\x00\x002\x97\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86fm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\a\x00\x82\xc3N\x9bw\xf5q\x7fP\x8a\xc6[\xbd\xe7q]\xdd\x8d\x1a\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf2\x93\xc6\xd7\x9e\x18\x7f \xd4#\xd4~\xa0q\xc2H\xeb\xc6\xf5\xda\xb6E\x01Z\x06\t\x1a[\x98\xed\xf7\x1a\t\x17\xb5\xc6f\x1c\xdb\x19:L\x89\xab\xab\x13n\x01\xc57\x87\xf6\xa9\xdc\xf3\r}\xfb\x0f`R\xf1ge\x9d\xe7.\xce\xb0\xc9b\xe7\xb2}$\xf8~\xfbot-\x00\'\xb1\xb7\x7f\xe8\xdc\xca\xc1\x9c+8\xa061\xe6!\xfd8\xf5\xb0\xc4}]\xd3\xc2\xe0\xae\xd2|\xe4\x13\xdaP\x81%\x05b\x9e\xf2\x9b\xc3\xbb3x\xf9\t\xbc\xa8\xf1\x93u\xf7~an\n\x89\x7f\xc7\xf63\t\x84U\f\xc7\x15\xf0[\x04\x96\xe6\xae\xcd\x19\r\xde#\vA\x9b\r\x96\x01\x19B;\x7f\rC\x9f\xfdg\xdf\x90\x8c+)\xea\x04\xf0yj*-\b\x14\xbd\xec\xd7\xed\xb1\\\a\xb3\x17\xbaJ\xf4\x049\nb\xe8\xe9@`\xb3\xd0\x13\xedV<\x9a6\xe5\xfb\x14\xae\xe6\xe2\xc6\xe2\x93A\xda\xccwwjK\x9co\x85\xb6\xeeM\xa2<\arS\xf6\xc3\x00\x00\x00\x00+;\xd2=\x8f\xf1\xb5<\xbf&]\xf9iDK\x91\x05^\xf6\x9c>\x1c\xd8\xe9l\xd2k\f5\xf8\x8b\rI7h!\x9a|y{\xc8\xa1\xae\xa0\x81Pt\x9c\x87\'OD\xe1\x96\xee\xb0\xff\xc6\xf2\'\x06@\xd7cK\x86c\xa5\x1a\xbe\xd5B\x13\x8f\xab\xb6B\x16\xc1+\xef\xb6\xe1J\\\x8b3\x12\xc4J/\xaa\xa0r}\x84;IT\x96\xfb\t\xec\x84\x06\xb3\xce\vC~\x97\xedjv\xf5\xbfX\xac\xbe\xe6\xf4\xe0d\xf8FY+\xd4j\xcb\x9c\'\x94\xf8Y~b\xcd:\xea\xd9\xb9<`\x9b\x95\x86\x16\xe7\xd8\xaf\xb5if\xfe\xee\x85\xff\x89l\x8f\bUym\xd2hP\x0f*t\x93\xbe\x17\xa5\x00\x00\x00', 0x4) fallocate(r9, 0x0, 0x400000000000000, 0x7) r10 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000300)={0x8, 0x1}) 787.454379ms ago: executing program 1 (id=1353): socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (fail_nth: 2) 448.602472ms ago: executing program 1 (id=1354): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022ebffffffff"}}}}}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@base={0x9, 0x9, 0x3, 0x3, 0x40, 0xffffffffffffffff, 0xfc, '\x00', 0x0, r1, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) preadv(r0, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) 393.823816ms ago: executing program 4 (id=1355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r2, &(0x7f0000000000)="01", 0x1, 0x3}]) dup(r2) 310.321501ms ago: executing program 4 (id=1356): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44201a6, r7}) 189.935369ms ago: executing program 4 (id=1357): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd8) r0 = io_uring_setup(0x1b5, &(0x7f0000000000)={0x0, 0x8061, 0x2, 0x3, 0x236}) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r2, r1, 0x100, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 41.646711ms ago: executing program 1 (id=1358): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}]}, 0x34}}, 0x40004) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001"], 0xe4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d0007010000000000000000047c00000800088004009700b4130180b01310809b000b"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 3 (id=1359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x7, r0, 0x4}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000800000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000000c0)={@val={0x6f01, 0xf6}, @val={0x3, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x8000, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xb, 0x0, 0x18}}}}}, 0x36) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200e6000000000000080000e9ffffffffffffff000000e12df373a841be1d00"/53, @ANYRES32=0x0, @ANYBLOB="00000000000000000004000000000000"], 0x4c}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r9, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r10, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) kernel console output (not intermixed with test programs): 062039][ T5822] usb 1-1: device descriptor read/8, error -71 [ 200.192863][ T5867] usb 4-1: config index 0 descriptor too short (expected 39, got 38) [ 200.206345][ T5867] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 200.215779][ T5867] usb 4-1: config 0 has an invalid interface descriptor of length 2, skipping [ 200.225061][ T5867] usb 4-1: config 0 has no interface number 0 [ 200.231328][ T5867] usb 4-1: config 0 interface 125 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.246927][ T5867] usb 4-1: New USB device found, idVendor=0421, idProduct=007b, bcdDevice=ed.44 [ 200.384565][ T5822] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 200.392573][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.400582][ T5867] usb 4-1: Product: syz [ 200.405012][ T5867] usb 4-1: Manufacturer: syz [ 200.409770][ T5867] usb 4-1: SerialNumber: syz [ 200.417161][ T5867] usb 4-1: config 0 descriptor?? [ 200.423500][ T5822] usb 1-1: device descriptor read/8, error -71 [ 200.430573][ T5867] usb 4-1: bad CDC descriptors [ 200.435763][ T5867] cdc_acm 4-1:0.125: Zero length descriptor references [ 200.442697][ T5867] cdc_acm 4-1:0.125: probe with driver cdc_acm failed with error -22 [ 200.559006][ T5822] usb usb1-port1: unable to enumerate USB device [ 200.985091][ T9] usb 4-1: USB disconnect, device number 19 [ 200.991668][ T8662] veth0: entered promiscuous mode [ 200.999104][ T8662] team0: entered promiscuous mode [ 201.008538][ T8662] team_slave_0: entered promiscuous mode [ 201.017529][ T8662] team_slave_1: entered promiscuous mode [ 201.187159][ T8659] team0: left promiscuous mode [ 201.202053][ T8659] team_slave_0: left promiscuous mode [ 201.208673][ T8659] team_slave_1: left promiscuous mode [ 201.222181][ T8659] veth0: left promiscuous mode [ 201.233886][ T8672] sp0: Synchronizing with TNC [ 201.271762][ T8671] [U] [ 201.490102][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.919'. [ 201.561770][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 201.631823][ T972] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 201.725472][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.735859][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 201.746208][ T5822] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 201.748278][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.766238][ T9] usb 3-1: config 0 descriptor?? [ 201.781657][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 202.411810][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 202.420907][ T5866] usb 5-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=72.1d [ 202.420991][ T5822] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 202.439660][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.458493][ T5866] usb 5-1: can't set config #4, error -71 [ 202.468710][ T5866] usb 5-1: USB disconnect, device number 12 [ 202.475069][ T972] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.484368][ T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.490982][ T5822] usb 2-1: config 0 has no interface number 0 [ 202.503753][ T5822] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 202.515639][ T5822] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.528963][ T972] usb 1-1: config 0 descriptor?? [ 202.535650][ T972] cp210x 1-1:0.0: cp210x converter detected [ 202.545654][ T5822] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 202.571903][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 202.580075][ T5822] usb 2-1: Product: syz [ 202.584438][ T5822] usb 2-1: SerialNumber: syz [ 202.597185][ T5822] usb 2-1: config 0 descriptor?? [ 202.613759][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 202.613781][ T5822] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 202.631398][ T5822] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input16 [ 202.632544][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 202.829187][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 203.337293][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 203.344126][ T972] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 203.352790][ T8689] netlink: 48 bytes leftover after parsing attributes in process `syz.3.922'. [ 203.367352][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 203.386191][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 203.461661][ T5866] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 203.622226][ T972] usb 1-1: cp210x converter now attached to ttyUSB0 [ 203.633757][ T5866] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.649384][ T5866] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.663770][ T5866] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 203.674995][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.685991][ T5866] usb 5-1: config 0 descriptor?? [ 203.711751][ T5863] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 204.018219][ T5867] usb 1-1: USB disconnect, device number 22 [ 204.135902][ T5867] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.197843][ T5867] cp210x 1-1:0.0: device disconnected [ 204.257885][ T5866] kye 0003:0458:5013.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 204.271084][ T5866] kye 0003:0458:5013.000C: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.4-1/input0 [ 204.282179][ T5866] kye 0003:0458:5013.000C: tablet-enabling feature report not found [ 204.290202][ T5866] kye 0003:0458:5013.000C: tablet enabling failed [ 204.331723][ T5863] usb 4-1: device descriptor read/64, error -71 [ 204.441406][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 204.448714][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 204.456694][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 204.464700][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 204.471483][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 204.478442][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 204.485495][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 204.495895][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 204.502876][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 204.512941][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.521721][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.539908][ T9] pwc: Registered as video103. [ 204.546462][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 204.562008][ T9] usb 3-1: USB disconnect, device number 12 [ 204.571768][ T5863] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 204.616232][ T8704] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.924'. [ 204.632665][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.924'. [ 204.634392][ T5867] usb 5-1: USB disconnect, device number 13 [ 204.689271][ T8704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8704 comm=syz.2.924 [ 204.711744][ T5863] usb 4-1: device descriptor read/64, error -71 [ 204.822330][ T5863] usb usb4-port1: attempt power cycle [ 204.921684][ T5940] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 205.071621][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 205.077825][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.089022][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.098966][ T5940] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 205.108590][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.117706][ T5940] usb 1-1: config 0 descriptor?? [ 205.161662][ T5863] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 205.243000][ T5863] usb 4-1: device descriptor read/8, error -71 [ 205.264082][ T5867] usb 2-1: USB disconnect, device number 18 [ 205.372324][ T5867] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 205.382408][ T30] audit: type=1400 audit(1743095263.579:660): avc: denied { create } for pid=8710 comm="syz.1.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.543203][ T30] audit: type=1400 audit(1743095263.749:661): avc: denied { map } for pid=8710 comm="syz.1.927" path="socket:[20971]" dev="sockfs" ino=20971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.669628][ T5940] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 205.688600][ T5940] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 205.698252][ T30] audit: type=1400 audit(1743095263.749:662): avc: denied { read } for pid=8710 comm="syz.1.927" path="socket:[20971]" dev="sockfs" ino=20971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.723936][ T5863] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 205.941772][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 205.969744][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.056877][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.145713][ T5940] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 206.153460][ T5940] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 206.160610][ T5940] monterey 0003:0566:3004.000D: unknown main item tag 0x0 [ 206.168375][ T5863] usb 4-1: device descriptor read/8, error -71 [ 206.177784][ T5940] monterey 0003:0566:3004.000D: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.0-1/input0 [ 206.194056][ T47] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 206.195209][ T5940] usb 1-1: USB disconnect, device number 23 [ 206.258825][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.276437][ T47] usb 3-1: Product: syz [ 206.280667][ T47] usb 3-1: Manufacturer: syz [ 206.285363][ T47] usb 3-1: SerialNumber: syz [ 206.294339][ T5863] usb usb4-port1: unable to enumerate USB device [ 206.295659][ T47] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 206.310739][ T30] audit: type=1400 audit(1743095264.509:663): avc: denied { firmware_load } for pid=5867 comm="kworker/1:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 206.345679][ T5867] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 206.390648][ T30] audit: type=1326 audit(1743095264.589:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 206.418337][ T30] audit: type=1326 audit(1743095264.589:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 206.450709][ T30] audit: type=1326 audit(1743095264.589:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 206.474429][ T9] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 206.517627][ T30] audit: type=1326 audit(1743095264.589:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 206.542137][ T30] audit: type=1326 audit(1743095264.589:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fecb338bad0 code=0x7ffc0000 [ 206.570755][ T30] audit: type=1326 audit(1743095264.589:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.1.