last executing test programs: 24m11.989285879s ago: executing program 4 (id=3298): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tkill(r0, 0x29) unshare(0x60040000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) 24m9.129141059s ago: executing program 4 (id=3302): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 24m5.633777241s ago: executing program 4 (id=3308): socket(0x1d, 0x2, 0x6) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x40102) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) listen(r1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x80000001, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x10000008, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0xad2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23m58.365001428s ago: executing program 4 (id=3318): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 23m57.945179275s ago: executing program 4 (id=3321): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$can_raw(0x1d, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 23m53.625580804s ago: executing program 4 (id=3332): socket(0x1d, 0x2, 0x6) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x40102) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) listen(r1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x80000001, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x10000008, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0xad2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23m36.598655925s ago: executing program 32 (id=3332): socket(0x1d, 0x2, 0x6) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$evdev(0x0, 0xfffffffffffffffe, 0x40102) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) openat2$dir(0xffffff9c, 0x0, 0x0, 0x0) listen(r1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x37b, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000002, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x7, 0x3, 0xfffffffc, 0x9, 0x4, 0x102, 0x7, 0x3c5b, 0x80000001, 0x80000001, 0xd, 0x1, 0x0, 0x7, 0x7ff, 0x1000, 0x7, 0x3, 0x10000008, 0x4c74, 0x80000000, 0x0, 0x4003, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000004, 0x9, 0x8200012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x9, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x8, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x5, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x5, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x8, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x101], [0x7, 0xa, 0x40000004, 0x5, 0xfdfffffe, 0x1, 0xad2, 0xa, 0x5, 0x7ffe, 0xffff0000, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4000000, 0x4, 0x3, 0x303c, 0x7f, 0xa, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x2c, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x7, 0x4, 0x25], [0x9, 0xbb33, 0x80000002, 0x800, 0x5, 0xb, 0x8, 0x1000006, 0x3d11, 0xb9, 0xcea, 0x1ff, 0x2, 0x8, 0x4, 0x3, 0x101, 0xfa4a, 0x4, 0x9a5, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x0, 0x14c, 0x60a7, 0x7fff, 0x96, 0x8, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x6, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x7ff, 0x4, 0x8, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 22m38.888874193s ago: executing program 0 (id=3478): ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000640)={0xbb, &(0x7f0000000540)="1b0b86dce85c1be13340a487954dd9634653f8166258668481aae63dfe199c7f73658fd42208bf55428280e3e49a3f461bc6bee86c60fa77826a253f930f895738fd778d94b03690b2c135ee28b2e7764a1cd89dc704e0af7035cfafb6222e66a4e6898cfeda7eb465b31d1c0b820529f92bb3aa139c09cbf1044e285d842a9dd1c58e93b17d52e4678469eae5e18c58f1520acb05fdaff40d60cacb3c4b8159c37f1eadce239fddc36a35e0ca9d05b351f7169bb596cecec7c11d"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c050) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="00000b92007a468b797a02d7eff9162a937a03b08abb8d337f6a6abd930599b5b2581c3acf0585f15b4edf3fb3f49257c17eb7bb92d272", @ANYRESHEX, @ANYBLOB=',msize=0x000000007fffffff,noextend,k']) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x67, 0x2, {0x80, 0x3, 0x3}}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) 22m37.701965504s ago: executing program 0 (id=3481): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r7}, 0x38) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 22m35.935528623s ago: executing program 0 (id=3485): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b3243078b089b3330076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94c6f0d000000000000f8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb08ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 22m29.995299509s ago: executing program 0 (id=3498): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1}, &(0x7f0000000180)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r3, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000ac0)={0x12, 0x3, {0x2, @struct={0x7ff, 0xc2e7}, 0x0, 0x0, 0x100000001, 0x5, 0x7, 0x2, 0x10, @usage=0x3, 0x32, 0x30000000, [0x4, 0x10, 0x54, 0x6, 0x9, 0x3]}, {0x8000, @struct={0x6, 0x2}, 0x0, 0x1, 0xf335, 0x9, 0x3, 0x4, 0x80, @struct={0x800, 0x38}, 0x4, 0xe2c1, [0x1, 0x8001, 0x4, 0x9, 0x3beb, 0xfffffffffffffff7]}, {0x8000000000000000, @usage=0x7ff, 0x0, 0x8, 0x8, 0x3, 0xe, 0xffff, 0x92, @usage=0xcb, 0x1, 0x800, [0x8000000000000001, 0x1800, 0xfffffffffffffffc, 0x9, 0x1, 0xfffffffffffffff6]}, {0x3, 0x2, 0x8681}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000380)={r1}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000400)={r7, 0x8}, 0x8) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, 0x0, 0x0) 22m24.713614363s ago: executing program 0 (id=3508): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80009) 22m20.596765855s ago: executing program 0 (id=3516): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tkill(r0, 0x29) unshare(0x60040000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) 22m4.466782058s ago: executing program 33 (id=3516): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) tkill(r0, 0x29) unshare(0x60040000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000300, r3, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) 9.512714107s ago: executing program 3 (id=7556): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.346337572s ago: executing program 3 (id=7566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) 4.213725587s ago: executing program 2 (id=7577): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) pwrite64(r0, 0x0, 0x0, 0xa) unshare(0x64000600) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="0000000021040200086fe2314f0000002c0006002000028004000200000004800400018018000a801400ff0200000000000000000000000000010000"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf25040000000509000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40048c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x0, 0x2, 0x4, 0x3, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x7800, 0x7800, 0x8000, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000480)={'ip_vti0\x00', r3, 0x700, 0x20, 0x369149d, 0x5, {{0x2b, 0x4, 0x2, 0x8, 0xac, 0xffff, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, {[@end, @timestamp_addr={0x44, 0x34, 0x23, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0x3eb}, {@remote, 0xfffffff7}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x8}]}, @cipso={0x86, 0x18, 0x0, [{0x1, 0x9, "09652acfbf6348"}, {0x5, 0x9, "2c78bfcdf4fdf0"}]}, @timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0xb, [{@multicast1}, {@multicast2, 0x8}]}, @lsrr={0x83, 0x7, 0x4a, [@remote]}, @timestamp_prespec={0x44, 0x14, 0x9f, 0x3, 0x7, [{@local, 0x3}, {@loopback, 0x2}]}, @rr={0x7, 0x1b, 0xa5, [@dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local]}]}}}}}) 2.08562369s ago: executing program 6 (id=7581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002480)={0x20, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x9, 0x1, ']-#\'\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd675ec886ae301c6}, 0x40010) 1.964055924s ago: executing program 6 (id=7582): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x1404c090) 1.930224503s ago: executing program 3 (id=7583): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.898054649s ago: executing program 6 (id=7584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x6, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a00004005000100070000000500040000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.807305592s ago: executing program 3 (id=7585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000900)="00000d0000000000000001") 1.708141331s ago: executing program 3 (id=7586): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000480001002dbd7000fbdbdf250a000100", @ANYBLOB="00000000080002000c0000001400010000000000000000000000ffff640101010800020000000000a8737bb93d27fceb27047cda721cf7e40af45ccead47c31a45293e5db93107825dd744160137c4408c"], 0x40}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x88, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x58}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xa2, 0x5}}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x88}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x402) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x62, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.680095241s ago: executing program 3 (id=7588): ioctl$XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, 0x0) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00030300000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x2, 0x0) 1.57969818s ago: executing program 2 (id=7589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400040000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000008114001180090001006c6173"], 0xc4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1.444143754s ago: executing program 5 (id=7591): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.381887789s ago: executing program 1 (id=7592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002480)={0x20, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x9, 0x1, ']-#\'\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xd675ec886ae301c6}, 0x40010) 1.359274714s ago: executing program 5 (id=7593): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$NFT_BATCH(r3, 0x0, 0x4048010) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x65) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000080)) 1.222806409s ago: executing program 2 (id=7594): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x5, @random="f8d9c35372"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x27, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff"}, {0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0xed, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9c754eed87a13afba49d41c937e4ca94a08a309610d242d5cbf137de2b925638e09c39b763e4a082166607fd4c968d24976e5be28647bed3b019a2fa62a91151d6aaf1128472357b37ed798d3571d47ec939a465c9cca298e134ee90549d6b48c137137ff93887da8bde8c56ba608687a523e86df18683f"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x24, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5"}, {0xdd, 0x1d, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33"}, {0xdd, 0x6, "cf80b8f78e71"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.170708038s ago: executing program 1 (id=7595): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004043}, 0x1404c090) 1.142165937s ago: executing program 2 (id=7596): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 707.190869ms ago: executing program 1 (id=7597): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6410, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 681.435841ms ago: executing program 2 (id=7598): socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4044084) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 624.559172ms ago: executing program 1 (id=7599): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000480001002dbd7000fbdbdf250a000100", @ANYBLOB="00000000080002000c0000001400010000000000000000000000ffff640101010800020000000000a8737bb93d27fceb27047cda721cf7e40af45ccead47c31a45293e5db93107825dd744160137c4408c"], 0x40}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x88, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x58}}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xa2, 0x5}}, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x88}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x402) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x62, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 608.198592ms ago: executing program 1 (id=7600): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x100000) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006900), 0x0, 0x24040000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvmmsg$unix(r3, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000880)=""/100, 0x64}, {&(0x7f0000000940)=""/136, 0x88}], 0x2}}], 0x1, 0x42, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r10, 0xffffffffffffffff, 0x0) 521.15756ms ago: executing program 2 (id=7601): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c4b868085a230901dabd000000010902f10001000000000904000005"], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003cda2a200a"], 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f00000000c0)="cc") syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x8, 0x1, "b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 346.651488ms ago: executing program 1 (id=7602): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006900), 0x0, 0x24040000) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x880) recvmmsg$unix(r3, 0x0, 0x0, 0x42, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) 336.561594ms ago: executing program 5 (id=7603): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 293.306319ms ago: executing program 5 (id=7604): socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x20004880}, 0x4044084) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 230.6626ms ago: executing program 6 (id=7605): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 126.560775ms ago: executing program 6 (id=7606): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x2c4, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x29f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x5, @random="f8d9c35372"}, @val={0x1, 0x3, [{0x3}, {0x1, 0x1}, {0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x27, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff"}, {0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0xed, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9c754eed87a13afba49d41c937e4ca94a08a309610d242d5cbf137de2b925638e09c39b763e4a082166607fd4c968d24976e5be28647bed3b019a2fa62a91151d6aaf1128472357b37ed798d3571d47ec939a465c9cca298e134ee90549d6b48c137137ff93887da8bde8c56ba608687a523e86df18683f"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x24, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5"}, {0xdd, 0x1d, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33"}, {0xdd, 0x6, "cf80b8f78e71"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 94.66751ms ago: executing program 5 (id=7607): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004043}, 0x1404c090) 39.705783ms ago: executing program 6 (id=7608): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x4370}) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)="000080", 0x15) 0s ago: executing program 5 (id=7609): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) kernel console output (not intermixed with test programs): 14419] usb 2-1: USB disconnect, device number 23 [ 2397.754598][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 2397.764136][T16459] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2397.773397][ T5718] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 2397.785229][T16459] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2397.799573][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.808450][T16459] usb 4-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2397.821239][ T5718] usb 3-1: Product: syz [ 2397.830546][ T5718] usb 3-1: Manufacturer: syz [ 2397.835400][T16459] usb 4-1: config 63 has no interface number 0 [ 2397.849545][ T5718] usb 3-1: SerialNumber: syz [ 2397.859239][T16459] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2397.868655][ T5718] usb 3-1: config 0 descriptor?? [ 2397.906242][T16459] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2397.915459][T16459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.923864][T16459] usb 4-1: Product: syz [ 2397.930531][T16459] usb 4-1: Manufacturer: syz [ 