last executing test programs: 8.944121369s ago: executing program 2 (id=1851): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, &(0x7f0000000280)=0x7fff, 0x4a) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x6, 0x600082) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000001c0)={0x5, "908dccdb075f6cc1d20f6109ff26718d2d2ec729d59ae67876b15279c877eca8a748f0469796f80a3948ee9294b5f20caed4ae47f14ebdef79550440bfa6b3f3", {0x1, 0x56f}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff03) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000280)={[0x1000, 0x4000, 0xeeefe000, 0xdddd0000], 0x8, 0xc, 0x7}) ioctl$int_out(r0, 0x5462, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x25fffffc, 0xcffffff, 0x2}) 8.857200435s ago: executing program 2 (id=1852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000014020000000089907800000000ffffffff"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000380)={0x0, 0x2, 0xe98, 0x0, 0x100}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000580)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000800)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000900)=[{r4}], 0x1, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 8.100056375s ago: executing program 0 (id=1853): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, &(0x7f0000000280)=0x7fff, 0x4a) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x6, 0x600082) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000001c0)={0x5, "908dccdb075f6cc1d20f6109ff26718d2d2ec729d59ae67876b15279c877eca8a748f0469796f80a3948ee9294b5f20caed4ae47f14ebdef79550440bfa6b3f3", {0x1, 0x56f}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0xff03) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000280)={[0x1000, 0x4000, 0xeeefe000, 0xdddd0000], 0x8, 0xc, 0x7}) ioctl$int_out(r0, 0x5462, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000080)={0x25fffffc, 0xcffffff, 0x2}) 8.02433234s ago: executing program 0 (id=1854): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x8, 0x2f, 0xe2}]}) epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) keyctl$read(0xb, r5, &(0x7f0000000040)=""/61, 0x3d) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 7.490082304s ago: executing program 2 (id=1855): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x8, 0x2f, 0xe2}]}) epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) keyctl$read(0xb, r5, &(0x7f0000000040)=""/61, 0x3d) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 7.381055378s ago: executing program 1 (id=1856): clock_gettime(0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000340)=0x80000006, 0x4) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24000005) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000400)={0xffffffffffffffb0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x74, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) ioprio_set$uid(0x3, 0x0, 0x2007) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x100}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) r7 = fsopen(&(0x7f0000000600)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x8) unlinkat(r8, &(0x7f0000000640)='./bus\x00', 0x200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) 5.962798564s ago: executing program 3 (id=1857): syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="a2b800d5c0943c2f1a8ae857cbbd", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x4, 0x0, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0x46}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8000, 0x9, 0x14, 0x33}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, [0xa, 0x2, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x4, 0x1, {0x8, 0x25, 0x1, 0x2, 0x30, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x4, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x9, 0x9, {0x8, 0x25, 0x1, 0x0, 0x30, 0x7f, 0x2}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xa, 0x6, 0x2, 0x40, 0x4}, 0xd0, &(0x7f0000000100)={0x5, 0xf, 0xd0, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x8, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x6, 0xf0f, 0x3, [0xc000, 0xffc00f, 0x3ff0, 0xc14f, 0x3f, 0xc00f]}, @generic={0x65, 0x10, 0x3, "8799926543eb04477038fd70b7ea69f5ac334ab8ac351017749a2863d345d1f7457dec628aca9e95a326d734960ddabb016bea4df3aa46f49b4e4e3835aa01dfe2ac8892b0b1b53007cc1b909a4be35e2c6ba9c75e6ee588c49ee96c0e046e4a3c2e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x1, 0x401}, @generic={0x2e, 0x10, 0x2, "fcbbb8e784c4826f0ee943b607d61f8aa1c5dbee42b84f524d64e31ff63e1746fce4ef3571e946b8c847c5"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x443}}]}) setns(0xc9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setownex(r4, 0xf, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r5, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000b060102000000000000e2ff0600000084000880100007800c10028008000140ac1414aa0c00078008001c4000000008100007800c00184000000000000000021c0007801800168014000240ff01"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, r6, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) 5.753698216s ago: executing program 1 (id=1858): accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) setns(0xc9, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r9, &(0x7f0000000100)='file read @etc/passwd /xec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) r10 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r10, 0x541b, &(0x7f0000000000)=0x2) 5.521349554s ago: executing program 1 (id=1859): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x14000846}, 0x4000084) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r4 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/176, 0x0, 0xffff1000}) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000800)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000880)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000008c0)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000900)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 4.636606534s ago: executing program 0 (id=1860): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, &(0x7f0000000280)=0x7fff, 0x4a) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x6, 0x600082) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000001c0)={0x5, "908dccdb075f6cc1d20f6109ff26718d2d2ec729d59ae67876b15279c877eca8a748f0469796f80a3948ee9294b5f20caed4ae47f14ebdef79550440bfa6b3f3", {0x1, 0x56f}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff03) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000280)={[0x1000, 0x4000, 0xeeefe000, 0xdddd0000], 0x8, 0xc, 0x7}) ioctl$int_out(r0, 0x5462, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000080)={0x25fffffc, 0xcffffff, 0x2}) 4.480791498s ago: executing program 1 (id=1861): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x8, 0x2f, 0xe2}]}) epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) keyctl$read(0xb, r5, &(0x7f0000000040)=""/61, 0x3d) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 4.34121409s ago: executing program 0 (id=1862): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000014020000000089907800000000ffffffff"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000380)={0x0, 0x2, 0xe98, 0x0, 0x100}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000580)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000800)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000900)=[{r3}], 0x1, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 4.31691909s ago: executing program 2 (id=1863): syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="a2b800d5c0943c2f1a8ae857cbbd", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x4, 0x0, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0x46}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8000, 0x9, 0x14, 0x33}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, [0xa, 0x2, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x4, 0x1, {0x8, 0x25, 0x1, 0x2, 0x30, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x4, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x9, 0x9, {0x8, 0x25, 0x1, 0x0, 0x30, 0x7f, 0x2}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xa, 0x6, 0x2, 0x40, 0x4}, 0xd0, &(0x7f0000000100)={0x5, 0xf, 0xd0, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x8, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x6, 0xf0f, 0x3, [0xc000, 0xffc00f, 0x3ff0, 0xc14f, 0x3f, 0xc00f]}, @generic={0x65, 0x10, 0x3, "8799926543eb04477038fd70b7ea69f5ac334ab8ac351017749a2863d345d1f7457dec628aca9e95a326d734960ddabb016bea4df3aa46f49b4e4e3835aa01dfe2ac8892b0b1b53007cc1b909a4be35e2c6ba9c75e6ee588c49ee96c0e046e4a3c2e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x1, 0x401}, @generic={0x2e, 0x10, 0x2, "fcbbb8e784c4826f0ee943b607d61f8aa1c5dbee42b84f524d64e31ff63e1746fce4ef3571e946b8c847c5"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x443}}]}) setns(0xc9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setownex(r4, 0xf, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r5, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000b060102000000000000e2ff0600000084000880100007800c10028008000140ac1414aa0c00078008001c4000000008100007800c00184000000000000000021c0007801800168014000240ff01"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, r6, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) 4.020193465s ago: executing program 3 (id=1864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x60, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000014020000000089907800000000ffffffff"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000380)={0x0, 0x2, 0xe98, 0x0, 0x100}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000580)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x200001, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000800)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000900)=[{r3}], 0x1, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 3.676905186s ago: executing program 2 (id=1865): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x8, 0x2f, 0xe2}]}) epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) keyctl$read(0xb, r5, &(0x7f0000000040)=""/61, 0x3d) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255, 0x0, r6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 3.406684254s ago: executing program 0 (id=1866): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, &(0x7f0000000280)=0x7fff, 0x4a) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x6, 0x600082) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000001c0)={0x5, "908dccdb075f6cc1d20f6109ff26718d2d2ec729d59ae67876b15279c877eca8a748f0469796f80a3948ee9294b5f20caed4ae47f14ebdef79550440bfa6b3f3", {0x1, 0x56f}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$EXT4_IOC_MIGRATE(r5, 0xff03) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES8=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000280)={[0x1000, 0x4000, 0xeeefe000, 0xdddd0000], 0x8, 0xc, 0x7}) ioctl$int_out(r0, 0x5462, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000080)={0x25fffffc, 0xcffffff, 0x2}) 3.074672301s ago: executing program 3 (id=1867): clock_gettime(0x7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000340)=0x80000006, 0x4) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x24000005) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000400)={0xffffffffffffffb0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)={0x74, r4, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_FAMILY={0x5, 0xd, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4011) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) ioprio_set$uid(0x3, 0x0, 0x2007) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r5, 0x100}, &(0x7f0000000280)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)) r7 = fsopen(&(0x7f0000000600)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x8) unlinkat(r8, &(0x7f0000000640)='./bus\x00', 0x200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) 3.066998384s ago: executing program 0 (id=1875): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1, 0x8, 0x2f, 0xe2}]}) epoll_create1(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x81800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) execveat(r1, 0x0, 0x0, 0x0, 0x1000) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000140)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r4) keyctl$read(0xb, r5, &(0x7f0000000040)=""/61, 0x3d) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000682000/0x4000)=nil, 0xa) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x3, 0x10000002, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0xffffffc, 0x2cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc92, 0x800, 0x1, 0x287, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x100, 0x1, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) 1.345610723s ago: executing program 1 (id=1868): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f0000001080)) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x8100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff00090000000008004500005c0000000000119078000000000000000000001b590048907803000000030000004b3f7633015aff9fa5e73369ed3ed4f938752184f1af202914ef0f501fd4f4fc0d232b48a86ef0222fb6364766977f816acb8f5114"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000740)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x18015) r2 = socket$inet6(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000880)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x3c, 0x3, 0x1234, 0x5678, 0x1, 0x1000, "05200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"}}, 0x154) write$UHID_DESTROY(r3, &(0x7f0000000a00), 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000640)={0x18, 0x0, {0x4001, @local, 'hsr0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca", 0x15, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x72}, {{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001240)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003840)=[{&(0x7f0000000b40)=""/217, 0xd9}, {&(0x7f0000000080)=""/6, 0x6}], 0x2, &(0x7f0000000180)=""/116, 0x74}, 0x2}, {{&(0x7f0000001400)=@generic, 0x80, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000001580)=""/67, 0x43}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000001480)=""/190, 0xbe}, {&(0x7f0000000a40)=""/200, 0xc8}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000d40)=""/104, 0x68}], 0x7}, 0x4}, {{&(0x7f0000003640)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001040)}], 0x1, &(0x7f0000003740)=""/204, 0xcc}, 0x5}], 0x5, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) 1.345299s ago: executing program 3 (id=1869): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000}, 0x38) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x14000846}, 0x4000084) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000005c0)={0x1, 0x0, 0x0, &(0x7f0000000600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) r4 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/176, 0x0, 0xffff1000}) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000800)={0x0, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000880)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000008c0)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000900)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 250.030696ms ago: executing program 1 (id=1870): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e040108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100ac1e010108000200e0000002080007400000000008000840000000001c00188008"], 0x88}}, 0x0) r1 = msgget$private(0x0, 0x193) msgsnd(r1, &(0x7f0000000040)=ANY=[], 0x8, 0x0) fsopen(&(0x7f0000000040)='proc\x00', 0x1) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f000016f000/0x2000)=nil, 0x2000, 0x1000009, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000400)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x99a, 0x1, 0x1, 0x45, 0x3, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000004c0)={[0x60000000000, 0xd4, 0xfffffffffffffff9, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x15, 0x7fff, 0x3, 0x400000000, 0x200, 0xffff], 0x80a0000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x94}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f0000001dc0), 0xb, 0x100) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r8, 0xc25c4111, &(0x7f0000001e00)={0x6, [[0x13, 0xde, 0x6, 0x7, 0x9, 0xd6, 0x1, 0x9], [0xfffffffd, 0x6, 0xfffffffd, 0x9, 0x10001, 0x3, 0x80000000, 0x3ff], [0x2, 0x25b, 0x4, 0x3, 