last executing test programs: 17m18.698155457s ago: executing program 4 (id=515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x2860020, &(0x7f0000000180)=ANY=[]) r1 = getpid() socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r5, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r8, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r8, 0x0, r7, 0x0, 0x4, 0x0) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000400)={0x0, 0x0}) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000080)='//', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005b9b302a481609743176291c23578b8bf7b66f535e0b93c9f3f1b59881b6ea3373021b6aa285b7d716a94edfa90aa22e9ee2ef5b23d8ac9e0a4df788f9556d5f4559b84d2c6dba6a1798c2865c59081a5b44a20c4ffafb1b3ee33401804026d3c95476f5418aba68b148", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000200"/25], 0x48) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m15.152598491s ago: executing program 4 (id=518): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 17m10.969293915s ago: executing program 4 (id=523): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) r1 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) r2 = socket(0x28, 0x5, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DISCONNECT(r1, 0xab08) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x10, 0x1, 0x9, 0x10, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x64, 0x0, 0x1, 0x0, 0x0, @multicast2, @remote, {[@generic={0x83, 0xa, "d4a4e87aa7c0f2ad"}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="d95c00"/20, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="02000000a569eb7758db24767d435ebe1a0300000003000000000000"], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000100)=0xcb, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b0000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a"], 0x10c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[]) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 17m10.120493201s ago: executing program 4 (id=525): creat(&(0x7f0000000000)='./file0/../file0\x00', 0xecf86c37d53049c9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 17m9.002310614s ago: executing program 4 (id=528): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000800000e000000080026007f1700000800270002"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff080d340e}, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x80, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000f7ffffffffffc0ce92839983ba945d8c001a0074765f74b635c901810f00003100"/49], 0x2c}}, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r5, 0x0, 0x0, 0x12141, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100004650d310450c0a8047db010203010902120001000000000904"], 0x0) 17m4.790810239s ago: executing program 4 (id=534): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x1, 0x1, 0x40000003, 0x13}, {0x3, 0x2, 0x1, 0x1}, {0x2, 0x1, 0xb, 0x1}], 0x10, 0x8a, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 16m48.120894302s ago: executing program 32 (id=534): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x1, 0x1, 0x40000003, 0x13}, {0x3, 0x2, 0x1, 0x1}, {0x2, 0x1, 0xb, 0x1}], 0x10, 0x8a, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 9.035398518s ago: executing program 0 (id=4411): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 8.55644252s ago: executing program 0 (id=4415): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c40)={0x84, 0x0, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x1}, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x2}}, 0x0, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x3}, 0x0, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, &(0x7f0000000b00)={0x40, 0x19, 0x2, 'Vn'}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0xf8}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x82, 0xfffffffffffffd6e, &(0x7f0000000140)="16688a4a3f1cd2db8dcf350051f14ac00d7c36e54167f08f961d2fc0c37d7c8c2136536697a794f470c5f444560dedb1b190fa34325a3c256fb8b4e2297215f331") 7.855214047s ago: executing program 0 (id=4423): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.854202654s ago: executing program 0 (id=4424): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 7.821772878s ago: executing program 0 (id=4425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) 7.662554439s ago: executing program 0 (id=4426): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000003000000000c0002"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 7.493617432s ago: executing program 33 (id=4426): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000003000000000c0002"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 6.464130927s ago: executing program 5 (id=4434): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x12) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(&(0x7f0000000140), 0x1, 0x8000) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r4 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00012b247000ffdbdf2522cc8d9a7573b819fdc765f0430549c33cba34eff41c6797feb1b89a5929cdd4627544fa310080c0fbde26dd0aef175d756dfc1cc4cc425ade16dde483632cfc1690fa219a3f37aeefa2d871bf2de2f62664daabe3b9718d4ea01de4be6232f3f5bc916954de9114ccd292cf1f52935cf3c6c436bec444ae169e418e1009466e2468d6ed96b3802279dced370a03287d6e63a5833b96168da58ca21e5c5fe00bfb13a691a35c4d4adb39768513826f3fd6609cec97d3faf460e197f2df1c4e62e72e512a55d4526893a3cd822be94c897050d113e3e1eba47fd0e033b092e3748e2df1ddb5", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)="fc719c3a11d423cdbdcec5") write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="25000000030000000000000000000000010000000000000004"], 0x25) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 6.125863607s ago: executing program 3 (id=4435): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052", 0xde}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300", 0xb8}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba0459", 0x44}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.179214938s ago: executing program 3 (id=4438): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) 3.896262265s ago: executing program 3 (id=4445): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x10, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @control}], 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, 0x0, &(0x7f0000000340)=""/39}, 0x20) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 3.592077875s ago: executing program 2 (id=4447): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052", 0xde}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad", 0x24}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300", 0xb8}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba0459", 0x44}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.019485035s ago: executing program 3 (id=4449): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x3125899, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x202) 2.939562708s ago: executing program 3 (id=4450): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000a40)={0x20, 0x16, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.743978491s ago: executing program 5 (id=4452): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 2.691619802s ago: executing program 5 (id=4453): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_open_dev$video(&(0x7f0000000100), 0x9, 0x8400) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) eventfd2(0x4, 0x801) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x101, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x5, 0x2}) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@private, @in6=@local}}, {{@in=@local}, 0x0, @in=@dev}}, 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) 2.691242918s ago: executing program 2 (id=4454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.622731658s ago: executing program 1 (id=4455): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x20004000) 2.47034688s ago: executing program 3 (id=4456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}}, 0x0) 2.469296196s ago: executing program 2 (id=4457): write$sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) 1.68473571s ago: executing program 34 (id=4456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xfc}}, 0x0) 1.675416665s ago: executing program 5 (id=4459): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x0, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x10, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @control}], 0x1c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, 0x0, &(0x7f0000000340)=""/39}, 0x20) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405668, &(0x7f0000000100)={0x0, 0x1, 0x2}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) 1.578170686s ago: executing program 1 (id=4460): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) fchown(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 1.503825213s ago: executing program 2 (id=4461): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.315515744s ago: executing program 1 (id=4462): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x20, 0xa}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0) 1.263630827s ago: executing program 2 (id=4463): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r0, r0, 0x0, 0x0) 1.165143598s ago: executing program 2 (id=4464): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000340)={0x20, 0x7}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x5}}) 1.137434341s ago: executing program 5 (id=4465): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x4c}}, 0x0) 1.077211897s ago: executing program 5 (id=4466): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000a40)={0x20, 0x16, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="001494"], 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 735.388405ms ago: executing program 1 (id=4467): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 622.939237ms ago: executing program 1 (id=4468): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x20004000) 0s ago: executing program 1 (id=4469): write$sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) kernel console output (not intermixed with test programs): . [ 1271.239463][T18705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.252977][ T9211] Bluetooth: hci3: command tx timeout [ 1271.352608][ T7962] IPVS: stop unused estimator thread 0... [ 1271.626045][T18705] hsr_slave_0: entered promiscuous mode [ 1271.632757][T18705] hsr_slave_1: entered promiscuous mode [ 1271.639240][T18705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1271.647836][T18705] Cannot create hsr debugfs directory [ 1271.951906][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3555'. [ 1272.270505][T18873] netlink: 'syz.3.3563': attribute type 1 has an invalid length. [ 1272.284094][T18869] netlink: 'syz.1.3564': attribute type 10 has an invalid length. [ 1272.290191][T18873] netlink: 'syz.3.3563': attribute type 4 has an invalid length. [ 1272.307628][T18869] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1272.313689][T18877] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3561'. [ 1272.321906][T18705] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1272.335911][T18873] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1272.366806][T18705] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1272.448685][ T30] audit: type=1400 audit(1746503192.114:584): avc: denied { read } for pid=18868 comm="syz.1.3564" lport=41894 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1272.525357][T18705] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1272.568069][T18705] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1272.796845][T18705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1272.840901][T18705] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.863695][T18910] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1272.898331][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.905528][ T7962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.952719][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.959863][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.334483][ T9211] Bluetooth: hci3: command tx timeout [ 1273.356315][T18705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.159117][T18705] veth0_vlan: entered promiscuous mode [ 1274.207859][T18705] veth1_vlan: entered promiscuous mode [ 1274.305332][T18705] veth0_macvtap: entered promiscuous mode [ 1274.327486][T18966] xt_CT: No such helper "pptp" [ 1274.331877][T18705] veth1_macvtap: entered promiscuous mode [ 1274.375283][T18705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.414317][T18705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.450485][T18705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.478640][T18705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.488827][T18705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1274.499638][T18705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.512299][T18705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.549303][T18986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.566864][T18705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.590083][T18705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.611766][T18705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.630389][T18705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.652570][T18705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1274.664976][T18981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.673825][T18705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1274.731303][T18705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1274.747122][T18986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.750515][T18705] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.790258][T18705] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.810164][T18705] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.818890][T18705] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.086966][T15021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.131695][T15021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.159661][T15021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.178267][T15021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.416795][ T9211] Bluetooth: hci3: command tx timeout [ 1275.434940][T19011] bridge0: entered promiscuous mode [ 1275.567260][T19011] macvlan3: entered promiscuous mode [ 1275.639929][T19018] macvlan4: entered promiscuous mode [ 1275.827277][T19029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3612'. [ 1276.470561][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1276.720965][T19049] syz_tun: entered promiscuous mode [ 1276.729489][T19049] syz_tun: left promiscuous mode [ 1276.750881][T19051] netlink: 'syz.0.3622': attribute type 72 has an invalid length. [ 1276.764692][T19051] netlink: 'syz.0.3622': attribute type 8 has an invalid length. [ 1276.881276][T19062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3625'. [ 