2397.935196][T16459] usb 4-1: SerialNumber: syz [ 2398.026736][T30470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6853'. [ 2398.100002][ T5602] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2398.178587][ T5602] ath9k_htc: Failed to initialize the device [ 2398.285490][ T5718] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2398.335927][T16461] usb 7-1: ath9k_htc: USB layer deinitialized [ 2398.360991][ T5819] uvcvideo 6-1:63.66: Found Unit with invalid ID 0 [ 2398.369675][ T5819] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2398.379040][ T5819] uvcvideo 6-1:63.66: No valid video chain found. [ 2398.391205][ T5819] usb 6-1: USB disconnect, device number 117 [ 2398.975926][ T5718] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2399.262708][ T5718] usb 3-1: USB disconnect, device number 49 [ 2400.893850][T16461] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2400.945775][T16459] uvcvideo 4-1:63.66: Found Unit with invalid ID 0 [ 2400.959437][T16459] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2400.981014][T16459] uvcvideo 4-1:63.66: No valid video chain found. [ 2400.993232][T16459] usb 4-1: USB disconnect, device number 28 [ 2401.091832][T16461] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2401.101481][T16461] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2401.110121][T16461] usb 3-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2401.150385][T16461] usb 3-1: config 63 has no interface number 0 [ 2401.187855][T16461] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2401.216094][T16461] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2401.227470][T16461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.241043][T30501] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 2401.261088][T16461] usb 3-1: Product: syz [ 2401.267137][T16461] usb 3-1: Manufacturer: syz [ 2401.291848][T16461] usb 3-1: SerialNumber: syz [ 2401.320255][T30502] lo speed is unknown, defaulting to 1000 [ 2401.327901][T16459] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2401.524992][T16459] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2401.560462][T16459] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 2401.590282][T16459] usb 4-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2401.621663][T16459] usb 4-1: config 63 has no interface number 0 [ 2401.629430][T16459] usb 4-1: config 63 interface 66 has no altsetting 0 [ 2401.652460][T16459] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2401.684392][T16459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.706666][ T5705] usb 7-1: new full-speed USB device number 127 using dummy_hcd [ 2401.721094][T16459] usb 4-1: Product: syz [ 2401.753385][T16459] usb 4-1: Manufacturer: syz [ 2401.767463][T16459] usb 4-1: SerialNumber: syz [ 2401.818619][T16461] uvcvideo 3-1:63.66: Found Unit with invalid ID 0 [ 2401.833520][T16461] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2401.848956][T16461] uvcvideo 3-1:63.66: No valid video chain found. [ 2401.871275][T16461] usb 3-1: USB disconnect, device number 50 [ 2401.888806][ T5705] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2401.916977][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.949114][ T5705] usb 7-1: Product: syz [ 2401.958945][ T5705] usb 7-1: Manufacturer: syz [ 2401.976037][ T5705] usb 7-1: SerialNumber: syz [ 2402.001729][ T5705] usb 7-1: config 0 descriptor?? [ 2402.939317][T30525] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6868'. [ 2403.927115][ T5602] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2404.688631][ T5602] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 2404.750983][ T5602] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2404.774991][T16459] uvcvideo 4-1:63.66: Found Unit with invalid ID 0 [ 2404.824676][T16966] usb 7-1: USB disconnect, device number 127 [ 2404.836213][T16459] uvcvideo 4-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2404.876178][ T5602] usb 6-1: config 0 has no interface number 0 [ 2404.918425][T16459] uvcvideo 4-1:63.66: No valid video chain found. [ 2404.929686][ T5602] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2404.998474][T16459] usb 4-1: USB disconnect, device number 29 [ 2405.043440][ T5602] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2405.102350][T30540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6872'. [ 2405.169242][ T5602] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2405.276751][ T5602] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2405.313950][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.338139][ T5602] usb 6-1: Product: syz [ 2405.344146][ T5602] usb 6-1: Manufacturer: syz [ 2405.359333][ T5602] usb 6-1: SerialNumber: syz [ 2405.385254][ T5602] usb 6-1: config 0 descriptor?? [ 2405.616941][T16459] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2405.650105][ T5819] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2405.671097][T16966] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 2405.779342][T16459] usb 4-1: Using ep0 maxpacket: 32 [ 2405.786101][T16459] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 2405.794314][T16459] usb 4-1: config 0 has no interface number 0 [ 2405.800404][T16459] usb 4-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2405.814509][T16459] usb 4-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2405.814928][ T5819] usb 2-1: Using ep0 maxpacket: 16 [ 2405.828434][T16459] usb 4-1: config 0 interface 28 has no altsetting 0 [ 2405.836992][ T5819] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 2405.840667][T16459] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2405.848113][ T5819] usb 2-1: config 0 has no interface number 0 [ 2405.858110][T16459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2405.863496][ T5819] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2405.872312][T16966] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2405.882252][ T5819] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2405.897245][T16966] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2405.910174][T16459] usb 4-1: config 0 descriptor?? [ 2405.912027][ T5819] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2405.919769][T16966] usb 7-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2405.932615][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.935656][T16966] usb 7-1: config 63 has no interface number 0 [ 2405.950044][ T5819] usb 2-1: Product: syz [ 2405.950748][T16966] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2405.954516][ T5819] usb 2-1: Manufacturer: syz [ 2405.964041][T16966] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2405.965965][ T5819] usb 2-1: SerialNumber: syz [ 2405.975492][T16966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2405.988303][T16966] usb 7-1: Product: syz [ 2405.989426][ T5819] usb 2-1: config 0 descriptor?? [ 2405.999530][T16966] usb 7-1: Manufacturer: syz [ 2406.002977][T30545] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2406.004262][T16966] usb 7-1: SerialNumber: syz [ 2406.011632][T30545] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2406.206954][T16459] usb 4-1: string descriptor 0 read error: -71 [ 2406.230290][T16459] usb 4-1: USB disconnect, device number 30 [ 2406.258606][T30545] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2406.277053][T30545] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2406.398056][T16966] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2406.405016][T16966] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2406.412730][T16966] uvcvideo 7-1:63.66: No valid video chain found. [ 2406.424285][T16966] usb 7-1: USB disconnect, device number 2 [ 2406.506989][ T5819] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2406.525694][ T5819] asix 2-1:0.34: probe with driver asix failed with error -61 [ 2407.623240][T16966] usb 6-1: USB disconnect, device number 118 [ 2408.824701][T16966] usb 2-1: USB disconnect, device number 24 [ 2409.044327][ T5718] IPVS: starting estimator thread 0... [ 2409.235203][T30585] IPVS: using max 45 ests per chain, 108000 per kthread [ 2409.364841][T16966] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2409.910749][T16966] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2409.955330][T16966] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2409.990568][T16966] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2410.018091][T30593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6889'. [ 2410.046670][T16966] usb 2-1: config 63 has no interface number 0 [ 2410.068858][T16966] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2410.094714][T16966] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2410.128379][T16966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.164907][T16966] usb 2-1: Product: syz [ 2410.178877][T16966] usb 2-1: Manufacturer: syz [ 2410.186917][T16966] usb 2-1: SerialNumber: syz [ 2410.242179][T16461] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 2410.429366][T16461] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2410.439572][ T5819] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2410.452477][T16461] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2410.467672][T16461] usb 7-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2410.485648][T16461] usb 7-1: config 63 has no interface number 0 [ 2410.492633][T16461] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2410.503626][T16461] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2410.526236][T16461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2410.555523][T16461] usb 7-1: Product: syz [ 2410.565301][T16461] usb 7-1: Manufacturer: syz [ 2410.579631][T16461] usb 7-1: SerialNumber: syz [ 2410.621355][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 2410.639495][ T5819] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 2410.660385][ T5819] usb 3-1: config 0 has no interface number 0 [ 2410.688436][ T5819] usb 3-1: too many endpoints for config 0 interface 28 altsetting 139: 234, using maximum allowed: 30 [ 2410.722514][ T5819] usb 3-1: config 0 interface 28 altsetting 139 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 2410.794897][ T5819] usb 3-1: config 0 interface 28 has no altsetting 0 [ 2410.830968][ T5819] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 2410.856627][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2410.893842][ T5819] usb 3-1: config 0 descriptor?? [ 2410.896078][T16966] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2410.906413][T16966] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2410.915074][T16966] uvcvideo 2-1:63.66: No valid video chain found. [ 2410.932244][T16966] usb 2-1: USB disconnect, device number 25 [ 2411.039352][T16461] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2411.054474][T16461] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2411.072958][T16461] uvcvideo 7-1:63.66: No valid video chain found. [ 2411.095176][T16461] usb 7-1: USB disconnect, device number 3 [ 2411.201528][ T5819] usb 3-1: string descriptor 0 read error: -71 [ 2411.239977][ T5819] usb 3-1: USB disconnect, device number 51 [ 2411.727867][ T29] audit: type=1400 audit(1786220553.986:884): avc: denied { read } for pid=30611 comm="syz.1.6893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2411.813812][ T29] audit: type=1400 audit(1786220553.986:885): avc: denied { name_connect } for pid=30611 comm="syz.1.6893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 2412.311551][ T5819] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2412.354343][T16966] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 2412.473423][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 2412.496591][ T5819] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 2412.525948][ T5819] usb 4-1: config 0 has no interface number 0 [ 2412.555051][ T5819] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2412.596238][ T5819] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2412.640774][ T5819] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2412.650707][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.664420][ T5819] usb 4-1: Product: syz [ 2412.671062][ T5819] usb 4-1: Manufacturer: syz [ 2412.675727][ T5819] usb 4-1: SerialNumber: syz [ 2412.687952][ T5819] usb 4-1: config 0 descriptor?? [ 2412.700438][T30619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2412.710486][T30619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2412.711719][T16966] usb 7-1: Using ep0 maxpacket: 8 [ 2412.725392][T16966] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2412.738325][T16966] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2412.750058][T16966] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2412.761808][T16966] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2412.774881][T16966] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2412.785075][T16966] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2412.798151][T16966] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2412.808061][T16966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2412.810665][T16461] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2412.939532][T30619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2412.946968][T30619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2412.985402][T16461] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 2412.997068][T16461] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2413.007519][T16461] usb 6-1: config 0 has no interface number 0 [ 2413.013898][T16461] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2413.027988][T16461] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2413.039082][T16461] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2413.065483][T16966] usb 7-1: GET_CAPABILITIES returned 0 [ 2413.077777][T16966] usbtmc 7-1:16.0: can't read capabilities [ 2413.081068][T16461] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2413.092991][T16461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.102920][T16461] usb 6-1: Product: syz [ 2413.107126][T16461] usb 6-1: Manufacturer: syz [ 2413.111734][T16461] usb 6-1: SerialNumber: syz [ 2413.121118][T16461] usb 6-1: config 0 descriptor?? [ 2413.162568][T30638] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8 [ 2413.176969][ T5819] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2413.215476][ T5819] asix 4-1:0.34: probe with driver asix failed with error -61 [ 2414.261013][T16461] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2414.310769][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.319886][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.328975][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.338061][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.347141][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.360752][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.369864][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.378986][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.388076][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.397179][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.417058][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.426176][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.435274][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.444368][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.453466][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.467726][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2414.485209][T16459] usb 7-1: USB disconnect, device number 4 [ 2416.180272][ T5718] usb 4-1: USB disconnect, device number 31 [ 2416.243158][T16459] usb 6-1: USB disconnect, device number 119 [ 2419.362592][ T5819] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2419.546807][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 2419.555242][ T5819] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2419.607325][ T5819] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2419.616954][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2419.625386][ T5819] usb 4-1: Product: syz [ 2419.629710][ T5819] usb 4-1: Manufacturer: syz [ 2419.634385][ T5819] usb 4-1: SerialNumber: syz [ 2420.138647][ T5819] usb 4-1: config 0 descriptor?? [ 2420.144467][T30689] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2420.198099][T16461] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2420.382283][ T5819] usb 4-1: USB disconnect, device number 32 [ 2420.396934][T16461] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 2420.432624][T16461] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2420.449708][T30715] : renamed