last executing test programs: 8.575539152s ago: executing program 4 (id=1242): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000104038a0000000000000000000000000a0002000000000002000000050001"], 0x28}, 0x1, 0x0, 0x100000000000000}, 0x0) 8.461655751s ago: executing program 4 (id=1243): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="280000001400695cc2367fdf241b040010"], 0x28}, 0x1, 0x2c}, 0x0) 7.707785861s ago: executing program 1 (id=1248): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x50) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000300)='squashfs\x00', 0x1a0c000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/protocols\x00') 7.553432006s ago: executing program 4 (id=1250): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fsopen(0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x6c}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r6 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc2c45512, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000c00)=""/21, 0x15}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x9c}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000680)=""/66, 0x42}, {&(0x7f00000002c0)}], 0x3}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000880)=""/204, 0xcc}], 0x2, &(0x7f00000009c0)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xe4}}], 0x3, 0x0, &(0x7f0000000b40)={0x0, 0x3938700}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x20c, 0x2a8, 0x2a8, 0x20c, 0x2a8, 0xac, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_vlan\x00', 'sit0\x00'}, 0x10, 0xf4, 0x13c, 0x1c, {}, [@common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ip6gre0\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x5, 0x7, 0x6, 0x1], 0x5, 0x3}, {0x3, [0x2, 0x2, 0x3, 0x6, 0x2, 0x3], 0x2, 0x3}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2fc) syz_emit_ethernet(0x2a, &(0x7f0000000c40)=ANY=[@ANYRES64, @ANYBLOB="33b3c221d1f34b49ebb5daf9b97d1bf75e99e157141500f3d9a60dcb1fbc17782fb7448b6645b99822aa1569742f8cbff5daf1368e6670976495ebb9b227f0b1f7d7dac434c438d2c447757d1e1b4c4464d14a40e98553b0289bb69eff7990a6f58ed5cbae3ec56911498e19dffea29a7f4f1c949e0aba2648e0532c9283062eae2ad9e256ce5e7b14a2ece9cfd054c34f9cd8da15a943e73a6e47631e00777ba10a026ad98a14b998"], 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) memfd_secret(0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'\x00', 0x0}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x15, r7}) 6.095139287s ago: executing program 4 (id=1253): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_connect$cdc_ncm(0x2, 0xa2, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x1, 0x9, 0x50, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a360"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffff, 0x6, 0x7, 0xf}, {0x6, 0x24, 0x1a, 0x5, 0x24}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @country_functional={0x10, 0x24, 0x7, 0x4, 0x9, [0xfff, 0x5, 0x9, 0x101, 0x3]}, @country_functional={0xc, 0x24, 0x7, 0x0, 0xe, [0x3, 0x5, 0x7]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x1, 0xb, 0x0, 0x1, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7f, 0x8, 0xa0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0x9d}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x6, 0x1, 0x2, 0x20, 0xff}, 0x10, &(0x7f0000000100)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xb6, 0x7, 0xd, 0x7, 0x1}]}, 0x5, [{0xcd, &(0x7f0000000140)=@string={0xcd, 0x3, "9eae87dd44073678823ed57645272c0337b2f4c01b1a17b085b0d1e4963b1d536542a74707ee53b00061b1c69b36f9aa83bb43b6a2e35faadbb323abbfcc42f130d82e7ac1f4b36929c3a7756b14503431a068bdbc328d22473560b49c1784279d16e902b8c71cc122362b159c15eff787b77dc3047d4ead3dfbe760f12a0abdf49dfec186658916a96c906e872a2bfb401d0c72c78d1882c87f98419d486c0f433a941ccd3e5ef166f63ad55e3775fdf13892c7e0d1d8e86407fcfb2e466753c1bff9961ef86fbd38debb"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x92, &(0x7f00000002c0)=@string={0x92, 0x3, "f53ebea5249bac361670214cc619ac09dbea1dc595ca501da12e8d8c5ff3997190526d89545726350830981fde93f07992228c492a2be3ca5072d8befffd1ce348a1ecca51341a4ee8a6150f08745b1b8b318e2835f15341dc9dcf4c23714fe595b21b2a5592f03ae3a26584e8aa3e636b76c3bdfdd71f499c256ade9abcc0b663f9cccf438176479cd4ca6d6ebe2874"}}, {0x58, &(0x7f0000000740)=@string={0x58, 0x3, "4e494ff8ae68d91c799237fd09ccdf09d2a29eb9374c3512a10ae6910c22a638897b0a867422f0f5a2c0511332da0e841be7a1207c169d39f1eaa391668a6dfeebafc34bfea6f4d709b106db1fdee076fde429011a5c"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000d00)=0x68d6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_setup(0x758a, &(0x7f0000000140)) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r3, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0) ioperm(0x0, 0xf4, 0x10000007f) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r2, 0x1, 0x20, 0x6, @local}, 0x14) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.015684904s ago: executing program 1 (id=1255): syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x32, r1, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 5.721709337s ago: executing program 1 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETA(r4, 0x5406, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04fffffff50000000002000008400004803c000180080001006c6f670030000580060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000406000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r3) 4.358335525s ago: executing program 0 (id=1258): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4.284622819s ago: executing program 1 (id=1259): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4880) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000280)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000100)=0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) 4.081462697s ago: executing program 0 (id=1260): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100039042bbd7000e2ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="431c0000cb1507001c0012800800010067726500100002800400120008000700e0"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xfffa, 0xffdf, 0x334, 0x0, 0x7}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x78, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x3fd138ac}]}, &(0x7f0000000280)=0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r4], 0x21) 4.062333816s ago: executing program 1 (id=1261): r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xff, 0x101000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0x751}}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x7ffc0002}, {0x62a7, 0xf7, 0x5e, 0x7}, {0x2f, 0xd, 0x3, 0x2}, {0x92c, 0x9e, 0xf7, 0xb}]}) io_setup(0x4, &(0x7f0000000340)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x38, 0xff, 0x4f, 0x40, 0x13d3, 0x3219, 0x7a67, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x5e, 0x8b, 0x15}}]}}]}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, 0x0) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f00000001c0)="fe1c8589bd87bafc6dbc32cfec5b729f494c86cb85fb364e2679d56ef67cc7d9cb61be8e8541e7bdb340bb0a987c78018c9ca28dec330aad4d11136b8be1a56c9e64359bd52e3d0d0e502331255feb55e4755d7451df736e3b1ceee94f98186121ee69c6c2a574d5c947af6495bb3d759bc156c2caee71cef4d0234694d44a592918786a3134a012004b6a1dd175885b24d37b82fcac8d2a509d9ccacf9b9eab90336e8d4ef2d752c6d21946eee3d2ea6cf95dd986bef40b61d1355eb73d02c06b70a80d5adae0eb4298c0c6841d0120ccdab939c6357b3640f923c20a35520e0c4112b4c33242ab845966e05556ce2047", 0xf1, 0x3, 0x0, 0x1}, &(0x7f0000000140)) userfaultfd(0x101800) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000380)="9ff06dd02cdaf6020327fbfb9322a8ea5f16f043248e370b566d40bb013ad3095ea863db1c62877c2e8816a6736e8f06208247b349b18fe2da0e781e60f9b8f89c2eaa0a70e17ea003e9ab7232fafa2076693c5ce871bc45f073eef4a5860bc3415815243e817d8e9c1d884864a5ec76487b2bc41221d0aedd08ec29ad2f74075909f4718901bb5afe17cbb9d060e61933ba486112206a9882a3223613d1880e5f22f1d896561539e5f46e36cdc20fa1502baa6623ebf27869a7028d343df06b375ac5", 0xc3, 0xfffffffffffffff8) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000300)='\x00', 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0xb, 0x5, 0x7f, 0x8}, {0x80, 0x0, 0x5, 0x400}, {0x4, 0x0, 0x5, 0x7}]}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_PR_CLEAR(r7, 0x401070cd, &(0x7f0000000100)={0x80000000000000}) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000480)={r3, r4, r5}, &(0x7f00000004c0)=""/36, 0x24, 0x0) 3.883903165s ago: executing program 0 (id=1262): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, 0x0) 3.765344999s ago: executing program 0 (id=1263): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x2000) syz_open_dev$vcsu(0x0, 0xea47, 0x40881) socket(0x1e, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_pidfd_open(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0x144, 0x10, 0x1, 0x0, 0xe00, {{@in6=@private2, @in6=@remote, 0x40, 0xfffe}, {@in6=@private1, 0x200000, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x4, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {r4, 0x2}}]}, 0x144}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 3.107867462s ago: executing program 3 (id=1265): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0xe6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xb}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r4], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xd, 0x7b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x4044000) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 2.486764496s ago: executing program 0 (id=1266): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x6}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = getpid() tgkill(0x0, r1, 0xa) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async) r3 = creat(&(0x7f0000000700)='./file0\x00', 0x4b) close(r3) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x1, 0x0, 0x7c1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x7], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={r6, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2ba], [0x0, 0x80000000]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5800000000000014000300736974300000000000000000000000000b"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r10 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) prctl$PR_SET_NAME(0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r10, 0x0) (async) write$selinux_load(r9, &(0x7f0000000000)=ANY=[], 0xffa8) chdir(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 2.423371511s ago: executing program 3 (id=1267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x5000000, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) 2.412552489s ago: executing program 2 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10800, 0x88, 0x20}, 0x18) syz_open_dev$video(&(0x7f0000000300), 0x3, 0x800) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x38, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24018800) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000340)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 2.339074165s ago: executing program 0 (id=1269): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa00090582024000000000e19927f2d8afd87f3364cb281b961d310255f3b0417890031d56d0f2928c3fbe99b5fef2e45921c03d78d73fb52599a1bb8a55df624cfcd040bfe404df4cb3ece9eb5edf65fa648febde16a220dc0537afc6f873f493549c8320c7caab8b11ebca811afda392b91c1c887e68767478dbf5ebb15a9a4a2fa9011746103025518049a79efc31211bea05cbcdc78072420fe0d828b1f4227e828502f91477ccb2b5dc4107daba32e7431f912e28"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, 0x0, &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x81}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.289387585s ago: executing program 2 (id=1270): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0x7, 0x0, &(0x7f0000000000)="6121eed4cd50bb", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.23754657s ago: executing program 3 (id=1271): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4880) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000280)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000100)=0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) 2.12149389s ago: executing program 2 (id=1272): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$inet(0x2, 0x3, 0x100) write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) mkdir(&(0x7f0000000040)='./bus\x00', 0x149) setitimer(0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0xea60}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.046504196s ago: executing program 3 (id=1273): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x11, 0x0, 0x0) 1.901964738s ago: executing program 4 (id=1274): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = memfd_secret(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000006c0)=0x6, 0x4) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r4, &(0x7f0000001040)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000000)='~\vq', 0x3}, {&(0x7f0000000180)="6c14bc38bf0c69d328731b38", 0xc}, {&(0x7f0000000c40)="4cac51a7f9ecd1d22b5e0d152fb475a840501c93fb62bf876c884c969894deb01f0ced616be0ce1609710f1eee080f1f52821d4c9749ebd6e3ca1c4fd77319812fb136ef01b2ebc9e0116da989ef18265a3d1ed5ff7d668fede4ccdf73fdcd1029c4d4a3a7750ec033a499b3600b824944ec8cc6d785", 0x76}, {&(0x7f0000000400)="383536748faa0c10d07d6feac60d0d449788927558a72add473f24c7e5fce3462d2150725d794ffcc131a65d4339d31eaa96dc84e7f7dd43a6d9ec8287fd3b84401e1679f4be94e022f566ed61979db1e595ee15b84eeec775734ea0f410833d466509e6c7443d845137e1e0c942ff5da574ef9f039a153593473a624726f63340e94ecc133afeb2d3373e343777422ff28f89f800ac265881a2e06122e9c922ed5858002a733173c4d0b1c3919fe82bece2b1346631976ffc9c0216524b290787a3cbdb72f8b43f5d819e4b98", 0xcd}, {&(0x7f0000000600)="24b5bd3896a47144f7d40182024300db78a708e22b015f2ae38b8fde5e335b1ae630f5cb0649452fb115ca7d9ee0c061ca4878a3cafecdfbc2ce0464f2e696e4682defd7e9371208a21522da557488dc0f80115513e9b7d646408b351d16f911fc249a681617323db4b3e5a6802b341388c68303c56808bdddea4a7d29086fa74bb772349d7ea4585ed5247c68eef553135d1f2693dd00edd24c92a693b2e97e1e8156a6ba5a69dd3be80e942023a6a1306cfbabbc4b", 0xb6}, {&(0x7f0000000700)="96fef2712f9f016e6004dcda17f46eca3bf4aedb6954424edd3afd07633edd0d9b04334036781f145dfd367d3b3372409a4aeaf5b0b29abd60ab988db454ace834f6a86a3ea6580a06ae3dde0b0521541ab95e580149c22a40ed5dc50cf11e969ecdee54d56e5ee88ed6bc57d342b0477787f19ee69fe3677dc98aaab768511d1381aa4b", 0x84}], 0x6, 0x0, 0x0, 0x84}}, {{&(0x7f0000000840)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000980)="0a006e3943f4f51c40099bad04dddddb9897362740f711585b5bb5415fd8ad3b268e860eadf44aa4c2d05c8ed5a7dd812c01dfa98e75d5cec0ea8975328ddca5d377cdbdba472df61378a377f8169f6ef3b32009572b0ee24552cef34150380cf0e3a29a8f6a05701986f0adb3e01f84daf99a6ff7176330285646791b3ad73df3f34cf52ab4505b3cf943c473be851d43c47abbc085aa227b132cf40e570fadffaf33a2eae7f423973dce6072e64159d2c278ddbed858924f", 0xb9}, {&(0x7f0000000cc0)="313c52b439ed09ec6573c07600f0d71ef75cb7418f003089470680f83a199187118cc618b12fbc412765ed202ad3f675bb72d43dc4a879672aaed1b75bfec4ea80ee16bef09b0762ae5e9840141918c5face41529b3501cd64277f84fa9e3cf7c8ea0ed3a79ee07b56f20cdcd5f93c76a3292125df", 0x75}, {&(0x7f00000002c0)="8e9c88f53b3ad60aca53470cdef488c67d0207c916bb10b54caa576c5450ed438e5f55ff9891b977773fc756ed87ac9044", 0x31}, {&(0x7f00000008c0)="97f66386d04ce2fc00e302cfab2c42923fdbc4fe1fe398fc6db9b79b36d2963ec40b58bbfbf7cf6e7ef216096d6e61", 0x2f}], 0x4, &(0x7f0000000f80)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r3, r2]}}, @rights={{0x2c, 0x1, 0x1, [r3, r4, r0, r2, 0xffffffffffffffff, r2, r4]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r0, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}], 0xc0, 0x4000}}], 0x2, 0x44480) socket$packet(0x11, 0x2, 0x300) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000940)=0x25b) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 1.77221757s ago: executing program 3 (id=1275): syz_io_uring_setup(0x42ae3, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x2}, &(0x7f0000000340), &(0x7f0000000100)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) getpid() connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48804}, 0x90) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @bcast, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) listen(r1, 0x80) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000001f00000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200c8804}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, 0x0, 0x0) 1.571897034s ago: executing program 2 (id=1276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x800}) 1.190196825s ago: executing program 1 (id=1277): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)=ANY=[@ANYBLOB="121400007882b740422c0917b7ca0102030109021200000000bf60d600"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="05000b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)={0x0, 0xe8da87a42990a98c, 0xf0, {0xf0, 0x2, "0cb35adffa5fe77be66e7ff361866b1f18741ef086cc25f2b4cb5acab85b61d1dff61e23153599d44ac4c02ae8ad14cb08557ee2407a4d7c0defbcd25f6a9683eda2a6f41ef267b0a4a891d31061e8da658ac66d92d837feaca809f7c604435f4deeba0d0f1bd1bfdd23b800575909366f5a694b59239362fb488dc62b5ebd42ec26ce0c77e2935a726be1adc6d6900083db79e73b109ecd22f481d240cabd8cad3c108a7b04e998c1cd7cdaa94a27421bd158c9a3e2ccca81b8ddbe6d62a91812a5bfcb3b38191f7d728ee1ab739ad4aaee20ab8a0c498cfe4a72bba9cec468d687c1e32bea938e176fd35fd8a8"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a40)=ANY=[@ANYBLOB="0017a1000000f3efcd0217a25d5b9b56d3e0bf7087248a13b9909fc09ca62014cd3adb2254fc4dc1648592b7b5fe2eb553f8c1bfb5c1e1ec1fc3f0ecdf4363a90f92cc11988b0c7eaf49eef3398ae036d2a3bc4ef9f1e8beb79674c2707e5cd08ac26c7d074aa0f85627b74110d7d87c6a57b7df4fcbccc6aced4fb306ecaee695624111d38cfda5d51db1c6657f5ef22ccc4ae7807f67c88e"], &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0x7ff, 0x4fd, 0x9, 0x30b5, 0x80, 0xfff7, 0x5, 0x800, 0xe, 0x1, 0x7, 0x8}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0xea}, &(0x7f0000000c80)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xde, 0x14, 0xd8, 0x40, 0x93a, 0x50f, 0xc2b7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd8, 0xb9, 0x6e}}]}}]}}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@empty, @remote, 0x0}, &(0x7f00000002c0)=0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) preadv(r2, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df0180000010de0000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88e3bf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0573d639f97acbc2c360cf7fd7de2a5ec0d03e3813cb012149b9991e61d13d073", 0xda) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000380)=""/141, 0x8d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x5, 0xdd, &(0x7f0000000600)=""/221, 0x41100, 0x61, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x4, 0x5c3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r5], &(0x7f0000000780)=[{0x1, 0x3, 0x7, 0x5}, {0x3, 0x4, 0xe, 0xb}, {0x4, 0x4, 0xa, 0x6}, {0x2, 0x5, 0x9, 0xb}], 0x10, 0x2, @void, @value}, 0x94) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) readlinkat(r6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/115, 0x73) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000700)={0x0, 0xf, 0x2, "2e8d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0, 0x0}) 370.317932ms ago: executing program 2 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000480000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100fffd08000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000043c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c"], 0xc8}}, 0x0) 32.878849ms ago: executing program 3 (id=1279): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x3ffd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001c00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="800047000a0002"], 0x50}}, 0xc0c4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0xfec16195fcb46af8}, 0x18) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'veth0_to_bridge\x00'}}, 0x1e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x3ffd, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00001f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001c00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="800047000a0002"], 0x50}}, 0xc0c4) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0xfec16195fcb46af8}, 0x18) (async) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'veth0_to_bridge\x00'}}, 0x1e) (async) 27.79195ms ago: executing program 2 (id=1280): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x370, 0x230, 0x188, 0xffffffff, 0xd0, 0x230, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x0, 0xfffffffd}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x14, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x26}, @gre_key=0x2, @gre_key=0x6}}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'vlan1\x00', 'geneve1\x00', {}, {}, 0x0, 0x2}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @multicast1, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @icmp_id=0x68, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xf51) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) writev(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f00000033c0)="67df23", 0x3}], 0x2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4c2c01, 0x0) close_range(r0, r4, 0x200000000000000) 0s ago: executing program 4 (id=1281): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000280)="05054b038f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b848777faffffff3066100cb600c5471d130a66321a54e7df305f80a881e3b6fd8f24286a57c3feffff", 0x4a, 0x800, 0x0, 0x0) gettid() timer_create(0x3, &(0x7f0000000100)={0x0, 0x38, 0x4, @thr={&(0x7f0000000400)="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", &(0x7f0000000780)="9f9d0e9d9726b7c523b22c036eee7494882800fe921492c0a8e54e9f8b27ca34ffb50f8c63be32bc171afb6aac259b00caffdcb0406635313d928a6576c48f0dc765ee106fa50c6b6c726e6f7ebc3b1aa3e8a5c164b52ec7141ef24094f6236a8cb60fec3387f1b19c5e03cca19b710ca64060f60f36000000000000007bffe9222a2938d908a29ba52098afd959007ef2868aafaf5e1e09e551cd2bb48ec95b0f0663662bfa09775218b242f03919c2ed5af021da079c3c0274c3cdd7f49e9638aaf7d0bc202e2a467daf13551c847075a6f1023f3dbb7546850a9c7c3a38987f3355fee3b3e97855259768dbc1cdda33957059aab3ade435fb9703a083dcf441a30394a6735104b6755f4d78dedb10cd0480e30d842f5826a68ad405767e3b3dff66f1f465406098cf86a2de72b11f10dc984fb894bb01eca1aeab74ca6009000000e269be68a7b42b4a0f0000000087ed913aa85a6fa6d038da1998ddeb7d02c0faf85b"}}, &(0x7f0000000140)) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x4000}}, 0x10) listen(r3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) connect$tipc(r4, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e27, 0x1}}, 0x10) ftruncate(0xffffffffffffffff, 0x200000000000) r5 = socket$inet6(0xa, 0x2, 0xffffff81) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x7fffc, @dev={0xfe, 0x80, '\x00', 0x16}, 0x9b}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=r6], 0x18}, 0x40) kernel console output (not intermixed with test programs): 65] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 305.785176][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.806699][ T5865] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 305.815383][ T5865] usb 5-1: config 0 has no interface number 0 [ 305.821540][ T5893] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.831081][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.844201][ T5865] usb 5-1: config 0 interface 41 has no altsetting 0 [ 305.850993][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.866720][ T5863] usb 2-1: USB disconnect, device number 37 [ 305.878571][ T5865] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 305.941659][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.954671][ T5865] usb 5-1: Product: syz [ 305.960314][ T5893] usb 1-1: config 0 descriptor?? [ 305.966700][ T5865] usb 5-1: Manufacturer: syz [ 305.975358][ T5893] cp210x 1-1:0.0: cp210x converter detected [ 305.985061][ T5865] usb 5-1: SerialNumber: syz [ 306.005359][ T5865] usb 5-1: config 0 descriptor?? [ 306.383733][ T5863] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 306.431465][ T9085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.811837][ T5893] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 306.824076][ T5893] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 306.838102][ T5893] usb 1-1: cp210x converter now attached to ttyUSB0 [ 306.869476][ T5893] usb 1-1: USB disconnect, device number 27 [ 306.878443][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 306.902125][ T5863] usb 4-1: config 0 has no interfaces? [ 306.917218][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.933241][ T5863] usb 4-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 306.960886][ T5893] cp210x 1-1:0.0: device disconnected [ 306.980857][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 307.006125][ T5863] usb 4-1: Product: syz [ 307.016721][ T5863] usb 4-1: Manufacturer: syz [ 307.050454][ T5863] usb 4-1: SerialNumber: syz [ 307.068948][ T5863] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 307.128125][ T5865] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 307.658971][ T9104] syz.2.843: attempt to access beyond end of device [ 307.658971][ T9104] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 307.672333][ T9104] SQUASHFS error: Failed to read block 0x0: -5 [ 307.678738][ T9104] unable to read squashfs_super_block [ 307.879555][ T5862] apple-mfi-fastcharge 4-1: USB disconnect, device number 29 [ 307.928813][ T9100] syz.2.843 (9100): drop_caches: 2 [ 307.934237][ T9100] syz.2.843 (9100): drop_caches: 2 [ 307.996617][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.2.845'. [ 308.054245][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 308.054262][ T30] audit: type=1400 audit(1746896246.260:710): avc: denied { append } for pid=9112 comm="syz.2.847" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.096031][ T5863] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 308.946269][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 308.953973][ T5865] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 308.969612][ T5865] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 308.980112][ T5863] usb 1-1: config 0 has no interfaces? [ 308.986849][ T5865] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 308.997000][ T5863] usb 1-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 309.007461][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 309.018542][ T5865] usb 5-1: USB disconnect, device number 27 [ 309.026678][ T9119] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 309.029788][ T5863] usb 1-1: Product: syz [ 309.043184][ T5863] usb 1-1: Manufacturer: syz [ 309.069153][ T30] audit: type=1400 audit(1746896247.270:711): avc: denied { ioctl } for pid=9121 comm="syz.2.849" path="socket:[22265]" dev="sockfs" ino=22265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.218714][ T5863] usb 1-1: SerialNumber: syz [ 309.225078][ T9129] syz.4.850: attempt to access beyond end of device [ 309.225078][ T9129] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 309.228417][ T5863] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 309.245643][ T9129] SQUASHFS error: Failed to read block 0x0: -5 [ 309.252694][ T9129] unable to read squashfs_super_block [ 309.533211][ T9129] syz.4.850 (9129): drop_caches: 2 [ 309.628310][ T9134] loop6: detected capacity change from 0 to 524287999 [ 309.636588][ T9134] buffer_io_error: 7 callbacks suppressed [ 309.636612][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.650823][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.659158][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.667692][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.676104][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.684601][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.692981][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.701306][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.709514][ T9134] ldm_validate_partition_table(): Disk read failed. [ 309.716445][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.724798][ T9134] Buffer I/O error on dev loop6, logical block 0, async page read [ 309.733583][ T9134] Dev loop6: unable to read RDB block 0 [ 309.741246][ T9134] loop6: unable to read partition table [ 309.747753][ T9134] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 310.006593][ T9129] syz.4.850 (9129): drop_caches: 2 [ 310.070118][ T9134] Invalid logical block size (7) [ 310.227594][ T5865] apple-mfi-fastcharge 1-1: USB disconnect, device number 28 [ 310.252730][ T9148] trusted_key: encrypted_key: master key parameter 'us' is invalid [ 310.271199][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.854'. [ 310.320846][ T9149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9149 comm=syz.3.854 [ 310.385696][ T5862] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 310.646458][ T9156] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 310.653320][ T9156] [U] J"—e:ÀÆ" [ 310.664309][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 310.732190][ T5862] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=da.32 [ 310.814242][ T5862] usb 5-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3 [ 310.960550][ T5862] usb 5-1: Product: syz [ 310.965020][ T5862] usb 5-1: Manufacturer: syz [ 310.969801][ T5862] usb 5-1: SerialNumber: syz [ 310.979377][ T5862] usb 5-1: config 0 descriptor?? [ 310.998316][ T5862] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 311.236720][ T5863] usb 5-1: USB disconnect, device number 28 [ 312.197372][ T9185] overlayfs: failed to resolve './file0': -2 [ 312.404137][ T5865] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 312.564848][ T5865] usb 1-1: Using ep0 maxpacket: 32 [ 312.645409][ T5865] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 312.661502][ T5865] usb 1-1: config 0 has no interface number 0 [ 312.777685][ T5865] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 312.806378][ T5865] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 312.822437][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.838985][ T5865] usb 1-1: Product: syz [ 312.845597][ T5865] usb 1-1: Manufacturer: syz [ 312.864615][ T5865] usb 1-1: SerialNumber: syz [ 312.885593][ T5865] usb 1-1: config 0 descriptor?? [ 312.902502][ T5865] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 312.914441][ T5865] em28xx 1-1:0.132: Video interface 132 found: [ 313.110149][ T9182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.120251][ T9182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.982355][ T5865] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 314.017221][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.873'. [ 314.160308][ T30] audit: type=1400 audit(1746896252.360:712): avc: denied { setcurrent } for pid=9216 comm="syz.2.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 314.207350][ T5865] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 314.224036][ T5865] em28xx 1-1:0.132: board has no eeprom [ 314.293936][ T30] audit: type=1400 audit(1746896252.500:713): avc: denied { ioctl } for pid=9222 comm="syz.4.880" path="socket:[22600]" dev="sockfs" ino=22600 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.333703][ T5865] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 314.343273][ T9228] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 33, id = 0 [ 314.351297][ T5865] em28xx 1-1:0.132: analog set to bulk mode. [ 314.358214][ T9227] IPVS: stopping backup sync thread 9228 ... [ 314.364260][ T5863] em28xx 1-1:0.132: Registering V4L2 extension [ 314.391970][ T5865] usb 1-1: USB disconnect, device number 29 [ 314.401866][ T30] audit: type=1400 audit(1746896252.600:714): avc: denied { setopt } for pid=9226 comm="syz.2.