last executing test programs: 12.526284036s ago: executing program 2 (id=3987): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/meminfo\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="80378e8deb77cf5309000000000000", @ANYRES32, @ANYRESOCT=r2], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 10.912188675s ago: executing program 4 (id=3991): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x1b, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18005abe3bbb000000000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$ITER_CREATE(0x3f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) connect$can_j1939(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 9.676225633s ago: executing program 1 (id=3994): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a948b5c9b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084661b14fc7202e7b510092e7dbe48014c2be7983a4e4e11a8906105f36f652d7135bda20b8a9abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff971", 0x49}, {&(0x7f0000000500)="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", 0x137}, {&(0x7f00000007c0)="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", 0xde5}], 0x4}}], 0x1, 0x4044805) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) splice(r4, 0x0, r7, 0x0, 0x8000000000025a5, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffb, 0x3, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f000001b700)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000d800c0016"], 0x24}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 8.827020395s ago: executing program 4 (id=3995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpriority(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000000)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x100, 0x2000000a, 0x7, 0xd4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x8000001) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') pread64(r8, &(0x7f0000019040)=""/102400, 0x19000, 0x400000000003) 8.754634662s ago: executing program 0 (id=3996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x7c, r1, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5681dbb6a262127ee0331e44e4c2f809abaf6b4bbdc99cc0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7b23158e15e44a916c8be66b9de3f57441307fae51f47023"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x7c}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x38, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @fd}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x5608, 0xfffffffffffffffd) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x7, 0x40, 0x3, 0x7fff, 0x4, "2f7db75fa914ae7db135739fcaaaa4f00b2f82"}) r7 = eventfd2(0x2, 0x801) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f00000001c0)) 8.548142459s ago: executing program 0 (id=3997): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 7.746167535s ago: executing program 4 (id=3999): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = epoll_create(0x207) write$FUSE_STATX(r2, &(0x7f0000000280)={0x130, 0xffffffffffffffda, r3, {0x40, 0x0, 0x0, '\x00', {0x2, 0xc2, 0x7fffffff, 0xbb88, r4, r5, 0x2000, '\x00', 0x29d3, 0x2, 0x400, 0x2, {0x101, 0x2}, {0x9, 0xffff}, {0x269a, 0x3}, {0xcf, 0xa5}, 0x200, 0x63, 0x7}}}, 0x130) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, 0x0) bind$bt_hci(r1, &(0x7f0000000040), 0x6) syz_usb_connect(0x0, 0x55b, &(0x7f00000003c0)={{0x12, 0x1, 0x310, 0xd4, 0x36, 0xb5, 0x10, 0x10b8, 0x2383, 0xa001, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x549, 0x3, 0x28, 0x81, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0xd, 0x64, 0xbc, 0x4d, 0x4, [@hid_hid={0x9, 0x21, 0x2, 0x80, 0x1, {0x22, 0x46}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "e7"}, {0x5, 0x24, 0x0, 0x835}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x2, 0xfff, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x35}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xe}, @mdlm_detail={0x14, 0x24, 0x13, 0x8, "4bf4cf5bb39f6674c5d8a07596ab401b"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x66, 0x3, 0x0, [@generic={0x3, 0xb, '&'}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0xbd6a}]}}, {{0x9, 0x5, 0x2b474b90d7bf253, 0xd, 0x200, 0xba, 0x10, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x3, 0x7, 0xe2}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0xe, 0x2, 0xf0, [@generic={0x88, 0xb, "8929b4fb416c962885f05a13b894ae50084f5c6a40e796e7dc759b8e9302ca0938a60feddebd8c84323168c448f8ba7c359d9027a43816dc5d3fccb9c65d98a611c3a86de387bc8d8d11fa96ae38d1450fc26b220bb92302a5102ca336ffeba6d48f27ad60b83c02b4c15c1637f8e75e85aa1e6f4598bec33db85dff0f25936fe9b5bed7dad5"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x9, 0xf8, 0x1, [@generic={0xbb, 0x23, "6f213ef753538e0b4049b05fd881e164db85a643ea1117b5b03eabbc514b6164f50e4ecd8d3c67fe8be99cae01c8b8ee33aae51b6b8d770fcc299eaaf1622366d3f5b5639aa32df7f78317daabd19a3ab66fbf58e4f8660504fd07723dfa6214fce1be3b09684f40d56f9070e5dc239225beec868e3b2a17f00e787926c69f0e26f85c79babcd9a9b0e2ff8cea11bec7a9196e7d7590a04a224d415afa628d8fba1673dbc9063d03eec93f529184b74a1903871910b736e449"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x0, 0xbb, 0x3}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0xfe, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x90, 0xe38d}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x3, 0x0, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x8, 0x0, 0xff}}, {{0x9, 0x5, 0xe, 0x4, 0x3df, 0x1, 0x0, 0x9a, [@generic={0x37, 0x11, "da7f824738938c231e050c3c6a12c510ae08f1a1fb839b4289b69f0dff344042f46dcfa459dfd09d49a957cccd7651fe4f516594d0"}, @uac_iso={0x7, 0x25, 0x1, 0x86, 0xf8, 0x647a}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x9, 0xb2}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0x40, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7ff}, @generic={0x5d, 0x23, "236769e8efdba28db5b0967ee2d80b1e449b9c1c6af6edf25bc69a70c255391c3c415afd8f78baf402cfda40f89b8b14959b7b4c71908cee7506b4d5922d89968fcac255edb1b91fb87a8771823b2f2bbb74dd9c25fac96dc1dc8a"}]}}]}}, {{0x9, 0x4, 0xf3, 0x1, 0x1, 0xff, 0xa1, 0x79, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xfffe, 0x80}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x1, "7f9b76ee5a51"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0xc2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x1}, @generic={0x4d, 0x10, "b0a6b43e4ae5495284186086063bb992b60aa03a836962bcbf0a7c087c59b7d2bf9a1b36f0d608ac2d29c6b8c97cd8a1aa4235eb2998d6ec17a3ed9ffea1141ca8b5d60601ed6bf45f95a4"}]}}]}}, {{0x9, 0x4, 0x60, 0x7, 0x3, 0xea, 0x8d, 0x3d, 0x27, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "130cdf"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x1, 0x6}}, @generic={0x54, 0x24, "0bac447260b154023036bc34f5afe7134906aee3b6d51112ee949f55fc0046cfc250178352c843ab7867832cee94f875c4daa20099107da3bca434beaf9b3e5df4fe9df2595e941cfb010763ab40565e0d61"}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x7f, 0x2, 0x5d}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x3, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x79, 0x8}, @generic={0xf4, 0x4, "3a5b66ac3aa108b50e81a668896739de124aab94a5253f277ee2c01985c4b37bf55910f6c62b856b167193952c38d8f2501897012f8d58857143b23f2cff0f5b1b8fb3eef58664a29240aaf6874fea8571b993ada6997e00384a98f2f8f39c1f15ee660598ae19954013f383b06670a4d1a830d8ac5e57f58f193c872ac0e08f3e47ca1385b95f1eb8022993f1104c328c8786845892366148452a082049ec4eac78170fa46d834392d7fbcb3baa878bbbc68953f66a84c32c59b0768108f1015240e4f5c60f28e0cc51ae37a12b5010572fc5f5ab11a30e778a914b0d4d21e4af800a8dbc84f5eba8921e889efdfe557951"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x5, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x614}, @generic={0x7e, 0x30, "3903fd603eac950e26b28ca6d003499fcc735b5cb3d4560cac95d4df281572da47360032243ce018bb3f2d1f6be15438bc3b141e47a6aa5194397ca24d6641a8cefa9e0d80e3c59b3de7c17708a2e0a178a75e0080a5ceb76030d99f6b0f509409d8c1623d2dd78a77c41a239ca11ccfdfa629504ef2a25948a9d3d7"}]}}]}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x0, 0x8, 0x1, 0x20, 0x2}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x3, [{0x49, &(0x7f0000000940)=@string={0x49, 0x3, "e0d052a9b6e78649ab3f7b43449d068fc4e7a12cfef02bea2fef581df1bdb45cde3cc6ff43b895d10a4cb22b1d397ad9221d2e424885b3452501a057c13b8a4f9e859dc7f9b559"}}, {0x37, &(0x7f0000000240)=@string={0x37, 0x3, "bb3101018ddad7ec6ca463c5bfcd11e5903156e7f5fd899131dcfb947a7267b13d0f3188ad3144d8f32a61adf33f705b99d1768220"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x446}}]}) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000100)) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r7, &(0x7f0000000180)="2cd889f0253e14f3d5ac", 0xa) bpf$PROG_LOAD(0x23, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 7.486344121s ago: executing program 1 (id=4000): r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_open_dev$evdev(0x0, 0x40, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 7.087823606s ago: executing program 3 (id=4002): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r7 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r9 = dup(r8) getpeername$packet(r9, 0x0, &(0x7f00000002c0)) r10 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="3b23d9c18b0d4096"], 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) 6.605924407s ago: executing program 2 (id=4003): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0xc0405626, &(0x7f0000000100)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r5, @ANYRES8=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x4049850) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r10, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0xfd, &(0x7f0000000280)="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", 0xfd, 0x0, &(0x7f0000000380)="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"}) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, &(0x7f0000000080), 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000300)) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r11, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r12, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x48}}, 0x44800) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000004c0)={0x1, r1}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, r13, 0x603, 0x70bd30, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc3}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x10) 6.565692041s ago: executing program 0 (id=4004): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="657573a2aaa76a045d877c1f6455a4bb7edaedaf2406cf034c55272afe4a39f80fec79674992739b3f1d46", 0x2b}], 0x1}, 0x48800) 6.521098111s ago: executing program 3 (id=4005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r2, @ANYBLOB="1800c7000201050b"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 6.455301245s ago: executing program 0 (id=4006): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0}}, 0x120) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc02063a1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0xa, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0a, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) io_submit(0x0, 0x0, 0x0) 6.218699527s ago: executing program 3 (id=4007): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000003c0)=""/119) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f0000000340)=[@cr4={0x1, 0x60}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8000000000000fd, 0x0, 0x0, 0x401, 0x0, 0x2, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0xe93}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) 6.086431234s ago: executing program 2 (id=4008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 5.371984563s ago: executing program 1 (id=4009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10d400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x1, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x63, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './file0'}}, {@uuid_on}, {@redirect_dir_follow}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@smackfsroot={'smackfsroot', 0x3d, 