1277.129088][T19071] netlink: 'syz.5.3629': attribute type 24 has an invalid length. [ 1277.560821][T19086] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1277.590388][T19088] netlink: 'syz.0.3635': attribute type 72 has an invalid length. [ 1277.650595][T19088] netlink: 'syz.0.3635': attribute type 8 has an invalid length. [ 1277.851283][T19095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'. [ 1277.866094][T19095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3638'. [ 1277.958171][T19099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19099 comm=syz.5.3640 [ 1278.334355][T19116] netlink: 'syz.2.3647': attribute type 10 has an invalid length. [ 1278.839349][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3659'. [ 1279.129210][T19152] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3663'. [ 1279.166848][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1279.652460][T19169] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 1279.736229][T19175] netlink: 892 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1279.927172][T19187] netlink: 'syz.1.3677': attribute type 1 has an invalid length. [ 1279.936382][T19187] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3677'. [ 1281.266772][T19237] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3694'. [ 1281.670658][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1281.744151][T19271] netlink: 'syz.3.3704': attribute type 1 has an invalid length. [ 1281.770743][T19271] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3704'. [ 1281.813104][ T9211] Bluetooth: hci3: command tx timeout [ 1281.865595][T19276] netlink: 'syz.0.3706': attribute type 24 has an invalid length. [ 1282.109456][T19286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1282.208692][T19300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'. [ 1282.722647][T19286] bond1 (unregistering): Released all slaves [ 1282.908780][T19294] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3711'. [ 1283.147847][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3717'. [ 1284.489954][T19362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1284.541034][T19367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1285.026168][T19362] bond1 (unregistering): Released all slaves [ 1285.253971][T19394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3731'. [ 1285.510408][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3742'. [ 1285.605643][T19417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1285.624361][T19417] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1286.704898][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1287.217816][T19498] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3778'. [ 1287.375688][T19505] netlink: 'syz.0.3780': attribute type 24 has an invalid length. [ 1287.490535][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3784'. [ 1288.414872][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3807'. [ 1288.537913][T19569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1288.549865][T19568] netlink: 'syz.3.3808': attribute type 24 has an invalid length. [ 1288.570199][T19569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1288.588007][T19569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1288.606318][T19569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1289.303703][T19603] netlink: 'syz.5.3825': attribute type 24 has an invalid length. [ 1289.467768][T19612] bond0: (slave bond1): Error -95 calling ndo_bpf [ 1289.495435][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3830'. [ 1289.567773][T19612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1289.584536][T19612] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1289.719495][T19625] netlink: 'syz.1.3832': attribute type 1 has an invalid length. [ 1289.754089][T19625] netlink: 'syz.1.3832': attribute type 4 has an invalid length. [ 1289.776045][T19625] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.3832'. [ 1289.844675][ T30] audit: type=1400 audit(1746503209.514:585): avc: denied { setopt } for pid=19630 comm="syz.0.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1289.870881][T19631] netlink: 'syz.0.3836': attribute type 39 has an invalid length. [ 1289.899607][T19631] syz_tun (unregistering): left promiscuous mode [ 1290.010152][T14991] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1290.162177][T14991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.180089][T14991] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1290.180090][T13958] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1290.221841][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.235145][T14991] usb 6-1: config 0 descriptor?? [ 1290.266626][T14991] pwc: Askey VC010 type 2 USB webcam detected. [ 1290.278961][T19637] netlink: 'syz.0.3840': attribute type 24 has an invalid length. [ 1290.331542][T13958] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1290.356628][T13958] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1290.371792][T13958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.387945][T13958] usb 3-1: Product: syz [ 1290.400209][T13958] usb 3-1: Manufacturer: syz [ 1290.410726][T13958] usb 3-1: SerialNumber: syz [ 1290.466845][T14991] pwc: send_video_command error -71 [ 1290.474777][T14991] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1290.490095][T14991] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1290.518582][T14991] usb 6-1: USB disconnect, device number 51 [ 1290.800092][ T5860] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1290.828175][T19615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.836952][T19615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.849414][T13958] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1290.961169][ T5860] usb 1-1: not running at top speed; connect to a high speed hub [ 1290.969855][ T5860] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 1290.978119][ T5860] usb 1-1: config 95 has no interface number 0 [ 1290.984476][ T5860] usb 1-1: config 95 interface 1 has no altsetting 0 [ 1290.993765][ T5860] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1291.002902][T14991] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1291.010600][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.018584][ T5860] usb 1-1: Product: syz [ 1291.023131][ T5860] usb 1-1: Manufacturer: syz [ 1291.028549][ T5860] usb 1-1: SerialNumber: syz [ 1291.184728][T14991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.195315][T14991] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1291.205325][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.210884][ T30] audit: type=1400 audit(1746503210.874:586): avc: denied { read write } for pid=19613 comm="syz.2.3829" name="lp0" dev="devtmpfs" ino=3578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1291.230252][T14991] usb 6-1: config 0 descriptor?? [ 1291.250325][T14991] pwc: Askey VC010 type 2 USB webcam detected. [ 1291.263162][ T30] audit: type=1400 audit(1746503210.874:587): avc: denied { open } for pid=19613 comm="syz.2.3829" path="/dev/usb/lp0" dev="devtmpfs" ino=3578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1291.302317][ T5860] usb 1-1: USB disconnect, device number 50 [ 1291.354125][T19370] udevd[19370]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1291.623021][ T30] audit: type=1400 audit(1746503211.294:588): avc: denied { append } for pid=19671 comm="syz.1.3850" name="event2" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1291.652306][T14991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1291.673405][T14991] pwc: recv_control_msg error -32 req 02 val 2700 [ 1291.691231][T14991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1291.699543][T14991] pwc: recv_control_msg error -32 req 04 val 1000 [ 1291.709208][T14991] pwc: recv_control_msg error -32 req 04 val 1300 [ 1291.716872][T14991] pwc: recv_control_msg error -32 req 04 val 1400 [ 1291.725584][T14991] pwc: recv_control_msg error -32 req 02 val 2000 [ 1291.733847][T14991] pwc: recv_control_msg error -32 req 02 val 2100 [ 1291.741593][T14991] pwc: recv_control_msg error -32 req 04 val 1500 [ 1291.748748][T14991] pwc: recv_control_msg error -32 req 02 val 2500 [ 1291.762123][T14991] pwc: recv_control_msg error -32 req 02 val 2400 [ 1291.816364][T19679] __nla_validate_parse: 1 callbacks suppressed [ 1291.816381][T19679] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1291.892969][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3852'. [ 1291.975091][T14991] pwc: recv_control_msg error -71 req 02 val 2900 [ 1291.988087][T14991] pwc: recv_control_msg error -71 req 02 val 2800 [ 1291.995783][T14991] pwc: recv_control_msg error -71 req 04 val 1100 [ 1292.006104][T14991] pwc: recv_control_msg error -71 req 04 val 1200 [ 1292.017971][T14991] pwc: Registered as video103. [ 1292.034907][T14991] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 1292.065558][T14991] usb 6-1: USB disconnect, device number 52 [ 1292.126512][T19688] netlink: 'syz.3.3855': attribute type 10 has an invalid length. [ 1292.137660][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1292.147587][T19688] openvswitch: netlink: Flow key attr not present in new flow. [ 1292.204286][T19690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3856'. [ 1292.388044][T19699] netlink: 'syz.3.3859': attribute type 24 has an invalid length. [ 1292.573576][T19705] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3861'. [ 1292.588453][T19705] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1292.606303][ T30] audit: type=1400 audit(1746503212.274:589): avc: denied { create } for pid=19706 comm="syz.1.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1292.627076][ T30] audit: type=1400 audit(1746503212.274:590): avc: denied { write } for pid=19706 comm="syz.1.3862" path="socket:[58820]" dev="sockfs" ino=58820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1292.652161][ T30] audit: type=1400 audit(1746503212.274:591): avc: denied { nlmsg_read } for pid=19706 comm="syz.1.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1292.673049][T14991] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 1292.683239][ T30] audit: type=1400 audit(1746503212.294:592): avc: denied { create } for pid=19706 comm="syz.1.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1292.704231][ T30] audit: type=1400 audit(1746503212.294:593): avc: denied { ioctl } for pid=19706 comm="syz.1.3862" path="socket:[58829]" dev="sockfs" ino=58829 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1292.772458][ C0] usblp0: nonzero write bulk status received: -71 [ 1292.780690][T13958] usb 3-1: USB disconnect, device number 61 [ 1292.802492][T19613] usblp0: removed [ 1292.845354][T14991] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1292.870898][T14991] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1292.879976][T14991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.900782][T14991] usb 1-1: Product: syz [ 1292.905017][T14991] usb 1-1: Manufacturer: syz [ 1292.909641][T14991] usb 1-1: SerialNumber: syz [ 1292.989126][T19720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1293.003682][T19720] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1293.015523][T19720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1293.025993][T19720] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3868'. [ 1293.391364][T19685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.426374][T19685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.459563][T14991] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1293.578082][T19744] netlink: 'syz.2.3877': attribute type 1 has an invalid length. [ 1293.611919][T19744] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3877'. [ 1293.906506][ T30] audit: type=1400 audit(1746503213.574:594): avc: denied { allowed } for pid=19757 comm="syz.1.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1293.912529][T19760] netlink: 'syz.2.3883': attribute type 1 has an invalid length. [ 1294.640201][ T971] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1294.780135][T14991] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1294.790246][ T971] usb 2-1: Using ep0 maxpacket: 16 [ 1294.797412][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.810078][ T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.820717][ T971] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1294.829777][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.839442][ T971] usb 2-1: config 0 descriptor?? [ 1294.933319][T14991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.944418][T14991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.954289][T14991] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1294.963451][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.973311][T14991] usb 6-1: config 0 descriptor?? [ 1295.003647][T14981] usb 1-1: USB disconnect, device number 51 [ 1295.023027][T14981] usblp0: removed [ 1295.267754][ T971] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0027/input/input35 [ 1295.439446][ T971] appleir 0003:05AC:8241.0027: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 1295.450556][T14991] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 1295.479131][T14991] cm6533_jd 0003:0D8C:0022.0028: item fetching failed at offset 1/5 [ 1295.492937][T14991] cm6533_jd 0003:0D8C:0022.0028: parse failed [ 1295.499641][T14991] cm6533_jd 0003:0D8C:0022.0028: probe with driver cm6533_jd failed with error -22 [ 1295.638021][ T971] usb 6-1: USB disconnect, device number 53 [ 1295.846454][T19817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.859761][T19817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.980234][ T5860] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1296.024190][T14981] usb 2-1: USB disconnect, device number 57 [ 1296.140075][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 1296.156916][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1296.181677][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1296.203372][ T5860] usb 4-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=54.42 [ 1296.227935][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.252266][ T5860] usb 4-1: config 0 descriptor?? [ 1296.272785][ T5860] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1296.491733][T19816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.504645][T19816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.516586][ T971] usb 4-1: USB disconnect, device number 77 [ 1296.667963][ T30] audit: type=1400 audit(1746503216.334:595): avc: denied { unmount } for pid=18163 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1296.970129][T13958] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1297.130854][T13958] usb 6-1: Using ep0 maxpacket: 32 [ 