last executing test programs: 1m41.695688578s ago: executing program 2 (id=1602): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x48, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x61) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r7 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9", 0x7e}, {0x0}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1m40.536556858s ago: executing program 2 (id=1603): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x10, @private0, 0x3}}}, &(0x7f00000001c0)=0x84) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1m39.189070588s ago: executing program 2 (id=1606): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x1fe00}) 1m38.789468144s ago: executing program 2 (id=1609): mkdir(&(0x7f0000000100)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x39b5840, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) 1m38.646126354s ago: executing program 2 (id=1610): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x7f}, 0x2) bpf$ITER_CREATE(0x21, 0x0, 0x0) 1m38.359743208s ago: executing program 2 (id=1612): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@random="2dbdc828205c", @multicast, @void, {@mpls_uc={0x8847, {[], @ipv4=@icmp={{0x5, 0x4, 0x3, 0x6, 0xd73, 0x64, 0x0, 0x99, 0x1, 0x0, @multicast1, @empty}, @echo={0x8, 0x0, 0x0, 0x3, 0x8000, "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"}}}}}}, 0x0) 1m38.121782179s ago: executing program 32 (id=1612): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000013c0)={@random="2dbdc828205c", @multicast, @void, {@mpls_uc={0x8847, {[], @ipv4=@icmp={{0x5, 0x4, 0x3, 0x6, 0xd73, 0x64, 0x0, 0x99, 0x1, 0x0, @multicast1, @empty}, @echo={0x8, 0x0, 0x0, 0x3, 0x8000, "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"}}}}}}, 0x0) 1m7.06267899s ago: executing program 4 (id=1766): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.820938224s ago: executing program 4 (id=1768): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) 1m6.690327305s ago: executing program 4 (id=1769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x9, 0xc2, 0x0, 0x2d83, 0x9, 0x100, 0x0, 0x7}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) epoll_create1(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x402, 0x0) socket$inet(0x2, 0x3, 0x3) syz_io_uring_setup(0x186, &(0x7f0000000600)={0x0, 0x3416, 0x8, 0x1}, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x24040010) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89101) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) 1m3.447573004s ago: executing program 4 (id=1778): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x20a7699, 0x0) eventfd(0x9) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) 1m3.289684392s ago: executing program 4 (id=1781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000003680)=ANY=[], 0x0) 1m1.658046802s ago: executing program 4 (id=1783): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x19}]}}]}, 0x3c}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m1.217313485s ago: executing program 33 (id=1783): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x19}]}}]}, 0x3c}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.664726053s ago: executing program 5 (id=1965): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2, r5, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], 0x0, &(0x7f0000000340), 0x0, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b4", 0x77}, {0x0}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 8.46355405s ago: executing program 5 (id=1969): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x7, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x5) 7.367299507s ago: executing program 3 (id=1972): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/224, 0xe0, 0xffffffffffffffff, 0xffffffffffffffff}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2e}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 7.072877515s ago: executing program 3 (id=1974): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffffffe, 0x3, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.635395589s ago: executing program 3 (id=1977): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2008400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 5.678264645s ago: executing program 5 (id=1981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.461166866s ago: executing program 3 (id=1982): socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x1000000000000, 0x100009, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.217850069s ago: executing program 3 (id=1985): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x484000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x5}, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 3.845649353s ago: executing program 0 (id=1993): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) 3.714238575s ago: executing program 0 (id=1994): socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x5, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d00000003f00070100000000fedbdf25027c0000cee810edfac5b62df8a062ba1dfe6027424d0bd29f7f8b7109045ba44275d68bf067c6188d3016489b82e77a1b5ae4dfe7f30e081b98974254abf49c254f7dae3a2a0ab5afd016335b4a63426214dc8d3dee5d42", @ANYBLOB="70cb6b659633485715920260f3d13d7cf287f6c8d545727d8e1d71cdaad4f5ebfb4f4adea2afd50aebdad7c7b505a20550a9a21a72631acb5bb1404ecf79121dabbd8ea3bdc68615f3a1304dd583fd8f1d6f676e67d251146e7a821ad3250f97726fa7d58a43d4c0a9df0cad82fc3e003cc174366382b4e99505f8706d751ee29482d7e2bb60c6ecade975ad6dae4c4f23057d61e2bbbd845c8386c334d6e211b2182f8494dd2f3ab923734682fc7441e08de5b7435b49450766aae5ab", @ANYRES8=r4], 0xd0}}, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000007060500000000000000000007000003050001fb0600000008000640000000038ebfa3711e5b706d5599aae4b10e7028e9590255149711d5cf3be3db7342de6922ae7d3c87bc0554b292d23aaef7b30c0d209ad53ced9d6d68ba353d6e7652efc145ee"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000824) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYBLOB="23788113f46e0000f8111953be010bda0d5772efaebfe6846de81bc86e1db755d9d8a99a793332820a1d6e56e2fc4c19e8b80a56e210e1a26887cfc0f59ae37ae0a40713951bfa2403a39743b2ab1f", @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESDEC], 0x118) vmsplice(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x9, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0x20b}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) 3.700077924s ago: executing program 6 (id=1995): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dmmidi(0x0, 0x2, 0x181083) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.348367106s ago: executing program 5 (id=1996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.214307319s ago: executing program 6 (id=1997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x286}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x92}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048805}, 0x0) 3.200517869s ago: executing program 3 (id=1998): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)={0x0, 0x30, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.023322128s ago: executing program 1 (id=1999): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000100)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) 2.544036049s ago: executing program 5 (id=2000): syz_usb_connect(0x30161cfbebc30ec5, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) shutdown(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0xf8) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x20000004) syz_usb_connect$midi(0x5, 0x62, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x50, 0xde, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0xa8, [@ms_header={0x7, 0x24, 0x1, 0x400, 0x7}], [{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x7, 0x3, {0x5, 0x25, 0x1, 0x1, 'S'}}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x10, 0x4, 0x8, {0x6, 0x25, 0x1, 0x2, "1706"}}}, {{0x9, 0x5, 0xa, 0x14, 0x3ff, 0x0, 0x4, 0x3, {0x4}}}, {{0x9, 0x5, 0x0, 0x3, 0x0, 0xa, 0x8, 0xb, {0x4}}}]}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 2.352286393s ago: executing program 6 (id=2001): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x800000000000002, {0xfffffffffffffffe, 0x0, 0x20000000000000, 0x0, 0x0, 0x1, {0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0xa000, 0xf, 0x0, 0x0, 0x801, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@filename='./file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x28, 0x2, 0x1030, 0x4, 0x0, 0xfffffffc}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 1.998853244s ago: executing program 0 (id=2002): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.761974045s ago: executing program 0 (id=2003): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000023000701feffffff02000000027c00"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 1.761604897s ago: executing program 1 (id=2004): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000170000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 1.563605692s ago: executing program 1 (id=2005): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000000e480), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 1.389372715s ago: executing program 1 (id=2006): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x80dd) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="440f01c4d18300000000c4a1fd2b7900b8010000000f01c166400f3881660148b8facb0000000000000f23c00f21f835000001000f23f80f20073e0f21276726410f00568866baa10066b8f4ab66ef", 0x4f}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.388593663s ago: executing program 6 (id=2007): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040), 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5000000000000000000000004000045"], 0x58) 1.178233267s ago: executing program 1 (id=2008): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x60) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ftruncate(r0, 0x9) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x141, 0x100, 0xa}, 0x18) 1.177749281s ago: executing program 1 (id=2009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000200)=0x0) sendmsg$alg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24040004}, 0x24000090) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r4, &(0x7f0000000080)='=', 0x1}]) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x0, 0x0, 0xa1a, 0x4, 0x6, 0x800afa3, 0x0, 0x4, 0x5855, 0x2, 0x7, 0x9, 0x1, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0xcaa2, 0x1003, 0x20001e5b, 0x2000003, 0xe69, 0x2, 0x4, 0x4086, 0x0, 0x6f5]}) sched_setattr(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0x81d601b00707e0b8}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x94}}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 888.893051ms ago: executing program 5 (id=2010): socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x5, 0xffffffff}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d00000003f00070100000000fedbdf25027c0000cee810edfac5b62df8a062ba1dfe6027424d0bd29f7f8b7109045ba44275d68bf067c6188d3016489b82e77a1b5ae4dfe7f30e081b98974254abf49c254f7dae3a2a0ab5afd016335b4a63426214dc8d3dee5d42", @ANYBLOB="70cb6b659633485715920260f3d13d7cf287f6c8d545727d8e1d71cdaad4f5ebfb4f4adea2afd50aebdad7c7b505a20550a9a21a72631acb5bb1404ecf79121dabbd8ea3bdc68615f3a1304dd583fd8f1d6f676e67d251146e7a821ad3250f97726fa7d58a43d4c0a9df0cad82fc3e003cc174366382b4e99505f8706d751ee29482d7e2bb60c6ecade975ad6dae4c4f23057d61e2bbbd845c8386c334d6e211b218", @ANYRES8=r4], 0xd0}}, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2400000007060500000000000000000007000003050001fb0600000008000640000000038ebfa3711e5b706d5599aae4b10e7028e9590255149711d5cf3be3db7342de6922ae7d3c87bc0554b292d23aaef7b30c0d209ad53ced9d6d68ba353d6e7652efc145ee"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000824) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYBLOB="23788113f46e0000f8111953be010bda0d5772efaebfe6846de81bc86e1db755d9d8a99a793332820a1d6e56e2fc4c19e8b80a56e210e1a26887cfc0f59ae37ae0a40713951bfa2403a39743b2ab1f", @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESDEC], 0x118) vmsplice(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x9, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0x20b}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) 726.404283ms ago: executing program 0 (id=2011): ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000005"], 0x24}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 249.891812ms ago: executing program 6 (id=2012): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x8, 0x1, @vifc_lcl_ifindex, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="3e0033008000e100ffffffffffff08021100000050505050505000df593300fcffffffffffffff0c00014003010e05030982fc3c040104"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 115.515353ms ago: executing program 6 (id=2013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 0s ago: executing program 0 (id=2014): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) kernel console output (not intermixed with test programs): ct: syz [ 294.705741][ T5870] usb 5-1: Manufacturer: syz [ 294.710513][ T5870] usb 5-1: SerialNumber: syz [ 294.721908][ T5870] usb 5-1: config 0 descriptor?? [ 294.734878][ T5870] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 295.934529][ T5870] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 297.139917][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 297.168183][ T5870] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 297.185130][ T5870] usb 5-1: USB disconnect, device number 29 [ 297.195977][ T5870] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 297.211440][ T5870] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 297.235316][ T5870] quatech2 5-1:0.51: device disconnected [ 297.761022][ T30] audit: type=1400 audit(1772670091.070:798): avc: denied { listen } for pid=9621 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 297.834876][ T30] audit: type=1400 audit(1772670091.070:799): avc: denied { accept } for pid=9621 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 297.886339][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 298.054839][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 298.071950][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 298.106249][ T10] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 298.130132][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.149098][ T10] usb 1-1: Product: syz [ 298.164497][ T10] usb 1-1: Manufacturer: syz [ 298.190995][ T10] usb 1-1: SerialNumber: syz [ 298.660210][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 299.057074][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 300.126000][ T10] usb 1-1: invalid MIDI EP [ 300.138610][ T10] usb 1-1: snd-bcd2000: error during probing [ 300.145096][ T10] snd-bcd2000 1-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 300.179534][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1329'. [ 300.221358][ T10] usb 1-1: invalid MIDI EP [ 300.234753][ T10] usb 1-1: snd-bcd2000: error during probing [ 300.262871][ T10] snd-bcd2000 1-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 300.313285][ T10] usb 1-1: USB disconnect, device number 26 [ 300.386508][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.568364][ T9662] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1336'. [ 301.099633][ T9675] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.282445][ T10] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 301.298559][ T9675] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.378689][ T5870] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 301.743917][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.748146][ T9675] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.762585][ T10] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 