0x6, 0x3, 0x0, 0x2]], '\x00', [{0x8, 0x80000000}, {0x9, 0x0, 0x1, 0x1, 0x1}, {0x7fff00, 0xa, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x40}, {0x4, 0x7, 0x0, 0x1, 0x1}, {0x5, 0x5, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0xb}, {0x80000000, 0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x40, 0x4, 0x1, 0x1, 0x1}, {0xb, 0x7, 0x1, 0x1, 0x1}, {0xae42, 0x0, 0x0, 0x0, 0x1}, {0x7ff, 0xb, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x3}) io_uring_register$IORING_UNREGISTER_NAPI(r3, 0x1c, 0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$pppoe(r2, &(0x7f0000002080)={0x18, 0x0, {0x4001, @local, 'hsr0\x00'}}, 0x1e) syz_open_dev$loop(&(0x7f00000020c0), 0xf01c, 0x0) 204.50555ms ago: executing program 3 (id=1871): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, &(0x7f0000000280)=0x7fff, 0x4a) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x6, 0x600082) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f00000001c0)={0x5, "908dccdb075f6cc1d20f6109ff26718d2d2ec729d59ae67876b15279c877eca8a748f0469796f80a3948ee9294b5f20caed4ae47f14ebdef79550440bfa6b3f3", {0x1, 0x56f}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000001000), 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES8=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633"], 0x6f4}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f0000000280)={[0x1000, 0x4000, 0xeeefe000, 0xdddd0000], 0x8, 0xc, 0x7}) ioctl$int_out(r0, 0x5462, &(0x7f00000002c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000080)={0x25fffffc, 0xcffffff, 0x2}) 109.709467ms ago: executing program 2 (id=1872): syz_usb_connect(0x3, 0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="a2b800d5c0943c2f1a8ae857cbbd", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) syz_usb_connect$uac2(0x0, 0x95, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x4, 0x0, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0xb, 0x20, 0x46}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8000, 0x9, 0x14, 0x33}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, [0xa, 0x2, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x4, 0x1, {0x8, 0x25, 0x1, 0x2, 0x30, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x4, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x9, 0x9, {0x8, 0x25, 0x1, 0x0, 0x30, 0x7f, 0x2}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xa, 0x6, 0x2, 0x40, 0x4}, 0xd0, &(0x7f0000000100)={0x5, 0xf, 0xd0, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x8, 0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x6, 0xf0f, 0x3, [0xc000, 0xffc00f, 0x3ff0, 0xc14f, 0x3f, 0xc00f]}, @generic={0x65, 0x10, 0x3, "8799926543eb04477038fd70b7ea69f5ac334ab8ac351017749a2863d345d1f7457dec628aca9e95a326d734960ddabb016bea4df3aa46f49b4e4e3835aa01dfe2ac8892b0b1b53007cc1b909a4be35e2c6ba9c75e6ee588c49ee96c0e046e4a3c2e"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x1, 0x401}, @generic={0x2e, 0x10, 0x2, "fcbbb8e784c4826f0ee943b607d61f8aa1c5dbee42b84f524d64e31ff63e1746fce4ef3571e946b8c847c5"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x443}}]}) setns(0xc9, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setownex(r4, 0xf, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r5, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000b060102000000000000e2ff0600000084000880100007800c10028008000140ac1414aa0c00078008001c4000000008100007800c00184000000000000000021c0007801800168014000240ff01"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r8 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, r6, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) 0s ago: executing program 3 (id=1873): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000780)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000800)={0x2020}, 0x2020) getresgid(&(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002900), 0x2, 0x0) write(r2, &(0x7f0000002a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,ctrl_loss_tmo=1', 0xb0) sendmmsg$unix(r0, &(0x7f0000002a80), 0x0, 0x40040) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000340)="e078959c89a4b474656e41a5e3edb74dfa47b1028697fb0900d4330000000086aa808a1f795eb9af66ffe2457261458be303db005df44896d80c000000000000d66a2d50bddee164c9b573e96f60cdf23a47c85cdd6be05a976f4295cd5eee7cd2054863d03dc64072fe42a3a135aa6e2502d06016ea179baa236384a615aab60ea1b18cd04f9d1358090000000000000001d9e4d2df000000000000", 0x9c, 0xfffffffffffffffb) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @multicast1}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0xfffffffffffffebe, &(0x7f0000000400)=[@in={0x2, 0x4a25, @rand_addr=0x64010100}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000480)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000540)=0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x3}, &(0x7f0000000640)=0x90) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) kernel console output (not intermixed with test programs): cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=614092 res=0 errno=0 [ 482.625303][ T42] audit: type=1800 audit(1792501474.782:5299): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=614114 res=0 errno=0 [ 482.635766][ T58] usb 6-1: config 0 descriptor?? [ 482.643250][T12709] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 482.645408][ T58] usb 6-1: selecting invalid altsetting 0 [ 484.365605][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 484.365625][ T42] audit: type=1800 audit(1792501476.522:5311): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=614328 res=0 errno=0 [ 484.482612][ T42] audit: type=1326 audit(1792501476.642:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12717 comm="syz.2.1479" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efec code=0x0 [ 484.584491][T12729] syzkaller0: entered promiscuous mode [ 484.584506][T12729] syzkaller0: entered allmulticast mode [ 484.588564][T12729] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1481'. [ 484.783753][T12735] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1483'. [ 484.993244][ T2320] usb 6-1: USB disconnect, device number 54 [ 485.212562][T12739] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.330472][ T42] audit: type=1800 audit(1792501477.492:5313): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1484" name="remove" dev="sysfs" ino=605352 res=0 errno=0 [ 485.372235][T12739] lo speed is unknown, defaulting to 1000 [ 485.420994][ T42] audit: type=1800 audit(1792501477.582:5314): pid=12742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1484" name="rescan" dev="sysfs" ino=820 res=0 errno=0 [ 485.535500][T12739] pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint [ 485.548101][T12739] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f] [ 485.548311][T12739] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff] [ 485.548772][T12739] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 485.586982][ T42] audit: type=1800 audit(1792501477.742:5315): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=618319 res=0 errno=0 [ 485.654446][T12739] pci 0000:00:03.0: Adding to iommu group 3 [ 485.770345][ T42] audit: type=1800 audit(1792501477.932:5316): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=618334 res=0 errno=0 [ 485.781259][T12739] pci 0000:00:03.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 485.784498][T12739] pci 0000:00:03.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 485.784830][T12739] pci 0000:00:03.0: BAR 0 [io 0x2000-0x201f]: assigned [ 485.812373][ T42] audit: type=1800 audit(1792501477.972:5317): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=618394 res=0 errno=0 [ 485.866146][ T2320] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 485.932475][ T42] audit: type=1800 audit(1792501478.092:5318): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=618421 res=0 errno=0 [ 486.036125][ T2320] usb 6-1: Using ep0 maxpacket: 32 [ 486.036648][ T2320] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 486.042224][ T2320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.042237][ T2320] usb 6-1: Product: syz [ 486.042244][ T2320] usb 6-1: Manufacturer: syz [ 486.042251][ T2320] usb 6-1: SerialNumber: syz [ 486.052601][ T42] audit: type=1800 audit(1792501478.212:5319): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=618457 res=0 errno=0 [ 486.054159][ T42] audit: type=1800 audit(1792501478.212:5320): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=618489 res=0 errno=0 [ 486.294860][ T2320] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 486.299035][ T2320] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 486.324861][ T2320] usb 6-1: USB disconnect, device number 55 [ 486.421831][ T7573] udevd[7573]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.576443][T12757] syzkaller0: entered promiscuous mode [ 486.576458][T12757] syzkaller0: entered allmulticast mode [ 486.578514][T12757] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1487'. [ 487.007177][T12773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1490'. [ 487.325991][ T6223] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 487.453705][T12783] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.466723][T12782] netlink: 'syz.2.1493': attribute type 30 has an invalid length. [ 487.476790][ T6223] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 487.477811][ T6223] usb 5-1: config index 0 descriptor too short (expected 65445, got 45) [ 487.479813][ T6223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.479845][ T6223] usb 5-1: Product: syz [ 487.479858][ T6223] usb 5-1: Manufacturer: syz [ 487.479871][ T6223] usb 5-1: SerialNumber: syz [ 487.763343][T12765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 487.817671][ T6223] rtl8150 5-1:1.0: couldn't reset the device [ 487.818080][ T6223] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 487.821418][ T6223] usb 5-1: USB disconnect, device number 52 [ 488.105667][T12787] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1494'. [ 488.846186][ T58] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 489.006427][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 489.007841][ T58] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.007860][ T58] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 489.007872][ T58] usb 5-1: config 0 interface 0 has no altsetting 0 [ 489.009692][ T58] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 489.009737][ T58] usb 5-1: Product: syz [ 489.009745][ T58] usb 5-1: Manufacturer: syz [ 489.009752][ T58] usb 5-1: SerialNumber: syz [ 489.011064][ T58] usb 5-1: config 0 descriptor?? [ 489.011578][T12798] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 489.013626][ T58] usb 5-1: selecting invalid altsetting 0 [ 490.221845][ T42] kauditd_printk_skb: 114 callbacks suppressed [ 490.221860][ T42] audit: type=1326 audit(1792501482.382:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.1.1501" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 490.535964][ T58] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 490.686216][ T58] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 490.688135][ T58] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.688151][ T58] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 490.688163][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 490.690606][ T58] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 490.690620][ T58] usb 6-1: Product: syz [ 490.690650][ T58] usb 6-1: Manufacturer: syz [ 490.690659][ T58] usb 6-1: SerialNumber: syz [ 490.692564][ T58] usb 6-1: config 0 descriptor?? [ 490.695230][ T42] audit: type=1800 audit(1792501482.852:5436): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=619382 res=0 errno=0 [ 490.695235][T12810] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 490.695263][ T42] audit: type=1800 audit(1792501482.852:5437): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=619414 res=0 errno=0 [ 490.695282][ T42] audit: type=1800 audit(1792501482.852:5438): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=619389 res=0 errno=0 [ 490.695543][ T42] audit: type=1800 audit(1792501482.852:5439): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=619390 res=0 errno=0 [ 490.697551][ T58] usb 6-1: selecting invalid altsetting 0 [ 490.730781][ T42] audit: type=1800 audit(1792501482.892:5440): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=619411 res=0 errno=0 [ 490.736067][ T42] audit: type=1800 audit(1792501482.892:5441): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=619412 res=0 errno=0 [ 490.743187][ T42] audit: type=1800 audit(1792501482.902:5442): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=619391 res=0 errno=0 [ 490.750457][ T42] audit: type=1800 audit(1792501482.912:5443): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=619413 res=0 errno=0 [ 490.770708][ T42] audit: type=1800 audit(1792501482.932:5444): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=619434 res=0 errno=0 [ 491.198273][T12814] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1502'. [ 491.247826][T12817] netlink: 'syz.2.1504': attribute type 30 has an invalid length. [ 491.336643][T12820] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1503'. [ 491.336659][T12820] openvswitch: netlink: Message has 512 unknown bytes. [ 491.440909][ T2320] usb 5-1: USB disconnect, device number 53 [ 491.828683][T12826] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1506'. [ 491.986239][T12828] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1507'. [ 492.128718][T12836] rxe_eth0 speed is unknown, defaulting to 1000 [ 492.273194][T12836] lo speed is unknown, defaulting to 1000 [ 492.955932][ T58] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 493.118381][ T5821] usb 6-1: USB disconnect, device number 56 [ 493.130073][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 493.131393][ T58] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.131417][ T58] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 493.131482][ T58] usb 5-1: config 0 interface 0 has no altsetting 0 [ 493.166021][ T58] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 493.169696][ T58] usb 5-1: Product: syz [ 493.169713][ T58] usb 5-1: Manufacturer: syz [ 493.169726][ T58] usb 5-1: SerialNumber: syz [ 493.185524][ T58] usb 5-1: config 0 descriptor?? [ 493.187035][T12850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 493.331513][ T58] usb 5-1: selecting invalid altsetting 0 [ 494.305629][ T6223] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 494.456412][ T6223] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 494.460118][ T6223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.460132][ T6223] usb 6-1: Product: syz [ 494.460140][ T6223] usb 6-1: Manufacturer: syz [ 494.460147][ T6223] usb 6-1: SerialNumber: syz [ 494.473110][ T6223] usb 6-1: USB2VGA dongle found at address 57 [ 494.474289][ T6223] usb 6-1: Allocated 8 output buffers [ 494.538121][T12862] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1516'. [ 494.590543][T12864] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1517'. [ 494.702380][T12860] netlink: 'syz.1.1515': attribute type 30 has an invalid length. [ 494.750864][T12869] netlink: 'syz.3.1518': attribute type 3 has an invalid length. [ 494.759533][ T6223] usb 6-1: Failed to early initialize device [ 494.765202][ T6223] usb 6-1: USB disconnect, device number 57 [ 495.506935][T12874] fuse: Unknown parameter 'fd0x0000000000000003' [ 495.656046][ T6223] usb 5-1: USB disconnect, device number 54 [ 496.287867][ T42] kauditd_printk_skb: 232 callbacks suppressed [ 496.287907][ T42] audit: type=1800 audit(1792501488.413:5677): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=624438 res=0 errno=0 [ 496.469787][T12877] 9p: Bad value for 'version' [ 496.970126][T12892] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1526'. [ 497.400341][T12897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.475449][ T6223] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 497.627235][ T6223] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 497.628411][ T6223] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 497.633051][ T6223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.633072][ T6223] usb 6-1: SerialNumber: ࠌ [ 497.655251][ T42] audit: type=1800 audit(1792501489.813:5678): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=624463 res=0 errno=0 [ 497.656795][ T42] audit: type=1800 audit(1792501489.823:5679): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=624493 