from bond_slave_0 (while UP) [ 2420.452356][T16461] usb 6-1: config 0 has no interface number 0 [ 2420.462290][T16461] usb 6-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2420.478799][ T5718] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2420.491279][T16461] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2420.500410][T16461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.508405][T16461] usb 6-1: Product: syz [ 2420.512844][T16461] usb 6-1: Manufacturer: syz [ 2420.517459][T16461] usb 6-1: SerialNumber: syz [ 2420.524885][T30717] netlink: 'syz.2.6926': attribute type 1 has an invalid length. [ 2420.532887][T16461] usb 6-1: config 0 descriptor?? [ 2420.540798][T30717] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6926'. [ 2420.569847][ T29] audit: type=1400 audit(1786220562.147:886): avc: denied { read } for pid=5258 comm="dhcpcd" name="n50" dev="tmpfs" ino=22258 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2420.591947][ T29] audit: type=1400 audit(1786220562.147:887): avc: denied { open } for pid=5258 comm="dhcpcd" path="/run/udev/data/n50" dev="tmpfs" ino=22258 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2420.618986][ T29] audit: type=1400 audit(1786220562.147:888): avc: denied { getattr } for pid=5258 comm="dhcpcd" path="/run/udev/data/n50" dev="tmpfs" ino=22258 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2420.734774][ T186] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2420.745028][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2420.756452][ T5718] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2420.764704][ T5718] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2420.775181][ T5718] usb 2-1: config 63 has no interface number 0 [ 2420.781339][ T5718] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2420.789909][ T5718] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2420.798962][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.810416][ T5718] usb 2-1: Product: syz [ 2420.814884][T30724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6928'. [ 2420.823841][T30724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6928'. [ 2420.832808][T30724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6928'. [ 2420.842291][ T5718] usb 2-1: Manufacturer: syz [ 2420.847414][ T5718] usb 2-1: SerialNumber: syz [ 2420.934810][ T186] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 2420.946129][ T186] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2420.955319][ T186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.963436][ T186] usb 7-1: Product: syz [ 2420.967992][ T186] usb 7-1: Manufacturer: syz [ 2420.975441][ T186] usb 7-1: SerialNumber: syz [ 2421.006651][T16966] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2421.326665][T30713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2421.397227][T30713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2421.496988][T30713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2421.554996][T30713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2421.999371][ T5819] usb 7-1: USB disconnect, device number 5 [ 2422.108945][T30730] netlink: 'syz.2.6930': attribute type 1 has an invalid length. [ 2422.118453][T30730] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6930'. [ 2422.172928][ T5718] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2422.189226][ T5718] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2422.201766][T16966] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2422.224962][T16966] ath9k_htc: Failed to initialize the device [ 2422.235519][ T5718] uvcvideo 2-1:63.66: No valid video chain found. [ 2422.248736][ T5819] usb 7-1: ath9k_htc: USB layer deinitialized [ 2422.266568][ T5718] usb 2-1: USB disconnect, device number 26 [ 2422.624766][ T5819] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 2422.839861][ T5819] usb 7-1: Using ep0 maxpacket: 32 [ 2422.855795][ T5819] usb 7-1: config index 0 descriptor too short (expected 241, got 72) [ 2422.874824][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2422.918288][ T5819] usb 7-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2422.941590][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2423.200473][T14419] usb 6-1: USB disconnect, device number 120 [ 2423.258628][ T5819] usb 7-1: config 0 descriptor?? [ 2423.340012][ T5819] mos7840 7-1:0.0: missing endpoints [ 2423.393723][T30745] netlink: 'syz.5.6934': attribute type 1 has an invalid length. [ 2423.416707][T30745] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6934'. [ 2423.708523][ T5819] usb 7-1: USB disconnect, device number 6 [ 2424.958926][T30759] netlink: 'syz.5.6941': attribute type 1 has an invalid length. [ 2424.971061][T30759] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6941'. [ 2426.622628][ T5819] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2426.674119][T16966] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 2426.850199][ T5819] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2426.892453][T16966] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 2426.930380][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2427.017100][ T5819] usb 2-1: config 0 has no interface number 0 [ 2427.094666][ T5819] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2427.262438][ T5819] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2427.290415][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.346722][ T5819] usb 2-1: Product: syz [ 2427.371113][ T5819] usb 2-1: Manufacturer: syz [ 2427.377096][ T5819] usb 2-1: SerialNumber: syz [ 2427.430708][ T5819] usb 2-1: config 0 descriptor?? [ 2427.706627][T16966] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2427.715936][T16966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2427.723968][T16966] usb 7-1: Product: syz [ 2427.728277][T16966] usb 7-1: Manufacturer: syz [ 2427.733920][T16966] usb 7-1: SerialNumber: syz [ 2427.754137][ T5718] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2427.991179][T30790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2428.009793][T30790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2428.065530][T30790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2428.080553][T30790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2428.102544][T16966] usb 7-1: USB disconnect, device number 7 [ 2428.257241][T30814] netlink: 'syz.5.6958': attribute type 1 has an invalid length. [ 2428.265325][T30814] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6958'. [ 2429.231950][ T5718] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2429.264244][ T5718] ath9k_htc: Failed to initialize the device [ 2429.272627][T16966] usb 7-1: ath9k_htc: USB layer deinitialized [ 2429.719765][T16966] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2429.938951][ T186] usb 2-1: USB disconnect, device number 27 [ 2429.989331][ T29] audit: type=1400 audit(1786220570.834:889): avc: denied { write } for pid=30823 comm="syz.3.6960" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2430.260060][T30837] : renamed from bond_slave_0 (while UP) [ 2435.471995][T16461] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2435.767906][T16461] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 2435.777101][T16461] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.910401][T16461] usb 6-1: config 0 has no interface number 0 [ 2435.984795][T16461] usb 6-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2436.092377][T16461] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2436.111305][T16461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.151256][T16461] usb 6-1: Product: syz [ 2436.177070][T16461] usb 6-1: Manufacturer: syz [ 2436.191763][T16461] usb 6-1: SerialNumber: syz [ 2436.197068][T21339] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2436.319532][T16461] usb 6-1: config 0 descriptor?? [ 2436.406367][T21339] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2436.461991][T21339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.610910][T21339] usb 4-1: Product: syz [ 2436.668139][T21339] usb 4-1: Manufacturer: syz [ 2436.716647][T21339] usb 4-1: SerialNumber: syz [ 2437.043723][ T5705] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2437.224376][ T5705] usb 3-1: device descriptor read/64, error -71 [ 2437.492395][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2437.514870][ T5705] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2437.663432][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2437.766029][ T5705] usb 3-1: device descriptor read/64, error -71 [ 2437.829718][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2437.941953][T21339] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2438.022445][ T5705] usb usb3-port1: attempt power cycle [ 2438.050275][T16461] usb 6-1: USB disconnect, device number 121 [ 2438.092641][T21339] usb 4-1: USB disconnect, device number 33 [ 2438.197850][T30902] netlink: 'syz.1.6982': attribute type 1 has an invalid length. [ 2438.230169][T30902] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6982'. [ 2438.312486][T30909] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6985'. [ 2438.416005][ T5705] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2438.450045][ T5705] usb 3-1: device descriptor read/8, error -71 [ 2439.531470][ T5705] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2439.553789][ T5705] usb 3-1: device descriptor read/8, error -71 [ 2439.676678][ T5705] usb usb3-port1: unable to enumerate USB device [ 2443.724803][ T5705] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2444.363394][ T5602] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2444.495292][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 2444.519665][ T5705] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2444.530294][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.538885][ T5705] usb 3-1: Product: syz [ 2444.545305][ T5705] usb 3-1: Manufacturer: syz [ 2444.556545][ T5705] usb 3-1: SerialNumber: syz [ 2444.567503][ T5705] usb 3-1: config 0 descriptor?? [ 2444.568339][ T5602] usb 7-1: Using ep0 maxpacket: 8 [ 2444.592420][ T5705] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2444.607664][ T5602] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2444.640281][ T5602] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2444.675943][ T5602] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2444.732803][ T5602] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2444.804112][ T5602] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2444.853509][ T5602] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2444.900993][ T5602] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2444.942299][ T5602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.658484][ T5602] usb 7-1: GET_CAPABILITIES returned 0 [ 2445.692588][ T5602] usbtmc 7-1:16.0: can't read capabilities [ 2445.763426][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2445.903725][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.912806][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.921839][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.933717][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.942859][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.951983][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.961059][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.970152][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.979709][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.988793][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2445.997869][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.006942][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.016020][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.334903][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.344003][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.353073][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2446.368692][T16461] usb 7-1: USB disconnect, device number 9 [ 2446.551083][T21339] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2446.931159][ T5705] gspca_ov534_9: reg_r err -32 [ 2447.687853][ T5705] gspca_ov534_9: Unknown sensor 0000 [ 2447.688259][ T5705] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 2448.552573][T21339] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2448.700173][T21339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2448.717719][T16461] usb 3-1: USB disconnect, device number 56 [ 2448.787061][T21339] usb 2-1: config 0 has no interface number 0 [ 2448.828868][T21339] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2449.141972][T21339] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2449.960076][T21339] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2450.069204][T21339] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2450.134637][T21339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.189811][T21339] usb 2-1: Product: syz [ 2450.210116][T21339] usb 2-1: Manufacturer: syz [ 2450.232299][T21339] usb 2-1: SerialNumber: syz [ 2450.303174][T21339] usb 2-1: config 0 descriptor?? [ 2453.077731][T21339] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 2453.177315][T21339] usb 2-1: USB disconnect, device number 28 [ 2453.668740][T31021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7016'. [ 2454.382009][T16459] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2454.481510][T31028] bond1: entered promiscuous mode [ 2454.548576][T31028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7019'. [ 2454.598972][T16459] usb 6-1: Using ep0 maxpacket: 8 [ 2454.723556][T16459] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2454.749670][T31030] syz.2.7019 (31030): attempted to duplicate a private mapping with mremap. This is not supported. [ 2454.800543][T16459] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2454.866460][T16459] usb 6-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 2454.954225][T16459] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 2455.012380][T16459] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2455.085050][T16459] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2455.149185][T16459] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2455.159737][T31030] overlay: Unknown parameter '/' [ 2455.195698][T16459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2455.258569][T31028] netlink: zone id is out of range [ 2455.925372][T16459] usb 6-1: GET_CAPABILITIES returned 0 [ 2455.953584][T16459] usbtmc 6-1:16.0: can't read capabilities [ 2456.002417][ T29] audit: type=1400 audit(1786220594.856:890): avc: denied { override_creds } for pid=31042 comm="syz.2.7023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 2456.113590][T16459] usb 6-1: USB disconnect, device number 122 [ 2457.929841][T31057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7027'. [ 2458.151946][T28807] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2458.322350][T31072] evm: overlay not supported [ 2458.335801][T31073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7031'. [ 2458.360937][T28807] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2458.393957][T28807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2458.421401][T31068] bond1: entered promiscuous mode [ 2458.443254][ T29] audit: type=1400 audit(1786220597.108:891): avc: denied { remount } for pid=31078 comm="syz.5.7034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2458.469894][T28807] usb 3-1: config 0 has no interface number 0 [ 2458.490079][T28807] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2458.562022][T28807] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2458.597320][T31079] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 2458.623095][T28807] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2458.705057][T28807] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2458.743451][T28807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.773233][T28807] usb 3-1: Product: syz [ 2458.785255][T31084] fuse: Unknown parameter '0x0000000000000004' [ 2458.798273][T28807] usb 3-1: Manufacturer: syz [ 2458.812880][T28807] usb 3-1: SerialNumber: syz [ 2458.824075][T28807] usb 3-1: config 0 descriptor?? [ 2458.972482][T31090] bond2: entered promiscuous mode [ 2458.988188][T31090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7038'. [ 2459.114279][T31094] netlink: zone id is out of range [ 2460.884013][T31122] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2461.435561][ T5718] usb 3-1: USB disconnect, device number 57 [ 2461.874391][T31133] : renamed from bond_slave_0 (while UP) [ 