301.786012][ T5870] usb 3-1: config 1 interface 0 has no altsetting 0 [ 301.809876][ T5870] usb 3-1: string descriptor 0 read error: -22 [ 301.817862][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 301.824974][ T5870] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a56, bcdDevice= 0.40 [ 301.855761][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.865487][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 301.875340][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 301.884584][ T10] usb 2-1: Product: syz [ 301.891319][ T10] usb 2-1: Manufacturer: syz [ 301.899309][ T10] usb 2-1: SerialNumber: syz [ 301.915896][ T10] usb 2-1: config 0 descriptor?? [ 301.966163][ T5919] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 302.017521][ T9675] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.073497][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 302.168971][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 302.202676][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.204566][ T5919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 302.267074][ T5919] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 302.276533][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.300529][ T5919] usb 4-1: Product: syz [ 302.311394][ T5919] usb 4-1: Manufacturer: syz [ 302.325489][ T5919] usb 4-1: SerialNumber: syz [ 302.544039][ T9700] comedi comedi1: no devices specified [ 302.613420][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.754137][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.764461][ T5818] usb 2-1: USB disconnect, device number 23 [ 302.781241][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.786226][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.810813][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.837396][ T5919] usb 4-1: invalid MIDI EP [ 302.844732][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.852675][ T5919] usb 4-1: snd-bcd2000: error during probing [ 302.860228][ T5919] snd-bcd2000 4-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 302.870857][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.880254][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.892437][ T5919] usb 4-1: invalid MIDI EP [ 302.898008][ T5919] usb 4-1: snd-bcd2000: error during probing [ 302.904257][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.913184][ T5919] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 302.922238][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.935418][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.949836][ T5919] usb 4-1: USB disconnect, device number 24 [ 302.958889][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.969412][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 302.981856][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: unknown main item tag 0x0 [ 303.011109][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.104269][ T5870] hid-corsair-void 0003:1B1C:0A56.001B: hidraw0: USB HID vff.7f Device [HID 1b1c:0a56] on usb-dummy_hcd.2-1/input0 [ 303.137904][ T5870] usb 3-1: USB disconnect, device number 28 [ 303.277644][ T9703] fido_id[9703]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 303.389035][ T9712] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1355'. [ 303.434921][ T30] audit: type=1400 audit(1772670096.376:800): avc: denied { watch } for pid=9713 comm="syz.1.1356" path="/247/file0" dev="tmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 303.536046][ T30] audit: type=1400 audit(1772670096.376:801): avc: denied { watch_sb watch_reads } for pid=9713 comm="syz.1.1356" path="/247/file0" dev="tmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 304.056824][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 304.109493][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 304.157519][ T9725] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1359'. [ 304.190944][ T5919] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 304.315782][ T9730] capability: warning: `syz.0.1362' uses 32-bit capabilities (legacy support in use) [ 304.372778][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.384604][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.394533][ T5919] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 304.404580][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.434678][ T5919] usb 2-1: config 0 descriptor?? [ 304.466468][ T5870] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 304.628504][ T5870] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 304.664653][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.679288][ T5919] usbhid 2-1:0.0: can't add hid device: -71 [ 304.691078][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.699831][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.709749][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 304.726203][ T5919] usb 2-1: USB disconnect, device number 24 [ 304.742625][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 304.767336][ T5870] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 304.776739][ T5870] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 304.785648][ T5870] usb 4-1: Manufacturer: syz [ 304.803956][ T5870] usb 4-1: config 0 descriptor?? [ 304.926496][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 304.933314][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 304.943544][ T10] usb 1-1: config 0 has no interface number 0 [ 304.951726][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 304.952176][ T9740] netlink: 'syz.2.1366': attribute type 29 has an invalid length. [ 304.960764][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 304.976892][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.992494][ T9740] netlink: 'syz.2.1366': attribute type 29 has an invalid length. [ 305.011530][ T9740] netlink: 'syz.2.1366': attribute type 32 has an invalid length. [ 305.019459][ T9740] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1366'. [ 305.029658][ T10] usb 1-1: Product: syz [ 305.035772][ T10] usb 1-1: Manufacturer: syz [ 305.042005][ T10] usb 1-1: SerialNumber: syz [ 305.057332][ T10] usb 1-1: config 0 descriptor?? [ 305.250532][ T5870] appleir 0003:05AC:8243.001C: item fetching failed at offset 0/1 [ 305.258611][ T5919] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 305.266985][ T5870] appleir 0003:05AC:8243.001C: parse failed [ 305.280293][ T5870] appleir 0003:05AC:8243.001C: probe with driver appleir failed with error -22 [ 305.440918][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.452140][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.462126][ T5919] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 305.471615][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.481611][ T5870] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 305.493328][ T5919] usb 2-1: config 0 descriptor?? [ 305.503492][ T9752] comedi comedi1: no devices specified [ 305.652834][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 305.661791][ T5870] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 305.671517][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.679933][ T5870] usb 3-1: Product: syz [ 305.684502][ T5870] usb 3-1: Manufacturer: syz [ 305.694438][ T5870] usb 3-1: SerialNumber: syz [ 305.706850][ T5870] usb 3-1: config 0 descriptor?? [ 305.942884][ T5919] steelseries 0003:1038:12B6.001D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 306.375586][ T5870] peak_usb 3-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 306.388320][ T5870] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 306.394712][ T5818] usb 2-1: USB disconnect, device number 25 [ 306.396038][ T5870] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 306.443068][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 306.461576][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.481787][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 306.495345][ T5870] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 306.505251][ T9758] veth0_to_team: entered promiscuous mode [ 306.508973][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 306.521869][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 306.526923][ T9758] batadv_slave_1: entered promiscuous mode [ 306.533019][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 306.551543][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 306.573863][ T9757] batadv_slave_1: left promiscuous mode [ 306.580009][ T9757] veth0_to_team: left promiscuous mode [ 306.590199][ T10] usb 1-1: USB disconnect, device number 27 [ 306.649432][ T5870] usb 3-1: USB disconnect, device number 29 [ 307.263591][ T9774] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1380'. [ 307.278329][ T9774] netlink: Conntrack attr has 4 unknown bytes [ 307.281179][ T10] usb 4-1: USB disconnect, device number 25 [ 307.418604][ T9780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.534525][ T9785] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1385'. [ 307.676389][ T9793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.812230][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 307.838763][ T30] audit: type=1400 audit(1772670100.502:802): avc: denied { write } for pid=9796 comm="syz.3.1391" path="socket:[26502]" dev="sockfs" ino=26502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 307.983009][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 307.994787][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 308.010802][ T10] usb 3-1: config 179 has no interface number 0 [ 308.017320][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 308.046749][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 308.072869][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 308.084968][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 308.097862][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 308.113001][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 308.123116][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.136550][ T9787] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 308.174589][ T5870] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 308.348575][ T5870] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.357606][ T5870] usb 1-1: config 0 has no interface number 0 [ 308.363875][ T5870] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.383330][ T5870] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.405543][ T5870] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.431782][ T5870] usb 1-1: config 0 interface 1 has no altsetting 0 [ 308.440688][ T5870] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 308.483313][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.493036][ T5818] usb 3-1: USB disconnect, device number 30 [ 308.493039][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 308.493086][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 308.526566][ T5870] usb 1-1: config 0 descriptor?? [ 308.599097][ T30] audit: type=1400 audit(1772670101.214:803): avc: denied { mount } for pid=9812 comm="syz.4.1398" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 308.644893][ T30] audit: type=1400 audit(1772670101.242:804): avc: denied { mounton } for pid=9812 comm="syz.4.1398" path="/294/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 308.773659][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 308.945577][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 308.963563][ T10] usb 4-1: string descriptor 0 read error: -22 [ 308.973031][ T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.40 [ 308.993358][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.312899][ T5870] input: HID 145f:0212 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:145F:0212.001E/input/input35 [ 309.434617][ T5870] input: HID 145f:0212 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:145F:0212.001E/input/input36 [ 309.548489][ T10] hid_parser_main: 4007 callbacks suppressed [ 309.548510][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.575517][ T5870] uclogic 0003:145F:0212.001E: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.0-1/input1 [ 309.596967][ T30] audit: type=1400 audit(1772670102.131:805): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 309.598304][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.646516][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.681849][ T5877] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 309.703203][ T5870] usb 1-1: USB disconnect, device number 28 [ 309.746704][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.753809][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.790144][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.802324][ T9822] fido_id[9822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 309.817592][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.832149][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.850178][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.852238][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 309.880366][ T10] sunplus 0003:04FC:05D8.001F: unknown main item tag 0x0 [ 309.882298][ T5877] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 309.915575][ T5877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.951782][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.965861][ T10] sunplus 0003:04FC:05D8.001F: hidraw0: USB HID vff.7f Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 309.993118][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 310.013010][ T10] usb 4-1: USB disconnect, device number 26 [ 310.015122][ T5877] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 310.055406][ T9828] fido_id[9828]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 310.070285][ T5877] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 310.103786][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.347933][ T5877] usb 3-1: usb_control_msg returned -32 [ 310.353580][ T5877] usbtmc 3-1:16.0: can't read capabilities [ 310.465744][ T30] audit: type=1400 audit(1772670102.964:806): avc: denied { mount } for pid=9836 comm="syz.3.1408" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 310.510726][ T30] audit: type=1400 audit(1772670102.992:807): avc: denied { search } for pid=9836 comm="syz.3.1408" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.533531][ T30] audit: type=1400 audit(1772670102.992:808): avc: denied { search } for pid=9836 comm="syz.3.1408" name="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.615750][ T30] audit: type=1400 audit(1772670102.992:809): avc: denied { read open } for pid=9836 comm="syz.3.1408" path="/" dev="configfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 310.653120][ T9842] netlink: 'syz.3.1410': attribute type 4 has an invalid length. [ 310.717784][ T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 310.736971][ T9844] comedi comedi1: no devices specified [ 310.934603][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 310.953108][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.971099][ T10] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 310.993965][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.018471][ T10] usb 1-1: config 0 descriptor?? [ 311.030898][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 311.053538][ T30] audit: type=1400 audit(1772670103.506:810): avc: denied { map } for pid=9818 comm="syz.1.1400" path="socket:[27652]" dev="sockfs" ino=27652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.110843][ T30] audit: type=1400 audit(1772670103.506:811): avc: denied { read write } for pid=9818 comm="syz.1.1400" path="socket:[27652]" dev="sockfs" ino=27652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 311.241387][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 311.401837][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 311.409522][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.422356][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.457907][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 311.490374][ T5877] usb 3-1: USB disconnect, device number 31 [ 311.504755][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 311.525520][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.543095][ T10] usb 4-1: config 0 descriptor?? [ 311.761644][ T9857] input: syz1 as /devices/virtual/input/input37 [ 311.991388][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 311.998245][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 312.010136][ T10] usb 4-1: USB disconnect, device number 27 [ 312.142322][ T9863] bridge6: entered promiscuous mode [ 312.147695][ T9863] bridge6: entered allmulticast mode [ 312.586470][ T9872] xt_hashlimit: size too large, truncated to 1048576 [ 312.611268][ T30] audit: type=1400 audit(1772670104.966:812): avc: denied { module_request } for pid=9871 comm="syz.4.1418" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 312.780199][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 312.952505][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 312.968300][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 312.979043][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 312.989927][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.008135][ T9867] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.064540][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.205061][ T9889] comedi comedi1: no devices specified [ 313.503182][ T10] usb 3-1: USB disconnect, device number 32 [ 313.676746][ T5877] usb 1-1: USB disconnect, device number 29 [ 314.488079][ T30] audit: type=1400 audit(1772670106.716:813): avc: denied { ioctl } for pid=9922 comm="syz.3.1437" path="socket:[27953]" dev="sockfs" ino=27953 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.714436][ T30] audit: type=1400 audit(1772670106.847:814): avc: denied { read } for pid=9922 comm="syz.3.