'tea\xb3\x01\x92\x9ct\xda\xfb\xeaA6Xm\x00'}}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x90}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$sysctl(r2, &(0x7f0000001a40)='5\x00', 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000001a00)={0x10003, 0x80, 0x280, &(0x7f0000001600)=[0x8000000000000001, 0xfff, 0xa5ed, 0x4, 0x7, 0x3, 0x200000, 0x8, 0x19e229ed, 0x9, 0x1000, 0x5, 0x7, 0x4, 0x8000000000000001, 0x300000000000, 0x8, 0x8, 0x0, 0x7fffffff, 0xfffffffffffffff9, 0x101, 0x8000000000000001, 0x4, 0x4, 0xffffffffffff08f2, 0x4, 0x8, 0xa00, 0x4d42, 0x5, 0x10000, 0x1, 0x7, 0x1, 0x3, 0x1, 0x1b2, 0x72e691be, 0x7fffffffffffffff, 0x7f, 0x80, 0xffffffffffffffff, 0x7, 0x5, 0x32, 0x2, 0x9, 0x3c, 0x2400, 0x4, 0x3, 0x2, 0x5, 0x4, 0x2, 0x246, 0x5, 0x8, 0x8000, 0x80000000, 0x9, 0x77d, 0x2, 0x101, 0x5, 0x4, 0x0, 0x2, 0x5, 0x1, 0x1, 0x3, 0x2, 0x0, 0x10, 0x2, 0x1, 0x80000001, 0xa, 0x6, 0x6, 0x1ff, 0x7, 0xa621, 0x72290748, 0x3, 0xdd3, 0x8, 0x7f, 0xfffffffffffffff7, 0x0, 0xffff, 0xb9, 0x5, 0x5, 0x6, 0x0, 0x800, 0x0, 0x1, 0x9, 0x4, 0x6, 0x81, 0x7, 0xc, 0x2, 0x4, 0x3, 0x5c7, 0x5, 0x81, 0xfff, 0x8be, 0x5e, 0x1, 0x9, 0x4, 0x3be7, 0x100, 0x1, 0x3, 0xff, 0x4, 0x3e0a, 0x6, 0x2]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x8100}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mmap(&(0x7f0000122000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)={0x14, r5, 0x10, 0x70bd28, 0x25dfdbfe}, 0xffffffffffffffab}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f00000015c0)={0x4, 0x0, 0x8001, 0x4, 0x1, 0x142dc, "55458f96f2a21411cd4b4d36e28d1ef3", 0x5, 0x40, 0xff, 0x2, 0x8, 0x3, 0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_clone(0x9100, &(0x7f00000004c0)="50fbcea55427f6f3b6819b9b47a074a6c71d40af8359a3be67bb49f25cf26d82df73a4df7574f479cbdc6f39ff44466cdac5b946001565e37942520eff565f886f6237577317493b3df5abc60b8f5fc0869059dcb26f2e2929320555e0f6199adf390a034a62c0ca459343b3ad673674a509938fc0dc1a528f7f72d0ae6232ce8944e092b82b9cebada117c71d10a7191dc536c3e0a34b521a045480ed429d2ae3488fc5a4fadc2ec1f31d05b95712921a1b45b0218bf3bf0e", 0xb9, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f00000005c0)="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") 5.242777286s ago: executing program 0 (id=4010): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/psched\x00') r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x14) 4.950876591s ago: executing program 2 (id=4011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.706907542s ago: executing program 4 (id=4012): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl(0xffffffffffffffff, 0x8b21, 0x0) socket(0xa, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) listen(r0, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x24008094) accept4$unix(r0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r4) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 4.347272402s ago: executing program 1 (id=4013): openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x20000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) bind$phonet(r0, &(0x7f00000001c0)={0x23, 0x4}, 0x10) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x8, 0x3, 0x8, 0x2, 0x56f, 0xa, 0x3}, 0x0, &(0x7f0000000280)={0x75, 0x0, 0x0, 0x400d, 0x4, 0x1, 0x466}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.326935586s ago: executing program 2 (id=4014): r0 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/meminfo\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="80378e8deb77cf5309000000000000", @ANYRES32, @ANYRESOCT=r2], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2.890325031s ago: executing program 0 (id=4015): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000e40)={0x28, 0x0, 0x0, @host}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000680)=""/102392, 0x18ff8) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b21, 0x0) socket(0xa, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/263, 0x107, 0x40000000, 0x0, 0x0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) modify_ldt$write(0x1, &(0x7f0000000000)={0x80, 0x0, 0x400}, 0x10) 2.600909653s ago: executing program 1 (id=4016): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r7 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r9 = dup(r8) getpeername$packet(r9, 0x0, &(0x7f00000002c0)) r10 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="3b23d9c18b0d4096"], 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) 2.24256953s ago: executing program 3 (id=4017): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 2.187920301s ago: executing program 4 (id=4018): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008002e00"], 0x1c}], 0x1}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0xc0405626, &(0x7f0000000100)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESHEX=r2, @ANYRESDEC=r5, @ANYRES8=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x4049850) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r10, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0xfd, &(0x7f0000000280)="dbd77e23eb186174a2317ea77899569771f02a15c22b5c427cdefc51457f7cc7f915095ee50bf1a8c02fd4b32d849eb3d216ce1665d1e3c067cc2be46436ff36939712ef1fbfe28de63a9697626783c6b836f43807747ae302f114e4bf52bddf015f4b57b060a52b5e880a313a414ca8e443bf5472943f61c9ef3677fe3e41b6f0bffeae68493e5a929657d92c90028efad28e3745da834d7c409e57650165b3857cd1ed823be6cb6a477e01642c5039ca23484e80795a02c4754ce26e333463d4a80a4a3afde9dbff66ff03e1be98091d98c23d6b44e93a707f3cbefbb980b9600323c94e00e7f4765dfa19874cbd639b49a8a9f3445995e7c3c4a03a", 0xfd, 0x0, &(0x7f0000000380)="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"}) r11 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r11, &(0x7f0000000080), 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r11, 0x541b, &(0x7f0000000300)) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r11, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r12, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x48}}, 0x44800) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000004c0)={0x1, r1}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, r13, 0x603, 0x70bd30, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xc3}, @ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x10) 2.054468861s ago: executing program 1 (id=4019): r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_open_dev$evdev(0x0, 0x40, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.26128572s ago: executing program 3 (id=4020): r0 = epoll_create1(0x80000) epoll_pwait2(r0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x183002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x3, 0xfffffffc}) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'vxcan1\x00', 0x2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xc}]}) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x300) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) 1.252882992s ago: executing program 4 (id=4021): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) r7 = open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r8, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) r9 = dup(r8) getpeername$packet(r9, 0x0, &(0x7f00000002c0)) r10 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) 1.076278599s ago: executing program 2 (id=4022): timer_create(0x0, &(0x7f0000000040)={0x0, 0x1d}, &(0x7f0000bbdffc)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000880)={0x0, 0x20, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x2) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000003c0)=""/119) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000002c0)="26360f076726260f218966ba2000ed660f38829d0200000067f40f32b8000000000f23d80f21f835c00000300f23f8c4c3215e2f0566b800000f00d0b93c0a00000f32", 0x2d}], 0xaaaaaaaaaaaac9f, 0x0, &(0x7f0000000340)=[@cr4={0x1, 0x60}], 0x1) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f00000004c0)={0xffffffff, 0xa, 0x0, 0x10, 0xe74, 0x6}) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 3 (id=4023): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000005180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/psched\x00') r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001880)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0xf, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2"], 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x14) kernel console output (not intermixed with test programs): iscuous mode [ 472.920112][T15882] hsr_slave_1: entered promiscuous mode [ 472.929802][T15882] debugfs: 'hsr0' already exists in 'hsr' [ 472.942171][T15882] Cannot create hsr debugfs directory [ 473.308208][T15735] Bluetooth: hci0: command tx timeout [ 474.512670][T15657] kernel write not supported for file bpf-prog (pid: 15657 comm: kworker/1:3) [ 475.015703][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3458'. [ 475.046595][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3458'. [ 475.212245][ T5899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 475.246686][T15657] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 475.381740][T15735] Bluetooth: hci0: command tx timeout [ 475.422463][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 475.437612][ T5899] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 475.453318][T15657] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 475.472250][T15657] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 475.490867][ T5899] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 475.542486][ T3788] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 475.583364][T15657] usb 2-1: config 220 has no interface number 2 [ 475.618508][ T5899] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.652368][T15657] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 475.707787][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.745129][T15657] usb 2-1: config 220 interface 0 has no altsetting 0 [ 475.752908][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.777926][ T3788] usb 4-1: Using ep0 maxpacket: 16 [ 475.831079][T15657] usb 2-1: config 220 interface 76 has no altsetting 0 [ 475.843713][ T3788] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 475.860986][ T5899] usb 1-1: Product: syz [ 475.899529][ T5899] usb 1-1: Manufacturer: syz [ 475.917573][T15657] usb 2-1: config 220 interface 1 has no altsetting 0 [ 475.939637][ T5899] usb 1-1: SerialNumber: syz [ 475.958700][ T3788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 475.989317][T15657] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 476.053731][T15657] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.118341][ T3788] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 476.157737][T15657] usb 2-1: Product: syz [ 476.193774][T15657] usb 2-1: Manufacturer: syz [ 476.203435][ T3788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.232320][T15657] usb 2-1: SerialNumber: syz [ 476.267996][ T3788] usb 4-1: Product: syz [ 476.300351][ T3788] usb 4-1: Manufacturer: syz [ 476.315676][ T3788] usb 4-1: SerialNumber: syz [ 476.337864][ T3788] usb 4-1: config 0 descriptor?? [ 476.351106][ T3788] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 476.367098][T15882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 476.386074][T15882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 476.397173][T15882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.407136][T15882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.516301][T15882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.526328][ T3788] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 476.537166][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 476.537181][ T30] audit: type=1400 audit(1754198250.335:6033): avc: denied { read } for pid=15982 comm="syz.0.3456" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 476.558740][T15882] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.567444][T15657] usb 2-1: selecting invalid altsetting 0 [ 477.069514][T15657] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 477.081040][T15657] usb 2-1: No valid video chain found. [ 477.128774][ T30] audit: type=1400 audit(1754198250.335:6034): avc: denied { open } for pid=15982 comm="syz.0.3456" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 477.159318][ T30] audit: type=1400 audit(1754198250.365:6035): avc: denied { ioctl } for pid=15982 comm="syz.0.3456" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 477.188875][ T5899] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 477.231200][T15657] usb 2-1: selecting invalid altsetting 0 [ 477.293491][ T5899] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 477.328921][T15657] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 477.473896][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.481183][ T7671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.483018][T15657] usb 2-1: USB disconnect, device number 17 [ 477.491112][T15735] Bluetooth: hci0: command tx timeout [ 477.555440][ T3788] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 477.585875][ T3788] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 477.608445][ T3788] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 477.620197][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.627337][ T9428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.734521][ T3788] em28xx 4-1:0.0: No AC97 audio processor [ 477.777915][T15882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.814665][T15882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.182262][ T5957] IPVS: starting estimator thread 0... [ 478.197020][ T3788] usb 4-1: USB disconnect, device number 25 [ 478.206709][ T5899] usb 1-1: USB disconnect, device number 26 [ 478.227422][ T3788] em28xx 4-1:0.0: Disconnecting em28xx [ 478.270771][ T3788] em28xx 4-1:0.0: Freeing device [ 478.320833][T16017] IPVS: using max 37 ests per chain, 88800 per kthread [ 478.337392][T14229] udevd[14229]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.666649][ T30] audit: type=1400 audit(1754198252.456:6036): avc: denied { write } for pid=16018 comm="syz.2.3465" name="sg0" dev="devtmpfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 478.672244][T16027] 9pnet_fd: Insufficient options for proto=fd [ 478.773989][ T3788] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 478.807675][T15882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.836012][ T30] audit: type=1400 audit(1754198252.576:6037): avc: denied { unmount } for pid=14588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 479.201178][ T30] audit: type=1326 audit(1754198252.976:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.0.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd098eb69 code=0x7ffc0000 [ 479.549630][T15735] Bluetooth: hci0: command tx timeout [ 480.559214][ T30] audit: type=1326 audit(1754198252.976:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.0.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd098eb69 code=0x7ffc0000 [ 480.583021][ T30] audit: type=1326 audit(1754198252.976:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.0.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f1bd098eb69 code=0x7ffc0000 [ 480.759983][ T30] audit: type=1326 audit(1754198252.986:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.0.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd098eb69 code=0x7ffc0000 [ 481.102772][ T30] audit: type=1326 audit(1754198252.986:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16039 comm="syz.0.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1bd098eb69 code=0x7ffc0000 [ 481.241209][ T5957] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 481.552143][ T5957] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 481.563471][ T5957] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 481.592607][T15882] veth0_vlan: entered promiscuous mode [ 481.594097][ T5957] usb 2-1: config 220 has no interface number 2 [ 481.615029][T15882] veth1_vlan: entered promiscuous mode [ 481.615412][ T5957] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 481.644379][ T5957] usb 2-1: config 220 interface 0 has no altsetting 0 [ 481.644603][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3478'. [ 481.652556][ T5957] usb 2-1: config 220 interface 76 has no altsetting 0 [ 481.668813][T15882] veth0_macvtap: entered promiscuous mode [ 481.676768][ T5957] usb 2-1: config 220 interface 1 has no altsetting 0 [ 481.686238][ T5957] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 481.695834][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.711382][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 481.711396][ T30] audit: type=1400 audit(1754198255.507:6070): avc: denied { ioctl } for pid=16064 comm="syz.2.3479" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 481.713363][T15882] veth1_macvtap: entered promiscuous mode [ 481.717509][ T5957] usb 2-1: Product: syz [ 481.753815][ T30] audit: type=1400 audit(1754198255.507:6071): avc: denied { set_context_mgr } for pid=16064 comm="syz.2.3479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 481.777561][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3478'. [ 481.788558][ T5957] usb 2-1: Manufacturer: syz [ 481.798739][ T5957] usb 2-1: SerialNumber: syz [ 481.820109][T15882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.873161][T15882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.890157][ T7668] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.899734][ T7668] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.934527][ T7668] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.944997][ T7668] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.020764][ T7777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.031022][ T7777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.050945][ T5957] usb 2-1: selecting invalid altsetting 0 [ 482.067881][ T5957] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 482.093563][ T5957] usb 2-1: No valid video chain found. [ 482.132209][ T5957] usb 2-1: selecting invalid altsetting 0 [ 482.156789][ T5957] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 482.170309][ T7668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.183080][ T5957] usb 2-1: USB disconnect, device number 18 [ 482.195810][ T7668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.445766][ T5976] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 483.619051][ T5976] usb 4-1: Using ep0 maxpacket: 32 [ 483.627472][ T5976] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 483.636862][ T5976] usb 4-1: config 0 has no interface number 0 [ 483.679856][ T5976] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 483.735790][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.918848][ T5976] usb 4-1: Product: syz [ 483.926081][ T5976] usb 4-1: Manufacturer: syz [ 483.930771][ T5976] usb 4-1: SerialNumber: syz [ 483.994997][ T5976] usb 4-1: config 0 descriptor?? [ 484.019391][ T5976] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 484.229094][ T5976] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 484.367540][ T5976] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 484.626890][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 484.634665][ T5976] usb 4-1: USB disconnect, device number 27 [ 484.650302][ T5976] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 485.024767][ T5976] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 485.040636][ T5976] quatech2 4-1:0.51: device disconnected [ 487.075883][ T5976] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 487.213687][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'. [ 487.227375][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3500'. [ 487.299666][ T5976] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 487.331168][ T5976] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 487.355885][ T5899] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 487.363594][ T5976] usb 1-1: config 220 has no interface number 2 [ 487.371401][ T5976] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 487.387783][ T5976] usb 1-1: config 220 interface 0 has no altsetting 0 [ 487.396770][ T5976] usb 1-1: config 220 interface 76 has no altsetting 0 [ 487.404452][ T5976] usb 1-1: config 220 interface 1 has no altsetting 0 [ 487.430686][ T5976] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 487.444795][ T5976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.453016][ T5976] usb 1-1: Product: syz [ 487.458244][ T5976] usb 1-1: Manufacturer: syz [ 487.463120][ T5976] usb 1-1: SerialNumber: syz [ 487.615986][ T30] audit: type=1400 audit(1754198261.410:6072): avc: denied { read } for pid=16146 comm="syz.2.3503" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 487.668449][ T5899] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 487.830902][ T30] audit: type=1400 audit(1754198261.410:6073): avc: denied { open } for pid=16146 comm="syz.2.3503" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 487.855001][ T5899] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 487.855027][ T5899] usb 4-1: config 220 has no interface number 2 [ 487.855080][ T5899] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 487.855105][ T5899] usb 4-1: config 220 interface 0 has no altsetting 0 [ 487.921460][ T30] audit: type=1400 audit(1754198261.450:6074): avc: denied { ioctl } for pid=16146 comm="syz.2.3503" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x642e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 487.947976][ T5976] usb 1-1: selecting invalid altsetting 0 [ 487.954720][ T5976] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 487.967253][ T5976] usb 1-1: No valid video chain found. [ 487.984746][ T5976] usb 1-1: selecting invalid altsetting 0 [ 487.997543][ T5976] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 488.050417][ T5899] usb 4-1: config 220 interface 76 has no altsetting 0 [ 488.058258][ T5899] usb 4-1: config 220 interface 1 has no altsetting 0 [ 488.076866][ T5899] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 488.089898][ T5976] usb 1-1: USB disconnect, device number 27 [ 488.815431][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.823546][ T5899] usb 4-1: Product: syz [ 488.833897][ T5899] usb 4-1: Manufacturer: syz [ 488.838654][ T5899] usb 4-1: SerialNumber: syz [ 489.325101][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 489.469316][ T5940] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 489.484761][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 489.521689][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 489.534011][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 489.625401][T16169] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3509'. [ 489.664564][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 489.719480][ T5899] usb 4-1: selecting invalid altsetting 0 [ 489.723165][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 489.726284][ T5899] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 489.741682][ T5940] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 489.753487][ T5899] usb 4-1: No valid video chain found. [ 489.759940][ T5940] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 489.769870][ T5940] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.784684][ T5899] usb 4-1: selecting invalid altsetting 0 [ 489.790464][ T5899] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 489.802845][ T5899] usb 4-1: USB disconnect, device number 28 [ 489.840961][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.907496][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 490.070326][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 490.137907][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.188285][ T9] usb 2-1: Product: syz [ 490.214981][ T9] usb 2-1: Manufacturer: syz [ 490.247116][ T9] usb 2-1: SerialNumber: syz [ 490.338282][ T5940] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.865250][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.873267][ T5940] usb 5-1: Product: syz [ 490.877510][ T5940] usb 5-1: Manufacturer: syz [ 490.882121][ T5940] usb 5-1: SerialNumber: syz [ 490.905050][ T9] usb 2-1: config 0 descriptor?? [ 490.923963][ T9] port100 2-1:0.0: NFC: Could not get supported command types [ 491.529521][ T5940] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 491.597424][ T5940] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 491.702070][ T5940] usb 5-1: USB disconnect, device