res=0 errno=0 [ 497.657265][ T42] audit: type=1800 audit(1792501489.823:5680): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=624470 res=0 errno=0 [ 497.658038][ T42] audit: type=1800 audit(1792501489.823:5681): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=624471 res=0 errno=0 [ 497.658578][ T42] audit: type=1800 audit(1792501489.823:5682): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=624472 res=0 errno=0 [ 497.900147][T12894] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1527'. [ 497.980643][ T6223] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 498.013735][ T42] audit: type=1800 audit(1792501490.173:5683): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=624492 res=0 errno=0 [ 498.014847][ T6223] usb 6-1: USB disconnect, device number 58 [ 498.026827][ T42] audit: type=1800 audit(1792501490.193:5684): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=624639 res=0 errno=0 [ 498.029850][ T42] audit: type=1800 audit(1792501490.193:5685): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=624618 res=0 errno=0 [ 498.030621][ T42] audit: type=1800 audit(1792501490.193:5686): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=624538 res=0 errno=0 [ 498.061530][ T7573] udevd[7573]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.175338][ T5821] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 499.327339][ T5821] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 499.329438][ T5821] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 499.329489][ T5821] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 499.329536][ T5821] usb 6-1: config 0 interface 0 has no altsetting 0 [ 499.340051][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 499.340099][ T5821] usb 6-1: Product: syz [ 499.340170][ T5821] usb 6-1: Manufacturer: syz [ 499.340286][ T5821] usb 6-1: SerialNumber: syz [ 499.350258][ T5821] usb 6-1: config 0 descriptor?? [ 499.351812][T12913] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 499.363392][ T5821] usb 6-1: selecting invalid altsetting 0 [ 499.678209][T12920] ip6erspan0: entered allmulticast mode [ 499.887699][T12929] netlink: 'syz.0.1532': attribute type 3 has an invalid length. [ 501.012346][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.776530][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 501.776549][ T42] audit: type=1800 audit(1792501493.943:5709): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1534" name="bus" dev="ramfs" ino=46295 res=0 errno=0 [ 501.806326][ T5821] usb 6-1: USB disconnect, device number 59 [ 502.492446][T12940] rxe_eth0 speed is unknown, defaulting to 1000 [ 502.513777][T12939] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 502.514076][T12939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.514252][T12939] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 502.514412][T12939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 502.575397][ T42] audit: type=1800 audit(1792501494.733:5710): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=626749 res=0 errno=0 [ 502.649894][T12940] lo speed is unknown, defaulting to 1000 [ 502.809057][ T42] audit: type=1800 audit(1792501494.973:5711): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=628919 res=0 errno=0 [ 502.984379][T12950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 503.807242][ T42] audit: type=1326 audit(1792501495.973:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12958 comm="syz.2.1548" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efec code=0x0 [ 504.297712][T12965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1541'. [ 504.516696][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 504.516747][ T5098] Bluetooth: hci2: command 0x0c1a tx timeout [ 504.519813][T12227] Bluetooth: hci3: command 0x0c1a tx timeout [ 504.525069][T12227] Bluetooth: hci0: command 0x2016 tx timeout [ 504.555126][ T58] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 504.705003][ T58] usb 6-1: Using ep0 maxpacket: 8 [ 504.705758][ T58] usb 6-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 504.706671][ T58] usb 6-1: config 2 has an invalid interface number: 31 but max is 0 [ 504.706706][ T58] usb 6-1: config 2 has no interface number 0 [ 504.706740][ T58] usb 6-1: config 2 interface 31 has no altsetting 0 [ 504.708739][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.708760][ T58] usb 6-1: Product: syz [ 504.708773][ T58] usb 6-1: Manufacturer: syz [ 504.708788][ T58] usb 6-1: SerialNumber: syz [ 504.872913][ T42] audit: type=1800 audit(1792501496.973:5713): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=628954 res=0 errno=0 [ 504.879944][ T42] audit: type=1800 audit(1792501496.973:5714): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=628986 res=0 errno=0 [ 504.885075][ T42] audit: type=1800 audit(1792501496.983:5715): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=628961 res=0 errno=0 [ 504.893911][ T42] audit: type=1800 audit(1792501496.983:5716): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=628962 res=0 errno=0 [ 505.375193][ T5821] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 505.455664][ T42] audit: type=1800 audit(1792501497.623:5717): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=629062 res=0 errno=0 [ 505.535094][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 505.537645][ T5821] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 505.540146][ T5821] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 505.540168][ T5821] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.540185][ T5821] usb 5-1: config 0 has no interface number 0 [ 505.540307][ T5821] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 505.544569][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.544589][ T5821] usb 5-1: Product: syz [ 505.544604][ T5821] usb 5-1: Manufacturer: syz [ 505.544680][ T5821] usb 5-1: SerialNumber: syz [ 505.552105][ T5821] usb 5-1: config 0 descriptor?? [ 505.552528][ T42] audit: type=1800 audit(1792501497.713:5718): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=629084 res=0 errno=0 [ 505.562021][ T5821] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input73 [ 505.703121][ T58] ch9200 6-1:2.31: probe with driver ch9200 failed with error -22 [ 505.705970][ T58] usb 6-1: USB disconnect, device number 60 [ 505.783498][T12972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.791475][T12972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.838957][T12972] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1543'. [ 505.876428][T12980] comedi comedi2: dt2814: I/O base address or length out of range [ 505.938567][T12981] tipc: Enabling of bearer rejected, already enabled [ 506.075404][ T41] usb 5-1: USB disconnect, device number 55 [ 506.965369][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 506.965382][ T42] audit: type=1326 audit(1792501499.133:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12996 comm="syz.2.1551" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efec code=0x0 [ 507.078500][ T42] audit: type=1800 audit(1792501499.243:5748): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=629290 res=0 errno=0 [ 507.699857][ T42] audit: type=1326 audit(1792501499.863:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.1.1552" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 507.896671][ T42] audit: type=1804 audit(1792501500.033:5750): pid=13019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1546" name="/newroot/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=120 res=1 errno=0 [ 507.984847][ T2320] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 508.146129][ T2320] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 508.146982][ T2320] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.146999][ T2320] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 508.147011][ T2320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 508.148835][ T2320] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 508.148847][ T2320] usb 6-1: Product: syz [ 508.148855][ T2320] usb 6-1: Manufacturer: syz [ 508.148862][ T2320] usb 6-1: SerialNumber: syz [ 508.167384][ T42] audit: type=1800 audit(1792501500.333:5751): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=629317 res=0 errno=0 [ 508.169620][ T42] audit: type=1800 audit(1792501500.333:5752): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=629349 res=0 errno=0 [ 508.169663][ T42] audit: type=1800 audit(1792501500.333:5753): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=629324 res=0 errno=0 [ 508.169698][ T42] audit: type=1800 audit(1792501500.333:5754): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=629325 res=0 errno=0 [ 508.227429][ T2320] usb 6-1: config 0 descriptor?? [ 508.227993][T13015] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 508.230931][ T2320] usb 6-1: selecting invalid altsetting 0 [ 508.525037][ T42] audit: type=1800 audit(1792501500.693:5755): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=629346 res=0 errno=0 [ 508.525748][ T42] audit: type=1800 audit(1792501500.693:5756): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=629347 res=0 errno=0 [ 508.771393][T13025] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1553'. [ 509.094885][ T2320] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 509.244745][ T2320] usb 5-1: Using ep0 maxpacket: 32 [ 509.246869][ T2320] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 509.247870][ T2320] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 509.247891][ T2320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.247907][ T2320] usb 5-1: config 0 has no interface number 0 [ 509.247938][ T2320] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 509.250153][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.250174][ T2320] usb 5-1: Product: syz [ 509.250186][ T2320] usb 5-1: Manufacturer: syz [ 509.250199][ T2320] usb 5-1: SerialNumber: syz [ 509.252992][ T2320] usb 5-1: config 0 descriptor?? [ 509.319535][ T2320] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input74 [ 509.471266][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.471481][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.474168][T13029] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1554'. [ 509.529183][T13044] tipc: Enabling of bearer rejected, already enabled [ 509.565736][ T5850] usb 5-1: USB disconnect, device number 56 [ 510.530415][ T2320] usb 6-1: USB disconnect, device number 61 [ 514.447482][T13061] fuse: fd is not a fuse device [ 514.451340][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 514.451401][ T42] audit: type=1804 audit(1792501506.614:5797): pid=13061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1562" name="file0" dev="tmpfs" ino=3123 res=1 errno=0 [ 514.462288][ T42] audit: type=1800 audit(1792501506.624:5798): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=629824 res=0 errno=0 [ 514.502892][T13062] syzkaller0: entered promiscuous mode [ 514.502913][T13062] syzkaller0: entered allmulticast mode [ 514.507915][T13062] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1563'. [ 515.068376][ T42] audit: type=1326 audit(1792501507.234:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.0.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 515.068416][ T42] audit: type=1326 audit(1792501507.234:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.0.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 515.069234][ T42] audit: type=1326 audit(1792501507.234:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.0.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744efec code=0x7ffc0000 [ 515.069668][ T42] audit: type=1326 audit(1792501507.234:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.0.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 515.069691][ T42] audit: type=1326 audit(1792501507.234:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.0.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 515.070533][ T42] audit: type=1326 audit(1792501507.234:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.0.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf744efec code=0x7ffc0000 [ 515.070556][ T42] audit: type=1326 audit(1792501507.234:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.0.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 515.070576][ T42] audit: type=1326 audit(1792501507.234:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13078 comm="syz.0.1566" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efec code=0x7ffc0000 [ 515.304419][ T2320] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 515.475015][ T2320] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 515.481828][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.481845][ T2320] usb 5-1: Product: syz [ 515.481852][ T2320] usb 5-1: Manufacturer: syz [ 515.481859][ T2320] usb 5-1: SerialNumber: syz [ 515.535355][ T2320] usb 5-1: USB2VGA dongle found at address 57 [ 515.541343][ T2320] usb 5-1: Allocated 8 output buffers [ 515.794567][ T8985] usb 8-1: Failed to early initialize device [ 515.820162][ T8985] usb 8-1: USB disconnect, device number 45 [ 516.014221][T13079] netlink: 'syz.0.1566': attribute type 30 has an invalid length. [ 516.213884][ T2320] usb 5-1: Failed to early initialize device [ 516.250820][ T2320] usb 5-1: USB disconnect, device number 57 [ 516.777392][T13100] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1578'. [ 517.941959][T13125] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1575'. [ 517.986358][T13118] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1574'. [ 518.305034][T12227] Bluetooth: hci2: unexpected event for opcode 0x2028 [ 519.174265][ T29] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 519.331524][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 519.334603][ T29] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 519.334805][ T29] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 519.334870][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 519.339386][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 519.339449][ T29] usb 5-1: Product: syz [ 519.339461][ T29] usb 5-1: Manufacturer: syz [ 519.339474][ T29] usb 5-1: SerialNumber: syz [ 519.342473][ T29] usb 5-1: config 0 descriptor?? [ 519.346614][T13139] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 519.364331][ T29] usb 5-1: selecting invalid altsetting 0 [ 519.466204][ T42] kauditd_printk_skb: 105 callbacks suppressed [ 519.466224][ T42] audit: type=1800 audit(1792501511.634:5912): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=630800 res=0 errno=0 [ 519.472077][ T42] audit: type=1800 audit(1792501511.634:5913): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="pcm_class" dev="sysfs" ino=630817 res=0 errno=0 [ 519.920911][ T42] audit: type=1326 audit(1792501512.084:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13161 comm="syz.1.1582" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 520.068696][ T42] audit: type=1326 audit(1792501512.234:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13159 comm="syz.2.1583" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efec code=0x0 [ 520.091574][ T42] audit: type=1800 audit(1792501512.254:5916): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=630974 res=0 errno=0 [ 520.923011][ T42] audit: type=1800 audit(1792501513.084:5917): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=566887 res=0 errno=0 [ 520.923788][ T42] audit: type=1800 audit(1792501513.084:5918): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=566866 res=0 errno=0 [ 520.961099][T13183] [U]  [ 521.033147][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1584'. [ 521.073697][T13188] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1585'. [ 521.490668][ T5850] usb 5-1: USB disconnect, device number 58 [ 521.748604][ T42] audit: type=1326 audit(1792501513.914:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13191 comm="syz.0.1586" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744efec code=0x0 [ 522.034193][ T5850] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 522.047668][T13196] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1587'. [ 522.194904][ T5850] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 522.209116][ T5850] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 522.209135][ T5850] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 522.209146][ T5850] usb 5-1: config 0 interface 0 has no altsetting 0 [ 522.296695][T13199] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1588'. [ 