2462.357150][T31127] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 2462.544124][T31143] : renamed from bond_slave_0 (while UP) [ 2463.164910][T31151] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2464.796413][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7059'. [ 2464.947583][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7059'. [ 2464.971186][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7059'. [ 2465.074074][T16461] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2465.147428][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7059'. [ 2465.684137][T16461] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2465.746182][T16461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2465.811434][T16461] usb 2-1: config 0 has no interface number 0 [ 2465.842115][T16461] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2465.952576][T31176] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 2465.964141][T16461] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2465.999222][T16461] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2466.083504][T16461] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2466.129754][T16461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2466.178960][T16461] usb 2-1: Product: syz [ 2466.270151][T16461] usb 2-1: Manufacturer: syz [ 2466.304094][T16461] usb 2-1: SerialNumber: syz [ 2466.326765][T16461] usb 2-1: config 0 descriptor?? [ 2467.916489][T31201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7070'. [ 2467.925817][T31201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7070'. [ 2467.934829][T31201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7070'. [ 2468.165373][T16461] usb 2-1: USB disconnect, device number 29 [ 2469.301382][T31224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7078'. [ 2469.435803][T31225] lo speed is unknown, defaulting to 1000 [ 2469.533597][ T29] audit: type=1400 audit(1786220607.338:892): avc: denied { ioctl } for pid=31219 comm="syz.6.7077" path="socket:[167859]" dev="sockfs" ino=167859 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2469.639730][T31233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7080'. [ 2471.236963][ T5819] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2471.312378][T16461] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 2471.355561][T14419] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2472.346279][ T5819] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2472.385165][ T5819] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2472.399799][ T5819] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2472.410797][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.419944][ T5819] usb 3-1: Product: syz [ 2472.424242][ T5819] usb 3-1: Manufacturer: syz [ 2472.430260][ T5819] usb 3-1: SerialNumber: syz [ 2472.462842][ T5819] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2472.479432][ T5819] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2472.508751][ T5819] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2472.545896][T14419] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2472.564986][T14419] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2472.587125][T14419] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2472.619834][T14419] usb 2-1: config 63 has no interface number 0 [ 2472.640205][T14419] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2472.670483][T14419] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2472.750825][T16461] usb 4-1: device descriptor read/all, error -71 [ 2472.789963][T14419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.350245][T14419] usb 2-1: Product: syz [ 2473.368150][T14419] usb 2-1: Manufacturer: syz [ 2473.372945][T14419] usb 2-1: SerialNumber: syz [ 2473.516548][T31264] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2473.526132][T31264] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2473.538350][T31264] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2473.555564][ T29] audit: type=1400 audit(1786220611.049:893): avc: denied { firmware_load } for pid=31261 comm="syz.6.7091" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2474.847622][T21339] usb 3-1: USB disconnect, device number 58 [ 2474.883926][T14419] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2474.913889][T14419] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2474.934374][T21339] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2474.963254][T14419] uvcvideo 2-1:63.66: No valid video chain found. [ 2475.017128][T14419] usb 2-1: USB disconnect, device number 30 [ 2475.054583][T31280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7095'. [ 2475.064767][T21339] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2475.174851][T21339] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2475.356514][T31277] bond2: entered promiscuous mode [ 2475.525147][T31277] overlay: Unknown parameter '/' [ 2475.546578][T31277] netlink: zone id is out of range [ 2475.552072][T31277] netlink: zone id is out of range [ 2478.894859][T21339] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2479.992218][T21339] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2480.004795][T21339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.024856][T21339] usb 4-1: Product: syz [ 2480.061491][T21339] usb 4-1: Manufacturer: syz [ 2480.097330][T21339] usb 4-1: SerialNumber: syz [ 2480.567341][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2480.580398][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2480.616884][T16461] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2480.682147][T14419] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2480.782470][T16461] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2480.793237][T16461] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 2480.802241][T16461] usb 2-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2480.815527][T16461] usb 2-1: config 63 has no interface number 0 [ 2480.822008][T16461] usb 2-1: config 63 interface 66 has no altsetting 0 [ 2480.832797][T16461] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2480.842493][T16461] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.853597][T14419] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2480.865197][T16461] usb 2-1: Product: syz [ 2480.880868][T16461] usb 2-1: Manufacturer: syz [ 2480.886083][T16461] usb 2-1: SerialNumber: syz [ 2480.886462][T14419] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2480.919500][T14419] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2480.948978][T14419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2480.958872][T14419] usb 3-1: Product: syz [ 2480.965499][T14419] usb 3-1: Manufacturer: syz [ 2480.972537][T14419] usb 3-1: SerialNumber: syz [ 2481.016912][T14419] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 2481.038578][T14419] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2481.061936][T14419] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2481.630258][T31334] lo speed is unknown, defaulting to 1000 [ 2481.901143][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2481.940824][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2481.961451][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2481.993490][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2482.015205][T21339] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2482.037656][T21339] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2482.086735][T21339] usb 4-1: USB disconnect, device number 36 [ 2482.263913][T14419] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2482.404140][ T5705] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 2482.439224][T14419] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2482.458321][T14419] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2482.472184][T14419] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2482.481960][T14419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2482.497543][T14419] usb 7-1: config 0 descriptor?? [ 2482.517714][T14419] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2482.518294][T31347] Bluetooth: MGMT ver 1.23 [ 2482.530006][T31347] Bluetooth: hci0: unsupported parameter 255 [ 2482.538018][T31347] Bluetooth: hci0: unsupported parameter 255 [ 2482.568573][ T5705] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2482.589116][ T5705] usb 6-1: config 0 has no interface number 0 [ 2482.605948][ T5705] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2482.617234][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2482.626236][ T5705] usb 6-1: Product: syz [ 2482.631260][ T5705] usb 6-1: Manufacturer: syz [ 2482.639047][ T5705] usb 6-1: SerialNumber: syz [ 2482.686407][ T5705] usb 6-1: config 0 descriptor?? [ 2482.717307][ T5705] usb 6-1: selecting invalid altsetting 1 [ 2482.723674][ T5705] dvb_ttusb_budget: ttusb_init_controller: error [ 2482.750132][ T5705] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2482.813159][T14419] usb 7-1: USB disconnect, device number 10 [ 2483.444346][T14419] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2483.733793][T14419] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2483.736070][ T5602] usb 3-1: USB disconnect, device number 59 [ 2483.767273][ T5602] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2483.782256][ T5602] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2483.796484][ T5705] DVB: Unable to find symbol stv0299_attach() [ 2483.797110][ T5602] ti_usb_3410_5052 3-1:2.0: device disconnected [ 2483.827099][T14419] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2483.885080][T16461] uvcvideo 2-1:63.66: Found Unit with invalid ID 0 [ 2483.903269][T16461] uvcvideo 2-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2483.916120][T14419] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 2483.930695][ T5705] DVB: Unable to find symbol tda8083_attach() [ 2483.938373][T16461] uvcvideo 2-1:63.66: No valid video chain found. [ 2483.949019][ T5705] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2483.958076][T14419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2483.972795][T16461] usb 2-1: USB disconnect, device number 31 [ 2484.004675][T14419] usb 7-1: config 0 descriptor?? [ 2484.056929][T14419] aiptek 7-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 2484.092822][T14419] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2484.612725][T14419] usb 6-1: USB disconnect, device number 123 [ 2484.727235][T31370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2484.837954][T31370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2485.446778][T31373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7117'. [ 2485.496805][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7117'. [ 2485.539463][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7117'. [ 2485.596365][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7117'. [ 2485.641308][T31375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7117'. [ 2485.866884][T31382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7120'. [ 2486.162894][T14419] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2486.175087][T31390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7122'. [ 2486.184065][T31390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7122'. [ 2486.196944][T31390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7122'. [ 2486.370550][T14419] usb 4-1: config 0 has no interfaces? [ 2486.395796][T14419] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2486.437816][T14419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2486.481637][T14419] usb 4-1: config 0 descriptor?? [ 2486.734704][ T5705] usb 4-1: USB disconnect, device number 37 [ 2486.909490][T28807] usb 7-1: USB disconnect, device number 11 [ 2486.931874][T14419] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2487.133237][T14419] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2487.161268][T14419] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2487.185161][T14419] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2487.196660][T14419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2487.204747][T14419] usb 6-1: Product: syz [ 2487.209109][T14419] usb 6-1: Manufacturer: syz [ 2487.215113][T14419] usb 6-1: SerialNumber: syz [ 2487.240341][T14419] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 2487.255281][T14419] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2487.271019][T14419] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2487.321913][T28807] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2487.602254][T31404] netlink: 'syz.1.7128': attribute type 1 has an invalid length. [ 2487.610601][T31404] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7128'. [ 2487.962625][T28807] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2487.988371][T28807] usb 7-1: config 63 has an invalid interface number: 66 but max is 0 [ 2488.014958][T28807] usb 7-1: config 63 has an invalid descriptor of length 255, skipping remainder of the config [ 2488.031946][T28807] usb 7-1: config 63 has no interface number 0 [ 2488.047453][T28807] usb 7-1: config 63 interface 66 has no altsetting 0 [ 2488.066890][T28807] usb 7-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2488.081910][T28807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2488.090016][T28807] usb 7-1: Product: syz [ 2488.094364][T28807] usb 7-1: Manufacturer: syz [ 2488.098982][T28807] usb 7-1: SerialNumber: syz [ 2488.120669][T31412] jffs2: notice: (31412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 2488.150322][ T29] audit: type=1400 audit(1786220624.537:894): avc: denied { write } for pid=31411 comm="syz.1.7129" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2488.172292][ T29] audit: type=1400 audit(1786220624.537:895): avc: denied { create } for pid=31411 comm="syz.1.7129" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 2489.053090][T31423] lo speed is unknown, defaulting to 1000 [ 2489.262492][T31396] bond1: left promiscuous mode [ 2489.279444][T31396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2489.305356][T31396] bond2: left promiscuous mode [ 2489.310627][T31396] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2489.328903][T16461] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2489.512547][T16461] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2489.543360][T16461] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 2489.554169][T16461] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2489.564701][T16461] usb 3-1: config 63 has no interface number 0 [ 2489.573564][T16461] usb 3-1: config 63 interface 66 has no altsetting 0 [ 2489.585623][T16461] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2489.607128][T16461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2489.641522][T16461] usb 3-1: Product: syz [ 2489.655985][T16461] usb 3-1: Manufacturer: syz [ 2489.660807][T16461] usb 3-1: SerialNumber: syz [ 2489.879271][ T5705] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 2489.994298][T16461] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22 [ 2490.066938][T16461] usb 3-1: USB disconnect, device number 60 [ 2490.149263][ T5705] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2490.213750][ T5705] usb 4-1: config 0 has no interface number 0 [ 2490.289391][ T5819] usb 6-1: USB disconnect, device number 124 [ 2490.352320][ T5705] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2490.470675][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2490.541743][ T5705] usb 4-1: Product: syz [ 2490.572971][ T5705] usb 4-1: Manufacturer: syz [ 2490.597663][ T5705] usb 4-1: SerialNumber: syz [ 2490.618193][ T5819] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2490.626670][T28807] uvcvideo 7-1:63.66: Found Unit with invalid ID 0 [ 2490.642183][ T5705] usb 4-1: config 0 descriptor?? [ 2490.647358][T28807] uvcvideo 7-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 2490.654739][T28807] uvcvideo 7-1:63.66: No valid video chain found. [ 2490.665908][T28807] usb 7-1: USB disconnect, device number 12 [ 2490.698616][ T5705] usb 4-1: selecting invalid altsetting 1 [ 2490.706314][ T5819] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2490.762406][ T5705] dvb_ttusb_budget: ttusb_init_controller: error [ 2490.799517][ T5819] ti_usb_3410_5052 6-1:2.0: device disconnected [ 2490.810045][ T5705] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2491.984417][ T5705] DVB: Unable to find symbol stv0299_attach() [ 2492.040182][T31453] overlayfs: failed to verify origin (106/file1, ino=589, err=-116) [ 2492.094513][T31453] overlayfs: failed to verify origin (106/file1, ino=589, err=-116) [ 