number 23 [ 492.413305][ T5940] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 492.654297][ T5940] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 492.667068][ T5940] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 492.724842][ T5940] usb 4-1: config 220 interface 0 has no altsetting 0 [ 492.750927][ T5940] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 492.765132][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.796769][ T5940] usb 4-1: Product: syz [ 492.812148][ T5940] usb 4-1: Manufacturer: syz [ 492.832152][ T5940] usb 4-1: SerialNumber: syz [ 492.970920][T16210] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3524'. [ 493.077279][ T5940] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 493.105562][ T5940] usb 4-1: No valid video chain found. [ 493.145585][ T5940] usb 4-1: USB disconnect, device number 29 [ 493.361699][ T5957] usb 2-1: USB disconnect, device number 19 [ 493.502636][ T5899] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 493.684808][ T5899] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 493.702722][ T5899] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 493.720076][ T5899] usb 1-1: config 220 has no interface number 2 [ 493.726758][ T5899] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 493.775599][ T5899] usb 1-1: config 220 interface 0 has no altsetting 0 [ 493.800063][ T5899] usb 1-1: config 220 interface 76 has no altsetting 0 [ 493.807903][ T5899] usb 1-1: config 220 interface 1 has no altsetting 0 [ 493.821010][ T5899] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 493.830821][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.863586][ T5899] usb 1-1: Product: syz [ 493.876924][ T5899] usb 1-1: Manufacturer: syz [ 493.881606][ T5899] usb 1-1: SerialNumber: syz [ 493.975550][ T30] audit: type=1400 audit(1754198267.753:6075): avc: denied { read write } for pid=16234 comm="syz.2.3536" name="file1" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 494.026959][ T30] audit: type=1400 audit(1754198267.753:6076): avc: denied { open } for pid=16234 comm="syz.2.3536" path="/140/file1" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 494.590421][ T5899] usb 1-1: selecting invalid altsetting 0 [ 494.604308][ T5899] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 494.611820][ T5899] usb 1-1: No valid video chain found. [ 494.625227][ T5899] usb 1-1: selecting invalid altsetting 0 [ 494.630965][ T5899] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 494.662287][ T5899] usb 1-1: USB disconnect, device number 28 [ 494.949764][ T30] audit: type=1400 audit(1754198268.744:6077): avc: denied { read } for pid=16249 comm="syz.4.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 495.101841][ T5899] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 495.171997][ T3788] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 495.306329][T16256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3543'. [ 495.421862][ T3788] usb 4-1: device descriptor read/64, error -71 [ 495.460980][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 495.470835][ T5899] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 495.489031][ T5899] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 495.498831][ T5899] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 495.511850][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 495.520952][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.529761][ T5899] usb 2-1: Product: syz [ 495.534058][ T5899] usb 2-1: Manufacturer: syz [ 495.538655][ T5899] usb 2-1: SerialNumber: syz [ 495.711640][ T3788] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 495.851570][ T3788] usb 4-1: device descriptor read/64, error -71 [ 495.962229][ T3788] usb usb4-port1: attempt power cycle [ 496.053464][ T5899] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 496.263753][ T5899] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 496.321859][ T3788] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 496.372547][ T3788] usb 4-1: device descriptor read/8, error -71 [ 496.396673][ T5899] usb 2-1: USB disconnect, device number 20 [ 496.483527][T14222] udevd[14222]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.611261][ T3788] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 496.642729][ T3788] usb 4-1: device descriptor read/8, error -71 [ 496.761328][ T3788] usb usb4-port1: unable to enumerate USB device [ 496.771022][T15659] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 496.923792][T15659] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 496.932215][T15659] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 496.942509][T15659] usb 1-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 496.952391][T15659] usb 1-1: config 220 has no interface number 1 [ 496.959833][T15659] usb 1-1: config 220 interface 0 has no altsetting 0 [ 496.966715][T15659] usb 1-1: config 220 interface 76 has no altsetting 0 [ 496.979115][T15659] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 496.992277][T15659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.000268][T15659] usb 1-1: Product: syz [ 497.006995][T15659] usb 1-1: Manufacturer: syz [ 497.013148][T15659] usb 1-1: SerialNumber: syz [ 497.071016][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 497.226135][T15659] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 497.236374][T15659] usb 1-1: No valid video chain found. [ 497.242219][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 497.249918][T15659] usb 1-1: USB disconnect, device number 29 [ 497.250604][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 497.276721][ T9] usb 3-1: config 220 has no interface number 2 [ 497.284069][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 497.298469][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 497.305325][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 497.314459][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 497.322763][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 497.340689][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.348705][ T9] usb 3-1: Product: syz [ 497.355528][ T9] usb 3-1: Manufacturer: syz [ 497.360128][ T9] usb 3-1: SerialNumber: syz [ 497.592217][ T9] usb 3-1: selecting invalid altsetting 0 [ 497.682925][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 497.737468][ T9] usb 3-1: No valid video chain found. [ 497.939646][ T9] usb 3-1: selecting invalid altsetting 0 [ 497.956933][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 497.981313][ T9] usb 3-1: USB disconnect, device number 26 [ 498.580111][ T3788] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 498.608222][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 498.621112][T16312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 498.740144][ T3788] usb 4-1: Using ep0 maxpacket: 16 [ 498.758833][ T3788] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 498.784013][ T3788] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.868119][T16316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3567'. [ 498.908187][ T3788] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.993829][ T3788] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 499.003184][ T3788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.015581][ T3788] usb 4-1: Product: syz [ 499.020326][ T3788] usb 4-1: Manufacturer: syz [ 499.024999][ T3788] usb 4-1: SerialNumber: syz [ 499.199224][T16328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3571'. [ 499.214002][T16327] pimreg: entered allmulticast mode [ 499.233651][T16327] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 499.269486][ T30] audit: type=1400 audit(1754198273.066:6078): avc: denied { write } for pid=16329 comm="syz.4.3574" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 499.292621][ C0] vkms_vblank_simulate: vblank timer overrun [ 499.349870][ T30] audit: type=1400 audit(1754198273.136:6079): avc: denied { name_connect } for pid=16329 comm="syz.4.3574" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 499.378808][T16330] netlink: 'syz.4.3574': attribute type 12 has an invalid length. [ 499.389282][T16330] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3574'. [ 499.699595][ T3788] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 499.776610][ T3788] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 499.809760][ T3788] usb 4-1: USB disconnect, device number 34 [ 500.003543][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'. [ 500.023257][ T30] audit: type=1400 audit(1754198273.826:6080): avc: denied { ioctl } for pid=16329 comm="syz.4.3574" path="socket:[48738]" dev="sockfs" ino=48738 ioctlcmd=0xaf20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 500.042292][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3577'. [ 500.804413][T16353] bpf: Bad value for 'gid' [ 500.890902][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.432154][T16360] can0: slcan on ptm0. [ 501.578685][ T30] audit: type=1400 audit(1754198275.357:6081): avc: denied { setopt } for pid=16356 comm="syz.4.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 501.636304][ T30] audit: type=1400 audit(1754198275.357:6082): avc: denied { accept } for pid=16356 comm="syz.4.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 501.688664][T16356] can0 (unregistered): slcan off ptm0. [ 501.938207][T16383] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3592'. [ 501.950509][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.958036][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.308522][T16377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.423804][T16377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.812426][ T9427] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.851490][ T9427] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.896495][ T9427] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.927213][ T9427] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.804724][T16427] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3607'. [ 504.747622][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3610'. [ 504.878700][T16438] netlink: 'syz.3.3611': attribute type 12 has an invalid length. [ 504.926954][T16438] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3611'. [ 505.484205][T16455] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3616'. [ 505.864958][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 505.887601][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 506.057074][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3622'. [ 506.392030][T16486] netlink: 'syz.2.3625': attribute type 12 has an invalid length. [ 506.415079][T16486] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3625'. [ 507.357262][T16506] udevd[16506]: failed to send result of seq 20466 to main daemon: Connection refused [ 507.669270][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 507.990967][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 508.018605][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 508.044470][ T9] usb 3-1: config 0 has no interface number 0 [ 508.081309][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 508.100906][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.115000][ T9] usb 3-1: Product: syz [ 508.124833][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'. [ 508.135326][ T9] usb 3-1: Manufacturer: syz [ 508.139933][ T9] usb 3-1: SerialNumber: syz [ 508.156310][ T9] usb 3-1: config 0 descriptor?? [ 508.187611][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 508.271067][T16532] netlink: 'syz.4.3639': attribute type 1 has an invalid length. [ 508.978330][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 508.990052][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 509.152052][T16544] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3643'. [ 509.239615][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 509.239926][ T5899] usb 3-1: USB disconnect, device number 27 [ 509.275156][ T5899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 509.297837][ T5899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 509.335174][ T5899] quatech2 3-1:0.51: device disconnected [ 509.734582][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 509.906467][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.941174][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.965783][T16560] futex_wake_op: syz.4.3647 tries to shift op by -1; fix this program [ 510.068002][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 510.100433][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.139030][ T9] usb 2-1: config 0 descriptor?? [ 510.229320][T15663] IPVS: starting estimator thread 0... [ 510.334308][T16564] IPVS: using max 73 ests per chain, 175200 per kthread [ 510.364574][T16568] 9pnet_fd: Insufficient options for proto=fd [ 510.664409][ T9] hid-picolcd 0003:04D8:C002.000A: No report with id 0x11 found [ 511.138601][T16583] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3655'. [ 512.014625][T16594] can0: slcan on ptm0. [ 512.493356][T16592] can0 (unregistered): slcan off ptm0. [ 512.604891][ T5899] usb 2-1: USB disconnect, device number 21 [ 513.203759][T16615] netlink: 828 bytes leftover after parsing attributes in process `syz.2.3665'. [ 513.376348][T16618] netlink: 828 bytes leftover after parsing attributes in process `syz.2.3665'. [ 513.385625][ T30] audit: type=1400 audit(1754198287.183:6083): avc: denied { wake_alarm } for pid=16616 comm="syz.4.3666" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 513.896585][ T30] audit: type=1400 audit(1754198287.183:6084): avc: denied { write } for pid=16616 comm="syz.4.