last executing test programs: 13.264632245s ago: executing program 1 (id=1980): r0 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) 12.975303627s ago: executing program 0 (id=1981): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x4}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8941}, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b10904000001030001000921010100012205b6825efe03ff030c0000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x7, {0x7, 0xe, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) fanotify_init(0x200, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r6}, 0x10) syz_open_procfs(0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 12.251797904s ago: executing program 1 (id=1985): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a002000050001000700000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800064000000000"], 0x5c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001000010426fd700000000000e2ff0000", @ANYRES32=0x0, @ANYBLOB="03010000608802001c001280110018016272696467655f736c6176650000000004000580140003006272696467655f736c6176655f30000024000e001d0200000000000009000000000000000900000000"], 0x74}, 0x1, 0x0, 0x0, 0x60004895}, 0x48000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x1, 0x0) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001"], 0x110) 10.276369045s ago: executing program 1 (id=1989): r0 = creat(0x0, 0xc2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000240)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.534227029s ago: executing program 3 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfffb}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x80) r3 = dup3(r2, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xe}}, './file0\x00'}) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) umount2(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000007000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.139764319s ago: executing program 0 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 8.593400396s ago: executing program 1 (id=1995): r0 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) 8.441070214s ago: executing program 2 (id=1997): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x21e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$kcm(0x10, 0x5, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r4, 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) accept4$inet6(r4, 0x0, 0x0, 0x800) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="080000001d004b62d25a80648c25", 0xe}, {&(0x7f00000003c0)="cf2e71b49a22835e3aebb39ab0bdde52f585f363393d525851137b39208bb04b4d28ad8cdc6e5ae3360670d3e7f6b348fe6f3d1732f2e4a83125d0bce326605fdc3a6f4f57d1cb", 0x47}], 0x2}, 0x4000c50) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x1, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x11, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x5e2e80c9, 0x0, 0x0, 0x2d3e}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r7 = socket(0x1d, 0x4, 0x6) r8 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r8, 0x89a0, &(0x7f0000000200)={@broadcast, @remote}) bind$can_j1939(r7, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) 8.078729292s ago: executing program 3 (id=1998): r0 = socket$unix(0x1, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000006, 0x40010, 0xffffffffffffffff, 0x7542d000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) 7.982348365s ago: executing program 0 (id=1999): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae56ec80482b5"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000000)={0x0, 0xe000, 0x8}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000001c0)={0x3000, 0x18000}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x23, 0x67, {0x67, 0x24, "7fc26978af3acaf9f3640b1bf7117ca95ea09111f86bccd8ed4d2c23a4b112f1efe855cd6dc95fd472d3584389769ac6018fc509843bce90b165ae09a1f21ebf44442695288a65204e55f4796fd18d9170556b8fda83f9ff119e427b9a6fcba5e5bf9ccf36"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x20, 0x14, 0xe4, "8a0befcd3c2402edc24913beaddec6618d62137eff7bf270dc7596b80061cbbd688c50ae5b47a96ebc1d6d1a8b3d5dda67f65703c2ab5a7c49642937e921a06bc40a6019a8d549b173a1fd2081bdd9b5f77302c460dbf14c95812b18e27c6bf17b60b2e9db2b5356e44c54daa91913b4cb94b274dc030a147d8a93143302daef8368e1f7749d09b7cf75bad31d9c99d654f77efb486afe3664359dd73de53ced514a6e96b5460f4c47d8ade593957e407e3534d088d6e2d7c334175cb00a53d22da73781899a80f884b9957c66b7dbe823fa4e01dd730d1bca1832d118f7a9b5bb848dd5"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}}) 6.899384559s ago: executing program 3 (id=2000): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$P9_RCREATE(r5, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000740)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xc7b4, @remote, 0x1}, @in={0x2, 0x4e24, @private=0xa010102}}}, 0x118) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0xfffffffffffffe2b, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r3, 0x0, 0x0, 0x60, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xddf}, &(0x7f00000000c0)=0x8) socket$phonet_pipe(0x23, 0x5, 0x2) openat$vcsu(0xffffffffffffff9c, 0x0, 0x200040, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) 6.520386251s ago: executing program 2 (id=2001): openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) readlink(0x0, 0x0, 0x0) sigaltstack(0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sigaltstack(0x0, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x3, 0x4) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00001f7a28e311966b3f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x1d, &(0x7f0000004e80)="91f4346c7204b0c5ac2eb9dbc49e8aabce22a7787e6a88b4ab9fc43cbc") (async) sched_setscheduler(0x0, 0x2, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000080)={0x2, 0x3, 0x0, {0x7, 0x74c3, 0x400, 0x5}}) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 5.907323022s ago: executing program 2 (id=2003): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x4000080000000001, 0x800) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010001fff00000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028006000f0002000000c416bdcad2d826a318f2484a579ed2745565d6d9fd5bff88fa03ca739380189446558a60308388d47044f9f8c20f0477c4e600d0d4414ac8a35a4815d4f27beec090238ca93bbd71eadc9f0b9ff5"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r6 = fsmount(r3, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="2b5b892e73657420"], 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d") sendmsg$nl_xfrm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a00100001000010000000000000000000a010101000000000000000000000000ac0000000000000000000000000000000a0000006400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/344], 0x1a0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) 4.961558451s ago: executing program 4 (id=2004): r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x0, 0x1, @stop_pts=0x6}) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r5 = dup(r0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x400000f3}]}) read(r5, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f046}) 4.899351505s ago: executing program 1 (id=2005): r0 = creat(0x0, 0xc2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000240)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() fsopen(&(0x7f0000000280)='cifs\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.679814863s ago: executing program 3 (id=2006): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000080)='./mnt\x00', 0x0, 0x18}, 0x18) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) r2 = socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_getattr(0xffffffffffffffff, &(0x7f0000000200)={0x38}, 0x38, 0x0) (async) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000140), 0x1003) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x2, 0x0, 0x0, 0xe, 0x2}]}}, 0x0, 0x2a}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0x0, 0x36f}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) chdir(&(0x7f0000000000)='./cgroup\x00') (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x3516, 0x67f, 0x64, 0x0, 0x0) (async, rerun: 64) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600", 0x1a}], 0x1) (rerun: 64) recvmmsg(r2, &(0x7f0000000680), 0x0, 0x40010000, 0x0) (async) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{0xfffffff8, 0x3800}, 0x21}, 0x10) 4.446866246s ago: executing program 0 (id=2007): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$I2C(0x0, 0x1, 0x2003) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = syz_io_uring_setup(0x839, &(0x7f00000000c0)={0x0, 0x1998, 0x400, 0x2000004, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x39a904175f124fbf}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x20008080}, 0x84) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaab8aaafad1e048716e08004500001c00004e200008907800000000000000000000000000000000f386e9a66a84fb62d36cebedfd29669d0535f61a5a053b7cf1a19d4ab688a995ed23b0262f4371fcb1e3fc"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.339244595s ago: executing program 4 (id=2008): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/75, 0x4b, 0x100000001) syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$caif_seqpacket(0x25, 0x5, 0x2) splice(r1, 0x0, r3, 0x0, 0x88000d0, 0x0) write$eventfd(r2, &(0x7f0000000240)=0xff, 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.119314941s ago: executing program 0 (id=2009): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="4dfca678eaf57543692cfec5c4bf06d0b3b66d0dea6733f9b3bca81d9b5cca766dd1a2e4007ac199c07cf87b2e25a9fc", 0x30}], 0x1) 4.005205328s ago: executing program 4 (id=2010): r0 = socket$unix(0x1, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x9) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000d0d000/0x2000)=nil, 0x2000, 0xfffffffffdfffffa, 0x40010, r4, 0xa0cb1000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) socket(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) 3.928887382s ago: executing program 2 (id=2011): close(0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) io_setup(0x5, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x20000000000, 0xfffffffffffffffd, 0x5, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x7, 0x9, 0x4000000000000, 0x10, 0x80000006, 0x400000}, 0x0, 0x0) 2.863644179s ago: executing program 4 (id=2012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x460000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x94d87e6646cfa838, 0x70bd2a, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x800) 2.7499956s ago: executing program 3 (id=2013): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a002000050001000700000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e65740000000c0007800800064000000000"], 0x5c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000001000010426fd700000000000e2ff0000", @ANYRES32=0x0, @ANYBLOB="03010000608802001c001280110018016272696467655f736c6176650000000004000580140003006272696467655f736c6176655f30000024000e001d0200000000000009000000000000000900000000"], 0x74}, 0x1, 0x0, 0x0, 0x60004895}, 0x48000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x1, 0x0) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r9 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001"], 0x110) 1.778970278s ago: executing program 2 (id=2014): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 992.953776ms ago: executing program 3 (id=2015): syz_usb_connect(0x3, 0x24, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x2) fsopen(0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000010000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="370000008630d86bd300357592c8885ea604f1707a42918a9350fa1a985104b6541e8cda17fac0dc0601ff1144c30ad97685f79a23aba68c63ad961fa0a2abedc9cbb5d87e96caea038a8b935259348a907928e6e5c78c8bf3af950bb6c946e6bbc0cf6fa354c74328bf89b1da46621f91", @ANYRES16=r5, @ANYBLOB], 0x34}}, 0x6048800) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) 887.72503ms ago: executing program 0 (id=2016): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$rds(0xffffffffffffffff, 0x0, 0x20040004) r0 = io_uring_setup(0x1, &(0x7f0000000040)={0x0, 0x8dae, 0x40, 0x3}) ftruncate(r0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000080)={&(0x7f0000000180), 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x3, 0x0, 0x4, 0x0, "000000cef4a89800"}, 0x10}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x2, 0x6, 0x658, 0x2a0, 0x0, 0x460, 0x460, 0x370, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x21, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff]}}, @common=@inet=@multiport={{0x50}, {0x4, 0xc, [0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfd, 0xfd]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0, 0x48000000}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x1a}, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0x9865820c52afa8d5}, {0xff}, 0x84, 0x1, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x37}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh={{0x30}, {0x2b, 0x58, 0x0, 0xbe, 0x0, 0x80, 0x3040}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) get_robust_list(0x0, 0x0, 0x0) unshare(0x4020400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x4020400) 261.859332ms ago: executing program 2 (id=2017): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0xfe9a) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0xa, 0x8, 0x5}, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000040)) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f00000005c0)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000300)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0xfffffffe) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 105.447265ms ago: executing program 1 (id=2018): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 104.934498ms ago: executing program 4 (id=2019): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x4010, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000080)="4cb05cbea75da618aa825e13d4afc9d64eb341bb6ba1279c2a291545f08f94836c10de5fe97f1fe0afada04903348ac1a5bca5e4b85cc70b34d9d99629299a063fa9909c6b823dbf", 0x0, 0x48) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x7, 0x420801) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000140)=0x81, 0x4) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7ff, 0x30, 0x7fffffffffffffff, 0x2}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r3, @in={{0x2, 0x4e21, @empty}}, [0x2, 0x5, 0x6, 0x5fe8, 0xeee, 0x101, 0x5, 0x5, 0x1, 0x800, 0x80000000, 0x8000000000000001, 0x8, 0x0, 0x1000]}, &(0x7f0000000300)=0x100) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_trace', 0x140, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) fcntl$setsig(r2, 0xa, 0x1a) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={r4, 0x6}, 0x8) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, 0xd, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20040004) fallocate(r6, 0x2, 0x6, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000580)={0x4, 0x0, 0x6001, 0xfffffff8, 0x2, 0x9, 0xd, 0x27b8b42975773d98}) accept4$tipc(r1, &(0x7f00000005c0)=@id, &(0x7f0000000600)=0x10, 0x800) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000640)=0x3, 