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 314.422495][ T5865] em28xx 1-1:0.132: Disconnecting em28xx [ 314.507780][ T5903] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 314.547477][ T5863] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 314.555616][ T5863] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 314.562751][ T5863] em28xx 1-1:0.132: No AC97 audio processor [ 314.570231][ T5863] usb 1-1: Decoder not found [ 314.574898][ T5863] em28xx 1-1:0.132: failed to create media graph [ 314.581235][ T5863] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 314.589078][ T5863] em28xx 1-1:0.132: Remote control support is not available for this card. [ 314.598411][ T5865] em28xx 1-1:0.132: Closing input extension [ 314.606911][ T5865] em28xx 1-1:0.132: Freeing device [ 314.673771][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 314.681010][ T5903] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 314.690721][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.709387][ T5903] pvrusb2: Hardware description: Terratec Grabster AV400 [ 314.716951][ T5903] pvrusb2: ********** [ 314.720921][ T5903] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 314.731115][ T5903] pvrusb2: Important functionality might not be entirely working. [ 314.739118][ T5903] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 314.750893][ T5903] pvrusb2: ********** [ 314.753908][ T5862] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 314.763791][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 314.966319][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 314.974705][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 315.038994][ T10] usb 5-1: config 0 has no interfaces? [ 315.068324][ T5862] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 315.140439][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=1291, bcdDevice=43.25 [ 315.163797][ T5862] usb 3-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 315.243531][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 315.294408][ T5862] usb 3-1: config 0 has no interface number 0 [ 315.345535][ T10] usb 5-1: Product: syz [ 315.366982][ T5862] usb 3-1: config 0 interface 255 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.698462][ T2332] pvrusb2: Invalid write control endpoint [ 315.716375][ T10] usb 5-1: Manufacturer: syz [ 315.753706][ T10] usb 5-1: SerialNumber: syz [ 315.759486][ T2332] pvrusb2: Invalid write control endpoint [ 315.766341][ T2332] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 315.767619][ T5862] usb 3-1: config 0 interface 255 has no altsetting 0 [ 315.775706][ T2332] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 315.775719][ T2332] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 315.775726][ T2332] pvrusb2: Device being rendered inoperable [ 315.775796][ T2332] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 315.785793][ T10] apple-mfi-fastcharge 5-1: config 0 descriptor?? [ 315.790242][ T2332] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 315.835935][ T2332] pvrusb2: Attached sub-driver cx25840 [ 315.841572][ T2332] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 315.851840][ T2332] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 315.852473][ T9244] pvrusb2: Attempted to execute control transfer when device not ok [ 315.875789][ T5862] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 315.894244][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.920558][ T5862] usb 3-1: Product: syz [ 315.927027][ T5862] usb 3-1: Manufacturer: syz [ 315.932719][ T5862] usb 3-1: SerialNumber: syz [ 315.975667][ T5862] usb 3-1: config 0 descriptor?? [ 316.006444][ T30] audit: type=1400 audit(1746896254.210:715): avc: denied { read } for pid=9251 comm="syz.3.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 316.059742][ T5865] usb 2-1: USB disconnect, device number 38 [ 316.180208][ T10] apple-mfi-fastcharge 5-1: USB disconnect, device number 29 [ 316.239415][ T30] audit: type=1400 audit(1746896254.440:716): avc: denied { ioctl } for pid=9226 comm="syz.2.882" path="socket:[22525]" dev="sockfs" ino=22525 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 316.268476][ T5903] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 316.272667][ T5862] smsc75xx v1.0.0 [ 316.280376][ T5862] smsc75xx 3-1:0.255 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 316.291929][ T5862] smsc75xx 3-1:0.255: probe with driver smsc75xx failed with error -22 [ 316.304040][ T5862] usb 3-1: USB disconnect, device number 30 [ 316.393911][ T5863] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 316.424934][ T5903] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 316.433675][ T5903] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 316.444378][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 316.453328][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 316.464508][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 316.477682][ T5903] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 316.486899][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 316.495024][ T5903] usb 1-1: Product: syz [ 316.499185][ T5903] usb 1-1: Manufacturer: syz [ 316.508099][ T5903] cdc_wdm 1-1:1.0: skipping garbage [ 316.513330][ T5903] cdc_wdm 1-1:1.0: skipping garbage [ 316.520149][ T5903] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 316.526117][ T5903] cdc_wdm 1-1:1.0: Unknown control protocol [ 316.534231][ T5863] usb 4-1: device descriptor read/64, error -71 [ 316.783779][ T5863] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 316.864269][ T5903] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 316.931135][ T5863] usb 4-1: device descriptor read/64, error -71 [ 316.941384][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.947858][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.963885][ T5865] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 317.034155][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 317.040678][ T5903] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 317.050325][ T5863] usb usb4-port1: attempt power cycle [ 317.254172][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 317.352385][ T5903] usb 2-1: config 0 has no interface number 0 [ 317.364571][ T5865] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 317.377381][ C1] cdc_wdm 1-1:1.0: Unexpected error -71 [ 317.383039][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 317.389653][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 317.396118][ T10] usb 1-1: USB disconnect, device number 30 [ 317.397172][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 317.403578][ T9261] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 317.408606][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 317.408627][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 317.413676][ T5865] usb 5-1: config 8 has no interface number 0 [ 317.438345][ T5903] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 317.453809][ T5903] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 317.465441][ T5865] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 317.477303][ T5903] usb 2-1: config 0 interface 126 has no altsetting 0 [ 317.565106][ T5865] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 317.575575][ T5865] usb 5-1: config 8 interface 39 has no altsetting 0 [ 317.583586][ T5903] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 317.593526][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.611504][ T5903] usb 2-1: Product: syz [ 317.618476][ T5903] usb 2-1: Manufacturer: syz [ 317.624109][ T5865] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 317.697798][ T5903] usb 2-1: SerialNumber: syz [ 317.704260][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.714967][ T5865] usb 5-1: Product: syz [ 317.724486][ T5903] usb 2-1: config 0 descriptor?? [ 317.729559][ T5865] usb 5-1: Manufacturer: syz [ 317.738512][ T5865] usb 5-1: SerialNumber: syz [ 317.743415][ T9258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 317.750839][ T9258] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 317.758132][ T5863] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 317.794299][ T5863] usb 4-1: device descriptor read/8, error -71 [ 318.117054][ T5863] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 318.154917][ T5863] usb 4-1: device descriptor read/8, error -71 [ 318.197527][ T5903] ir_usb 2-1:0.126: IR Dongle converter detected [ 318.260855][ T30] audit: type=1400 audit(1746896256.460:717): avc: denied { watch } for pid=9271 comm="syz.2.892" path="/170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 318.309296][ T30] audit: type=1400 audit(1746896256.510:718): avc: denied { watch_sb watch_reads } for pid=9271 comm="syz.2.892" path="/170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 318.354755][ T5863] usb usb4-port1: unable to enumerate USB device [ 318.405387][ T5903] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 318.577075][ T9279] syz.0.894: attempt to access beyond end of device [ 318.577075][ T9279] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 318.590544][ T9279] SQUASHFS error: Failed to read block 0x0: -5 [ 318.597401][ T9279] unable to read squashfs_super_block [ 318.684735][ T9279] syz.0.894 (9279): drop_caches: 2 [ 318.704438][ T9279] syz.0.894 (9279): drop_caches: 2 [ 318.849146][ T5893] usb 2-1: USB disconnect, device number 39 [ 318.858973][ T5893] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 318.871020][ T5893] ir_usb 2-1:0.126: device disconnected [ 319.175755][ T5903] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 319.384224][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 319.437240][ T5903] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 319.515157][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 319.597906][ T5865] ipheth 5-1:8.39: Unable to find endpoints [ 319.679959][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 319.836449][ T5903] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 319.897016][ T5865] usb 5-1: USB disconnect, device number 30 [ 319.979817][ T5903] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 320.004982][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.030072][ T5903] usb 1-1: Product: syz [ 320.034809][ T5903] usb 1-1: Manufacturer: syz [ 320.039853][ T5903] usb 1-1: SerialNumber: syz [ 320.057184][ T5903] usb 1-1: config 0 descriptor?? [ 320.062774][ T9282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 320.070268][ T9282] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 320.121645][ T5903] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 320.129044][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 320.129144][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 320.240222][ T5902] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 320.404667][ T9282] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 320.411712][ T9282] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 320.587077][ T9282] vhci_hcd vhci_hcd.0: Device attached [ 320.695558][ T9301] vhci_hcd: connection closed [ 320.699288][ T3493] vhci_hcd: stop threads [ 320.731170][ T10] usb 1-1: USB disconnect, device number 31 [ 320.751261][ T10] mcba_usb 1-1:0.0 can0: device disconnected [ 320.754930][ T3493] vhci_hcd: release socket [ 320.792164][ T3493] vhci_hcd: disconnect device [ 320.808442][ T5902] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 321.373911][ T30] audit: type=1400 audit(1746896259.040:719): avc: denied { listen } for pid=9303 comm="syz.1.902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 321.407568][ T5902] usb 3-1: config 0 has no interface number 0 [ 321.478838][ T5902] usb 3-1: config 0 interface 41 has no altsetting 0 [ 321.582601][ T30] audit: type=1400 audit(1746896259.610:720): avc: denied { write } for pid=9306 comm="syz.4.903" path="socket:[22736]" dev="sockfs" ino=22736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.685443][ T5902] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 321.783129][ T30] audit: type=1326 audit(1746896259.940:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 321.807542][ T30] audit: type=1326 audit(1746896259.940:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 321.823770][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.830904][ T30] audit: type=1326 audit(1746896259.940:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 321.862148][ T30] audit: type=1326 audit(1746896259.940:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 321.888607][ T30] audit: type=1326 audit(1746896259.940:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 321.929338][ T5902] usb 3-1: Product: syz [ 321.942366][ T5902] usb 3-1: Manufacturer: syz [ 321.956345][ T5902] usb 3-1: SerialNumber: syz [ 321.960127][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 321.988627][ T30] audit: type=1326 audit(1746896259.940:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 321.989252][ T5902] usb 3-1: config 0 descriptor?? [ 322.103417][ T9324] trusted_key: encrypted_key: insufficient parameters specified [ 322.873672][ T30] audit: type=1326 audit(1746896259.940:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 322.913678][ T30] audit: type=1326 audit(1746896259.940:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9303 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 323.103413][ T5902] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 323.335804][ T9351] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 323.936276][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 323.949075][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 323.962584][ T9357] netlink: 'syz.1.916': attribute type 3 has an invalid length. [ 323.970514][ T9357] netlink: 'syz.1.916': attribute type 1 has an invalid length. [ 324.167000][ T5902] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 324.201625][ T5902] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 324.248534][ T5902] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 324.341769][ T5902] usb 3-1: USB disconnect, device number 31 [ 325.174014][ T9395] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.223700][ T5902] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 325.231384][ T5903] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 325.634610][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 325.639918][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 325.651061][ T5903] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 325.661662][ T5902] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 325.677458][ T5903] usb 2-1: config 0 has no interface number 0 [ 325.685089][ T5902] usb 3-1: config 0 has no interface number 0 [ 325.691240][ T5903] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 325.703801][ T5902] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 325.756641][ T5903] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 325.781288][ T5902] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 325.809813][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.825215][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.864703][ T5903] usb 2-1: Product: syz [ 325.889989][ T5902] usb 3-1: Product: syz [ 325.895716][ T5903] usb 2-1: Manufacturer: syz [ 325.900543][ T5902] usb 3-1: Manufacturer: syz [ 325.907770][ T5903] usb 2-1: SerialNumber: syz [ 325.912713][ T5902] usb 3-1: SerialNumber: syz [ 325.942396][ T5903] usb 2-1: config 0 descriptor?? [ 325.967183][ T5902] usb 3-1: config 0 descriptor?? [ 326.044525][ T5902] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 326.149963][ T9406] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 326.319548][ T9378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.431805][ T9378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.458499][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.459628][ T5903] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 326.527600][ T5902] em28xx 3-1:0.132: Video interface 132 found: [ 326.534521][ T5903] em28xx 2-1:0.132: Video interface 132 found: [ 326.538234][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.903533][ T5902] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 326.920456][ T5903] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 327.315736][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 327.324684][ T5902] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 327.334352][ T5903] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 327.346963][ T5902] em28xx 3-1:0.132: board has no eeprom [ 327.355998][ T5903] em28xx 2-1:0.132: board has no eeprom [ 327.444260][ T5902] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 327.452274][ T5903] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 327.460779][ T5902] em28xx 3-1:0.132: analog set to bulk mode. [ 327.468513][ T5903] em28xx 2-1:0.132: analog set to bulk mode. [ 327.474749][ T5865] em28xx 3-1:0.132: Registering V4L2 extension [ 327.496407][ T5902] usb 3-1: USB disconnect, device number 32 [ 327.508244][ T5903] usb 2-1: USB disconnect, device number 40 [ 327.542289][ T5903] em28xx 2-1:0.132: Disconnecting em28xx [ 327.550254][ T5902] em28xx 3-1:0.132: Disconnecting em28xx [ 327.556743][ T9431] xt_hashlimit: size too large, truncated to 1048576 [ 327.612772][ T9434] xt_hashlimit: size too large, truncated to 1048576 [ 327.772355][ T5865] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 327.781819][ T5865] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 327.797004][ T5865] em28xx 3-1:0.132: No AC97 audio processor [ 327.814722][ T5865] usb 3-1: Decoder not found [ 327.820588][ T5865] em28xx 3-1:0.132: failed to create media graph [ 327.827827][ T5865] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 327.838502][ T5865] em28xx 