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 315.109737][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 315.163231][ T30] audit: type=1400 audit(1772670107.343:815): avc: denied { bind } for pid=9932 comm="syz.2.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 315.237951][ T30] audit: type=1400 audit(1772670107.390:816): avc: denied { accept } for pid=9934 comm="syz.1.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.377456][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 315.389089][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.413528][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.434159][ T9933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.438515][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.460629][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 315.471367][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.486549][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.496434][ T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.504939][ T24] usb 1-1: Manufacturer: syz [ 315.517296][ T9941] 9pnet: p9_errstr2errno: server reported unknown error di3 [ 315.548500][ T9943] comedi comedi1: no devices specified [ 315.679196][ T24] usb 1-1: config 0 descriptor?? [ 315.763229][ T9933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.842665][ T9933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.892211][ T9948] syzkaller1: entered promiscuous mode [ 315.934797][ T9948] syzkaller1: entered allmulticast mode [ 315.976122][ T24] rc_core: IR keymap rc-hauppauge not found [ 315.982221][ T24] Registered IR keymap rc-empty [ 315.988354][ T9933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.988432][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.030266][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.083481][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 316.128739][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input38 [ 316.175704][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.204913][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.244162][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.307119][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.329401][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.381978][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.417026][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.436408][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.461074][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.524058][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.538179][ T30] audit: type=1400 audit(1772670108.578:817): avc: denied { bind } for pid=9958 comm="syz.3.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 316.573770][ T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.586198][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.603780][ T24] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 316.605323][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.641182][ T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 316.661011][ T24] usb 1-1: USB disconnect, device number 30 [ 316.683034][ T9963] loop3: detected capacity change from 0 to 7 [ 316.817632][ T5823] Dev loop3: unable to read RDB block 7 [ 316.824459][ T30] audit: type=1400 audit(1772670108.578:818): avc: denied { name_bind } for pid=9958 comm="syz.3.1450" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 316.848845][ T5823] loop3: unable to read partition table [ 316.857053][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.867357][ T5823] loop3: partition table beyond EOD, truncated [ 316.879022][ T9963] Dev loop3: unable to read RDB block 7 [ 316.920682][ T9963] loop3: unable to read partition table [ 316.929761][ T30] audit: type=1400 audit(1772670108.578:819): avc: denied { node_bind } for pid=9958 comm="syz.3.1450" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 316.987892][ T9963] loop3: partition table beyond EOD, truncated [ 317.030101][ T9963] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 317.093780][ T9969] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.236483][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 317.477017][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 317.492545][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.492577][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 317.492753][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 317.492776][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.498016][ T10] usb 3-1: config 0 descriptor?? [ 317.500290][ T9971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.561988][ T10] hub 3-1:0.0: USB hub found [ 317.744752][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 317.860570][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 317.894990][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 317.936729][ T10] usb 3-1: USB disconnect, device number 33 [ 318.112500][ T30] audit: type=1400 audit(1772670110.113:820): avc: denied { mount } for pid=9995 comm="syz.0.1463" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 318.134742][ T5870] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 318.206145][ T30] audit: type=1400 audit(1772670110.160:821): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 318.269246][ T9998] syz_tun: refused to change device tx_queue_len [ 318.319996][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.328314][ T9998] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 318.328380][ T5870] usb 4-1: not running at top speed; connect to a high speed hub [ 318.419756][ T5870] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 318.439252][ T9999] syz_tun: refused to change device tx_queue_len [ 318.447679][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 318.465297][ T9999] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 318.483525][ T5870] usb 4-1: string descriptor 0 read error: -22 [ 318.490746][ T5870] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.40 [ 318.509015][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.532192][ T9992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 318.698893][ T30] audit: type=1400 audit(1772670110.656:822): avc: denied { load_policy } for pid=10011 comm="syz.2.1469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 318.699791][T10012] SELinux: failed to load policy [ 318.884023][ T5919] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 319.077930][ T5870] hid_parser_main: 4005 callbacks suppressed [ 319.077967][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.095105][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 319.133992][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 319.150248][ T5919] usb 5-1: config 4 interface 0 has no altsetting 0 [ 319.159957][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.176726][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.187366][ T5919] usb 5-1: string descriptor 0 read error: -22 [ 319.195655][ T5919] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 319.211898][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.219375][ T5919] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 319.230646][T10025] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1472'. [ 319.282610][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.332122][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.348289][ T5919] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 319.360523][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.648134][ T5919] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 319.659012][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.721690][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.729642][ T5919] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 319.746892][ T5870] dragonrise 0003:0079:0011.0020: unknown main item tag 0x0 [ 319.754612][ T5919] usb 5-1: media controller created [ 319.772372][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.802796][ T5870] dragonrise 0003:0079:0011.0020: hidraw0: USB HID v0.07 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 319.846657][ T5870] usb 4-1: USB disconnect, device number 28 [ 319.930371][ T5919] zl10353_read_register: readreg error (reg=127, ret==0) [ 320.021819][T10029] fido_id[10029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 320.102100][ T5919] usb 5-1: USB disconnect, device number 30 [ 320.598174][T10043] comedi comedi1: no devices specified [ 321.265166][ T5919] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 321.399367][T10056] loop5: detected capacity change from 0 to 7 [ 321.437653][ T5919] usb 2-1: config 1 interface 0 has no altsetting 0 [ 321.449393][ T5919] usb 2-1: string descriptor 0 read error: -22 [ 321.456357][ T2031] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.457618][ T5919] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 321.484490][ T2031] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.499790][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.536986][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.549149][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.568658][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.613944][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.640677][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.663635][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.682913][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.738759][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.771651][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.783121][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.791735][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.807711][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.844680][T10056] ldm_validate_partition_table(): Disk read failed. [ 321.851887][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.862426][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.877242][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.889174][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 321.944759][T10056] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 321.954670][T10056] Buffer I/O error on dev loop5, logical block 0, async page read [ 322.007826][T10056] Dev loop5: unable to read RDB block 0 [ 322.018107][T10056] loop5: unable to read partition table [ 322.027661][T10056] loop5: partition table beyond EOD, truncated [ 322.035218][T10056] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 322.102934][ T30] audit: type=1400 audit(1772670113.847:823): avc: denied { bind } for pid=10062 comm="syz.3.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 322.168099][ T5919] lua 0003:1E7D:2C2E.0021: hidraw0: USB HID vff.7f Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 322.270201][ T5877] usb 2-1: USB disconnect, device number 26 [ 322.377697][T10066] fido_id[10066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 323.632063][T10086] comedi comedi1: no devices specified [ 324.397630][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 324.434413][ T30] audit: type=1400 audit(1772670116.027:824): avc: denied { watch_mount } for pid=10104 comm="syz.3.1500" path="/301" dev="tmpfs" ino=1550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 324.560228][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 325.732078][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 325.745070][ T10] usb 2-1: string descriptor 0 read error: -22 [ 325.751418][ T10] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.40 [ 325.783453][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.052329][ T5877] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 326.109175][ T30] audit: type=1400 audit(1772670117.600:825): avc: denied { name_connect } for pid=10129 comm="syz.3.1504" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 326.136424][T10130] netlink: 'syz.3.1504': attribute type 10 has an invalid length. [ 326.145208][T10130] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1504'. [ 326.215751][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 326.223078][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.241392][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.244626][ T5870] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 326.254633][ T5877] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 326.289884][ T10] hid_parser_main: 8023 callbacks suppressed [ 326.289917][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.291038][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.300094][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.320880][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.328536][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.330986][ T5877] usb 3-1: config 0 descriptor?? [ 326.345605][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.353736][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.361293][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.374396][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.381843][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.389336][ T10] viewsonic 0003:0543:E621.0022: unknown main item tag 0x0 [ 326.423825][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 326.427975][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short [ 326.444404][ T10] viewsonic 0003:0543:E621.0022: hidraw0: USB HID v17.99 Device [HID 0543:e621] on usb-dummy_hcd.1-1/input0 [ 326.459817][ T5870] usb 1-1: not running at top speed; connect to a high speed hub [ 326.473319][ T5870] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 326.499244][ T5870] usb 1-1: config 1 interface 0 has no altsetting 0 [ 326.512032][ T10] usb 2-1: USB disconnect, device number 27 [ 326.536273][ T5870] usb 1-1: string descriptor 0 read error: -22 [ 326.555596][ T5870] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 326.588076][T10133] fido_id[10133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 326.591604][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.626267][T10127] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 328.216019][ T5877] HID 045e:07da: Invalid code 65791 type 1 [ 328.245857][ T5877] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0023/input/input39 [ 328.271400][ T5877] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 328.500675][ T5870] acrux 0003:1A34:F705.0024: hidraw1: USB HID v0.07 Device [HID 1a34:f705] on usb-dummy_hcd.0-1/input0 [ 328.542215][ T5870] acrux 0003:1A34:F705.0024: no inputs found [ 328.560941][ T5870] acrux 0003:1A34:F705.0024: Failed to enable force feedback support, error: -19 [ 328.762362][ T5870] usb 1-1: USB disconnect, device number 31 [ 328.768376][T10153] SELinux: failed to load policy [ 329.232596][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.241421][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.776896][ T29] usb 3-1: USB disconnect, device number 34 [ 330.984574][ T30] audit: type=1400 audit(1772670122.157:826): avc: denied { create } for pid=10174 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.012824][ T30] audit: type=1400 audit(1772670122.157:827): avc: denied { ioctl } for pid=10174 comm="syz.2.1528" path="socket:[28608]" dev="sockfs" ino=28608 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.048840][ T30] audit: type=1400 audit(1772670122.157:828): avc: denied { bind } for pid=10174 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.072966][ T30] audit: type=1400 audit(1772670122.157:829): avc: denied { write } for pid=10174 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.576167][T10183] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1531'. [ 332.332948][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 332.945483][ T30] audit: type=1400 audit(1772670123.991:830): avc: denied { create } for pid=10201 comm="syz.1.