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 513.937154][ T30] audit: type=1400 audit(1754198287.183:6085): avc: denied { read } for pid=16616 comm="syz.4.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 514.009503][ T30] audit: type=1326 audit(1754198287.803:6086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 514.033085][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.131927][ T30] audit: type=1326 audit(1754198287.803:6087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 515.179112][ T30] audit: type=1326 audit(1754198287.803:6088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 515.202582][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.220662][ T30] audit: type=1326 audit(1754198287.963:6089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 515.258510][ T30] audit: type=1326 audit(1754198287.963:6090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 515.281917][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.336434][ T30] audit: type=1326 audit(1754198287.963:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 515.364867][ T30] audit: type=1326 audit(1754198287.963:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16624 comm="syz.3.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 515.447101][T16640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16640 comm=syz.0.3676 [ 515.695999][T16640] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 515.745120][T16636] can0: slcan on ptm0. [ 515.761335][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3674'. [ 515.802965][T16635] can0 (unregistered): slcan off ptm0. [ 515.964173][T16651] sch_tbf: burst 0 is lower than device veth3 mtu (1514) ! [ 516.751088][T15663] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 516.980972][T15663] usb 5-1: Using ep0 maxpacket: 16 [ 517.149744][T15663] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 517.348137][T16681] bpf: Bad value for 'gid' [ 517.741896][T15663] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.766230][T15663] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.835875][T15663] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 517.854699][T15663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.862749][T15663] usb 5-1: Product: syz [ 517.866905][T15663] usb 5-1: Manufacturer: syz [ 517.872428][T15663] usb 5-1: SerialNumber: syz [ 517.918507][T16689] futex_wake_op: syz.0.3689 tries to shift op by -1; fix this program [ 518.589839][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 519.136125][T16698] 9pnet_fd: Insufficient options for proto=fd [ 519.269990][ T5899] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 519.336813][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 519.355187][T15663] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 519.369850][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 519.429636][ T5957] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 519.469634][T15663] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 519.489630][ T9] usb 3-1: config 220 has no interface number 2 [ 519.521141][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 519.524524][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 519.537426][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.594920][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.611766][T15663] usb 5-1: USB disconnect, device number 24 [ 519.611763][ T5899] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 519.611789][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.627950][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 519.640306][ T5899] usb 4-1: config 0 descriptor?? [ 519.643781][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 519.653384][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 519.659585][ T5940] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 519.662419][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 519.678319][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.686656][ T9] usb 3-1: Product: syz [ 519.690835][ T9] usb 3-1: Manufacturer: syz [ 519.695431][ T9] usb 3-1: SerialNumber: syz [ 519.700043][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 519.708285][ T5957] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 519.719201][ T5957] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 519.729187][ T5957] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 519.742116][ T5957] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.751206][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.759195][ T5957] usb 2-1: Product: syz [ 519.763543][ T5957] usb 2-1: Manufacturer: syz [ 519.768131][ T5957] usb 2-1: SerialNumber: syz [ 519.809480][ T5940] usb 1-1: Using ep0 maxpacket: 8 [ 519.818499][ T5940] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 519.828956][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.837129][ T5940] usb 1-1: Product: syz [ 519.841511][ T5940] usb 1-1: Manufacturer: syz [ 519.846194][ T5940] usb 1-1: SerialNumber: syz [ 519.853702][ T5940] usb 1-1: config 0 descriptor?? [ 519.930835][ T9] usb 3-1: selecting invalid altsetting 0 [ 519.943337][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 519.949865][ T9] usb 3-1: No valid video chain found. [ 519.960135][ T9] usb 3-1: selecting invalid altsetting 0 [ 519.965905][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 519.976710][ T9] usb 3-1: USB disconnect, device number 28 [ 520.062454][ T5940] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 520.910063][ T5957] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 520.995106][ T5957] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 521.313105][ T5957] usb 2-1: USB disconnect, device number 22 [ 521.336904][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 521.347812][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 521.367378][ T5899] usb 4-1: USB disconnect, device number 35 [ 521.394195][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3697'. [ 521.409628][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3697'. [ 521.461047][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3697'. [ 522.206220][ T5940] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 522.413998][ T5940] usb 1-1: USB disconnect, device number 30 [ 522.427028][T16726] netlink: 'syz.1.3703': attribute type 72 has an invalid length. [ 522.437424][T16726] netlink: 'syz.1.3703': attribute type 8 has an invalid length. [ 522.502475][T16732] netlink: 'syz.1.3703': attribute type 72 has an invalid length. [ 522.510642][T16732] netlink: 'syz.1.3703': attribute type 8 has an invalid length. [ 523.047003][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 523.069765][T16741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3706'. [ 523.107815][ T5940] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 523.257785][ T5940] usb 4-1: Using ep0 maxpacket: 16 [ 523.269444][ T5940] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 523.297942][ T5940] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 523.312427][ T5940] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 523.325782][ T5940] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.355993][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.369717][ T5940] usb 4-1: Product: syz [ 523.373933][ T5940] usb 4-1: Manufacturer: syz [ 523.386377][ T5940] usb 4-1: SerialNumber: syz [ 523.410754][T16748] netlink: 'syz.2.3709': attribute type 12 has an invalid length. [ 523.437637][T16748] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3709'. [ 523.777840][ T5957] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 523.799723][T16758] futex_wake_op: syz.0.3711 tries to shift op by -1; fix this program [ 523.939420][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 524.148640][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.166195][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.177119][ T5940] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 524.191361][ T5957] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 524.261243][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.262749][ T5940] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 524.284186][ T5957] usb 2-1: config 0 descriptor?? [ 524.592972][ T5940] usb 4-1: USB disconnect, device number 36 [ 526.124729][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3716'. [ 526.236149][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3716'. [ 526.245293][ T5957] usbhid 2-1:0.0: can't add hid device: -71 [ 526.305419][ T5957] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 526.375841][T16775] bpf: Bad value for 'gid' [ 526.490747][ T5957] usb 2-1: USB disconnect, device number 23 [ 526.884588][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 526.937233][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3721'. [ 526.967595][T16787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3721'. [ 526.993507][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3721'. [ 527.016155][T16785] netlink: 'syz.3.3720': attribute type 12 has an invalid length. [ 527.025971][T16785] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3720'. [ 527.247932][T16800] futex_wake_op: syz.3.3725 tries to shift op by -1; fix this program [ 527.257339][ T5940] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 527.541486][T16799] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.549096][T16799] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.069324][T16799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.108699][T16799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.304390][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 528.310977][ T5940] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 528.321798][ T5940] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 528.333371][ T5940] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.351258][T16803] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 528.360717][T16803] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 528.364714][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.371575][T16803] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 528.434082][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.467714][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 528.467732][ T30] audit: type=1400 audit(1754198302.191:6105): avc: denied { firmware_load } for pid=16794 comm="syz.0.3724" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 528.494810][ T30] audit: type=1400 audit(1754198302.291:6106): avc: denied { read } for pid=16809 comm="syz.1.3728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 528.520040][ T7785] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.529577][ T5940] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 528.541507][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.558703][ T5940] usb 3-1: Product: syz [ 528.562871][ T5940] usb 3-1: Manufacturer: syz [ 528.581867][ T7785] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.585051][ T5940] usb 3-1: SerialNumber: syz [ 528.973665][T16825] bpf: Bad value for 'gid' [ 529.735195][ T5940] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 529.782690][ T5940] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 529.962756][ T5940] usb 3-1: USB disconnect, device number 29 [ 530.168756][T16839] futex_wake_op: syz.1.3739 tries to shift op by -1; fix this program [ 531.506003][T15659] IPVS: starting estimator thread 0... [ 532.273409][T16851] IPVS: using max 40 ests per chain, 96000 per kthread [ 532.565817][T16866] bpf: Bad value for 'gid' [ 532.976819][T16860] can0: slcan on ptm0. [ 533.053789][T16852] can0 (unregistered): slcan off ptm0. [ 533.623915][ T30] audit: type=1400 audit(1754198307.433:6107): avc: denied { create } for pid=16871 comm="syz.0.