3-1:0.132: Remote control support is not available for this card. [ 327.855571][ T5863] em28xx 2-1:0.132: Registering V4L2 extension [ 328.020478][ T9453] netlink: 56 bytes leftover after parsing attributes in process `syz.0.938'. [ 328.294325][ T9458] syz.3.940 (9458): drop_caches: 2 [ 328.323431][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 328.332368][ T5863] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 328.339755][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 328.339763][ T30] audit: type=1400 audit(1746896266.520:790): avc: denied { ioctl } for pid=9446 comm="syz.2.939" path="socket:[23125]" dev="sockfs" ino=23125 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 328.349749][ T9458] syz.3.940 (9458): drop_caches: 2 [ 328.371038][ T5863] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 328.383028][ T5863] em28xx 2-1:0.132: No AC97 audio processor [ 328.472045][ T9463] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 329.246435][ T5863] usb 2-1: Decoder not found [ 329.251085][ T5863] em28xx 2-1:0.132: failed to create media graph [ 329.258131][ T5863] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 329.273995][ T5863] em28xx 2-1:0.132: Remote control support is not available for this card. [ 329.284297][ T5902] em28xx 3-1:0.132: Closing input extension [ 329.290536][ T5903] em28xx 2-1:0.132: Closing input extension [ 329.922669][ T30] audit: type=1400 audit(1746896268.120:791): avc: denied { getattr } for pid=9468 comm="syz.3.945" path="socket:[23144]" dev="sockfs" ino=23144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 329.989200][ T5902] em28xx 3-1:0.132: Freeing device [ 330.061033][ T5903] em28xx 2-1:0.132: Freeing device [ 330.804603][ T30] audit: type=1400 audit(1746896268.830:792): avc: denied { ioctl } for pid=9482 comm="syz.2.948" path="socket:[23160]" dev="sockfs" ino=23160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 331.106960][ T5903] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 331.221684][ T5902] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 331.457640][ T5903] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 331.494247][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 331.567839][ T5902] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 331.594951][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.678986][ T5902] usb 3-1: config 0 has no interface number 0 [ 331.707997][ T5903] usb 2-1: Product: syz [ 331.759007][ T5903] usb 2-1: Manufacturer: syz [ 331.779980][ T5902] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 331.869427][ T5903] usb 2-1: SerialNumber: syz [ 331.913323][ T5902] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 331.928352][ T5903] r8152-cfgselector 2-1: Unknown version 0x0000 [ 331.948711][ T5903] r8152-cfgselector 2-1: config 0 descriptor?? [ 331.971518][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.006008][ T5902] usb 3-1: Product: syz [ 332.010240][ T5902] usb 3-1: Manufacturer: syz [ 332.036319][ T5902] usb 3-1: SerialNumber: syz [ 332.059564][ T5902] usb 3-1: config 0 descriptor?? [ 332.088803][ T5902] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 332.118372][ T5902] em28xx 3-1:0.132: Video interface 132 found: [ 332.330567][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.342024][ T9518] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 332.498460][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.999987][ T5902] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 333.230686][ T5902] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 333.255812][ T5902] em28xx 3-1:0.132: board has no eeprom [ 333.326580][ T5902] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 333.342857][ T5902] em28xx 3-1:0.132: analog set to bulk mode. [ 333.359930][ T5903] em28xx 3-1:0.132: Registering V4L2 extension [ 333.455179][ T5865] r8152-cfgselector 2-1: USB disconnect, device number 41 [ 333.545740][ T9531] tipc: Started in network mode [ 333.550705][ T9531] tipc: Node identity 4, cluster identity 4711 [ 333.557489][ T9531] tipc: Node number set to 4 [ 333.623904][ T5863] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 333.736781][ T5902] usb 3-1: USB disconnect, device number 33 [ 333.800028][ T5903] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 333.829810][ T5902] em28xx 3-1:0.132: Disconnecting em28xx [ 334.009612][ T5863] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 334.019351][ T5863] usb 5-1: config 0 has no interface number 0 [ 334.025879][ T5863] usb 5-1: config 0 interface 41 has no altsetting 0 [ 334.035835][ T5863] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 334.040094][ T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 334.056551][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.075525][ T5863] usb 5-1: Product: syz [ 334.095482][ T5863] usb 5-1: Manufacturer: syz [ 334.100156][ T5863] usb 5-1: SerialNumber: syz [ 334.131900][ T9541] 9pnet_fd: Insufficient options for proto=fd [ 334.293153][ T5903] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 334.314819][ T5865] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 334.336313][ T5863] usb 5-1: config 0 descriptor?? [ 334.396605][ T5903] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 334.459531][ T5903] em28xx 3-1:0.132: No AC97 audio processor [ 334.468109][ T5903] usb 3-1: Decoder not found [ 334.472814][ T5903] em28xx 3-1:0.132: failed to create media graph [ 334.479822][ T5903] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 334.489326][ T5903] em28xx 3-1:0.132: Remote control support is not available for this card. [ 334.501126][ T5902] em28xx 3-1:0.132: Closing input extension [ 334.530714][ T5902] em28xx 3-1:0.132: Freeing device [ 334.607359][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 334.608269][ T5865] usb 2-1: Using ep0 maxpacket: 8 [ 334.618815][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.651330][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 334.667913][ T5865] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.686526][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.694252][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.704021][ T5865] usb 2-1: Product: syz [ 334.708764][ T5865] usb 2-1: Manufacturer: syz [ 334.721198][ T10] usb 4-1: config 0 descriptor?? [ 334.721564][ T5865] usb 2-1: SerialNumber: syz [ 334.809998][ T5865] usb 2-1: config 0 descriptor?? [ 334.897613][ T9551] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 334.915550][ T30] audit: type=1400 audit(1746896273.110:793): avc: denied { listen } for pid=9549 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 334.939542][ T30] audit: type=1400 audit(1746896273.110:794): avc: denied { accept } for pid=9549 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 334.977499][ T5862] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 335.134140][ T5865] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.139502][ T10] uclogic 0003:28BD:0075.000D: interface is invalid, ignoring [ 335.156253][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 335.171288][ T5862] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 335.180850][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.190686][ T5862] usb 1-1: config 0 descriptor?? [ 335.197217][ T9548] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 335.380124][ T5863] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 335.586603][ T5899] usb 4-1: USB disconnect, device number 34 [ 335.791655][ T5862] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 336.009056][ T9561] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 336.070611][ T5902] usb 1-1: USB disconnect, device number 32 [ 336.529652][ T5863] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 336.721166][ T5863] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 336.837731][ T5863] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 336.899935][ T5863] usb 5-1: USB disconnect, device number 31 [ 336.973469][ T30] audit: type=1400 audit(1746896275.170:795): avc: denied { ioctl } for pid=9564 comm="syz.3.971" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x540a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 337.125256][ T5865] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 337.130134][ T9571] syz.4.972: attempt to access beyond end of device [ 337.130134][ T9571] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 337.147545][ T5865] usb 2-1: USB disconnect, device number 42 [ 337.155257][ T9571] SQUASHFS error: Failed to read block 0x0: -5 [ 337.161824][ T9571] unable to read squashfs_super_block [ 337.243934][ T9566] sd 0:0:1:0: PR command failed: 1026 [ 337.375004][ T9571] syz.4.972 (9571): drop_caches: 2 [ 337.382994][ T9571] syz.4.972 (9571): drop_caches: 2 [ 337.393978][ T9566] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 337.405582][ T9566] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 337.489168][ T5899] IPVS: starting estimator thread 0... [ 337.583890][ T9577] IPVS: using max 42 ests per chain, 100800 per kthread [ 338.854935][ T9592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.095238][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.104822][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.113771][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.122642][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.131526][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.140935][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.149800][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.158655][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.168241][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.977'. [ 339.444043][ T5862] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 339.520327][ T9601] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 340.303094][ T9603] netlink: 'syz.1.979': attribute type 21 has an invalid length. [ 340.311605][ T9603] netlink: 'syz.1.979': attribute type 6 has an invalid length. [ 340.405503][ T5862] usb 1-1: Using ep0 maxpacket: 32 [ 340.415672][ T5862] usb 1-1: config 0 has an invalid interface number: 81 but max is 0 [ 340.424471][ T5862] usb 1-1: config 0 has no interface number 0 [ 340.430625][ T5862] usb 1-1: config 0 interface 81 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 340.468480][ T5862] usb 1-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=82.aa [ 340.477951][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.490589][ T5862] usb 1-1: Product: syz [ 340.539872][ T5862] usb 1-1: Manufacturer: syz [ 340.613762][ T5899] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 340.648224][ T5862] usb 1-1: SerialNumber: syz [ 340.666841][ T5862] usb 1-1: config 0 descriptor?? [ 340.753846][ T9594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 340.780490][ T5862] appletouch 1-1:0.81: Could not find int-in endpoint [ 340.809404][ T5899] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 340.840206][ T5899] usb 3-1: config 0 has no interface number 0 [ 340.847561][ T5862] appletouch 1-1:0.81: probe with driver appletouch failed with error -5 [ 340.893936][ T5813] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 341.003814][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 341.026516][ T5899] usb 3-1: config 0 interface 41 has no altsetting 0 [ 341.043087][ T5862] usbhid 1-1:0.81: couldn't find an input interrupt endpoint [ 341.063962][ T5899] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 341.076224][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.085981][ T30] audit: type=1400 audit(1746896279.290:796): avc: denied { accept } for pid=9593 comm="syz.0.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 341.093489][ T5899] usb 3-1: Product: syz [ 341.109565][ T5899] usb 3-1: Manufacturer: syz [ 341.116998][ T5899] usb 3-1: SerialNumber: syz [ 341.144680][ T5899] usb 3-1: config 0 descriptor?? [ 341.165729][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.185243][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 341.203811][ T5813] usb 4-1: Using ep0 maxpacket: 8 [ 341.226084][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.235563][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 341.247026][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 341.268151][ T5813] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.284060][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.303466][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 341.313627][ T5813] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.323707][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 341.333662][ T5813] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.346749][ T10] usb 5-1: Product: syz [ 341.352997][ T10] usb 5-1: Manufacturer: syz [ 341.365180][ T5813] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.385607][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 341.394327][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 341.401001][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.414575][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 341.428407][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 341.993359][ T5813] usb 4-1: GET_CAPABILITIES returned 0 [ 342.002102][ T5813] usbtmc 4-1:16.0: can't read capabilities [ 342.200953][ T5899] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 342.318604][ T5813] usb 4-1: USB disconnect, device number 35 [ 342.413717][ T9623] netlink: 'syz.1.986': attribute type 21 has an invalid length. [ 342.426440][ T9623] netlink: 'syz.1.986': attribute type 6 has an invalid length. [ 342.832215][ T10] usb 1-1: USB disconnect, device number 33 [ 343.015922][ T5126] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 343.274864][ T5899] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 343.293243][ T5899] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 343.315990][ T5899] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 343.398595][ T5899] usb 3-1: USB disconnect, device number 34 [ 343.480229][ T9630] overlayfs: failed to resolve './file0': -2 [ 343.564522][ T10] usb 5-1: USB disconnect, device number 32 [ 343.567988][ T30] audit: type=1400 audit(1746896281.760:797): avc: denied { bind } for pid=9634 comm="syz.2.