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 333.030279][ T30] audit: type=1400 audit(1772670124.019:831): avc: denied { sys_admin } for pid=10201 comm="syz.1.1536" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 333.281259][ T30] audit: type=1400 audit(1772670124.309:832): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 333.643470][T10231] comedi comedi1: no devices specified [ 333.818888][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 334.346545][ T30] audit: type=1400 audit(1772670125.311:833): avc: denied { create } for pid=10236 comm="syz.1.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.482234][ T30] audit: type=1400 audit(1772670125.348:834): avc: denied { setopt } for pid=10236 comm="syz.1.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.545090][ T5870] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 334.572541][ T30] audit: type=1400 audit(1772670125.348:835): avc: denied { bind } for pid=10236 comm="syz.1.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 335.385856][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 335.508031][ T5870] usb 4-1: unable to get BOS descriptor or descriptor too short [ 335.525935][ T5870] usb 4-1: not running at top speed; connect to a high speed hub [ 335.545349][ T5870] usb 4-1: config 1 interface 0 has no altsetting 0 [ 335.552213][ T5919] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 335.564511][ T5870] usb 4-1: string descriptor 0 read error: -22 [ 335.574190][ T5870] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 335.583320][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.662181][T10264] input: syz0 as /devices/virtual/input/input40 [ 335.724783][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 335.738583][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.755431][ T5919] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.768693][ T29] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 335.770609][ T5919] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 335.787769][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.798866][ T5919] usb 5-1: Product: syz [ 335.839743][ T5919] usb 5-1: Manufacturer: syz [ 335.865348][ T5919] usb 5-1: SerialNumber: syz [ 335.894317][ T5919] usb 5-1: config 0 descriptor?? [ 335.958545][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 335.967023][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 335.980645][ T29] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 335.989831][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.007191][ T29] usb 1-1: Product: syz [ 336.017983][ T29] usb 1-1: Manufacturer: syz [ 336.022707][ T29] usb 1-1: SerialNumber: syz [ 336.066883][ T5870] hid_parser_main: 8022 callbacks suppressed [ 336.066902][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.106501][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.125623][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.134007][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.147863][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.174585][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.204715][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.211840][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.244641][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.267089][ T5870] hid-rmi 0003:0461:4E72.0025: unknown main item tag 0x0 [ 336.363513][ T5870] hid-rmi 0003:0461:4E72.0025: hidraw0: USB HID v0.07 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 336.388894][ T29] usb 1-1: invalid MIDI EP [ 336.393359][ T29] usb 1-1: snd-bcd2000: error during probing [ 336.421558][ T29] snd-bcd2000 1-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 336.463925][ T5870] usb 4-1: USB disconnect, device number 29 [ 336.465027][ T29] usb 1-1: invalid MIDI EP [ 336.494989][ T29] usb 1-1: snd-bcd2000: error during probing [ 336.539790][ T29] snd-bcd2000 1-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 337.858408][ T29] usb 1-1: USB disconnect, device number 32 [ 337.986200][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.714552][ T29] usb 5-1: USB disconnect, device number 31 [ 339.082970][T10303] comedi comedi1: no devices specified [ 340.296832][ T29] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 340.467765][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 340.493991][ T29] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 340.510455][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.518576][ T29] usb 5-1: Product: syz [ 340.551089][ T29] usb 5-1: Manufacturer: syz [ 340.572754][ T29] usb 5-1: SerialNumber: syz [ 340.584118][ T29] usb 5-1: config 0 descriptor?? [ 340.629460][ T29] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 341.396627][ T29] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 341.848381][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.504133][ T5919] usb 5-1: USB disconnect, device number 32 [ 342.754116][T10342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.481269][ T29] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 343.655723][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 343.668970][ T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 343.689390][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.732588][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.769806][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.801802][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.844829][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.869017][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.119230][ T29] usb 3-1: usb_control_msg returned -32 [ 344.125895][ T29] usbtmc 3-1:16.0: can't read capabilities [ 344.261290][ T5877] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 344.283887][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 344.283919][ T30] audit: type=1400 audit(1772670134.612:842): avc: denied { watch_sb } for pid=10364 comm="syz.3.1587" path="/321" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 344.443128][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 344.468538][ T5877] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 344.502685][ T5877] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 344.568696][ T5877] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 344.692419][ T5877] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 344.720953][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 344.734079][ T5877] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 344.743608][ T5877] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 344.752767][ T5877] usb 5-1: Product: syz [ 344.799806][ T5877] usb 5-1: Manufacturer: syz [ 344.804424][ T5877] usb 5-1: SerialNumber: syz [ 344.823142][T10372] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -71 [ 344.823367][ T5818] usb 3-1: USB disconnect, device number 35 [ 344.839368][ T5877] usb 5-1: config 0 descriptor?? [ 344.848561][ T5877] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 344.864632][ T5877] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 345.924472][ T5877] usb 5-1: USB disconnect, device number 33 [ 345.930573][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 345.963234][ T5877] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 346.744602][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 347.494147][ T30] audit: type=1400 audit(1772670137.598:843): avc: denied { mount } for pid=10400 comm="syz.3.1596" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 347.612944][ T30] audit: type=1400 audit(1772670137.598:844): avc: denied { mounton } for pid=10400 comm="syz.3.1596" path="/324/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 347.681048][ T30] audit: type=1400 audit(1772670137.672:845): avc: denied { mount } for pid=10397 comm="syz.1.1595" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 347.720655][ T30] audit: type=1400 audit(1772670137.747:846): avc: denied { read } for pid=10400 comm="syz.3.1596" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 347.745775][ T5877] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 347.831951][ T30] audit: type=1400 audit(1772670137.757:847): avc: denied { read } for pid=10400 comm="syz.3.1596" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 347.884081][ T30] audit: type=1400 audit(1772670137.757:848): avc: denied { watch } for pid=10400 comm="syz.3.1596" path="/324/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 347.917468][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 347.969465][ T30] audit: type=1400 audit(1772670137.916:849): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 349.025823][ T5877] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 349.094903][ T5877] usb 5-1: config 0 has no interface number 0 [ 349.134485][ T5877] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 349.241788][ T5877] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 349.331301][ T5877] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 349.580842][ T5877] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 349.662387][ T5877] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 349.700465][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.743215][ T5919] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 349.768168][ T5877] usb 5-1: config 0 descriptor?? [ 349.806983][ T5877] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 349.914204][ T30] audit: type=1400 audit(1772670139.872:850): avc: denied { cmd } for pid=10465 comm="syz.3.1605" path="socket:[30211]" dev="sockfs" ino=30211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 349.937694][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 349.958239][ T5919] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 349.966642][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.988614][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.999077][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.009865][ T5919] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 350.032248][ T5919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 350.041512][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.077995][T10404] ldusb 5-1:0.55: Write buffer overflow, 2147479232 bytes dropped [ 350.096572][ T5877] usb 5-1: USB disconnect, device number 34 [ 350.108838][ T5877] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 350.280863][ T5919] usb 1-1: usb_control_msg returned -32 [ 350.292979][ T5919] usbtmc 1-1:16.0: can't read capabilities [ 350.459370][ T30] audit: type=1400 audit(1772670140.386:851): avc: denied { ioctl } for pid=10470 comm="syz.2.1606" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 350.541151][ T30] audit: type=1400 audit(1772670140.424:852): avc: denied { accept } for pid=10469 comm="syz.3.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 351.047947][T10481] usbtmc 1-1:16.0: usb_clear_halt returned -32 [ 351.173994][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.219375][ T5877] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 351.262500][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.284047][ T5919] usb 1-1: USB disconnect, device number 33 [ 351.353377][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.402127][ T5877] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 351.423872][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.446549][ T5877] usb 5-1: config 0 descriptor?? [ 351.455276][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.465770][ T5877] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 351.477168][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1615'. [ 351.628135][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.640591][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.665280][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.680517][ T30] audit: type=1400 audit(1772670141.528:853): avc: denied { read } for pid=5472 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 351.682369][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.721518][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.891138][ T5940] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 351.918407][ T13] bridge_slave_1: left allmulticast mode [ 351.934079][ T13] bridge_slave_1: left promiscuous mode [ 351.941336][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.966813][ T13] bridge_slave_0: left allmulticast mode [ 351.968837][T10503] netlink: 'syz.3.1619': attribute type 11 has an invalid length. [ 351.972568][ T13] bridge_slave_0: left promiscuous mode [ 351.972835][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.997138][T10503] netlink: 'syz.3.1619': attribute type 4 has an invalid length. [ 352.005651][T10503] netlink: 'syz.3.1619': attribute type 5 has an invalid length. [ 352.014813][T10503] netlink: 'syz.3.1619': attribute type 6 has an invalid length. [ 352.022990][T10503] netlink: 199748 bytes leftover after parsing attributes in process `syz.3.1619'. [ 352.083939][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 352.098501][ T5940] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 352.112617][ T5940] usb 2-1: config 0 has no interface number 0 [ 352.132826][ T5940] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 352.142177][ T30] audit: type=1400 audit(1772670141.958:854): avc: denied { read } for pid=10508 comm="syz.3.