1297.142972][T13958] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1297.157921][T13958] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1297.160452][T14981] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1297.182357][T13958] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1297.205900][T13958] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1297.219454][T13958] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1297.228934][T13958] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1297.238948][T13958] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1297.247706][T13958] usb 6-1: Product: syz [ 1297.252220][T13958] usb 6-1: Manufacturer: syz [ 1297.258025][T13958] usb 6-1: SerialNumber: syz [ 1297.266529][T13958] usb 6-1: config 0 descriptor?? [ 1297.280808][T13958] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1297.293889][T13958] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1297.372947][T14981] usb 2-1: Using ep0 maxpacket: 8 [ 1297.399700][T14981] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1297.416743][T14981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1297.429334][T14981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1297.443590][T14981] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1297.459615][T14981] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1297.471281][T14981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.482286][T14981] usb 2-1: Product: syz [ 1297.486516][T14981] usb 2-1: Manufacturer: syz [ 1297.495476][T14981] usb 2-1: SerialNumber: syz [ 1297.511216][T14981] usb 2-1: config 0 descriptor?? [ 1297.544039][T14981] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 1297.648539][T19895] __nla_validate_parse: 3 callbacks suppressed [ 1297.648556][T19895] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3939'. [ 1297.664834][T19895] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3939'. [ 1297.691602][ T5860] usb 6-1: USB disconnect, device number 54 [ 1297.693234][T19855] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1297.697574][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 1297.727947][T19897] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 1297.737761][ T5860] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1297.840402][T14981] rc_core: IR keymap rc-imon-pad not found [ 1297.846378][T14981] Registered IR keymap rc-empty [ 1297.852280][T14981] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1297.866913][T14981] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1297.870125][ T971] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1297.915588][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3941'. [ 1298.001891][T14981] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1298.017714][T14981] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 1298.071767][ T971] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1298.083886][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.092116][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.100999][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.102941][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.108987][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.125107][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.133250][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.141320][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.141665][ T971] usb 1-1: config 0 descriptor?? [ 1298.150099][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.163262][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.171574][T14981] imon 2-1:0.0: iMON device (15c2:003b, intf0) on usb<2:58> initialized [ 1298.180124][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.188278][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.196712][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.204911][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.212849][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.220794][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.228704][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.236625][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.243789][T19863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.244820][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.265138][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.273081][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.281021][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.288932][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.297144][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.303563][T19863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.305263][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.320562][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.328481][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.336466][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.344337][ T5860] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1298.344393][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.359828][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.367920][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.370194][T13958] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1298.376013][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.391121][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.399435][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.407343][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.415259][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.423165][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.431093][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.439004][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.446999][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.455446][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.463379][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.471269][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.479287][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.487198][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.495122][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.503467][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.511393][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.519451][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.527389][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.535742][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.543974][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.552061][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.559999][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.567924][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.575891][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.583824][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.591794][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.599753][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.608065][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.615914][ T5860] usb 6-1: Using ep0 maxpacket: 32 [ 1298.621085][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.628874][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.632835][T13958] usb 4-1: Using ep0 maxpacket: 32 [ 1298.636700][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.649663][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.657580][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.665496][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.667042][T13958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.673419][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.673606][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.700455][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.708851][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.716763][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.725369][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.726373][T19863] imon:vfd_write: invalid payload size [ 1298.733286][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.733475][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.755280][T13958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.755694][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.773767][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.781669][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.789565][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.796089][T13958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1298.797450][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.820398][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.829728][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.837924][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.846190][T13958] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1298.850076][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.863594][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.871504][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.879373][T13958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.879430][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.895208][ T5860] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1298.895321][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.911856][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.919682][ T5860] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1298.930687][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.938529][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.942172][T13958] usb 4-1: config 0 descriptor?? [ 1298.946371][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.959178][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.967052][ T5860] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1298.967115][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.986066][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1298.993898][ T5860] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1299.003350][ T5858] usb 2-1: USB disconnect, device number 58 [ 1299.007360][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1299.021961][ T5860] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1299.030508][ T5860] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1299.039566][ T5860] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1299.048459][ T5860] usb 6-1: Product: syz [ 1299.052872][ T5860] usb 6-1: Manufacturer: syz [ 1299.057477][ T5860] usb 6-1: SerialNumber: syz [ 1299.064479][ T5860] usb 6-1: config 0 descriptor?? [ 1299.072031][ T5860] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1299.092954][ T5860] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1299.159321][T19921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3950'. [ 1299.168728][T19921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3950'. [ 1299.246503][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1299.308152][ T5860] usb 6-1: USB disconnect, device number 55 [ 1299.316237][ T5860] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 1299.449830][T13958] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0029/input/input38 [ 1299.544183][T13958] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0029/input/input39 [ 1299.623383][T13958] kye 0003:0458:5011.0029: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1299.735532][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.827460][T19896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.845561][T19896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.898607][T19942] netlink: 'syz.1.3959': attribute type 24 has an invalid length. [ 1299.958440][T19946] syz_tun: entered promiscuous mode [ 1299.969435][T19946] syz_tun: left promiscuous mode [ 1300.013158][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3963'. [ 1300.180322][T13958] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1300.236653][T19961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3967'. [ 1300.330104][T13958] usb 3-1: Using ep0 maxpacket: 16 [ 1300.336636][T13958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.348448][T13958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.358301][T13958] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1300.367411][T13958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.378525][T13958] usb 3-1: config 0 descriptor?? [ 1300.422689][T19969] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3970'. [ 1300.571707][ C0] kye 0003:0458:5011.0029: usb_submit_urb(ctrl) failed: -1 [ 1300.582678][ T971] pegasus 1-1:0.0: setup Pegasus II specific registers [ 1300.703577][ T971] pegasus 1-1:0.0: can't locate MII phy, using default [ 1300.726415][ T971] pegasus 1-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 42:a5:45:51:54:fd [ 1300.747617][ T971] usb 1-1: USB disconnect, device number 52 [ 1300.814355][T13958] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.002A/input/input40 [ 1300.941795][T13958] appleir 0003:05AC:8241.002A: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 1301.095991][T15021] syzkaller0: tun_net_xmit 76 [ 1301.116020][T15021] syzkaller0: tun_net_xmit 48 [ 1301.122644][ T971] syzkaller0: tun_net_xmit 76 [ 1301.143740][ T971] usb 3-1: USB disconnect, device number 62 [ 1301.183883][T13958] syzkaller0: tun_net_xmit 76 [ 1301.283060][T19998] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3974'. [ 1301.369852][ T5902] usb 4-1: USB disconnect, device number 78 [ 1301.486598][T20011] capability: warning: `syz.3.3977' uses 32-bit capabilities (legacy support in use) [ 1301.980513][ T5860] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1302.150129][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 1302.158033][ T5860] usb 3-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.171211][ T5860] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 1302.181420][ T5860] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 1302.192148][ T5860] usb 3-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1302.205342][ T5860] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1302.214113][ T5860] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1302.224125][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1302.233092][ T5860] usb 3-1: SerialNumber: syz [ 1302.241798][T20022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1302.250691][T20022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1302.478132][T20022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1302.485502][T20022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1302.927670][ T5860] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1302.975600][T20030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3981'. [ 1303.068068][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 1303.177416][T20044] netlink: 'syz.5.3985': attribute type 39 has an invalid length. [ 1303.335694][T20058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3989'. [ 1304.033023][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68! [ 1304.042966][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 01! [ 1304.052358][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 0a! [ 1304.061775][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 07! [ 1304.069193][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 