522.325423][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 522.325438][ T5850] usb 5-1: Product: syz [ 522.325445][ T5850] usb 5-1: Manufacturer: syz [ 522.325487][ T5850] usb 5-1: SerialNumber: syz [ 522.326632][ T5850] usb 5-1: config 0 descriptor?? [ 522.327300][T13193] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 522.402790][ T42] audit: type=1800 audit(1792501514.534:5920): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=631001 res=0 errno=0 [ 522.403029][ T42] audit: type=1800 audit(1792501514.534:5921): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=631033 res=0 errno=0 [ 522.418639][ T5850] usb 5-1: selecting invalid altsetting 0 [ 524.197223][T13243] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1595'. [ 524.327898][T13247] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1596'. [ 524.387144][T13251] 9p: Bad value for 'version' [ 524.419343][T13253] bond0 (unregistering): Released all slaves [ 524.502581][T13253] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 524.502608][T13253] Error validating options; rc = [-22] [ 524.509795][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 524.509813][ T42] audit: type=1804 audit(1792501516.674:5942): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1598" name="/newroot/337/file0" dev="tmpfs" ino=1937 res=1 errno=0 [ 524.731051][ T5850] usb 5-1: USB disconnect, device number 59 [ 525.547194][ T42] audit: type=1800 audit(1792501517.714:5943): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=631391 res=0 errno=0 [ 526.030991][T13275] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1604'. [ 526.227613][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1603'. [ 526.230208][T13280] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 526.248939][T13280] team0 (unregistering): Port device team_slave_0 removed [ 526.250437][T13280] team0 (unregistering): Port device team_slave_1 removed [ 526.324113][T13282] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1605'. [ 526.553275][ T42] audit: type=1800 audit(1792501518.714:5944): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=631627 res=0 errno=0 [ 526.889522][ T42] audit: type=1326 audit(1792501519.054:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13298 comm="syz.1.1609" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 526.906337][T13303] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1610'. [ 527.203766][ T2320] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 527.254314][ T42] audit: type=1326 audit(1792501519.424:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.3.1611" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb6fec code=0x0 [ 527.365083][ T2320] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 527.366319][ T2320] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.366345][ T2320] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 527.366366][ T2320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 527.368649][ T2320] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 527.368667][ T2320] usb 6-1: Product: syz [ 527.368679][ T2320] usb 6-1: Manufacturer: syz [ 527.368691][ T2320] usb 6-1: SerialNumber: syz [ 527.370739][ T2320] usb 6-1: config 0 descriptor?? [ 527.371483][T13301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.371669][ T42] audit: type=1800 audit(1792501519.534:5947): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=631662 res=0 errno=0 [ 527.377292][ T2320] usb 6-1: selecting invalid altsetting 0 [ 527.377626][ T42] audit: type=1800 audit(1792501519.544:5948): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=631694 res=0 errno=0 [ 527.378422][ T42] audit: type=1800 audit(1792501519.544:5949): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=631669 res=0 errno=0 [ 527.379118][ T42] audit: type=1800 audit(1792501519.544:5950): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=631670 res=0 errno=0 [ 527.411516][ T42] audit: type=1800 audit(1792501519.574:5951): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=631691 res=0 errno=0 [ 527.553987][ T58] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 527.694105][T13322] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1614'. [ 527.714199][ T58] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 527.715967][ T58] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.716008][ T58] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 527.716021][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 527.717737][ T58] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 527.717772][ T58] usb 8-1: Product: syz [ 527.717781][ T58] usb 8-1: Manufacturer: syz [ 527.717788][ T58] usb 8-1: SerialNumber: syz [ 527.722990][ T58] usb 8-1: config 0 descriptor?? [ 527.723515][T13309] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 527.728652][ T58] usb 8-1: selecting invalid altsetting 0 [ 528.805804][T13362] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1618'. [ 528.940648][T13367] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1620'. [ 529.769341][ T6223] usb 6-1: USB disconnect, device number 62 [ 529.919398][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 529.919417][ T42] audit: type=1800 audit(1792501522.084:5985): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1621" name="bus" dev="ramfs" ino=49446 res=0 errno=0 [ 530.236035][ T29] usb 8-1: USB disconnect, device number 46 [ 530.537600][ T42] audit: type=1800 audit(1792501522.704:5986): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=632086 res=0 errno=0 [ 531.078132][T13393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1627'. [ 532.346665][T13420] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1633'. [ 532.513024][ T42] audit: type=1326 audit(1792501524.675:5987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13415 comm="syz.1.1634" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 532.665452][ T42] audit: type=1800 audit(1792501524.835:5988): pid=13419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1631" name="bus" dev="ramfs" ino=49536 res=0 errno=0 [ 532.803427][ T5850] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 533.204271][ T5850] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 533.205170][ T5850] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 533.205187][ T5850] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 533.205238][ T5850] usb 6-1: config 0 interface 0 has no altsetting 0 [ 533.206933][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 533.206945][ T5850] usb 6-1: Product: syz [ 533.206952][ T5850] usb 6-1: Manufacturer: syz [ 533.206959][ T5850] usb 6-1: SerialNumber: syz [ 533.208231][ T5850] usb 6-1: config 0 descriptor?? [ 533.208759][T13426] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 533.210327][ T42] audit: type=1800 audit(1792501525.375:5989): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=632220 res=0 errno=0 [ 533.210360][ T42] audit: type=1800 audit(1792501525.375:5990): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=632252 res=0 errno=0 [ 533.210379][ T42] audit: type=1800 audit(1792501525.375:5991): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=632227 res=0 errno=0 [ 533.210787][ T5850] usb 6-1: selecting invalid altsetting 0 [ 533.217281][ T42] audit: type=1800 audit(1792501525.375:5992): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=632228 res=0 errno=0 [ 533.247774][ T42] audit: type=1800 audit(1792501525.415:5993): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=632249 res=0 errno=0 [ 533.247804][ T42] audit: type=1800 audit(1792501525.415:5994): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=632250 res=0 errno=0 [ 533.840938][T13454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1640'. [ 534.342994][ T5850] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 534.493778][ T5850] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 534.494733][ T5850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.496989][ T5850] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 534.497001][ T5850] usb 5-1: Product: syz [ 534.497009][ T5850] usb 5-1: Manufacturer: syz [ 534.497016][ T5850] usb 5-1: SerialNumber: syz [ 534.498457][ T5850] usb 5-1: config 0 descriptor?? [ 534.500918][ T5850] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 534.501134][ T5850] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 534.501165][ T5850] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 88 [ 534.501898][ T5850] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 534.509341][ T5850] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 534.511629][ T5850] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 534.514320][ T5850] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 534.515489][ T5850] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 534.518198][ T5850] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 534.519486][ T5850] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 534.522086][ T5850] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 534.704873][T13449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1639'. [ 534.981950][ T29] usb 5-1: USB disconnect, device number 60 [ 534.996653][ T29] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 535.003046][ T29] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 535.014618][ T29] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 535.022395][ T29] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 535.035015][ T29] keyspan 5-1:0.0: device disconnected [ 535.070214][T13474] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1643'. [ 535.295685][ T58] usb 6-1: USB disconnect, device number 63 [ 535.494323][T13488] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1647'. [ 536.232184][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 536.232223][ T42] audit: type=1800 audit(1792501528.395:6031): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=632634 res=0 errno=0 [ 536.582744][ T42] audit: type=1800 audit(1792501528.745:6032): pid=13491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1645" name="bus" dev="ramfs" ino=48784 res=0 errno=0 [ 538.486824][ T42] audit: type=1326 audit(1792501530.655:6033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13520 comm="syz.2.1655" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efec code=0x0 [ 538.578998][T13530] syzkaller0: entered promiscuous mode [ 538.579018][T13530] syzkaller0: entered allmulticast mode [ 538.581746][T13530] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1654'. [ 539.073899][T13538] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 539.074260][T13538] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 539.074384][T13538] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 539.074717][T13538] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 539.580312][T13551] file system registered [ 540.789893][ T5746] ffs_data_put(): freeing [ 541.153138][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 541.153166][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 541.153183][ T67] Bluetooth: hci0: command 0x2016 tx timeout [ 541.153228][T12227] Bluetooth: hci3: command 0x0c1a tx timeout [ 541.586897][ T42] audit: type=1800 audit(1792501533.755:6034): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1660" name="bus" dev="ramfs" ino=49892 res=0 errno=0 [ 542.235175][T13591] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1665'. [ 543.656267][ T42] audit: type=1326 audit(1792501535.825:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.3.1667" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb6fec code=0x0 [ 544.842887][ T2320] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 544.843610][ T42] audit: type=1326 audit(1792501537.015:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13609 comm="syz.0.1669" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744efec code=0x0 [ 544.991418][ T42] audit: type=1326 audit(1792501537.155:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13615 comm="syz.1.1671" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 544.993338][ T2320] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 544.995251][ T2320] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 544.995300][ T2320] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 544.995313][ T2320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 544.997173][ T2320] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 544.997187][ T2320] usb 8-1: Product: syz [ 544.997227][ T2320] usb 8-1: Manufacturer: syz [ 544.997235][ T2320] usb 8-1: SerialNumber: syz [ 544.998751][ T2320] usb 8-1: config 0 descriptor?? [ 544.999912][T13604] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 545.001567][ T42] audit: type=1800 audit(1792501537.165:6038): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=632853 res=0 errno=0 [ 545.001593][ T42] audit: type=1800 audit(1792501537.165:6039): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=632885 res=0 errno=0 [ 545.007563][ T42] audit: type=1800 audit(1792501537.165:6040): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=632860 res=0 errno=0 [ 545.008247][ T42] audit: type=1800 audit(1792501537.175:6041): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=632861 res=0 errno=0 [ 545.009257][ T2320] usb 8-1: selecting invalid altsetting 0 [ 545.043255][ T42] audit: type=1800 audit(1792501537.215:6042): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=632882 res=0 errno=0 [ 545.043917][ T42] audit: type=1800 audit(1792501537.215:6043): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=632883 res=0 errno=0 [ 545.222783][ T58] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 545.322789][ T2320] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 545.373940][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 545.386938][ T58] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.387022][ T58] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 545.387121][ T58] usb 5-1: config 0 interface 0 has no altsetting 0 [ 545.405225][ T58] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 545.405241][ T58] usb 5-1: Product: syz [ 545.405248][ T58] usb 5-1: Manufacturer: syz [ 545.405256][ T58] usb 5-1: SerialNumber: syz [ 545.409569][ T58] usb 5-1: config 0 descriptor?? [ 545.416918][T13613] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 545.421441][ T58] usb 5-1: selecting invalid altsetting 0 [ 545.488001][ T2320] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 545.493801][ T2320] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 545.493868][ T2320] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 545.493890][ T2320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 545.497037][ T2320] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 545.497058][ T2320] usb 6-1: Product: syz [ 545.497071][ T2320] usb 6-1: Manufacturer: syz [ 545.497083][ T2320] usb 6-1: SerialNumber: syz [ 545.500445][ T2320] usb 6-1: config 0 descriptor?? [ 545.501175][T13617] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 545.507310][ T2320] usb 6-1: selecting invalid altsetting 0 [ 546.985101][ T2320] usb 8-1: USB disconnect, device number 47 [ 547.234177][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 547.234246][ T42] audit: type=1800 audit(1792501539.405:6095): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=633497 res=0 errno=0 [ 547.248283][T13670] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1676'. [ 547.809249][ T2320] usb 5-1: USB disconnect, device number 61 [ 548.076957][ T5850] usb 6-1: USB disconnect, device number 64 [ 548.409314][ T42] audit: type=1800 audit(1792501540.575:6096): pid=13691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1678" name="bus" dev="ramfs" ino=49976 res=0 errno=0 [ 548.603107][ T42] audit: type=1326 audit(1792501540.775:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13697 comm="syz.1.1682" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 548.912568][ T2320] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 549.063702][ T2320] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 549.065179][ T2320] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.065207][ T2320] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 549.065229][ T2320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 549.067217][ T2320] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 549.067237][ T2320] usb 6-1: Product: syz [ 549.067253][ T2320] usb 