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 352.169802][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.187019][ T5940] usb 2-1: Product: syz [ 352.213581][ T5940] usb 2-1: Manufacturer: syz [ 352.219203][ T5940] usb 2-1: SerialNumber: syz [ 352.236759][ T5940] usb 2-1: config 0 descriptor?? [ 352.570406][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.585411][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.596126][ T13] bond0 (unregistering): Released all slaves [ 352.616503][T10512] bridge0: port 1(hsr0) entered disabled state [ 352.627215][T10512] bridge0: left allmulticast mode [ 352.676834][ T13] tipc: Disabling bearer [ 352.701532][ T13] tipc: Left network mode [ 352.777128][ T5877] usb 5-1: USB disconnect, device number 35 [ 353.018987][T10488] chnl_net:caif_netlink_parms(): no params data found [ 353.122604][ T5940] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 353.123674][ T29] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 353.312298][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 353.325018][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.335625][ T29] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 353.337704][ T5940] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 353.371038][T10488] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.381542][ T29] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 353.390347][ T5940] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 353.461154][T10488] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.471967][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.480505][T10488] bridge_slave_0: entered allmulticast mode [ 353.506850][T10488] bridge_slave_0: entered promiscuous mode [ 353.519965][ T29] usb 1-1: Product: syz [ 353.534131][ T5940] usb 2-1: USB disconnect, device number 28 [ 353.540876][ T29] usb 1-1: Manufacturer: syz [ 353.550889][ T29] usb 1-1: SerialNumber: syz [ 353.563666][ T29] usb 1-1: config 0 descriptor?? [ 353.596830][T10488] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.617933][T10488] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.687441][T10488] bridge_slave_1: entered allmulticast mode [ 353.701688][T10488] bridge_slave_1: entered promiscuous mode [ 353.793709][T10551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 353.824558][T10488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.870082][T10488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.913119][ T5813] Bluetooth: hci2: command tx timeout [ 354.155738][ T13] hsr_slave_0: left promiscuous mode [ 354.187000][ T13] hsr_slave_1: left promiscuous mode [ 354.319220][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.369258][ T30] audit: type=1400 audit(1772670144.036:855): avc: denied { unmount } for pid=10562 comm="syz.1.1628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 354.390128][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.399044][ T5818] Process accounting resumed [ 354.508738][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.520183][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.540121][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 354.656589][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 355.146441][ T13] veth1_macvtap: left promiscuous mode [ 355.164440][ T13] veth0_macvtap: left promiscuous mode [ 355.186626][ T13] veth1_vlan: left promiscuous mode [ 355.193813][ T13] veth0_vlan: left promiscuous mode [ 355.773298][ T13] team0 (unregistering): Port device team_slave_1 removed [ 355.798526][ T13] team0 (unregistering): Port device team_slave_0 removed [ 355.813508][T10584] loop2: detected capacity change from 0 to 7 [ 355.822913][T10584] Dev loop2: unable to read RDB block 7 [ 355.856206][T10584] loop2: unable to read partition table [ 355.882456][T10584] loop2: partition table beyond EOD, truncated [ 355.903962][T10584] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 356.050054][T10488] team0: Port device team_slave_0 added [ 356.057027][T10488] team0: Port device team_slave_1 added [ 356.144149][ T5813] Bluetooth: hci2: command tx timeout [ 356.156035][ T5818] usb 1-1: USB disconnect, device number 34 [ 356.239244][T10488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.270296][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.297127][T10488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.413032][T10488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.435031][ T30] audit: type=1400 audit(1772670145.982:856): avc: denied { write } for pid=10597 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 356.457919][T10488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.539628][T10488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.043790][T10488] hsr_slave_0: entered promiscuous mode [ 357.064209][T10488] hsr_slave_1: entered promiscuous mode [ 357.077447][ T5813] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 357.078463][T10488] debugfs: 'hsr0' already exists in 'hsr' [ 357.115669][T10488] Cannot create hsr debugfs directory [ 357.143676][ T30] audit: type=1400 audit(1772670146.637:857): avc: denied { listen } for pid=10617 comm="syz.4.1646" lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.191360][ T5818] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 357.261370][ T30] audit: type=1400 audit(1772670146.750:858): avc: denied { set_context_mgr } for pid=10619 comm="syz.4.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 357.303580][T10620] binder: 10619:10620 ioctl c0306201 200000000640 returned -22 [ 357.377702][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 357.412036][ T5818] usb 4-1: config index 0 descriptor too short (expected 3659, got 75) [ 357.421113][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.442851][ T5818] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 357.465855][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.485924][ T5818] usb 4-1: Product: syz [ 357.509947][ T5818] usb 4-1: Manufacturer: syz [ 357.522927][ T5818] usb 4-1: SerialNumber: syz [ 357.543054][ T5818] usb 4-1: config 0 descriptor?? [ 357.556436][ T30] audit: type=1400 audit(1772670147.030:859): avc: denied { connect } for pid=10625 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 357.609371][ T5818] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 357.631951][ T30] audit: type=1400 audit(1772670147.030:860): avc: denied { setopt } for pid=10625 comm="syz.4.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.182952][ T30] audit: type=1400 audit(1772670147.611:861): avc: denied { create } for pid=10637 comm="syz.0.1652" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 358.289294][ T30] audit: type=1400 audit(1772670147.611:862): avc: denied { read write } for pid=10637 comm="syz.0.1652" name="file0" dev="tmpfs" ino=1673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 358.356182][ T5813] Bluetooth: hci2: command tx timeout [ 358.364194][T10488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.427315][ T30] audit: type=1400 audit(1772670147.611:863): avc: denied { open } for pid=10637 comm="syz.0.1652" path="/320/file0" dev="tmpfs" ino=1673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 358.454452][T10488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 358.479634][T10488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 358.522929][ T30] audit: type=1400 audit(1772670147.611:864): avc: denied { ioctl } for pid=10637 comm="syz.0.1652" path="/320/file0" dev="tmpfs" ino=1673 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 358.559555][T10488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.756042][T10663] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1655'. [ 358.878827][ T30] audit: type=1400 audit(1772670148.256:865): avc: denied { listen } for pid=10661 comm="syz.0.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.005401][T10488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.088015][T10488] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.106428][T10443] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.113616][T10443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.152584][T10668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1657'. [ 359.178676][T10443] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.185888][T10443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.251629][ T5818] gspca_sunplus: reg_w_1 err -71 [ 359.257530][ T5818] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 359.282289][ T5818] usb 4-1: USB disconnect, device number 30 [ 359.445878][T10682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 359.744231][T10488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.478570][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1666'. [ 360.585090][ T5813] Bluetooth: hci2: command tx timeout [ 361.088042][T10488] veth0_vlan: entered promiscuous mode [ 361.103106][ T5940] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 361.105875][T10488] veth1_vlan: entered promiscuous mode [ 361.273499][ T5940] usb 1-1: Using ep0 maxpacket: 32 [ 361.280578][ T5940] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 361.313807][ T5940] usb 1-1: config 0 has no interface number 0 [ 361.326675][ T5940] usb 1-1: config 0 interface 184 has no altsetting 0 [ 361.327490][T10488] veth0_macvtap: entered promiscuous mode [ 361.345070][ T5940] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 361.391410][T10488] veth1_macvtap: entered promiscuous mode [ 361.446736][T10488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.455857][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.480383][T10488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.522642][ T5940] usb 1-1: Product: syz [ 361.534130][ T5940] usb 1-1: Manufacturer: syz [ 361.538781][ T5940] usb 1-1: SerialNumber: syz [ 361.551094][ T298] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.565167][ T298] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.574874][ T5940] usb 1-1: config 0 descriptor?? [ 361.624414][ T298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.650637][ T298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.732315][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.740677][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.755512][T10739] comedi comedi1: no devices specified [ 361.906049][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.913990][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.959644][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 362.187419][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.203426][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 362.203440][ T30] audit: type=1400 audit(1772670151.382:867): avc: denied { mounton } for pid=10488 comm="syz-executor" path="/root/syzkaller.81gZuM/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 362.295130][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.317316][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.360611][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 362.369893][ T30] audit: type=1400 audit(1772670151.410:868): avc: denied { mounton } for pid=10488 comm="syz-executor" path="/root/syzkaller.81gZuM/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 362.397566][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.406776][ T30] audit: type=1400 audit(1772670151.410:869): avc: denied { mounton } for pid=10488 comm="syz-executor" path="/root/syzkaller.81gZuM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=32425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 362.448552][ T24] usb 2-1: config 0 descriptor?? [ 362.564665][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 362.697359][ T30] audit: type=1400 audit(1772670151.466:870): avc: denied { mounton } for pid=10488 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 362.705376][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 364.262163][ T24] hid_parser_main: 3541 callbacks suppressed [ 364.262189][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.279206][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.289468][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.296940][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.304844][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.315332][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.328296][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 364.374025][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 364.415109][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.415546][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 364.441712][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.457593][T10759] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 364.473315][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.502774][ T24] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 364.536589][ T24] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 364.549869][ T5940] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 364.597137][ T5940] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 364.620522][ T5940] usb 1-1: USB disconnect, device number 35 [ 364.787140][T10763] bond1: (slave geneve2): making interface the new active one [ 364.811944][T10763] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 364.851183][ T34] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 364.874390][ T34] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 364.884908][ T34] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 364.895175][ T34] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 365.315263][ T30] audit: type=1400 audit(1772670154.171:871): avc: denied { watch watch_reads } for pid=10777 comm="syz.5.1678" path="pipe:[32892]" dev="pipefs" ino=32892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 365.481709][ T30] audit: type=1400 audit(1772670154.442:872): avc: denied { getopt } for pid=10787 comm="syz.4.1688" lport=37511 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 365.868458][ T5919] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 366.060759][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 366.070572][ T5919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 366.116273][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 366.144860][ T5919] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.171128][ T5919] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.201690][ T5919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.217039][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.251019][T10809] comedi comedi1: no devices specified [ 366.337036][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 366.590860][ T5919] usb 1-1: usb_control_msg returned -32 [ 366.596601][ T5919] usbtmc 1-1:16.0: can't read capabilities [ 366.782393][ T5940] usb 2-1: USB disconnect, device number 29 [ 366.963656][T10824] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1699'. [ 367.045048][T10824] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 367.757160][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 368.507948][T10852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 368.536560][ T5813] Bluetooth: hci1: command 0x0406 tx timeout [ 368.628150][T10853] SELinux: failed to load policy [ 368.778100][ T5919] usb 1-1: USB disconnect, device number 36 [ 368.884430][ T30] audit: type=1400 audit(1772670157.633:873): avc: denied { append } for pid=10860 comm="syz.0.1712" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 370.048327][T10885] comedi comedi1: no devices specified [ 370.129517][ T30] audit: type=1400 audit(1772670158.793:874): avc: denied { create } for pid=10887 comm="syz.5.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 370.464965][ T30] audit: type=1400 audit(1772670158.990:875): avc: denied { connect } for pid=10887 comm="syz.5.