09! [ 1304.077071][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 0f! [ 1304.085694][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 13! [ 1304.093689][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 19! [ 1304.105971][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 1a! [ 1304.120237][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 1c! [ 1304.288489][T20084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3998'. [ 1304.440481][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 1304.458110][ T5902] usb 3-1: USB disconnect, device number 63 [ 1304.479960][ T5902] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1304.812169][T20109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4004'. [ 1307.761021][ T5888] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1308.004675][ T5888] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1308.043242][ T5888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1308.063085][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.105781][ T5888] usb 2-1: Product: syz [ 1308.119226][ T5888] usb 2-1: Manufacturer: syz [ 1308.139122][ T5888] usb 2-1: SerialNumber: syz [ 1308.598634][T20152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.615227][T20152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.652000][ T5888] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1308.897706][ T30] audit: type=1400 audit(1746503228.564:596): avc: denied { read write } for pid=20231 comm="syz.0.4039" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1308.931454][ T30] audit: type=1400 audit(1746503228.564:597): avc: denied { open } for pid=20231 comm="syz.0.4039" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1309.953843][T20258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input41 [ 1310.908233][ C1] usblp0: nonzero write bulk status received: -71 [ 1310.943846][ T5902] usb 2-1: USB disconnect, device number 59 [ 1310.990568][ T5902] usblp0: removed [ 1312.096613][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4056'. [ 1312.115459][ T30] audit: type=1400 audit(1746503231.784:598): avc: denied { mounton } for pid=20296 comm="syz.2.4056" path="/165/file0" dev="tmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1312.227950][T20307] netlink: 'syz.3.4058': attribute type 24 has an invalid length. [ 1316.622568][ T30] audit: type=1400 audit(1746503236.294:599): avc: denied { connect } for pid=20361 comm="syz.0.4078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1316.983782][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1317.077485][T20377] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4083'. [ 1317.189685][T20384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4084'. [ 1317.470079][T14991] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 1317.591322][T20397] netlink: 'syz.3.4090': attribute type 1 has an invalid length. [ 1317.599125][T20397] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4090'. [ 1317.634404][T14991] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1317.643359][T14991] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1317.652903][T20399] tipc: Started in network mode [ 1317.656553][T14991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.658172][T20399] tipc: Node identity 080211000001, cluster identity 4711 [ 1317.665854][T14991] usb 2-1: Product: syz [ 1317.677848][T14991] usb 2-1: Manufacturer: syz [ 1317.678435][T20399] tipc: Enabled bearer , priority 0 [ 1317.683959][T14991] usb 2-1: SerialNumber: syz [ 1317.709232][T20399] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 1317.716820][T20399] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 1317.885385][ T30] audit: type=1400 audit(1746503237.514:600): avc: denied { mount } for pid=20400 comm="syz.3.4092" name="/" dev="rpc_pipefs" ino=60851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1318.220708][ T5860] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1318.310766][ T30] audit: type=1400 audit(1746503237.524:601): avc: denied { unmount } for pid=20400 comm="syz.3.4092" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1318.532930][ T5860] usb 4-1: device descriptor read/64, error -71 [ 1318.586653][T14991] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1318.800512][ T5902] tipc: Node number set to 134418688 [ 1318.860190][ T5860] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1319.090866][ T5860] usb 4-1: device descriptor read/64, error -71 [ 1319.250138][ T9211] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1319.276334][ T5860] usb usb4-port1: attempt power cycle [ 1319.720871][ T5860] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1319.804586][ T5860] usb 4-1: device descriptor read/8, error -71 [ 1319.841308][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4095'. [ 1319.907672][T20419] syzkaller1: entered promiscuous mode [ 1319.916369][T20419] syzkaller1: entered allmulticast mode [ 1320.076541][T20424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1320.094330][T20424] bond0: (slave bond3): Enslaving as an active interface with an up link [ 1320.580446][ T5888] usb 2-1: USB disconnect, device number 60 [ 1320.600206][ T5860] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1320.609804][ T5888] usblp0: removed [ 1320.623773][ T5860] usb 4-1: device descriptor read/8, error -71 [ 1320.655273][T20432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1320.869405][ T5860] usb usb4-port1: unable to enumerate USB device [ 1321.332172][ T5860] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1321.358748][T20445] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4107'. [ 1321.474059][T20451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4111'. [ 1321.621694][ T5860] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1321.630658][ T5860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1321.639778][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.658152][ T5860] usb 1-1: Product: syz [ 1321.743404][T20459] can0: slcan on ptm0. [ 1321.809137][ T5860] usb 1-1: Manufacturer: syz [ 1321.911916][ T5860] usb 1-1: SerialNumber: syz [ 1322.117516][T20464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4115'. [ 1322.207736][ T30] audit: type=1400 audit(1746503241.874:602): avc: denied { read } for pid=20467 comm="syz.1.4116" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1322.237269][ T30] audit: type=1400 audit(1746503241.874:603): avc: denied { open } for pid=20467 comm="syz.1.4116" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1322.421863][T20454] can0 (unregistered): slcan off ptm0. [ 1322.926822][ T30] audit: type=1400 audit(1746503242.214:604): avc: denied { create } for pid=20468 comm="syz.2.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1322.978754][ T30] audit: type=1400 audit(1746503242.264:605): avc: denied { sys_admin } for pid=20468 comm="syz.2.4117" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1323.049422][T20469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1323.101227][T20469] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1323.202382][T20469] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1323.238579][T20469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1323.418542][T20469] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1323.602689][T20469] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1323.622475][T20500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1323.630528][T20500] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1323.655675][T20469] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1323.676531][T20469] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1323.750275][T20469] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1323.760461][T20469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1323.768183][T20469] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1323.798780][T20469] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1323.806654][T20469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1323.814172][T20469] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1323.825934][T20469] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1323.893147][ T30] audit: type=1400 audit(1746503243.564:606): avc: denied { name_bind } for pid=20512 comm="syz.1.4125" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1323.949709][ T5860] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1323.997893][T20517] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.4127'. [ 1324.010123][ T5860] usb 1-1: USB disconnect, device number 53 [ 1324.047733][ T5860] usblp0: removed [ 1324.324292][T20537] netlink: 'syz.3.4133': attribute type 39 has an invalid length. [ 1324.452779][T20540] can0: slcan on ptm0. [ 1324.500692][T13353] Bluetooth: hci0: command 0x0c1a tx timeout [ 1324.530428][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1324.733289][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1324.767210][ T24] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1324.787254][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1324.827763][ T24] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1324.845859][ T24] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1324.863869][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1324.872910][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1324.886789][ T24] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1324.895684][ T24] usb 3-1: Product: syz [ 1324.899965][ T24] usb 3-1: Manufacturer: syz [ 1324.906377][ T24] usb 3-1: SerialNumber: syz [ 1324.914246][ T24] usb 3-1: config 0 descriptor?? [ 1324.922918][ T24] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1324.936990][ T24] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1324.994379][T20548] netlink: 'syz.1.4135': attribute type 10 has an invalid length. [ 1325.015752][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1325.026213][T20548] openvswitch: netlink: Flow key attr not present in new flow. [ 1325.034950][T20528] can0 (unregistered): slcan off ptm0. [ 1325.260209][T13353] Bluetooth: hci1: command 0x0c1a tx timeout [ 1325.303833][T20531] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1325.307563][ T5888] usb 3-1: USB disconnect, device number 64 [ 1325.311178][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1325.333416][ T5888] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1325.348015][T20566] ldusb: No device or device unplugged -19 [ 1325.741328][T13353] Bluetooth: hci4: command 0x0c1a tx timeout [ 1325.801771][T20595] netlink: 'syz.3.4142': attribute type 24 has an invalid length. [ 1325.810355][T13353] Bluetooth: hci3: command 0x0405 tx timeout [ 1325.818295][T13353] Bluetooth: hci2: command 0x0c1a tx timeout [ 1325.944288][T20552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1325.950544][T20552] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1325.956562][T20552] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1325.962846][T20552] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1325.968845][T20552] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1326.097195][T20600] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 1326.115557][T20600] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 1326.220119][ T24] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1326.837074][T20620] can0: slcan on ptm0. [ 1327.192664][ T9211] Bluetooth: hci0: command 0x0c1a tx timeout [ 1327.262156][T20602] can0 (unregistered): slcan off ptm0. [ 1327.475798][T20632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4156'. [ 1327.523545][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1327.536484][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1327.550681][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.558936][ T24] usb 6-1: Product: syz [ 1327.567185][ T24] usb 6-1: Manufacturer: syz [ 1327.572633][ T24] usb 6-1: SerialNumber: syz [ 1327.970475][ T9211] Bluetooth: hci3: command 0x0405 tx timeout [ 1327.970495][T13353] Bluetooth: hci2: command 0x0c1a tx timeout [ 1327.970508][T20596] Bluetooth: hci4: command 0x0c1a tx timeout [ 1327.976557][T13353] Bluetooth: hci1: command 0x0c1a tx timeout [ 1329.405818][T20654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4164'. [ 1329.570129][T20630] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1329.572664][ T9211] Bluetooth: hci0: command 0x0c1a tx timeout [ 1330.073812][ T9211] Bluetooth: hci2: command 0x0c1a tx timeout [ 1330.077843][T20646] Bluetooth: hci4: command 0x0c1a tx timeout [ 1330.080516][T20596] Bluetooth: hci3: command 0x0405 tx timeout [ 1330.368062][T20630] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1330.379846][T20630] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1330.387087][T20630] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1330.395791][T20630] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1330.480173][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1330.529273][ T24] usb 6-1: USB disconnect, device number 56 [ 1330.571123][ T24] usblp0: removed [ 1330.922405][T20674] can0: slcan on ptm0. [ 1331.444940][T20662] can0 (unregistered): slcan off ptm0. [ 1331.599751][T20705] syzkaller1: entered promiscuous mode [ 1331.608449][T20705] syzkaller1: entered allmulticast mode [ 1331.650069][T20596] Bluetooth: hci1: command 0x0c1a tx timeout [ 1332.100450][ T5902] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1332.385607][ T5888] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1332.420198][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 1332.427376][ T5902] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1332.435765][ T5902] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1332.446892][ T5902] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1332.450124][T20596] Bluetooth: hci3: command 0x0405 tx timeout [ 1332.458435][T20646] Bluetooth: hci2: command 0x0c1a tx timeout [ 1332.464103][ T9211] Bluetooth: hci4: command 0x0c1a tx timeout [ 1332.551497][T20742] can0: slcan on ptm0. [ 1332.902338][ T5902] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1332.916283][ T5902] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1332.925169][ T5902] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1332.934495][ T5902] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1332.950049][ T5902] usb 4-1: Product: syz [ 1332.954213][ T5902] usb 4-1: Manufacturer: syz [ 1332.958780][ T5902] usb 4-1: SerialNumber: syz [ 1332.975851][ T5902] usb 4-1: config 0 descriptor?? [ 1332.993864][ T5902] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1333.014292][ T5888] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1333.026463][ T5902] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1333.041989][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1333.065528][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.090053][ T5888] usb 1-1: Product: syz [ 1333.094242][ T5888] usb 1-1: Manufacturer: syz [ 1333.098842][ T5888] usb 1-1: SerialNumber: syz [ 1333.172109][T20738] can0 (unregistered): slcan off ptm0. [ 1333.406131][T20771] netlink: 'syz.5.4193': attribute type 5 has an invalid length. [ 1333.415588][T20771] netlink: 980 bytes leftover after parsing attributes in process `syz.5.4193'. [ 1333.443768][T20768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1333.454314][T20768] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1333.559747][T20709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.581239][T20709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.717164][T20778] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4195'. [ 1333.728263][T20778] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4195'. [ 1333.737730][T20778] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4195'. [ 1333.748099][T20778] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4195'. [ 1334.581287][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4201'. [ 1334.651839][ T24] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1334.806362][ T5888] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 54 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1334.810665][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1334.837789][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.850918][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.863473][T20815] serio: Serial port ptm0 [ 1334.869252][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1334.878754][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.888704][ T24] usb 6-1: config 0 descriptor?? [ 1335.033200][T14991] usb 1-1: USB disconnect, device number 54 [ 1335.049283][T14991] usblp1: removed [ 1335.314431][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.002B/input/input42 [ 1335.421110][ T24] appleir 0003:05AC:8241.002B: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 1335.516809][T20835] netlink: 'syz.0.4212': attribute type 39 has an invalid length. [ 1335.940194][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1336.106483][ T24] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1336.146258][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.203091][ T24] usb 3-1: config 0 descriptor?? [ 1337.216447][T14991] usb 6-1: USB disconnect, device number 57 [ 1337.866397][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 1337.921341][T20888] netlink: 'syz.0.4234': attribute type 39 has an invalid length. [ 1338.302319][T20718] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1338.331486][ T5861] usb 4-1: USB disconnect, device number 83 [ 1338.354138][ T5861] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1338.548073][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4244'. [ 1338.610526][T20646] Bluetooth: hci0: command 0x0c1a tx timeout [ 1338.620072][T20858] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1338.948362][ T24] pegasus 3-1:0.0: setup Pegasus II specific registers [ 1339.126954][ T24] pegasus 3-1:0.0: can't locate MII phy, using default [ 1339.201034][ T24] pegasus 3-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 0e:39:7e:2f:de:1c [ 1339.322111][T20858] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1339.332511][T20858] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1339.338573][T20858] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1339.351167][T20858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1339.389467][ T5888] usb 3-1: USB disconnect, device number 65 [ 1339.640253][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'. [ 1340.331073][ T5902] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1340.500624][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 1340.522916][ T5902] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1340.554326][ T5902] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1340.605512][ T5902] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1340.636691][ T5902] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1340.641635][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1340.652236][ T5902] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1340.770081][T20646] Bluetooth: hci1: command 0x0c1a tx timeout [ 1340.812508][ T5902] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1340.852443][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1340.854945][ T5902] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1340.868806][ T5902] usb 6-1: Product: syz [ 1340.886678][ T5902] usb 6-1: Manufacturer: syz [ 1341.313366][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1341.323396][T20981] ubi31: attaching mtd0 [ 1341.324500][ T24] usb 3-1: config 0 has no interface number 0 [ 1341.410650][T20646] Bluetooth: hci3: command 0x0405 tx timeout [ 1341.417329][T20646] Bluetooth: hci2: command 0x0c1a tx timeout [ 1341.423807][ T9211] Bluetooth: hci4: command 0x0c1a tx timeout [ 1341.440402][T20981] ubi31: scanning is finished [ 1341.445279][T20981] ubi31: empty MTD device detected [ 1341.456112][ T5902] usb 6-1: SerialNumber: syz [ 1341.559945][ T5902] usb 6-1: config 0 descriptor?? [ 1341.569419][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1341.594253][ T5902] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1341.609214][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.631199][ T24] usb 3-1: Product: syz [ 1341.635389][ T24] usb 3-1: Manufacturer: syz [ 1341.668535][ T24] usb 3-1: SerialNumber: syz [ 1341.675200][ T5902] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1341.684838][ T24] usb 3-1: config 0 descriptor?? [ 1341.713955][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1341.829977][T20981] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1341.925389][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1341.956462][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1342.028442][T21000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1342.045348][T21000] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1342.309963][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 1342.547354][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1342.557179][ T24] usb 3-1: USB disconnect, device number 66 [ 1342.637182][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1342.800288][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1342.846921][ T24] quatech2 3-1:0.51: device disconnected [ 1343.456269][ T5902] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1343.653808][ T5902] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1343.663206][ T5902] usb 2-1: config 0 has no interface number 0 [ 1343.671757][ T5902] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1343.681006][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.689625][T21030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4275'. [ 1343.700835][ T5902] usb 2-1: config 0 descriptor?? [ 1343.710370][ T5861] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 1343.710512][ T5902] usb 2-1: selecting invalid altsetting 1 [ 1343.726847][ T5902] dvb_ttusb_budget: ttusb_init_controller: error [ 1343.740084][ T5902] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1343.827014][ T5902] DVB: Unable to find symbol cx22700_attach() [ 1343.905096][ T5861] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1343.911000][T21037] ubi31: attaching mtd0 [ 1343.946255][T21037] ubi31: scanning is finished [ 1343.980515][ T5861] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1344.077794][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.194765][ T5861] usb 4-1: Product: syz [ 1344.215477][ T5861] usb 4-1: Manufacturer: syz [ 1344.329208][ T5902] DVB: Unable to find symbol tda10046_attach() [ 1344.335994][ T5902] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1344.336865][ T5861] usb 4-1: SerialNumber: syz [ 1344.445810][ T5888] usb 2-1: USB disconnect, device number 61 [ 1344.498060][T21037] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1344.513247][T21037] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1344.522667][T21037] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1344.532451][T21037] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1344.545262][T21037] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1344.553306][T21037] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1344.566106][T21037] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3222546625 [ 1344.591052][T21037] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1344.603995][T21044] ubi31: background thread "ubi_bgt31d" started, PID 21044 [ 1344.838457][T21016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.853133][T21016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.865507][ T5861] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 84 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1345.762582][T21065] netlink: 'syz.0.4286': attribute type 39 has an invalid length. [ 1346.656998][T21078] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4291'. [ 1346.861006][T20942] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1346.903799][ T5861] usb 6-1: USB disconnect, device number 58 [ 1346.919247][ T5861] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1347.231500][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4295'. [ 1347.362839][ T5888] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1347.450989][T21097] netlink: 'syz.0.4298': attribute type 39 has an invalid length. [ 1347.530488][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 1347.538220][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.552986][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.563250][T21101] netlink: 'syz.0.4300': attribute type 1 has an invalid length. [ 1347.571758][T21101] netlink: 'syz.0.4300': attribute type 4 has an invalid length. [ 1347.579637][ T5888] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1347.589208][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.601051][T21101] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.4300'. [ 1347.622245][ T5888] usb 2-1: config 0 descriptor?? [ 1347.790440][ T5861] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1347.884492][ T5902] usb 4-1: USB disconnect, device number 84 [ 1347.898453][ T5902] usblp1: removed [ 1347.946224][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.957840][ T5861] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.974105][ T5861] usb 6-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1347.983825][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.997904][ T5861] usb 6-1: config 0 descriptor?? [ 1348.038098][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 1348.051143][ T5888] usbhid 2-1:0.0: can't add hid device: -71 [ 1348.057152][ T5888] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1348.068693][ T5888] usb 2-1: USB disconnect, device number 62 [ 1348.320213][ T5902] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1348.360073][ T5860] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1348.419652][ T5861] logitech-djreceiver 0003:046D:C534.002C: item fetching failed at offset 4/5 [ 1348.428920][ T5861] logitech-djreceiver 0003:046D:C534.002C: logi_dj_probe: parse failed [ 1348.437808][ T5861] logitech-djreceiver 0003:046D:C534.002C: probe with driver logitech-djreceiver failed with error -22 [ 1348.470170][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 1348.477129][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.488345][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1348.500396][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1348.511596][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.527254][ T5902] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1348.537015][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.549417][ T5860] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1348.553073][ T5902] usb 4-1: Product: syz [ 1348.561398][ T5860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1348.570463][ T5902] usb 4-1: Manufacturer: syz [ 1348.570482][ T5902] usb 4-1: SerialNumber: syz [ 1348.576566][ T5902] usb 4-1: config 0 descriptor?? [ 1348.598646][ T5902] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 1348.608813][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.627175][ T5860] usb 1-1: Product: syz [ 1348.650458][ T5860] usb 1-1: Manufacturer: syz [ 1348.655861][ T5860] usb 1-1: SerialNumber: syz [ 1348.667287][ T24] usb 6-1: USB disconnect, device number 59 [ 1348.736991][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4309'. [ 1348.808453][T21125] netlink: 'syz.1.4311': attribute type 39 has an invalid length. [ 1348.893419][ T5902] rc_core: IR keymap rc-imon-pad not found [ 1348.899393][ T5902] Registered IR keymap rc-empty [ 1348.904612][ T5902] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1348.918473][ T5902] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1349.022093][ T5902] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1349.047489][ T5902] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input44 [ 1349.070621][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.078570][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.086871][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.089959][T21109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.095050][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.105894][T21109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.113315][ T5902] imon 4-1:0.0: iMON device (15c2:003b, intf0) on usb<4:85> initialized [ 1349.118629][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.127100][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.134916][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.142917][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.150732][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.152438][ T5860] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 55 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1349.158517][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.190074][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.198665][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.206598][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.220070][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.227972][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.235868][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.241858][T21135] can0: slcan on ptm0. [ 