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 344.052382][ T9639] loop6: detected capacity change from 0 to 524287999 [ 344.065604][ T9639] buffer_io_error: 7 callbacks suppressed [ 344.065638][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.081428][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.092123][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.107099][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.115881][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.124385][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.132823][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.141278][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.149455][ T9639] ldm_validate_partition_table(): Disk read failed. [ 344.156423][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.164891][ T9639] Buffer I/O error on dev loop6, logical block 0, async page read [ 344.173376][ T9639] Dev loop6: unable to read RDB block 0 [ 344.180802][ T9639] loop6: unable to read partition table [ 344.187396][ T9639] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 344.390083][ T9642] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 344.416040][ T5899] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 345.058685][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.064503][ T9647] overlayfs: failed to get inode (-116) [ 345.373949][ T9632] Invalid logical block size (7) [ 345.487993][ T9651] overlayfs: failed to get inode (-116) [ 345.620386][ T9653] overlayfs: failed to get inode (-116) [ 345.779491][ T9647] overlayfs: failed to get inode (-116) [ 345.885105][ T30] audit: type=1326 audit(1746896284.080:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 345.928661][ T5865] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 345.953285][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.963140][ T5899] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 345.972366][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.976782][ T9651] overlayfs: failed to get inode (-116) [ 345.982343][ T5899] usb 3-1: config 0 descriptor?? [ 345.994228][ T30] audit: type=1326 audit(1746896284.080:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.017637][ T30] audit: type=1326 audit(1746896284.080:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.036247][ T9653] overlayfs: failed to get inode (-116) [ 346.041485][ T30] audit: type=1326 audit(1746896284.080:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.069843][ T30] audit: type=1326 audit(1746896284.080:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.093625][ T30] audit: type=1326 audit(1746896284.080:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.117036][ T30] audit: type=1326 audit(1746896284.080:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.147950][ T30] audit: type=1326 audit(1746896284.080:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.174308][ T5865] usb 5-1: Using ep0 maxpacket: 16 [ 346.184024][ T5865] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 346.192366][ T5865] usb 5-1: config 252 has no interface number 0 [ 346.197807][ T9647] overlayfs: failed to get inode (-116) [ 346.201171][ T30] audit: type=1326 audit(1746896284.080:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.228667][ T9647] overlayfs: failed to get inode (-116) [ 346.228930][ T5865] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 346.246610][ T30] audit: type=1326 audit(1746896284.080:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.271524][ T30] audit: type=1326 audit(1746896284.080:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.297107][ T30] audit: type=1326 audit(1746896284.080:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.320660][ T5865] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 346.331819][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.340239][ T5865] usb 5-1: Product: syz [ 346.348040][ T5865] usb 5-1: Manufacturer: syz [ 346.352828][ T5865] usb 5-1: SerialNumber: syz [ 346.374765][ T30] audit: type=1326 audit(1746896284.080:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.452652][ T5899] isku 0003:1E7D:319C.000F: item fetching failed at offset 5/7 [ 346.582944][ T5865] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 346.830030][ T1052] usb 5-1: Failed to submit usb control message: -71 [ 346.902499][ T30] audit: type=1326 audit(1746896284.080:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 346.935890][ T1052] usb 5-1: unable to send the bmi data to the device: -71 [ 347.022016][ T5865] usb 5-1: USB disconnect, device number 33 [ 347.057401][ T1052] usb 5-1: unable to get target info from device [ 347.134331][ T5899] isku 0003:1E7D:319C.000F: parse failed [ 347.140393][ T5899] isku 0003:1E7D:319C.000F: probe with driver isku failed with error -22 [ 347.153730][ T1052] usb 5-1: could not get target info (-71) [ 347.155376][ T5899] usb 3-1: USB disconnect, device number 35 [ 347.181188][ T30] audit: type=1326 audit(1746896284.090:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9644 comm="syz.1.994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7fc00000 [ 347.203994][ T1052] usb 5-1: could not probe fw (-71) [ 348.957022][ T9691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.966003][ T9691] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 348.974148][ T9691] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 348.981775][ T9691] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 348.990314][ T9691] iommufd_mock iommufd_mock4: Adding to iommu group 4 [ 348.998167][ T9691] iommufd_mock iommufd_mock5: Adding to iommu group 5 [ 349.005716][ T9691] iommufd_mock iommufd_mock6: Adding to iommu group 6 [ 349.013751][ T9691] iommufd_mock iommufd_mock7: Adding to iommu group 7 [ 349.096500][ T5902] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 349.109969][ T9696] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 349.205147][ T9698] overlayfs: failed to get inode (-116) [ 349.224092][ T9698] overlayfs: failed to get inode (-116) [ 349.305392][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.321681][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.352859][ T5902] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 349.419163][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.533185][ T5902] usb 5-1: config 0 descriptor?? [ 349.583465][ T9707] __nla_validate_parse: 140 callbacks suppressed [ 349.583483][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1010'. [ 349.673699][ T5865] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 349.843878][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 349.860372][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.876597][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.894912][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.908365][ T5865] usb 3-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 349.919626][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.935533][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 349.945561][ T5865] usb 3-1: config 0 descriptor?? [ 349.951665][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 349.985385][ T5902] cm6533_jd 0003:0D8C:0022.0010: No inputs registered, leaving [ 350.011481][ T5902] cm6533_jd 0003:0D8C:0022.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 350.752721][ T5865] wacom 0003:056A:0317.0011: unbalanced collection at end of report description [ 350.762552][ T5865] wacom 0003:056A:0317.0011: parse failed [ 350.768813][ T5865] wacom 0003:056A:0317.0011: probe with driver wacom failed with error -22 [ 350.774325][ T9700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.797560][ T9700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.944143][ T9713] 9pnet_fd: Insufficient options for proto=fd [ 351.002311][ T9713] netlink: 'syz.1.1012': attribute type 13 has an invalid length. [ 351.174093][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.181703][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.362513][ T5865] usb 5-1: USB disconnect, device number 34 [ 351.644078][ T5902] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 352.570993][ T5862] usb 3-1: USB disconnect, device number 36 [ 352.679043][ T5902] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 352.699647][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.724446][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.732484][ T5902] usb 1-1: Product: syz [ 352.806936][ T5902] usb 1-1: Manufacturer: syz [ 352.822300][ T5902] usb 1-1: SerialNumber: syz [ 352.853094][ T5902] r8152-cfgselector 1-1: Unknown version 0x0000 [ 352.853282][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.862485][ T5902] r8152-cfgselector 1-1: config 0 descriptor?? [ 353.318693][ T9743] syz.2.1018 (9743): drop_caches: 2 [ 353.336036][ T9743] syz.2.1018 (9743): drop_caches: 2 [ 353.507947][ T9713] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.533505][ T9713] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.562840][ T9713] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.588652][ T9713] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.655474][ T9749] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 354.004780][ T5899] r8152-cfgselector 1-1: USB disconnect, device number 34 [ 354.571969][ T9751] ovl_get_inode: 6 callbacks suppressed [ 354.571986][ T9751] overlayfs: failed to get inode (-116) [ 354.608168][ T9751] overlayfs: failed to get inode (-116) [ 354.640020][ T9751] overlayfs: failed to get inode (-116) [ 354.674006][ T9751] overlayfs: failed to get inode (-116) [ 354.676798][ T9756] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1022'. [ 354.684419][ T9751] overlayfs: failed to get inode (-116) [ 354.734417][ T9751] overlayfs: failed to get inode (-116) [ 354.790214][ T9751] overlayfs: failed to get inode (-116) [ 354.814612][ T9751] overlayfs: failed to get inode (-116) [ 354.842020][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 354.854307][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1023'. [ 355.243009][ T9773] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1026'. [ 355.571655][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 355.580869][ T9781] ksmbd: Unknown IPC event: 0, ignore. [ 355.629502][ T9779] vlan2: entered allmulticast mode [ 357.279436][ T9817] overlayfs: failed to get inode (-116) [ 357.306371][ T9817] overlayfs: failed to get inode (-116) [ 357.328898][ T9821] fuse: Bad value for 'fd' [ 357.350374][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 357.350391][ T30] audit: type=1400 audit(1746896295.550:868): avc: denied { ioctl } for pid=9820 comm="syz.2.1043" path="socket:[24904]" dev="sockfs" ino=24904 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.351503][ T9821] fuse: Unknown parameter '0x0000000000000006' [ 357.600817][ T9832] netlink: 'syz.0.1044': attribute type 10 has an invalid length. [ 357.633683][ T5863] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 357.733767][ T30] audit: type=1400 audit(1746896295.940:869): avc: denied { setopt } for pid=9822 comm="syz.4.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.753690][ T30] audit: type=1400 audit(1746896295.940:870): avc: denied { shutdown } for pid=9822 comm="syz.4.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.796139][ T5863] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 357.805715][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.820473][ T5863] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 357.834626][ T5863] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 357.911579][ T5863] usb 3-1: Manufacturer: syz [ 357.920712][ T9838] netlink: 'syz.1.1045': attribute type 21 has an invalid length. [ 357.928923][ T9838] netlink: 'syz.1.1045': attribute type 6 has an invalid length. [ 357.940272][ T9838] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1045'. [ 357.945195][ T5863] usb 3-1: config 0 descriptor?? [ 358.005049][ T5863] igorplugusb 3-1:0.0: incorrect number of endpoints [ 358.155170][ T30] audit: type=1400 audit(1746896296.350:871): avc: denied { open } for pid=9836 comm="syz.0.1046" path="/dev/ptyq5" dev="devtmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 358.179753][ T9840] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1046'. [ 358.356225][ T5865] usb 3-1: USB disconnect, device number 37 [ 358.598404][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1048'. [ 358.787746][ T9848] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1050'. [ 360.102759][ T9864] ovl_get_inode: 6 callbacks suppressed [ 360.102774][ T9864] overlayfs: failed to get inode (-116) [ 360.119135][ T9864] overlayfs: failed to get inode (-116) [ 360.125828][ T9864] overlayfs: failed to get inode (-116) [ 360.131746][ T9864] overlayfs: failed to get inode (-116) [ 360.139292][ T9864] overlayfs: failed to get inode (-116) [ 360.145869][ T9864] overlayfs: failed to get inode (-116) [ 360.200073][ T9864] overlayfs: failed to get inode (-116) [ 360.212850][ T9864] overlayfs: failed to get inode (-116) [ 360.519629][ T9880] bridge1: entered promiscuous mode [ 360.537899][ T30] audit: type=1400 audit(1746896298.740:872): avc: denied { mount } for pid=9872 comm="syz.1.1058" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 360.561064][ T9878] overlayfs: missing 'workdir' [ 360.647220][ T9882] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 361.228025][ T30] audit: type=1400 audit(1746896299.430:873): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 361.403928][ T5899] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 361.715253][ T5899] usb 5-1: config 0 has no interfaces? [ 361.725017][ T5899] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 361.747970][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.781255][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.790528][ T5899] usb 5-1: config 0 descriptor?? [ 361.952708][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.054539][ T5865] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 362.532101][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 362.587613][ T5865] usb 1-1: device descriptor read/all, error -71 [ 362.689726][ T9913] xt_hashlimit: size too large, truncated to 1048576 [ 363.494422][ T9921] overlayfs: failed to get inode (-116) [ 363.536124][ T9921] overlayfs: failed to get inode (-116) [ 363.662799][ T30] audit: type=1400 audit(1746896301.860:874): avc: denied { connect } for pid=9922 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.691879][ T9923] x_tables: duplicate underflow at hook 2 [ 363.699188][ T30] audit: type=1400 audit(1746896301.890:875): avc: denied { setopt } for pid=9922 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.739065][ T9929] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 363.753172][ T30] audit: type=1400 audit(1746896301.950:876): avc: denied { write } for pid=9922 comm="syz.3.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 363.823629][ T30] audit: type=1400 audit(1746896302.020:877): avc: denied { relabelto } for pid=9928 comm="syz.0.1075" name="syz0" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 363.874775][ T30] audit: type=1400 audit(1746896302.040:878): avc: denied { associate } for pid=9928 comm="syz.0.1075" name="syz0" dev="cgroup2" ino=67 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:var_auth_t:s0" [ 364.010667][ T9937] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 364.750463][ T5813] usb 5-1: USB disconnect, device number 35 [ 367.053690][ T5863] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 367.288297][ T5863] usb 1-1: no configurations [ 367.297004][ T5863] usb 1-1: can't read configurations, error -22 [ 367.732922][ T30] audit: type=1400 audit(1746896305.930:879): avc: denied { wake_alarm } for pid=9969 comm="syz.4.1085" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 367.803771][ T5863] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 368.114788][ T5899] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 368.146349][ T5863] usb 1-1: no configurations [ 368.159850][ T5863] usb 1-1: can't read configurations, error -22 [ 368.186667][ T5863] usb usb1-port1: attempt power cycle [ 368.343957][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 368.356939][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.383735][ T5813] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 368.450105][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.809044][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 368.825629][ T5863] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 368.825839][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.842099][ T5899] usb 5-1: Product: syz [ 368.846812][ T5899] usb 5-1: Manufacturer: syz [ 368.851514][ T5899] usb 5-1: SerialNumber: syz [ 368.859803][ T5899] usb 5-1: config 0 descriptor?? [ 368.871298][ T5863] usb 1-1: no configurations [ 368.876760][ T5899] appledisplay 5-1:0.0: Could not find int-in endpoint [ 368.876810][ T5863] usb 1-1: can't read configurations, error -22 [ 368.894491][ T30] audit: type=1400 audit(1746896307.090:880): avc: denied { mounton } for pid=9981 comm="syz.2.1089" path="/205/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 368.897388][ T5899] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 368.929113][ T5813] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 368.939390][ T5813] usb 2-1: config 0 has no interface number 0 [ 368.947658][ T5813] usb 2-1: config 0 interface 41 has no altsetting 0 [ 368.964781][ T5813] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 368.981197][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.014246][ T5813] usb 2-1: Product: syz [ 369.022989][ T5813] usb 2-1: Manufacturer: syz [ 369.028609][ T5813] usb 2-1: SerialNumber: syz [ 369.076767][ T5863] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 369.122227][ T5813] usb 2-1: config 0 descriptor?? [ 369.124598][ T5863] usb 1-1: no configurations [ 369.134335][ T5863] usb 1-1: can't read configurations, error -22 [ 369.159398][ T5863] usb usb1-port1: unable to enumerate USB device [ 369.230537][ T5899] usb 5-1: USB disconnect, device number 36 [ 369.317381][ T30] audit: type=1400 audit(1746896307.510:881): avc: denied { getopt } for pid=9981 comm="syz.2.