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 370.940832][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 371.074283][T10903] Zero length message leads to an empty skb [ 371.575496][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 371.586849][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 371.681669][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.737435][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.777406][T10890] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 371.793827][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 373.030265][ T5919] usb 5-1: USB disconnect, device number 36 [ 373.296917][ T30] audit: type=1400 audit(1772670161.751:876): avc: denied { read } for pid=10922 comm="syz.0.1730" path="socket:[33969]" dev="sockfs" ino=33969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 373.382547][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 373.437080][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'. [ 374.021152][T10943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.599913][ T30] audit: type=1400 audit(1772670162.967:877): avc: denied { read } for pid=10950 comm="syz.0.1737" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 374.635009][T10955] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 374.789911][T10959] batadv_slave_1: entered promiscuous mode [ 374.805731][T10958] batadv_slave_1: left promiscuous mode [ 375.053387][T10962] comedi comedi1: no devices specified [ 375.410872][T10971] netlink: 'syz.1.1740': attribute type 10 has an invalid length. [ 375.500467][T10971] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 376.832609][ T30] audit: type=1400 audit(1772670165.063:878): avc: denied { connect } for pid=10985 comm="syz.1.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 378.276375][T11003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.516598][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1751'. [ 379.739215][T11013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1751'. [ 380.044596][ T6374] udevd[6374]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 380.098776][ T6374] udevd[6374]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 381.586638][ T30] audit: type=1400 audit(1772670169.508:879): avc: denied { listen } for pid=11053 comm="syz.0.1760" lport=36572 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 381.758605][ T5818] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 381.780150][ T5919] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 381.922716][ T5818] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.948700][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.965255][ T5919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.980671][ T5818] usb 6-1: Product: syz [ 381.987167][ T5919] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 381.989649][ T5818] usb 6-1: Manufacturer: syz [ 382.022518][ T5818] usb 6-1: SerialNumber: syz [ 382.027055][ T5919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.045863][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.061651][ T5919] usb 4-1: Product: syz [ 382.066001][ T5919] usb 4-1: Manufacturer: syz [ 382.073127][ T5919] usb 4-1: SerialNumber: syz [ 382.094210][ T5919] cdc_mbim 4-1:1.0: skipping garbage [ 382.320529][T11050] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 382.371743][T11082] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1764'. [ 384.288888][T11112] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1771'. [ 384.332999][T11113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.344819][T11112] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 384.383492][T11050] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 384.396474][ T5818] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 384.403383][ T5818] cdc_ncm 6-1:1.0: setting tx_max = 16384 [ 384.404677][ T5919] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 384.432671][ T5919] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 384.627350][ T5919] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 384.650430][ T5919] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 384.688217][ T5919] wwan wwan0: port wwan0mbim0 attached [ 384.723446][ T5919] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:ac:31:11:e5:75 [ 384.860819][ T5818] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 384.876805][ T24] usb 4-1: USB disconnect, device number 31 [ 384.889973][ T24] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 384.966124][ T5818] usb 6-1: USB disconnect, device number 2 [ 385.094808][ T5818] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 385.116409][ T24] wwan wwan0: port wwan0mbim0 disconnected [ 385.644382][T11131] comedi comedi1: no devices specified [ 386.316892][T11151] comedi comedi1: no devices specified [ 386.396775][ T5870] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 387.539712][ T5870] usb 4-1: Using ep0 maxpacket: 8 [ 387.557385][ T5870] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 387.565798][ T5870] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.577990][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.603659][ T5870] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.634759][ T5870] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.665230][ T5870] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 387.696021][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.945936][ T5870] usb 4-1: usb_control_msg returned -32 [ 387.951559][ T5870] usbtmc 4-1:16.0: can't read capabilities [ 387.999429][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.184600][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.438798][T11144] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 388.447742][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.602139][ T5826] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.614865][ T5826] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.626591][ T5826] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.644773][ T5826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.669693][ T5826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.692085][ T5818] usb 4-1: USB disconnect, device number 32 [ 388.730123][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.015745][T11189] comedi comedi1: no devices specified [ 389.414024][ T12] hsr0: left allmulticast mode [ 389.489764][ T12] hsr_slave_0: left allmulticast mode [ 389.512521][ T12] hsr_slave_1: left allmulticast mode [ 389.573362][ T12] hsr0: left promiscuous mode [ 389.626647][ T12] bridge0: port 3(hsr0) entered disabled state [ 389.689159][ T12] bridge_slave_1: left allmulticast mode [ 389.751297][ T12] bridge_slave_1: left promiscuous mode [ 390.777687][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.928056][ T5813] Bluetooth: hci3: command tx timeout [ 390.937148][ T12] bridge_slave_0: left allmulticast mode [ 390.969499][ T12] bridge_slave_0: left promiscuous mode [ 390.975451][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.023372][ T5919] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 391.054381][ T12] batman_adv: batadv0: Interface deactivated: gretap1 [ 391.324341][ T5919] usb 6-1: Using ep0 maxpacket: 32 [ 391.432901][ T5919] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.472189][ T5919] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.483605][ T5919] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 391.492939][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.502416][ T5919] usb 6-1: Product: syz [ 391.507017][ T5919] usb 6-1: Manufacturer: syz [ 391.511630][ T5919] usb 6-1: SerialNumber: syz [ 391.520338][ T5919] usb 6-1: config 0 descriptor?? [ 391.643655][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 391.764296][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 391.804258][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 391.816003][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 391.845901][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.855640][ T10] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 391.876137][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.885451][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.894104][ T10] usb 4-1: Product: syz [ 391.901910][ T12] bond0 (unregistering): Released all slaves [ 391.902425][ T10] usb 4-1: Manufacturer: syz [ 391.992811][T11177] chnl_net:caif_netlink_parms(): no params data found [ 392.013016][ T10] usb 4-1: SerialNumber: syz [ 392.472763][T11177] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.543645][T11237] comedi comedi1: no devices specified [ 392.622982][T11238] comedi comedi1: no devices specified [ 392.656440][T11177] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.744500][T11177] bridge_slave_0: entered allmulticast mode [ 392.754114][T11177] bridge_slave_0: entered promiscuous mode [ 392.778671][T11177] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.802690][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.817699][T11177] bridge_slave_1: entered allmulticast mode [ 392.823277][ T10] usb 4-1: invalid MIDI EP [ 392.873672][ T10] usb 4-1: snd-bcd2000: error during probing [ 392.905105][T11177] bridge_slave_1: entered promiscuous mode [ 393.033784][ T10] snd-bcd2000 4-1:1.1: probe with driver snd-bcd2000 failed with error -22 [ 393.072787][ T10] usb 4-1: invalid MIDI EP [ 393.084717][ T10] usb 4-1: snd-bcd2000: error during probing [ 393.099316][ T10] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 393.201419][ T5813] Bluetooth: hci3: command tx timeout [ 393.251685][ T10] usb 4-1: USB disconnect, device number 33 [ 393.264187][T11177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.347385][T11177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.375843][ T6374] udevd[6374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.662044][ T24] usb 6-1: USB disconnect, device number 3 [ 393.743863][T11177] team0: Port device team_slave_0 added [ 393.799236][T11177] team0: Port device team_slave_1 added [ 393.975974][T11177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.983074][T11177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.010266][T11177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.082319][T11177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.089333][T11177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.135412][T11177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.289270][T11177] hsr_slave_0: entered promiscuous mode [ 394.302901][T11177] hsr_slave_1: entered promiscuous mode [ 394.324950][T11177] debugfs: 'hsr0' already exists in 'hsr' [ 394.346793][T11177] Cannot create hsr debugfs directory [ 395.378784][ T5813] Bluetooth: hci3: command tx timeout [ 395.384738][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.394410][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.575867][ T12] hsr_slave_0: left promiscuous mode [ 395.606861][ T12] hsr_slave_1: left promiscuous mode [ 395.624761][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.633529][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.676104][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.688984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.690558][T11298] comedi comedi1: no devices specified [ 395.760155][ T12] veth1_macvtap: left promiscuous mode [ 395.765688][ T12] veth0_macvtap: left promiscuous mode [ 395.791225][ T30] audit: type=1400 audit(1772670182.806:880): avc: denied { read } for pid=11297 comm="syz.0.1809" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 395.796768][ T12] veth1_vlan: left promiscuous mode [ 395.854208][ T12] veth0_vlan: left promiscuous mode [ 395.885655][ T30] audit: type=1400 audit(1772670182.806:881): avc: denied { open } for pid=11297 comm="syz.0.1809" path="/356/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 396.143377][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 396.321361][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 396.336601][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.359538][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 396.406216][ T29] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 396.473197][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.523013][T11317] comedi comedi1: no devices specified [ 396.537859][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 396.552051][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.798154][ T29] usb 6-1: GET_CAPABILITIES returned 0 [ 396.888962][ T29] usbtmc 6-1:16.0: can't read capabilities [ 397.052437][ T29] usb 6-1: USB disconnect, device number 4 [ 397.465981][T11177] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.521638][T11177] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 398.517949][ T5813] Bluetooth: hci3: command tx timeout [ 398.641204][ T12] IPVS: stop unused estimator thread 0... [ 398.662714][T11177] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 398.732106][T11177] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.150164][T11177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.205615][T11177] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.246934][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.254073][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.300451][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.307598][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.874451][T11177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.906651][ T30] audit: type=1400 audit(1772670187.588:882): avc: denied { call } for pid=11372 comm="syz.1.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 400.906962][T11373] binder_alloc: 11372: binder_alloc_buf, no vma [ 401.643471][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 401.652480][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'. [ 403.766671][T11177] veth0_vlan: entered promiscuous mode [ 404.058034][T11177] veth1_vlan: entered promiscuous mode [ 404.184574][T11177] veth0_macvtap: entered promiscuous mode [ 404.223906][T11177] veth1_macvtap: entered promiscuous mode [ 404.345461][T11177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.407875][T11177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.822559][T10458] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.836733][T10458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.862317][T10458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.901113][T10458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.255188][ T30] audit: type=1400 audit(1772670191.659:883): avc: denied { read } for pid=11429 comm="syz.5.1831" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 405.334391][T10458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.375700][T10458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.394675][T11431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 405.398491][ T30] audit: type=1400 audit(1772670191.659:884): avc: denied { open } for pid=11429 comm="syz.5.1831" path="/29/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 405.441479][T11431] block device autoloading is deprecated and will be removed. [ 405.505113][T10443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.555176][T10443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.942713][T11437] sd 0:0:1:0: PR command failed: 1026 [ 405.948189][T11437] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 405.958868][ T30] audit: type=1400 audit(1772670192.286:885): avc: denied { write } for pid=11436 comm="syz.1.1833" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 405.994617][T11437] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 406.038170][ T30] audit: type=1400 audit(1772670192.286:886): avc: denied { ioctl } for pid=11436 comm="syz.1.1833" path="/346/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 406.113191][T11441] kvm: emulating exchange as write [ 406.347224][ T5891] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 407.009710][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 407.021690][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.036476][ T5891] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.048487][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 407.088797][ T30] audit: type=1400 audit(1772670193.362:887): avc: denied { read } for pid=11456 comm="syz.6.