0x4) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000680)) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000780)="279874663632d4cba289526cf45d1e441d0ff259e67851a1", 0x0, 0x18) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x12) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x3c, 0x15, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040018) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x8001, 0x7, 0xa]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc010}, 0x24000001) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r5, 0x4010e501, &(0x7f0000000b80)={r9}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000bc0)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) 0s ago: executing program 4 (id=2020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sched_setaffinity(0x0, 0x0, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f00000000c0)={0x23, 0x0, 0x58, 0xff}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000340)=&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="940000001800200027bd7000ffdbdf251d01040005000d00060000001500040000000000020300003276fe5651382fc7060000001500030004000060030100003106be6c4b82deeb0100000008000900", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="b77969ce35478dfe4cf9cc9d79e0e85e0f1be885a4cfc4927cb4b2df45ac37dde0088c13d41262240a759b58a6", @ANYBLOB="150001000300000000000000809053d601f76c0300000015000300040700a008010000a1b478a37e27ddca03000000008b8bb2ca134271dbb2857e9771e3715bdcef09609029ce7b651cffcbdd5e1ee4a6876355722b2b700721b9"], 0x94}, 0x1, 0x0, 0x0, 0x40c0}, 0x4084000) kernel console output (not intermixed with test programs): 5, bcdDevice= 0.00 [ 577.563535][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.571765][ T5922] usb 5-1: Product: syz [ 577.576104][ T5922] usb 5-1: Manufacturer: syz [ 577.586904][ T5922] usb 5-1: SerialNumber: syz [ 577.595156][ T5922] usb 5-1: config 0 descriptor?? [ 577.769654][T11916] netlink: 'syz.0.1511': attribute type 2 has an invalid length. [ 577.777240][T11900] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 577.799519][ T976] usb 4-1: USB disconnect, device number 79 [ 578.200442][T11903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.220555][ T30] audit: type=1400 audit(2000000161.899:872): avc: denied { write } for pid=11921 comm="syz.0.1513" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 578.220863][T11903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.281113][ T52] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 578.281184][ T52] Bluetooth: hci3: Malformed LE Event: 0x02 [ 579.459315][ T7050] airspy 3-1:0.0: usb_control_msg() failed -110 request 0f [ 579.474432][ T7050] airspy 3-1:0.0: Registered as swradio24 [ 579.480389][ T7050] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 579.505380][ T116] usb 3-1: USB disconnect, device number 57 [ 579.987133][T11937] serio: Serial port ttyS3 [ 581.420787][T11950] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 582.374297][ T5894] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 582.634168][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 582.668301][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.707435][ T5894] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 582.754316][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 582.786310][ T5894] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 582.818128][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 582.845146][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 582.867547][T11960] netlink: 'syz.2.1523': attribute type 2 has an invalid length. [ 582.881377][ T5894] usb 4-1: SerialNumber: syz [ 582.912779][T11942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 582.935023][ T5894] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 582.948588][ T5894] usb-storage 4-1:1.0: USB Mass Storage device detected [ 582.993257][ T5922] usb-storage 5-1:0.0: USB Mass Storage device detected [ 583.010400][ T5894] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 583.041774][ T5894] scsi host1: usb-storage 4-1:1.0 [ 583.069855][ T5922] usb 5-1: USB disconnect, device number 42 [ 583.106026][T11971] 9p: Bad value for 'wfdno' [ 583.171073][ T30] audit: type=1400 audit(2000000166.519:873): avc: denied { read } for pid=11941 comm="syz.3.1518" path="socket:[32326]" dev="sockfs" ino=32326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 583.560268][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.571194][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.580334][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.589419][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.598537][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.607667][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.616675][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.625755][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.634910][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.643996][T11974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1525'. [ 583.767400][T11974] binder: 11973:11974 ioctl 4018620d 0 returned -22 [ 584.007532][ T30] audit: type=1400 audit(2000000167.305:874): avc: denied { cmd } for pid=11983 comm="syz.4.1528" path="socket:[33446]" dev="sockfs" ino=33446 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 584.035595][T11982] serio: Serial port ttyS3 [ 584.051165][ T5894] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 584.807550][ T5894] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 584.833784][ T5894] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.847108][ T5947] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 584.867754][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 584.878744][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.898817][ T5894] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.916988][ T7050] usb 4-1: USB disconnect, device number 80 [ 584.943601][ T5894] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 584.976170][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 584.996708][ T5894] usb 3-1: Product: syz [ 585.001394][ T5894] usb 3-1: Manufacturer: syz [ 585.031819][ T5894] cdc_wdm 3-1:1.0: skipping garbage [ 585.036219][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.042128][ T5894] cdc_wdm 3-1:1.0: skipping garbage [ 585.079158][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.079435][ T5894] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 585.092852][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 585.110556][ T5894] cdc_wdm 3-1:1.0: Unknown control protocol [ 585.138133][ T5947] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.156973][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.180704][ T5947] usb 5-1: config 0 descriptor?? [ 585.417895][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.437812][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.137069][ T5894] usb 3-1: USB disconnect, device number 58 [ 586.160604][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.295849][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.370663][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.444838][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.492559][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.545170][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.590743][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.624506][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.831696][ T5947] usbhid 5-1:0.0: can't add hid device: -71 [ 586.865284][ T5947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 586.926768][ T5947] usb 5-1: USB disconnect, device number 43 [ 587.088593][T12012] netlink: 'syz.4.1536': attribute type 2 has an invalid length. [ 587.285030][ T5947] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 587.521724][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.532703][ T5947] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 587.551490][ T5947] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.561045][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.639856][ T5947] usb 3-1: Product: syz [ 587.644361][ T5947] usb 3-1: Manufacturer: syz [ 587.652971][ T5947] usb 3-1: SerialNumber: syz [ 588.390827][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.399704][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.772732][ T5947] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 588.806433][ T5947] usb 3-1: USB disconnect, device number 59 [ 589.151812][T12034] serio: Serial port ttyS3 [ 589.241805][ T5947] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 589.935797][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 589.979657][ T5947] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 590.054769][ T5947] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 590.082783][ T5947] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 590.099316][ T5947] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 590.109396][ T5947] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 590.145159][ T5947] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 590.158959][ T5947] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.173631][ T5947] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.191191][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.215173][ T5947] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 590.649978][ T5947] usb 3-1: USB disconnect, device number 60 [ 590.705429][ T5922] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 590.894719][ T5922] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 590.914274][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.926192][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 590.942089][ T5922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.954056][ T5922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.969453][ T5922] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 590.982257][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 590.991898][ T5922] usb 4-1: Product: syz [ 590.996944][ T5922] usb 4-1: Manufacturer: syz [ 591.018585][ T5922] cdc_wdm 4-1:1.0: skipping garbage [ 591.028608][ T5922] cdc_wdm 4-1:1.0: skipping garbage [ 591.045019][ T5922] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 591.051150][ T5947] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 591.070705][ T5922] cdc_wdm 4-1:1.0: Unknown control protocol [ 591.071438][T12057] __nla_validate_parse: 55 callbacks suppressed [ 591.071453][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1547'. [ 591.236036][T12045] cdc_wdm 4-1:1.0: Error submitting int urb - -90 [ 591.244300][ T5947] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 591.257541][T12057] 9p: Bad value for 'wfdno' [ 591.262623][ T5875] usb 4-1: USB disconnect, device number 81 [ 591.282169][ T5947] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 591.294300][ T5947] usb 3-1: config 0 interface 0 has no altsetting 0 [ 591.305948][ T5947] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 591.349338][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 591.377297][ T5947] usb 3-1: Product: syz [ 591.382231][ T5947] usb 3-1: Manufacturer: syz [ 591.388846][ T5947] usb 3-1: SerialNumber: syz [ 591.397357][ T5947] usb 3-1: config 0 descriptor?? [ 591.408602][ T5947] hub 3-1:0.0: bad descriptor, ignoring hub [ 591.415846][ T5947] hub 3-1:0.0: probe with driver hub failed with error -5 [ 591.430137][T12061] netlink: 'syz.4.1549': attribute type 2 has an invalid length. [ 591.438740][ T5947] usb 3-1: selecting invalid altsetting 0 [ 591.705681][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 591.968539][ T5922] usb 3-1: USB disconnect, device number 61 [ 592.503949][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 592.527562][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 592.536842][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 593.293393][T12081] serio: Serial port ttyS3 [ 594.415121][ T30] audit: type=1326 audit(2000000177.024:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12076 comm="syz.4.1552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498098f749 code=0x0 [ 595.835593][ T116] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 595.836641][T12099] overlayfs: empty lowerdir [ 596.166665][ T116] usb 1-1: unable to get BOS descriptor or descriptor too short [ 596.186824][ T116] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 596.187608][T12099] syzkaller0: entered promiscuous mode [ 596.213630][ T116] usb 1-1: can't read configurations, error -71 [ 596.215148][T12099] syzkaller0: entered allmulticast mode [ 596.369513][ T30] audit: type=1400 audit(2000000178.867:876): avc: denied { append } for pid=12098 comm="syz.1.1559" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 597.814006][ T30] audit: type=1326 audit(2000000179.072:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.3.1560" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42c998f749 code=0x0 [ 597.959562][T12112] netlink: 'syz.0.1562': attribute type 2 has an invalid length. [ 597.986077][ T6276] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 597.999851][ T30] audit: type=1400 audit(2000000180.391:878): avc: denied { setattr } for pid=12113 comm="syz.1.1563" name="tty1" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 598.090538][ T30] audit: type=1400 audit(2000000180.410:879): avc: denied { setopt } for pid=12113 comm="syz.1.