2492.104487][T31452] bond1: entered promiscuous mode [ 2492.117093][T31457] __nla_validate_parse: 2 callbacks suppressed [ 2492.117106][T31457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7137'. [ 2492.138947][ T5705] DVB: Unable to find symbol tda8083_attach() [ 2492.167327][ T5705] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2492.286533][ T5705] usb 4-1: USB disconnect, device number 38 [ 2493.155225][T31457] overlay: Unknown parameter '/' [ 2493.178622][T31457] netlink: zone id is out of range [ 2493.742207][T31472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7142'. [ 2494.037573][ T5718] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2494.070197][ T5705] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2494.088032][T31483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7145'. [ 2494.205771][T31487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7147'. [ 2494.248753][ T5705] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 2494.307443][ T5705] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2494.325716][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2494.368541][ T5705] usb 4-1: Product: syz [ 2494.385756][ T5705] usb 4-1: Manufacturer: syz [ 2494.412557][ T5705] usb 4-1: SerialNumber: syz [ 2494.646416][T14419] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2494.973908][ T5718] usb 3-1: config 0 has no interfaces? [ 2495.768372][ T5718] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2495.831831][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.837482][T31476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2495.889500][ T5718] usb 3-1: config 0 descriptor?? [ 2495.932755][T31476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2495.995125][T31476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2496.057985][T31476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2496.116092][T31476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2496.191691][T31476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2496.195981][ T5718] usb 3-1: USB disconnect, device number 61 [ 2496.242084][ T5705] usb 4-1: USB disconnect, device number 39 [ 2497.147693][T14419] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2497.183641][T14419] ath9k_htc: Failed to initialize the device [ 2497.222906][ T5705] usb 4-1: ath9k_htc: USB layer deinitialized [ 2497.963646][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7152'. [ 2497.979770][T31509] can0: slcan on ttyS3. [ 2498.656915][ T29] audit: type=1400 audit(1786220634.240:896): avc: denied { listen } for pid=31523 comm="syz.1.7155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2498.951772][T31493] can0 (unregistered): slcan off ttyS3. [ 2499.049867][T31539] jffs2: notice: (31539) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 2499.186849][T31542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7158'. [ 2499.205362][T31542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7158'. [ 2499.539879][ T29] audit: type=1400 audit(1786220635.043:897): avc: denied { write } for pid=31526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2499.587644][ T29] audit: type=1400 audit(1786220635.080:898): avc: denied { create } for pid=31526 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2499.781191][ T29] audit: type=1400 audit(1786220635.080:899): avc: denied { write } for pid=31526 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=22934 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2499.813088][T16459] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2499.871217][T31562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7163'. [ 2499.894324][ T29] audit: type=1400 audit(1786220635.080:900): avc: denied { append } for pid=31526 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=22934 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2500.016908][T16459] usb 6-1: Using ep0 maxpacket: 16 [ 2500.035043][T16459] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 2500.053917][ T29] audit: type=1400 audit(1786220635.486:901): avc: denied { write } for pid=31558 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2500.086365][T16459] usb 6-1: config 0 has no interface number 0 [ 2500.108981][T16459] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2500.185756][T16459] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2500.203132][ T29] audit: type=1400 audit(1786220635.486:902): avc: denied { unlink } for pid=31558 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=22934 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2500.288199][T16459] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2500.316343][T16459] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.340005][T16459] usb 6-1: Product: syz [ 2500.449999][T16459] usb 6-1: Manufacturer: syz [ 2500.475955][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7165'. [ 2500.504994][T16459] usb 6-1: SerialNumber: syz [ 2500.541122][T16459] usb 6-1: config 0 descriptor?? [ 2500.548352][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7165'. [ 2500.570785][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7165'. [ 2500.584554][T31553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2500.602581][T31553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2500.698585][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7165'. [ 2500.743110][T31574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7165'. [ 2500.995654][T31553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2501.074003][T31553] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2501.409937][T16459] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2501.636407][T16459] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2501.762722][T16459] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 2501.918273][T16459] asix 6-1:0.34: probe with driver asix failed with error -61 [ 2502.588806][ T29] audit: type=1400 audit(1786220637.868:903): avc: denied { write } for pid=31569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2502.800624][T14419] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2503.497484][T14419] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2504.013944][T20711] usb 6-1: USB disconnect, device number 125 [ 2504.025470][T14419] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2504.219631][T14419] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 2504.260267][ T29] audit: type=1400 audit(1786220639.363:904): avc: denied { write } for pid=31607 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2504.293351][T14419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2504.309841][T14419] usb 2-1: Product: syz [ 2504.320895][T14419] usb 2-1: Manufacturer: syz [ 2504.449768][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7174'. [ 2504.456487][T14419] usb 2-1: SerialNumber: syz [ 2504.568930][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7174'. [ 2504.582572][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7174'. [ 2504.597089][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7174'. [ 2504.612912][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7174'. [ 2504.735269][T31614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7173'. [ 2504.884140][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7173'. [ 2504.897230][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7173'. [ 2504.950900][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7173'. [ 2504.959680][T14419] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 2504.978343][T31621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7173'. [ 2505.100010][T14419] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 2505.126117][T31618] lo speed is unknown, defaulting to 1000 [ 2505.214424][T14419] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 2506.288506][ T5819] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 2506.440223][T16459] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2506.592411][ T5602] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 2506.694130][T14419] usb 2-1: USB disconnect, device number 32 [ 2506.716095][ T5819] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2506.732350][T14419] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 2506.753498][ T5819] usb 3-1: config 0 has no interface number 0 [ 2506.772679][ T5819] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2506.787103][T14419] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 2506.798385][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.812321][T14419] ti_usb_3410_5052 2-1:2.0: device disconnected [ 2506.818876][ T5819] usb 3-1: Product: syz [ 2506.830586][ T5819] usb 3-1: Manufacturer: syz [ 2506.842452][T16459] usb 6-1: config 0 has no interfaces? [ 2506.844936][ T5819] usb 3-1: SerialNumber: syz [ 2506.853760][ T5602] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 2506.864501][ T5819] usb 3-1: config 0 descriptor?? [ 2506.873134][T16459] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2506.906855][ T5602] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2506.912628][ T5819] usb 3-1: selecting invalid altsetting 1 [ 2506.922012][T16459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.942580][ T5602] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2506.974944][T16459] usb 6-1: config 0 descriptor?? [ 2506.983689][ T5602] usb 7-1: Product: syz [ 2506.990137][ T5819] dvb_ttusb_budget: ttusb_init_controller: error [ 2507.015844][ T5602] usb 7-1: Manufacturer: syz [ 2507.023736][ T5819] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2507.050126][ T5602] usb 7-1: SerialNumber: syz [ 2507.117438][T16459] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2507.238025][T28807] usb 6-1: USB disconnect, device number 126 [ 2507.253492][ T5819] DVB: Unable to find symbol stv0299_attach() [ 2507.370691][T31633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2507.401758][ T5819] DVB: Unable to find symbol tda8083_attach() [ 2507.421874][T31633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2507.431099][ T5819] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2507.482717][T31633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2507.527811][T31633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2507.586089][T31633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2507.627562][T31633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2507.666210][ T5602] usb 7-1: USB disconnect, device number 13 [ 2508.194876][T28807] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2508.324801][T16459] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2508.355997][ T5819] usb 3-1: USB disconnect, device number 62 [ 2508.366105][T16459] ath9k_htc: Failed to initialize the device [ 2508.382399][T28807] usb 2-1: Using ep0 maxpacket: 16 [ 2508.414269][ T5602] usb 7-1: ath9k_htc: USB layer deinitialized [ 2508.430117][T28807] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 2508.459493][T28807] usb 2-1: config 0 has no interface number 0 [ 2508.484223][T28807] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2508.580851][T28807] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2508.668370][T28807] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2508.728357][T28807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2508.773626][T28807] usb 2-1: Product: syz [ 2508.790211][T28807] usb 2-1: Manufacturer: syz [ 2508.795383][ T5602] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2508.818088][T28807] usb 2-1: SerialNumber: syz [ 2508.861539][T28807] usb 2-1: config 0 descriptor?? [ 2508.897834][T31653] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 2508.943318][T31653] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 2508.990546][ T5602] usb 7-1: Using ep0 maxpacket: 32 [ 2509.049081][ T5602] usb 7-1: config index 0 descriptor too short (expected 241, got 72) [ 2509.100813][ T5602] usb 7-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2509.171107][ T5602] usb 7-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2509.210842][T31653] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 2509.232429][T31653] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 2509.256320][ T5819] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2509.287512][ T5602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.359629][ T5602] usb 7-1: config 0 descriptor?? [ 2509.432249][ T5602] mos7840 7-1:0.0: missing endpoints [ 2509.453852][ T5819] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2509.489190][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2509.516435][T28807] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2509.534018][ T5819] usb 4-1: config 0 has no interface number 0 [ 2509.568636][ T5819] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2509.640669][T20711] usb 7-1: USB disconnect, device number 14 [ 2509.656024][ T5819] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2509.700980][T28807] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2509.756309][ T5819] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2509.781536][ T5819] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2509.798541][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.838115][ T5819] usb 4-1: Product: syz [ 2509.850842][ T5819] usb 4-1: Manufacturer: syz [ 2509.865482][ T5819] usb 4-1: SerialNumber: syz [ 2509.896641][ T5819] usb 4-1: config 0 descriptor?? [ 2509.915636][T28807] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 2509.993208][T28807] asix 2-1:0.34: probe with driver asix failed with error -61 [ 2511.232995][T20711] usb 2-1: USB disconnect, device number 33 [ 2512.144874][ T5819] usb 4-1: USB disconnect, device number 41 [ 2512.278458][T20711] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2512.311896][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2512.464166][T20711] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2512.497643][T20711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2512.535086][T20711] usb 3-1: config 0 has no interface number 0 [ 2512.561378][T20711] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2512.601521][T20711] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2512.652825][T20711] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2512.726094][T20711] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2512.751373][T20711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2512.774030][T20711] usb 3-1: Product: syz [ 2512.785758][T20711] usb 3-1: Manufacturer: syz [ 2512.806906][T20711] usb 3-1: SerialNumber: syz [ 2512.831308][T20711] usb 3-1: config 0 descriptor?? [ 2513.095051][T20711] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2513.182661][T20711] usb 3-1: USB disconnect, device number 63 [ 2515.554846][T31719] __nla_validate_parse: 11 callbacks suppressed [ 2515.554861][T31719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7205'. [ 2518.511988][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7212'. [ 2518.542643][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7212'. [ 2518.570310][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7212'. [ 2518.606946][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7212'. [ 2518.652630][T31754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7212'. [ 2518.705207][T31759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7210'. [ 2519.005107][ T5819] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2519.045107][ T29] audit: type=1400 audit(1786220653.054:905): avc: denied { write } for pid=31744 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2519.193185][ T5819] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 2519.227215][ T5819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2519.282328][ T5819] usb 2-1: config 0 has no interface number 0 [ 2519.317982][ T5819] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2519.359661][ T5819] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2519.488285][ T5819] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2519.599620][ T5819] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2519.630555][ T29] audit: type=1400 audit(1786220653.590:906): avc: denied { write } for pid=31774 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2519.669074][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2519.720662][ T5819] usb 2-1: Product: syz [ 2519.761413][ T5819] usb 2-1: Manufacturer: syz [ 2519.794725][ T5819] usb 2-1: SerialNumber: syz [ 2519.853113][ T5819] usb 2-1: config 0 descriptor?? [ 2520.162632][ T5819] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2520.245880][ T5819] usb 2-1: USB disconnect, device