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 407.089070][ T5891] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 407.192501][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.200649][ T5891] usb 6-1: Product: syz [ 407.258975][ T5891] usb 6-1: Manufacturer: syz [ 407.263620][ T5891] usb 6-1: SerialNumber: syz [ 407.324948][ T5891] usb 6-1: config 0 descriptor?? [ 407.508844][ T30] audit: type=1400 audit(1772670193.774:888): avc: denied { relabelfrom } for pid=11466 comm="syz.6.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 407.564307][ T30] audit: type=1400 audit(1772670193.774:889): avc: denied { relabelto } for pid=11466 comm="syz.6.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 407.633771][T11468] bridge0: port 3(hsr0) entered blocking state [ 407.640007][T11468] bridge0: port 3(hsr0) entered disabled state [ 407.646958][T11468] hsr0: entered allmulticast mode [ 407.652598][T11468] hsr_slave_0: entered allmulticast mode [ 407.658653][T11468] hsr_slave_1: entered allmulticast mode [ 407.665553][T11468] hsr0: entered promiscuous mode [ 407.677138][T11468] bridge0: port 3(hsr0) entered blocking state [ 407.683421][T11468] bridge0: port 3(hsr0) entered forwarding state [ 409.553724][ T5940] usb 6-1: USB disconnect, device number 5 [ 411.155642][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1850'. [ 411.625911][ T30] audit: type=1400 audit(1772670197.620:890): avc: denied { map } for pid=11526 comm="syz.3.1843" path="socket:[36393]" dev="sockfs" ino=36393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 411.725324][T11533] comedi comedi1: no devices specified [ 411.883155][T11537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.395684][ T5870] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 412.555826][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 412.569362][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.590343][ T5870] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 412.611020][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 412.623152][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.635893][ T5870] usb 4-1: Product: syz [ 412.662614][ T5870] usb 4-1: Manufacturer: syz [ 412.667311][ T5870] usb 4-1: SerialNumber: syz [ 412.694438][ T5870] usb 4-1: config 0 descriptor?? [ 412.825447][T11546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.701107][T11558] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1857'. [ 415.195830][T11591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 415.349603][ T5891] usb 4-1: USB disconnect, device number 34 [ 415.387606][ T30] audit: type=1400 audit(1772670201.138:891): avc: denied { create } for pid=11598 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 415.453911][ T30] audit: type=1400 audit(1772670201.167:892): avc: denied { bind } for pid=11598 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 415.488535][T11597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1864'. [ 415.531120][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 415.764844][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1869'. [ 415.868402][ T5891] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 415.915612][T11602] team0: Port device syz_tun added [ 415.986712][T11616] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1868'. [ 416.039562][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 416.052471][ T5891] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 416.068851][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.113804][ T5891] usb 4-1: Product: syz [ 416.177553][ T5891] usb 4-1: Manufacturer: syz [ 416.227500][ T5891] usb 4-1: SerialNumber: syz [ 416.295396][ T5891] usb 4-1: config 0 descriptor?? [ 416.315190][ T5891] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 416.328734][ T5891] dvb-usb: bulk message failed: -22 (4/0) [ 416.334803][ T5891] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 416.345552][ T5891] dvb-usb: bulk message failed: -22 (5/0) [ 416.351674][ T5891] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 416.375905][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.401282][T11610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.409842][ T5891] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 416.418133][ T5891] usb 4-1: media controller created [ 416.487674][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.517239][ T5891] usb 4-1: selecting invalid altsetting 3 [ 416.523883][ T5891] ttusb2: set interface to alts=3 failed [ 416.533864][T11599] dvb-usb: bulk message failed: -22 (8/0) [ 416.539751][T11599] ttusb2: there might have been an error during control message transfer. (rlen = 22, was 0) [ 416.644772][T11599] ttusb2: i2c transfer failed. [ 416.744074][ T5891] DVB: Unable to find symbol tda10086_attach() [ 416.784895][ T5891] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 416.833077][ T5891] dvb-usb: bulk message failed: -22 (4/0) [ 416.838821][ T5891] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 416.881146][ T5891] dvb-usb: bulk message failed: -22 (5/0) [ 416.903945][ T5891] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 416.922201][ T5891] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 416.963557][ T5891] usb 4-1: USB disconnect, device number 35 [ 417.096544][ T5891] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 417.450356][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 418.584442][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 418.591652][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 418.621455][ T5870] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 418.647354][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 418.685979][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 418.707381][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.720740][ T10] usb 6-1: Product: syz [ 418.733631][ T10] usb 6-1: Manufacturer: syz [ 418.738267][ T10] usb 6-1: SerialNumber: syz [ 418.819481][ T10] usb 6-1: config 0 descriptor?? [ 418.828429][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 418.835761][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.846880][ T10] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 418.875366][ T5870] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.887838][ T10] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 418.908774][ T5870] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 418.940167][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.990045][ T5870] usb 2-1: Product: syz [ 418.994283][ T5870] usb 2-1: Manufacturer: syz [ 418.998901][ T5870] usb 2-1: SerialNumber: syz [ 419.028844][ T5870] usb 2-1: config 0 descriptor?? [ 419.182517][T11686] comedi comedi1: no devices specified [ 419.496321][ T10] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 419.504105][ T10] em28xx 6-1:0.0: Config register raw data: 0xea [ 419.513739][ T10] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 419.526074][ T10] em28xx 6-1:0.0: No AC97 audio processor [ 419.955098][T11702] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1886'. [ 420.084613][T11708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.567566][ T10] usb 6-1: USB disconnect, device number 6 [ 420.609253][ T5870] usb 2-1: USB disconnect, device number 30 [ 421.270441][ T30] audit: type=1400 audit(1772670206.650:893): avc: denied { write } for pid=11714 comm="syz.1.1888" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 421.307031][ T30] audit: type=1400 audit(1772670206.650:894): avc: denied { ioctl } for pid=11714 comm="syz.1.1888" path="/358/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 421.512343][T11720] sd 0:0:1:0: PR command failed: 1026 [ 421.517862][T11720] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 421.525448][T11720] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 422.283693][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 422.328391][T11744] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 422.350030][T11719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.394767][ T30] audit: type=1400 audit(1772670207.698:895): avc: denied { listen } for pid=11745 comm="syz.0.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 422.490923][ T30] audit: type=1400 audit(1772670207.698:896): avc: denied { accept } for pid=11745 comm="syz.0.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 423.039041][T11767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.710561][T11778] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1905'. [ 424.178667][T11782] tipc: Started in network mode [ 424.209299][T11782] tipc: Node identity 5eff2b7282d8, cluster identity 4711 [ 424.252445][T11782] tipc: Enabled bearer , priority 0 [ 424.353596][T11784] syzkaller0: entered promiscuous mode [ 424.363812][T11784] syzkaller0: entered allmulticast mode [ 424.370431][T11784] tipc: Resetting bearer [ 424.460454][T11781] tipc: Resetting bearer [ 427.753696][ T30] audit: type=1400 audit(1772670212.724:897): avc: denied { create } for pid=11808 comm="syz.6.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 428.767008][T11781] tipc: Disabling bearer [ 428.782286][ T5940] tipc: Node number set to 3693554546 [ 429.057726][T11780] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 429.081530][T11780] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 429.099309][T11780] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.109357][T11780] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 429.134245][T11780] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 429.140205][T11780] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 429.377583][T11780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.383549][T11780] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 429.503875][ T5891] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 429.541032][T11780] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.551965][T11780] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 429.675512][ T5891] usb 7-1: too many configurations: 53, using maximum allowed: 8 [ 429.706358][ T5891] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 429.728539][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.749144][ T5891] usb 7-1: Product: syz [ 429.760304][ T5891] usb 7-1: Manufacturer: syz [ 429.765088][ T5891] usb 7-1: SerialNumber: syz [ 430.060771][ T30] audit: type=1400 audit(1772670214.876:898): avc: denied { mounton } for pid=11827 comm="syz.6.1919" path="/proc/99/task" dev="proc" ino=37658 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 430.154625][ T5891] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 430.281967][ T5891] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 430.304200][ T5891] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 430.806352][T11891] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1930'. [ 430.820969][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 430.854052][ T5891] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 430.863389][T11891] syzkaller1: entered promiscuous mode [ 430.870564][T11891] syzkaller1: entered allmulticast mode [ 430.896289][ T5891] usb 7-1: USB disconnect, device number 2 [ 432.212297][T11917] comedi comedi1: no devices specified [ 432.432249][T11922] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 433.835955][T11958] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1938'. [ 434.052387][T11964] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1943'. [ 434.096614][T11964] syzkaller1: entered promiscuous mode [ 434.104520][T11964] syzkaller1: entered allmulticast mode [ 434.436577][ T30] audit: type=1400 audit(1772670218.928:899): avc: denied { ioctl } for pid=11970 comm="syz.3.1946" path="socket:[39972]" dev="sockfs" ino=39972 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 434.652829][T11980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 434.692932][T11981] 0x000000000004-0x00000000000c : "" [ 434.704113][T11981] ftl_cs: FTL header corrupt! [ 435.075921][T11990] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 435.095232][T11990] ftl_cs: FTL header not found. [ 435.621839][T12007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.029347][T12026] 0x000000000004-0x00000000000c : "" [ 438.043103][T12026] ftl_cs: FTL header corrupt! [ 438.480360][T12036] overlayfs: upper fs does not support file handles, falling back to index=off. [ 441.142991][T12063] syz_tun: entered allmulticast mode [ 441.191552][T12061] syz_tun: left allmulticast mode [ 441.506652][T12074] comedi comedi1: no devices specified [ 442.543013][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b645c00: rx timeout, send abort [ 442.554349][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b647800: rx timeout, send abort [ 442.564413][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b647800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 442.585032][ T30] audit: type=1400 audit(1772670226.592:900): avc: denied { read } for pid=5158 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 442.615557][ T30] audit: type=1400 audit(1772670226.592:901): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.720561][ T30] audit: type=1400 audit(1772670226.592:902): avc: denied { search } for pid=5158 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.788564][ T30] audit: type=1400 audit(1772670226.592:903): avc: denied { add_name } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 442.859897][ T30] audit: type=1400 audit(1772670226.602:904): avc: denied { create } for pid=5158 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 442.943997][ T30] audit: type=1400 audit(1772670226.602:905): avc: denied { append open } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 442.982443][T12101] binder: BINDER_SET_CONTEXT_MGR already set [ 442.989123][T12101] binder: 12100:12101 ioctl 4018620d 200000000040 returned -16 [ 443.045447][ T30] audit: type=1400 audit(1772670226.602:906): avc: denied { getattr } for pid=5158 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 443.087490][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b645c00: abort rx timeout. Force session deactivation [ 443.102046][ T30] audit: type=1400 audit(1772670226.620:907): avc: denied { watch watch_reads } for pid=12085 comm="syz.6.1973" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 443.216262][ T5940] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 443.238204][ T30] audit: type=1400 audit(1772670226.920:908): avc: denied { set_context_mgr } for pid=12100 comm="syz.1.1976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 443.395630][ T5940] usb 7-1: Using ep0 maxpacket: 8 [ 443.441444][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327f7000: rx timeout, send abort [ 443.607574][ T5940] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 443.630965][ T5940] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 443.656869][ T5940] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 443.691519][ T5940] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.716226][ T5940] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 443.725627][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.943708][T12118] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1980'. [ 443.975903][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b0b7000: rx timeout, send abort [ 443.984685][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880327f7000: abort rx timeout. Force session deactivation [ 444.019818][ T5940] usb 7-1: GET_CAPABILITIES returned 0 [ 444.036400][ T5940] usbtmc 7-1:16.0: can't read capabilities [ 444.087828][ T30] audit: type=1400 audit(1772670227.977:909): avc: denied { map } for pid=12121 