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 369.609900][ T30] audit: type=1326 audit(1746896307.810:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9990 comm="syz.0.1091" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c8d98e969 code=0x0 [ 370.013844][ T5899] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 370.143338][ T30] audit: type=1400 audit(1746896308.340:883): avc: denied { getopt } for pid=10001 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 370.183848][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 370.259088][ T5899] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 370.273664][ T5899] usb 1-1: config 0 has no interface number 0 [ 370.282521][ T5899] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 370.416957][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.444071][ T5813] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 370.473165][ T5899] usb 1-1: Product: syz [ 370.486459][ T5899] usb 1-1: Manufacturer: syz [ 370.595095][ T5899] usb 1-1: SerialNumber: syz [ 370.606702][ T30] audit: type=1400 audit(1746896308.810:884): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 370.614594][ T5899] usb 1-1: config 0 descriptor?? [ 370.661387][ T5899] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 370.681042][ T5899] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 370.692165][ T30] audit: type=1400 audit(1746896308.890:885): avc: denied { watch } for pid=10009 comm="syz.2.1096" path="/proc/698/fdinfo" dev="proc" ino=25287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 372.613098][ T5813] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 372.623972][ T5813] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 372.634084][ T5813] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 372.646441][ T5813] usb 2-1: USB disconnect, device number 43 [ 372.693303][ T10] usb 1-1: USB disconnect, device number 41 [ 372.727006][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 372.751870][ T10] kobil_sct 1-1:0.148: device disconnected [ 372.908380][T10035] overlayfs: failed to resolve './file0/file0': -2 [ 373.234737][T10040] netlink: 'syz.4.1102': attribute type 21 has an invalid length. [ 373.245984][T10040] netlink: 'syz.4.1102': attribute type 6 has an invalid length. [ 373.262917][T10040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1102'. [ 373.349518][T10044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.873628][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 373.877934][T10046] overlayfs: failed to resolve './file0': -2 [ 374.570484][T10051] sctp: [Deprecated]: syz.1.1106 (pid 10051) Use of int in maxseg socket option. [ 374.570484][T10051] Use struct sctp_assoc_value instead [ 374.631739][ T5862] IPVS: starting estimator thread 0... [ 374.644670][ T30] audit: type=1326 audit(1746896312.530:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 374.725205][ T30] audit: type=1326 audit(1746896312.530:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 374.773852][T10052] IPVS: using max 45 ests per chain, 108000 per kthread [ 374.893707][ T30] audit: type=1326 audit(1746896312.530:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a4ad8d41f code=0x7ffc0000 [ 374.990081][ T30] audit: type=1326 audit(1746896312.530:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 375.078149][ T30] audit: type=1326 audit(1746896312.530:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 375.214569][T10060] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 375.956219][ T30] audit: type=1326 audit(1746896312.530:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 375.981299][ T30] audit: type=1326 audit(1746896312.530:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 376.008768][ T30] audit: type=1326 audit(1746896312.530:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 376.032438][ T30] audit: type=1326 audit(1746896312.540:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 376.093765][ T30] audit: type=1326 audit(1746896312.540:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10048 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ad8e969 code=0x7ffc0000 [ 376.274335][ T5862] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 376.459732][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.660489][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.696983][ T5862] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 376.730457][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.768620][ T5862] usb 4-1: config 0 descriptor?? [ 377.119670][T10078] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 377.190477][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 377.201021][T10078] bond3: entered allmulticast mode [ 377.209433][T10078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 377.450777][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 377.461827][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.492776][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 377.515248][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 377.518478][T10088] ovl_get_inode: 6 callbacks suppressed [ 377.518493][T10088] overlayfs: failed to get inode (-116) [ 377.534984][ T10] r8152-cfgselector 3-1: can't set config #0, error -71 [ 377.536471][T10088] overlayfs: failed to get inode (-116) [ 377.552004][T10088] overlayfs: failed to get inode (-116) [ 377.560022][ T10] r8152-cfgselector 3-1: USB disconnect, device number 38 [ 377.567011][T10088] overlayfs: failed to get inode (-116) [ 377.604557][T10088] overlayfs: failed to get inode (-116) [ 377.612441][T10088] overlayfs: failed to get inode (-116) [ 377.618757][ T5903] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 377.675170][T10088] overlayfs: failed to get inode (-116) [ 377.696090][T10088] overlayfs: failed to get inode (-116) [ 377.774640][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 377.785231][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.813670][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.838351][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 377.854849][ T5903] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 377.866210][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.884772][ T5903] usb 2-1: config 0 descriptor?? [ 378.367610][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.374226][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.606282][T10106] netlink: 'syz.4.1124': attribute type 21 has an invalid length. [ 378.627231][T10106] netlink: 'syz.4.1124': attribute type 6 has an invalid length. [ 378.635523][T10106] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1124'. [ 378.825249][ T5903] wacom 0003:056A:0317.0012: item fetching failed at offset 10/11 [ 378.842378][ T5903] wacom 0003:056A:0317.0012: parse failed [ 378.853326][ T5903] wacom 0003:056A:0317.0012: probe with driver wacom failed with error -22 [ 378.976634][ T5862] usbhid 4-1:0.0: can't add hid device: -71 [ 378.982680][ T5862] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 379.089039][ T5862] usb 4-1: USB disconnect, device number 36 [ 379.367750][ T10] usb 2-1: USB disconnect, device number 44 [ 379.407272][T10122] kvm: pic: non byte write [ 379.872815][T10129] overlayfs: failed to get inode (-116) [ 379.885150][T10129] overlayfs: failed to get inode (-116) [ 379.900852][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'. [ 380.924343][ T10] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 381.144433][ T10] usb 3-1: config index 0 descriptor too short (expected 4096, got 36) [ 381.154060][ T5863] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 381.157556][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.172752][ T10] usb 3-1: config 0 has no interfaces? [ 381.178467][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 381.187749][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.214937][ T10] usb 3-1: config 0 descriptor?? [ 381.485697][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 381.492312][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 381.506339][ T5863] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 381.516169][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.533255][ T5863] usb 2-1: config 0 descriptor?? [ 381.533739][ T5899] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 381.713627][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 381.770020][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.786564][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.796502][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.815834][ T5899] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.933454][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.048928][ T5899] usb 1-1: config 0 descriptor?? [ 382.360845][T10139] syz.1.1133 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 382.543545][ T5899] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 382.560810][ T5899] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0013/input/input11 [ 382.608405][ T5863] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 382.637308][ T5863] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 382.663616][ T5863] cypress 0003:04B4:07B1.0014: unknown main item tag 0x0 [ 382.679037][ T5899] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 382.725404][ T5863] cypress 0003:04B4:07B1.0014: hidraw1: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.1-1/input0 [ 382.802957][ T5899] usb 1-1: USB disconnect, device number 42 [ 382.895377][ T5862] usb 2-1: USB disconnect, device number 45 [ 382.997321][T10168] fido_id[10168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 383.035614][ T10] usb 3-1: USB disconnect, device number 39 [ 383.930586][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 383.930602][ T30] audit: type=1400 audit(1746896322.130:918): avc: denied { read append } for pid=10179 comm="syz.0.1144" name="usbmon5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 384.093337][ T30] audit: type=1400 audit(1746896322.130:919): avc: denied { open } for pid=10179 comm="syz.0.1144" path="/dev/usbmon5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 384.151975][T10183] ovl_get_inode: 6 callbacks suppressed [ 384.151992][T10183] overlayfs: failed to get inode (-116) [ 384.164042][T10183] overlayfs: failed to get inode (-116) [ 384.171921][T10183] overlayfs: failed to get inode (-116) [ 384.178182][T10183] overlayfs: failed to get inode (-116) [ 384.196576][ T30] audit: type=1400 audit(1746896322.330:920): avc: denied { write } for pid=10184 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 384.260819][ T30] audit: type=1400 audit(1746896322.340:921): avc: denied { accept } for pid=10184 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 384.284895][T10195] overlayfs: failed to get inode (-116) [ 384.290767][T10195] overlayfs: failed to get inode (-116) [ 385.038521][T10183] overlayfs: failed to get inode (-116) [ 385.044518][T10183] overlayfs: failed to get inode (-116) [ 386.213784][ T5899] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 386.302223][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1155'. [ 386.413820][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 386.427409][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.491982][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.520591][ T5899] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 386.564425][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.588466][ T5899] usb 2-1: config 0 descriptor?? [ 387.913953][ T5862] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 388.620517][ T5862] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 388.634764][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 388.803656][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.811730][ T5862] usb 3-1: Product: syz [ 388.819340][ T5862] usb 3-1: Manufacturer: syz [ 388.824220][ T5862] usb 3-1: SerialNumber: syz [ 388.973957][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 389.026801][ T5862] r8152-cfgselector 3-1: Unknown version 0x0000 [ 389.043050][ T5862] r8152-cfgselector 3-1: config 0 descriptor?? [ 389.074773][ T5899] usbhid 2-1:0.0: can't add hid device: -71 [ 389.086644][ T5899] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 389.121089][ T5899] usb 2-1: USB disconnect, device number 46 [ 389.251381][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.446900][T10274] loop6: detected capacity change from 0 to 524287999 [ 389.484165][ T5865] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 389.565288][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.608697][T10274] buffer_io_error: 7 callbacks suppressed [ 389.608716][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.833973][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 389.874179][ T5865] usb 5-1: device descriptor read/64, error -71 [ 390.013613][T10283] Invalid logical block size (7) [ 390.023327][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 390.045246][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 390.054910][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 390.066861][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 390.083782][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 390.086534][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 390.091845][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 390.150258][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 390.184134][T10274] ldm_validate_partition_table(): Disk read failed. [ 390.318414][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 390.327470][T10274] Buffer I/O error on dev loop6, logical block 0, async page read [ 390.336923][T10274] Dev loop6: unable to read RDB block 0 [ 390.354437][T10274] loop6: unable to read partition table [ 390.427636][T10298] 9pnet_fd: Insufficient options for proto=fd [ 390.848185][T10274] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 390.959495][ T30] audit: type=1400 audit(1746896329.160:922): avc: denied { append } for pid=10303 comm="syz.0.1177" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 391.073987][ T30] audit: type=1400 audit(1746896329.280:923): avc: denied { read } for pid=10307 comm="syz.3.1178" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 391.125927][ T30] audit: type=1400 audit(1746896329.300:924): avc: denied { open } for pid=10307 comm="syz.3.1178" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 391.162292][T10305] sd 0:0:1:0: PR command failed: 1026 [ 391.177072][T10305] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 391.188521][T10305] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 393.521617][ T5862] r8152-cfgselector 3-1: can't set config #0, error -71 [ 393.538796][ T5862] r8152-cfgselector 3-1: USB disconnect, device number 40 [ 393.849837][ T30] audit: type=1400 audit(1746896331.990:925): avc: denied { getopt } for pid=10335 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 393.891996][T10336] overlayfs: failed to resolve './file0': -2 [ 394.213754][ T5903] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 394.302714][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'. [ 394.303385][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'. [ 394.342731][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 394.350550][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'. [ 394.384386][ T5903] usb 3-1: Using ep0 maxpacket: 32 [ 394.387397][T10363] erspan1: entered promiscuous mode [ 394.402699][ T5903] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 394.404371][T10358] overlayfs: failed to resolve './file0': -2 [ 394.411347][ T5903] usb 3-1: config 0 has no interface number 0 [ 394.429457][ T5903] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.439917][T10366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 394.446436][T10366] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 394.462917][ T5903] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 394.473190][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.482021][ T5903] usb 3-1: Product: syz [ 394.486384][ T5903] usb 3-1: Manufacturer: syz [ 394.498491][ T5903] usb 3-1: SerialNumber: syz [ 394.517942][T10366] vhci_hcd vhci_hcd.0: Device attached [ 394.582961][ T5903] usb 3-1: config 0 descriptor?? [ 394.688663][ T5903] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 394.700363][T10368] vhci_hcd: cannot find the pending unlink 1298045479 [ 394.707308][ T5903] em28xx 3-1:0.132: Video interface 132 found: [ 394.736183][ T30] audit: type=1400 audit(1746896332.900:926): avc: denied { module_load } for pid=10364 comm="syz.3.1196" path="/sys/power/wakeup_count" dev="sysfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 394.764834][ T5863] vhci_hcd: vhci_device speed not set [ 394.800498][T10368] vhci_hcd: connection closed [ 394.825324][ T12] vhci_hcd: stop threads [ 394.836715][ T5863] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 394.855310][ T12] vhci_hcd: release socket [ 394.915389][ T12] vhci_hcd: disconnect device [ 395.055699][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.606141][T10378] netlink: 'syz.1.1198': attribute