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fecb338e997 code=0x7ffc0000 [ 206.682953][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 206.691081][ T9] usb 5-1: config 0 has no interface number 0 [ 206.697746][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.731140][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 206.746034][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 206.771727][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 206.786868][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 206.799355][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.813803][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 206.823085][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.834143][ T9] usb 5-1: config 0 descriptor?? [ 206.839636][ T8718] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.850219][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 206.871644][ T5940] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 207.031848][ T5863] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 207.039520][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 207.057897][ T5940] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 207.076744][ T5940] usb 2-1: config 0 has no interface number 0 [ 207.082512][ T5822] usb 5-1: USB disconnect, device number 14 [ 207.097140][ T5940] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 207.104527][ T5822] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 207.113354][ T47] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 207.123065][ T5940] usb 2-1: config 0 has no interface number 0 [ 207.138679][ T5940] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 207.176583][ T5940] usb 2-1: config 0 has no interface number 0 [ 207.200851][ T5940] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 207.220399][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.228916][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 207.242474][ T5863] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 207.251278][ T5940] usb 2-1: Product: syz [ 207.255908][ T5863] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 207.264609][ T5940] usb 2-1: Manufacturer: syz [ 207.269435][ T5940] usb 2-1: SerialNumber: syz [ 207.274621][ T5863] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 207.282322][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 207.322956][ T5940] usb 2-1: config 0 descriptor?? [ 207.347593][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 207.356947][ T5863] usb 1-1: config 250 has no interface number 0 [ 207.357731][ T47] usb 4-1: config 1 has an invalid interface number: 153 but max is 0 [ 207.385576][ T5940] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 207.387201][ T47] usb 4-1: config 1 has no interface number 0 [ 207.411433][ T47] usb 4-1: config 1 interface 153 has no altsetting 0 [ 207.420518][ T5863] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 207.422363][ T47] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=42.b5 [ 207.446952][ T5863] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 207.449517][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.465888][ T5863] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 207.468676][ T47] usb 4-1: Product: syz [ 207.484402][ T47] usb 4-1: Manufacturer: syz [ 207.489126][ T47] usb 4-1: SerialNumber: syz [ 207.489210][ T5863] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 207.599965][ T5863] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 207.617017][ T5863] usb 1-1: config 250 interface 228 has no altsetting 0 [ 207.621980][ T5867] usb 3-1: Service connection timeout for: 256 [ 207.625489][ T5863] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 207.639326][ T5867] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 207.672970][ T5940] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 207.680257][ T5867] ath9k_htc: Failed to initialize the device [ 207.706450][ T9] usb 3-1: USB disconnect, device number 13 [ 207.734236][ T5940] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 207.744890][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 207.751707][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 207.760882][ T5863] usb 1-1: Product: syz [ 207.770052][ T5863] usb 1-1: SerialNumber: syz [ 207.774095][ T8735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.789789][ T5863] hub 1-1:250.228: bad descriptor, ignoring hub [ 207.812498][ T5863] hub 1-1:250.228: probe with driver hub failed with error -5 [ 208.177467][ T5863] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 24 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 208.500390][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 208.500667][ T5867] usb 2-1: USB disconnect, device number 19 [ 208.544599][ T5867] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 208.564255][ T5867] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 208.591368][ T5867] quatech2 2-1:0.51: device disconnected [ 208.724370][ T47] sierra 4-1:1.153: Sierra USB modem converter detected [ 208.748091][ T47] usb 4-1: USB disconnect, device number 24 [ 208.760121][ T47] sierra 4-1:1.153: device disconnected [ 208.975908][ T8743] netlink: 'syz.2.937': attribute type 8 has an invalid length. [ 209.218758][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063e44000: rx timeout, send abort [ 209.349561][ T8747] lo speed is unknown, defaulting to 1000 [ 209.728101][ C0] vcan0: j1939_tp_rxtimer: 0xffff888063e44000: abort rx timeout. Force session deactivation [ 209.853555][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 209.890802][ T8747] netlink: 80 bytes leftover after parsing attributes in process `syz.1.938'. [ 209.992221][ T5868] usb 1-1: USB disconnect, device number 24 [ 210.018078][ T5868] usblp0: removed [ 210.062406][ T8753] pim6reg: entered allmulticast mode [ 210.777364][ T5863] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 211.021621][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 211.166068][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 211.244364][ T5863] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 211.252745][ T5863] usb 3-1: config 0 has no interface number 0 [ 211.259350][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.271030][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 211.283923][ T8779] Cannot find add_set index 0 as target [ 211.289607][ T5863] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 211.328309][ T5863] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.391818][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 211.407267][ T5863] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 211.419717][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.437603][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.451676][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 211.465908][ T5863] usb 3-1: Product: syz [ 211.474356][ T5863] usb 3-1: Manufacturer: syz [ 211.484351][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 211.495974][ T5863] usb 3-1: SerialNumber: syz [ 211.521913][ T5863] usb 3-1: config 0 descriptor?? [ 211.542705][ T9] usb 5-1: New USB device strings: Mfr=1, Product=7, SerialNumber=3 [ 211.555885][ T9] usb 5-1: Product: syz [ 211.561628][ T9] usb 5-1: Manufacturer: syz [ 211.583712][ T9] usb 5-1: SerialNumber: syz [ 211.608718][ T9] usb 5-1: config 0 descriptor?? [ 211.834986][ T5863] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 211.851768][ T9] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 211.867553][ T9] 99 45 40 71 c9 1b a7 7f [ 211.872220][ T9] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 211.931790][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 211.943781][ T5868] usb 3-1: USB disconnect, device number 14 [ 212.035109][ T8772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.048745][ T8772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.059115][ T5867] usb 5-1: USB disconnect, device number 15 [ 212.069478][ T8786] Invalid logical block size (4098) [ 212.234595][ T8793] FAULT_INJECTION: forcing a failure. [ 212.234595][ T8793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.249905][ T8793] CPU: 0 UID: 0 PID: 8793 Comm: syz.1.953 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 212.249931][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.249941][ T8793] Call Trace: [ 212.249946][ T8793] [ 212.249953][ T8793] dump_stack_lvl+0x16c/0x1f0 [ 212.249980][ T8793] should_fail_ex+0x512/0x640 [ 212.249999][ T8793] _copy_from_user+0x2e/0xd0 [ 212.250018][ T8793] copy_msghdr_from_user+0x98/0x160 [ 212.250041][ T8793] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 212.250069][ T8793] ___sys_sendmsg+0xfe/0x1d0 [ 212.250094][ T8793] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.250137][ T8793] __sys_sendmsg+0x16d/0x220 [ 212.250161][ T8793] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.250192][ T8793] ? rcu_is_watching+0x12/0xc0 [ 212.250211][ T8793] do_syscall_64+0xcd/0x260 [ 212.250235][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.250253][ T8793] RIP: 0033:0x7fecb338d169 [ 212.250266][ T8793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.250281][ T8793] RSP: 002b:00007fecb41fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.250297][ T8793] RAX: ffffffffffffffda RBX: 00007fecb35a5fa0 RCX: 00007fecb338d169 [ 212.250309][ T8793] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 212.250319][ T8793] RBP: 00007fecb41fb090 R08: 0000000000000000 R09: 0000000000000000 [ 212.250329][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.250338][ T8793] R13: 0000000000000000 R14: 00007fecb35a5fa0 R15: 00007ffcb8a59308 [ 212.250357][ T8793] [ 212.438786][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 212.438803][ T30] audit: type=1400 audit(1743095270.639:696): avc: denied { setopt } for pid=8794 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.112607][ T8811] netlink: 'syz.2.955': attribute type 4 has an invalid length. [ 213.532398][ T47] lo speed is unknown, defaulting to 1000 [ 214.307836][ T5863] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 214.371606][ T8823] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[8823] [ 214.512248][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.547171][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.650667][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 214.660250][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.831271][ T5863] usb 2-1: config 0 descriptor?? [ 214.948196][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 215.161865][ T5940] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 215.260604][ T30] audit: type=1400 audit(1743095273.459:697): avc: denied { ioctl } for pid=8838 comm="syz.4.967" path="socket:[20432]" dev="sockfs" ino=20432 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 215.381645][ T5940] usb 4-1: device descriptor read/64, error -71 [ 215.498411][ T5863] logitech 0003:046D:C29C.000E: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 216.632864][ T5940] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 216.798594][ T5940] usb 4-1: device descriptor read/64, error -71 [ 216.831803][ T5863] logitech 0003:046D:C29C.000E: no inputs found [ 216.941928][ T5940] usb usb4-port1: attempt power cycle [ 216.952053][ T5863] usb 2-1: USB disconnect, device number 20 [ 217.976726][ T8864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 218.006127][ T8861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.971'. [ 218.261366][ T5940] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 218.301526][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.974'. [ 218.465515][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 218.477751][ T5940] usb 4-1: device not accepting address 27, error -71 [ 218.502847][ T8876] No source specified [ 218.563496][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.979'. [ 219.921248][ T8903] random: crng reseeded on system resumption [ 219.985286][ T30] audit: type=1400 audit(1743095278.119:698): avc: denied { append } for pid=8902 comm="syz.4.986" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 220.061639][ T5863] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 220.283795][ T8912] netlink: 256 bytes leftover after parsing attributes in process `syz.1.989'. [ 220.381408][ T8903] Restarting kernel threads ... [ 220.383228][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 220.392639][ T8903] done. [ 220.407274][ T5863] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 220.416002][ T5863] usb 1-1: config 0 has no interface number 0 [ 220.424864][ T5863] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 220.436418][ T5863] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 220.450416][ T5863] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 220.461572][ T5863] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.563238][ T5863] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 220.572581][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.580591][ T5863] usb 1-1: Product: syz [ 220.584876][ T5863] usb 1-1: Manufacturer: syz [ 220.589959][ T5863] usb 1-1: SerialNumber: syz [ 220.601758][ T5863] usb 1-1: config 0 descriptor?? [ 220.679320][ T8921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.991'. [ 220.688882][ T5940] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 220.851849][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 220.933264][ T5863] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 220.956570][ T5940] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 220.967091][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.978125][ T5940] usb 4-1: config 0 descriptor?? [ 220.984917][ T5940] gspca_main: sunplus-2.14.0 probing 041e:400b [ 221.119739][ T5863] usb 1-1: USB disconnect, device number 25 [ 221.191643][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 221.382791][ T24] usb 2-1: config 0 has no interfaces? [ 221.388317][ T24] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 221.400646][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.414701][ T24] usb 2-1: config 0 descriptor?? [ 221.431697][ T47] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 221.840253][ T5940] gspca_sunplus: reg_w_riv err -71 [ 221.849625][ T5940] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 221.901649][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 221.915362][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.927259][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.938150][ T47] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 221.955013][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.967798][ T47] usb 5-1: config 0 descriptor?? [ 221.970902][ T5940] usb 4-1: USB disconnect, device number 29 [ 222.417140][ T5864] IPVS: starting estimator thread 0... [ 222.531737][ T8942] IPVS: using max 55 ests per chain, 132000 per kthread [ 222.548714][ T8944] delete_channel: no stack [ 222.559532][ T8944] xt_time: unknown flags 0xc [ 222.572972][ T30] audit: type=1400 audit(1743095280.759:699): avc: denied { create } for pid=8943 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 222.600183][ T47] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 223.201904][ T24] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 223.261168][ T8957] bond0: entered promiscuous mode [ 223.267363][ T8957] bond_slave_0: entered promiscuous mode [ 223.273538][ T8957] bond_slave_1: entered promiscuous mode [ 223.281355][ T47] usb 5-1: USB disconnect, device number 16 [ 223.371764][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 223.511763][ T24] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 223.561697][ T5940] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 223.681632][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 223.687203][ T24] usb usb1-port1: attempt power cycle [ 223.724761][ T5940] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.735036][ T5940] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.750278][ T5940] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.759437][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.768013][ T5940] usb 4-1: Product: syz [ 223.772257][ T5940] usb 4-1: Manufacturer: syz [ 223.776873][ T5940] usb 4-1: SerialNumber: syz [ 223.801656][ T5864] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 224.028645][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 224.062906][ T24] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 224.064105][ T9] usb 2-1: USB disconnect, device number 21 [ 224.135877][ T5864] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 224.143369][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 224.146182][ T5864] usb 3-1: config 0 has no interface number 0 [ 224.219527][ T5864] usb 3-1: config 0 interface 184 has no altsetting 0 [ 224.230749][ T5864] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 224.240193][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.248539][ T5864] usb 3-1: Product: syz [ 224.253050][ T5864] usb 3-1: Manufacturer: syz [ 224.257690][ T5864] usb 3-1: SerialNumber: syz [ 224.264638][ T5864] usb 3-1: config 0 descriptor?? [ 224.272527][ T5864] smsc75xx v1.0.0 [ 224.339647][ T24] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 224.429611][ T8970] sp0: Synchronizing with TNC [ 224.435992][ T8969] [U] [ 224.568528][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 224.581014][ T24] usb usb1-port1: unable to enumerate USB device [ 224.967647][ T5940] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 224.998026][ T5940] cdc_ncm 4-1:1.0: bind() failure [ 225.004723][ T5940] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 225.011591][ T5940] cdc_ncm 4-1:1.1: bind() failure [ 225.019825][ T5940] usb 4-1: USB disconnect, device number 30 [ 225.168338][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1011'. [ 225.368434][ T30] audit: type=1400 audit(1743095283.549:700): avc: denied { watch } for pid=8976 comm="syz.1.1011" path="/173" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 225.394845][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 225.667157][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 225.740438][ T30] audit: type=1400 audit(1743095283.549:701): avc: denied { watch_sb } for pid=8976 comm="syz.1.1011" path="/173" dev="tmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 225.954226][ T30] audit: type=1400 audit(1743095284.039:702): avc: denied { getopt } for pid=8989 comm="syz.3.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 226.002815][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 226.111629][ T8994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1013'. [ 226.303967][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 226.343178][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 226.448029][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 226.909108][ T5864] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 226.924402][ T5864] usb 3-1: USB disconnect, device number 15 [ 227.291813][ T30] audit: type=1400 audit(1743095285.479:703): avc: denied { ioctl } for pid=9005 comm="syz.2.1016" path="socket:[22708]" dev="sockfs" ino=22708 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.433154][ T9043] cgroup: Bad value for 'name' [ 229.438014][ T30] audit: type=1400 audit(1743095287.629:704): avc: denied { read } for pid=9042 comm="syz.0.1024" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 229.622418][ T30] audit: type=1400 audit(1743095287.629:705): avc: denied { open } for pid=9042 comm="syz.0.1024" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 229.646073][ T30] audit: type=1400 audit(1743095287.639:706): avc: denied { ioctl } for pid=9042 comm="syz.0.1024" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 229.674085][ T9043] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1024'. [ 229.751765][ T5940] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 229.858826][ T9051] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 229.922287][ T5940] usb 5-1: Invalid ep0 maxpacket: 64 [ 230.579836][ T5940] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 230.771744][ T5864] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 230.882909][ T9069] fuse: Bad value for 'fd' [ 231.131153][ T5940] usb 5-1: Invalid ep0 maxpacket: 64 [ 231.145138][ T5940] usb usb5-port1: attempt power cycle [ 231.152857][ T5864] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 231.162511][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.174031][ T5864] usb 3-1: config 0 descriptor?? [ 231.262316][ T9075] bridge_slave_0: invalid flags given to default FDB implementation [ 231.427256][ T30] audit: type=1400 audit(2000000000.610:707): avc: denied { name_connect } for pid=9076 comm="syz.0.1034" dest=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 231.490033][ T30] audit: type=1400 audit(2000000000.680:708): avc: denied { write } for pid=9076 comm="syz.0.1034" name="anycast6" dev="proc" ino=4026533049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 231.597498][ T5864] ath6kl: Failed to read usb control message: -71 [ 231.605436][ T5864] ath6kl: Unable to read the bmi data from the device: -71 [ 231.613135][ T5864] ath6kl: Unable to recv target info: -71 [ 231.768816][ T5864] ath6kl: Failed to init ath6kl core: -71 [ 232.123571][ T30] audit: type=1400 audit(2000000000.680:709): avc: denied { read } for pid=9083 comm="syz.3.1035" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 232.152891][ T5864] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 232.155696][ T30] audit: type=1400 audit(2000000000.680:710): avc: denied { open } for pid=9083 comm="syz.3.1035" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 232.191179][ T5864] usb 3-1: USB disconnect, device number 16 [ 233.123780][ T30] audit: type=1400 audit(2000000002.350:711): avc: denied { setopt } for pid=9110 comm="syz.2.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.414370][ T5863] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 234.825572][ T5863] usb 3-1: Invalid ep0 maxpacket: 64 [ 234.878796][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'. [ 235.101646][ T30] audit: type=1400 audit(2000000004.320:712): avc: denied { mounton } for pid=9124 comm="syz.1.1046" path="/178/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 235.161855][ T5863] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 235.205398][ T30] audit: type=1400 audit(2000000004.420:713): avc: denied { bind } for pid=9128 comm="syz.4.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.371777][ T5863] usb 3-1: Invalid ep0 maxpacket: 64 [ 235.385643][ T30] audit: type=1400 audit(2000000004.610:714): avc: denied { name_bind } for pid=9130 comm="syz.3.1047" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 236.151709][ T5863] usb usb3-port1: attempt power cycle [ 236.691674][ T30] audit: type=1400 audit(2000000261.915:715): avc: denied { bind } for pid=9124 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 236.731976][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 236.741194][ T9145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1052'. [ 236.843344][ T9139] FAULT_INJECTION: forcing a failure. [ 236.843344][ T9139] name failslab, interval 1, probability 0, space 0, times 0 [ 236.856665][ T9139] CPU: 0 UID: 0 PID: 9139 Comm: syz.3.1050 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 236.856680][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 236.856686][ T9139] Call Trace: [ 236.856690][ T9139] [ 236.856693][ T9139] dump_stack_lvl+0x16c/0x1f0 [ 236.856712][ T9139] should_fail_ex+0x512/0x640 [ 236.856722][ T9139] ? __kmalloc_noprof+0xbf/0x510 [ 236.856733][ T9139] ? alloc_pipe_info+0x1ec/0x590 [ 236.856743][ T9139] should_failslab+0xc2/0x120 [ 236.856754][ T9139] __kmalloc_noprof+0xd2/0x510 [ 236.856765][ T9139] alloc_pipe_info+0x1ec/0x590 [ 236.856775][ T9139] splice_direct_to_actor+0x77d/0xa30 [ 236.856791][ T9139] ? __lock_acquire+0x5ca/0x1ba0 [ 236.856805][ T9139] ? __pfx_direct_splice_actor+0x10/0x10 [ 236.856822][ T9139] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 236.856837][ T9139] ? __pfx___might_resched+0x10/0x10 [ 236.856851][ T9139] do_splice_direct+0x174/0x240 [ 236.856866][ T9139] ? __pfx_do_splice_direct+0x10/0x10 [ 236.856881][ T9139] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 236.856897][ T9139] ? rw_verify_area+0xcf/0x680 [ 236.856911][ T9139] do_sendfile+0xafd/0xe50 [ 236.856926][ T9139] ? __pfx_do_sendfile+0x10/0x10 [ 236.856944][ T9139] __x64_sys_sendfile64+0x154/0x220 [ 236.856955][ T9139] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 236.856969][ T9139] do_syscall_64+0xcd/0x260 [ 236.856984][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.856994][ T9139] RIP: 0033:0x7fdeb038d169 [ 236.857002][ T9139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.857011][ T9139] RSP: 002b:00007fdeb11ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 236.857022][ T9139] RAX: ffffffffffffffda RBX: 00007fdeb05a5fa0 RCX: 00007fdeb038d169 [ 236.857028][ T9139] RDX: 0000200000002700 RSI: 0000000000000004 RDI: 0000000000000005 [ 236.857034][ T9139] RBP: 00007fdeb11ee090 R08: 0000000000000000 R09: 0000000000000000 [ 236.857039][ T9139] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 236.857045][ T9139] R13: 0000000000000000 R14: 00007fdeb05a5fa0 R15: 00007fff7fb169d8 [ 236.857055][ T9139] [ 237.109294][ T5940] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 237.116938][ T5863] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 237.138083][ T30] audit: type=1400 audit(2000000261.915:716): avc: denied { listen } for pid=9124 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.341726][ T5863] usb 3-1: device not accepting address 19, error -71 [ 237.369059][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 237.503289][ T5940] usb 1-1: config 8 has an invalid interface number: 6 but max is 0 [ 237.524614][ T5940] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 237.741796][ T5863] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 237.932344][ T5940] usb 1-1: config 8 has no interface number 0 [ 237.940661][ T5940] usb 1-1: string descriptor 0 read error: -22 [ 237.947397][ T5940] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=b2.43 [ 237.957023][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 238.027881][ T5863] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 238.137225][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.211322][ T5863] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 238.211357][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.211375][ T5863] usb 3-1: Product: syz [ 238.211389][ T5863] usb 3-1: Manufacturer: syz [ 238.211402][ T5863] usb 3-1: SerialNumber: syz [ 238.213297][ T5863] usb 3-1: config 0 descriptor?? [ 238.214421][ T9150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 238.216758][ T5863] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 238.220716][ T5940] ttusb_dec_send_command: command bulk message failed: error -22 [ 238.220836][ T5940] ttusb-dec 1-1:8.6: probe with driver ttusb-dec failed with error -22 [ 238.235994][ T30] audit: type=1400 audit(2000000263.445:717): avc: denied { bind } for pid=9156 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.236067][ T30] audit: type=1400 audit(2000000263.445:718): avc: denied { connect } for pid=9156 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.236092][ T30] audit: type=1400 audit(2000000263.445:719): avc: denied { write } for pid=9156 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.440431][ T5940] usb 1-1: USB disconnect, device number 30 [ 238.772828][ T5142] Bluetooth: hci5: command 0x1003 tx timeout [ 238.772948][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 239.187744][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 239.187777][ T5940] usb 3-1: USB disconnect, device number 20 [ 239.213661][ T9155] tty tty2: ldisc open failed (-12), clearing slot 1 [ 239.556409][ T30] audit: type=1400 audit(2000000264.775:720): avc: denied { write } for pid=9167 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.600309][ T30] audit: type=1400 audit(2000000264.775:721): avc: denied { nlmsg_write } for pid=9167 comm="syz.4.