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 598.233822][ T6276] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 598.248112][ T6276] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 598.266498][ T6276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 598.279544][T12123] serio: Serial port ttyS3 [ 599.322465][ T6276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 599.455448][ T6276] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 599.471768][ T7050] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 599.475269][ T6276] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 599.491006][ T6276] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 599.499606][ T6276] usb 5-1: Product: syz [ 599.504667][ T6276] usb 5-1: Manufacturer: syz [ 599.518704][ T6276] cdc_wdm 5-1:1.0: skipping garbage [ 599.526958][ T6276] cdc_wdm 5-1:1.0: skipping garbage [ 599.534442][ T6276] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 599.644433][ T7050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.654659][ T7050] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 599.665809][ T7050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.681076][ T7050] usb 3-1: config 0 descriptor?? [ 599.773640][ T5947] usb 5-1: USB disconnect, device number 44 [ 599.922042][T12138] loop3: detected capacity change from 0 to 7 [ 599.928999][T12138] Dev loop3: unable to read RDB block 7 [ 599.934678][T12138] loop3: AHDI p3 p4 [ 599.938589][T12138] loop3: partition table partially beyond EOD, truncated [ 599.942147][ T5922] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 599.945936][T12138] loop3: p3 start 1702000233 is beyond EOD, truncated [ 599.978651][ T30] audit: type=1326 audit(2000000182.234:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.032482][ T30] audit: type=1326 audit(2000000182.234:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.074320][ T30] audit: type=1326 audit(2000000182.243:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.099245][ T30] audit: type=1326 audit(2000000182.243:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.124286][ T30] audit: type=1326 audit(2000000182.243:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.150191][ T30] audit: type=1326 audit(2000000182.243:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.174461][ T30] audit: type=1326 audit(2000000182.243:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.198963][ T5922] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 600.207964][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.218997][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 600.228390][ T5922] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 600.240309][ T30] audit: type=1326 audit(2000000182.243:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.265255][ T5922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 600.275274][ T30] audit: type=1326 audit(2000000182.243:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4658f749 code=0x7ffc0000 [ 600.301154][ T30] audit: type=1326 audit(2000000182.243:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12124 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e4658df90 code=0x7ffc0000 [ 600.325741][ T5922] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 600.335478][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 600.343796][ T5922] usb 4-1: Product: syz [ 600.360077][ T5922] usb 4-1: Manufacturer: syz [ 600.386939][ T5922] cdc_wdm 4-1:1.0: skipping garbage [ 600.393655][ T5922] cdc_wdm 4-1:1.0: skipping garbage [ 600.399318][ T5922] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 600.601533][ T116] usb 4-1: USB disconnect, device number 82 [ 601.911926][ T7050] usbhid 3-1:0.0: can't add hid device: -71 [ 601.923799][ T7050] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 601.939175][ T7050] usb 3-1: USB disconnect, device number 62 [ 602.288793][T12166] netlink: 'syz.0.1579': attribute type 2 has an invalid length. [ 602.322498][T12167] serio: Serial port ttyS3 [ 603.652191][ T5922] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 604.701843][T12203] xt_ecn: cannot match TCP bits for non-tcp packets [ 604.834789][ T5922] usb 2-1: device descriptor read/64, error -71 [ 605.032403][ T6276] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 605.105865][ T116] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 605.205921][ T6276] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.219581][ T6276] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.276732][ T5922] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 605.330752][ T7050] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 605.414387][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 605.414398][ T30] audit: type=1326 audit(2000000187.323:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12204 comm="syz.4.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498098f749 code=0x7ffc0000 [ 605.457882][ T6276] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 605.469209][ T30] audit: type=1326 audit(2000000187.323:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12204 comm="syz.4.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498098f749 code=0x7ffc0000 [ 605.504356][ T6276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 605.526183][ T6276] usb 4-1: SerialNumber: syz [ 605.608167][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 605.609638][ T5922] usb 2-1: device descriptor read/64, error -71 [ 605.635438][ T116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.664098][ T116] usb 1-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.00 [ 605.684643][ T116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.708549][ T116] usb 1-1: config 0 descriptor?? [ 605.729982][ T7050] usb 3-1: config 0 has no interfaces? [ 605.736480][ T7050] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 605.747611][ T5922] usb usb2-port1: attempt power cycle [ 605.788397][ T6276] usb 4-1: 0:2 : does not exist [ 605.813912][ T6276] usb 4-1: USB disconnect, device number 83 [ 605.924961][ T7050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.942593][ T5947] usb 1-1: USB disconnect, device number 64 [ 606.006878][ T9328] udevd[9328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.032873][ T7050] usb 3-1: config 0 descriptor?? [ 606.229420][ T5922] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 606.260743][ T5922] usb 2-1: device descriptor read/8, error -71 [ 606.420669][ T5947] usb 3-1: USB disconnect, device number 63 [ 606.613182][ T5922] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 606.645506][ T5922] usb 2-1: device descriptor read/8, error -71 [ 606.762998][ T5922] usb usb2-port1: unable to enumerate USB device [ 606.834865][T12215] serio: Serial port ttyS3 [ 607.086532][ T30] audit: type=1400 audit(2000000188.894:975): avc: denied { connect } for pid=12216 comm="syz.1.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 608.020307][T12222] netlink: 'syz.0.1593': attribute type 2 has an invalid length. [ 608.379080][ T30] audit: type=1400 audit(2000000190.101:976): avc: denied { map } for pid=12230 comm="syz.4.1596" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 608.409829][ T30] audit: type=1400 audit(2000000190.110:977): avc: denied { execute } for pid=12230 comm="syz.4.1596" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 608.519670][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 608.534579][ T52] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 608.638760][ T5922] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 609.275154][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 609.286468][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.311288][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.334783][ T5922] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.355920][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.371703][ T5922] usb 4-1: Product: syz [ 609.381737][ T5922] usb 4-1: Manufacturer: syz [ 609.394203][ T5922] usb 4-1: SerialNumber: syz [ 609.610196][ T30] audit: type=1400 audit(2000000191.251:978): avc: denied { ioctl } for pid=12248 comm="syz.2.1601" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 609.745475][ T5947] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 609.801928][ T5922] usb 4-1: cannot find UAC_HEADER [ 609.981084][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 610.002343][ T5947] usb 1-1: no configurations [ 610.008737][ T5922] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 610.065656][T12259] serio: Serial port ttyS3 [ 610.213691][T12262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1604'. [ 610.785035][ T5947] usb 1-1: can't read configurations, error -22 [ 610.816918][ T5922] usb 4-1: USB disconnect, device number 84 [ 610.870891][ T9328] udevd[9328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.953700][ T5947] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 611.124722][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 611.143406][ T5947] usb 1-1: no configurations [ 611.169057][ T5947] usb 1-1: can't read configurations, error -22 [ 611.204535][ T5947] usb usb1-port1: attempt power cycle [ 611.618481][ T5947] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 611.681970][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 611.698761][ T5947] usb 1-1: no configurations [ 611.716887][ T5947] usb 1-1: can't read configurations, error -22 [ 611.894724][ T5947] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 611.958901][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 611.974631][ T5947] usb 1-1: no configurations [ 611.987619][ T5947] usb 1-1: can't read configurations, error -22 [ 612.002623][T12280] netlink: 'syz.2.1610': attribute type 2 has an invalid length. [ 612.011398][ T5947] usb usb1-port1: unable to enumerate USB device [ 612.076133][ T5922] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 612.439968][ T5922] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 612.449364][ T5922] usb 2-1: config 8 has no interface number 0 [ 612.455826][ T5922] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 612.467901][ T5922] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 612.478797][ T30] audit: type=1400 audit(2000000193.936:979): avc: denied { create } for pid=12286 comm="syz.4.1611" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 612.480286][ T5922] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 612.584860][ T5922] usb 2-1: config 8 interface 177 has no altsetting 0 [ 612.590775][ T30] audit: type=1400 audit(2000000193.936:980): avc: denied { associate } for pid=12286 comm="syz.4.1611" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 612.593640][ T5922] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 612.695014][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.715622][T12275] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 612.835399][ T116] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 613.033228][ T5922] usb 2-1: string descriptor 0 read error: -71 [ 613.072156][ T5922] ir_toy 2-1:8.177: required endpoints not found [ 613.105295][ T116] usb 5-1: unable to get BOS descriptor or descriptor too short [ 613.114058][ T116] usb 5-1: not running at top speed; connect to a high speed hub [ 613.123052][ T116] usb 5-1: config 129 has an invalid interface number: 28 but max is 0 [ 613.131886][ T5922] usb 2-1: USB disconnect, device number 80 [ 613.132070][ T116] usb 5-1: config 129 has no interface number 0 [ 613.177651][ T5947] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 613.198804][T12298] netlink: 'syz.3.1613': attribute type 10 has an invalid length. [ 613.206712][T12298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1613'. [ 613.542988][ T116] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 613.555222][ T116] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 613.567023][ T116] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 613.580484][ T116] usb 5-1: config 129 interface 28 has no altsetting 0 [ 613.584027][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 613.589601][ T116] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 613.645823][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 613.670641][ T5947] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 613.687567][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.704726][ T5947] usb 1-1: Product: syz [ 613.714641][ T5947] usb 1-1: Manufacturer: syz [ 613.725048][ T5947] usb 1-1: SerialNumber: syz [ 613.747677][ T5947] usb 1-1: config 0 descriptor?? [ 613.752122][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.780707][ T5947] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input31 [ 613.781803][ T116] usb 5-1: Product: syz [ 613.794129][ T116] usb 5-1: Manufacturer: syz [ 613.798801][ T116] usb 5-1: SerialNumber: syz [ 613.819332][ T5947] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 613.917328][T12302] serio: Serial port ttyS3 [ 613.923795][T12287] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 614.098220][T12289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.151701][T12289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.501212][ T30] audit: type=1400 audit(2000000195.554:981): avc: denied { mounton } for pid=12286 comm="syz.4.1611" path="/341/bus" dev="tmpfs" ino=1798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 614.502841][ T30] audit: type=1400 audit(2000000195.564:982): avc: denied { add_name } for pid=12286 comm="syz.4.1611" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 614.503770][ T116] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz) [ 614.702966][ T30] audit: type=1400 audit(2000000195.573:983): avc: denied { setattr } for pid=12286 comm="syz.4.1611" name="work" dev="tmpfs" ino=1799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 614.703906][ T30] audit: type=1400 audit(2000000195.582:984): avc: denied { write open } for pid=12286 comm="syz.4.1611" path=2F202864656C6574656429 dev="tmpfs" ino=1800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 615.005050][T12309] netlink: 'syz.2.1614': attribute type 10 has an invalid length. [ 615.096335][ T30] audit: type=1400 audit(2000000195.582:985): avc: denied { create } for pid=12286 comm="syz.4.1611" name="#1c" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 615.096697][ T30] audit: type=1400 audit(2000000195.592:986): avc: denied { remove_name } for pid=12286 comm="syz.4.1611" name="#1c" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 615.097064][ T30] audit: type=1400 audit(2000000195.592:987): avc: denied { rename } for pid=12286 comm="syz.4.1611" name="#1c" dev="tmpfs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 615.114201][T12309] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1614'. [ 615.397023][ T116] etas_es58x 5-1:129.28: could not retrieve the product info string [ 615.399190][ T5947] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 615.474165][ T30] audit: type=1400 audit(2000000195.592:988): avc: denied { unlink } for pid=12286 comm="syz.4.1611" name="#1c" dev="tmpfs" ino=1802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 615.474577][ T5947] usb 1-1: USB disconnect, device number 69 [ 615.726512][ T116] usb 5-1: USB disconnect, device number 45 [ 615.743930][ T116] etas_es58x 5-1:129.28: Disconnecting syz syz [ 618.535363][ T6276] IPVS: starting estimator thread 0... [ 618.609645][ T116] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 618.629343][T12340] IPVS: using max 42 ests per chain, 100800 per kthread [ 618.800534][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 618.808284][ T116] usb 1-1: no configurations [ 618.818650][ T116] usb 1-1: can't read configurations, error -22 [ 618.893917][T12344] netlink: 'syz.2.1624': attribute type 2 has an invalid length. [ 619.123270][ T116] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 619.797049][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 619.797059][ T30] audit: type=1400 audit(2000000200.783:991): avc: denied { read open } for pid=12356 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.842914][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 619.857190][ T116] usb 1-1: no configurations [ 619.864826][ T116] usb 1-1: can't read configurations, error -22 [ 619.877591][ T116] usb usb1-port1: attempt power cycle [ 619.962229][ T30] audit: type=1400 audit(2000000200.811:992): avc: denied { getattr } for pid=12356 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.413634][T12367] serio: Serial port ttyS3 [ 620.515702][ T116] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 621.195674][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 621.213700][ T116] usb 1-1: no configurations [ 621.236529][ T116] usb 1-1: can't read configurations, error -22 [ 621.391017][ T116] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 621.428088][ T30] audit: type=1400 audit(2000000202.308:993): avc: denied { add_name } for pid=12355 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.452465][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 