6-1: Manufacturer: syz [ 549.067267][ T2320] usb 6-1: SerialNumber: syz [ 549.121114][ T2320] usb 6-1: config 0 descriptor?? [ 549.122288][T13700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 549.135234][ T42] audit: type=1800 audit(1792501541.295:6098): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=633631 res=0 errno=0 [ 549.135877][ T42] audit: type=1800 audit(1792501541.305:6099): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=633663 res=0 errno=0 [ 549.136693][ T42] audit: type=1800 audit(1792501541.305:6100): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=633638 res=0 errno=0 [ 549.137687][ T2320] usb 6-1: selecting invalid altsetting 0 [ 549.141273][ T42] audit: type=1800 audit(1792501541.305:6101): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=633639 res=0 errno=0 [ 549.234498][ T42] audit: type=1800 audit(1792501541.405:6102): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=633660 res=0 errno=0 [ 549.235519][ T42] audit: type=1800 audit(1792501541.405:6103): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=633661 res=0 errno=0 [ 549.236281][ T42] audit: type=1800 audit(1792501541.405:6104): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=633640 res=0 errno=0 [ 549.592430][ T58] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 549.783308][ T58] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 549.784676][ T58] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.784700][ T58] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 549.784718][ T58] usb 5-1: config 0 interface 0 has no altsetting 0 [ 549.787734][ T58] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 549.787752][ T58] usb 5-1: Product: syz [ 549.787764][ T58] usb 5-1: Manufacturer: syz [ 549.787776][ T58] usb 5-1: SerialNumber: syz [ 549.791010][ T58] usb 5-1: config 0 descriptor?? [ 549.792614][T13708] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 549.797369][ T58] usb 5-1: selecting invalid altsetting 0 [ 551.203866][T13745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1687'. [ 551.355099][T13750] bridge_slave_0: left allmulticast mode [ 551.355200][T13750] bridge_slave_0: left promiscuous mode [ 551.356332][T13750] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.368895][T13750] bridge_slave_1: left allmulticast mode [ 551.369091][T13750] bridge_slave_1: left promiscuous mode [ 551.374500][T13750] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.386138][T13750] bond0: (slave bond_slave_0): Releasing backup interface [ 551.398257][T13750] bond0: (slave bond_slave_1): Releasing backup interface [ 551.410677][T13750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.420329][T13750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.421177][T13750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 551.516163][ T6223] usb 6-1: USB disconnect, device number 65 [ 551.560369][T13750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1689'. [ 551.993759][ T2320] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 552.154902][ T2320] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 552.159013][ T2320] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.159031][ T2320] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 552.159043][ T2320] usb 6-1: config 0 interface 0 has no altsetting 0 [ 552.166189][ T2320] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 552.166203][ T2320] usb 6-1: Product: syz [ 552.166210][ T2320] usb 6-1: Manufacturer: syz [ 552.166218][ T2320] usb 6-1: SerialNumber: syz [ 552.174481][ T2320] usb 6-1: config 0 descriptor?? [ 552.220798][T13755] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 552.251460][ T2320] usb 6-1: selecting invalid altsetting 0 [ 552.353892][ T2320] usb 5-1: USB disconnect, device number 62 [ 552.444747][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 552.444792][ T42] audit: type=1800 audit(1792501544.606:6140): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=634225 res=0 errno=0 [ 552.444875][ T42] audit: type=1800 audit(1792501544.616:6141): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=634200 res=0 errno=0 [ 552.446280][ T42] audit: type=1800 audit(1792501544.616:6142): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=634201 res=0 errno=0 [ 552.454667][ T42] audit: type=1800 audit(1792501544.626:6143): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=634222 res=0 errno=0 [ 552.457257][ T42] audit: type=1800 audit(1792501544.626:6144): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=634223 res=0 errno=0 [ 552.459724][ T42] audit: type=1800 audit(1792501544.626:6145): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=634202 res=0 errno=0 [ 552.461175][ T42] audit: type=1800 audit(1792501544.626:6146): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=634224 res=0 errno=0 [ 552.485180][ T42] audit: type=1800 audit(1792501544.656:6147): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=634245 res=0 errno=0 [ 552.487201][ T42] audit: type=1800 audit(1792501544.656:6148): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=634264 res=0 errno=0 [ 552.491600][ T42] audit: type=1800 audit(1792501544.656:6149): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=634277 res=0 errno=0 [ 553.728712][T13801] syzkaller0: entered promiscuous mode [ 553.728739][T13801] syzkaller0: entered allmulticast mode [ 553.773350][T13801] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1697'. [ 554.020617][T13805] 9p: Bad value for 'version' [ 554.462889][ T2320] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 554.612866][ T2320] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 554.613787][ T2320] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 554.613804][ T2320] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 554.613850][ T2320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 554.638867][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 554.638884][ T2320] usb 5-1: Product: syz [ 554.638891][ T2320] usb 5-1: Manufacturer: syz [ 554.638899][ T2320] usb 5-1: SerialNumber: syz [ 554.640081][ T2320] usb 5-1: config 0 descriptor?? [ 554.647390][T13811] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 554.659907][ T2320] usb 5-1: selecting invalid altsetting 0 [ 554.860962][ T2320] usb 6-1: USB disconnect, device number 66 [ 555.137578][T13833] futex_wake_op: syz.2.1702 tries to shift op by 144; fix this program [ 555.450440][T13836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1703'. [ 557.063028][ T6223] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 557.136517][ T2320] usb 5-1: USB disconnect, device number 63 [ 557.223021][ T6223] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 557.224870][ T6223] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 557.224895][ T6223] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 557.224914][ T6223] usb 6-1: config 0 interface 0 has no altsetting 0 [ 557.248329][ T6223] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 557.248352][ T6223] usb 6-1: Product: syz [ 557.248364][ T6223] usb 6-1: Manufacturer: syz [ 557.248377][ T6223] usb 6-1: SerialNumber: syz [ 557.250998][ T6223] usb 6-1: config 0 descriptor?? [ 557.253245][T13850] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 557.260323][ T6223] usb 6-1: selecting invalid altsetting 0 [ 557.592034][ T42] kauditd_printk_skb: 49 callbacks suppressed [ 557.592059][ T42] audit: type=1800 audit(1792501549.756:6199): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=634833 res=0 errno=0 [ 557.602266][ T42] audit: type=1800 audit(1792501549.776:6200): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="pcm_class" dev="sysfs" ino=634850 res=0 errno=0 [ 558.214294][ T42] audit: type=1800 audit(1792501550.386:6201): pid=13855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1707" name="bus" dev="ramfs" ino=50161 res=0 errno=0 [ 558.477377][T13875] syzkaller0: entered promiscuous mode [ 558.477391][T13875] syzkaller0: entered allmulticast mode [ 558.479397][T13875] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1709'. [ 558.582489][T13882] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1711'. [ 558.582508][T13882] tc_dump_action: action bad kind [ 558.900208][T13893] syzkaller0: entered promiscuous mode [ 558.900234][T13893] syzkaller0: entered allmulticast mode [ 558.907500][T13894] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1713'. [ 559.065819][T13899] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1714'. [ 559.299597][ T42] audit: type=1326 audit(1792501551.466:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13900 comm="syz.2.1715" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efec code=0x0 [ 559.715377][ T2320] usb 6-1: USB disconnect, device number 67 [ 561.898635][ T42] audit: type=1800 audit(1792501554.066:6203): pid=13919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1718" name="bus" dev="ramfs" ino=52265 res=0 errno=0 [ 562.286225][ T42] audit: type=1800 audit(1792501554.456:6204): pid=13927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1719" name="bus" dev="ramfs" ino=52270 res=0 errno=0 [ 562.472309][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.090488][ T42] audit: type=1800 audit(1792501556.256:6205): pid=13952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1723" name="n_vclocks" dev="sysfs" ino=25623 res=0 errno=0 [ 564.164372][ T42] audit: type=1800 audit(1792501556.336:6206): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=635128 res=0 errno=0 [ 564.227088][ T42] audit: type=1800 audit(1792501556.396:6207): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="clock_name" dev="sysfs" ino=635132 res=0 errno=0 [ 564.241811][T13952] ptp ptp0: new virtual clock ptp2 [ 564.241825][T13952] ptp ptp0: guarantee physical clock free running [ 565.132041][ T42] audit: type=1326 audit(1792501557.306:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13956 comm="syz.2.1727" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efec code=0x0 [ 565.338347][T13962] syzkaller0: entered promiscuous mode [ 565.338370][T13962] syzkaller0: entered allmulticast mode [ 565.351979][T13962] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1728'. [ 567.771810][T13968] syzkaller0: entered promiscuous mode [ 567.771833][T13968] syzkaller0: entered allmulticast mode [ 567.772749][T13971] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1729'. [ 568.040991][ T2320] hid-sensor-hub 0003:1234:5678.0004: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 568.397298][ T42] audit: type=1326 audit(1792501560.567:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13993 comm="syz.2.1735" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf740efec code=0x0 [ 568.752844][T14004] fido_id[14004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 569.828841][ T42] audit: type=1326 audit(1792501561.997:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14016 comm="syz.1.1739" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 570.121386][ T6223] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 570.245427][ T42] audit: type=1326 audit(1792501562.417:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.3.1741" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb6fec code=0x0 [ 570.254205][ T42] audit: type=1326 audit(1792501562.427:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14024 comm="syz.0.1742" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744efec code=0x0 [ 570.271970][ T6223] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.272918][ T6223] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.272935][ T6223] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 570.272981][ T6223] usb 6-1: config 0 interface 0 has no altsetting 0 [ 570.276409][ T6223] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 570.276422][ T6223] usb 6-1: Product: syz [ 570.276429][ T6223] usb 6-1: Manufacturer: syz [ 570.276436][ T6223] usb 6-1: SerialNumber: syz [ 570.277653][ T6223] usb 6-1: config 0 descriptor?? [ 570.279368][T14018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 570.279674][ T42] audit: type=1800 audit(1792501562.447:6213): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=635521 res=0 errno=0 [ 570.281832][ T6223] usb 6-1: selecting invalid altsetting 0 [ 570.284760][ T42] audit: type=1800 audit(1792501562.457:6214): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=635553 res=0 errno=0 [ 570.286053][ T42] audit: type=1800 audit(1792501562.457:6215): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=635528 res=0 errno=0 [ 570.286084][ T42] audit: type=1800 audit(1792501562.457:6216): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=635529 res=0 errno=0 [ 570.304243][ T42] audit: type=1800 audit(1792501562.477:6217): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=635550 res=0 errno=0 [ 570.305813][ T42] audit: type=1800 audit(1792501562.477:6218): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=635551 res=0 errno=0 [ 570.307112][ T42] audit: type=1800 audit(1792501562.477:6219): pid=13991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=635530 res=0 errno=0 [ 570.541337][ T2320] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 570.561733][ T5848] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 570.692221][ T2320] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.693455][ T2320] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.693482][ T2320] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 570.693503][ T2320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.695884][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 570.695905][ T2320] usb 5-1: Product: syz [ 570.695941][ T2320] usb 5-1: Manufacturer: syz [ 570.695955][ T2320] usb 5-1: SerialNumber: syz [ 570.698619][ T2320] usb 5-1: config 0 descriptor?? [ 570.699511][T14027] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 570.703081][ T2320] usb 5-1: selecting invalid altsetting 0 [ 570.714891][ T5848] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.723084][ T5848] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.723139][ T5848] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 570.723211][ T5848] usb 8-1: config 0 interface 0 has no altsetting 0 [ 570.733307][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 570.733404][ T5848] usb 8-1: Product: syz [ 570.733498][ T5848] usb 8-1: Manufacturer: syz [ 570.733569][ T5848] usb 8-1: SerialNumber: syz [ 570.772328][ T5848] usb 8-1: config 0 descriptor?? [ 570.775066][T14026] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 570.808311][ T5848] usb 8-1: selecting invalid altsetting 0 [ 571.392582][T14037] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1744'. [ 572.735193][ T2320] usb 6-1: USB disconnect, device number 68 [ 573.062649][ T2320] usb 8-1: USB disconnect, device number 48 [ 573.189255][ T8985] usb 5-1: USB disconnect, device number 64 [ 573.377015][ T1257] Bluetooth: hci4: Frame reassembly failed (-84) [ 573.377352][ T1257] Bluetooth: hci4: Frame reassembly failed (-84) [ 573.377403][ T1257] Bluetooth: hci4: Frame reassembly failed (-84) [ 573.377450][ T1257] Bluetooth: hci4: Frame reassembly failed (-84) [ 573.377495][ T1257] Bluetooth: hci4: Frame reassembly failed (-84) [ 573.992258][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1749'. [ 575.001075][ T58] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 575.151046][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 575.151562][ T58] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 575.152514][ T58] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 575.152534][ T58] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 575.152552][ T58] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 575.152565][ T58] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 575.152579][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 575.154363][ T58] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 575.154376][ T58] usb 6-1: Product: syz [ 575.154383][ T58] usb 6-1: Manufacturer: syz [ 575.154391][ T58] usb 6-1: SerialNumber: syz [ 575.155864][ T58] usb 6-1: config 0 descriptor?? [ 575.156665][ T42] kauditd_printk_skb: 53 callbacks suppressed [ 575.156676][ T42] audit: type=1800 audit(1792501567.327:6273): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=636211 res=0 errno=0 [ 575.157578][ T58] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 575.158256][ T58] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 575.163221][ T42] audit: type=1800 audit(1792501567.337:6274): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=636243 res=0 errno=0 [ 575.164922][ T42] audit: type=1800 audit(1792501567.337:6275): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=636218 res=0 errno=0 [ 575.165623][ T42] audit: type=1800 audit(1792501567.337:6276): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=636219 res=0 errno=0 [ 575.168492][ T42] audit: type=1800 audit(1792501567.337:6277): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=636240 res=0 errno=0 [ 575.169635][ T42] audit: type=1800 audit(1792501567.337:6278): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=636241 res=0 errno=0 [ 575.174201][ T42] audit: type=1800 audit(1792501567.347:6279): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=636220 res=0 errno=0 [ 575.175699][ T42] audit: type=1800 audit(1792501567.347:6280): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=636242 res=0 errno=0 [ 575.380569][ T42] audit: type=1800 audit(1792501567.547:6281): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=636263 res=0 errno=0 [ 575.383186][ T42] audit: type=1800 audit(1792501567.557:6282): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=636280 res=0 errno=0 [ 575.394048][T12227] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 575.781479][ T8985] usb 6-1: USB disconnect, device number 69 [ 575.784607][ T8985] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 576.126844][T14091] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1755'. [ 576.741095][ T8985] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 576.891647][ T8985] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 576.892526][ T8985] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.892543][ T8985] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 576.892555][ T8985] usb 6-1: config 0 interface 0 has no altsetting 0 [ 576.895326][ T8985] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 576.895340][ T8985] usb 6-1: Product: syz [ 576.895381][ T8985] usb 6-1: Manufacturer: syz [ 576.895390][ T8985] usb 6-1: SerialNumber: syz [ 576.896667][ T8985] usb 6-1: config 0 descriptor?? [ 576.898647][T14096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 576.901884][ T8985] usb 6-1: selecting invalid altsetting 0 [ 577.050973][ T2320] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 577.187125][T14109] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1761'. [ 577.211442][ T2320] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 577.212409][ T2320] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.212426][ T2320] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 577.212438][ T2320] usb 8-1: config 0 interface 0 has no altsetting 0 [ 577.226700][ T2320] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 577.226714][ T2320] usb 8-1: Product: syz [ 577.226722][ T2320] usb 8-1: Manufacturer: syz [ 577.226763][ T2320] usb 8-1: SerialNumber: syz [ 577.227851][ T2320] usb 8-1: config 0 descriptor?? [ 577.228416][T14099] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 577.246777][ T2320] usb 8-1: selecting invalid altsetting 0 [ 577.294889][T14109] tipc: Enabling of bearer rejected, already enabled [ 578.330879][ T5850] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 578.573694][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 578.574419][ T5850] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 578.575245][ T5850] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 578.575258][ T5850] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.575268][ T5850] usb 5-1: config 0 has no interface number 0 [ 578.575285][ T5850] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 578.576835][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.576853][ T5850] usb 5-1: Product: syz [ 578.576866][ T5850] usb 5-1: Manufacturer: syz [ 578.576878][ T5850] usb 5-1: SerialNumber: syz [ 578.580085][ T5850] usb 5-1: config 0 descriptor?? [ 578.588722][ T5850] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input75 [ 578.806079][T14123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.806952][T14123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.812450][T14123] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1764'. [ 578.872541][T14133] tipc: Enabling of bearer rejected, already enabled [ 578.906155][ T41] usb 5-1: USB disconnect, device number 65 [ 579.324106][ T2320] usb 6-1: USB disconnect, device number 70 [ 579.399666][T14135] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1766'. [ 579.635316][ T2320] usb 8-1: USB disconnect, device number 49 [ 579.960937][ T58] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 580.121717][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 580.130350][ T58] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 580.139195][ T58] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 580.139816][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.139935][ T58] usb 5-1: config 0 has no interface number 0 [ 580.140360][ T58] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 580.155947][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.156252][ T58] usb 5-1: Product: syz [ 580.156503][ T58] usb 5-1: Manufacturer: syz [ 580.156864][ T58] usb 5-1: SerialNumber: syz [ 580.174273][ T58] usb 5-1: config 0 descriptor?? [ 580.183421][ T42] kauditd_printk_skb: 65 callbacks suppressed [ 580.183549][ T42] audit: type=1800 audit(1792501572.347:6348): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=637019 res=0 errno=0 [ 580.213399][ T42] audit: type=1800 audit(1792501572.387:6349): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=637051 res=0 errno=0 [ 580.214146][ T58] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input76 [ 580.238041][ T42] audit: type=1800 audit(1792501572.407:6350): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=637026 res=0 errno=0 [ 580.240401][ T42] audit: type=1800 audit(1792501572.407:6351): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=637027 res=0 errno=0 [ 580.273562][ T42] audit: type=1800 audit(1792501572.447:6352): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=637048 res=0 errno=0 [ 580.278677][ T42] audit: type=1800 audit(1792501572.447:6353): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=637049 res=0 errno=0 [ 580.300412][ T42] audit: type=1800 audit(1792501572.467:6354): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=637028 res=0 errno=0 [ 580.315570][ T42] audit: type=1800 audit(1792501572.487:6355): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=637050 res=0 errno=0 [ 580.331785][ T42] audit: type=1800 audit(1792501572.507:6356): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=637071 res=0 errno=0 [ 580.333592][ T42] audit: type=1800 audit(1792501572.507:6357): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=637090 res=0 errno=0 [ 580.410825][T14147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.411168][T14147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.425059][T14147] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1770'. [ 580.481599][T14155] tipc: Enabling of bearer rejected, already enabled [ 580.577593][ T2320] usb 5-1: USB disconnect, device number 66 [ 581.254852][T14161] ptp ptp0: guarantee physical clock free running [ 582.351199][ T41] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 582.533517][ T41] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 582.552389][ T41] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 582.552449][ T41] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 582.552549][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 582.582302][ T41] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 582.582402][ T41] usb 6-1: Product: syz [ 582.582500][ T41] usb 6-1: Manufacturer: syz [ 582.582567][ T41] usb 6-1: SerialNumber: syz [ 582.626671][ T41] usb 6-1: config 0 descriptor?? [ 582.629932][T14173] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 582.653443][ T41] usb 6-1: selecting invalid altsetting 0 [ 582.980590][ T58] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 583.140597][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 583.141172][ T58] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 583.142225][ T58] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 583.142239][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.142249][ T58] usb 5-1: config 0 has no interface number 0 [ 583.142266][ T58] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 583.144529][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.144548][ T58] usb 5-1: Product: syz [ 583.144560][ T58] usb 5-1: Manufacturer: syz [ 583.144572][ T58] usb 5-1: SerialNumber: syz [ 583.148764][ T58] usb 5-1: config 0 descriptor?? [ 583.158282][ T58] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input77 [ 583.390702][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.390936][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.393519][T14180] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1778'. [ 583.400809][ T29] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 583.492899][T14180] tipc: Enabling of bearer rejected, already enabled [ 583.498113][ T5850] usb 5-1: USB disconnect, device number 67 [ 583.553744][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 583.555631][ T29] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 583.555649][ T29] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 583.555661][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 583.557469][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 583.557482][ T29] usb 8-1: Product: syz [ 583.557522][ T29] usb 8-1: Manufacturer: syz [ 583.557531][ T29] usb 8-1: SerialNumber: syz [ 583.559689][ T29] usb 8-1: config 0 descriptor?? [ 583.563143][T14186] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 583.569025][ T29] usb 8-1: selecting invalid altsetting 0 [ 584.922670][ T5850] usb 6-1: USB disconnect, device number 71 [ 585.280546][ T6223] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 585.430577][ T6223] usb 5-1: Using ep0 maxpacket: 32 [ 585.431080][ T6223] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 585.431979][ T6223] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 585.431993][ T6223] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.432003][ T6223] usb 5-1: config 0 has no interface number 0 [ 585.432020][ T6223] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 585.433864][ T6223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.433883][ T6223] usb 5-1: Product: syz [ 585.433896][ T6223] usb 5-1: Manufacturer: syz [ 585.433909][ T6223] usb 5-1: SerialNumber: syz [ 585.435665][ T6223] usb 5-1: config 0 descriptor?? [ 585.437698][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 585.437711][ T42] audit: type=1800 audit(1792501577.608:6438): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=637855 res=0 errno=0 [ 585.438681][ T42] audit: type=1800 audit(1792501577.608:6439): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=637887 res=0 errno=0 [ 585.439567][ T42] audit: type=1800 audit(1792501577.608:6440): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=637862 res=0 errno=0 [ 585.439574][ T6223] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input78 [ 585.440059][ T42] audit: type=1800 audit(1792501577.608:6441): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=637863 res=0 errno=0 [ 585.457410][ T42] audit: type=1800 audit(1792501577.628:6442): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=637884 res=0 errno=0 [ 585.467223][ T42] audit: type=1800 audit(1792501577.638:6443): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=637885 res=0 errno=0 [ 585.481114][ T42] audit: type=1800 audit(1792501577.658:6444): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=637864 res=0 errno=0 [ 585.481937][ T42] audit: type=1800 audit(1792501577.658:6445): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=637886 res=0 errno=0 [ 585.487071][ T42] audit: type=1800 audit(1792501577.658:6446): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=637907 res=0 errno=0 [ 585.492486][ T42] audit: type=1800 audit(1792501577.668:6447): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=637926 res=0 errno=0 [ 585.660952][T14197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.661157][T14197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.662822][T14197] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1782'. [ 585.719332][T14197] tipc: Enabling of bearer rejected, already enabled [ 585.731299][ T8985] usb 5-1: USB disconnect, device number 68 [ 585.981465][ T6223] usb 8-1: USB disconnect, device number 50 [ 586.600535][ T29] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 586.750485][ T58] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 586.766436][ T29] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 586.770013][ T29] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.794639][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.794701][ T29] usb 5-1: SerialNumber: ࠌ [ 586.910423][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 586.911109][ T58] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 586.913985][ T58] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 586.913999][ T58] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.914008][ T58] usb 6-1: config 0 has no interface number 0 [ 586.914026][ T58] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 586.915744][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.915756][ T58] usb 6-1: Product: syz [ 586.915764][ T58] usb 6-1: Manufacturer: syz [ 586.915771][ T58] usb 6-1: SerialNumber: syz [ 586.917536][ T58] usb 6-1: config 0 descriptor?? [ 586.949847][ T58] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input79 [ 587.011447][T14218] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1788'. [ 587.067699][ T29] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 587.089005][ T29] usb 5-1: USB disconnect, device number 69 [ 587.098189][T13991] udevd[13991]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 587.167602][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.168201][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.171935][T14221] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1789'. [ 587.273327][T14233] tipc: Enabling of bearer rejected, already enabled [ 587.307048][ T29] usb 6-1: USB disconnect, device number 72 [ 587.445274][T14235] netlink: 'syz.2.1791': attribute type 2 has an invalid length. [ 587.751057][T14235] netlink: 'syz.2.1791': attribute type 11 has an invalid length. [ 587.751101][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 588.490572][ T8985] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 588.660326][ T8985] usb 6-1: Using ep0 maxpacket: 32 [ 588.660909][ T8985] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 588.661898][ T8985] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 588.661912][ T8985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.661922][ T8985] usb 6-1: config 0 has no interface number 0 [ 588.661940][ T8985] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 588.664118][ T8985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.664138][ T8985] usb 6-1: Product: syz [ 588.664150][ T8985] usb 6-1: Manufacturer: syz [ 588.664164][ T8985] usb 6-1: SerialNumber: syz [ 588.668885][ T8985] usb 6-1: config 0 descriptor?? [ 588.692776][ T8985] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input80 [ 588.840301][ T2320] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 588.877859][T14252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.878234][T14252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.882333][T14252] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1796'. [ 588.954597][T14252] tipc: Enabling of bearer rejected, already enabled [ 588.957022][ T29] usb 6-1: USB disconnect, device number 73 [ 589.000795][ T2320] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 589.001751][ T2320] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.001769][ T2320] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 589.001815][ T2320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 589.004033][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 589.004046][ T2320] usb 5-1: Product: syz [ 589.004054][ T2320] usb 5-1: Manufacturer: syz [ 589.004061][ T2320] usb 5-1: SerialNumber: syz [ 589.005530][ T2320] usb 5-1: config 0 descriptor?? [ 