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.621501][ T30] audit: type=1400 audit(2000000264.815:722): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 239.840428][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 239.851331][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1061'. [ 239.972881][ T9176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.015598][ T9176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.168928][ T9176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.257009][ T9176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.388865][ T9188] netlink: 'syz.4.1066': attribute type 5 has an invalid length. [ 240.600787][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 240.635328][ T9196] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1070'. [ 241.111849][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 241.131444][ T24] usb 1-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 241.147830][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 241.251777][ T5868] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 241.251932][ T30] audit: type=1400 audit(2000000266.365:723): avc: denied { watch_sb watch_reads } for pid=9195 comm="syz.3.1070" path="/203/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.304735][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.395886][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 241.434231][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.444210][ T24] usb 1-1: Product: syz [ 241.448421][ T24] usb 1-1: Manufacturer: syz [ 241.505546][ T24] usb 1-1: SerialNumber: syz [ 241.531737][ T5868] usb 2-1: device descriptor read/64, error -71 [ 241.593219][ T30] audit: type=1400 audit(2000000266.815:724): avc: denied { audit_read } for pid=9205 comm="syz.4.1073" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 241.771647][ T5868] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 242.345575][ T5868] usb 2-1: device descriptor read/64, error -71 [ 242.370044][ T24] usb 1-1: USB disconnect, device number 31 [ 242.499246][ T5868] usb usb2-port1: attempt power cycle [ 243.011878][ T5868] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 243.092376][ T5868] usb 2-1: device descriptor read/8, error -71 [ 243.110398][ T30] audit: type=1400 audit(2000000268.325:725): avc: denied { map } for pid=9235 comm="syz.2.1084" path="pipe:[23111]" dev="pipefs" ino=23111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 243.705331][ T5940] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 243.801657][ T5868] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 243.931626][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 243.948056][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.985854][ T5940] usb 5-1: config 0 has no interfaces? [ 244.015932][ T5940] usb 5-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 244.063603][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.161822][ T5940] usb 5-1: config 0 descriptor?? [ 244.282402][ T5868] usb 2-1: device not accepting address 25, error -71 [ 244.293577][ T5868] usb usb2-port1: unable to enumerate USB device [ 244.319987][ T9256] tmpfs: Unknown parameter 'Ґ}hin_size' [ 244.336091][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 244.721375][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 244.727552][ T24] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 244.727579][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.729318][ T24] usb 3-1: config 0 descriptor?? [ 244.731195][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 244.759459][ T5868] usb 5-1: USB disconnect, device number 20 [ 245.450093][ T30] audit: type=1400 audit(2000000270.665:726): avc: denied { ioctl } for pid=9271 comm="syz.3.1094" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 245.475128][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.569686][ T9239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.578577][ T9239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.631731][ T5940] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 245.651147][ T30] audit: type=1400 audit(2000000270.815:727): avc: denied { connect } for pid=9237 comm="syz.2.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 245.871737][ T24] gspca_sunplus: reg_w_riv err -110 [ 245.881191][ T24] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 245.933042][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.959554][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.975911][ T5940] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 245.987357][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.016286][ T5940] usb 1-1: config 0 descriptor?? [ 246.363837][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 246.415160][ T9279] syz.3.1097 (9279) used greatest stack depth: 21352 bytes left [ 246.880623][ T47] usb 3-1: USB disconnect, device number 21 [ 246.902847][ T5940] corsair-psu 0003:1B1C:1C07.0010: item fetching failed at offset 2/5 [ 246.917799][ T5940] corsair-psu 0003:1B1C:1C07.0010: probe with driver corsair-psu failed with error -22 [ 246.962733][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 246.979282][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 246.994103][ T24] usb 2-1: config 0 has no interface number 0 [ 247.005560][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 247.020602][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 247.038331][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.055841][ T24] usb 2-1: Product: syz [ 247.066424][ T24] usb 2-1: Manufacturer: syz [ 247.077334][ T24] usb 2-1: SerialNumber: syz [ 247.099803][ T24] usb 2-1: config 0 descriptor?? [ 247.110947][ T24] smsc75xx v1.0.0 [ 247.135511][ T47] usb 1-1: USB disconnect, device number 32 [ 247.823209][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 247.863370][ T9306] program syz.2.1104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.875220][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 248.361864][ T5940] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 248.446785][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.874902][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.917750][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.941857][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.966098][ T5940] usb 5-1: config 6 has an invalid interface number: 95 but max is 0 [ 248.966906][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 248.974939][ T5940] usb 5-1: config 6 has no interface number 0 [ 248.997908][ T5940] usb 5-1: config 6 interface 95 has no altsetting 0 [ 249.018582][ T5940] usb 5-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=34.3b [ 249.027767][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.036695][ T5940] usb 5-1: Product: syz [ 249.047142][ T5940] usb 5-1: Manufacturer: syz [ 249.057540][ T5940] usb 5-1: SerialNumber: syz [ 249.079602][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 249.159754][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 249.176318][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 249.302422][ T24] usb 2-1: USB disconnect, device number 26 [ 249.474179][ T9325] 9pnet_fd: p9_fd_create_unix (9325): problem connecting socket: ./cgroup: -111 [ 249.872112][ T30] audit: type=1400 audit(2000000275.085:728): avc: denied { create } for pid=9328 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.901609][ T9334] netlink: 'syz.3.1113': attribute type 2 has an invalid length. [ 249.910666][ T9334] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 249.923176][ T30] audit: type=1400 audit(2000000275.085:729): avc: denied { write } for pid=9328 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 249.944959][ T9335] FAULT_INJECTION: forcing a failure. [ 249.944959][ T9335] name failslab, interval 1, probability 0, space 0, times 0 [ 250.119207][ T9334] netlink: 'syz.3.1113': attribute type 1 has an invalid length. [ 250.121725][ T9335] CPU: 1 UID: 0 PID: 9335 Comm: syz.1.1114 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 250.121746][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.121754][ T9335] Call Trace: [ 250.121759][ T9335] [ 250.121764][ T9335] dump_stack_lvl+0x16c/0x1f0 [ 250.121789][ T9335] should_fail_ex+0x512/0x640 [ 250.121803][ T9335] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 250.121824][ T9335] should_failslab+0xc2/0x120 [ 250.121840][ T9335] __kmalloc_cache_noprof+0x6a/0x3e0 [ 250.121860][ T9335] ? mpls_rtm_newroute+0x56/0x1aa0 [ 250.121881][ T9335] mpls_rtm_newroute+0x56/0x1aa0 [ 250.121902][ T9335] ? __pfx_mpls_rtm_newroute+0x10/0x10 [ 250.121920][ T9335] rtnetlink_rcv_msg+0x3c6/0xe90 [ 250.121944][ T9335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.121970][ T9335] netlink_rcv_skb+0x16a/0x440 [ 250.121989][ T9335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 250.122009][ T9335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.122035][ T9335] ? netlink_deliver_tap+0x1ae/0xd30 [ 250.122056][ T9335] netlink_unicast+0x53a/0x7f0 [ 250.122076][ T9335] ? __pfx_netlink_unicast+0x10/0x10 [ 250.122099][ T9335] netlink_sendmsg+0x8da/0xd70 [ 250.122120][ T9335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.122149][ T9335] ____sys_sendmsg+0xa8d/0xc60 [ 250.122165][ T9335] ? copy_msghdr_from_user+0x10a/0x160 [ 250.122185][ T9335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.122207][ T9335] ___sys_sendmsg+0x134/0x1d0 [ 250.122227][ T9335] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.122264][ T9335] __sys_sendmsg+0x16d/0x220 [ 250.122284][ T9335] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.122308][ T9335] ? rcu_is_watching+0x12/0xc0 [ 250.122326][ T9335] do_syscall_64+0xcd/0x260 [ 250.122346][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.122361][ T9335] RIP: 0033:0x7fecb338d169 [ 250.122374][ T9335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.122387][ T9335] RSP: 002b:00007fecb41fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.122401][ T9335] RAX: ffffffffffffffda RBX: 00007fecb35a5fa0 RCX: 00007fecb338d169 [ 250.122411][ T9335] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 250.122420][ T9335] RBP: 00007fecb41fb090 R08: 0000000000000000 R09: 0000000000000000 [ 250.122428][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.122436][ T9335] R13: 0000000000000000 R14: 00007fecb35a5fa0 R15: 00007ffcb8a59308 [ 250.122453][ T9335] [ 250.492792][ T9337] 9pnet_fd: Insufficient options for proto=fd [ 250.608165][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 250.621677][ T30] audit: type=1400 audit(2000000275.825:730): avc: denied { connect } for pid=9331 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 250.712620][ T5940] gspca_main: kinect-2.14.0 probing 045e:02ae [ 250.731712][ T9336] netlink: 'syz.3.1113': attribute type 3 has an invalid length. [ 251.021886][ T30] audit: type=1400 audit(2000000276.165:731): avc: denied { getopt } for pid=9340 comm="syz.0.1116" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.044323][ T5940] usb 5-1: USB disconnect, device number 21 [ 251.055506][ T9336] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.064349][ T9336] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.073050][ T9336] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.081776][ T9336] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.090453][ T5863] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 251.112927][ T9336] vxlan0: entered promiscuous mode [ 251.272166][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 251.278578][ T5863] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 251.298971][ T5863] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 251.321617][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.329696][ T5863] usb 2-1: Product: syz [ 251.335334][ T9347] trusted_key: encrypted_key: insufficient parameters specified [ 251.338608][ T5863] usb 2-1: Manufacturer: syz [ 251.362715][ T5863] usb 2-1: SerialNumber: syz [ 251.378389][ T5863] usb 2-1: config 0 descriptor?? [ 251.396065][ T9339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.417751][ T5863] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 251.505886][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 251.560533][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 251.607798][ T9365] usb usb8: usbfs: process 9365 (syz.3.1124) did not claim interface 0 before use [ 251.669787][ T24] usb 2-1: USB disconnect, device number 27 [ 251.669874][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 251.791699][ T47] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 251.931748][ T47] usb 5-1: device descriptor read/64, error -71 [ 252.221348][ T9380] FAULT_INJECTION: forcing a failure. [ 252.221348][ T9380] name failslab, interval 1, probability 0, space 0, times 0 [ 252.236610][ T9380] CPU: 0 UID: 0 PID: 9380 Comm: syz.1.1129 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 252.236626][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 252.236632][ T9380] Call Trace: [ 252.236636][ T9380] [ 252.236639][ T9380] dump_stack_lvl+0x16c/0x1f0 [ 252.236657][ T9380] should_fail_ex+0x512/0x640 [ 252.236668][ T9380] should_failslab+0xc2/0x120 [ 252.236680][ T9380] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 252.236692][ T9380] ? skb_clone+0x190/0x3f0 [ 252.236708][ T9380] skb_clone+0x190/0x3f0 [ 252.236723][ T9380] netlink_deliver_tap+0xabd/0xd30 [ 252.236739][ T9380] netlink_unicast+0x5df/0x7f0 [ 252.236753][ T9380] ? __pfx_netlink_unicast+0x10/0x10 [ 252.236770][ T9380] netlink_sendmsg+0x8da/0xd70 [ 252.236784][ T9380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.236802][ T9380] ____sys_sendmsg+0xa8d/0xc60 [ 252.236813][ T9380] ? copy_msghdr_from_user+0x10a/0x160 [ 252.236827][ T9380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.236842][ T9380] ___sys_sendmsg+0x134/0x1d0 [ 252.236857][ T9380] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.236881][ T9380] __sys_sendmsg+0x16d/0x220 [ 252.236896][ T9380] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.236912][ T9380] ? rcu_is_watching+0x12/0xc0 [ 252.236925][ T9380] do_syscall_64+0xcd/0x260 [ 252.236939][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.236950][ T9380] RIP: 0033:0x7fecb338d169 [ 252.236961][ T9380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.236976][ T9380] RSP: 002b:00007fecb41fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.236992][ T9380] RAX: ffffffffffffffda RBX: 00007fecb35a5fa0 RCX: 00007fecb338d169 [ 252.237002][ T9380] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 252.237011][ T9380] RBP: 00007fecb41fb090 R08: 0000000000000000 R09: 0000000000000000 [ 252.237021][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.237031][ T9380] R13: 0000000000000000 R14: 00007fecb35a5fa0 R15: 00007ffcb8a59308 [ 252.237043][ T9380] [ 252.241459][ T9380] syz_tun: entered allmulticast mode [ 252.251623][ T47] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.431608][ T5863] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 252.510418][ T9384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9384 comm=syz.1.1130 [ 253.075767][ T30] audit: type=1400 audit(2000000277.945:732): avc: denied { bind } for pid=9381 comm="syz.3.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.101738][ T30] audit: type=1400 audit(2000000277.955:733): avc: denied { accept } for pid=9381 comm="syz.3.