621.501192][ T30] audit: type=1400 audit(2000000202.355:994): avc: denied { name_bind } for pid=12378 comm="syz.4.1631" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 621.501606][ T116] usb 1-1: no configurations [ 621.612079][ T116] usb 1-1: can't read configurations, error -22 [ 621.644280][ T116] usb usb1-port1: unable to enumerate USB device [ 622.511128][ T116] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 622.618603][T12412] netlink: 'syz.0.1638': attribute type 2 has an invalid length. [ 622.641025][T12414] netlink: 'syz.4.1636': attribute type 10 has an invalid length. [ 622.704265][ T116] usb 4-1: config 16 has an invalid interface number: 19 but max is 0 [ 622.712647][ T116] usb 4-1: config 16 has no interface number 0 [ 622.732173][ T116] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 622.790904][ T116] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 622.804821][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.835002][ T116] usb 4-1: Product: syz [ 622.854173][ T116] usb 4-1: Manufacturer: syz [ 622.881676][ T116] usb 4-1: SerialNumber: syz [ 623.127363][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.260100][T12427] serio: Serial port ttyS3 [ 623.291622][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.144315][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.156162][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.176975][T12402] delete_channel: no stack [ 624.211527][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.288374][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.343428][T12433] Unsupported ieee802154 address type: 0 [ 624.667254][ T116] usb 4-1: USB disconnect, device number 85 [ 624.731304][ T9328] udevd[9328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.862157][ T5875] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 624.970861][T12450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25206 sclass=netlink_route_socket pid=12450 comm=syz.1.1646 [ 625.022393][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 625.029187][ T5875] usb 3-1: config 2 has an invalid interface number: 193 but max is 0 [ 625.049418][ T116] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 625.087062][ T5875] usb 3-1: config 2 has no interface number 0 [ 625.098400][ T5875] usb 3-1: config 2 interface 193 has no altsetting 0 [ 625.115168][ T5875] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=86.a6 [ 625.129642][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.137720][ T5875] usb 3-1: Product: syz [ 625.159587][ T5875] usb 3-1: Manufacturer: syz [ 625.181973][ T5875] usb 3-1: SerialNumber: syz [ 625.321873][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 625.346165][ T116] usb 1-1: no configurations [ 625.448022][ T116] usb 1-1: can't read configurations, error -22 [ 625.471050][ T5875] usb 3-1: active config #2 != 1 ?? [ 625.549986][ T30] audit: type=1400 audit(2000000206.162:995): avc: denied { setopt } for pid=12452 comm="syz.1.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 625.634325][ T5947] usb 3-1: USB disconnect, device number 65 [ 625.678820][T12459] netlink: 'syz.3.1649': attribute type 1 has an invalid length. [ 625.687031][ T116] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 625.716577][T12459] bond1: entered promiscuous mode [ 625.721769][T12459] bond1: entered allmulticast mode [ 625.727257][T12459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 625.741310][T12459] macvlan2: entered promiscuous mode [ 625.746663][T12459] macvlan2: entered allmulticast mode [ 625.936435][T12464] serio: Serial port ttyS3 [ 625.952384][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 625.958215][ T116] usb 1-1: no configurations [ 625.962840][ T116] usb 1-1: can't read configurations, error -22 [ 625.969777][ T116] usb usb1-port1: attempt power cycle [ 626.753824][T12468] netlink: 'syz.4.1651': attribute type 2 has an invalid length. [ 626.761688][T12454] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 626.770627][T12454] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 626.796252][T12454] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 626.802590][T12454] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 626.807950][ T116] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 626.821574][T12454] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 626.828288][T12454] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 626.839397][T12454] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 626.840404][ T116] usb 1-1: Using ep0 maxpacket: 16 [ 626.845999][T12454] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 626.851955][ T116] usb 1-1: no configurations [ 626.875132][ T116] usb 1-1: can't read configurations, error -22 [ 626.915818][T12473] netlink: 'syz.2.1653': attribute type 5 has an invalid length. [ 626.939942][T12473] ip6erspan0: entered promiscuous mode [ 627.107034][ T116] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 627.274594][T12482] random: crng reseeded on system resumption [ 627.827901][ T52] Bluetooth: hci0: command 0x0401 tx timeout [ 628.027414][ T10] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 628.136132][ T116] usb 1-1: device descriptor read/8, error -71 [ 628.254140][ T116] usb usb1-port1: unable to enumerate USB device [ 628.339150][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 628.454310][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.462682][ T30] audit: type=1400 audit(2000000208.781:996): avc: denied { bind } for pid=12490 comm="syz.0.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 628.462736][ T30] audit: type=1400 audit(2000000208.790:997): avc: denied { setopt } for pid=12490 comm="syz.0.1658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 628.518433][ T5947] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 628.575163][ T10] usb 4-1: Product: syz [ 628.580861][ T10] usb 4-1: Manufacturer: syz [ 628.656936][ T10] usb 4-1: SerialNumber: syz [ 628.760036][ T5947] usb 2-1: device descriptor read/64, error -71 [ 628.797891][ T10] usb 4-1: config 0 descriptor?? [ 629.020905][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 629.031325][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 629.039267][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 629.438026][ T10] airspy 4-1:0.0: usb_control_msg() failed -32 request 09 [ 629.445250][ T10] airspy 4-1:0.0: Could not detect board [ 629.451504][ T10] airspy 4-1:0.0: probe with driver airspy failed with error -32 [ 629.501709][ T5947] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 629.656364][T12513] netlink: 'syz.2.1665': attribute type 2 has an invalid length. [ 629.664200][ T5947] usb 2-1: device descriptor read/64, error -71 [ 630.290917][ T5947] usb usb2-port1: attempt power cycle [ 630.296446][ T52] Bluetooth: hci0: command 0x0401 tx timeout [ 630.491398][ T5875] usb 4-1: USB disconnect, device number 86 [ 631.171201][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 631.173775][ T5947] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 631.205957][ T5947] usb 2-1: device descriptor read/8, error -71 [ 631.255383][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 631.261547][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 631.472926][ T5875] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 631.641653][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 631.650044][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.670693][ T5875] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 631.699484][ T5875] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 631.720593][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.737066][ T5875] usb 3-1: Product: syz [ 631.745292][ T5875] usb 3-1: Manufacturer: syz [ 631.757574][ T5875] usb 3-1: SerialNumber: syz [ 631.772581][ T5875] usb 3-1: config 0 descriptor?? [ 633.739524][T12553] serio: Serial port ttyS3 [ 634.737990][ T5875] usb 3-1: USB disconnect, device number 66 [ 634.902179][T12565] netlink: 'syz.4.1678': attribute type 2 has an invalid length. [ 634.962822][ T30] audit: type=1400 audit(2000000214.964:998): avc: denied { write } for pid=12567 comm="syz.1.1679" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 634.987460][ T6276] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 634.998082][ T5947] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 635.157045][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 635.205113][ T5875] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 635.221189][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.234459][ T6276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 635.234899][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.245566][ T6276] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 635.245594][ T6276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.250209][ T6276] usb 4-1: config 0 descriptor?? [ 635.705039][ T5947] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 635.708340][T12558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 635.717984][ T5947] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 635.727842][ T5875] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 635.734077][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.750947][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.759948][ T5875] usb 3-1: Product: syz [ 635.765109][ T5875] usb 3-1: Manufacturer: syz [ 635.765707][ T5947] usb 1-1: config 0 descriptor?? [ 635.769903][ T5875] usb 3-1: SerialNumber: syz [ 635.818788][ T5875] usb 3-1: config 0 descriptor?? [ 636.172627][ T5875] airspy 3-1:0.0: usb_control_msg() failed -32 request 09 [ 636.180531][ T5875] airspy 3-1:0.0: Could not detect board [ 636.186400][ T5875] airspy 3-1:0.0: probe with driver airspy failed with error -32 [ 636.341424][T12560] random: crng reseeded on system resumption [ 636.493597][ T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 636.623624][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.657239][ T6276] hid-corsair-void 0003:1B1C:0A0F.000D: item fetching failed at offset 3/5 [ 636.666805][ T6276] hid-corsair-void 0003:1B1C:0A0F.000D: parse failed (reason: -22) [ 636.674849][ T6276] hid-corsair-void 0003:1B1C:0A0F.000D: probe with driver hid-corsair-void failed with error -22 [ 636.682733][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.726569][ T5947] usbhid 1-1:0.0: can't add hid device: -71 [ 636.737795][ T5947] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 636.764550][ T5947] usb 1-1: USB disconnect, device number 78 [ 636.816284][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 636.827893][ T10] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 636.848349][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 636.907427][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 636.932912][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 636.956764][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 636.972607][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 636.980858][ T10] usb 2-1: Product: syz [ 636.985506][ T10] usb 2-1: Manufacturer: syz [ 636.994851][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 637.000724][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 637.006064][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 637.224355][ T6276] usb 2-1: USB disconnect, device number 85 [ 637.408595][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1685'. [ 637.420667][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 637.430925][T12591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1685'. [ 637.455587][ T5875] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 637.571842][T12594] serio: Serial port ttyS3 [ 637.897271][ T5875] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 637.918754][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.948803][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 637.977964][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.085189][ T116] usb 4-1: USB disconnect, device number 87 [ 638.162811][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.259602][ T5875] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 638.288076][ T6276] usb 3-1: USB disconnect, device number 67 [ 638.332986][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 638.397621][ T5875] usb 5-1: Product: syz [ 638.437744][ T5875] usb 5-1: Manufacturer: syz [ 638.542307][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 638.562974][ T5875] cdc_wdm 5-1:1.0: skipping garbage [ 638.662080][ T5875] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 638.698581][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 638.706294][ T5875] cdc_wdm 5-1:1.0: Unknown control protocol [ 638.714505][ T116] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 638.935333][T12609] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1689'. [ 638.936995][ T5875] usb 5-1: USB disconnect, device number 46 [ 638.973656][ T116] usb 2-1: Using ep0 maxpacket: 16 [ 639.040299][ T116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.130353][ T116] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 639.143619][ T116] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 639.225757][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.255248][ T116] usb 2-1: Product: syz [ 639.259456][ T116] usb 2-1: Manufacturer: syz [ 639.264778][ T116] usb 2-1: SerialNumber: syz [ 639.286658][ T116] usb 2-1: config 0 descriptor?? [ 639.327482][T12613] netlink: 'syz.0.1691': attribute type 2 has an invalid length. [ 639.470278][ T30] audit: type=1400 audit(2000000219.182:999): avc: denied { connect } for pid=12616 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 639.743342][ T116] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 639.882283][ T116] usb 4-1: device descriptor read/64, error -71 [ 639.914666][ T5947] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 640.085610][ T5947] usb 5-1: device descriptor read/64, error -71 [ 640.641334][ T116] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 640.716188][ T5947] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 640.801711][ T116] usb 4-1: device descriptor read/64, error -71 [ 640.855119][ T5947] usb 5-1: device descriptor read/64, error -71 [ 640.919493][ T116] usb usb4-port1: attempt power cycle [ 640.992820][ T10] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 641.001082][ T5947] usb usb5-port1: attempt power cycle [ 641.014651][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 641.021763][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.076972][T12632] pim6reg: entered allmulticast mode [ 641.192383][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 641.202040][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.212007][ T10] usb 1-1: Product: syz [ 641.216344][ T10] usb 1-1: Manufacturer: syz [ 641.221167][ T10] usb 1-1: SerialNumber: syz [ 641.229539][ T10] usb 1-1: config 0 descriptor?? [ 641.293471][ T116] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 641.326303][ T116] usb 4-1: device descriptor read/8, error -71 [ 641.389639][ T5947] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 641.411456][ T5947] usb 5-1: device descriptor read/8, error -71 [ 