589.006059][T14254] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 589.009882][ T2320] usb 5-1: selecting invalid altsetting 0 [ 589.880293][ T29] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 590.031935][ T29] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 590.032898][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.036899][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.036921][ T29] usb 6-1: SerialNumber: ࠌ [ 590.067560][T14271] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1801'. [ 590.250803][T14269] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1800'. [ 590.303133][ T29] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 590.337468][ T29] usb 6-1: USB disconnect, device number 74 [ 590.355687][T14029] udevd[14029]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 590.924140][ T42] kauditd_printk_skb: 103 callbacks suppressed [ 590.924154][ T42] audit: type=1800 audit(1792501583.098:6551): pid=14279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1803" name="uevent" dev="sysfs" ino=2121 res=0 errno=0 [ 590.989706][ T2320] usb 5-1: USB disconnect, device number 70 [ 591.220938][ T42] audit: type=1326 audit(1792501583.398:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14282 comm="syz.3.1805" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb6fec code=0x0 [ 591.400365][ T2320] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 591.560245][ T2320] usb 5-1: Using ep0 maxpacket: 32 [ 591.561051][ T2320] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 591.562223][ T2320] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 591.562237][ T2320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.562321][ T2320] usb 5-1: config 0 has no interface number 0 [ 591.562341][ T2320] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.562935][ T41] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 591.564256][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.564269][ T2320] usb 5-1: Product: syz [ 591.564276][ T2320] usb 5-1: Manufacturer: syz [ 591.564284][ T2320] usb 5-1: SerialNumber: syz [ 591.566885][ T2320] usb 5-1: config 0 descriptor?? [ 591.568981][ T42] audit: type=1800 audit(1792501583.738:6553): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=639079 res=0 errno=0 [ 591.569022][ T42] audit: type=1800 audit(1792501583.738:6554): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=639111 res=0 errno=0 [ 591.569788][ T42] audit: type=1800 audit(1792501583.738:6555): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=639086 res=0 errno=0 [ 591.570560][ T42] audit: type=1800 audit(1792501583.748:6556): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=639087 res=0 errno=0 [ 591.627563][ T2320] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input81 [ 591.633743][ T42] audit: type=1800 audit(1792501583.808:6557): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=639108 res=0 errno=0 [ 591.634625][ T42] audit: type=1800 audit(1792501583.808:6558): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=639109 res=0 errno=0 [ 591.639123][ T42] audit: type=1800 audit(1792501583.808:6559): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=639088 res=0 errno=0 [ 591.639149][ T42] audit: type=1800 audit(1792501583.808:6560): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=639110 res=0 errno=0 [ 591.782763][T14281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.789108][T14281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.818185][ T41] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 591.831124][T14281] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1804'. [ 591.886087][T14289] tipc: Enabling of bearer rejected, already enabled [ 591.918911][ T41] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 591.918973][ T41] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 591.919046][ T41] usb 8-1: config 0 interface 0 has no altsetting 0 [ 591.943786][ T41] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 591.943914][ T41] usb 8-1: Product: syz [ 591.944010][ T41] usb 8-1: Manufacturer: syz [ 591.944203][ T41] usb 8-1: SerialNumber: syz [ 591.967115][ T41] usb 8-1: config 0 descriptor?? [ 591.983320][T14284] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 592.013185][ T41] usb 8-1: selecting invalid altsetting 0 [ 592.045594][ T5848] usb 5-1: USB disconnect, device number 71 [ 593.531255][ T856] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 593.680109][ T856] usb 6-1: Using ep0 maxpacket: 32 [ 593.680864][ T856] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 593.683670][ T856] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 593.683692][ T856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.683710][ T856] usb 6-1: config 0 has no interface number 0 [ 593.683744][ T856] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 593.685917][ T856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.685938][ T856] usb 6-1: Product: syz [ 593.685952][ T856] usb 6-1: Manufacturer: syz [ 593.685966][ T856] usb 6-1: SerialNumber: syz [ 593.691333][ T856] usb 6-1: config 0 descriptor?? [ 593.702677][ T856] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input82 [ 593.918679][T14296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.919118][T14296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.933043][T14296] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1808'. [ 593.986196][T14297] ptp ptp0: guarantee physical clock free running [ 594.019250][T14304] tipc: Enabling of bearer rejected, already enabled [ 594.113431][ T6223] usb 6-1: USB disconnect, device number 75 [ 594.251195][ T29] usb 8-1: USB disconnect, device number 51 [ 594.646358][T14310] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1811'. [ 595.179987][ T856] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 595.330896][ T856] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.332135][ T856] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 595.332161][ T856] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 595.332180][ T856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 595.334627][ T856] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.334646][ T856] usb 5-1: Product: syz [ 595.334659][ T856] usb 5-1: Manufacturer: syz [ 595.334672][ T856] usb 5-1: SerialNumber: syz [ 595.337143][ T856] usb 5-1: config 0 descriptor?? [ 595.367936][T14319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 595.381179][ T856] usb 5-1: selecting invalid altsetting 0 [ 595.551152][ T29] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 595.712555][ T29] usb 6-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 595.717073][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 595.717122][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 595.736609][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.736829][ T29] usb 6-1: Product: syz [ 595.736919][ T29] usb 6-1: Manufacturer: syz [ 595.737010][ T29] usb 6-1: SerialNumber: syz [ 595.813449][ T29] etas_es58x 6-1:1.0: Starting syz syz (Serial Number syz) [ 596.999640][ T29] etas_es58x 6-1:1.0: could not retrieve the product info string [ 597.023216][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 597.023234][ T42] audit: type=1800 audit(1792501589.198:6646): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=639936 res=0 errno=0 [ 597.023273][ T42] audit: type=1800 audit(1792501589.198:6647): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=639937 res=0 errno=0 [ 597.025204][ T29] usb 6-1: USB disconnect, device number 76 [ 597.025710][ T42] audit: type=1800 audit(1792501589.198:6648): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=639916 res=0 errno=0 [ 597.026478][ T29] etas_es58x 6-1:1.0: Disconnecting syz syz [ 597.273138][ T42] audit: type=1800 audit(1792501589.448:6649): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=639938 res=0 errno=0 [ 597.338736][T14341] syzkaller0: entered promiscuous mode [ 597.338758][T14341] syzkaller0: entered allmulticast mode [ 597.626268][ T6223] usb 5-1: USB disconnect, device number 72 [ 597.829991][ T29] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 597.963233][ T42] audit: type=1326 audit(1792501590.138:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14352 comm="syz.0.1823" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744efec code=0x0 [ 597.979841][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 597.980782][ T29] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 597.981854][ T29] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 597.981875][ T29] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.981892][ T29] usb 6-1: config 0 has no interface number 0 [ 597.981923][ T29] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 597.984083][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.984103][ T29] usb 6-1: Product: syz [ 597.984116][ T29] usb 6-1: Manufacturer: syz [ 597.984129][ T29] usb 6-1: SerialNumber: syz [ 597.987203][ T29] usb 6-1: config 0 descriptor?? [ 597.991243][ T42] audit: type=1800 audit(1792501590.168:6651): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=640360 res=0 errno=0 [ 597.998379][ T42] audit: type=1800 audit(1792501590.168:6652): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=640392 res=0 errno=0 [ 597.998407][ T42] audit: type=1800 audit(1792501590.168:6653): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=640367 res=0 errno=0 [ 597.998443][ T29] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input83 [ 597.999353][ T42] audit: type=1800 audit(1792501590.168:6654): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=640368 res=0 errno=0 [ 598.011915][ T42] audit: type=1800 audit(1792501590.188:6655): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=640389 res=0 errno=0 [ 598.198720][T14348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.200310][T14348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.205798][T14348] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1821'. [ 598.250288][ T29] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 598.290942][T14348] tipc: Enabling of bearer rejected, already enabled [ 598.292722][ T5850] usb 6-1: USB disconnect, device number 77 [ 598.402719][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.403563][ T29] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.403580][ T29] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 598.403592][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 598.405495][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.405508][ T29] usb 5-1: Product: syz [ 598.405516][ T29] usb 5-1: Manufacturer: syz [ 598.405524][ T29] usb 5-1: SerialNumber: syz [ 598.406752][ T29] usb 5-1: config 0 descriptor?? [ 598.407894][T14355] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 598.410406][ T29] usb 5-1: selecting invalid altsetting 0 [ 600.907077][ T2320] usb 5-1: USB disconnect, device number 73 [ 601.326259][T14406] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1828'. [ 602.392897][T14421] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1834'. [ 602.480246][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 602.480263][ T42] audit: type=1326 audit(1792501594.658:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14413 comm="syz.1.1831" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5fec code=0x0 [ 602.491454][T14428] tipc: Enabling of bearer rejected, already enabled [ 602.769546][ T6223] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 603.010446][ T6223] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 603.011878][ T6223] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 603.011905][ T6223] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 603.011933][ T6223] usb 6-1: config 0 interface 0 has no altsetting 0 [ 603.014277][ T6223] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 603.014294][ T6223] usb 6-1: Product: syz [ 603.014304][ T6223] usb 6-1: Manufacturer: syz [ 603.014314][ T6223] usb 6-1: SerialNumber: syz [ 603.016150][ T6223] usb 6-1: config 0 descriptor?? [ 603.019035][ T42] audit: type=1800 audit(1792501595.188:6695): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=640741 res=0 errno=0 [ 603.019264][T14427] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 603.024755][ T42] audit: type=1800 audit(1792501595.198:6696): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=640773 res=0 errno=0 [ 603.025557][ T42] audit: type=1800 audit(1792501595.198:6697): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=640748 res=0 errno=0 [ 603.026600][ T6223] usb 6-1: selecting invalid altsetting 0 [ 603.034473][ T42] audit: type=1800 audit(1792501595.208:6698): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=640749 res=0 errno=0 [ 603.100972][ T42] audit: type=1800 audit(1792501595.268:6699): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=640770 res=0 errno=0 [ 603.101020][ T42] audit: type=1800 audit(1792501595.278:6700): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=640771 res=0 errno=0 [ 603.101057][ T42] audit: type=1800 audit(1792501595.278:6701): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=640750 res=0 errno=0 [ 603.103178][ T42] audit: type=1800 audit(1792501595.278:6702): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=640772 res=0 errno=0 [ 603.108965][ T42] audit: type=1800 audit(1792501595.278:6703): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=640793 res=0 errno=0 [ 603.673116][T14437] openvswitch: netlink: IP tunnel dst address not specified [ 603.880877][T14437] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input84 [ 604.792866][T14452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1841'. [ 604.861607][T14454] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1840'. [ 605.582801][ T29] usb 6-1: USB disconnect, device number 78 [ 605.677603][T14466] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1845'. [ 605.790337][T14468] tipc: Enabling of bearer rejected, already enabled [ 606.362876][T14474] syzkaller0: entered promiscuous mode [ 606.362890][T14474] syzkaller0: entered allmulticast mode [ 606.742471][T14472] ptp ptp0: guarantee physical clock free running [ 607.019290][ T29] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 607.469844][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 607.471025][ T29] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.471049][ T29] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 607.471069][ T29] usb 8-1: config 0 interface 0 has no altsetting 0 [ 607.473321][ T29] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 607.473340][ T29] usb 8-1: Product: syz [ 607.473352][ T29] usb 8-1: Manufacturer: syz [ 607.473363][ T29] usb 8-1: SerialNumber: syz [ 607.475199][ T29] usb 8-1: config 0 descriptor?? [ 607.478171][T14484] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 607.484734][ T29] usb 8-1: selecting invalid altsetting 0 [ 607.512522][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 607.512540][ T42] audit: type=1800 audit(1792501599.689:6733): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=641125 res=0 errno=0 [ 607.513331][ T42] audit: type=1800 audit(1792501599.689:6734): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=641126 res=0 errno=0 [ 607.515182][ T42] audit: type=1800 audit(1792501599.689:6735): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=641105 res=0 errno=0 [ 607.518464][ T42] audit: type=1800 audit(1792501599.689:6736): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=641127 res=0 errno=0 [ 607.522833][ T42] audit: type=1800 audit(1792501599.699:6737): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=641148 res=0 errno=0 [ 607.525397][ T42] audit: type=1800 audit(1792501599.699:6738): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=641167 res=0 errno=0 [ 607.527808][ T42] audit: type=1800 audit(1792501599.699:6739): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=641194 res=0 errno=0 [ 607.529107][ T42] audit: type=1800 audit(1792501599.699:6740): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=641207 res=0 errno=0 [ 607.529261][ T42] audit: type=1800 audit(1792501599.709:6741): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=641180 res=0 errno=0 [ 607.533950][ T42] audit: type=1800 audit(1792501599.709:6742): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=641220 res=0 errno=0 [ 608.189252][ T29] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 608.339886][ T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 