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 534.377088][T16893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3753'. [ 534.577311][T16893] can0: slcan on ptm0. [ 535.605205][T16909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3759'. [ 535.733150][T16889] can0 (unregistered): slcan off ptm0. [ 535.750202][T16905] can0: slcan on ptm1. [ 535.802414][T16904] can0 (unregistered): slcan off ptm1. [ 536.054262][T16920] bpf: Bad value for 'gid' [ 537.006862][T16928] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3763'. [ 537.111495][T16928] netlink: 'syz.3.3763': attribute type 12 has an invalid length. [ 537.119650][T16928] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3763'. [ 538.577297][T16954] bpf: Bad value for 'gid' [ 538.999865][T15659] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 539.024502][T16956] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3774'. [ 539.108806][T16957] netlink: 892 bytes leftover after parsing attributes in process `syz.2.3774'. [ 539.399819][T15659] usb 4-1: Using ep0 maxpacket: 8 [ 539.412408][T15659] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 539.462960][T15659] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 539.494214][T16959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3775'. [ 539.511448][T16959] can0: slcan on ptm0. [ 539.524358][T15659] usb 4-1: config 179 has no interface number 0 [ 539.540097][T15659] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 539.550434][T15659] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 539.563855][T15659] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 539.573286][T15659] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.646210][T16958] can0 (unregistered): slcan off ptm0. [ 539.688458][T16968] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3778'. [ 539.706151][T16968] netlink: 'syz.1.3778': attribute type 12 has an invalid length. [ 539.715091][T16968] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3778'. [ 539.805517][T15735] Bluetooth: hci4: Malformed Event: 0x13 [ 539.816921][ T5940] usb 4-1: USB disconnect, device number 37 [ 540.009508][T15659] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 540.205475][T15659] usb 5-1: Using ep0 maxpacket: 16 [ 540.234780][T15659] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 540.277828][T15659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 540.292955][T15659] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 540.317333][T15659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.325775][T15659] usb 5-1: Product: syz [ 540.330304][T15659] usb 5-1: Manufacturer: syz [ 540.335857][T15659] usb 5-1: SerialNumber: syz [ 540.342540][T15659] usb 5-1: config 0 descriptor?? [ 540.351197][T15659] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 540.364105][T15659] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 540.645059][T15659] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 540.652281][T16985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16985 comm=syz.3.3782 [ 540.667494][T15659] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 540.697511][T15659] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 540.708578][T15659] em28xx 5-1:0.0: No AC97 audio processor [ 540.714803][T16985] netlink: 'syz.3.3782': attribute type 1 has an invalid length. [ 540.738024][T15659] usb 5-1: USB disconnect, device number 25 [ 540.756619][T15659] em28xx 5-1:0.0: Disconnecting em28xx [ 540.768735][T15659] em28xx 5-1:0.0: Freeing device [ 541.388819][T15659] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 541.755748][ T5940] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 541.806419][T15659] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 541.825819][T15659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.870143][T15659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.908468][T15659] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 541.935234][T15659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.969351][ T5940] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 541.984336][T15659] usb 5-1: config 0 descriptor?? [ 542.001986][ T5940] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 542.062604][ T5940] usb 1-1: config 220 has no interface number 2 [ 542.100940][ T5940] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 542.139461][ T5940] usb 1-1: config 220 interface 0 has no altsetting 0 [ 542.164630][ T5940] usb 1-1: config 220 interface 76 has no altsetting 0 [ 542.175574][ T5940] usb 1-1: config 220 interface 1 has no altsetting 0 [ 542.201759][ T5940] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 542.221198][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.248660][ T5940] usb 1-1: Product: syz [ 542.273614][ T5940] usb 1-1: Manufacturer: syz [ 542.298844][ T5940] usb 1-1: SerialNumber: syz [ 542.561371][ T5940] usb 1-1: selecting invalid altsetting 0 [ 542.658526][ T5940] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 542.700458][ T5940] usb 1-1: No valid video chain found. [ 542.733733][ T5940] usb 1-1: selecting invalid altsetting 0 [ 542.753057][ T5940] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 542.786738][ T5940] usb 1-1: USB disconnect, device number 31 [ 542.861844][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3789'. [ 542.998238][T17010] netlink: 892 bytes leftover after parsing attributes in process `syz.1.3790'. [ 543.032342][T15659] usbhid 5-1:0.0: can't add hid device: -71 [ 543.039027][T15659] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 543.075705][T15659] usb 5-1: USB disconnect, device number 26 [ 543.083567][T17011] netlink: 892 bytes leftover after parsing attributes in process `syz.1.3790'. [ 543.234241][T17016] futex_wake_op: syz.2.3792 tries to shift op by -1; fix this program [ 544.297218][T15659] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 545.201665][ T5957] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 545.484441][T15659] usb 1-1: Using ep0 maxpacket: 16 [ 545.509172][ T5957] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 545.521454][T15659] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 545.523231][ T5957] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 545.532520][T15659] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 545.543542][ T5957] usb 2-1: config 220 has no interface number 2 [ 545.555591][T15659] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.585058][ T5957] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 545.611850][ T5957] usb 2-1: config 220 interface 0 has no altsetting 0 [ 545.645141][ T5957] usb 2-1: config 220 interface 76 has no altsetting 0 [ 545.652889][ T5957] usb 2-1: config 220 interface 1 has no altsetting 0 [ 545.716048][ T9] IPVS: starting estimator thread 0... [ 545.736733][T15663] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 545.766079][ T5957] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 545.823711][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.833881][T17042] IPVS: using max 40 ests per chain, 96000 per kthread [ 545.872115][ T5957] usb 2-1: Product: syz [ 545.890987][ T5957] usb 2-1: Manufacturer: syz [ 545.895976][ T5957] usb 2-1: SerialNumber: syz [ 545.919559][T15663] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 545.929335][T15663] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 545.941946][T15659] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.951076][T15663] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 545.952470][T15659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.961733][T15663] usb 3-1: config 220 has no interface number 2 [ 545.977299][T15663] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 545.995194][T15659] usb 1-1: Product: syz [ 546.003507][T15659] usb 1-1: Manufacturer: syz [ 546.008880][T15663] usb 3-1: config 220 interface 0 has no altsetting 0 [ 546.008915][T15659] usb 1-1: SerialNumber: syz [ 546.020593][T15663] usb 3-1: config 220 interface 76 has no altsetting 0 [ 546.030570][T15663] usb 3-1: config 220 interface 1 has no altsetting 0 [ 546.047285][T15663] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 546.062449][T15663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.075182][T15663] usb 3-1: Product: syz [ 546.079425][T15663] usb 3-1: Manufacturer: syz [ 546.088831][T15663] usb 3-1: SerialNumber: syz [ 546.131312][ T5957] usb 2-1: selecting invalid altsetting 0 [ 546.145892][ T5957] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 546.164785][ T5957] usb 2-1: No valid video chain found. [ 546.277473][ T5957] usb 2-1: selecting invalid altsetting 0 [ 546.283256][ T5957] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 546.294549][ T5957] usb 2-1: USB disconnect, device number 24 [ 546.304983][T15663] usb 3-1: selecting invalid altsetting 0 [ 546.325039][T15663] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 546.336453][T15663] usb 3-1: No valid video chain found. [ 546.349202][T15663] usb 3-1: selecting invalid altsetting 0 [ 546.364710][T15663] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 546.635628][T15663] usb 3-1: USB disconnect, device number 30 [ 546.635730][T15659] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 546.664498][T15659] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 546.749403][T15659] usb 1-1: USB disconnect, device number 32 [ 547.146042][T17060] bpf: Bad value for 'gid' [ 548.295226][ T30] audit: type=1326 audit(1754198321.460:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 548.559804][ T30] audit: type=1326 audit(1754198321.460:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 548.585090][ T30] audit: type=1326 audit(1754198321.470:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 548.608685][ T30] audit: type=1326 audit(1754198321.520:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 548.632288][ T30] audit: type=1326 audit(1754198321.520:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 548.675341][ T30] audit: type=1326 audit(1754198321.520:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 548.833355][ T30] audit: type=1326 audit(1754198321.530:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 548.857316][ T30] audit: type=1326 audit(1754198321.530:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 548.976315][ T30] audit: type=1326 audit(1754198321.530:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 549.146859][ T30] audit: type=1326 audit(1754198321.530:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.1.