641.451210][T12629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.461548][T12629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.470206][ T52] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 641.470252][ T52] Bluetooth: hci1: Malformed LE Event: 0x02 [ 641.592958][ T116] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 641.639079][ T116] usb 4-1: device descriptor read/8, error -71 [ 641.671272][ T5947] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 641.720419][ T5947] usb 5-1: device descriptor read/8, error -71 [ 641.792806][ T116] usb usb4-port1: unable to enumerate USB device [ 641.850875][ T10] usb-storage 1-1:0.0: USB Mass Storage device detected [ 641.857478][ T116] usb 2-1: USB disconnect, device number 86 [ 641.893240][ T5947] usb usb5-port1: unable to enumerate USB device [ 641.918561][ T10] usb 1-1: USB disconnect, device number 79 [ 642.195119][T12645] serio: Serial port ttyS3 [ 643.058170][ T116] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 643.495541][T12654] netlink: 'syz.2.1701': attribute type 10 has an invalid length. [ 643.503867][T12654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1701'. [ 643.605012][T12656] netlink: 'syz.3.1703': attribute type 10 has an invalid length. [ 643.612997][T12656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1703'. [ 643.979466][ T116] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 644.504123][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.513499][ T116] usb 2-1: Product: syz [ 644.517679][ T116] usb 2-1: Manufacturer: syz [ 644.523471][ T116] usb 2-1: SerialNumber: syz [ 644.530630][ T116] usb 2-1: config 0 descriptor?? [ 644.986985][T12664] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1704'. [ 645.443640][T12667] netlink: 'syz.3.1706': attribute type 2 has an invalid length. [ 645.473218][ T116] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 645.578776][ T116] airspy 2-1:0.0: Could not detect board [ 645.586983][ T116] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 645.601371][ T116] usb 2-1: USB disconnect, device number 87 [ 645.674111][ T30] audit: type=1400 audit(2000000224.982:1000): avc: denied { setattr } for pid=12674 comm="syz.1.1708" name="zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 645.777528][T12679] erofs (device nbd0): cannot find valid erofs superblock [ 645.790490][T12679] Cannot find add_set index 0 as target [ 647.047583][T12695] serio: Serial port ttyS3 [ 647.858039][ T5875] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 648.039418][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 648.056076][ T5875] usb 4-1: config 8 has an invalid interface number: 143 but max is 0 [ 648.088069][ T5875] usb 4-1: config 8 has no interface number 0 [ 648.095185][ T5875] usb 4-1: config 8 interface 143 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 648.115786][ T5875] usb 4-1: config 8 interface 143 has no altsetting 0 [ 648.141436][ T5875] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=71.6b [ 648.159152][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.175381][ T5875] usb 4-1: Product: syz [ 648.186156][ T5875] usb 4-1: Manufacturer: syz [ 648.196064][ T5875] usb 4-1: SerialNumber: syz [ 649.987728][ T6276] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 650.169051][ T6276] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.181205][ T6276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.193282][ T6276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 650.212791][ T6276] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 650.227899][ T6276] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 650.237695][ T6276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.250382][ T6276] usb 5-1: config 0 descriptor?? [ 650.282314][T12487] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 650.535208][T12487] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 650.546190][T12487] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.565901][T12487] usb 1-1: Product: syz [ 650.584918][ T5875] kvaser_usb 4-1:8.143: error -ENODEV: Cannot get usb endpoint(s) [ 650.591310][T12487] usb 1-1: Manufacturer: syz [ 650.601661][ T5875] usb 4-1: USB disconnect, device number 92 [ 650.615506][T12487] usb 1-1: SerialNumber: syz [ 650.644624][T12487] usb 1-1: config 0 descriptor?? [ 650.675445][T12719] netlink: 'syz.2.1720': attribute type 2 has an invalid length. [ 650.822109][ T6276] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 650.851362][ T6276] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 650.903296][T12487] airspy 1-1:0.0: usb_control_msg() failed -32 request 09 [ 650.916159][T12487] airspy 1-1:0.0: Could not detect board [ 650.929796][T12487] airspy 1-1:0.0: probe with driver airspy failed with error -32 [ 651.580317][T12729] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1722'. [ 651.645184][ T30] audit: type=1326 audit(2000000230.576:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12728 comm="syz.2.1722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e4658f749 code=0x0 [ 653.640690][ T5947] usb 1-1: USB disconnect, device number 80 [ 654.099648][T12753] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 654.107654][T12753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1726'. [ 654.964656][T12756] serio: Serial port ttyS3 [ 655.095204][ T5813] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 655.267025][T12761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1729'. [ 655.306906][ T30] audit: type=1400 audit(2000000233.971:1002): avc: denied { write } for pid=12757 comm="syz.3.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 655.343683][ T5813] usb 5-1: device firmware changed [ 655.351710][ T116] usb 5-1: USB disconnect, device number 51 [ 655.533432][ T116] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 655.706233][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.737196][ T116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.769361][ T116] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 655.826742][ T116] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 655.835898][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.905132][ T116] usb 5-1: config 0 descriptor?? [ 656.536776][ T116] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 656.558743][T12773] netlink: 'syz.0.1732': attribute type 2 has an invalid length. [ 657.705561][ T116] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 657.863181][T12791] netlink: 'syz.1.1735': attribute type 2 has an invalid length. [ 657.940248][ T116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.952142][ T116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.965258][ T116] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.979999][ T116] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.007798][ T116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.075651][ T116] usb 1-1: config 0 descriptor?? [ 658.624956][ T10] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 658.822013][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 658.822052][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.822099][ T10] usb 2-1: Product: syz [ 658.822136][ T10] usb 2-1: Manufacturer: syz [ 658.822174][ T10] usb 2-1: SerialNumber: syz [ 658.845381][ T10] usb 2-1: config 0 descriptor?? [ 658.859632][ T116] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 659.235920][ T10] airspy 2-1:0.0: usb_control_msg() failed -32 request 09 [ 659.305485][ T10] airspy 2-1:0.0: Could not detect board [ 659.355275][ T10] airspy 2-1:0.0: probe with driver airspy failed with error -32 [ 659.745449][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 659.879067][ T30] audit: type=1326 audit(2000000238.255:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12804 comm="syz.4.1740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498098f749 code=0x0 [ 659.964034][ T10] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 660.124375][ T52] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 660.133744][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 660.146712][ T24] usb 1-1: USB disconnect, device number 81 [ 660.611412][T12487] usb 5-1: USB disconnect, device number 52 [ 662.547162][ T10] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 662.846132][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.856357][ T10] usb 4-1: Product: syz [ 662.860556][ T10] usb 4-1: Manufacturer: syz [ 662.871534][ T10] usb 4-1: can't set config #2, error -71 [ 662.890164][ T10] usb 4-1: USB disconnect, device number 93 [ 662.935792][ T24] usb 2-1: USB disconnect, device number 88 [ 662.966120][T12816] netlink: 'syz.3.1743': attribute type 2 has an invalid length. [ 665.808960][T12835] netlink: 'syz.0.1746': attribute type 10 has an invalid length. [ 665.816939][T12835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1746'. [ 665.850255][T12835] batman_adv: batadv0: Adding interface: virt_wifi0 [ 665.857015][T12835] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.884179][T12835] batman_adv: batadv0: Interface activated: virt_wifi0 [ 666.437935][ T30] audit: type=1400 audit(2000000244.391:1004): avc: denied { connect } for pid=12833 comm="syz.4.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 666.800433][ T30] audit: type=1400 audit(2000000244.504:1005): avc: denied { ioctl } for pid=12833 comm="syz.4.1748" path="socket:[36267]" dev="sockfs" ino=36267 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 667.061130][T12845] gfs2: block size(16384) > page size(4096) not supported by filesystem [ 670.853409][T12858] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1752'. [ 671.094347][ T30] audit: type=1400 audit(2000000248.760:1006): avc: denied { connect } for pid=12865 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 671.241745][T12870] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1755'. [ 671.283363][ T10] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 671.513515][ T10] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 671.532907][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.597409][ T10] usb 5-1: Product: syz [ 671.621156][ T10] usb 5-1: Manufacturer: syz [ 671.666887][ T10] usb 5-1: SerialNumber: syz [ 671.697956][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.725259][ T10] usb 5-1: config 0 descriptor?? [ 671.789484][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.954104][T12487] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 672.006634][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 672.181494][ T10] airspy 5-1:0.0: usb_control_msg() failed -32 request 0a [ 672.188681][ T10] airspy 5-1:0.0: Could not detect board [ 672.642333][ T10] airspy 5-1:0.0: probe with driver airspy failed with error -32 [ 672.977684][T12888] netlink: 'syz.1.1759': attribute type 2 has an invalid length. [ 673.307116][T12902] kvm: user requested TSC rate below hardware speed [ 673.334721][ T5813] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 673.626249][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 673.636391][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 673.664577][ T5813] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 673.698923][ T5813] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 673.708182][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.716258][ T5813] usb 4-1: Product: syz [ 673.720921][ T5813] usb 4-1: Manufacturer: syz [ 673.727016][ T5813] usb 4-1: SerialNumber: syz [ 673.752819][ T5813] usb 4-1: config 0 descriptor?? [ 673.772375][T12895] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 673.779920][T12895] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 673.790343][ T5813] usb 4-1: ucan: probing device on interface #0 [ 674.970029][T12487] usb 5-1: USB disconnect, device number 53 [ 675.120214][ T30] audit: type=1400 audit(2000000252.520:1007): avc: denied { create } for pid=12893 comm="syz.3.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 675.865095][ T5813] ucan 4-1:0.0 can0: registered device [ 676.120945][ T5813] ucan 4-1:0.0 can0: firmware string: unknown [ 676.132017][ T5813] usb 4-1: USB disconnect, device number 94 [ 680.426549][T12945] lo speed is unknown, defaulting to 1000 [ 680.666966][T12487] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 684.865446][ T6775] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 685.345145][T12951] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 685.926909][ T5894] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 686.007620][ T6775] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 686.017509][ T6775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.026279][ T6775] usb 1-1: Product: syz [ 686.030455][ T6775] usb 1-1: Manufacturer: syz [ 686.036373][ T6775] usb 1-1: SerialNumber: syz [ 686.056198][ T6775] usb 1-1: config 0 descriptor?? [ 686.213433][ T5894] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 686.224783][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.246537][ T5894] usb 5-1: Product: syz [ 686.252556][ T5894] usb 5-1: Manufacturer: syz [ 686.261349][ T5894] usb 5-1: SerialNumber: syz [ 686.327592][ T5894] usb 5-1: config 0 descriptor?? [ 686.350361][T12951] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 686.350392][T12951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.350436][T12951] usb 2-1: Product: syz [ 686.350452][T12951] usb 2-1: Manufacturer: syz [ 686.350468][T12951] usb 2-1: SerialNumber: syz [ 686.353212][T12951] usb 2-1: config 0 descriptor?? [ 686.571422][ T6775] airspy 1-1:0.0: usb_control_msg() failed -32 request 0a [ 686.574388][T12961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.600396][T12961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.684830][ T30] audit: type=1326 audit(2000000263.343:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.2.1781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4658f749 code=0x0 [ 686.689658][T12956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.708493][ T52] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 686.727286][ T52] Bluetooth: hci3: Malformed LE Event: 0x02 [ 686.730715][T12956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.248415][ T5894] usb-storage 5-1:0.0: USB Mass Storage device detected [ 687.426088][ T5823] Bluetooth: hci0: unknown advertising packet type: 0x17 [ 687.427402][ T5823] Bluetooth: hci0: Malformed LE Event: 0x02 [ 688.098172][ T6775] airspy 1-1:0.0: Could not detect board [ 688.103921][ T6775] airspy 1-1:0.0: probe with driver airspy failed with error -32 [ 688.442626][ T116] usb 1-1: USB disconnect, device number 83 [ 688.467385][ T5894] usb 5-1: USB disconnect, device number 54 [ 688.761097][T12951] usb-storage 2-1:0.0: USB Mass Storage device detected [ 689.267856][T12951] usb 2-1: USB disconnect, device number 89 [ 689.455324][T12997] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 689.594188][T12997] macsec2: entered allmulticast mode [ 689.599672][T12997] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 689.659760][T13006] netlink: 'syz.4.1788': attribute type 2 has an invalid length. [ 690.023090][T13016] serio: Serial port ttyS3 [ 691.027327][T13022] netlink: 'syz.0.1793': attribute type 10 has an invalid length. [ 691.035250][T13022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1793'. [ 