type 11 has an invalid length. [ 395.615015][T10378] bridge0: port 3(team0) entered blocking state [ 395.621301][T10378] bridge0: port 3(team0) entered disabled state [ 395.628029][T10378] team0: entered allmulticast mode [ 395.633149][T10378] team_slave_0: entered allmulticast mode [ 395.638908][T10378] team_slave_1: entered allmulticast mode [ 395.644654][T10378] vlan0: entered allmulticast mode [ 395.649748][T10378] veth0_vlan: entered allmulticast mode [ 395.656649][T10378] team0: entered promiscuous mode [ 395.661687][T10378] team_slave_0: entered promiscuous mode [ 395.667498][T10378] team_slave_1: entered promiscuous mode [ 395.676589][ T30] audit: type=1400 audit(1746896333.720:927): avc: granted { setsecparam } for pid=10375 comm="syz.1.1198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 395.707059][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.853852][ T5903] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 395.862982][ T30] audit: type=1400 audit(1746896334.060:928): avc: denied { write } for pid=10383 comm="syz.3.1200" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 396.426025][T10393] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.200504][ T5862] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 397.367960][ T5903] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 397.645925][ T5903] em28xx 3-1:0.132: board has no eeprom [ 397.704977][ T5903] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 397.719874][ T5903] em28xx 3-1:0.132: analog set to bulk mode. [ 397.725930][ T5126] Bluetooth: hci3: command 0x0406 tx timeout [ 397.735877][ T5865] em28xx 3-1:0.132: Registering V4L2 extension [ 398.203452][ T5865] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 398.227383][ T10] usb 3-1: USB disconnect, device number 41 [ 398.235552][ T10] em28xx 3-1:0.132: Disconnecting em28xx [ 398.454046][ T30] audit: type=1400 audit(1746896336.660:929): avc: denied { read } for pid=10421 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.483708][ T30] audit: type=1400 audit(1746896336.680:930): avc: denied { ioctl } for pid=10421 comm="syz.2.1209" path="socket:[28183]" dev="sockfs" ino=28183 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 398.554095][ T5865] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 398.579232][ T5865] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 398.619805][ T5865] em28xx 3-1:0.132: No AC97 audio processor [ 398.633692][ T5899] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 398.776439][ T5865] usb 3-1: Decoder not found [ 398.793482][ T5865] em28xx 3-1:0.132: failed to create media graph [ 399.295180][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.306325][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.337079][ T5865] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 399.350566][ T5899] usb 4-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 399.368765][ T5865] em28xx 3-1:0.132: Remote control support is not available for this card. [ 399.378213][ T5862] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 399.395756][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.407769][ T10] em28xx 3-1:0.132: Closing input extension [ 399.414982][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.453598][ T5862] usb 5-1: Product: syz [ 399.460318][ T10] em28xx 3-1:0.132: Freeing device [ 399.508233][ T5899] usb 4-1: config 0 descriptor?? [ 399.557649][ T5862] r8152-cfgselector 5-1: Unknown version 0x0000 [ 399.589821][ T5862] r8152-cfgselector 5-1: config 0 descriptor?? [ 399.608056][ T5862] r8152-cfgselector 5-1: can't set config #0, error -71 [ 400.167791][ T5862] r8152-cfgselector 5-1: USB disconnect, device number 39 [ 400.274199][ T5863] vhci_hcd: vhci_device speed not set [ 400.509129][T10420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.988125][T10420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.004131][T10442] hfsplus: unable to find HFS+ superblock [ 401.450064][T10420] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1208'. [ 401.495194][T10439] sp0: Synchronizing with TNC [ 401.513927][T10420] unsupported nlmsg_type 40 [ 401.558435][ T5899] gembird 0003:11FF:3331.0015: item fetching failed at offset 5/7 [ 401.594192][ T5899] gembird 0003:11FF:3331.0015: probe with driver gembird failed with error -22 [ 402.177853][T10442] sp0: Synchronizing with TNC [ 402.969793][T10481] syz.4.1224: attempt to access beyond end of device [ 402.969793][T10481] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 402.983083][T10481] SQUASHFS error: Failed to read block 0x0: -5 [ 402.989596][T10481] unable to read squashfs_super_block [ 403.322327][T10487] trusted_key: encrypted_key: master key parameter '' is invalid [ 403.362328][ T5862] usb 4-1: USB disconnect, device number 37 [ 403.455501][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1227'. [ 403.519183][T10489] vlan0: entered promiscuous mode [ 403.845448][T10475] kvm: user requested TSC rate below hardware speed [ 403.983376][ T5862] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 403.983433][ T5863] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 404.091507][T10475] 9pnet_fd: Insufficient options for proto=fd [ 404.134245][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 404.140841][ T5862] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 404.151467][ T5862] usb 2-1: config 0 has no interface number 0 [ 404.158333][ T5862] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 404.171665][ T5862] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 404.183405][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.193375][ T5862] usb 2-1: Product: syz [ 404.198570][ T5862] usb 2-1: Manufacturer: syz [ 404.205285][ T5862] usb 2-1: SerialNumber: syz [ 404.223405][ T5862] usb 2-1: config 0 descriptor?? [ 404.240171][ T5862] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 404.243632][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 404.252797][ T5862] em28xx 2-1:0.132: Video interface 132 found: [ 404.280628][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 404.311229][ T5863] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 404.333340][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.367667][ T5863] usb 3-1: config 0 descriptor?? [ 404.440626][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.455348][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.655195][ T5863] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 404.850186][ T5862] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 405.203786][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 405.485541][ T5899] usb 3-1: USB disconnect, device number 42 [ 405.548141][ T5862] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 405.565883][ T5862] em28xx 2-1:0.132: board has no eeprom [ 405.623656][ T5862] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 405.639886][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 405.656644][ T5862] em28xx 2-1:0.132: analog set to bulk mode. [ 405.665614][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 405.684929][ T5813] em28xx 2-1:0.132: Registering V4L2 extension [ 405.706614][ T5862] usb 2-1: USB disconnect, device number 47 [ 405.714518][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.748583][ T5862] em28xx 2-1:0.132: Disconnecting em28xx [ 405.814511][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 405.827693][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1238'. [ 405.839446][T10533] netlink: 'syz.4.1238': attribute type 3 has an invalid length. [ 405.880501][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 405.994854][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 406.112552][ T10] usb 1-1: Product: syz [ 406.183019][ T10] usb 1-1: Manufacturer: syz [ 406.216558][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 406.222024][ T10] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 406.276664][T10539] SELinux: syz.3.1240 (10539) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 406.291039][T10539] veth0_vlan: entered allmulticast mode [ 406.710887][ T30] audit: type=1400 audit(1746896344.910:931): avc: denied { recv } for pid=10547 comm="syz.4.1243" saddr=10.128.0.169 src=30006 daddr=10.128.0.93 dest=40284 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 406.748207][ T5813] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 406.761730][ T5813] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 406.786729][ T5813] em28xx 2-1:0.132: No AC97 audio processor [ 407.240209][ T5813] usb 2-1: Decoder not found [ 407.245403][ T5813] em28xx 2-1:0.132: failed to create media graph [ 407.251879][ T5813] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 407.368600][ T5813] em28xx 2-1:0.132: Remote control support is not available for this card. [ 407.399386][ T5862] em28xx 2-1:0.132: Closing input extension [ 407.465181][T10560] netlink: 'syz.3.1247': attribute type 21 has an invalid length. [ 407.485101][T10560] netlink: 'syz.3.1247': attribute type 6 has an invalid length. [ 407.492967][T10560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1247'. [ 407.531260][ T30] audit: type=1400 audit(1746896345.730:932): avc: denied { bind } for pid=10563 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 407.563230][ T5862] em28xx 2-1:0.132: Freeing device [ 407.674280][T10566] syz.1.1248: attempt to access beyond end of device [ 407.674280][T10566] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 407.688751][T10566] SQUASHFS error: Failed to read block 0x0: -5 [ 407.747704][T10566] unable to read squashfs_super_block [ 407.772025][ T5863] usb 1-1: USB disconnect, device number 43 [ 408.003206][ T30] audit: type=1400 audit(1746896345.730:933): avc: denied { read } for pid=10563 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.360569][T10576] netlink: 'syz.4.1250': attribute type 11 has an invalid length. [ 408.368605][T10576] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1250'. [ 408.847921][T10583] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 409.504839][ T5862] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 409.563780][ T5813] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 410.425711][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 410.767109][ T5862] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 410.775394][ T5862] usb 3-1: config 0 has no interface number 0 [ 410.781532][ T5862] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.792734][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 410.814518][ T5813] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 410.828511][ T5862] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 410.850169][ T5813] usb 5-1: config 0 has no interface number 0 [ 410.864177][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.877337][ T5813] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 410.887476][ T5862] usb 3-1: Product: syz [ 410.895992][ T5862] usb 3-1: Manufacturer: syz [ 410.900816][ T5862] usb 3-1: SerialNumber: syz [ 410.907711][ T5813] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 410.919345][ T5862] usb 3-1: config 0 descriptor?? [ 410.930796][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.940639][ T5813] usb 5-1: Product: syz [ 410.946724][ T5862] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 410.962068][ T5813] usb 5-1: Manufacturer: syz [ 410.973647][ T5862] em28xx 3-1:0.132: Video interface 132 found: [ 410.980358][ T5813] usb 5-1: SerialNumber: syz [ 411.002389][ T5813] usb 5-1: config 0 descriptor?? [ 411.026108][ T5813] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 411.064264][ T5813] em28xx 5-1:0.132: Video interface 132 found: [ 411.163382][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.184331][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.225262][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.248903][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.504286][ T5902] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 411.525509][T10626] FAULT_INJECTION: forcing a failure. [ 411.525509][T10626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.541652][T10624] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 411.616228][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.3.1264 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 411.616257][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.616267][T10626] Call Trace: [ 411.616274][T10626] [ 411.616281][T10626] dump_stack_lvl+0x16c/0x1f0 [ 411.616316][T10626] should_fail_ex+0x512/0x640 [ 411.616343][T10626] _copy_from_user+0x2e/0xd0 [ 411.616365][T10626] ____sys_sendmsg+0x607/0xc70 [ 411.616390][T10626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.616421][T10626] ___sys_sendmsg+0x134/0x1d0 [ 411.616440][T10626] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.616469][T10626] ? find_held_lock+0x2b/0x80 [ 411.616503][T10626] __sys_sendmmsg+0x200/0x420 [ 411.616522][T10626] ? __pfx___sys_sendmmsg+0x10/0x10 [ 411.616548][T10626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 411.616580][T10626] ? fput+0x70/0xf0 [ 411.616599][T10626] ? ksys_write+0x1b9/0x240 [ 411.616622][T10626] ? __pfx_ksys_write+0x10/0x10 [ 411.616642][T10626] ? rcu_is_watching+0x12/0xc0 [ 411.616665][T10626] __x64_sys_sendmmsg+0x9c/0x100 [ 411.616682][T10626] ? lockdep_hardirqs_on+0x7c/0x110 [ 411.616703][T10626] do_syscall_64+0xcd/0x260 [ 411.616726][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.616743][T10626] RIP: 0033:0x7fcfbd58e969 [ 411.616757][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.616772][T10626] RSP: 002b:00007fcfbe44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 411.616788][T10626] RAX: ffffffffffffffda RBX: 00007fcfbd7b5fa0 RCX: 00007fcfbd58e969 [ 411.616798][T10626] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000004 [ 411.616808][T10626] RBP: 00007fcfbe44e090 R08: 0000000000000000 R09: 0000000000000000 [ 411.616817][T10626] R10: 0000000004040880 R11: 0000000000000246 R12: 0000000000000001 [ 411.616826][T10626] R13: 0000000000000000 R14: 00007fcfbd7b5fa0 R15: 00007ffdffb30078 [ 411.616848][T10626] [ 411.966766][ T5813] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 412.089690][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 412.098142][T10630] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1265'. [ 412.112779][ T5902] usb 2-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 412.123292][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.162788][ T5902] usb 2-1: Product: syz [ 412.172545][ T5902] usb 2-1: Manufacturer: syz [ 412.190325][ T5902] usb 2-1: SerialNumber: syz [ 412.235469][ T5902] usb 2-1: config 0 descriptor?? [ 412.266415][ T5902] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 412.377153][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 412.430182][ T5902] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 412.535619][ T5862] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 412.577105][ T5902] usb 2-1: media controller created [ 412.634498][ T5862] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 412.647848][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.652326][ T5813] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 412.674379][ T5862] em28xx 3-1:0.132: board has no eeprom [ 412.680850][ T5813] em28xx 5-1:0.132: board has no eeprom [ 412.744010][ T5862] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 412.753081][ T5902] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 412.754671][ T5813] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 412.771158][ T5862] em28xx 3-1:0.132: analog set to bulk mode. [ 412.778923][ T5899] em28xx 3-1:0.132: Registering V4L2 extension [ 412.793285][ T5813] em28xx 5-1:0.132: analog set to bulk mode. [ 412.801933][ T5862] usb 3-1: USB disconnect, device number 43 [ 412.821391][ T5862] em28xx 3-1:0.132: Disconnecting em28xx [ 412.844293][ T5813] usb 5-1: USB disconnect, device number 40 [ 412.865743][ T5813] em28xx 5-1:0.132: Disconnecting em28xx [ 412.894221][ T5902] rc_core: IR keymap rc-twinhan1027 not found [ 412.912705][ T5902] Registered IR keymap rc-empty [ 412.942633][ T5902] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 412.966399][ T5902] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 412.983715][ T5899] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 412.991114][ T5899] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 412.991966][ T5902] dvb-usb: schedule remote query interval to 150 msecs. [ 413.005766][ T5899] em28xx 3-1:0.132: No AC97 audio