number 34 [ 2520.626655][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7219'. [ 2520.684636][T16459] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2520.726883][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7219'. [ 2520.765322][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7219'. [ 2520.914882][T16459] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 2520.974117][T16459] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2521.084339][T16459] usb 4-1: config 0 has no interface number 0 [ 2521.135465][T16459] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2521.206647][T16459] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2521.261916][T16459] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2521.374031][T16459] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2521.462453][T16459] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2521.816091][T16459] usb 4-1: Product: syz [ 2521.816760][ T29] audit: type=1400 audit(1786220655.612:907): avc: denied { write } for pid=31784 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2521.925352][T16459] usb 4-1: Manufacturer: syz [ 2521.972571][T16459] usb 4-1: SerialNumber: syz [ 2522.014661][T16459] usb 4-1: config 0 descriptor?? [ 2522.136649][ T29] audit: type=1400 audit(1786220655.907:908): avc: denied { write } for pid=31818 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2522.273111][T16459] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2523.956733][T31840] program syz.6.7227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2523.966334][T31840] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2524.075966][ T29] audit: type=1400 audit(1786220657.597:909): avc: denied { ioctl } for pid=31832 comm="syz.6.7227" path="/dev/sg0" dev="devtmpfs" ino=725 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2524.910984][T31841] fuse: Bad value for 'fd' [ 2525.211038][ T5819] usb 4-1: USB disconnect, device number 42 [ 2525.858357][T31852] __nla_validate_parse: 2 callbacks suppressed [ 2525.858392][T31852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7230'. [ 2526.004115][ T29] audit: type=1400 audit(1786220659.489:910): avc: denied { write } for pid=31826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2526.503975][ T29] audit: type=1400 audit(1786220659.941:911): avc: denied { write } for pid=31864 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2526.667510][T31866] bond1: entered promiscuous mode [ 2526.949334][T31869] overlay: Unknown parameter '/' [ 2526.988683][T31869] netlink: zone id is out of range [ 2527.069655][T31871] lo speed is unknown, defaulting to 1000 [ 2527.617291][T31878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7234'. [ 2527.639918][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7234'. [ 2527.653865][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7234'. [ 2527.667689][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7234'. [ 2527.688209][T31883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7234'. [ 2527.842509][T31885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'. [ 2528.388728][T31885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'. [ 2528.425662][T31885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'. [ 2528.440336][T31885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'. [ 2529.141923][ T29] audit: type=1400 audit(1786220662.379:912): avc: denied { write } for pid=31870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2529.262960][T28807] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 2529.437638][T28807] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2529.480543][T28807] usb 7-1: config 0 has no interface number 0 [ 2529.508404][T28807] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2529.538920][T28807] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2529.573324][T28807] usb 7-1: Product: syz [ 2529.592196][T28807] usb 7-1: Manufacturer: syz [ 2529.631823][T28807] usb 7-1: SerialNumber: syz [ 2529.694285][T28807] usb 7-1: config 0 descriptor?? [ 2529.744364][T28807] usb 7-1: selecting invalid altsetting 1 [ 2529.806500][ T29] audit: type=1400 audit(1786220662.988:913): avc: denied { write } for pid=31908 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2529.834177][T28807] dvb_ttusb_budget: ttusb_init_controller: error [ 2529.887867][T28807] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2530.122065][T28807] DVB: Unable to find symbol stv0299_attach() [ 2530.247992][T28807] DVB: Unable to find symbol tda8083_attach() [ 2530.281948][T28807] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2531.235898][T28807] usb 7-1: USB disconnect, device number 15 [ 2531.415887][T31949] bond2: entered promiscuous mode [ 2531.526190][T31953] overlay: Unknown parameter '/' [ 2531.534178][T31953] netlink: zone id is out of range [ 2533.041765][ T29] audit: type=1400 audit(1786220665.979:914): avc: denied { create } for pid=31951 comm="syz.6.7252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2533.147826][ T29] audit: type=1400 audit(1786220666.007:915): avc: denied { read } for pid=31951 comm="syz.6.7252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2533.949405][T31973] pim6reg: entered allmulticast mode [ 2534.073160][T31969] pim6reg: left allmulticast mode [ 2534.205215][T31973] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2537.079536][T31991] __nla_validate_parse: 6 callbacks suppressed [ 2537.079572][T31991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7261'. [ 2537.150159][T31994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7261'. [ 2537.180777][T31994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7261'. [ 2537.212842][T31994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7261'. [ 2537.250712][T31994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7261'. [ 2537.534526][T32000] lo speed is unknown, defaulting to 1000 [ 2540.084130][ T5602] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 2540.893191][ T5602] usb 2-1: device descriptor read/all, error -71 [ 2541.612527][T32026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7269'. [ 2542.589962][T32040] pim6reg: entered allmulticast mode [ 2542.600537][T32040] pim6reg: left allmulticast mode [ 2542.865066][T32035] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2543.588660][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 2543.660537][T32055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7275'. [ 2543.978750][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 2543.992021][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 2544.046929][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 2544.058857][T32054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7276'. [ 2544.122391][T32059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7277'. [ 2544.867020][T32066] pim6reg: entered allmulticast mode [ 2545.139359][T32065] pim6reg: left allmulticast mode [ 2545.236480][T32066] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2546.511903][T32075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7281'. [ 2546.564431][T32075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7281'. [ 2551.582314][T32113] pim6reg: entered allmulticast mode [ 2551.592989][T32113] pim6reg: left allmulticast mode [ 2552.814061][ T29] audit: type=1400 audit(1786220684.240:916): avc: denied { read } for pid=32118 comm="syz.2.7291" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2553.899300][ T29] audit: type=1400 audit(1786220684.240:917): avc: denied { open } for pid=32118 comm="syz.2.7291" path="net:[4026532782]" dev="nsfs" ino=4026532782 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2554.362957][T32130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'. [ 2554.393270][T32130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'. [ 2554.429328][T32130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'. [ 2554.440502][T32130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'. [ 2554.449998][T32130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7292'. [ 2554.609515][T16459] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2555.001029][T16459] usb 4-1: config 0 has no interfaces? [ 2555.008214][T16459] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2555.045449][T16459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.083900][T16459] usb 4-1: config 0 descriptor?? [ 2555.515735][T16459] usb 4-1: USB disconnect, device number 43 [ 2556.678035][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7302'. [ 2556.730784][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7302'. [ 2556.800139][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7302'. [ 2556.842435][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7302'. [ 2556.904560][T32155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7302'. [ 2559.613909][T16459] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2559.896660][T16459] usb 6-1: config 0 has no interfaces? [ 2559.903323][T16459] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2559.979905][T16459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2560.051954][T16459] usb 6-1: config 0 descriptor?? [ 2560.296129][T32182] program syz.1.7309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2560.305820][T32182] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2561.395621][T20711] usb 6-1: USB disconnect, device number 127 [ 2561.759934][T32185] overlay: Unknown parameter '/' [ 2561.785422][T32185] netlink: zone id is out of range [ 2564.023661][T32206] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2564.388327][T32203] pim6reg: entered allmulticast mode [ 2564.423263][T32199] pim6reg: left allmulticast mode [ 2564.824868][ T29] audit: type=1400 audit(1786220695.319:918): avc: denied { listen } for pid=32217 comm="syz.6.7318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2564.968000][T32222] syzkaller0: entered promiscuous mode [ 2565.001400][T32222] syzkaller0: entered allmulticast mode [ 2565.076589][ T29] audit: type=1400 audit(1786220695.559:919): avc: denied { write } for pid=32209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2565.211752][ T29] audit: type=1400 audit(1786220695.679:920): avc: denied { write } for pid=32237 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2565.701572][ T5819] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2565.754653][ T29] audit: type=1400 audit(1786220696.177:921): avc: denied { write } for pid=32241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2565.897765][ T5819] usb 3-1: config 0 has no interfaces? [ 2565.904397][ T5819] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2565.957505][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.974543][ T5819] usb 3-1: config 0 descriptor?? [ 2566.427651][T32275] pim6reg: entered allmulticast mode [ 2566.701629][T21339] usb 3-1: USB disconnect, device number 64 [ 2566.844541][T32272] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 2566.979760][ T29] audit: type=1400 audit(1786220697.082:922): avc: denied { write } for pid=32271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2567.572591][T32288] syzkaller0: entered promiscuous mode [ 2567.585553][T32288] syzkaller0: entered allmulticast mode [ 2567.702780][ T29] audit: type=1400 audit(1786220697.968:923): avc: denied { write } for pid=32279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2567.814718][T16459] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2567.892113][T32300] netlink: 'syz.6.7335': attribute type 10 has an invalid length. [ 2567.957834][T32300] team0: Port device dummy0 added [ 2568.434145][ T29] audit: type=1400 audit(1786220698.651:924): avc: denied { write } for pid=32298 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2568.959751][T32304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7336'. [ 2569.553824][T16459] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2570.065968][T16459] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2570.076187][T16459] usb 3-1: config 0 has no interface number 0 [ 2570.082312][T16459] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2570.093410][T16459] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2570.106263][T16459] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2570.123465][ T29] audit: type=1400 audit(1786220700.064:925): avc: denied { write } for pid=32311 comm="syz.6.7338" name="instances" dev="tracefs" ino=3114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2570.161866][T16459] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2570.187597][T16459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2570.224392][T16459] usb 3-1: Product: syz [ 2570.233385][ T29] audit: type=1400 audit(1786220700.239:926): avc: denied { bind } for pid=32311 comm="syz.6.7338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2570.253397][T16459] usb 3-1: Manufacturer: syz [ 2570.280260][T16459] usb 3-1: SerialNumber: syz [ 2570.333125][T16459] usb 3-1: config 0 descriptor?? [ 2570.427217][ T29] audit: type=1400 audit(1786220700.239:927): avc: denied { add_name } for pid=32311 comm="syz.6.7338" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2570.534339][ T29] audit: type=1400 audit(1786220700.239:928): avc: denied { create } for pid=32311 comm="syz.6.7338" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 2570.618119][T16459] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 2570.760140][ T5602] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2571.485225][ T5602] usb 2-1: config 0 has no interfaces? [ 2571.492759][ T5602] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2571.533168][T32332] overlay: Unknown parameter '/' [ 2571.606501][ T5602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.608362][T32329] netlink: zone id is out of range [ 2571.630573][ T5602] usb 2-1: config 0 descriptor?? [ 2571.869330][T20711] usb 2-1: USB disconnect, device number 37 [ 2571.893356][T32341] syzkaller0: entered promiscuous mode [ 2571.900111][T32341] syzkaller0: entered allmulticast mode [ 2571.967513][T32342] program syz.6.7344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2571.978738][T32342] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2572.967290][T21339] usb 3-1: USB disconnect, device number 65 [ 2572.980363][ T5602] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2573.048268][T32344] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7347'. [ 2573.159115][ T5602] usb 6-1: config 0 has no interfaces? [ 2573.165145][ T5602] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2573.174209][ T5602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.382949][T32350] netlink: 'syz.2.7349': attribute type 10 has an invalid length. [ 2574.351417][T32350] team0: Port device dummy0 added [ 2574.403260][ T5602] usb 6-1: config 0 descriptor?? [ 2575.047029][ T5602] usb 6-1: USB disconnect, device number 2 [ 2575.056311][ T29] audit: type=1804 audit(1786220704.763:929): pid=32382 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.7352" name="/newroot/310/file0" dev="fuse" ino=1 res=1 errno=0 [ 2576.076149][ T29] audit: type=1400 audit(1786220705.705:930): avc: denied { write } for pid=32395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2576.106718][T32420] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7360'. [ 2576.426545][T32422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7359'. [ 2576.483355][T32422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7359'. [ 2576.552892][T32422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7359'. [ 2576.651791][T32422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7359'. [ 2576.738333][T32422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7359'. [ 2577.539992][ T29] audit: type=1400 audit(1786220706.425:931): avc: denied { write } for pid=32427 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2577.661829][T32446] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7362'. [ 2578.887695][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2579.338699][T32493] netlink: 'syz.1.7366': attribute type 10 has an invalid length. [ 2579.387130][T32493] team0: Port device dummy0 added [ 2579.457847][T20711] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2579.506558][T32495] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7367'. [ 2581.212785][T20711] usb 3-1: device descriptor read/64, error -71 [ 2581.548470][T20711] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2581.733494][T20711] usb 3-1: device descriptor read/64, error -71 [ 2581.833008][T32540] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7374'. [ 2581.864826][T20711] usb