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.122241][ T30] audit: type=1400 audit(2000000278.005:734): avc: denied { getopt } for pid=9381 comm="syz.3.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.161687][ T47] usb 5-1: device descriptor read/64, error -71 [ 253.242057][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 253.250667][ T5863] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 253.264158][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 253.272157][ T5863] usb 1-1: can't read configurations, error -71 [ 253.273859][ T47] usb usb5-port1: attempt power cycle [ 253.712010][ T47] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 253.765119][ T47] usb 5-1: device descriptor read/8, error -71 [ 254.052825][ T47] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 254.082049][ T47] usb 5-1: device descriptor read/8, error -71 [ 254.225849][ T47] usb usb5-port1: unable to enumerate USB device [ 254.617227][ T9] Process accounting resumed [ 254.677906][ T30] audit: type=1400 audit(2000000279.895:735): avc: denied { name_bind } for pid=9425 comm="syz.2.1143" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 254.726058][ T30] audit: type=1400 audit(2000000279.925:736): avc: denied { write } for pid=9428 comm="syz.1.1144" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 254.825318][ T9439] vivid-003: disconnect [ 254.830605][ T30] audit: type=1400 audit(2000000280.045:737): avc: denied { setopt } for pid=9438 comm="syz.1.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 254.882926][ T9438] vivid-003: reconnect [ 254.887994][ T9434] tmpfs: Bad value for 'mpol' [ 255.293755][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.300111][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.462782][ T9453] QAT: Device 198 not found [ 255.533166][ T9454] syz_tun: entered allmulticast mode [ 255.862113][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 256.202248][ T9466] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1154'. [ 256.211837][ T9] usb 4-1: device descriptor read/64, error -71 [ 256.423935][ T30] audit: type=1400 audit(2000000281.645:738): avc: denied { create } for pid=9469 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 256.472763][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 256.475533][ T30] audit: type=1400 audit(2000000281.675:739): avc: denied { read } for pid=5176 comm="acpid" name="event8" dev="devtmpfs" ino=3155 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 256.568048][ T30] audit: type=1400 audit(2000000281.675:740): avc: denied { open } for pid=5176 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3155 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 256.646567][ T30] audit: type=1400 audit(2000000281.675:741): avc: denied { ioctl } for pid=5176 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=3155 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 256.673404][ T9] usb 4-1: device descriptor read/64, error -71 [ 256.701627][ T5863] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 256.712142][ T30] audit: type=1400 audit(2000000281.735:742): avc: denied { connect } for pid=9469 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 256.763518][ T30] audit: type=1400 audit(2000000281.735:743): avc: denied { setopt } for pid=9469 comm="syz.4.1156" laddr=fe80::11 lport=17 faddr=fe80::aa fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 256.821899][ T9] usb usb4-port1: attempt power cycle [ 256.901664][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 256.918247][ T5863] usb 2-1: config 3 has an invalid interface number: 250 but max is 1 [ 256.952161][ T5863] usb 2-1: config 3 has an invalid interface number: 67 but max is 1 [ 256.992988][ T5863] usb 2-1: config 3 has no interface number 0 [ 257.009053][ T5863] usb 2-1: config 3 has no interface number 1 [ 257.016223][ T5863] usb 2-1: config 3 interface 250 altsetting 3 bulk endpoint 0xF has invalid maxpacket 64 [ 257.027166][ T5863] usb 2-1: config 3 interface 250 altsetting 3 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 257.039598][ T5863] usb 2-1: config 3 interface 250 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 257.090047][ T5863] usb 2-1: config 3 interface 250 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 257.140649][ T5863] usb 2-1: config 3 interface 250 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 257.191634][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 257.199368][ T5863] usb 2-1: config 3 interface 250 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 257.216789][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has a duplicate endpoint with address 0xB, skipping [ 257.228537][ T9] usb 4-1: device descriptor read/8, error -71 [ 257.235977][ T5863] usb 2-1: config 3 interface 67 altsetting 2 endpoint 0xE has invalid maxpacket 983, setting to 64 [ 257.248196][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 257.261158][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 257.273513][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has an endpoint descriptor with address 0x13, changing to 0x3 [ 257.285913][ T5863] usb 2-1: config 3 interface 67 altsetting 2 endpoint 0x6 has an invalid bInterval 249, changing to 7 [ 257.298982][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 257.335207][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 257.388209][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 257.415072][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 257.426292][ T5863] usb 2-1: config 3 interface 67 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 257.439851][ T30] audit: type=1400 audit(2000000282.655:744): avc: denied { append } for pid=9480 comm="syz.2.1159" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 257.465147][ T5863] usb 2-1: config 3 interface 67 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 257.476438][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 257.484654][ T30] audit: type=1400 audit(2000000282.685:745): avc: denied { map } for pid=9480 comm="syz.2.1159" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 257.514160][ T5863] usb 2-1: config 3 interface 250 has no altsetting 0 [ 257.524506][ T5863] usb 2-1: config 3 interface 67 has no altsetting 0 [ 257.534170][ T9] usb 4-1: device descriptor read/8, error -71 [ 257.544525][ T5863] usb 2-1: Dual-Role OTG device on HNP port [ 257.550651][ T5863] usb 2-1: New USB device found, idVendor=0411, idProduct=0005, bcdDevice=ea.78 [ 257.560085][ T30] audit: type=1400 audit(2000000282.685:746): avc: denied { execute } for pid=9480 comm="syz.2.1159" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 257.560749][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.620675][ T5863] usb 2-1: Product: syz [ 257.629514][ T5863] usb 2-1: Manufacturer: ఇ [ 257.639720][ T5863] usb 2-1: SerialNumber: syz [ 257.645028][ T9] usb usb4-port1: unable to enumerate USB device [ 257.667114][ T9474] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 257.895408][ T5863] pegasus 2-1:3.250: probe with driver pegasus failed with error -71 [ 257.917915][ T5863] pegasus 2-1:3.67: probe with driver pegasus failed with error -71 [ 257.944855][ T5863] usb 2-1: USB disconnect, device number 28 [ 258.532722][ T9] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 258.591639][ T5863] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 258.691620][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 258.765414][ T5863] usb 3-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 258.774612][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.783129][ T5863] usb 3-1: Product: syz [ 258.787307][ T5863] usb 3-1: Manufacturer: syz [ 258.791994][ T5863] usb 3-1: SerialNumber: syz [ 258.797432][ T5863] usb 3-1: config 0 descriptor?? [ 258.803407][ T5940] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 258.812579][ T5863] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 258.831730][ T9] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 258.861645][ T5868] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 258.971984][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 258.978335][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.989775][ T5940] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 258.998876][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 259.004210][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.011645][ T5868] usb 2-1: Using ep0 maxpacket: 32 [ 259.012498][ T9] usb usb1-port1: attempt power cycle [ 259.024203][ T5940] usb 4-1: config 0 descriptor?? [ 259.027147][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.032586][ T5863] gspca_sn9c20x: Write register 1000 failed -71 [ 259.042836][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.047841][ T5863] gspca_sn9c20x: Device initialization failed [ 259.057300][ T5868] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 259.064371][ T5863] gspca_sn9c20x 3-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 259.080501][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.095230][ T5868] usb 2-1: config 0 descriptor?? [ 259.104050][ T5863] usb 3-1: USB disconnect, device number 22 [ 259.306775][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.316094][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.391639][ T9] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 259.422962][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 259.470123][ T5940] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 259.530155][ T5868] ft260 0003:0403:6030.0012: item fetching failed at offset 0/2 [ 259.538227][ T5868] ft260 0003:0403:6030.0012: failed to parse HID [ 259.545055][ T5868] ft260 0003:0403:6030.0012: probe with driver ft260 failed with error -22 [ 259.564513][ T9] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 259.602610][ T9] usb 1-1: Invalid ep0 maxpacket: 64 [ 259.611914][ T9] usb usb1-port1: unable to enumerate USB device [ 260.559791][ T9494] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 260.647662][ T9503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1167'. [ 260.866056][ T5940] usb 4-1: USB disconnect, device number 35 [ 261.372077][ T5822] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 261.525406][ T5822] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.535503][ T5822] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 261.545953][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.557901][ T5822] usb 5-1: config 0 descriptor?? [ 261.771644][ T5940] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 261.911659][ T47] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 261.977767][ T5822] usbhid 5-1:0.0: can't add hid device: -71 [ 261.984259][ T5822] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 261.996188][ T5822] usb 5-1: USB disconnect, device number 26 [ 262.006134][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 262.024721][ T5940] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 262.033141][ T5940] usb 1-1: config 0 has no interface number 0 [ 262.039385][ T5940] usb 1-1: config 0 interface 184 has no altsetting 0 [ 262.049173][ T5940] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 262.058479][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.062750][ T47] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 262.068892][ T5940] usb 1-1: Product: syz [ 262.078840][ T47] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 262.079283][ T5940] usb 1-1: Manufacturer: syz [ 262.090005][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 262.117217][ T5940] usb 1-1: SerialNumber: syz [ 262.137588][ T5940] usb 1-1: config 0 descriptor?? [ 262.195929][ T5940] smsc75xx v1.0.0 [ 262.481712][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 262.492785][ T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 262.505030][ T47] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.514127][ T47] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.522272][ T47] usb 3-1: Product: syz [ 262.526444][ T47] usb 3-1: Manufacturer: syz [ 262.533671][ T47] cdc_wdm 3-1:1.0: skipping garbage [ 262.538889][ T47] cdc_wdm 3-1:1.0: skipping garbage [ 262.545971][ T47] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 262.552118][ T47] cdc_wdm 3-1:1.0: Unknown control protocol [ 262.622245][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 262.634410][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 263.041099][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 263.048371][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.055119][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.061330][ C1] vkms_vblank_simulate: vblank timer overrun [ 263.067661][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.074254][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.080512][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.087124][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.093867][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.100459][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.106940][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.113527][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.119754][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.126339][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.132626][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.139228][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.145475][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.152068][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.158311][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 263.160499][ T5863] usb 3-1: USB disconnect, device number 23 [ 263.164898][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 263.164914][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 263.282717][ T9] usb 2-1: USB disconnect, device number 29 [ 263.291876][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 263.593237][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 263.611806][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 263.641977][ T5940] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 263.925981][ T5940] usb 1-1: USB disconnect, device number 39 [ 266.442074][ T9570] netlink: 'syz.1.1186': attribute type 2 has an invalid length. [ 266.918726][ T9579] lo speed is unknown, defaulting to 1000 [ 266.941490][ T9585] netlink: 'syz.3.1192': attribute type 2 has an invalid length. [ 266.963038][ T9585] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1192'. [ 269.965360][ T9617] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1200'. [ 271.021698][ T30] audit: type=1400 audit(2000000296.105:747): avc: denied { name_connect } for pid=9628 comm="syz.2.1203" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 272.382606][ T30] audit: type=1400 audit(2000000297.595:748): avc: denied { accept } for pid=9649 comm="syz.2.1210" lport=59606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.628782][ T30] audit: type=1400 audit(2000000297.845:749): avc: denied { ioctl } for pid=9659 comm="syz.1.1211" path="socket:[24248]" dev="sockfs" ino=24248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 273.837116][ T30] audit: type=1400 audit(2000000299.055:750): avc: denied { module_load } for pid=9674 comm="syz.4.