691.949813][T12487] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 691.983057][ T5894] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 692.174720][T12487] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 692.187170][T12487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.196322][T12487] usb 3-1: Product: syz [ 692.200806][T12487] usb 3-1: Manufacturer: syz [ 692.209435][T12487] usb 3-1: SerialNumber: syz [ 692.216315][T12487] usb 3-1: config 0 descriptor?? [ 692.225333][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.247234][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.276971][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 692.318769][ T5894] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 692.358295][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.410100][ T5894] usb 2-1: config 0 descriptor?? [ 692.680116][T12487] airspy 3-1:0.0: usb_control_msg() failed -32 request 0a [ 692.698384][T12487] airspy 3-1:0.0: Could not detect board [ 692.717533][T12487] airspy 3-1:0.0: probe with driver airspy failed with error -32 [ 693.016616][ T5894] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 693.453004][T12487] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 693.687621][ T30] audit: type=1326 audit(2000000269.890:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.4.1799" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f498098f749 code=0x0 [ 694.233223][T12487] usb 1-1: Using ep0 maxpacket: 16 [ 694.583843][ T116] usb 2-1: reset high-speed USB device number 90 using dummy_hcd [ 695.361115][T12487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.370471][ T24] usb 3-1: USB disconnect, device number 69 [ 695.372179][T12487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.388782][T12487] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 695.402464][T12487] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 695.414896][T12487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.425205][T12487] usb 1-1: config 0 descriptor?? [ 695.592233][T13066] netlink: 'syz.4.1805': attribute type 2 has an invalid length. [ 695.601808][ T116] usb 2-1: device descriptor read/64, error -71 [ 695.677455][T12487] usbhid 1-1:0.0: can't add hid device: -71 [ 695.683558][T12487] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 695.704448][T12487] usb 1-1: USB disconnect, device number 84 [ 695.858351][ T116] usb 2-1: reset high-speed USB device number 90 using dummy_hcd [ 695.870085][ T116] usb 2-1: device reset changed ep0 maxpacket size! [ 695.889409][ T5894] usb 2-1: USB disconnect, device number 90 [ 696.050796][ T5894] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 696.275556][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 696.297128][ T5894] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 696.313567][ T5894] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 696.323971][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.338159][ T5894] usb 2-1: Product: syz [ 696.353464][ T5894] usb 2-1: Manufacturer: syz [ 696.505139][ T5894] usb 2-1: SerialNumber: syz [ 696.738333][ T5894] usb 2-1: config 0 descriptor?? [ 696.763043][ T5894] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 696.790662][ T5894] usb 2-1: setting power ON [ 696.806336][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 696.850704][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.874691][ T5894] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 696.898763][ T5894] usb 2-1: media controller created [ 696.912379][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.004960][ T5894] usb 2-1: selecting invalid altsetting 6 [ 697.011193][ T5894] usb 2-1: digital interface selection failed (-22) [ 697.048503][ T5894] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 697.074078][ T5894] usb 2-1: setting power OFF [ 697.084752][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 697.092591][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 697.115179][ T5894] (NULL device *): no alternate interface [ 697.319410][ T116] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 697.467890][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 697.515697][ T5894] usb 2-1: USB disconnect, device number 91 [ 697.569033][ T116] usb 4-1: Using ep0 maxpacket: 32 [ 697.579531][ T116] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.681055][ T116] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 697.759592][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.791913][ T116] usb 4-1: Product: syz [ 697.796280][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 697.810070][ T116] usb 4-1: Manufacturer: syz [ 697.823493][ T116] usb 4-1: SerialNumber: syz [ 697.852906][ T116] usb 4-1: config 0 descriptor?? [ 697.894174][ T116] usb 4-1: bad CDC descriptors [ 697.900049][ T116] usb 4-1: unsupported MDLM descriptors [ 699.253521][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 699.573871][T13121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1814'. [ 699.735026][T13121] bond0: (slave wlan1): Releasing backup interface [ 700.095112][T13131] program syz.0.1816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 700.613705][ T30] audit: type=1326 audit(2000000276.373:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13133 comm="syz.1.1817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bc9d8f749 code=0x0 [ 700.767723][ T6775] usb 4-1: USB disconnect, device number 95 [ 701.543158][T13144] futex_wake_op: syz.2.1820 tries to shift op by -1; fix this program [ 701.653421][T13145] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 703.869665][T13162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1823'. [ 704.478466][T13165] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.487735][T13165] bridge0: entered allmulticast mode [ 704.785545][T13157] netlink: 'syz.1.1823': attribute type 2 has an invalid length. [ 704.820082][T13157] bridge_slave_1: left allmulticast mode [ 704.825768][T13157] bridge_slave_1: left promiscuous mode [ 704.831542][T13157] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.840849][T13157] bridge_slave_0: left promiscuous mode [ 704.846546][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.425736][T12487] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 706.709127][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.717939][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.730641][T12487] usb 4-1: Using ep0 maxpacket: 16 [ 706.846287][T12487] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 706.897081][T12487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 32, changing to 7 [ 706.915626][T12487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25445, setting to 1024 [ 706.931409][T12487] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 706.941022][T12487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.955648][T12487] usb 4-1: Product: syz [ 706.959848][T12487] usb 4-1: Manufacturer: syz [ 706.964816][T12487] usb 4-1: SerialNumber: syz [ 707.008757][T12487] usb 4-1: config 0 descriptor?? [ 707.092506][T12487] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 707.137536][T12487] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 708.558840][ T30] audit: type=1326 audit(2000000283.791:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.1833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4658f749 code=0x0 [ 708.681671][T12487] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 708.691645][T12487] em28xx 4-1:0.0: Config register raw data: 0x2d [ 708.720005][T12487] em28xx 4-1:0.0: I2S Audio (1 sample rate(s)) [ 708.729329][T12487] em28xx 4-1:0.0: No AC97 audio processor [ 709.094075][ T30] audit: type=1400 audit(2000000284.305:1012): avc: denied { ioctl } for pid=13213 comm="syz.2.1836" path="socket:[38056]" dev="sockfs" ino=38056 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 709.666363][T12487] usb 4-1: USB disconnect, device number 96 [ 711.429084][T13227] netlink: 'syz.0.1839': attribute type 10 has an invalid length. [ 711.437060][T13227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1839'. [ 712.814987][ T116] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 713.045876][ T116] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 713.045938][ T116] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 713.045967][ T116] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 713.046101][ T116] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 713.069313][ T116] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 713.069404][ T116] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 713.069446][ T116] usb 4-1: Product: syz [ 713.069483][ T116] usb 4-1: Manufacturer: syz [ 713.194876][ T116] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 713.689887][T13261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'. [ 713.737254][ T116] usb 4-1: USB disconnect, device number 97 [ 716.031527][ T30] audit: type=1326 audit(2000000288.832:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13247 comm="syz.0.1843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab7798f749 code=0x0 [ 717.118322][T12487] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 717.337301][T12487] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 717.384586][T12487] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 717.462070][T12487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 717.520209][T12487] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 717.578948][ T30] audit: type=1326 audit(2000000292.247:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13274 comm="syz.3.1850" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42c998f749 code=0x0 [ 717.585970][T12487] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 717.678243][T12487] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 717.853066][T12487] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.902236][T12487] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 717.962200][T12487] usb 1-1: Product: syz [ 717.984859][T12487] usb 1-1: Manufacturer: syz [ 718.243781][T12487] cdc_wdm 1-1:1.0: skipping garbage [ 718.277105][T12487] cdc_wdm 1-1:1.0: skipping garbage [ 718.317384][T12487] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 718.715473][T12487] usb 1-1: USB disconnect, device number 85 [ 718.982393][ T7514] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 719.167136][ T7514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.178633][ T7514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.202149][ T7514] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 719.248885][ T7514] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 719.283727][ T7514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.359048][ T7514] usb 5-1: config 0 descriptor?? [ 721.830064][ T7514] usbhid 5-1:0.0: can't add hid device: -71 [ 721.852002][ T7514] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 721.878650][ T7514] usb 5-1: USB disconnect, device number 55 [ 722.370580][T13307] bridge0: entered promiscuous mode [ 722.542326][ T30] audit: type=1400 audit(2000000296.886:1015): avc: denied { listen } for pid=13305 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 722.619149][ T30] audit: type=1400 audit(2000000296.886:1016): avc: denied { compute_member } for pid=13305 comm="syz.1.1854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 723.524551][T13305] delete_channel: no stack [ 723.958340][T13325] SELinux: policydb version -250546964 does not match my version range 15-35 [ 723.988944][T13325] SELinux: failed to load policy [ 723.996042][ T5875] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 724.170834][ T5875] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 724.182321][ T5875] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 724.193102][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 724.202320][ T5875] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 724.214451][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 724.258873][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 724.326732][ T5875] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 724.375552][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 724.403853][ T5875] usb 4-1: Product: syz [ 724.412593][ T5875] usb 4-1: Manufacturer: syz [ 724.428136][ T5875] cdc_wdm 4-1:1.0: skipping garbage [ 724.433538][ T5875] cdc_wdm 4-1:1.0: skipping garbage [ 724.470210][ T5875] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 724.481858][ T5823] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 724.482192][ T5823] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 725.050402][ T30] audit: type=1326 audit(2000000299.234:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13350 comm="syz.1.1871" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0bc9d8f749 code=0x0 [ 725.096918][ T7514] usb 4-1: USB disconnect, device number 98 [ 725.792076][ T5875] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 725.877756][ T7514] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 725.963090][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 725.992101][ T5875] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 726.010804][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.032977][ T5875] usb 2-1: Product: syz [ 726.048665][ T5875] usb 2-1: Manufacturer: syz [ 726.060280][ T7514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.064266][ T5875] usb 2-1: SerialNumber: syz [ 726.098998][ T5875] usb 2-1: config 0 descriptor?? [ 726.102098][ T7514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.158300][ T7514] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 726.201489][ T7514] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 726.233489][ T7514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.273868][ T7514] usb 3-1: config 0 descriptor?? [ 726.363258][ T5875] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 726.390726][ T5875] eb 9a 47 80 9b f8 7a f0 [ 726.406971][ T5875] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 726.578716][T12487] usb 2-1: USB disconnect, device number 92 [ 727.316542][ T30] audit: type=1326 audit(2000000301.320:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13376 comm="syz.0.1876" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab7798f749 code=0x0 [ 728.579917][ T7514] usbhid 3-1:0.0: can't add hid device: -71 [ 728.611874][ T7514] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 728.639335][ T7514] usb 3-1: USB disconnect, device number 70 [ 728.646980][ T30] audit: type=1400 audit(2000000302.601:1019): avc: denied { bind } for pid=13387 comm="syz.4.1879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 729.778000][ T7514] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 729.952752][ T7514] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 729.961855][ T7514] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 729.986586][ T7514] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 730.008919][ T7514] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 730.021456][ T30] audit: type=1400 audit(2000000303.883:1020): avc: denied { kexec_image_load } for pid=13419 comm="syz.2.