comm="syz.5.1981" path="socket:[40268]" dev="sockfs" ino=40268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 444.243273][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 444.276981][ T5891] usb 7-1: USB disconnect, device number 3 [ 444.348353][ T5940] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 444.380450][T12131] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 444.397459][T12134] netlink: 'syz.3.1985': attribute type 10 has an invalid length. [ 444.518501][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b0b7000: abort rx timeout. Force session deactivation [ 444.549145][ T5940] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 444.573930][ T5940] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 444.590210][ T5940] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 444.604671][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.638284][ T5940] usb 6-1: Product: syz [ 444.702459][T12139] comedi comedi1: no devices specified [ 444.790744][ T5940] usb 6-1: Manufacturer: syz [ 444.795490][ T5940] usb 6-1: SerialNumber: syz [ 444.803223][ T5940] usb 6-1: config 0 descriptor?? [ 444.817426][ T5940] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 446.143422][ T55] usb 6-1: USB disconnect, device number 7 [ 446.584737][T12171] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1994'. [ 446.699697][ T55] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 446.890071][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 446.896803][ T55] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 446.905426][ T55] usb 4-1: config 0 has no interface number 0 [ 446.911813][ T55] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 446.932678][ T55] usb 4-1: config 0 interface 89 has no altsetting 0 [ 446.951981][ T55] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 446.973455][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.001812][ T55] usb 4-1: Product: syz [ 447.010788][ T55] usb 4-1: Manufacturer: syz [ 447.017333][ T55] usb 4-1: SerialNumber: syz [ 447.033514][ T55] usb 4-1: config 0 descriptor?? [ 447.049146][ T55] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 447.071751][ T55] em28xx 4-1:0.89: Video interface 89 found: [ 447.360220][ T5891] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 447.525093][ T5891] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.540956][ T5891] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 447.552793][ T5891] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 447.564951][ T5891] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 447.577862][ T5891] usb 6-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 447.596502][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.604832][ T5891] usb 6-1: Product: syz [ 447.616882][ T5891] usb 6-1: Manufacturer: syz [ 447.621618][ T5891] usb 6-1: SerialNumber: syz [ 447.634675][T12182] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 447.715216][ T55] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 447.901708][ T5891] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 447.956018][ T5891] usb 6-1: USB disconnect, device number 8 [ 447.965494][T12195] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2003'. [ 448.016719][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.057115][T12197] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 448.171442][T12199] netlink: 'syz.6.2007': attribute type 2 has an invalid length. [ 448.235275][T12203] netlink: 'syz.6.2007': attribute type 2 has an invalid length. [ 448.451577][T12209] comedi comedi1: no devices specified [ 448.900606][ T55] em28xx 4-1:0.89: AC97 command still being executed: not handled properly! [ 448.957286][T12213] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2010'. [ 449.035226][ T55] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 449.047386][ T55] em28xx 4-1:0.89: board has no eeprom [ 449.113475][ T55] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 449.136595][ T55] em28xx 4-1:0.89: analog set to bulk mode. [ 449.219313][ T5870] em28xx 4-1:0.89: Registering V4L2 extension [ 449.279026][ T55] usb 4-1: USB disconnect, device number 36 [ 449.289553][ T55] em28xx 4-1:0.89: Disconnecting em28xx [ 449.355547][ T5870] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 449.363441][ T5870] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 449.437417][ T5870] em28xx 4-1:0.89: No AC97 audio processor [ 449.500655][ T5870] usb 4-1: Decoder not found [ 449.522442][ T5870] em28xx 4-1:0.89: failed to create media graph [ 449.588630][ T5870] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 449.646847][ T5870] em28xx 4-1:0.89: Registering snapshot button... [ 449.655783][T12227] ================================================================== [ 449.670287][T12227] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 449.670321][T12227] Read of size 8 at addr ffff88801c3c8748 by task v4l_id/12227 [ 449.670335][T12227] [ 449.687615][T12227] CPU: 1 UID: 0 PID: 12227 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 449.687645][T12227] Tainted: [L]=SOFTLOCKUP [ 449.687652][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.687663][T12227] Call Trace: [ 449.687669][T12227] [ 449.687676][T12227] dump_stack_lvl+0x100/0x190 [ 449.687709][T12227] print_report+0x156/0x4c9 [ 449.687734][T12227] ? __virt_addr_valid+0x81/0x620 [ 449.687760][T12227] ? __phys_addr+0xe8/0x180 [ 449.687782][T12227] ? v4l2_fh_init+0x27d/0x2c0 [ 449.687802][T12227] kasan_report+0xdf/0x1e0 [ 449.687830][T12227] ? v4l2_fh_init+0x27d/0x2c0 [ 449.687850][T12227] v4l2_fh_init+0x27d/0x2c0 [ 449.687868][T12227] v4l2_fh_open+0x64/0xa0 [ 449.687886][T12227] em28xx_v4l2_open+0x11e/0x570 [ 449.687918][T12227] v4l2_open+0x1d2/0x490 [ 449.687938][T12227] ? __pfx_v4l2_open+0x10/0x10 [ 449.687956][T12227] chrdev_open+0x234/0x6a0 [ 449.687974][T12227] ? __pfx_chrdev_open+0x10/0x10 [ 449.687991][T12227] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 449.688014][T12227] do_dentry_open+0x6d8/0x1660 [ 449.688041][T12227] ? __pfx_chrdev_open+0x10/0x10 [ 449.688060][T12227] vfs_open+0x82/0x3f0 [ 449.688081][T12227] path_openat+0x208c/0x31a0 [ 449.688103][T12227] ? __pfx_path_openat+0x10/0x10 [ 449.688123][T12227] do_file_open+0x20e/0x430 [ 449.688142][T12227] ? __pfx_do_file_open+0x10/0x10 [ 449.688165][T12227] ? alloc_fd+0x476/0x790 [ 449.688190][T12227] ? do_getname+0x191/0x390 [ 449.688212][T12227] do_sys_openat2+0x10d/0x1e0 [ 449.688233][T12227] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.688256][T12227] __x64_sys_openat+0x12d/0x210 [ 449.688273][T12227] ? __pfx___x64_sys_openat+0x10/0x10 [ 449.688295][T12227] ? do_user_addr_fault+0x8d6/0x12f0 [ 449.688316][T12227] do_syscall_64+0x106/0xf80 [ 449.688335][T12227] ? clear_bhb_loop+0x40/0x90 [ 449.688355][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.688372][T12227] RIP: 0033:0x7f39d84a7407 [ 449.688390][T12227] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 449.688407][T12227] RSP: 002b:00007ffd7c905cb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 449.688425][T12227] RAX: ffffffffffffffda RBX: 00007f39d8c89880 RCX: 00007f39d84a7407 [ 449.688437][T12227] RDX: 0000000000000000 RSI: 00007ffd7c907f1d RDI: ffffffffffffff9c [ 449.688448][T12227] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 449.688458][T12227] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 449.688468][T12227] R13: 00007ffd7c905f00 R14: 00007f39d8df0000 R15: 0000555fd30804d8 [ 449.688485][T12227] [ 449.688490][T12227] [ 449.951098][T12227] Allocated by task 5870: [ 449.955410][T12227] kasan_save_stack+0x30/0x50 [ 449.960083][T12227] kasan_save_track+0x14/0x30 [ 449.964742][T12227] __kasan_kmalloc+0xaa/0xb0 [ 449.969334][T12227] em28xx_v4l2_init.cold+0x94/0x3503 [ 449.974607][T12227] em28xx_init_extension+0x13a/0x200 [ 449.979874][T12227] request_module_async+0x61/0x80 [ 449.984885][T12227] process_one_work+0x9d7/0x1920 [ 449.989805][T12227] worker_thread+0x5da/0xe40 [ 449.994556][T12227] kthread+0x370/0x450 [ 449.998629][T12227] ret_from_fork+0x754/0xd80 [ 450.003285][T12227] ret_from_fork_asm+0x1a/0x30 [ 450.008034][T12227] [ 450.010336][T12227] Freed by task 5870: [ 450.014392][T12227] kasan_save_stack+0x30/0x50 [ 450.019054][T12227] kasan_save_track+0x14/0x30 [ 450.023713][T12227] kasan_save_free_info+0x3b/0x70 [ 450.028820][T12227] __kasan_slab_free+0x5f/0x80 [ 450.033569][T12227] kfree+0x1f6/0x6b0 [ 450.037445][T12227] kref_put.isra.0+0x56/0x90 [ 450.042021][T12227] em28xx_v4l2_init.cold+0x280/0x3503 [ 450.047379][T12227] em28xx_init_extension+0x13a/0x200 [ 450.052647][T12227] request_module_async+0x61/0x80 [ 450.057657][T12227] process_one_work+0x9d7/0x1920 [ 450.062592][T12227] worker_thread+0x5da/0xe40 [ 450.067161][T12227] kthread+0x370/0x450 [ 450.071209][T12227] ret_from_fork+0x754/0xd80 [ 450.075777][T12227] ret_from_fork_asm+0x1a/0x30 [ 450.080526][T12227] [ 450.082829][T12227] The buggy address belongs to the object at ffff88801c3c8000 [ 450.082829][T12227] which belongs to the cache kmalloc-8k of size 8192 [ 450.096876][T12227] The buggy address is located 1864 bytes inside of [ 450.096876][T12227] freed 8192-byte region [ffff88801c3c8000, ffff88801c3ca000) [ 450.111278][T12227] [ 450.113580][T12227] The buggy address belongs to the physical page: [ 450.119963][T12227] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c3c8 [ 450.128890][T12227] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 450.137366][T12227] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 450.144885][T12227] page_type: f5(slab) [ 450.148855][T12227] raw: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 450.157426][T12227] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 450.166077][T12227] head: 00fff00000000040 ffff88813fe40280 dead000000000100 dead000000000122 [ 450.174726][T12227] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 450.183477][T12227] head: 00fff00000000003 ffffea000070f201 00000000ffffffff 00000000ffffffff [ 450.192246][T12227] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 450.200912][T12227] page dumped because: kasan: bad access detected [ 450.207501][T12227] page_owner tracks the page as allocated [ 450.213297][T12227] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5805, tgid 5805 (syz-executor), ts 70977456892, free_ts 70898823041 [ 450.234827][T12227] post_alloc_hook+0x153/0x170 [ 450.239607][T12227] get_page_from_freelist+0x111d/0x3140 [ 450.245576][T12227] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 450.251538][T12227] new_slab+0xa6/0x6d0 [ 450.255586][T12227] refill_objects+0x26b/0x400 [ 450.260247][T12227] __pcs_replace_empty_main+0x19f/0x600 [ 450.265773][T12227] __kmalloc_cache_noprof+0x493/0x6f0 [ 450.271121][T12227] macvlan_common_newlink+0x476/0x18b0 [ 450.276559][T12227] rtnl_newlink+0x1494/0x2380 [ 450.281216][T12227] rtnetlink_rcv_msg+0x95e/0xe90 [ 450.286305][T12227] netlink_rcv_skb+0x159/0x420 [ 450.291053][T12227] netlink_unicast+0x5aa/0x870 [ 450.295797][T12227] netlink_sendmsg+0x8b0/0xda0 [ 450.300650][T12227] __sys_sendto+0x4aa/0x520 [ 450.305158][T12227] __x64_sys_sendto+0xe0/0x1c0 [ 450.309910][T12227] do_syscall_64+0x106/0xf80 [ 450.314480][T12227] page last free pid 5806 tgid 5806 stack trace: [ 450.320781][T12227] __free_frozen_pages+0x7e1/0x10d0 [ 450.325975][T12227] qlist_free_all+0x47/0xe0 [ 450.330466][T12227] kasan_quarantine_reduce+0x1a0/0x1f0 [ 450.336343][T12227] __kasan_slab_alloc+0x69/0x90 [ 450.341281][T12227] __kmalloc_cache_noprof+0x243/0x6f0 [ 450.346632][T12227] kset_create_and_add+0x4d/0x190 [ 450.351640][T12227] netdev_register_kobject+0x1ef/0x3d0 [ 450.357180][T12227] register_netdevice+0x12e0/0x2210 [ 450.362360][T12227] veth_newlink+0x316/0xa00 [ 450.366850][T12227] rtnl_newlink+0x1494/0x2380 [ 450.371506][T12227] rtnetlink_rcv_msg+0x95e/0xe90 [ 450.376421][T12227] netlink_rcv_skb+0x159/0x420 [ 450.381252][T12227] netlink_unicast+0x5aa/0x870 [ 450.385995][T12227] netlink_sendmsg+0x8b0/0xda0 [ 450.390846][T12227] __sys_sendto+0x4aa/0x520 [ 450.395335][T12227] __x64_sys_sendto+0xe0/0x1c0 [ 450.400082][T12227] [ 450.402382][T12227] Memory state around the buggy address: [ 450.408456][T12227] ffff88801c3c8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.416498][T12227] ffff88801c3c8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.424571][T12227] >ffff88801c3c8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.433588][T12227] ^ [ 450.439979][T12227] ffff88801c3c8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.448109][T12227] ffff88801c3c8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 450.456406][T12227] ================================================================== [ 450.475429][ T5870] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input41 [ 450.515606][ T5870] em28xx 4-1:0.89: Remote control support is not available for this card. [ 450.647933][T12227] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 450.655270][T12227] CPU: 1 UID: 0 PID: 12227 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 450.665911][T12227] Tainted: [L]=SOFTLOCKUP [ 450.670687][T12227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.680757][T12227] Call Trace: [ 450.684045][T12227] [ 450.687158][T12227] dump_stack_lvl+0x100/0x190 [ 450.691851][T12227] vpanic+0x552/0x970 [ 450.695833][T12227] ? __pfx_vpanic+0x10/0x10 [ 450.700347][T12227] ? v4l2_fh_init+0x27d/0x2c0 [ 450.705032][T12227] panic+0xd1/0xe0 [ 450.708770][T12227] ? __pfx_panic+0x10/0x10 [ 450.713278][T12227] ? v4l2_fh_init+0x27d/0x2c0 [ 450.717962][T12227] ? preempt_schedule_common+0x42/0xc0 [ 450.723429][T12227] ? check_panic_on_warn+0x1f/0x90 [ 450.729319][T12227] check_panic_on_warn.cold+0x19/0x34 [ 450.734706][T12227] end_report.part.0+0x3a/0x90 [ 450.739493][T12227] kasan_report.cold+0xe/0x18 [ 450.744282][T12227] ? v4l2_fh_init+0x27d/0x2c0 [ 450.749438][T12227] v4l2_fh_init+0x27d/0x2c0 [ 450.753954][T12227] v4l2_fh_open+0x64/0xa0 [ 450.758471][T12227] em28xx_v4l2_open+0x11e/0x570 [ 450.763364][T12227] v4l2_open+0x1d2/0x490 [ 450.767622][T12227] ? __pfx_v4l2_open+0x10/0x10 [ 450.772392][T12227] chrdev_open+0x234/0x6a0 [ 450.776826][T12227] ? __pfx_chrdev_open+0x10/0x10 [ 450.781795][T12227] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 450.788165][T12227] do_dentry_open+0x6d8/0x1660 [ 450.792978][T12227] ? __pfx_chrdev_open+0x10/0x10 [ 450.797918][T12227] vfs_open+0x82/0x3f0 [ 450.802013][T12227] path_openat+0x208c/0x31a0 [ 450.806615][T12227] ? __pfx_path_openat+0x10/0x10 [ 450.811566][T12227] do_file_open+0x20e/0x430 [ 450.816078][T12227] ? __pfx_do_file_open+0x10/0x10 [ 450.821110][T12227] ? alloc_fd+0x476/0x790 [ 450.825437][T12227] ? do_getname+0x191/0x390 [ 450.829948][T12227] do_sys_openat2+0x10d/0x1e0 [ 450.834630][T12227] ? __pfx_do_sys_openat2+0x10/0x10 [ 450.839838][T12227] __x64_sys_openat+0x12d/0x210 [ 450.844697][T12227] ? __pfx___x64_sys_openat+0x10/0x10 [ 450.850070][T12227] ? do_user_addr_fault+0x8d6/0x12f0 [ 450.855459][T12227] do_syscall_64+0x106/0xf80 [ 450.860057][T12227] ? clear_bhb_loop+0x40/0x90 [ 450.864738][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.870645][T12227] RIP: 0033:0x7f39d84a7407 [ 450.875058][T12227] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 450.894765][T12227] RSP: 002b:00007ffd7c905cb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 450.903273][T12227] RAX: ffffffffffffffda RBX: 00007f39d8c89880 RCX: 00007f39d84a7407 [ 450.911257][T12227] RDX: 0000000000000000 RSI: 00007ffd7c907f1d RDI: ffffffffffffff9c [ 450.919234][T12227] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 450.927996][T12227] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 450.935967][T12227] R13: 00007ffd7c905f00 R14: 00007f39d8df0000 R15: 0000555fd30804d8 [ 450.943957][T12227] [ 450.947137][T12227] Kernel Offset: disabled [ 450.951444][T12227] Rebooting in 86400 seconds..