608.340857][ T29] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.340907][ T29] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 608.340920][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 608.342591][ T29] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 608.342604][ T29] usb 5-1: Product: syz [ 608.342612][ T29] usb 5-1: Manufacturer: syz [ 608.342619][ T29] usb 5-1: SerialNumber: syz [ 608.343720][ T29] usb 5-1: config 0 descriptor?? [ 608.344271][T14507] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 608.346596][ T29] usb 5-1: selecting invalid altsetting 0 [ 609.613760][ T29] usb 8-1: USB disconnect, device number 52 [ 610.023290][T14541] syzkaller0: entered promiscuous mode [ 610.023307][T14541] syzkaller0: entered allmulticast mode [ 610.059147][ T29] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 610.219330][ T29] usb 8-1: Using ep0 maxpacket: 32 [ 610.222547][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 610.225498][ T29] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 610.225592][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.225716][ T29] usb 8-1: config 0 has no interface number 0 [ 610.225965][ T29] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 610.238690][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.238964][ T29] usb 8-1: Product: syz [ 610.239133][ T29] usb 8-1: Manufacturer: syz [ 610.239402][ T29] usb 8-1: SerialNumber: syz [ 610.257920][ T29] usb 8-1: config 0 descriptor?? [ 610.304924][ T29] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input85 [ 610.630997][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.631200][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.634659][T14539] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1857'. [ 610.689114][T14550] tipc: Enabling of bearer rejected, already enabled [ 610.934027][ T2320] usb 5-1: USB disconnect, device number 74 [ 611.156935][ T2320] usb 8-1: USB disconnect, device number 53 [ 611.418393][T14560] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1863'. [ 611.482902][T14565] tipc: Enabling of bearer rejected, already enabled [ 611.679072][ T856] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 611.829935][ T856] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 611.831198][ T856] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.831226][ T856] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 611.831248][ T856] usb 6-1: config 0 interface 0 has no altsetting 0 [ 611.833538][ T856] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 611.833558][ T856] usb 6-1: Product: syz [ 611.833572][ T856] usb 6-1: Manufacturer: syz [ 611.833584][ T856] usb 6-1: SerialNumber: syz [ 611.836141][ T856] usb 6-1: config 0 descriptor?? [ 611.838726][T14558] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 611.845456][ T856] usb 6-1: selecting invalid altsetting 0 [ 613.129904][ T42] kauditd_printk_skb: 71 callbacks suppressed [ 613.129930][ T42] audit: type=1326 audit(1792501605.309:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14591 comm="syz.0.1875" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744efec code=0x0 [ 613.448953][ T2320] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 613.602394][ T2320] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 613.603348][ T2320] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 613.603376][ T2320] usb 5-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 613.603398][ T2320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 613.626474][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 613.626499][ T2320] usb 5-1: Product: syz [ 613.626512][ T2320] usb 5-1: Manufacturer: syz [ 613.626525][ T2320] usb 5-1: SerialNumber: syz [ 613.629053][ T2320] usb 5-1: config 0 descriptor?? [ 613.631034][T14597] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 613.637759][ T42] audit: type=1800 audit(1792501605.809:6815): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=641994 res=0 errno=0 [ 613.638106][ T42] audit: type=1800 audit(1792501605.809:6816): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=642026 res=0 errno=0 [ 613.639649][ T2320] usb 5-1: selecting invalid altsetting 0 [ 613.640486][ T42] audit: type=1800 audit(1792501605.819:6817): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=642001 res=0 errno=0 [ 613.641314][ T42] audit: type=1800 audit(1792501605.819:6818): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=642002 res=0 errno=0 [ 613.677888][ T42] audit: type=1800 audit(1792501605.849:6819): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=642023 res=0 errno=0 [ 613.683327][ T42] audit: type=1800 audit(1792501605.859:6820): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=642024 res=0 errno=0 [ 613.689919][ T42] audit: type=1800 audit(1792501605.859:6821): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=642003 res=0 errno=0 [ 613.694212][ T42] audit: type=1800 audit(1792501605.869:6822): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=642025 res=0 errno=0 [ 613.717316][ T42] audit: type=1800 audit(1792501605.889:6823): pid=14028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=642046 res=0 errno=0 [ 614.265087][ T58] usb 6-1: USB disconnect, device number 79 [ 614.392472][T14478] hid-sensor-hub 0003:1234:5678.0005: hidraw1: USB HID v0.01 Device [syz0] on syz0 [ 614.633683][T14605] fido_id[14605]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 615.518253][T14608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1870'. [ 615.609998][T14612] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1872'. [ 615.693971][ T2320] usb 5-1: USB disconnect, device number 75 [ 615.722059][T14618] tipc: Enabling of bearer rejected, already enabled [ 615.762479][T14621] [ 615.763298][T14621] ====================================================== [ 615.765522][T14621] WARNING: possible circular locking dependency detected [ 615.767770][T14621] syzkaller #0 Tainted: G L [ 615.769716][T14621] ------------------------------------------------------ [ 615.771910][T14621] syz.3.1873/14621 is trying to acquire lock: [ 615.773797][T14621] ffffffff90f56a40 (nvmf_dev_mutex){+.+.}-{4:4}, at: nvmf_dev_show+0x26/0x210 [ 615.776621][T14621] [ 615.776621][T14621] but task is already holding lock: [ 615.778946][T14621] ffff88805a7d2758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 615.781599][T14621] [ 615.781599][T14621] which lock already depends on the new lock. [ 615.781599][T14621] [ 615.784800][T14621] [ 615.784800][T14621] the existing dependency chain (in reverse order) is: [ 615.787570][T14621] [ 615.787570][T14621] -> #4 (&p->lock){+.+.}-{4:4}: [ 615.789763][T14621] lock_acquire+0x1d1/0x380 [ 615.791434][T14621] __mutex_lock+0x1a4/0x1c20 [ 615.793086][T14621] seq_read_iter+0xe1/0x1270 [ 615.794693][T14621] kernfs_fop_read_iter+0x46c/0x610 [ 615.796478][T14621] __kernel_read+0x397/0xad0 [ 615.798094][T14621] integrity_kernel_read+0x7e/0xb0 [ 615.799867][T14621] ima_calc_file_hash_tfm+0x25e/0x350 [ 615.801732][T14621] ima_calc_file_hash+0x1e3/0x380 [ 615.803483][T14621] ima_collect_measurement+0x94f/0xb30 [ 615.805350][T14621] process_measurement+0xdfe/0x2350 [ 615.807116][T14621] ima_file_check+0xcc/0x120 [ 615.808737][T14621] security_file_post_open+0xc4/0x210 [ 615.810600][T14621] path_openat+0x5d5/0x2430 [ 615.812217][T14621] do_file_open+0x20e/0x430 [ 615.813801][T14621] do_sys_openat2+0x163/0x1d0 [ 615.815436][T14621] __x64_sys_openat+0x12d/0x210 [ 615.817142][T14621] do_syscall_64+0x121/0x770 [ 615.818763][T14621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.820802][T14621] [ 615.820802][T14621] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 615.823492][T14621] lock_acquire+0x1d1/0x380 [ 615.825081][T14621] __mutex_lock+0x1a4/0x1c20 [ 615.826686][T14621] process_measurement+0x5ab/0x2350 [ 615.828503][T14621] ima_file_check+0xcc/0x120 [ 615.830159][T14621] security_file_post_open+0xc4/0x210 [ 615.832057][T14621] path_openat+0x5d5/0x2430 [ 615.833643][T14621] do_file_open+0x20e/0x430 [ 615.835217][T14621] file_open_name+0x1c3/0x3e0 [ 615.836857][T14621] filp_open+0x2e/0x50 [ 615.838322][T14621] kernel_read_file_from_path_initns+0xec/0x240 [ 615.840457][T14621] _request_firmware+0x733/0x13c0 [ 615.842215][T14621] request_firmware+0x35/0x50 [ 615.843897][T14621] reg_reload_regdb+0x85/0x460 [ 615.845550][T14621] genl_family_rcv_msg_doit+0x214/0x300 [ 615.847465][T14621] genl_rcv_msg+0x560/0x800 [ 615.849073][T14621] netlink_rcv_skb+0x159/0x420 [ 615.850730][T14621] genl_rcv+0x28/0x40 [ 615.852472][T14621] netlink_unicast+0x65f/0x950 [ 615.854316][T14621] netlink_sendmsg+0xa02/0x1020 [ 615.856004][T14621] ____sys_sendmsg+0xa4d/0xbe0 [ 615.857711][T14621] ___sys_sendmsg+0x190/0x1e0 [ 615.859343][T14621] __sys_sendmsg+0x160/0x210 [ 615.860956][T14621] __do_fast_syscall_32+0x13a/0x8b0 [ 615.862745][T14621] do_fast_syscall_32+0x32/0x70 [ 615.864436][T14621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.866570][T14621] [ 615.866570][T14621] -> #2 (cb_lock){++++}-{4:4}: [ 615.868694][T14621] lock_acquire+0x1d1/0x380 [ 615.870276][T14621] down_read+0x99/0x4c0 [ 615.871769][T14621] genl_release+0x7e/0x1d0 [ 615.873277][T14621] netlink_release+0x105e/0x2000 [ 615.874978][T14621] __sock_release+0xb3/0x260 [ 615.876540][T14621] sock_close+0x1c/0x30 [ 615.878000][T14621] __fput+0x400/0xb60 [ 615.879415][T14621] fput_close_sync+0x118/0x250 [ 615.881043][T14621] filp_close_sync+0x75/0xa0 [ 615.882618][T14621] __x64_sys_close+0x81/0x110 [ 615.884309][T14621] do_syscall_64+0x121/0x770 [ 615.885908][T14621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.887860][T14621] [ 615.887860][T14621] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 615.890535][T14621] lock_acquire+0x1d1/0x380 [ 615.892128][T14621] down_write+0x8b/0x1f0 [ 615.893630][T14621] __sock_release+0x86/0x260 [ 615.895290][T14621] sock_close+0x1c/0x30 [ 615.896817][T14621] __fput+0x400/0xb60 [ 615.898321][T14621] __fput_sync+0xd7/0x100 [ 615.899881][T14621] nvme_tcp_alloc_queue.isra.0+0xd89/0x1630 [ 615.901914][T14621] nvme_tcp_configure_admin_queue+0x26/0x530 [ 615.903941][T14621] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 615.905710][T14621] nvme_tcp_create_ctrl+0x970/0xd90 [ 615.907531][T14621] nvmf_dev_write+0x4ee/0xb60 [ 615.909193][T14621] vfs_write+0x2aa/0x1050 [ 615.910757][T14621] ksys_write+0x12a/0x250 [ 615.912318][T14621] __do_fast_syscall_32+0x13a/0x8b0 [ 615.914105][T14621] do_fast_syscall_32+0x32/0x70 [ 615.915795][T14621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.917952][T14621] [ 615.917952][T14621] -> #0 (nvmf_dev_mutex){+.+.}-{4:4}: [ 615.920314][T14621] check_prev_add+0xeb/0xe60 [ 615.921950][T14621] __lock_acquire+0x1528/0x1f40 [ 615.923655][T14621] lock_acquire+0x1d1/0x380 [ 615.925238][T14621] __mutex_lock+0x1a4/0x1c20 [ 615.926851][T14621] nvmf_dev_show+0x26/0x210 [ 615.928447][T14621] seq_read_iter+0x32f/0x1270 [ 615.930070][T14621] seq_read+0x344/0x4d0 [ 615.931557][T14621] vfs_read+0x1e4/0xb40 [ 615.933060][T14621] ksys_read+0x12a/0x250 [ 615.934559][T14621] __do_fast_syscall_32+0x13a/0x8b0 [ 615.936335][T14621] do_fast_syscall_32+0x32/0x70 [ 615.938069][T14621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.940232][T14621] [ 615.940232][T14621] other info that might help us debug this: [ 615.940232][T14621] [ 615.943370][T14621] Chain exists of: [ 615.943370][T14621] nvmf_dev_mutex --> &ima_iint_mutex_key[depth] --> &p->lock [ 615.943370][T14621] [ 615.947438][T14621] Possible unsafe locking scenario: [ 615.947438][T14621] [ 615.949763][T14621] CPU0 CPU1 [ 615.951478][T14621] ---- ---- [ 615.953156][T14621] lock(&p->lock); [ 615.954362][T14621] lock(&ima_iint_mutex_key[depth]); [ 615.957110][T14621] lock(&p->lock); [ 615.959090][T14621] lock(nvmf_dev_mutex); [ 615.960471][T14621] [ 615.960471][T14621] *** DEADLOCK *** [ 615.960471][T14621] [ 615.963055][T14621] locks held by syz.3.1873/14621: 1, last CPU#2: [ 615.965429][T14621] #0: ffff88805a7d2758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 615.968754][T14621] [ 615.968754][T14621] stack backtrace: [ 615.971000][T14621] CPU: 2 UID: 0 PID: 14621 Comm: syz.3.1873 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.974951][T14621] Tainted: [L]=SOFTLOCKUP [ 615.976605][T14621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 615.980460][T14621] Call Trace: [ 615.981828][T14621] [ 615.982926][T14621] dump_stack_lvl+0x100/0x190 [ 615.984625][T14621] print_circular_bug.cold+0x178/0x1be [ 615.986709][T14621] check_noncircular+0x146/0x160 [ 615.988618][T14621] check_prev_add+0xeb/0xe60 [ 615.990300][T14621] ? __lock_acquire+0x5c0/0x1f40 [ 615.992333][T14621] __lock_acquire+0x1528/0x1f40 [ 615.994323][T14621] ? seq_read+0x344/0x4d0 [ 615.995690][T14621] ? vfs_read+0x1e4/0xb40 [ 615.997073][T14621] lock_acquire+0x1d1/0x380 [ 615.998612][T14621] ? nvmf_dev_show+0x26/0x210 [ 616.000479][T14621] ? __pfx___might_resched+0x10/0x10 [ 616.002753][T14621] __mutex_lock+0x1a4/0x1c20 [ 616.004569][T14621] ? nvmf_dev_show+0x26/0x210 [ 616.006573][T14621] ? nvmf_dev_show+0x26/0x210 [ 616.008314][T14621] ? __pfx___mutex_lock+0x10/0x10 [ 616.010463][T14621] ? __kasan_kmalloc+0xaa/0xb0 [ 616.012504][T14621] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 616.014823][T14621] ? nvmf_dev_show+0x26/0x210 [ 616.016840][T14621] nvmf_dev_show+0x26/0x210 [ 616.018773][T14621] seq_read_iter+0x32f/0x1270 [ 616.020706][T14621] ? __pfx_try_to_wake_up+0x10/0x10 [ 616.022785][T14621] seq_read+0x344/0x4d0 [ 616.024470][T14621] ? futex_wake+0x4ea/0x5e0 [ 616.026261][T14621] ? __pfx_seq_read+0x10/0x10 [ 616.028290][T14621] ? common_file_perm+0x266/0x500 [ 616.030384][T14621] ? bpf_lsm_file_permission+0x9/0x10 [ 616.032668][T14621] ? security_file_permission+0x76/0x210 [ 616.035032][T14621] ? rw_verify_area+0xce/0x6d0 [ 616.037062][T14621] ? __pfx_seq_read+0x10/0x10 [ 616.039075][T14621] vfs_read+0x1e4/0xb40 [ 616.040470][T14621] ? lock_acquire+0x1d1/0x380 [ 616.042103][T14621] ? __fget_files+0x34/0x3d0 [ 616.043972][T14621] ? __pfx_vfs_read+0x10/0x10 [ 616.045813][T14621] ? find_held_lock+0x2b/0x80 [ 616.047847][T14621] ? __fget_files+0x215/0x3d0 [ 616.049739][T14621] ? __fget_files+0x215/0x3d0 [ 616.051601][T14621] ? __fget_files+0x21f/0x3d0 [ 616.053559][T14621] ksys_read+0x12a/0x250 [ 616.055371][T14621] ? __pfx_ksys_read+0x10/0x10 [ 616.057451][T14621] __do_fast_syscall_32+0x13a/0x8b0 [ 616.059701][T14621] ? lockdep_hardirqs_on+0x7d/0x110 [ 616.061969][T14621] do_fast_syscall_32+0x32/0x70 [ 616.063838][T14621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 616.066501][T14621] RIP: 0023:0xf7fb6fec [ 616.068257][T14621] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 616.071059][T14621] RSP: 002b:00000000f546650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 616.074592][T14621] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 616.077920][T14621] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 616.081134][T14621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 616.084288][T14621] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 616.087601][T14621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 616.090959][T14621] [ 616.124951][T14625] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 616.398798][ T2320] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 616.559290][ T2320] usb 5-1: Using ep0 maxpacket: 32 [ 616.561005][ T2320] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 616.562319][ T2320] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 616.562333][ T2320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.562343][ T2320] usb 5-1: config 0 has no interface number 0 [ 616.562356][ T2320] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 616.563755][ T2320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.563773][ T2320] usb 5-1: Product: syz [ 616.563786][ T2320] usb 5-1: Manufacturer: syz [ 616.563798][ T2320] usb 5-1: SerialNumber: syz [ 616.571412][ T2320] usb 5-1: config 0 descriptor?? [ 616.573357][ T2320] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.119/input/input86 [ 616.786571][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.787329][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.790721][T14623] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1874'. [ 616.868121][T14623] tipc: Enabling of bearer rejected, already enabled [ 616.874875][ T5821] usb 5-1: USB disconnect, device number 76 [ 623.879651][ T1438] ieee802154 phy1 wpan1: encryption failed: -22