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 273.856554][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.035586][ T30] audit: type=1400 audit(2000000299.205:751): avc: denied { module_load } for pid=9674 comm="syz.4.1218" path="/sys/kernel/fscaps" dev="sysfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 274.059342][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.421237][ T9678] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 275.221199][ T9697] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1223'. [ 275.461779][ T5868] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 275.673758][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 275.696366][ T5868] usb 1-1: config 127 has an invalid interface number: 171 but max is 1 [ 275.721303][ T9710] lo speed is unknown, defaulting to 1000 [ 275.732670][ T30] audit: type=1400 audit(2000000300.935:752): avc: denied { setopt } for pid=9668 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 275.767210][ T5868] usb 1-1: config 127 has no interface number 1 [ 275.786906][ T9712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1227'. [ 275.815066][ T5868] usb 1-1: config 127 interface 171 has no altsetting 0 [ 275.834565][ T5868] usb 1-1: config 127 interface 0 has no altsetting 0 [ 275.856397][ T30] audit: type=1400 audit(2000000300.935:753): avc: denied { write } for pid=9668 comm="syz.1.1215" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 275.903476][ T5868] usb 1-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 276.143463][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1229'. [ 276.172757][ T9720] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1229'. [ 277.490694][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.505210][ T5868] usb 1-1: Product: syz [ 277.515224][ T5868] usb 1-1: Manufacturer: syz [ 277.520031][ T5868] usb 1-1: SerialNumber: syz [ 277.903469][ T30] audit: type=1400 audit(2000000303.125:754): avc: denied { mount } for pid=9721 comm="syz.2.1232" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 277.904223][ T5868] xr_serial 1-1:127.171: xr_serial converter detected [ 277.936673][ T9728] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.984947][ T5868] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 277.991408][ T5868] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 278.018863][ T5868] usb 1-1: USB disconnect, device number 40 [ 278.034390][ T5868] xr_serial 1-1:127.171: device disconnected [ 278.161094][ T30] audit: type=1400 audit(2000000303.375:755): avc: denied { create } for pid=9730 comm="syz.3.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 278.197059][ T30] audit: type=1400 audit(2000000303.405:756): avc: denied { create } for pid=9730 comm="syz.3.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.218648][ T30] audit: type=1400 audit(2000000303.405:757): avc: denied { getopt } for pid=9730 comm="syz.3.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.275704][ T30] audit: type=1400 audit(2000000303.405:758): avc: denied { getopt } for pid=9730 comm="syz.3.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 278.310505][ T30] audit: type=1400 audit(2000000303.525:759): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 279.496565][ T30] audit: type=1400 audit(2000000304.635:760): avc: denied { create } for pid=9748 comm="syz.0.1239" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 279.522512][ T30] audit: type=1400 audit(2000000304.645:761): avc: denied { setopt } for pid=9748 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.559387][ T30] audit: type=1400 audit(2000000304.645:762): avc: denied { bind } for pid=9748 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 279.662366][ T30] audit: type=1400 audit(2000000304.645:763): avc: denied { write } for pid=9748 comm="syz.0.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 280.281608][ T5940] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 280.653680][ T5822] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 280.811653][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 280.843197][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.852072][ T5940] usb 2-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 280.971910][ T5863] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 281.643102][ T5940] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 281.663296][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.673277][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 281.695146][ T5822] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.704366][ T5940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 281.705457][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.720978][ T5940] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 281.721453][ T5822] usb 5-1: config 0 descriptor?? [ 281.769692][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.796925][ T5940] usb 2-1: config 0 descriptor?? [ 281.947012][ T5863] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.960792][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 281.967532][ T5863] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 281.979581][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.989390][ T5863] usb 1-1: config 0 descriptor?? [ 282.097334][ T9790] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 282.383045][ T5822] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 282.416615][ T5822] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 282.420197][ T5940] kye 0003:0458:5011.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 282.443074][ T5940] kye 0003:0458:5011.0014: unknown main item tag 0x0 [ 282.454522][ T5940] kye 0003:0458:5011.0014: unknown main item tag 0x0 [ 282.479049][ T5940] kye 0003:0458:5011.0014: unknown main item tag 0x0 [ 282.498767][ T5822] usb 5-1: USB disconnect, device number 27 [ 282.500724][ T5940] kye 0003:0458:5011.0014: unknown main item tag 0x0 [ 282.518772][ T5940] kye 0003:0458:5011.0014: unknown main item tag 0x0 [ 282.531972][ T5940] kye 0003:0458:5011.0014: hidraw0: USB HID v0.05 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 282.544029][ T5940] kye 0003:0458:5011.0014: tablet-enabling feature report not found [ 282.552979][ T5940] kye 0003:0458:5011.0014: tablet enabling failed [ 282.610865][ T5940] usb 2-1: USB disconnect, device number 30 [ 282.676265][ T9787] delete_channel: no stack [ 282.736214][ T5863] kye 0003:0458:5013.0015: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 282.751034][ T5863] kye 0003:0458:5013.0015: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 282.757116][ T9800] netlink: 'syz.3.1254': attribute type 1 has an invalid length. [ 282.763912][ T5863] kye 0003:0458:5013.0015: tablet-enabling feature report not found [ 282.777731][ T5863] kye 0003:0458:5013.0015: tablet enabling failed [ 283.181828][ T9803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 283.316196][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1257'. [ 283.329777][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1257'. [ 283.442361][ T5940] usb 1-1: USB disconnect, device number 41 [ 283.591617][ T47] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 283.681706][ T9819] syz_tun: entered allmulticast mode [ 283.697147][ T9820] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1258'. [ 283.753332][ T9818] syz_tun: left allmulticast mode [ 283.873364][ T47] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.884069][ T47] usb 2-1: not running at top speed; connect to a high speed hub [ 283.900370][ T47] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 283.910768][ T47] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 283.934624][ T47] usb 2-1: config 4 has no interface number 0 [ 283.945213][ T47] usb 2-1: string descriptor 0 read error: -22 [ 283.952049][ T47] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 283.965271][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.978138][ T9823] netlink: 'syz.4.1260': attribute type 10 has an invalid length. [ 283.994403][ T47] usb 2-1: Found UVC 0.02 device (04f2:b746) [ 284.015188][ T47] usb 2-1: No valid video chain found. [ 284.238376][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1262'. [ 284.250284][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 284.250298][ T30] audit: type=1400 audit(2000000309.475:782): avc: denied { map } for pid=9827 comm="syz.4.1262" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.250411][ T30] audit: type=1400 audit(2000000309.475:783): avc: denied { execute } for pid=9827 comm="syz.4.1262" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.289416][ C1] vkms_vblank_simulate: vblank timer overrun [ 284.292897][ T30] audit: type=1400 audit(2000000309.515:784): avc: denied { create } for pid=9827 comm="syz.4.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 284.468432][ T30] audit: type=1400 audit(2000000309.685:785): avc: denied { setopt } for pid=9827 comm="syz.4.1262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 284.519516][ T47] usb 2-1: USB disconnect, device number 31 [ 285.618896][ T30] audit: type=1326 audit(2000000310.835:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9846 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 285.651705][ T9849] syz.1.1269 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 285.665117][ T30] audit: type=1326 audit(2000000310.865:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9846 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 285.691355][ T30] audit: type=1326 audit(2000000310.875:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9846 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 285.760598][ T30] audit: type=1326 audit(2000000310.905:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9846 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 286.589231][ T30] audit: type=1326 audit(2000000310.905:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9846 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 286.591620][ T5868] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 286.640192][ T30] audit: type=1326 audit(2000000310.935:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9846 comm="syz.1.1269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fecb338d169 code=0x7ffc0000 [ 286.844993][ T9876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1277'. [ 286.883504][ T5868] usb 5-1: Invalid ep0 maxpacket: 64 [ 286.991847][ T5822] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 287.021983][ T5868] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 287.168555][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.181288][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.191989][ T5868] usb 5-1: Invalid ep0 maxpacket: 64 [ 287.198481][ T5822] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 287.209339][ T5868] usb usb5-port1: attempt power cycle [ 287.235652][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.302037][ T5822] usb 1-1: config 0 descriptor?? [ 287.621844][ T5868] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 287.912033][ T5868] usb 5-1: Invalid ep0 maxpacket: 64 [ 288.042515][ T5868] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 288.063177][ T5868] usb 5-1: Invalid ep0 maxpacket: 64 [ 288.069435][ T5868] usb usb5-port1: unable to enumerate USB device [ 288.184571][ T5822] logitech 0003:046D:C29C.0016: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 288.522297][ T5940] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 288.646673][ T5822] logitech 0003:046D:C29C.0016: no inputs found [ 288.656719][ T5822] usb 1-1: USB disconnect, device number 42 [ 288.694938][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.705845][ T5940] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.716119][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.725208][ T5940] usb 4-1: config 0 descriptor?? [ 288.775377][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 288.817129][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 288.906329][ T9906] FAULT_INJECTION: forcing a failure. [ 288.906329][ T9906] name failslab, interval 1, probability 0, space 0, times 0 [ 288.921168][ T9906] CPU: 0 UID: 0 PID: 9906 Comm: syz.4.1288 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 288.921193][ T9906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.921202][ T9906] Call Trace: [ 288.921207][ T9906] [ 288.921213][ T9906] dump_stack_lvl+0x16c/0x1f0 [ 288.921241][ T9906] should_fail_ex+0x512/0x640 [ 288.921256][ T9906] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 288.921279][ T9906] should_failslab+0xc2/0x120 [ 288.921297][ T9906] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 288.921313][ T9906] ? __alloc_skb+0x2b2/0x380 [ 288.921338][ T9906] __alloc_skb+0x2b2/0x380 [ 288.921360][ T9906] ? __pfx___alloc_skb+0x10/0x10 [ 288.921384][ T9906] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 288.921410][ T9906] netlink_alloc_large_skb+0x69/0x130 [ 288.921434][ T9906] netlink_sendmsg+0x694/0xd70 [ 288.921459][ T9906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.921487][ T9906] ____sys_sendmsg+0xa8d/0xc60 [ 288.921506][ T9906] ? copy_msghdr_from_user+0x10a/0x160 [ 288.921528][ T9906] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.921552][ T9906] ___sys_sendmsg+0x134/0x1d0 [ 288.921574][ T9906] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.921610][ T9906] __sys_sendmsg+0x16d/0x220 [ 288.921630][ T9906] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.921657][ T9906] ? rcu_is_watching+0x12/0xc0 [ 288.921678][ T9906] do_syscall_64+0xcd/0x260 [ 288.921701][ T9906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.921717][ T9906] RIP: 0033:0x7f5e7038d169 [ 288.921730][ T9906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.921744][ T9906] RSP: 002b:00007f5e71234038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.921759][ T9906] RAX: ffffffffffffffda RBX: 00007f5e705a5fa0 RCX: 00007f5e7038d169 [ 288.921769][ T9906] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 288.921778][ T9906] RBP: 00007f5e71234090 R08: 0000000000000000 R09: 0000000000000000 [ 288.921787][ T9906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.921796][ T9906] R13: 0000000000000000 R14: 00007f5e705a5fa0 R15: 00007ffcd068f158 [ 288.921813][ T9906] [ 289.161623][ T5822] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 289.161683][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 289.177093][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 289.192177][ T9] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 289.217673][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.226124][ T9] usb 3-1: Product: syz [ 289.237181][ T9] usb 3-1: Manufacturer: syz [ 289.458544][ T9] usb 3-1: SerialNumber: syz [ 289.476262][ T9] usb 3-1: config 0 descriptor?? [ 289.482093][ T9900] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 289.494586][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 289.551673][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 289.561390][ T5822] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 289.590811][ T5822] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 289.600590][ T5940] pwc: recv_control_msg error -32 req 02 val 2700 [ 289.604223][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 289.608118][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00 [ 289.634483][ T9913] Bluetooth: MGMT ver 1.23 [ 289.635809][ T5940] pwc: recv_control_msg error -32 req 04 val 1000 [ 289.657072][ T5822] usb 2-1: Product: syz [ 289.661288][ T5822] usb 2-1: Manufacturer: syz [ 289.672199][ T5940] pwc: recv_control_msg error -32 req 04 val 1300 [ 289.675918][ T5822] usb 2-1: SerialNumber: syz [ 289.692177][ T5940] pwc: recv_control_msg error -32 req 04 val 1400 [ 289.714085][ T5940] pwc: recv_control_msg error -32 req 02 val 2000 [ 289.728042][ T9914] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1290'. [ 289.739667][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 289.749207][ T9] usb 3-1: USB disconnect, device number 24 [ 289.759134][ T5822] usb 2-1: config 0 descriptor?? [ 289.760380][ T5940] pwc: recv_control_msg error -71 req 02 val 2100 [ 289.770968][ T9902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 289.781059][ T5940] pwc: recv_control_msg error -71 req 04 val 1500 [ 289.797163][ T5940] pwc: recv_control_msg error -71 req 02 val 2500 [ 289.816002][ T5940] pwc: recv_control_msg error -71 req 02 val 2400 [ 289.836103][ T5940] pwc: recv_control_msg error -71 req 02 val 2600 [ 289.843912][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 289.851008][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 289.859566][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 289.867289][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 289.877048][ T5940] pwc: Registered as video103. [ 289.884180][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 289.899346][ T5940] usb 4-1: USB disconnect, device number 36 [ 289.997353][ T5822] usb 2-1: USB disconnect, device number 32 [ 290.283775][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 290.887315][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 290.906853][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 290.906870][ T30] audit: type=1400 audit(2000000316.125:814): avc: denied { append } for pid=9936 comm="syz.2.1298" name="pfkey" dev="proc" ino=4026533362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 290.913042][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.913065][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 290.913085][ T9] usb 5-1: config 1 has no interface number 1 [ 290.913111][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 290.980343][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 290.993601][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.002863][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.010868][ T9] usb 5-1: Product: syz [ 291.016904][ T9] usb 5-1: Manufacturer: syz [ 291.021517][ T9] usb 5-1: SerialNumber: syz [ 291.241751][ T5822] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 291.531702][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 291.648922][ T30] audit: type=1400 audit(2000000316.865:815): avc: denied { name_bind } for pid=9923 comm="syz.4.1293" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 291.710533][ T5822] usb 1-1: config 0 interface 0 altsetting 234 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.722385][ T5822] usb 1-1: config 0 interface 0 altsetting 234 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.732482][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 291.739272][ T5822] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 291.748521][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.918465][ T5822] usb 1-1: config 0 descriptor?? [ 292.380604][ T9924] kernel read not supported for file /policy (pid: 9924 comm: syz.4.1293) [ 292.390152][ T30] audit: type=1400 audit(2000000317.595:816): avc: denied { module_load } for pid=9923 comm="syz.4.1293" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 292.517413][ T9] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 292.517805][ T5822] kye 0003:0458:501A.0017: control desc unexpectedly large [ 292.553303][ T5822] input: HID 0458:501a as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:501A.0017/input/input25 [ 292.577665][ T9956] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1303'. [ 292.592828][ T5864] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 292.646198][ T9] usb 5-1: USB disconnect, device number 32 [ 292.651455][ T5822] kye 0003:0458:501A.0017: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 292.725478][ T5940] usb 1-1: USB disconnect, device number 43 [ 292.783147][ T5864] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.794291][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 292.822266][ T5864] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 293.010537][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'. [ 293.711904][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.721352][ T5864] usb 2-1: config 0 descriptor?? [ 294.107827][ T9980] x_tables: duplicate underflow at hook 2 [ 294.261755][ T5822] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 294.436393][ T5822] usb 3-1: device descriptor read/64, error -71 [ 294.460455][ T5864] kye 0003:0458:5013.0018: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 294.470978][ T972] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 294.486734][ T5864] kye 0003:0458:5013.0018: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 294.498168][ T5864] kye 0003:0458:5013.0018: tablet-enabling feature report not found [ 294.512288][ T5864] kye 0003:0458:5013.0018: tablet enabling failed [ 294.585220][ T5864] usb 2-1: USB disconnect, device number 33 [ 294.632335][ T972] usb 4-1: Using ep0 maxpacket: 32 [ 294.639146][ T972] usb 4-1: unable to get BOS descriptor or descriptor too short [ 294.647890][ T972] usb 4-1: config 5 has an invalid interface number: 1 but max is 0 [ 294.656005][ T972] usb 4-1: config 5 has no interface number 0 [ 294.663956][ T972] usb 4-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice= f.20 [ 294.673177][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.681144][ T972] usb 4-1: Product: syz [ 294.685343][ T972] usb 4-1: Manufacturer: syz [ 294.689926][ T972] usb 4-1: SerialNumber: syz [ 294.739218][ T5822] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 294.851648][ T5940] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 294.881657][ T5822] usb 3-1: device descriptor read/64, error -71 [ 294.906004][ T9972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.919182][ T972] cdc_subset 4-1:5.1: probe with driver cdc_subset failed with error -22 [ 294.932028][ T972] usb 4-1: USB disconnect, device number 37 [ 294.992000][ T5822] usb usb3-port1: attempt power cycle [ 295.004144][ T5940] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 295.013328][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.021304][ T5940] usb 1-1: Product: syz [ 295.025648][ T5940] usb 1-1: Manufacturer: syz [ 295.030238][ T5940] usb 1-1: SerialNumber: syz [ 295.036399][ T5940] usb 1-1: config 0 descriptor?? [ 295.044021][ T5940] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 044 [ 295.051669][ T5868] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 295.126800][ T30] audit: type=1400 audit(2000000320.345:817): avc: denied { create } for pid=9992 comm="syz.1.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 295.156449][ T9994] lo speed is unknown, defaulting to 1000 [ 295.201590][ T5868] usb 5-1: Using ep0 maxpacket: 8 [ 295.208489][ T5868] usb 5-1: config 1 interface 0 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 32 [ 295.218969][ T5868] usb 5-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.233155][ T5868] usb 5-1: config 1 interface 0 has no altsetting 0 [ 295.266416][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.277142][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.291916][ T5868] usb 5-1: Product: 㾪ﲋﲞ眚蔡齭떰䆃藪뤤୻ﴢ虼Ƴ嘏巩ಸ꽯㷽嗧먄ᆯ뙲ʛ্㤙 [ 295.312442][ T5868] usb 5-1: Manufacturer: Ц [ 295.317279][ T5868] usb 5-1: SerialNumber: 쯺쓘﬏槞翙ത⦫뒻ṋȲ黗℺ᵍ㄰놭欄噌ề䜥꒾常空ѷ梣룱꟝䰌趆䮒艍⺙釼약꣢죃㾯칳䤲㍯ꉇ툽鴓ᨬ蘬⒒ᵌ䖃뀼䮌腟晿Ѻ櫾僠㔺뾠澼ᠰ坉坚퓡侊둠腋ᯔⱣ餴ⲵ냌腓㊌௿ຊ隅鴲뇃储螛ꤗᲴ畖瓷壳迆㷎檯䚏磿৲ꙭ飶˾⪦䥍 [ 295.337287][ T5822] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 295.400786][ T9990] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 295.422512][ T9990] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 295.474011][ T5822] usb 3-1: device descriptor read/8, error -71 [ 295.701518][ T5868] usb 5-1: USB disconnect, device number 33 [ 295.768667][ T5822] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 295.805490][ T5822] usb 3-1: device descriptor read/8, error -71 [ 295.823112][T10002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1314'. [ 295.845848][T10004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10004 comm=syz.1.1315 [ 295.867433][T10004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10004 comm=syz.1.1315 [ 295.892019][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1315'. [ 295.901302][T10004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10004 comm=syz.1.1315 [ 295.931769][ T5822] usb usb3-port1: unable to enumerate USB device [ 295.938397][ T9990] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 295.971657][ T30] audit: type=1400 audit(2000000321.175:818): avc: denied { ioctl } for pid=9989 comm="syz.4.1311" path="socket:[26899]" dev="sockfs" ino=26899 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 296.019831][T10011] FAULT_INJECTION: forcing a failure. [ 296.019831][T10011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.041054][ T5940] (null): failure setting delay to 10us [ 296.047745][ T5940] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 296.058727][ T5940] usb 1-1: USB disconnect, device number 44 [ 296.067128][T10011] CPU: 0 UID: 0 PID: 10011 Comm: syz.1.1317 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 296.067150][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 296.067159][T10011] Call Trace: [ 296.067164][T10011] [ 296.067170][T10011] dump_stack_lvl+0x16c/0x1f0 [ 296.067197][T10011] should_fail_ex+0x512/0x640 [ 296.067216][T10011] _copy_from_user+0x2e/0xd0 [ 296.067233][T10011] copy_msghdr_from_user+0x98/0x160 [ 296.067257][T10011] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 296.067283][T10011] ___sys_sendmsg+0xfe/0x1d0 [ 296.067303][T10011] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.067341][T10011] __sys_sendmsg+0x16d/0x220 [ 296.067361][T10011] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.067385][T10011] ? rcu_is_watching+0x12/0xc0 [ 296.067405][T10011] do_syscall_64+0xcd/0x260 [ 296.067425][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.067439][T10011] RIP: 0033:0x7fecb338d169 [ 296.067452][T10011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.067465][T10011] RSP: 002b:00007fecb41fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.067479][T10011] RAX: ffffffffffffffda RBX: 00007fecb35a5fa0 RCX: 00007fecb338d169 [ 296.067488][T10011] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 296.067497][T10011] RBP: 00007fecb41fb090 R08: 0000000000000000 R09: 0000000000000000 [ 296.067506][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.067515][T10011] R13: 0000000000000000 R14: 00007fecb35a5fa0 R15: 00007ffcb8a59308 [ 296.067531][T10011] [ 296.734492][T10017] netlink: 'syz.1.1318': attribute type 10 has an invalid length. [ 296.752002][T10017] netlink: 'syz.1.1318': attribute type 19 has an invalid length. [ 296.759934][T10017] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1318'. [ 296.832761][ T30] audit: type=1400 audit(2000000322.055:819): avc: denied { bind } for pid=10020 comm="syz.0.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 297.144084][ T30] audit: type=1326 audit(2000000326.340:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d8d8d169 code=0x7ffc0000 [ 297.168232][ T30] audit: type=1326 audit(2000000326.340:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d8d8d169 code=0x7ffc0000 [ 297.192887][ T30] audit: type=1326 audit(2000000326.350:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95d8d8d169 code=0x7ffc0000 [ 297.216704][ T30] audit: type=1326 audit(2000000326.350:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d8d8d169 code=0x7ffc0000 [ 297.240605][ T30] audit: type=1326 audit(2000000326.350:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95d8d8d169 code=0x7ffc0000 [ 297.266483][ T30] audit: type=1326 audit(2000000326.350:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d8d8d169 code=0x7ffc0000 [ 297.291000][ T30] audit: type=1326 audit(2000000326.350:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95d8d8d169 code=0x7ffc0000 [ 297.314841][ T30] audit: type=1326 audit(2000000326.350:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10030 comm="syz.2.