processor [ 413.018601][ T5864] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 413.030455][T10653] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 413.034796][ T5902] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 413.037251][ T30] audit: type=1400 audit(1746896351.230:934): avc: denied { create } for pid=10652 comm="syz.2.1272" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 413.154658][ T5899] usb 3-1: Decoder not found [ 413.247400][ T5865] m920x_read = error: -71 [ 413.255514][ T5865] dvb-usb: error -71 while querying for an remote control event. [ 413.265393][ T5902] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 413.298903][ T30] audit: type=1400 audit(1746896351.230:935): avc: denied { associate } for pid=10652 comm="syz.2.1272" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 413.299274][ T30] audit: type=1400 audit(1746896351.340:936): avc: denied { mounton } for pid=10652 comm="syz.2.1272" path="/235/bus" dev="tmpfs" ino=1329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 413.331210][ T5902] usb 2-1: USB disconnect, device number 48 [ 413.482979][ T5899] em28xx 3-1:0.132: failed to create media graph [ 413.483012][ T5899] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 413.496215][ T30] audit: type=1400 audit(1746896351.340:937): avc: denied { write } for pid=10652 comm="syz.2.1272" name="bus" dev="tmpfs" ino=1329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 413.503061][ T30] audit: type=1400 audit(1746896351.340:938): avc: denied { add_name } for pid=10652 comm="syz.2.1272" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 413.595072][ T5863] m920x_read = error: -19 [ 413.604498][ T5899] em28xx 3-1:0.132: Remote control support is not available for this card. [ 413.722460][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 413.753714][ T5864] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 413.761847][ T5864] usb 1-1: config 0 has no interface number 0 [ 413.771169][ T30] audit: type=1400 audit(1746896351.340:939): avc: denied { setattr } for pid=10652 comm="syz.2.1272" name="work" dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 413.771538][ T30] audit: type=1400 audit(1746896351.340:940): avc: denied { write open } for pid=10652 comm="syz.2.1272" path=2F202864656C6574656429 dev="tmpfs" ino=1331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 413.866990][ T5864] usb 1-1: config 0 interface 41 has no altsetting 0 [ 413.978066][ T5863] m920x_read = error: -19 [ 413.982800][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 413.995656][ T30] audit: type=1400 audit(1746896351.340:941): avc: denied { create } for pid=10652 comm="syz.2.1272" name="#37" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 413.995890][ T30] audit: type=1400 audit(1746896351.340:942): avc: denied { remove_name } for pid=10652 comm="syz.2.1272" name="#37" dev="tmpfs" ino=1332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 414.500243][ T5863] m920x_read = error: -19 [ 414.592071][ T5862] em28xx 3-1:0.132: Closing input extension [ 414.603440][ T10] em28xx 5-1:0.132: Registering V4L2 extension [ 414.615746][ T5862] em28xx 3-1:0.132: Freeing device [ 414.621925][ T30] audit: type=1400 audit(1746896351.340:943): avc: denied { rename } for pid=10652 comm="syz.2.1272" name="#37" dev="tmpfs" ino=1332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 414.694048][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 414.748764][T10668] netlink: 'syz.4.1274': attribute type 21 has an invalid length. [ 414.864351][ T5864] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 414.882853][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.887704][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 414.899916][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 414.909300][T10668] netlink: 'syz.4.1274': attribute type 6 has an invalid length. [ 414.926692][ T5864] usb 1-1: Product: syz [ 414.939274][T10668] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1274'. [ 414.952023][ T5864] usb 1-1: Manufacturer: syz [ 414.987470][ T5864] usb 1-1: SerialNumber: syz [ 415.009535][ T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 415.009857][ T5863] m920x_read = error: -19 [ 415.022496][ T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 415.045312][ T5864] usb 1-1: config 0 descriptor?? [ 415.065788][ T10] em28xx 5-1:0.132: No AC97 audio processor [ 415.072004][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 415.089268][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1279'. [ 415.099258][ T10] usb 5-1: Decoder not found [ 415.103960][ T10] em28xx 5-1:0.132: failed to create media graph [ 415.114135][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1279'. [ 415.125174][ T10] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 415.136647][ T10] em28xx 5-1:0.132: Remote control support is not available for this card. [ 415.144225][ T5902] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 415.145408][ T5813] em28xx 5-1:0.132: Closing input extension [ 415.159584][ T5813] ================================================================== [ 415.167660][ T5813] BUG: KASAN: slab-use-after-free in media_device_unregister+0x598/0x5c0 [ 415.176093][ T5813] Read of size 8 at addr ffff88802b0d0210 by task kworker/0:3/5813 [ 415.183992][ T5813] [ 415.186310][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/0:3 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 415.186330][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.186342][ T5813] Workqueue: usb_hub_wq hub_event [ 415.186365][ T5813] Call Trace: [ 415.186371][ T5813] [ 415.186377][ T5813] dump_stack_lvl+0x116/0x1f0 [ 415.186398][ T5813] print_report+0xc3/0x670 [ 415.186413][ T5813] ? __virt_addr_valid+0x5e/0x590 [ 415.186433][ T5813] ? __phys_addr+0xc6/0x150 [ 415.186453][ T5813] ? media_device_unregister+0x598/0x5c0 [ 415.186471][ T5813] kasan_report+0xe0/0x110 [ 415.186487][ T5813] ? media_device_unregister+0x598/0x5c0 [ 415.186508][ T5813] media_device_unregister+0x598/0x5c0 [ 415.186529][ T5813] em28xx_release_resources+0xb2/0x2d0 [ 415.186545][ T5813] em28xx_usb_disconnect+0x1de/0x610 [ 415.186559][ T5813] usb_unbind_interface+0x1da/0x9a0 [ 415.186578][ T5813] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 415.186595][ T5813] ? __pfx_usb_unbind_interface+0x10/0x10 [ 415.186612][ T5813] device_remove+0x122/0x170 [ 415.186627][ T5813] device_release_driver_internal+0x44b/0x620 [ 415.186643][ T5813] bus_remove_device+0x22f/0x420 [ 415.186664][ T5813] device_del+0x396/0x9f0 [ 415.186676][ T5813] ? __pfx_device_del+0x10/0x10 [ 415.186688][ T5813] ? kobject_put+0x210/0x5a0 [ 415.186710][ T5813] usb_disable_device+0x355/0x7d0 [ 415.186729][ T5813] usb_disconnect+0x2e1/0x920 [ 415.186745][ T5813] hub_event+0x1c57/0x4fa0 [ 415.186768][ T5813] ? __lock_acquire+0xaa4/0x1ba0 [ 415.186789][ T5813] ? __pfx_hub_event+0x10/0x10 [ 415.186803][ T5813] ? debug_object_deactivate+0x1ec/0x3a0 [ 415.186827][ T5813] ? rcu_is_watching+0x12/0xc0 [ 415.186843][ T5813] process_one_work+0x9cc/0x1b70 [ 415.186859][ T5813] ? __pfx_hub_event+0x10/0x10 [ 415.186873][ T5813] ? __pfx_process_one_work+0x10/0x10 [ 415.186890][ T5813] ? assign_work+0x1a0/0x250 [ 415.186904][ T5813] worker_thread+0x6c8/0xf10 [ 415.186920][ T5813] ? __kthread_parkme+0x19e/0x250 [ 415.186937][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 415.186950][ T5813] kthread+0x3c2/0x780 [ 415.186962][ T5813] ? __pfx_kthread+0x10/0x10 [ 415.186973][ T5813] ? __pfx_kthread+0x10/0x10 [ 415.186989][ T5813] ? __pfx_kthread+0x10/0x10 [ 415.186999][ T5813] ? __pfx_kthread+0x10/0x10 [ 415.187010][ T5813] ? rcu_is_watching+0x12/0xc0 [ 415.187025][ T5813] ? __pfx_kthread+0x10/0x10 [ 415.187038][ T5813] ret_from_fork+0x45/0x80 [ 415.187051][ T5813] ? __pfx_kthread+0x10/0x10 [ 415.187062][ T5813] ret_from_fork_asm+0x1a/0x30 [ 415.187085][ T5813] [ 415.187090][ T5813] [ 415.434962][ T5813] Allocated by task 10: [ 415.439104][ T5813] kasan_save_stack+0x33/0x60 [ 415.443778][ T5813] kasan_save_track+0x14/0x30 [ 415.448451][ T5813] __kasan_kmalloc+0xaa/0xb0 [ 415.453029][ T5813] em28xx_v4l2_init+0x114/0x4080 [ 415.457973][ T5813] em28xx_init_extension+0x137/0x200 [ 415.463265][ T5813] request_module_async+0x61/0x70 [ 415.468271][ T5813] process_one_work+0x9cc/0x1b70 [ 415.473194][ T5813] worker_thread+0x6c8/0xf10 [ 415.477766][ T5813] kthread+0x3c2/0x780 [ 415.481815][ T5813] ret_from_fork+0x45/0x80 [ 415.486215][ T5813] ret_from_fork_asm+0x1a/0x30 [ 415.490967][ T5813] [ 415.493282][ T5813] Freed by task 10: [ 415.497071][ T5813] kasan_save_stack+0x33/0x60 [ 415.501739][ T5813] kasan_save_track+0x14/0x30 [ 415.506406][ T5813] kasan_save_free_info+0x3b/0x60 [ 415.511416][ T5813] __kasan_slab_free+0x51/0x70 [ 415.516161][ T5813] kfree+0x2b6/0x4d0 [ 415.520044][ T5813] em28xx_v4l2_init+0x22b5/0x4080 [ 415.525055][ T5813] em28xx_init_extension+0x137/0x200 [ 415.530323][ T5813] request_module_async+0x61/0x70 [ 415.535328][ T5813] process_one_work+0x9cc/0x1b70 [ 415.540247][ T5813] worker_thread+0x6c8/0xf10 [ 415.544840][ T5813] kthread+0x3c2/0x780 [ 415.548890][ T5813] ret_from_fork+0x45/0x80 [ 415.553287][ T5813] ret_from_fork_asm+0x1a/0x30 [ 415.558039][ T5813] [ 415.560345][ T5813] The buggy address belongs to the object at ffff88802b0d0000 [ 415.560345][ T5813] which belongs to the cache kmalloc-8k of size 8192 [ 415.574384][ T5813] The buggy address is located 528 bytes inside of [ 415.574384][ T5813] freed 8192-byte region [ffff88802b0d0000, ffff88802b0d2000) [ 415.588249][ T5813] [ 415.590555][ T5813] The buggy address belongs to the physical page: [ 415.596944][ T5813] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b0d0 [ 415.605689][ T5813] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 415.614169][ T5813] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 415.621693][ T5813] page_type: f5(slab) [ 415.625658][ T5813] raw: 00fff00000000040 ffff88801b442280 ffffea0001db2a00 dead000000000004 [ 415.634225][ T5813] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 415.642795][ T5813] head: 00fff00000000040 ffff88801b442280 ffffea0001db2a00 dead000000000004 [ 415.651454][ T5813] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 415.660108][ T5813] head: 00fff00000000003 ffffea0000ac3401 00000000ffffffff 00000000ffffffff [ 415.668760][ T5813] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 415.677407][ T5813] page dumped because: kasan: bad access detected [ 415.683803][ T5813] page_owner tracks the page as allocated [ 415.689504][ T5813] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5551, tgid 5551 (rcS), ts 37465676992, free_ts 37333680658 [ 415.709282][ T5813] post_alloc_hook+0x181/0x1b0 [ 415.714054][ T5813] get_page_from_freelist+0x135c/0x3920 [ 415.719592][ T5813] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 415.725474][ T5813] alloc_pages_mpol+0x1fb/0x550 [ 415.730308][ T5813] new_slab+0x244/0x340 [ 415.734450][ T5813] ___slab_alloc+0xd9c/0x1940 [ 415.739133][ T5813] __slab_alloc.constprop.0+0x56/0xb0 [ 415.744491][ T5813] __kmalloc_cache_noprof+0xfb/0x3e0 [ 415.749761][ T5813] tomoyo_init_log+0xc8a/0x2140 [ 415.754598][ T5813] tomoyo_supervisor+0x302/0x13b0 [ 415.759601][ T5813] tomoyo_env_perm+0x191/0x200 [ 415.764350][ T5813] tomoyo_find_next_domain+0xec2/0x20b0 [ 415.769881][ T5813] tomoyo_bprm_check_security+0x12e/0x1d0 [ 415.775580][ T5813] security_bprm_check+0x1b9/0x1e0 [ 415.780683][ T5813] bprm_execve+0x810/0x1650 [ 415.785172][ T5813] do_execveat_common.isra.0+0x4a5/0x610 [ 415.790796][ T5813] page last free pid 5545 tgid 5545 stack trace: [ 415.797100][ T5813] __free_frozen_pages+0x69d/0xff0 [ 415.802197][ T5813] __put_partials+0x16d/0x1c0 [ 415.806861][ T5813] qlist_free_all+0x4e/0x120 [ 415.811437][ T5813] kasan_quarantine_reduce+0x195/0x1e0 [ 415.816882][ T5813] __kasan_slab_alloc+0x69/0x90 [ 415.822063][ T5813] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 415.827512][ T5813] vm_area_alloc+0x1f/0x160 [ 415.832024][ T5813] __mmap_region+0xfd0/0x27c0 [ 415.836683][ T5813] mmap_region+0x1ab/0x3f0 [ 415.841081][ T5813] do_mmap+0xd8e/0x11b0 [ 415.845232][ T5813] vm_mmap_pgoff+0x281/0x450 [ 415.849807][ T5813] ksys_mmap_pgoff+0x32c/0x5c0 [ 415.854571][ T5813] __x64_sys_mmap+0x125/0x190 [ 415.859244][ T5813] do_syscall_64+0xcd/0x260 [ 415.863739][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.869622][ T5813] [ 415.871927][ T5813] Memory state around the buggy address: [ 415.877557][ T5813] ffff88802b0d0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.885602][ T5813] ffff88802b0d0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.893651][ T5813] >ffff88802b0d0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.901699][ T5813] ^ [ 415.906266][ T5813] ffff88802b0d0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.914331][ T5813] ffff88802b0d0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 415.922373][ T5813] ================================================================== [ 415.931138][ T5863] m920x_read = error: -19 [ 415.935623][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 415.988230][ T5864] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 416.074208][ T5902] usb 2-1: device descriptor read/64, error -71 [ 416.095634][ T5863] m920x_read = error: -19 [ 416.096482][ T5864] usb 1-1: USB disconnect, device number 44 [ 416.100562][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 416.296954][ T5863] m920x_read = error: -19 [ 416.301912][ T5863] dvb-usb: error -19 while querying for an remote control event. [ 416.304824][ T5813] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 416.319801][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: kworker/0:3 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 416.331892][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.341943][ T5813] Workqueue: usb_hub_wq hub_event [ 416.346975][ T5813] Call Trace: [ 416.350269][ T5813] [ 416.353185][ T5813] dump_stack_lvl+0x3d/0x1f0 [ 416.357775][ T5813] panic+0x71c/0x800 [ 416.361673][ T5813] ? __pfx_panic+0x10/0x10 [ 416.366072][ T5813] ? mark_held_locks+0x49/0x80 [ 416.370818][ T5813] ? preempt_schedule_thunk+0x16/0x30 [ 416.376173][ T5813] ? media_device_unregister+0x598/0x5c0 [ 416.381804][ T5813] ? preempt_schedule_common+0x44/0xc0 [ 416.387251][ T5813] ? media_device_unregister+0x598/0x5c0 [ 416.392881][ T5813] check_panic_on_warn+0xab/0xb0 [ 416.397805][ T5813] end_report+0x107/0x170 [ 416.402113][ T5813] kasan_report+0xee/0x110 [ 416.406515][ T5813] ? media_device_unregister+0x598/0x5c0 [ 416.412151][ T5813] media_device_unregister+0x598/0x5c0 [ 416.417590][ T5813] em28xx_release_resources+0xb2/0x2d0 [ 416.423039][ T5813] em28xx_usb_disconnect+0x1de/0x610 [ 416.428315][ T5813] usb_unbind_interface+0x1da/0x9a0 [ 416.433496][ T5813] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 416.439114][ T5813] ? __pfx_usb_unbind_interface+0x10/0x10 [ 416.444819][ T5813] device_remove+0x122/0x170 [ 416.449390][ T5813] device_release_driver_internal+0x44b/0x620 [ 416.455439][ T5813] bus_remove_device+0x22f/0x420 [ 416.460360][ T5813] device_del+0x396/0x9f0 [ 416.464698][ T5813] ? __pfx_device_del+0x10/0x10 [ 416.469529][ T5813] ? kobject_put+0x210/0x5a0 [ 416.474105][ T5813] usb_disable_device+0x355/0x7d0 [ 416.479112][ T5813] usb_disconnect+0x2e1/0x920 [ 416.483769][ T5813] hub_event+0x1c57/0x4fa0 [ 416.488166][ T5813] ? __lock_acquire+0xaa4/0x1ba0 [ 416.493087][ T5813] ? __pfx_hub_event+0x10/0x10 [ 416.497835][ T5813] ? debug_object_deactivate+0x1ec/0x3a0 [ 416.503463][ T5813] ? rcu_is_watching+0x12/0xc0 [ 416.508215][ T5813] process_one_work+0x9cc/0x1b70 [ 416.513142][ T5813] ? __pfx_hub_event+0x10/0x10 [ 416.517890][ T5813] ? __pfx_process_one_work+0x10/0x10 [ 416.523247][ T5813] ? assign_work+0x1a0/0x250 [ 416.527823][ T5813] worker_thread+0x6c8/0xf10 [ 416.532404][ T5813] ? __kthread_parkme+0x19e/0x250 [ 416.537418][ T5813] ? __pfx_worker_thread+0x10/0x10 [ 416.542515][ T5813] kthread+0x3c2/0x780 [ 416.546570][ T5813] ? __pfx_kthread+0x10/0x10 [ 416.551140][ T5813] ? __pfx_kthread+0x10/0x10 [ 416.555712][ T5813] ? __pfx_kthread+0x10/0x10 [ 416.560284][ T5813] ? __pfx_kthread+0x10/0x10 [ 416.564859][ T5813] ? rcu_is_watching+0x12/0xc0 [ 416.569610][ T5813] ? __pfx_kthread+0x10/0x10 [ 416.574199][ T5813] ret_from_fork+0x45/0x80 [ 416.578598][ T5813] ? __pfx_kthread+0x10/0x10 [ 416.583168][ T5813] ret_from_fork_asm+0x1a/0x30 [ 416.587927][ T5813] [ 416.591148][ T5813] Kernel Offset: disabled [ 416.595451][ T5813] Rebooting in 86400 seconds..