1349.243787][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.260051][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.267952][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.275859][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.283799][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.300518][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.308622][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.316530][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.324446][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.332368][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.350047][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.357969][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.365875][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.373803][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.381728][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.389647][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.400478][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.408632][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.416593][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.424535][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.432444][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.440360][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.448260][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.456161][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.464078][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.472045][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.479949][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.487862][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.500593][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.508700][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.516595][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.524515][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.532416][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.540324][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.548218][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.556133][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.564066][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.572125][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.580049][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.587953][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.595875][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.610541][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.618132][T21145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4315'. [ 1349.618605][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.640075][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.647996][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.656701][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.664620][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.672520][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.680433][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.688362][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.696243][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.710505][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.718631][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.726543][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.734466][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.742381][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.750304][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.758203][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.766088][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.773996][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.781889][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.789793][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.797705][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.810513][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.818653][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.826553][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.834473][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.842391][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.850304][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.858190][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.866100][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.873996][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.881876][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.889790][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.897819][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.910513][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.918641][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.926563][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.934480][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.942415][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.950335][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.958231][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.966128][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.974071][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.981971][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.989877][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1349.997802][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.005711][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.020575][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.028689][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.036583][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.044517][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.052480][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.060401][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.063646][T21129] can0 (unregistered): slcan off ptm0. [ 1350.068275][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.090065][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.097978][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.105880][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.117870][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.126079][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.134190][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.142294][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.150203][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.158115][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.166026][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.173933][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.181842][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.189746][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.197646][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.205561][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.214027][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.221988][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.229899][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.237796][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.245707][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.251952][T21162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4318'. [ 1350.253622][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.271152][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.279085][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.286992][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.294967][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.302895][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.310814][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.319640][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.327547][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.335502][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.343410][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.351324][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.359231][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.367137][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.375068][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.382978][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.391905][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.399861][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.407895][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.415729][ T5902] usb 4-1: USB disconnect, device number 85 [ 1350.421702][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1350.699324][ T30] audit: type=1326 audit(1746503270.364:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21167 comm="syz.5.4319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f818e78e969 code=0x0 [ 1350.739333][ T30] audit: type=1326 audit(1746503270.404:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1351.132150][ T5861] usb 1-1: USB disconnect, device number 55 [ 1351.139707][ T30] audit: type=1326 audit(1746503270.434:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1351.164062][ T5861] usblp1: removed [ 1351.202665][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1351.270489][ T30] audit: type=1326 audit(1746503270.434:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1351.322854][ T30] audit: type=1326 audit(1746503270.434:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1351.896955][ T30] audit: type=1326 audit(1746503270.434:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1351.934713][ T30] audit: type=1326 audit(1746503270.434:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1352.039355][ T30] audit: type=1326 audit(1746503270.434:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1352.089862][ T30] audit: type=1326 audit(1746503270.434:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1352.138024][ T30] audit: type=1326 audit(1746503270.434:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21169 comm="syz.1.4321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5178e969 code=0x7ffc0000 [ 1352.300164][ T5902] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1352.451733][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 1352.463881][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1352.477816][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1352.497640][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1352.508706][ T971] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1352.520648][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1352.535802][ T5902] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1352.545274][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.556111][ T5902] usb 4-1: Product: syz [ 1352.560507][ T5902] usb 4-1: Manufacturer: syz [ 1352.565099][ T5902] usb 4-1: SerialNumber: syz [ 1352.596123][ T5902] usb 4-1: config 0 descriptor?? [ 1352.612595][ T5902] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45 [ 1352.670843][ T971] usb 6-1: Using ep0 maxpacket: 32 [ 1352.678775][ T971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1352.703502][ T971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.718673][ T971] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1352.733450][ T971] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1352.742809][ T971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.755434][ T971] usb 6-1: config 0 descriptor?? [ 1352.900145][ T5902] rc_core: IR keymap rc-imon-pad not found [ 1352.906056][ T5902] Registered IR keymap rc-empty [ 1352.915068][ T5902] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1352.927812][ T5902] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1352.941611][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1353.043020][ T5902] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1353.054509][ T5902] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input46 [ 1353.074483][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.082942][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.091217][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.099124][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.107314][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.115309][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.123181][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.131132][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.139018][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.146927][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.155145][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.163067][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.170963][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.178863][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.188244][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.196367][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.204259][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.212191][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.220078][ T5861] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1353.220095][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.236590][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.244608][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.252700][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.260622][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.268541][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.276456][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.290290][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.298455][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.306351][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.314269][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.322151][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.330050][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.337956][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.345866][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.353764][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.361654][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.369549][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.377455][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.385350][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.396234][ T5902] imon 4-1:0.0: iMON device (15c2:003b, intf0) on usb<4:86> initialized [ 1353.405446][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.413708][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.413947][ T5861] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1353.421552][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.422000][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.438881][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4340'. [ 1353.448006][ T971] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002D/input/input47 [ 1353.452909][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.464410][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.472254][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.472930][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1353.480065][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.480278][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.480478][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.480675][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.530429][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.538513][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.546432][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.554340][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.562252][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.563641][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.570139][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.570333][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.570512][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.602451][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.610694][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.617481][ T5861] usb 1-1: Product: syz [ 1353.619314][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.631254][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.639199][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.647030][ T5902] usb 4-1: USB disconnect, device number 86 [ 1353.648191][ T5861] usb 1-1: Manufacturer: syz [ 1353.652994][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored [ 1353.712180][ T5861] usb 1-1: SerialNumber: syz [ 1353.739060][ T971] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.002D/input/input48 [ 1353.817530][ T971] kye 0003:0458:5011.002D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 1353.889042][ T971] usb 6-1: USB disconnect, device number 60 [ 1353.960084][ T5888] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1354.131862][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.144248][T21221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.155716][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.166740][T21221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.176708][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1354.187241][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.228083][ T5888] usb 3-1: config 0 descriptor?? [ 1354.228232][ T5861] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1354.260444][ T5860] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1354.730089][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 1354.736988][ T5860] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1354.746547][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.756502][ T5860] usb 4-1: config 0 descriptor?? [ 1354.867350][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 1354.879308][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1354.894644][ T5888] usb 3-1: USB disconnect, device number 67 [ 1355.124373][T21264] ubi: mtd0 is already attached to ubi31 [ 1355.210672][ T5860] waterforce 0003:1044:7A4D.002E: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 1355.280691][ T5860] waterforce 0003:1044:7A4D.002E: fw version request failed with -38 [ 1355.293432][ T5861] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1355.387136][ T5888] usb 4-1: USB disconnect, device number 87 [ 1355.470182][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 1355.476725][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1355.491639][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1355.503236][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1355.516272][ T5861] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1355.526363][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.539118][ T5861] usb 2-1: config 0 descriptor?? [ 1355.577872][T21276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1355.683125][T21278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4353'. [ 1355.692300][T21278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4353'. [ 1355.701751][T21278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4353'. [ 1355.711072][T21278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4353'. [ 1355.875345][T21283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4354'. [ 1356.027878][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.002F/input/input49 [ 1356.280367][ T5888] usb 1-1: USB disconnect, device number 56 [ 1356.308293][ T5888] usblp0: removed [ 1356.308692][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.002F/input/input50 [ 1356.447790][T21293] can0: slcan on ptm0. [ 1356.474580][T14991] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1356.716158][ T5861] kye 0003:0458:5011.002F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 1356.831420][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1356.831436][ T30] audit: type=1400 audit(1746503276.494:648): avc: denied { write } for pid=21292 comm="syz.0.4358" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1356.880094][T14991] usb 4-1: Using ep0 maxpacket: 32 [ 1356.887024][T14991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1356.898544][T14991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1356.923576][ T5861] usb 2-1: USB disconnect, device number 63 [ 1356.976942][T14991] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1357.039947][T14991] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1357.076038][T14991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.096714][T14991] usb 4-1: config 0 descriptor?? [ 1357.125117][T21307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1357.160874][T21289] can0 (unregistered): slcan off ptm0. [ 1357.370270][ T5860] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1357.534113][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.610208][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1357.724661][ T5860] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1357.811816][T14991] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0030/input/input51 [ 1357.830403][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.119585][ T5860] usb 3-1: config 0 descriptor?? [ 1358.279609][T14991] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0030/input/input52 [ 1359.102633][ T5860] usbhid 3-1:0.0: can't add hid device: -71 [ 1359.108923][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1359.151911][ T5860] usb 3-1: USB disconnect, device number 68 [ 1359.170421][T14991] kye 0003:0458:5011.0030: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1359.214407][T14991] usb 4-1: USB disconnect, device number 88 [ 1359.700062][ T30] audit: type=1400 audit(1746503279.364:649): avc: denied { setattr } for pid=21352 comm="syz.2.4371" name="NETLINK" dev="sockfs" ino=63486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1359.872720][T14991] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1359.900102][ T5861] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1359.993049][T21362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4373'. [ 1360.030947][T14991] usb 4-1: Using ep0 maxpacket: 32 [ 1360.037339][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4374'. [ 1360.047839][T14991] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1360.056157][ T5861] usb 1-1: Using ep0 maxpacket: 32 [ 1360.061655][T14991] usb 4-1: config 0 has no interface number 0 [ 1360.069272][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1360.081095][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1360.092036][T14991] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1360.111917][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1360.125029][T14991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.132102][ T30] audit: type=1400 audit(1746503279.794:650): avc: denied { watch } for pid=21367 comm="syz.2.4375" path="/237/file0" dev="tmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1360.156225][T14991] usb 4-1: Product: syz [ 1360.156246][T14991] usb 4-1: Manufacturer: syz [ 1360.156261][T14991] usb 4-1: SerialNumber: syz [ 1360.158212][T14991] usb 4-1: config 0 descriptor?? [ 1360.167041][ T30] audit: type=1400 audit(1746503279.794:651): avc: denied { watch_sb } for pid=21367 comm="syz.2.4375" path="/237/file0" dev="tmpfs" ino=1212 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1360.170545][ T5861] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1360.170570][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.172986][ T5861] usb 1-1: config 0 descriptor?? [ 1360.238522][T14991] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1360.554526][T14991] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1360.775107][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1360.785380][T14991] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1360.914440][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4377'. [ 1360.946292][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0031/input/input53 [ 1361.041896][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1361.049802][T14991] usb 4-1: USB disconnect, device number 89 [ 1361.075834][T14991] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1361.101552][ T5861] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0031/input/input54 [ 1361.240799][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.255889][T14991] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1361.349666][T14991] quatech2 4-1:0.51: device disconnected [ 1361.592970][T21384] can0: slcan on ptm0. [ 1361.630612][ T5861] kye 0003:0458:5011.0031: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 1361.860549][ T5861] usb 1-1: USB disconnect, device number 57 [ 1362.062200][T21378] can0 (unregistered): slcan off ptm0. [ 1362.180073][ T5860] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1362.205291][T21403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4385'. [ 1362.399137][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.467523][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.484911][ T5860] usb 6-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1362.511630][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.532986][ T5860] usb 6-1: config 0 descriptor?? [ 1363.227080][ T5860] usbhid 6-1:0.0: can't add hid device: -71 [ 1363.354477][ T5860] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1363.456964][T21418] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1363.563579][ T5860] usb 6-1: USB disconnect, device number 61 [ 1363.632196][T21418] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1363.638443][T21418] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1363.644749][T21418] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1363.674173][T21418] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1363.803772][T21430] bond0: (slave bond1): Error -95 calling ndo_bpf [ 1364.845026][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4397'. [ 1364.961218][T21450] can0: slcan on ptm0. [ 1365.254567][T20596] Bluetooth: hci0: command 0x0c1a tx timeout [ 1365.320607][ T971] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1365.391799][T21440] can0 (unregistered): slcan off ptm0. [ 1365.411941][T21457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1365.463788][T21457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1365.521912][T21457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1365.544161][T21457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1365.570444][ T971] usb 1-1: Using ep0 maxpacket: 32 [ 1365.600777][ T971] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1365.609380][ T971] usb 1-1: config 0 has no interface number 0 [ 1365.617524][ T971] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1365.636971][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.645148][ T971] usb 1-1: Product: syz [ 1365.650670][T20646] Bluetooth: hci4: command 0x0c1a tx timeout [ 1365.656722][ T971] usb 1-1: Manufacturer: syz [ 1365.656763][ T9211] Bluetooth: hci1: command 0x0c1a tx timeout [ 1365.666411][ T971] usb 1-1: SerialNumber: syz [ 1365.667834][T20596] Bluetooth: hci2: command 0x0c1a tx timeout [ 1365.730129][T20596] Bluetooth: hci3: command 0x0405 tx timeout [ 1365.819092][ T971] usb 1-1: config 0 descriptor?? [ 1365.827583][ T971] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1366.117190][ T971] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1366.327443][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1366.357473][ T971] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1366.565837][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1366.566204][ T5860] usb 1-1: USB disconnect, device number 58 [ 1366.649757][ T5860] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1366.686098][ T5860] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1366.734472][ T5860] quatech2 1-1:0.51: device disconnected [ 1366.824450][T21492] bond0: (slave bond1): Error -95 calling ndo_bpf [ 1366.884429][T21495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4409'. [ 1367.121783][ T30] audit: type=1400 audit(1746503286.784:652): avc: denied { write } for pid=21496 comm="syz.2.4410" path="socket:[64735]" dev="sockfs" ino=64735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1368.079639][T21509] ubi: mtd0 is already attached to ubi31 [ 1368.262074][T21519] bond0: (slave bond1): Error -95 calling ndo_bpf [ 1368.294657][T21521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1368.335188][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4421'. [ 1368.778940][T21506] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1368.785295][T21506] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1368.791750][T21506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1368.797797][T21506] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1368.804164][T21506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1368.877690][ T3482] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.970834][ T3482] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.044483][ T3482] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.060277][ T971] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1369.064688][ T5860] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1369.114067][ T3482] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.166320][T21539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4431'. [ 1369.240584][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 1369.253181][ T971] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1369.277704][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.280594][ T5860] usb 3-1: config 0 has no interfaces? [ 1369.342684][ T5860] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1369.364974][T21542] ubi: mtd0 is already attached to ubi31 [ 1369.405229][ T971] usb 2-1: config 0 descriptor?? [ 1369.409772][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1369.420798][ T5860] usb 3-1: Product: syz [ 1369.424976][ T5860] usb 3-1: Manufacturer: syz [ 1369.429662][ T5860] usb 3-1: SerialNumber: syz [ 1369.434520][ T3482] bridge_slave_1: left allmulticast mode [ 1369.442748][ T3482] bridge_slave_1: left promiscuous mode [ 1369.448550][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.471317][ T5860] usb 3-1: config 0 descriptor?? [ 1369.483236][T20646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1369.483537][ T3482] bridge_slave_0: left allmulticast mode [ 1369.498002][ T3482] bridge_slave_0: left promiscuous mode [ 1369.501874][T20646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1369.504145][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.522235][T20646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1369.537165][T20646] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1369.552356][T20646] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1369.700374][ T5860] usb 3-1: USB disconnect, device number 69 [ 1369.994543][ T3482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.007164][ T3482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.023722][ T3482] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1370.027448][T21551] fuse: Bad value for 'fd' [ 1370.042172][ T3482] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1370.056843][ T3482] bond0 (unregistering): (slave bond3): Releasing backup interface [ 1370.066850][ T3482] bond0 (unregistering): Released all slaves [ 1370.157592][ T3482] bond1 (unregistering): Released all slaves [ 1370.253520][ T3482] bond2 (unregistering): Released all slaves [ 1370.346348][ T3482] bond3 (unregistering): Released all slaves [ 1370.380328][ T5861] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1370.590415][ T5861] usb 6-1: Using ep0 maxpacket: 16 [ 1370.621873][ T5861] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.639220][ T5861] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1370.672473][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.683654][ T5861] usb 6-1: Product: syz [ 1370.687835][ T5861] usb 6-1: Manufacturer: syz [ 1370.705852][ T5861] usb 6-1: SerialNumber: syz [ 1370.718937][ T5861] usb 6-1: config 0 descriptor?? [ 1370.744400][ T5861] pegasus_notetaker 6-1:0.0: Invalid number of endpoints [ 1370.757800][ T5861] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1370.850202][T14981] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1370.851163][T20596] Bluetooth: hci3: command 0x0405 tx timeout [ 1370.857813][ T9211] Bluetooth: hci2: command 0x0c1a tx timeout [ 1370.857851][ T9211] Bluetooth: hci4: command 0x0c1a tx timeout [ 1370.876821][T20646] Bluetooth: hci1: command 0x0c1a tx timeout [ 1370.951916][T21545] chnl_net:caif_netlink_parms(): no params data found [ 1370.988438][ T3482] hsr_slave_0: left promiscuous mode [ 1371.001435][ T3482] hsr_slave_1: left promiscuous mode [ 1371.012307][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.019762][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.041150][ T3482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.042377][T14981] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1371.048860][ T3482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.070303][T14981] usb 3-1: config 0 has no interface number 0 [ 1371.077357][T21512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.085904][T14981] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1371.098293][T21512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.107648][T14981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.122700][ T3482] veth1_macvtap: left promiscuous mode [ 1371.128219][ T3482] veth0_macvtap: left promiscuous mode [ 1371.131336][T14981] usb 3-1: config 0 descriptor?? [ 1371.149867][T14981] usb 3-1: selecting invalid altsetting 1 [ 1371.150539][ T3482] veth1_vlan: left promiscuous mode [ 1371.164288][T14981] dvb_ttusb_budget: ttusb_init_controller: error [ 1371.170182][ T3482] veth0_vlan: left promiscuous mode [ 1371.171732][T14981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1371.256980][T14981] DVB: Unable to find symbol cx22700_attach() [ 1371.314556][T14981] DVB: Unable to find symbol tda10046_attach() [ 1371.335276][ T971] pegasus 2-1:0.0: setup Pegasus II specific registers [ 1371.338826][T14981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1371.385717][T14981] usb 3-1: USB disconnect, device number 70 [ 1371.464633][ T971] pegasus 2-1:0.0: can't locate MII phy, using default [ 1371.650234][T20596] Bluetooth: hci0: command tx timeout [ 1371.895506][ T3482] team0 (unregistering): Port device team_slave_1 removed [ 1371.967283][ T3482] team0 (unregistering): Port device team_slave_0 removed [ 1372.015207][T21589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1372.420390][ T971] pegasus 2-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, 62:03:5e:fb:70:28 [ 1372.439055][ T971] usb 2-1: USB disconnect, device number 64 [ 1372.492367][T21580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1372.498462][T21580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1372.512629][ T30] audit: type=1326 audit(1746503292.184:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21601 comm="syz.1.4444" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca5178e969 code=0x0 [ 1372.532056][T21580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1372.550348][T21580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1372.556451][T21580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1372.565058][T21580] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1372.580911][T21580] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1372.673150][T21545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.703471][T21545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.712706][T21545] bridge_slave_0: entered allmulticast mode [ 1372.720433][T21545] bridge_slave_0: entered promiscuous mode [ 1372.760471][T21545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.895268][T21613] ubi: mtd0 is already attached to ubi31 [ 1372.899831][T21545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.912264][T21545] bridge_slave_1: entered allmulticast mode [ 1372.932473][T21545] bridge_slave_1: entered promiscuous mode [ 1373.024725][T21545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.066882][T21545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.087176][T14981] usb 6-1: USB disconnect, device number 62 [ 1373.483974][T21545] team0: Port device team_slave_0 added [ 1373.506303][T21545] team0: Port device team_slave_1 added [ 1373.621577][T21545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.669878][T21545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.699104][T21545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.719110][T21545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.729846][T21545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.766807][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4452'. [ 1373.821562][T21545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.848099][ T30] audit: type=1400 audit(1746503293.514:654): avc: denied { append } for pid=21640 comm="syz.5.4453" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1374.043255][T21646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4455'. [ 1374.534538][T21653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4455'. [ 1374.547116][T20646] Bluetooth: hci4: command 0x0c1a tx timeout [ 1374.617276][T20646] Bluetooth: hci0: command 0x040f tx timeout [ 1374.623722][T20646] Bluetooth: hci3: command 0x0405 tx timeout [ 1374.628365][T20596] Bluetooth: hci2: command 0x0c1a tx timeout [ 1374.791709][ T3482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.848838][T21545] hsr_slave_0: entered promiscuous mode [ 1374.979965][T21545] hsr_slave_1: entered promiscuous mode [ 1374.988888][T21545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1375.051145][T21657] ubi: mtd0 is already attached to ubi31 [ 1375.089323][T21545] Cannot create hsr debugfs directory [ 1375.247817][ T3482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.386170][ T3482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.441752][T17185] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1375.455094][T17185] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1375.468120][T17185] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1375.477834][T17185] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1375.491402][T17185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1375.501485][ T3482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.690396][ T971] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1375.702389][ T5858] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1375.753318][T21545] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1375.792559][T21545] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1375.829078][T21545] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1375.904563][ T5858] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1375.915163][ T971] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1375.934521][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4468'. [ 1375.944243][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.954404][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.975336][ T5858] usb 6-1: config 0 descriptor?? [ 1375.981572][ T971] usb 3-1: config 0 descriptor?? [ 1376.018188][T21696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4468'. [ 1376.315774][ T3482] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1376.325271][ T3482] bond0 (unregistering): Released all slaves [ 1376.434082][ T3482] bond1 (unregistering): Released all slaves [ 1376.450436][T21545] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1376.540027][ C0] ================================================================== [ 1376.548130][ C0] BUG: KASAN: user-memory-access in refcount_warn_saturate+0x1d/0x210 [ 1376.556293][ C0] Write of size 4 at addr 000000010001a401 by task syz.1.4469/21700 [ 1376.564257][ C0] [ 1376.566586][ C0] CPU: 0 UID: 0 PID: 21700 Comm: syz.1.4469 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 1376.566612][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1376.566623][ C0] Call Trace: [ 1376.566630][ C0] [ 1376.566639][ C0] dump_stack_lvl+0x116/0x1f0 [ 1376.566667][ C0] kasan_report+0xe0/0x110 [ 1376.566687][ C0] ? refcount_warn_saturate+0x1d/0x210 [ 1376.566714][ C0] ? llc_ui_autobind.isra.0+0x310/0x510 [ 1376.566733][ C0] kasan_check_range+0xef/0x1a0 [ 1376.566755][ C0] refcount_warn_saturate+0x1d/0x210 [ 1376.566779][ C0] llc_ui_autobind.isra.0+0x443/0x510 [ 1376.566799][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1376.566827][ C0] ? rcu_is_watching+0x12/0xc0 [ 1376.566846][ C0] ? llc_ui_autobind.isra.0+0x310/0x510 [ 1376.566863][ C0] ? __run_timers+0x6ef/0x960 [ 1376.566889][ C0] ? __pfx___run_timers+0x10/0x10 [ 1376.566919][ C0] ? run_timer_base+0x114/0x190 [ 1376.566943][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1376.566967][ C0] ? rcu_is_watching+0x12/0xc0 [ 1376.566987][ C0] ? run_timer_softirq+0x1a/0x40 [ 1376.567010][ C0] ? handle_softirqs+0x216/0x8e0 [ 1376.567034][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1376.567057][ C0] ? __irq_exit_rcu+0x109/0x170 [ 1376.567078][ C0] ? irq_exit_rcu+0x9/0x30 [ 1376.567098][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1376.567120][ C0] [ 1376.567126][ C0] [ 1376.567133][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1376.567156][ C0] ? security_task_alloc+0x102/0x260 [ 1376.567184][ C0] ? bpf_lsm_task_alloc+0x4/0x10 [ 1376.567211][ C0] ? security_task_alloc+0x11c/0x260 [ 1376.567236][ C0] ? copy_process+0x24ba/0x91a0 [ 1376.567260][ C0] ? find_held_lock+0x2b/0x80 [ 1376.567281][ C0] ? page_table_check_set+0x96f/0xb50 [ 1376.567303][ C0] ? __pfx_copy_process+0x10/0x10 [ 1376.567329][ C0] ? find_held_lock+0x2b/0x80 [ 1376.567348][ C0] ? __might_fault+0xe3/0x190 [ 1376.567366][ C0] ? __might_fault+0xe3/0x190 [ 1376.567382][ C0] ? __might_fault+0x13b/0x190 [ 1376.567402][ C0] ? _copy_from_user+0x59/0xd0 [ 1376.567424][ C0] ? kernel_clone+0xfc/0x960 [ 1376.567443][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1376.567462][ C0] ? ___pte_offset_map+0x1bc/0x540 [ 1376.567481][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1376.567507][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 1376.567538][ C0] ? __do_sys_clone3+0x212/0x290 [ 1376.567561][ C0] ? __pfx___do_sys_clone3+0x10/0x10 [ 1376.567598][ C0] ? do_syscall_64+0xcd/0x260 [ 1376.567622][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1376.567644][ C0] [ 1376.567651][ C0] ================================================================== [ 1376.829079][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1376.836285][ C0] CPU: 0 UID: 0 PID: 21700 Comm: syz.1.4469 Not tainted 6.15.0-rc5-syzkaller-00022-g01f95500a162 #0 PREEMPT(full) [ 1376.848363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1376.858432][ C0] Call Trace: [ 1376.861722][ C0] [ 1376.864569][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1376.869171][ C0] panic+0x71c/0x800 [ 1376.873081][ C0] ? __pfx_panic+0x10/0x10 [ 1376.877501][ C0] ? mark_held_locks+0x49/0x80 [ 1376.882275][ C0] ? refcount_warn_saturate+0x1d/0x210 [ 1376.887728][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1376.892842][ C0] ? refcount_warn_saturate+0x1d/0x210 [ 1376.898285][ C0] check_panic_on_warn+0xab/0xb0 [ 1376.903213][ C0] end_report+0x107/0x170 [ 1376.907542][ C0] kasan_report+0xee/0x110 [ 1376.911940][ C0] ? refcount_warn_saturate+0x1d/0x210 [ 1376.917398][ C0] ? llc_ui_autobind.isra.0+0x310/0x510 [ 1376.922951][ C0] kasan_check_range+0xef/0x1a0 [ 1376.927798][ C0] refcount_warn_saturate+0x1d/0x210 [ 1376.933072][ C0] llc_ui_autobind.isra.0+0x443/0x510 [ 1376.938427][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1376.943527][ C0] ? rcu_is_watching+0x12/0xc0 [ 1376.948278][ C0] ? llc_ui_autobind.isra.0+0x310/0x510 [ 1376.953812][ C0] ? __run_timers+0x6ef/0x960 [ 1376.958473][ C0] ? __pfx___run_timers+0x10/0x10 [ 1376.963488][ C0] ? run_timer_base+0x114/0x190 [ 1376.968328][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1376.973516][ C0] ? rcu_is_watching+0x12/0xc0 [ 1376.978260][ C0] ? run_timer_softirq+0x1a/0x40 [ 1376.983185][ C0] ? handle_softirqs+0x216/0x8e0 [ 1376.988128][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1376.993429][ C0] ? __irq_exit_rcu+0x109/0x170 [ 1376.998288][ C0] ? irq_exit_rcu+0x9/0x30 [ 1377.002700][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1377.008501][ C0] [ 1377.011418][ C0] [ 1377.014331][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1377.020471][ C0] ? security_task_alloc+0x102/0x260 [ 1377.025744][ C0] ? bpf_lsm_task_alloc+0x4/0x10 [ 1377.030667][ C0] ? security_task_alloc+0x11c/0x260 [ 1377.035946][ C0] ? copy_process+0x24ba/0x91a0 [ 1377.040782][ C0] ? find_held_lock+0x2b/0x80 [ 1377.045465][ C0] ? page_table_check_set+0x96f/0xb50 [ 1377.050840][ C0] ? __pfx_copy_process+0x10/0x10 [ 1377.055866][ C0] ? find_held_lock+0x2b/0x80 [ 1377.060529][ C0] ? __might_fault+0xe3/0x190 [ 1377.065185][ C0] ? __might_fault+0xe3/0x190 [ 1377.069839][ C0] ? __might_fault+0x13b/0x190 [ 1377.074587][ C0] ? _copy_from_user+0x59/0xd0 [ 1377.079339][ C0] ? kernel_clone+0xfc/0x960 [ 1377.083916][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1377.089268][ C0] ? ___pte_offset_map+0x1bc/0x540 [ 1377.094364][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1377.099376][ C0] ? __lock_acquire+0xaa4/0x1ba0 [ 1377.104309][ C0] ? __do_sys_clone3+0x212/0x290 [ 1377.109231][ C0] ? __pfx___do_sys_clone3+0x10/0x10 [ 1377.114511][ C0] ? do_syscall_64+0xcd/0x260 [ 1377.119173][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.125225][ C0] [ 1377.128407][ C0] Kernel Offset: disabled [ 1377.132964][ C0] Rebooting in 86400 seconds..