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f95d8d8d169 code=0x7ffc0000 [ 297.377915][T10037] program syz.0.1327 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.670998][ T5822] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 297.893245][ T5822] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 297.921591][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.952084][ T5822] usb 1-1: config 0 descriptor?? [ 297.964773][ T5822] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 298.031659][ T5940] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 298.162944][ T5822] gp8psk: usb in 128 operation failed. [ 298.191695][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 298.198037][ T5940] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 298.206895][ T5940] usb 3-1: config 0 has no interface number 0 [ 298.213179][ T5940] usb 3-1: config 0 interface 12 has no altsetting 0 [ 298.221408][ T5940] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 298.221796][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 298.230680][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.246982][ T5940] usb 3-1: Product: syz [ 298.251324][ T5940] usb 3-1: Manufacturer: syz [ 298.257432][ T5940] usb 3-1: SerialNumber: syz [ 298.263252][ T5940] usb 3-1: config 0 descriptor?? [ 298.370384][ T5822] gp8psk: FW Version = 48.28.159 (0x301c9f) Build 2206/163/118 [ 298.381782][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 298.388057][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.396158][ T24] usb 5-1: config 0 has no interface number 0 [ 298.403807][ T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 298.413508][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.421594][ T24] usb 5-1: Product: syz [ 298.425800][ T24] usb 5-1: Manufacturer: syz [ 298.430416][ T24] usb 5-1: SerialNumber: syz [ 298.436522][ T24] usb 5-1: config 0 descriptor?? [ 298.444146][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 298.571450][T10043] 9pnet_fd: Insufficient options for proto=fd [ 298.578790][ T5822] gp8psk: usb in 149 operation failed. [ 298.585981][ T5822] gp8psk: failed to get FPGA version [ 298.591632][ T5822] gp8psk: usb in 138 operation failed. [ 298.597958][ T5822] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 298.608488][ T5822] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 298.629349][ T5822] usb 1-1: USB disconnect, device number 45 [ 298.676399][T10055] netlink: 'syz.2.1334': attribute type 8 has an invalid length. [ 299.004281][ T5940] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71 [ 299.012713][ T5940] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 299.028534][ T5940] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 299.049609][ T5940] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 299.061053][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1340'. [ 299.088409][ T5940] usb 3-1: USB disconnect, device number 29 [ 299.409625][ T5864] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 299.681813][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 299.698405][ T5864] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 299.726298][ T5864] usb 4-1: config 0 has no interface number 0 [ 299.734896][ T5864] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.755750][ T5864] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 299.822405][ T5864] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 299.838128][ T24] gspca_spca1528: reg_w err -110 [ 299.839192][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 299.854166][ T24] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 299.868468][ T5864] usb 4-1: Product: syz [ 299.911758][ T5822] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 300.097433][ T5822] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 300.118431][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.145145][ T5822] usb 1-1: Product: syz [ 300.166393][ T5822] usb 1-1: Manufacturer: syz [ 300.167096][ T5864] usb 4-1: SerialNumber: syz [ 300.175657][ T5822] usb 1-1: SerialNumber: syz [ 300.176855][ T5822] usb 1-1: config 0 descriptor?? [ 300.204060][ T5822] ch341 1-1:0.0: ch341-uart converter detected [ 300.204278][ T5864] usb 4-1: config 0 descriptor?? [ 300.222227][ T5864] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 300.231179][ T5864] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input26 [ 300.405442][T10087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.431758][T10087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.448113][T10076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.462415][T10076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.491703][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 300.743943][T10109] virtio-fs: tag <(null)> not found [ 300.784945][T10111] netlink: 'syz.1.1352': attribute type 11 has an invalid length. [ 300.904874][ T5864] usb 4-1: USB disconnect, device number 38 [ 300.914543][ T5864] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 300.953655][T10116] FAULT_INJECTION: forcing a failure. [ 300.953655][T10116] name failslab, interval 1, probability 0, space 0, times 0 [ 300.981646][T10116] CPU: 0 UID: 0 PID: 10116 Comm: syz.1.1353 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 300.981675][T10116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.981683][T10116] Call Trace: [ 300.981688][T10116] [ 300.981693][T10116] dump_stack_lvl+0x16c/0x1f0 [ 300.981721][T10116] should_fail_ex+0x512/0x640 [ 300.981736][T10116] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 300.981754][T10116] should_failslab+0xc2/0x120 [ 300.981771][T10116] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 300.981786][T10116] ? __alloc_skb+0x2b2/0x380 [ 300.981808][T10116] __alloc_skb+0x2b2/0x380 [ 300.981826][T10116] ? __pfx___alloc_skb+0x10/0x10 [ 300.981847][T10116] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 300.981870][T10116] netlink_alloc_large_skb+0x69/0x130 [ 300.981890][T10116] netlink_sendmsg+0x694/0xd70 [ 300.981912][T10116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.981936][T10116] ____sys_sendmsg+0xa8d/0xc60 [ 300.981952][T10116] ? copy_msghdr_from_user+0x10a/0x160 [ 300.981972][T10116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.981994][T10116] ___sys_sendmsg+0x134/0x1d0 [ 300.982015][T10116] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.982052][T10116] __sys_sendmsg+0x16d/0x220 [ 300.982072][T10116] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.982096][T10116] ? rcu_is_watching+0x12/0xc0 [ 300.982114][T10116] do_syscall_64+0xcd/0x260 [ 300.982135][T10116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.982149][T10116] RIP: 0033:0x7fecb338d169 [ 300.982162][T10116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.982175][T10116] RSP: 002b:00007fecb41fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.982189][T10116] RAX: ffffffffffffffda RBX: 00007fecb35a5fa0 RCX: 00007fecb338d169 [ 300.982198][T10116] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 300.982206][T10116] RBP: 00007fecb41fb090 R08: 0000000000000000 R09: 0000000000000000 [ 300.982214][T10116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.982222][T10116] R13: 0000000000000000 R14: 00007fecb35a5fa0 R15: 00007ffcb8a59308 [ 300.982237][T10116] [ 301.242602][ T24] usb 5-1: USB disconnect, device number 34 [ 301.330210][T10120] vivid-002: ================= START STATUS ================= [ 301.340428][T10120] vivid-002: Radio HW Seek Mode: Bounded [ 301.349826][T10120] vivid-002: Radio Programmable HW Seek: false [ 301.356275][T10120] vivid-002: RDS Rx I/O Mode: Block I/O [ 301.379248][T10120] vivid-002: Generate RBDS Instead of RDS: false [ 301.414360][T10120] vivid-002: RDS Reception: true [ 301.424266][T10120] vivid-002: RDS Program Type: 0 inactive [ 301.440565][T10120] vivid-002: RDS PS Name: inactive [ 301.455920][T10120] vivid-002: RDS Radio Text: inactive [ 301.465327][ T5822] ch341-uart ttyUSB0: failed to read break control: -71 [ 301.476589][ T5822] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 301.481803][T10120] vivid-002: RDS Traffic Announcement: false inactive [ 301.492449][T10120] vivid-002: RDS Traffic Program: false inactive [ 301.512100][T10120] vivid-002: RDS Music: false inactive [ 301.520583][T10120] vivid-002: ================== END STATUS ================== [ 301.524296][ T5822] usb 1-1: USB disconnect, device number 46 [ 301.548489][ T5822] ch341 1-1:0.0: device disconnected [ 301.646793][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 301.646808][ T30] audit: type=1400 audit(2000000330.870:933): avc: denied { mount } for pid=10124 comm="syz.4.1357" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 301.720566][T10129] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 301.737047][T10129] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 10129, name: syz.4.1357 [ 301.754655][T10129] preempt_count: 0, expected: 0 [ 301.757393][ T30] audit: type=1400 audit(2000000330.980:934): avc: denied { append } for pid=10131 comm="syz.3.1359" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 301.760069][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 301.791816][T10129] RCU nest depth: 1, expected: 0 [ 301.792861][T10128] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 301.796830][T10129] 4 locks held by syz.4.1357/10129: [ 301.831692][T10129] #0: ffff88805caa69b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 301.847554][T10129] #1: ffff88805e2b0148 (&type->i_mutex_dir_key#10){.+.+}-{4:4}, at: iterate_dir+0x18b/0xb40 [ 301.889578][T10129] #2: ffffffff8e3be140 (rcu_read_lock){....}-{1:3}, at: afs_dynroot_readdir+0x619/0xf50 [ 301.917268][T10129] #3: ffff888028249fe0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x35/0x6e0 [ 301.938119][ T30] audit: type=1400 audit(2000000331.160:935): avc: denied { ioctl } for pid=10131 comm="syz.3.1359" path="socket:[27453]" dev="sockfs" ino=27453 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.963078][T10129] CPU: 1 UID: 0 PID: 10129 Comm: syz.4.1357 Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 301.963105][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.963114][T10129] Call Trace: [ 301.963119][T10129] [ 301.963126][T10129] dump_stack_lvl+0x16c/0x1f0 [ 301.963154][T10129] __might_resched+0x3c0/0x5e0 [ 301.963174][T10129] ? find_held_lock+0x2b/0x80 [ 301.963189][T10129] ? __pfx___might_resched+0x10/0x10 [ 301.963210][T10129] prepare_alloc_pages.constprop.0+0x3da/0x570 [ 301.963235][T10129] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 301.963254][T10129] ? __lock_acquire+0x5ca/0x1ba0 [ 301.963277][T10129] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.963294][T10129] ? lock_acquire+0x179/0x350 [ 301.963315][T10129] ? page_ext_put+0x3e/0xd0 [ 301.963332][T10129] ? page_ext_put+0x48/0xd0 [ 301.963344][T10129] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.963366][T10129] ? policy_nodemask+0xea/0x4e0 [ 301.963383][T10129] alloc_pages_mpol+0x1fb/0x540 [ 301.963400][T10129] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.963416][T10129] ? __lock_acquire+0x5ca/0x1ba0 [ 301.963438][T10129] folio_alloc_mpol_noprof+0x36/0x2f0 [ 301.963457][T10129] vma_alloc_folio_noprof+0xed/0x1e0 [ 301.963475][T10129] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 301.963497][T10129] do_pte_missing+0x2049/0x3ea0 [ 301.963517][T10129] __handle_mm_fault+0x1043/0x2a50 [ 301.963535][T10129] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.963557][T10129] ? find_vma+0xbf/0x140 [ 301.963575][T10129] ? __pfx_find_vma+0x10/0x10 [ 301.963595][T10129] handle_mm_fault+0x3fa/0xaa0 [ 301.963613][T10129] do_user_addr_fault+0x7a9/0x1430 [ 301.963634][T10129] exc_page_fault+0x5c/0xc0 [ 301.963653][T10129] asm_exc_page_fault+0x26/0x30 [ 301.963668][T10129] RIP: 0010:filldir+0x2b7/0x5f0 [ 301.963688][T10129] Code: e8 1e f8 84 ff 0f 01 cb 0f ae e8 48 8b 04 24 49 89 47 08 e8 0b f8 84 ff 4c 8b 7c 24 30 48 8b 44 24 10 49 89 07 e8 f9 f7 84 ff <66> 45 89 6f 10 e8 ef f7 84 ff 49 63 f5 0f b6 7c 24 1c 48 89 34 24 [ 301.963701][T10129] RSP: 0018:ffffc90002e77c68 EFLAGS: 00050287 [ 301.963714][T10129] RAX: 000000000000039c RBX: ffffc90002e77e80 RCX: ffffc9000e949000 [ 301.963724][T10129] RDX: 0000000000080000 RSI: ffffffff82361a37 RDI: 0000000000000006 [ 301.963733][T10129] RBP: 0000200000002008 R08: 0000000000000006 R09: 0000200000001fd8 [ 301.963742][T10129] R10: 0000200000002008 R11: 0000000000000000 R12: 0000000000000003 [ 301.963751][T10129] R13: 0000000000000018 R14: ffff88803514c541 R15: 0000200000001ff0 [ 301.963766][T10129] ? filldir+0x2b7/0x5f0 [ 301.963786][T10129] ? filldir+0x2b7/0x5f0 [ 301.963809][T10129] afs_dynroot_readdir+0x9bb/0xf50 [ 301.963828][T10129] ? __pfx_filldir+0x10/0x10 [ 301.963849][T10129] ? __pfx_afs_dynroot_readdir+0x10/0x10 [ 301.963865][T10129] ? selinux_file_permission+0x11f/0x580 [ 301.963889][T10129] iterate_dir+0x293/0xb40 [ 301.963911][T10129] __x64_sys_getdents+0x14d/0x2c0 [ 301.963930][T10129] ? __x64_sys_futex+0x1e9/0x4c0 [ 301.963948][T10129] ? __pfx___x64_sys_getdents+0x10/0x10 [ 301.963968][T10129] ? xfd_validate_state+0x5d/0x180 [ 301.963981][T10129] ? __pfx_filldir+0x10/0x10 [ 301.964001][T10129] ? rcu_is_watching+0x12/0xc0 [ 301.964020][T10129] do_syscall_64+0xcd/0x260 [ 301.964040][T10129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.964055][T10129] RIP: 0033:0x7f5e7038d169 [ 301.964067][T10129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.964080][T10129] RSP: 002b:00007f5e71213038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 301.964093][T10129] RAX: ffffffffffffffda RBX: 00007f5e705a6080 RCX: 00007f5e7038d169 [ 301.964106][T10129] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000005 [ 301.964115][T10129] RBP: 00007f5e7040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 301.964124][T10129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.964133][T10129] R13: 0000000000000000 R14: 00007f5e705a6080 R15: 00007ffcd068f158 [ 301.964150][T10129] [ 302.355793][ T30] audit: type=1400 audit(2000000331.160:936): avc: denied { create } for pid=10131 comm="syz.3.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 302.376507][ T30] audit: type=1400 audit(2000000331.160:937): avc: denied { write } for pid=10131 comm="syz.3.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 302.397061][ T30] audit: type=1400 audit(2000000331.160:938): avc: denied { nlmsg_read } for pid=10131 comm="syz.3.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 302.430782][ T30] audit: type=1400 audit(2000000331.650:939): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1