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 550.287427][T17077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3810'. [ 550.425222][T17077] can0: slcan on ptm0. [ 550.545110][T17076] can0 (unregistered): slcan off ptm0. [ 550.854605][T15663] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 551.013894][T15663] usb 5-1: Using ep0 maxpacket: 8 [ 551.039715][T15663] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 551.050966][T15663] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 551.062157][T15663] usb 5-1: config 179 has no interface number 0 [ 551.071690][T15663] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 551.082897][T15663] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 551.098225][T15663] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 551.284710][T15663] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 551.295880][T15663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.329854][T17087] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 551.796955][T17103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3817'. [ 551.918570][T17103] can0: slcan on ptm0. [ 552.072048][T15735] Bluetooth: hci0: Malformed Event: 0x13 [ 552.081845][T15659] usb 5-1: USB disconnect, device number 27 [ 552.644751][T17096] can0 (unregistered): slcan off ptm0. [ 553.136531][ T5899] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 553.652798][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 553.687241][ T5899] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 553.703347][ T5899] usb 2-1: config 0 has no interface number 0 [ 553.718186][ T5899] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 553.727405][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.786204][ T5899] usb 2-1: Product: syz [ 553.801254][ T5899] usb 2-1: Manufacturer: syz [ 553.848874][ T5899] usb 2-1: SerialNumber: syz [ 553.896587][ T5899] usb 2-1: config 0 descriptor?? [ 553.915850][ T5899] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 554.169721][ T5899] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 554.269911][ T5899] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 554.588743][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 554.589064][T15663] usb 2-1: USB disconnect, device number 25 [ 554.628737][T15663] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 554.644683][T15663] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 554.657724][T15663] quatech2 2-1:0.51: device disconnected [ 554.663471][ T5957] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 554.836850][ T5957] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 554.871127][ T5957] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 554.894514][T17140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3832'. [ 554.985647][T17140] can0: slcan on ptm0. [ 555.045521][ T5957] usb 3-1: config 220 has no interface number 2 [ 555.102237][ T5976] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 555.125111][ T5957] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 555.141887][ T5957] usb 3-1: config 220 interface 0 has no altsetting 0 [ 555.148734][ T5957] usb 3-1: config 220 interface 76 has no altsetting 0 [ 555.158552][ T5957] usb 3-1: config 220 interface 1 has no altsetting 0 [ 555.167164][ T5957] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 555.176246][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.186346][ T5957] usb 3-1: Product: syz [ 555.190496][ T5957] usb 3-1: Manufacturer: syz [ 555.195121][ T5957] usb 3-1: SerialNumber: syz [ 555.203110][T17138] can0 (unregistered): slcan off ptm0. [ 555.323110][ T5976] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 555.331991][ T5976] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 555.371505][ T5976] usb 4-1: config 220 has no interface number 2 [ 555.399689][ T5976] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 555.422652][ T5976] usb 4-1: config 220 interface 0 has no altsetting 0 [ 555.430463][ T5976] usb 4-1: config 220 interface 76 has no altsetting 0 [ 555.441987][ T5957] usb 3-1: selecting invalid altsetting 0 [ 555.450607][ T5957] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 555.464086][ T5976] usb 4-1: config 220 interface 1 has no altsetting 0 [ 555.471073][ T5957] usb 3-1: No valid video chain found. [ 555.483952][ T5976] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 555.498778][ T5976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.527901][ T5976] usb 4-1: Product: syz [ 555.533254][ T5976] usb 4-1: Manufacturer: syz [ 555.542363][ T5957] usb 3-1: selecting invalid altsetting 0 [ 555.548658][ T5957] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 555.556960][ T5976] usb 4-1: SerialNumber: syz [ 555.910487][ T5957] usb 3-1: USB disconnect, device number 31 [ 555.972130][ T5899] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 556.181386][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 556.197365][ T5899] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 556.210987][ T5899] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 556.213821][ T5976] usb 4-1: selecting invalid altsetting 0 [ 556.225831][ T5899] usb 5-1: config 179 has no interface number 0 [ 556.237909][ T5899] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 556.245444][ T5976] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 556.256187][ T5976] usb 4-1: No valid video chain found. [ 556.266348][ T5976] usb 4-1: selecting invalid altsetting 0 [ 556.272188][ T5976] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 556.274662][ T5899] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 556.294249][ T5976] usb 4-1: USB disconnect, device number 38 [ 556.296088][ T5899] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 556.365792][ T5899] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 556.680169][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.705637][T17146] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 557.224733][T15659] usb 5-1: USB disconnect, device number 28 [ 557.237079][T15735] Bluetooth: hci0: Malformed Event: 0x13 [ 558.820008][T15659] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 559.010162][T15659] usb 5-1: Using ep0 maxpacket: 8 [ 559.017033][T17197] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3848'. [ 560.088270][T15659] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 560.098856][T15659] usb 5-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 560.202804][T15659] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 560.224450][T15659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.725155][T15735] Bluetooth: hci0: Malformed Event: 0x13 [ 560.788210][ T5957] usb 5-1: USB disconnect, device number 29 [ 560.812832][T17210] netlink: 'syz.2.3852': attribute type 12 has an invalid length. [ 560.892499][T17210] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3852'. [ 560.968932][T15659] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 561.191042][T15659] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.208898][T15659] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 561.263206][T15659] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 561.274521][T15659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.344194][T15659] usb 2-1: config 0 descriptor?? [ 561.368086][T15659] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 561.375594][T15659] dvb-usb: bulk message failed: -22 (3/0) [ 561.445994][T15659] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 561.462123][T17215] can0: slcan on ptm0. [ 561.573559][T15659] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 561.643963][T15659] usb 2-1: media controller created [ 561.660184][T15659] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 561.679335][T17214] can0 (unregistered): slcan off ptm0. [ 561.687556][T15659] dvb-usb: bulk message failed: -22 (6/0) [ 561.700142][T15659] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 561.724293][T15659] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 561.747465][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 561.747480][ T30] audit: type=1400 audit(1754198335.577:6146): avc: denied { read } for pid=5201 comm="acpid" name="event4" dev="devtmpfs" ino=3622 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.781269][T15659] dvb-usb: schedule remote query interval to 150 msecs. [ 561.828567][T15659] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 561.856825][ T30] audit: type=1400 audit(1754198335.577:6147): avc: denied { open } for pid=5201 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3622 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.919159][ T30] audit: type=1400 audit(1754198335.577:6148): avc: denied { ioctl } for pid=5201 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3622 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 561.988512][T15659] dvb-usb: bulk message failed: -22 (1/0) [ 561.994267][T15659] dvb-usb: error while querying for an remote control event. [ 562.612282][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 562.618212][ T5899] dvb-usb: error while querying for an remote control event. [ 562.628734][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.756897][ T5899] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 562.833222][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 562.839756][ T5940] dvb-usb: error while querying for an remote control event. [ 562.928414][T17240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.943660][T17240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.038929][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 563.044783][ T5940] dvb-usb: error while querying for an remote control event. [ 563.059194][ T5899] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 563.079294][ T5899] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 563.099376][ T5899] usb 1-1: config 220 interface 0 has no altsetting 0 [ 563.125247][ T5899] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 563.135946][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.241647][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 563.247491][ T5940] dvb-usb: error while querying for an remote control event. [ 563.488015][ T5899] usb 1-1: Product: syz [ 563.492278][ T5899] usb 1-1: Manufacturer: syz [ 563.496911][ T5899] usb 1-1: SerialNumber: syz [ 563.637728][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 563.644172][ T5940] dvb-usb: error while querying for an remote control event. [ 563.757945][ T5899] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 563.764318][ T5899] usb 1-1: No valid video chain found. [ 563.771577][ T5899] usb 1-1: USB disconnect, device number 33 [ 563.828222][ T5940] dvb-usb: bulk message failed: -22 (1/0) [ 563.838292][ T5940] dvb-usb: error while querying for an remote control event. [ 564.007414][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 564.036961][ T5899] dvb-usb: error while querying for an remote control event. [ 564.375523][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 564.381354][ T5899] dvb-usb: error while querying for an remote control event. [ 565.396750][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 565.402511][ T5899] dvb-usb: error while querying for an remote control event. [ 565.691035][ T5940] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 565.698916][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 565.704670][ T5899] dvb-usb: error while querying for an remote control event. [ 565.732643][ T5899] usb 2-1: USB disconnect, device number 26 [ 565.751533][ T30] audit: type=1400 audit(1754198339.589:6149): avc: denied { unmount } for pid=15496 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 565.866905][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 565.923983][ T5940] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 565.956606][ T5940] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 565.976387][ T5940] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 565.988931][ T5899] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 566.352664][ T5940] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.450450][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.676145][ T5940] usb 5-1: Product: syz [ 566.681170][ T5940] usb 5-1: Manufacturer: syz [ 566.707109][ T5940] usb 5-1: SerialNumber: syz [ 566.808610][T17278] netlink: 'syz.3.3871': attribute type 12 has an invalid length. [ 566.818250][T17278] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.3871'. [ 567.105944][ T5899] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 567.243578][ T5940] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 567.265512][ T5940] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 