usb3-port1: attempt power cycle [ 2581.874593][T32539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7373'. [ 2582.264865][T20711] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2583.150401][T20711] usb 3-1: device descriptor read/8, error -71 [ 2583.506680][ T29] audit: type=1400 audit(1786220712.564:932): avc: denied { write } for pid=32470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2583.767768][T32581] lo speed is unknown, defaulting to 1000 [ 2583.850203][ T29] audit: type=1400 audit(1786220712.887:933): avc: denied { write } for pid=32588 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2584.199900][T32606] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7382'. [ 2584.214726][ T29] audit: type=1400 audit(1786220713.229:934): avc: denied { write } for pid=32593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2584.334374][ T29] audit: type=1400 audit(1786220713.339:935): avc: denied { write } for pid=32609 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2584.586837][T32601] lo speed is unknown, defaulting to 1000 [ 2586.072207][ T29] audit: type=1400 audit(1786220714.937:936): avc: denied { write } for pid=32617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2586.201999][ T29] audit: type=1400 audit(1786220715.057:937): avc: denied { write } for pid=32640 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2586.444712][T20711] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2586.534194][T32653] lo speed is unknown, defaulting to 1000 [ 2586.563922][T16459] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2586.578479][T32654] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7396'. [ 2586.619188][T20711] usb 7-1: config index 0 descriptor too short (expected 65183, got 72) [ 2586.637871][T20711] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2586.647719][T20711] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.656147][T20711] usb 7-1: Product: syz [ 2586.660436][T20711] usb 7-1: Manufacturer: syz [ 2586.666487][T20711] usb 7-1: SerialNumber: syz [ 2586.701301][T21339] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2586.737234][T16459] usb 2-1: Using ep0 maxpacket: 32 [ 2586.780347][T32659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7395'. [ 2586.787393][T16459] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2586.812641][T32659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7395'. [ 2586.820658][T16459] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2586.839011][T16459] usb 2-1: Product: syz [ 2586.843414][T16459] usb 2-1: Manufacturer: syz [ 2586.850625][T16459] usb 2-1: SerialNumber: syz [ 2586.871917][T32659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7395'. [ 2586.888925][T16459] usb 2-1: config 0 descriptor?? [ 2586.919193][T16459] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2586.949122][T32642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2586.979742][T32642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2587.000156][T32642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2587.048950][T32642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2587.087282][T32642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2587.116101][T32642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2587.136068][ T5718] usb 7-1: USB disconnect, device number 16 [ 2587.607123][T32672] lo speed is unknown, defaulting to 1000 [ 2587.874383][T21339] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 2587.920292][T21339] ath9k_htc: Failed to initialize the device [ 2587.976231][ T5718] usb 7-1: ath9k_htc: USB layer deinitialized [ 2587.987359][T32686] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7406'. [ 2588.437242][T32682] lo speed is unknown, defaulting to 1000 [ 2588.520488][T32685] lo speed is unknown, defaulting to 1000 [ 2588.763902][ T5718] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2588.989969][ T5718] usb 7-1: Using ep0 maxpacket: 32 [ 2588.996706][ T5718] usb 7-1: config index 0 descriptor too short (expected 241, got 72) [ 2589.005415][ T5718] usb 7-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2589.041139][ T5718] usb 7-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2589.051001][ T5718] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.073710][ T5718] usb 7-1: config 0 descriptor?? [ 2589.098390][ T5718] mos7840 7-1:0.0: missing endpoints [ 2589.163129][ T5819] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2589.314903][ T5819] usb 4-1: device descriptor read/64, error -71 [ 2589.318254][ T5718] usb 7-1: USB disconnect, device number 17 [ 2589.546978][T16459] gspca_ov534_9: reg_r err -32 [ 2589.575294][ T5819] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2589.701867][T32712] syzkaller0: entered promiscuous mode [ 2589.708642][T32712] syzkaller0: entered allmulticast mode [ 2589.721719][T32712] tipc: Started in network mode [ 2589.726770][T32712] tipc: Node identity 9258fcffbcec, cluster identity 4711 [ 2589.726846][ T5819] usb 4-1: device descriptor read/64, error -71 [ 2589.737365][T32712] tipc: Enabled bearer , priority 0 [ 2589.758332][T32713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7412'. [ 2589.767462][T32712] tipc: Resetting bearer [ 2589.776643][T32713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7412'. [ 2589.786612][T32711] tipc: Resetting bearer [ 2589.798770][T32713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7412'. [ 2589.826986][T32711] tipc: Disabling bearer [ 2589.867686][T16459] gspca_ov534_9: Unknown sensor 0000 [ 2589.867771][T16459] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 2589.869071][ T5819] usb usb4-port1: attempt power cycle [ 2589.875184][T16459] usb 2-1: USB disconnect, device number 38 [ 2590.338993][T32723] capability: warning: `syz.5.7419' uses deprecated v2 capabilities in a way that may be insecure [ 2590.359984][ T5819] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2590.842747][ T5819] usb 4-1: device descriptor read/8, error -71 [ 2591.126816][ T5819] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2591.168193][ T5819] usb 4-1: device descriptor read/8, error -71 [ 2591.322473][ T5819] usb usb4-port1: unable to enumerate USB device [ 2591.369613][T32755] 9p: Bad value for 'wfdno' [ 2591.568878][T20711] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2591.754162][T20711] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 2591.782240][T20711] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2591.799056][T20711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2591.815148][T20711] usb 2-1: Product: syz [ 2591.821708][T20711] usb 2-1: Manufacturer: syz [ 2591.826381][T20711] usb 2-1: SerialNumber: syz [ 2591.853504][T21339] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2592.020911][ T303] lo speed is unknown, defaulting to 1000 [ 2592.049795][ T304] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7437'. [ 2592.095099][T32749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2592.111460][T32749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2592.136189][T32749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2592.159985][T32749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2592.173192][T32749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2592.188125][T32749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2592.197776][ T5602] usb 2-1: USB disconnect, device number 39 [ 2593.086298][T21339] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2593.104593][T21339] ath9k_htc: Failed to initialize the device [ 2593.127790][ T5602] usb 2-1: ath9k_htc: USB layer deinitialized [ 2593.872176][ T327] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7444'. [ 2593.924574][ T324] lo speed is unknown, defaulting to 1000 [ 2593.940198][ T5602] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2594.114859][ T5602] usb 2-1: Using ep0 maxpacket: 32 [ 2594.131233][ T5602] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 2594.146321][ T5602] usb 2-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 2594.160478][ T5602] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 2594.170864][ T5602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.306201][ T5602] usb 2-1: config 0 descriptor?? [ 2594.328787][ T5602] mos7840 2-1:0.0: missing endpoints [ 2594.864792][ T5819] usb 2-1: USB disconnect, device number 40 [ 2595.738922][ T361] overlayfs: failed to resolve './bus': -2 [ 2597.447636][ T374] lo speed is unknown, defaulting to 1000 [ 2597.924274][ T393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7469'. [ 2597.943188][ T396] overlayfs: failed to resolve './bus': -2 [ 2598.048904][ T5602] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2598.840707][ T5602] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 2599.263431][ T5602] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2599.278587][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2599.286860][ T5602] usb 6-1: Product: syz [ 2599.363472][ T5602] usb 6-1: Manufacturer: syz [ 2599.416071][ T5602] usb 6-1: SerialNumber: syz [ 2599.739901][T16459] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2599.804003][ T29] audit: type=1400 audit(1786220727.575:938): avc: denied { write } for pid=416 comm="syz.2.7476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2599.845668][ T29] audit: type=1400 audit(1786220727.584:939): avc: denied { read } for pid=416 comm="syz.2.7476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2599.852709][ T421] lo speed is unknown, defaulting to 1000 [ 2599.897289][ T425] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7479'. [ 2599.991621][ T389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2600.009159][ T429] overlayfs: failed to resolve './bus': -2 [ 2600.017219][ T389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.028852][ T389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2600.046468][ T5718] logitech-hidpp-device 0005:046D:B012.0011: unbalanced collection at end of report description [ 2600.060678][ T389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.073607][ T389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2600.084088][ T5718] logitech-hidpp-device 0005:046D:B012.0011: hidpp_probe:parse failed [ 2600.093583][ T389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2600.101573][ T5718] logitech-hidpp-device 0005:046D:B012.0011: probe with driver logitech-hidpp-device failed with error -22 [ 2600.131115][ T5602] usb 6-1: USB disconnect, device number 3 [ 2600.309722][ T437] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7484'. [ 2600.712327][ T436] lo speed is unknown, defaulting to 1000 [ 2600.846488][ T448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7486'. [ 2600.872937][T16459] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2600.887020][T16459] ath9k_htc: Failed to initialize the device [ 2600.915012][ T5602] usb 6-1: ath9k_htc: USB layer deinitialized [ 2601.100461][ T448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7486'. [ 2601.328017][ T5602] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2601.555080][ T5602] usb 6-1: Using ep0 maxpacket: 8 [ 2602.500058][ T5602] usb 6-1: unable to read config index 0 descriptor/all [ 2602.591918][ T5602] usb 6-1: can't read configurations, error -71 [ 2603.006492][ T5819] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2603.170590][ T5819] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 2603.205846][ T5819] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2603.305669][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2603.314961][ T5819] usb 2-1: Product: syz [ 2603.319197][ T5819] usb 2-1: Manufacturer: syz [ 2603.326626][ T5819] usb 2-1: SerialNumber: syz [ 2603.349437][ T482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7497'. [ 2603.358570][ T482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7497'. [ 2603.367787][ T482] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7497'. [ 2603.856031][T21339] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2604.105878][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2604.201485][ T486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7499'. [ 2604.224092][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2604.242460][ T486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7499'. [ 2604.263623][ T486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7499'. [ 2604.308242][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2604.357168][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2604.459024][ T5819] usb 2-1: USB disconnect, device number 41 [ 2605.033427][T21339] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2605.153476][T21339] ath9k_htc: Failed to initialize the device [ 2605.261080][ T5819] usb 2-1: ath9k_htc: USB layer deinitialized [ 2605.725314][ T5819] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2605.920139][ T5819] usb 2-1: Using ep0 maxpacket: 32 [ 2605.928467][ T5819] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2606.002988][ T5819] usb 2-1: string descriptor 0 read error: -71 [ 2606.032506][ T5819] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=d2.a2 [ 2606.076273][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.093421][ T5602] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2606.147321][ T5819] usb 2-1: config 0 descriptor?? [ 2606.166403][ T5819] usb 2-1: can't set config #0, error -71 [ 2606.193821][ T5819] usb 2-1: USB disconnect, device number 42 [ 2606.273790][ T5602] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 2606.336390][ T5602] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2606.393364][ T5602] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2606.486911][ T5602] usb 6-1: Product: syz [ 2606.511453][ T5602] usb 6-1: Manufacturer: syz [ 2606.526898][ T5602] usb 6-1: SerialNumber: syz [ 2606.555508][T16459] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2606.820435][ T501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2606.847806][ T501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2606.881527][ T501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2606.897667][ T501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2606.920267][ T501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2606.945291][ T501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2607.036537][ T5602] usb 6-1: USB disconnect, device number 6 [ 2607.225934][ T521] __nla_validate_parse: 2 callbacks suppressed [ 2607.226054][ T521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7511'. [ 2607.307949][ T522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7511'. [ 2607.394773][ T522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7511'. [ 2607.408625][ T522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7511'. [ 2607.420182][ T522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7511'. [ 2607.751850][T16459] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 2607.794045][T16459] ath9k_htc: Failed to initialize the device [ 2607.847999][ T5602] usb 6-1: ath9k_htc: USB layer deinitialized [ 2608.200218][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7518'. [ 2608.210402][ T5602] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2608.230359][ T540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7518'. [ 2608.239248][ T542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7519'. [ 2608.239274][ T542] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7519'. [ 2608.239311][ T542] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7519'. [ 2608.270605][T21339] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2608.443914][ T5602] usb 6-1: Using ep0 maxpacket: 8 [ 2608.450652][ T5602] usb 6-1: config index 0 descriptor too short (expected 241, got 72) [ 2608.459087][ T5602] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2608.482297][T21339] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 2608.507366][ T5602] usb 6-1: New USB device found, idVendor=235a, idProduct=0109, bcdDevice=bd.da [ 2608.529135][ T5602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2608.529923][T21339] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2608.588064][T21339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2608.598371][ T5602] usb 6-1: config 0 descriptor?? [ 2608.616297][T21339] usb 3-1: Product: syz [ 2608.637503][T21339] usb 3-1: Manufacturer: syz [ 2608.657908][T21339] usb 3-1: SerialNumber: syz [ 2608.732134][T20711] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2609.003891][ T535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2609.044038][ T535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2609.096578][ T535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2609.116640][ T535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2609.138074][ T5602] usb 3-1: USB disconnect, device number 70 [ 2609.927205][T20711] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2609.955779][T20711] ath9k_htc: Failed to initialize the device [ 2610.039446][ T5602] usb 3-1: ath9k_htc: USB layer deinitialized [ 2610.197820][ T5819] usb 6-1: USB disconnect, device number 7 [ 2610.601698][ T5602] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2610.786664][ T590] syzkaller0: entered promiscuous mode [ 2610.809944][ T590] syzkaller0: entered allmulticast mode [ 2610.837853][ T5602] usb 3-1: Using ep0 maxpacket: 32 [ 2610.854437][ T5602] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2610.874297][ T5602] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=d2.a2 [ 2610.891518][ T590] tipc: Started in network mode [ 2610.908139][ T590] tipc: Node identity 9eeaa8c4c732, cluster identity 4711 [ 2610.919302][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2610.938600][ T590] tipc: Enabled bearer , priority 0 [ 2610.946811][ T5602] usb 3-1: Product: syz [ 2610.951591][ T5602] usb 3-1: Manufacturer: syz [ 2610.956403][ T5602] usb 3-1: SerialNumber: syz [ 2610.991893][ T5602] usb 3-1: config 0 descriptor?? [ 2611.001260][ T590] tipc: Resetting bearer [ 2611.008324][ T5602] mos7840 3-1:0.0: required endpoints missing [ 2611.044037][ T589] tipc: Resetting bearer [ 2611.099717][ T589] tipc: Disabling bearer [ 2611.333972][ T5602] usb 3-1: USB disconnect, device number 71 [ 2612.337237][ T611] lo speed is unknown, defaulting to 1000 [ 2613.197472][ T643] __nla_validate_parse: 17 callbacks suppressed [ 2613.197495][ T643] netlink: 766 bytes leftover after parsing attributes in process `syz.5.7547'. [ 2613.493942][T20711] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2613.755579][T20711] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 2613.778315][T20711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2613.801469][T20711] usb 3-1: config 0 has no interface number 0 [ 2613.831476][T20711] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2613.881085][T20711] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2613.932583][T20711] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2613.985707][T20711] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2614.028993][T20711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2614.065011][ T660] netlink: zone id is out of range [ 2614.076007][T20711] usb 3-1: Product: syz [ 2614.102476][T20711] usb 3-1: Manufacturer: syz [ 2614.122466][T20711] usb 3-1: SerialNumber: syz [ 2614.145428][T20711] usb 3-1: config 0 descriptor?? [ 2614.323403][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7557'. [ 2614.402324][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7557'. [ 2614.459252][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7557'. [ 2614.497757][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7557'. [ 2614.527690][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7557'. [ 2615.152755][ T684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7564'. [ 2615.260893][ T684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7564'. [ 2615.390779][ T684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7564'. [ 2616.349289][ T5602] usb 3-1: USB disconnect, device number 72 [ 2619.064812][ T725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7576'. [ 2619.133497][ T725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7576'. [ 2619.233240][ T725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7576'. [ 2619.391273][ T731] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7577'. [ 2621.411071][ T730] lo speed is unknown, defaulting to 1000 [ 2621.919844][T16459] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2621.944438][ T755] lo speed is unknown, defaulting to 1000 [ 2621.984249][ T759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7589'. [ 2622.026569][ T759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7589'. [ 2622.107875][T16459] usb 7-1: config 0 has no interfaces? [ 2622.117265][T16459] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2622.146229][T16459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2622.166022][T16459] usb 7-1: config 0 descriptor?? [ 2622.181485][ T5819] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2622.232758][ T759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7589'. [ 2622.352160][ T5819] usb 4-1: device descriptor read/64, error -71 [ 2622.636582][T20711] usb 7-1: USB disconnect, device number 18 [ 2622.644687][ T5819] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2622.874569][ T5819] usb 4-1: device descriptor read/64, error -71 [ 2623.014125][ T5819] usb usb4-port1: attempt power cycle [ 2623.316889][ T5602] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2623.391931][ T5819] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2623.469313][ T5819] usb 4-1: device descriptor read/8, error -71 [ 2623.492928][ T5602] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 2623.518454][ T5602] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2623.546660][ T5602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2623.572568][ T29] audit: type=1400 audit(1786220749.557:940): avc: denied { write } for pid=805 comm="syz.6.7608" name="extensions" dev="configfs" ino=12194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2623.574522][ T806] [ 2623.595639][ T5602] usb 3-1: Product: syz [ 2623.597651][ T806] ====================================================== [ 2623.597661][ T806] WARNING: possible circular locking dependency detected [ 2623.597671][ T806] syzkaller #0 Tainted: G L [ 2623.597681][ T806] ------------------------------------------------------ [ 2623.597688][ T806] syz.6.7608/806 is trying to acquire lock: [ 2623.597698][ T806] ffffffff901c9de8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2623.645849][ T806] [ 2623.645849][ T806] but task is already holding lock: [ 2623.653190][ T806] ffff888029758570 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x346/0x6f0 [ 2623.662394][ T806] [ 2623.662394][ T806] which lock already depends on the new lock. [ 2623.662394][ T806] [ 2623.672776][ T806] [ 2623.672776][ T806] the existing dependency chain (in reverse order) is: [ 2623.681772][ T806] [ 2623.681772][ T806] -> #3 (&p->frag_sem){++++}-{4:4}: [ 2623.689573][ T806] lock_acquire+0x1b9/0x370 [ 2623.694593][ T806] down_write_killable+0x93/0x250 [ 2623.700122][ T806] configfs_rmdir+0x3fa/0x950 [ 2623.705318][ T806] vfs_rmdir+0x328/0x8a0 [ 2623.710069][ T806] filename_rmdir+0x31a/0x5c0 [ 2623.715251][ T806] __x64_sys_unlinkat+0xf5/0x130 [ 2623.720689][ T806] do_syscall_64+0x115/0x870 [ 2623.725784][ T806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2623.732186][ T806] [ 2623.732186][ T806] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 2623.740884][ T806] lock_acquire+0x1b9/0x370 [ 2623.745909][ T806] down_write+0x8b/0x1f0 [ 2623.750660][ T806] configfs_depend_item_unlocked+0xf3/0x6a0 [ 2623.757073][ T806] usbg_make_tpg+0x261/0x620 [ 2623.762168][ T806] target_fabric_make_tpg+0xab/0x8c0 [ 2623.767963][ T806] configfs_mkdir+0x51e/0xb70 [ 2623.773147][ T806] vfs_mkdir+0x361/0x850 [ 2623.777908][ T806] filename_mkdirat+0x48b/0x5e0 [ 2623.783259][ T806] __x64_sys_mkdir+0x6b/0x90 [ 2623.788351][ T806] do_syscall_64+0x115/0x870 [ 2623.793447][ T806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2623.799838][ T806] [ 2623.799838][ T806] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 2623.807458][ T806] lock_acquire+0x1b9/0x370 [ 2623.812480][ T806] __mutex_lock+0x1a4/0x1bd0 [ 2623.817596][ T806] tcm_set_name+0x29/0xb0 [ 2623.822426][ T806] function_make+0x21c/0x3f0 [ 2623.827523][ T806] configfs_mkdir+0x51e/0xb70 [ 2623.832706][ T806] vfs_mkdir+0x361/0x850 [ 2623.837454][ T806] filename_mkdirat+0x48b/0x5e0 [ 2623.842825][ T806] __x64_sys_mkdir+0x6b/0x90 [ 2623.847918][ T806] do_syscall_64+0x115/0x870 [ 2623.853015][ T806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2623.859409][ T806] [ 2623.859409][ T806] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 2623.867639][ T806] check_prev_add+0xeb/0xe60 [ 2623.872732][ T806] __lock_acquire+0x136c/0x1a40 [ 2623.878086][ T806] lock_acquire+0x1b9/0x370 [ 2623.883094][ T806] __mutex_lock+0x1a4/0x1bd0 [ 2623.888190][ T806] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2623.894858][ T806] configfs_read_iter+0x426/0x6f0 [ 2623.900387][ T806] __kernel_read+0x397/0xad0 [ 2623.905486][ T806] integrity_kernel_read+0x7e/0xb0 [ 2623.911101][ T806] ima_calc_file_hash_tfm+0x25e/0x350 [ 2623.916973][ T806] ima_calc_file_hash+0x1e3/0x380 [ 2623.922515][ T806] ima_collect_measurement+0x94f/0xb30 [ 2623.928478][ T806] process_measurement+0xdfe/0x2350 [ 2623.934180][ T806] ima_file_check+0xc3/0x110 [ 2623.939270][ T806] security_file_post_open+0xc4/0x210 [ 2623.945151][ T806] path_openat+0x985/0x4280 [ 2623.950156][ T806] do_file_open+0x20e/0x430 [ 2623.955160][ T806] do_sys_openat2+0x10f/0x1e0 [ 2623.960354][ T806] __x64_sys_openat+0x12d/0x210 [ 2623.965710][ T806] do_syscall_64+0x115/0x870 [ 2623.970807][ T806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2623.977200][ T806] [ 2623.977200][ T806] other info that might help us debug this: [ 2623.977200][ T806] [ 2623.987405][ T806] Chain exists of: [ 2623.987405][ T806] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 2623.987405][ T806] [ 2624.001809][ T806] Possible unsafe locking scenario: [ 2624.001809][ T806] [ 2624.009236][ T806] CPU0 CPU1 [ 2624.014585][ T806] ---- ---- [ 2624.019926][ T806] rlock(&p->frag_sem); [ 2624.024146][ T806] lock(&sb->s_type->i_mutex_key#26); [ 2624.032113][ T806] lock(&p->frag_sem); [ 2624.038788][ T806] lock(gadget_subsys.su_mutex); [ 2624.043790][ T806] [ 2624.043790][ T806] *** DEADLOCK *** [ 2624.043790][ T806] [ 2624.051913][ T806] 3 locks held by syz.6.7608/806: [ 2624.056924][ T806] #0: ffff888076b259a8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 2624.067953][ T806] #1: ffff888053486480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_read_iter+0x79/0x6f0 [ 2624.077681][ T806] #2: ffff888029758570 (&p->frag_sem){++++}-{4:4}, at: configfs_read_iter+0x346/0x6f0 [ 2624.087321][ T806] [ 2624.087321][ T806] stack backtrace: [ 2624.093194][ T806] CPU: 1 UID: 0 PID: 806 Comm: syz.6.7608 Tainted: G L syzkaller #0 PREEMPT(full) [ 2624.093215][ T806] Tainted: [L]=SOFTLOCKUP [ 2624.093220][ T806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 2624.093229][ T806] Call Trace: [ 2624.093234][ T806] [ 2624.093240][ T806] dump_stack_lvl+0x100/0x190 [ 2624.093259][ T806] print_circular_bug.cold+0x178/0x1c7 [ 2624.093283][ T806] check_noncircular+0x146/0x160 [ 2624.093302][ T806] check_prev_add+0xeb/0xe60 [ 2624.093320][ T806] __lock_acquire+0x136c/0x1a40 [ 2624.093341][ T806] lock_acquire+0x1b9/0x370 [ 2624.093357][ T806] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2624.093382][ T806] ? __pfx___might_resched+0x10/0x10 [ 2624.093398][ T806] ? path_openat+0x985/0x4280 [ 2624.093414][ T806] ? do_file_open+0x20e/0x430 [ 2624.093428][ T806] ? do_sys_openat2+0x10f/0x1e0 [ 2624.093447][ T806] __mutex_lock+0x1a4/0x1bd0 [ 2624.093467][ T806] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2624.093489][ T806] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2624.093510][ T806] ? __lock_acquire+0x49f/0x1a40 [ 2624.093528][ T806] ? __pfx___mutex_lock+0x10/0x10 [ 2624.093549][ T806] ? __pfx___might_resched+0x10/0x10 [ 2624.093567][ T806] ? __pfx_uvcg_extension_ba_source_id_show+0x10/0x10 [ 2624.093594][ T806] ? uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2624.093615][ T806] uvcg_extension_ba_source_id_show+0x7c/0x310 [ 2624.093637][ T806] ? ima_file_check+0xc3/0x110 [ 2624.093650][ T806] ? configfs_read_iter+0x53c/0x6f0 [ 2624.093669][ T806] ? __pfx_uvcg_extension_ba_source_id_show+0x10/0x10 [ 2624.093690][ T806] configfs_read_iter+0x426/0x6f0 [ 2624.093709][ T806] __kernel_read+0x397/0xad0 [ 2624.093731][ T806] ? __pfx___kernel_read+0x10/0x10 [ 2624.093758][ T806] integrity_kernel_read+0x7e/0xb0 [ 2624.093777][ T806] ? __pfx_integrity_kernel_read+0x10/0x10 [ 2624.093796][ T806] ? ima_calc_file_hash_tfm+0x236/0x350 [ 2624.093813][ T806] ima_calc_file_hash_tfm+0x25e/0x350 [ 2624.093829][ T806] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 2624.093844][ T806] ? is_bpf_text_address+0x8a/0x1a0 [ 2624.093874][ T806] ? ima_alloc_tfm+0x21a/0x2e0 [ 2624.093890][ T806] ima_calc_file_hash+0x1e3/0x380 [ 2624.093906][ T806] ima_collect_measurement+0x94f/0xb30 [ 2624.093924][ T806] ? __pfx_ima_collect_measurement+0x10/0x10 [ 2624.093945][ T806] ? process_measurement+0x5ab/0x2350 [ 2624.093960][ T806] ? is_bad_inode+0xd/0x40 [ 2624.093973][ T806] ? xattr_resolve_name+0x27d/0x3f0 [ 2624.093990][ T806] ? vfs_getxattr_alloc+0xec/0x350 [ 2624.094007][ T806] ? ima_get_hash_algo+0x241/0x400 [ 2624.094029][ T806] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 2624.094052][ T806] ? process_measurement+0xdfe/0x2350 [ 2624.094065][ T806] process_measurement+0xdfe/0x2350 [ 2624.094082][ T806] ? __pfx_process_measurement+0x10/0x10 [ 2624.094109][ T806] ? __configfs_open_file+0x6ca/0x9c0 [ 2624.094127][ T806] ima_file_check+0xc3/0x110 [ 2624.094141][ T806] ? __pfx_ima_file_check+0x10/0x10 [ 2624.094158][ T806] security_file_post_open+0xc4/0x210 [ 2624.094181][ T806] path_openat+0x985/0x4280 [ 2624.094199][ T806] ? __pfx_path_openat+0x10/0x10 [ 2624.094216][ T806] do_file_open+0x20e/0x430 [ 2624.094231][ T806] ? __pfx_do_file_open+0x10/0x10 [ 2624.094252][ T806] ? alloc_fd+0x471/0x7a0 [ 2624.094268][ T806] ? do_getname+0x191/0x390 [ 2624.094286][ T806] do_sys_openat2+0x10f/0x1e0 [ 2624.094304][ T806] ? __pfx_do_sys_openat2+0x10/0x10 [ 2624.094324][ T806] __x64_sys_openat+0x12d/0x210 [ 2624.094342][ T806] ? __pfx___x64_sys_openat+0x10/0x10 [ 2624.094364][ T806] do_syscall_64+0x115/0x870 [ 2624.094383][ T806] ? clear_bhb_loop+0x70/0xc0 [ 2624.094399][ T806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2624.094413][ T806] RIP: 0033:0x7f5bde79e0d9 [ 2624.094426][ T806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2624.094440][ T806] RSP: 002b:00007f5bdf692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2624.094453][ T806] RAX: ffffffffffffffda RBX: 00007f5bdea25fa0 RCX: 00007f5bde79e0d9 [ 2624.094463][ T806] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 2624.094472][ T806] RBP: 00007f5bde835024 R08: 0000000000000000 R09: 0000000000000000 [ 2624.094481][ T806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2624.094489][ T806] R13: 00007f5bdea26038 R14: 00007f5bdea25fa0 R15: 00007ffedc4f6578 [ 2624.094504][ T806] [ 2624.096265][ T5602] usb 3-1: Manufacturer: syz [ 2624.156494][ T29] audit: type=1800 audit(1786220750.092:941): pid=806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.7608" name="baSourceID" dev="configfs" ino=178263 res=0 errno=0 [ 2624.163085][ T5602] usb 3-1: SerialNumber: syz [ 2624.290907][ T5819] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2624.308402][T16966] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2624.335713][ T5819] usb 4-1: device descriptor read/8, error -71 [ 2624.588793][ T790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.599083][ T790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2624.608333][ T790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.621207][ T790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2624.639074][ T790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2624.647646][ T790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2624.656502][T20711] usb 3-1: USB disconnect, device number 73 [ 2624.702988][ T5819] usb usb4-port1: unable to enumerate USB device [ 2625.482749][T16966] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 2625.489753][T16966] ath9k_htc: Failed to initialize the device [ 2625.496243][T20711] usb 3-1: ath9k_htc: USB layer deinitialized [ 2625.818244][T20711] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2625.991569][T20711] usb 3-1: Using ep0 maxpacket: 32 [ 2625.997996][T20711] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 2626.006306][T20711] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2626.017849][T20711] usb 3-1: New USB device found, idVendor=230a, idProduct=0109, bcdDevice=bd.da [ 2626.027026][T20711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2626.036119][T20711] usb 3-1: config 0 descriptor?? [ 2627.354217][T20711] usb 3-1: USB disconnect, device number 74