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 730.055023][ T7514] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 730.079124][ T7514] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 730.102137][ T7514] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 730.111491][ T7514] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.119790][ T7514] usb 5-1: Product: syz [ 730.124103][ T7514] usb 5-1: Manufacturer: syz [ 730.134525][ T7514] cdc_wdm 5-1:1.0: skipping garbage [ 730.139941][ T7514] cdc_wdm 5-1:1.0: skipping garbage [ 730.145862][ T7514] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 730.271489][ T116] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 730.353383][ T7514] usb 5-1: USB disconnect, device number 56 [ 730.453210][ T116] usb 3-1: Using ep0 maxpacket: 32 [ 730.463866][ T116] usb 3-1: config 0 interface 0 has no altsetting 0 [ 730.484694][ T116] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 730.494230][ T116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.510984][ T116] usb 3-1: Product: syz [ 730.522130][ T116] usb 3-1: Manufacturer: syz [ 730.528174][ T116] usb 3-1: SerialNumber: syz [ 730.545141][ T116] usb 3-1: config 0 descriptor?? [ 730.983702][ T116] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 731.191078][ T7514] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 731.205699][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 731.218516][ T52] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 731.431776][ T116] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 731.928490][ T7514] usb 4-1: Using ep0 maxpacket: 8 [ 731.935321][ T7514] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.945716][ T7514] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 731.951786][ T116] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 731.954995][ T7514] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.971210][ T10] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 731.978418][ T116] usb 3-1: USB disconnect, device number 71 [ 732.009942][ T7514] usb 4-1: config 0 descriptor?? [ 732.024795][ T7514] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 732.142253][ T10] usb 2-1: device descriptor read/64, error -71 [ 732.420213][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 732.569870][ T10] usb 2-1: device descriptor read/64, error -71 [ 732.577445][ T7514] gspca_vc032x: reg_r err -110 [ 732.586820][ T7514] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 732.709031][ T10] usb usb2-port1: attempt power cycle [ 733.564147][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 733.641120][ T10] usb 2-1: device descriptor read/8, error -71 [ 734.099996][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 734.349841][ T10] usb 2-1: device descriptor read/8, error -71 [ 734.395005][ T7514] usb 4-1: USB disconnect, device number 99 [ 734.478307][ T10] usb usb2-port1: unable to enumerate USB device [ 734.943291][ T30] audit: type=1326 audit(2000000308.326:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13453 comm="syz.1.1898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bc9d8f749 code=0x0 [ 738.616886][ T5875] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 738.869110][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1908'. [ 738.950434][T13481] macvlan2: entered promiscuous mode [ 738.956329][T13481] macvlan2: entered allmulticast mode [ 738.961727][T13481] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 738.996238][ T7186] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 739.038037][T13484] netlink: 'syz.1.1906': attribute type 10 has an invalid length. [ 739.046006][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1906'. [ 739.386182][ T7186] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 739.407982][ T7186] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 739.435105][ T7186] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 739.452162][ T7186] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 739.459797][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 739.481658][ T7186] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 739.567395][ T7186] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 739.587278][ T7186] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 739.604635][ T7186] usb 4-1: Product: syz [ 739.714588][ T7186] usb 4-1: Manufacturer: syz [ 739.724505][ T7186] cdc_wdm 4-1:1.0: skipping garbage [ 739.729841][ T7186] cdc_wdm 4-1:1.0: skipping garbage [ 739.736731][ T7186] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 739.742751][ T7186] cdc_wdm 4-1:1.0: Unknown control protocol [ 739.816884][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 739.831935][ T52] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 739.963511][ T7186] usb 4-1: USB disconnect, device number 100 [ 741.014348][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1913'. [ 744.557206][ T30] audit: type=1326 audit(2000000314.958:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13509 comm="syz.2.1915" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4658f749 code=0x0 [ 745.090182][ T10] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 745.382645][T12487] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 745.819767][T12487] usb 1-1: Using ep0 maxpacket: 32 [ 745.829821][T12487] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 745.840608][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.856110][T12487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.869998][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.888024][T12487] usb 1-1: config 0 descriptor?? [ 745.896662][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 745.987346][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 745.998462][T12487] gspca_main: sq930x-2.14.0 probing 041e:403c [ 746.048131][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.089548][ T10] usb 2-1: config 0 descriptor?? [ 746.563724][ T10] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 746.978916][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 747.000762][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1922'. [ 747.026061][ T30] audit: type=1400 audit(2000000319.794:1023): avc: denied { ioctl } for pid=13551 comm="syz.3.1927" path="socket:[40016]" dev="sockfs" ino=40016 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 747.055651][T12487] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 747.057446][T13553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.073691][T13553] bond0: (slave rose0): Enslaving as an active interface with an up link [ 747.099448][ T7186] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 747.147462][T12487] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 747.164557][T12487] usb 1-1: USB disconnect, device number 87 [ 747.313753][ T7186] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 747.324497][ T7186] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 747.336610][ T7186] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 747.345768][ T7186] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 747.357156][ T7186] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 747.370153][ T7186] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 747.380089][ T7186] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 747.388201][ T7186] usb 3-1: Product: syz [ 747.392611][ T7186] usb 3-1: Manufacturer: syz [ 747.401144][ T7186] cdc_wdm 3-1:1.0: skipping garbage [ 747.406438][ T7186] cdc_wdm 3-1:1.0: skipping garbage [ 747.412909][ T7186] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 747.418840][ T7186] cdc_wdm 3-1:1.0: Unknown control protocol [ 747.619503][T12487] usb 3-1: USB disconnect, device number 72 [ 748.298410][ T7186] usb 2-1: USB disconnect, device number 97 [ 749.497985][T13560] netlink: 'syz.3.1930': attribute type 27 has an invalid length. [ 749.580173][T13572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1935'. [ 749.805467][T12487] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 749.835481][ T7186] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 749.976670][T12487] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 750.003901][T12487] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 750.016965][ T7186] usb 2-1: Using ep0 maxpacket: 8 [ 750.023006][T12487] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 750.035750][T12487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.047334][ T7186] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 750.076986][T13570] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 750.088190][ T7186] usb 2-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.122602][ T7186] usb 2-1: config 0 interface 0 has no altsetting 0 [ 750.142709][ T7186] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 750.157731][ T7186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.188599][ T7186] usb 2-1: config 0 descriptor?? [ 750.203630][ T7186] qmi_wwan 2-1:0.0: bogus CDC Union: master=255, slave=255 [ 750.222459][ T7186] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 750.344132][T13570] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 750.358388][T13570] block device autoloading is deprecated and will be removed. [ 750.425959][T12487] usb 1-1: string descriptor 0 read error: -71 [ 750.433252][T13568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.441998][T12487] hub 1-1:32.0: USB hub found [ 750.444985][T13568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.448353][T12487] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 750.491854][T13568] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1932'. [ 750.537145][T13568] 9p: Bad value for 'rfdno' [ 750.553810][ T7186] usb 2-1: USB disconnect, device number 98 [ 750.591436][T12487] usb 1-1: USB disconnect, device number 88 [ 750.845621][T13589] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 750.854431][T13588] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 750.905308][T13588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 750.924630][T13589] bond4: (slave geneve2): making interface the new active one [ 750.935933][T13589] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 751.027766][ T30] audit: type=1400 audit(2000000323.536:1024): avc: denied { setopt } for pid=13585 comm="syz.3.1937" laddr=fe80::10 lport=40201 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 751.165685][T13589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.517369][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1943'. [ 754.010616][T13624] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1947'. [ 755.014678][T13638] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 755.022815][T13638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1950'. [ 755.541894][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 755.759891][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 755.781498][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.800184][ T10] usb 5-1: Product: syz [ 755.809327][ T10] usb 5-1: Manufacturer: syz [ 755.821958][ T10] usb 5-1: SerialNumber: syz [ 755.842810][ T10] usb 5-1: config 0 descriptor?? [ 756.075136][T13648] affs: No valid root block on device nullb0 [ 756.197138][T13634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.205904][T13634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.216609][ T52] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 756.216655][ T52] Bluetooth: hci3: Malformed LE Event: 0x02 [ 756.547021][T13651] kAFS: unable to lookup cell '({^@' [ 757.044008][ T10] usb-storage 5-1:0.0: USB Mass Storage device detected [ 757.152735][T13643] IPv6: NLM_F_CREATE should be specified when creating new route [ 757.168730][T13643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.372800][ T10] usb 5-1: USB disconnect, device number 57 [ 757.421677][ T30] audit: type=1326 audit(2000000005.500:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13645 comm="syz.2.1952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e4658f749 code=0x0 [ 759.098753][T13668] vti0: entered promiscuous mode [ 759.141466][T13668] syz.4.1957 (13668): /proc/13667/oom_adj is deprecated, please use /proc/13667/oom_score_adj instead. [ 759.475592][T13675] loop3: detected capacity change from 0 to 7 [ 759.482316][T13675] Dev loop3: unable to read RDB block 7 [ 759.487913][T13675] loop3: AHDI p3 p4 [ 759.491846][T13675] loop3: partition table partially beyond EOD, truncated [ 759.498969][T13675] loop3: p3 start 1702000233 is beyond EOD, truncated [ 760.151725][ T7514] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 760.336927][ T7514] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 760.358202][ T7514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.382119][ T7514] usb 3-1: Product: syz [ 760.386285][ T7514] usb 3-1: Manufacturer: syz [ 760.401918][ T7514] usb 3-1: SerialNumber: syz [ 760.413506][ T7514] usb 3-1: config 0 descriptor?? [ 760.660418][T13677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.669423][T13677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.680079][ T52] Bluetooth: hci4: unknown advertising packet type: 0x17 [ 760.680119][ T52] Bluetooth: hci4: Malformed LE Event: 0x02 [ 761.119979][ T7514] usb-storage 3-1:0.0: USB Mass Storage device detected [ 761.193667][ T7514] usb 3-1: USB disconnect, device number 73 [ 761.648398][ T7514] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 761.715656][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1973'. [ 761.821477][ T7514] usb 1-1: Using ep0 maxpacket: 8 [ 761.836783][ T7514] usb 1-1: config 159 interface 0 has no altsetting 0 [ 761.854818][T13725] loop3: detected capacity change from 0 to 7 [ 761.860872][ T7514] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=80.b9 [ 761.871074][T13725] Dev loop3: unable to read RDB block 7 [ 761.877635][T13725] loop3: AHDI p3 p4 [ 761.881559][T13725] loop3: partition table partially beyond EOD, truncated [ 761.881649][ T7514] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.888776][T13725] loop3: p3 start 1702000233 is beyond EOD, truncated [ 761.950583][ T7514] usb 1-1: Product: syz [ 761.954828][ T7514] usb 1-1: Manufacturer: syz [ 761.962012][ T7514] usb 1-1: SerialNumber: syz [ 762.247078][T13464] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 762.283746][ T7514] snd-usb-audio 1-1:159.0: probe with driver snd-usb-audio failed with error -22 [ 762.296861][ T7514] usb 1-1: USB disconnect, device number 89 [ 762.430632][T13464] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 762.471251][T13464] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 762.513641][T13464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 762.552157][T13464] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 762.630652][T13464] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.699671][ T30] audit: type=1326 audit(2000000010.476:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13731 comm="syz.3.1976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42c998f749 code=0x0 [ 762.902368][T13464] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 762.955060][T13464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.963176][T13464] usb 3-1: Product: syz [ 762.975767][T13464] usb 3-1: Manufacturer: syz [ 762.989582][T13464] usb 3-1: SerialNumber: syz [ 763.023559][T13464] usb 3-1: config 0 descriptor?? [ 763.052102][T13464] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input36 [ 763.186148][T13748] serio: Serial port ttyS3 [ 763.420027][ T7514] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 763.482125][ T30] audit: type=1400 audit(2000000011.206:1027): avc: denied { setattr } for pid=13727 comm="syz.2.1974" path="socket:[41099]" dev="sockfs" ino=41099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 763.506834][T13464] usb 3-1: USB disconnect, device number 74 [ 763.604888][ T7514] usb 4-1: Using ep0 maxpacket: 16 [ 763.623571][ T7514] usb 4-1: config 6 has an invalid interface number: 201 but max is 2 [ 763.638357][ T7514] usb 4-1: config 6 has an invalid interface number: 99 but max is 2 [ 763.666735][ T7514] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 763.678341][ T7514] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 763.687814][ T7514] usb 4-1: config 6 has no interface number 0 [ 763.698636][ T7514] usb 4-1: config 6 has no interface number 1 [ 763.712841][ T7514] usb 4-1: config 6 interface 201 altsetting 242 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 763.741053][ T7514] usb 4-1: config 6 interface 201 altsetting 242 endpoint 0xF has an invalid bInterval 134, changing to 11 [ 763.755370][ T7514] usb 4-1: config 6 interface 201 altsetting 242 has a duplicate endpoint with address 0xD, skipping [ 763.768134][ T7514] usb 4-1: config 6 interface 201 altsetting 242 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 763.780926][ T7514] usb 4-1: config 6 interface 201 altsetting 242 endpoint 0x84 has an invalid bInterval 171, changing to 11 [ 763.798232][ T7514] usb 4-1: config 6 interface 201 altsetting 242 endpoint 0x84 has invalid maxpacket 59309, setting to 1024 [ 763.812174][ T7514] usb 4-1: config 6 interface 201 altsetting 242 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 763.824018][ T7514] usb 4-1: config 6 interface 201 altsetting 242 has a duplicate endpoint with address 0x4, skipping [ 763.836759][ T7514] usb 4-1: config 6 interface 201 altsetting 242 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 763.852628][ T7514] usb 4-1: config 6 interface 201 altsetting 242 has a duplicate endpoint with address 0x7, skipping [ 763.864194][ T7514] usb 4-1: config 6 interface 201 altsetting 242 has a duplicate endpoint with address 0xC, skipping [ 763.875637][ T7514] usb 4-1: config 6 interface 201 altsetting 242 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 763.911443][ T7514] usb 4-1: config 6 interface 99 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.935743][ T7514] usb 4-1: config 6 interface 201 has no altsetting 0 [ 763.957489][ T7514] usb 4-1: config 6 interface 99 has no altsetting 0 [ 763.966373][ T7514] usb 4-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=ef.fc [ 763.976054][ T7514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.987878][ T7514] usb 4-1: Product: М [ 763.997241][ T7514] usb 4-1: Manufacturer: ⯲䔰츆ஏ蟇턧妡/믺㣯쓷Ꙩ쬓ᝉ桶휕縴䞟拱輷飚ޖ낭ዷ첦좜㣑纄で퐿澒䈝찌篶䩨癝ᾔ趾玤䞋 [ 764.065611][ T7514] usb 4-1: SerialNumber: syz [ 764.082860][T13741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 764.314816][ T7514] sierra 4-1:6.201: Sierra USB modem converter detected [ 764.330817][ T7514] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 764.341955][ T7514] usb 4-1: Sierra USB modem converter now attached to ttyUSB1 [ 764.352569][ T7514] usb 4-1: Sierra USB modem converter now attached to ttyUSB2 [ 764.363161][ T7514] usb 4-1: Sierra USB modem converter now attached to ttyUSB3 [ 764.386289][ T7514] sierra 4-1:6.99: Sierra USB modem converter detected [ 764.395848][ T10] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 764.405536][ T7514] usb 4-1: Sierra USB modem converter now attached to ttyUSB4 [ 764.416968][ T7514] usb 4-1: USB disconnect, device number 101 [ 764.433378][ T7514] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 764.454214][ T7514] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 764.465978][ T7514] sierra ttyUSB2: Sierra USB modem converter now disconnected from ttyUSB2 [ 764.479838][ T7514] sierra ttyUSB3: Sierra USB modem converter now disconnected from ttyUSB3 [ 764.490000][ T7514] sierra 4-1:6.201: device disconnected [ 764.499567][ T7514] sierra ttyUSB4: Sierra USB modem converter now disconnected from ttyUSB4 [ 764.512414][ T7514] sierra 4-1:6.99: device disconnected [ 764.566878][T12951] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 764.576298][ T10] usb 1-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 764.587272][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 764.611109][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 764.621613][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.637777][ T10] usb 1-1: config 0 descriptor?? [ 764.647143][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 764.786724][T12951] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 764.805676][T12951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.814662][T12951] usb 5-1: Product: syz [ 764.818844][T12951] usb 5-1: Manufacturer: syz [ 764.823752][T12951] usb 5-1: SerialNumber: syz [ 764.829948][T12951] usb 5-1: config 0 descriptor?? [ 765.054311][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.659072][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.678001][ T52] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 765.678041][ T52] Bluetooth: hci3: Malformed LE Event: 0x02 [ 766.087241][T12951] usb-storage 5-1:0.0: USB Mass Storage device detected [ 766.433690][ T7186] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 766.570802][ T7186] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 766.598279][T12951] usb 5-1: USB disconnect, device number 58 [ 766.610870][T13787] loop3: detected capacity change from 0 to 7 [ 766.617620][T13787] Dev loop3: unable to read RDB block 7 [ 766.623573][T13787] loop3: AHDI p3 p4 [ 766.627479][T13787] loop3: partition table partially beyond EOD, truncated [ 766.635125][T13787] loop3: p3 start 1702000233 is beyond EOD, truncated [ 766.794875][T13789] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1988'. [ 766.826457][T13789] netlink: 'syz.4.1988': attribute type 6 has an invalid length. [ 766.859242][T13789] netlink: 'syz.4.1988': attribute type 5 has an invalid length. [ 766.886258][T13789] netlink: 'syz.4.1988': attribute type 4 has an invalid length. [ 766.924552][T13792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1989'. [ 767.819179][ T7186] usb 1-1: USB disconnect, device number 90 [ 768.727785][T13830] serio: Serial port ttyS3 [ 770.126786][ T30] audit: type=1400 audit(2000000017.426:1028): avc: denied { create } for pid=13823 comm="syz.4.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 770.222329][T12951] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 770.243672][ T30] audit: type=1400 audit(2000000017.529:1029): avc: denied { getopt } for pid=13823 comm="syz.4.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 770.447148][ T30] audit: type=1400 audit(2000000017.632:1030): avc: denied { set_context_mgr } for pid=13823 comm="syz.4.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 770.770534][T12951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 770.780471][T12951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 49262, setting to 1024 [ 770.812822][T12951] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 770.821985][T12951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.842380][T12951] usb 1-1: Product: syz [ 770.846639][T12951] usb 1-1: Manufacturer: syz [ 770.851244][T12951] usb 1-1: SerialNumber: syz [ 770.879722][T12951] usb 1-1: config 0 descriptor?? [ 770.911961][T12951] usb 1-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress b5 [ 771.567270][T13856] loop3: detected capacity change from 0 to 7 [ 771.589793][T13857] vlan2: entered promiscuous mode [ 771.628341][T13856] Dev loop3: unable to read RDB block 7 [ 771.633971][T13856] loop3: AHDI p3 p4 [ 771.637997][T13856] loop3: partition table partially beyond EOD, truncated [ 771.645322][T13856] loop3: p3 start 1702000233 is beyond EOD, truncated [ 771.905518][T12951] usb 1-1: USB disconnect, device number 91 [ 772.205049][T13866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2005'. [ 772.373121][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 772.382875][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.389342][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 774.177860][T13464] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 774.414880][T13464] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 774.456021][T13464] usb 1-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 774.478547][T13464] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 774.495072][T13464] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.550497][T13464] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 774.562361][T13464] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 774.585474][T13464] usb 1-1: Product: syz [ 774.589886][T13464] usb 1-1: Manufacturer: syz [ 775.256125][T13464] cdc_wdm 1-1:1.0: skipping garbage [ 775.267009][T13464] cdc_wdm 1-1:1.0: skipping garbage [ 775.275910][T13464] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 775.501415][ T10] usb 1-1: USB disconnect, device number 92 [ 777.015237][ T30] audit: type=1400 audit(2000000023.862:1031): avc: denied { ioctl } for pid=13903 comm="syz.2.2017" path="socket:[41338]" dev="sockfs" ino=41338 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 777.064015][ T30] audit: type=1400 audit(2000000023.862:1032): avc: denied { setopt } for pid=13903 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 777.115151][T13916] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 777.127329][T13916] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 777.135751][T13916] CPU: 1 UID: 0 PID: 13916 Comm: syz.1.2018 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.146689][T13916] Tainted: [L]=SOFTLOCKUP [ 777.150998][T13916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 777.161655][T13916] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 777.167409][T13916] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 777.187201][T13916] RSP: 0018:ffffc9000215fae0 EFLAGS: 00010202 [ 777.193525][T13916] RAX: dffffc0000000000 RBX: ffff88805a1c94b0 RCX: ffffc9000ea8e000 [ 777.201490][T13916] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 777.209470][T13916] RBP: ffff88805a1c9548 R08: 0000000000000005 R09: 0000000000000000 [ 777.217440][T13916] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff9200042bf6b [ 777.225704][T13916] R13: 0000000000000000 R14: ffff88807c11b5c0 R15: 0000000000000038 [ 777.233849][T13916] FS: 00007f0bcaca56c0(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 777.242793][T13916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.249720][T13916] CR2: 000000110c25cdf8 CR3: 000000007d5b2000 CR4: 00000000003526f0 [ 777.257685][T13916] Call Trace: [ 777.260954][T13916] [ 777.263872][T13916] __kernfs_new_node+0x7b4/0x990 [ 777.268812][T13916] ? __pfx___kernfs_new_node+0x10/0x10 [ 777.274266][T13916] ? find_held_lock+0x2b/0x80 [ 777.278941][T13916] ? kernfs_root+0xee/0x2a0 [ 777.283436][T13916] kernfs_new_node+0x13c/0x1e0 [ 777.288189][T13916] ? kasan_save_track+0x14/0x30 [ 777.293033][T13916] kernfs_create_dir_ns+0x4c/0x1a0 [ 777.298146][T13916] cgroup_mkdir+0x40f/0x12e0 [ 777.302727][T13916] ? __pfx_cgroup_mkdir+0x10/0x10 [ 777.307739][T13916] kernfs_iop_mkdir+0x111/0x190 [ 777.312579][T13916] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 777.317603][T13916] vfs_mkdir+0x731/0xb60 [ 777.321836][T13916] do_mkdirat+0x442/0x5e0 [ 777.326162][T13916] ? __pfx_do_mkdirat+0x10/0x10 [ 777.331002][T13916] ? strncpy_from_user+0x203/0x2e0 [ 777.336106][T13916] ? getname_flags.part.0+0x1c5/0x550 [ 777.341469][T13916] __x64_sys_mkdir+0xef/0x140 [ 777.346145][T13916] do_syscall_64+0xcd/0xf80 [ 777.350638][T13916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.356516][T13916] RIP: 0033:0x7f0bc9d8f749 [ 777.360917][T13916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.380514][T13916] RSP: 002b:00007f0bcaca5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 777.388911][T13916] RAX: ffffffffffffffda RBX: 00007f0bc9fe6180 RCX: 00007f0bc9d8f749 [ 777.396866][T13916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 777.405018][T13916] RBP: 00007f0bc9e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 777.412971][T13916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.420932][T13916] R13: 00007f0bc9fe6218 R14: 00007f0bc9fe6180 R15: 00007ffd836a49e8 [ 777.428911][T13916] [ 777.431928][T13916] Modules linked in: [ 777.436499][T13916] ---[ end trace 0000000000000000 ]--- [ 777.453362][ T30] audit: type=1400 audit(2000000023.955:1033): avc: denied { add_name } for pid=13910 comm="syz.1.2018" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 777.460564][T13917] netlink: 'syz.4.2020': attribute type 2 has an invalid length. [ 777.486418][ T30] audit: type=1400 audit(2000000023.955:1034): avc: denied { create } for pid=13910 comm="syz.1.2018" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 777.507073][ T30] audit: type=1400 audit(2000000023.955:1035): avc: denied { associate } for pid=13910 comm="syz.1.2018" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 777.533326][ T30] audit: type=1400 audit(2000000024.264:1036): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 777.542048][T13916] RIP: 0010:simple_xattrs_free+0x60/0x1e0 [ 777.561225][T13916] Code: ea 03 80 3c 02 00 0f 85 8b 01 00 00 49 c7 45 00 00 00 00 00 e8 21 9c 75 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 56 01 00 00 48 bd 00 00 00 00 00 fc ff df 49 8b [ 777.613923][ T30] audit: type=1400 audit(2000000024.273:1037): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.616427][T13916] RSP: 0018:ffffc9000215fae0 EFLAGS: 00010202 [ 777.642607][T13916] RAX: dffffc0000000000 RBX: ffff88805a1c94b0 RCX: ffffc9000ea8e000 [ 777.655641][T13916] RDX: 0000000000000007 RSI: ffffffff82494a6f RDI: 0000000000000038 [ 777.676734][T13916] RBP: ffff88805a1c9548 R08: 0000000000000005 R09: 0000000000000000 [ 777.688298][ T30] audit: type=1400 audit(2000000024.273:1038): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.715935][T13916] R10: 00000000ffffffea R11: ffffffff8b77814d R12: 1ffff9200042bf6b [ 777.728468][ T30] audit: type=1400 audit(2000000024.273:1039): avc: denied { add_name } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.763546][T13920] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 777.846982][T13916] R13: 0000000000000000 R14: ffff88807c11b5c0 R15: 0000000000000038 [ 777.878009][ T30] audit: type=1400 audit(2000000024.273:1040): avc: denied { create } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 777.930306][T13916] FS: 00007f0bcaca56c0(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 777.998793][T13916] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.030707][T13916] CR2: 00002000002fb030 CR3: 000000007d5b2000 CR4: 00000000003526f0 [ 778.044451][T13916] Kernel panic - not syncing: Fatal exception [ 778.050823][T13916] Kernel Offset: disabled [ 778.055214][T13916] Rebooting in 86400 seconds..