567.303285][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.361693][ T5899] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 567.509525][ T5940] usb 5-1: USB disconnect, device number 30 [ 567.520804][ T5899] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 567.580837][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.635066][ T5899] usb 2-1: config 0 descriptor?? [ 567.650969][ T5899] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 567.664996][ T5899] dvb-usb: bulk message failed: -22 (3/0) [ 568.147553][ T5899] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 568.170537][ T5899] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 568.190001][T17300] can0: slcan on ptm0. [ 568.259931][ T5899] usb 2-1: media controller created [ 568.280812][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 568.330898][ T5899] dvb-usb: bulk message failed: -22 (6/0) [ 568.427796][ T5899] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 568.435860][T17297] can0 (unregistered): slcan off ptm0. [ 568.896522][ T5899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 568.919536][ T5899] dvb-usb: schedule remote query interval to 150 msecs. [ 568.933117][ T5899] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 569.174208][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 569.234533][ T5899] dvb-usb: error while querying for an remote control event. [ 570.009478][T17320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.026949][T17320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.114310][ T30] audit: type=1326 audit(1754198343.941:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 570.137989][T15659] dvb-usb: bulk message failed: -22 (1/0) [ 570.144182][T15659] dvb-usb: error while querying for an remote control event. [ 570.216394][ T30] audit: type=1326 audit(1754198343.941:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 570.259425][ T30] audit: type=1326 audit(1754198343.941:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 570.334279][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 570.342159][ T5899] dvb-usb: error while querying for an remote control event. [ 570.406885][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'. [ 570.432408][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'. [ 570.467869][ T30] audit: type=1326 audit(1754198343.941:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 570.513731][ T30] audit: type=1326 audit(1754198343.941:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 570.567207][T15659] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 570.595747][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 570.615440][ T5899] dvb-usb: error while querying for an remote control event. [ 570.624854][ T30] audit: type=1326 audit(1754198343.951:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 570.625130][T17337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17337 comm=syz.0.3888 [ 570.648301][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.671296][ T30] audit: type=1326 audit(1754198343.951:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 570.932571][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 570.946310][ T5899] dvb-usb: error while querying for an remote control event. [ 570.957112][ T30] audit: type=1326 audit(1754198343.951:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 571.075369][T15659] usb 5-1: Using ep0 maxpacket: 16 [ 571.144484][ T5957] usb 2-1: USB disconnect, device number 27 [ 571.169289][ T30] audit: type=1326 audit(1754198344.021:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 571.203623][ T5957] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 571.204586][T15659] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 571.218377][ T30] audit: type=1326 audit(1754198344.021:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.3.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 571.269746][T17340] can0: slcan on ptm0. [ 571.274074][T15659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 571.350592][T15659] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 571.359998][T15659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.375501][T15659] usb 5-1: Product: syz [ 571.406757][T15659] usb 5-1: Manufacturer: syz [ 571.413694][T15659] usb 5-1: SerialNumber: syz [ 571.434976][T15659] usb 5-1: config 0 descriptor?? [ 571.684315][T15659] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 571.697530][T15659] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 571.713131][T17344] can0: slcan on ptm1. [ 571.723807][ T5957] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 571.764849][T17343] can0 (unregistered): slcan off ptm1. [ 571.771931][T17335] can0 (unregistered): slcan off ptm0. [ 571.885499][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 571.973011][T17350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3892'. [ 572.034031][T17350] can0: slcan on ptm0. [ 572.188933][ T5957] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 572.205804][ T5957] usb 2-1: config 0 has no interface number 0 [ 572.218525][ T5957] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 572.245849][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.297791][T15659] em28xx 5-1:0.0: chip ID is em2874 [ 572.322768][T17354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3891'. [ 572.396957][ T5957] usb 2-1: Product: syz [ 572.410094][ T5957] usb 2-1: Manufacturer: syz [ 572.432365][ T5957] usb 2-1: SerialNumber: syz [ 572.516166][T17348] can0 (unregistered): slcan off ptm0. [ 572.571372][ T5957] usb 2-1: config 0 descriptor?? [ 572.597714][ T5957] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 572.622128][T17357] pimreg: entered allmulticast mode [ 572.670654][ T9] usb 5-1: USB disconnect, device number 31 [ 572.677258][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 572.694498][ T9] em28xx 5-1:0.0: Freeing device [ 573.063232][ T5957] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 573.142428][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 573.269675][ T5957] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 573.743136][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 573.877795][ T5958] usb 2-1: USB disconnect, device number 28 [ 573.937001][ T5958] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 573.955915][ T5958] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 573.967210][ T9] usb 5-1: device descriptor read/all, error -71 [ 573.974653][ T5958] quatech2 2-1:0.51: device disconnected [ 575.198901][T17383] futex_wake_op: syz.4.3901 tries to shift op by -1; fix this program [ 575.942139][T17392] can0: slcan on ptm0. [ 576.231213][T17388] can0 (unregistered): slcan off ptm0. [ 576.341482][ T5940] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 576.421772][T15659] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 576.503018][ T5940] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 576.512216][ T5940] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 576.533039][ T5940] usb 2-1: config 220 has no interface number 2 [ 576.539341][ T5940] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 576.592979][ T5940] usb 2-1: config 220 interface 0 has no altsetting 0 [ 576.611446][T15659] usb 3-1: Using ep0 maxpacket: 16 [ 576.631036][ T5940] usb 2-1: config 220 interface 76 has no altsetting 0 [ 576.639670][T15659] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 576.661164][ T5940] usb 2-1: config 220 interface 1 has no altsetting 0 [ 576.668037][T15659] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.190844][T15659] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.212729][ T5940] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 577.230803][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.242073][T15659] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.251193][T15659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.259172][T15659] usb 3-1: Product: syz [ 577.270681][ T5940] usb 2-1: Product: syz [ 577.274852][ T5940] usb 2-1: Manufacturer: syz [ 577.284806][ T5940] usb 2-1: SerialNumber: syz [ 577.300685][T15659] usb 3-1: Manufacturer: syz [ 577.305817][T15659] usb 3-1: SerialNumber: syz [ 577.438257][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 577.438272][ T30] audit: type=1400 audit(1754198351.275:6170): avc: denied { bind } for pid=17403 comm="syz.3.3908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 577.470863][ T30] audit: type=1400 audit(1754198351.275:6171): avc: denied { write } for pid=17403 comm="syz.3.3908" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 577.519617][ T30] audit: type=1400 audit(1754198351.275:6172): avc: denied { open } for pid=17403 comm="syz.3.3908" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 577.523874][ T5940] usb 2-1: selecting invalid altsetting 0 [ 577.562683][ T30] audit: type=1400 audit(1754198351.275:6173): avc: denied { ioctl } for pid=17403 comm="syz.3.3908" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 577.587382][ C0] vkms_vblank_simulate: vblank timer overrun [ 577.595686][ T5940] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 577.610582][ T5940] usb 2-1: No valid video chain found. [ 577.623783][ T5940] usb 2-1: selecting invalid altsetting 0 [ 577.635355][ T5940] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 577.642512][ T30] audit: type=1400 audit(1754198351.345:6174): avc: denied { unmount } for pid=14588 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 577.666563][ T5940] usb 2-1: USB disconnect, device number 29 [ 577.686672][ T30] audit: type=1400 audit(1754198351.485:6175): avc: denied { ioctl } for pid=17405 comm="syz.3.3909" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 577.717617][ T30] audit: type=1326 audit(1754198351.525:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17405 comm="syz.3.3909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd117f8eb69 code=0x0 [ 577.969822][T15659] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 578.168162][T15659] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 578.196244][T15659] usb 3-1: USB disconnect, device number 32 [ 578.769686][T17421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3913'. [ 578.836777][T17421] can0: slcan on ptm0. [ 579.080980][T17417] can0 (unregistered): slcan off ptm0. [ 579.380073][T17426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3915'. [ 579.474028][T17425] can0: slcan on ptm0. [ 579.540502][T17424] can0 (unregistered): slcan off ptm0. [ 579.654148][T15659] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 579.899688][T15659] usb 5-1: Using ep0 maxpacket: 16 [ 579.955876][T15659] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 580.059888][T15659] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.164045][T15659] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 580.292367][T15659] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 580.390812][T15659] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.470306][T15659] usb 5-1: Product: syz [ 580.474488][T15659] usb 5-1: Manufacturer: syz [ 580.501072][T15659] usb 5-1: SerialNumber: syz [ 580.525383][T17444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3921'. [ 580.574955][T17446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3922'. [ 580.776267][T17452] bpf: Bad value for 'gid' [ 581.138860][ T5940] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 581.288817][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 581.300481][ T5940] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 581.314681][ T5940] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.424385][ T5940] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.659451][T15659] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 581.671181][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.690722][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.705799][ T5940] usb 1-1: Product: syz [ 581.710086][ T5958] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 581.710101][T15659] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 581.727811][ T5940] usb 1-1: Manufacturer: syz [ 581.732521][ T5940] usb 1-1: SerialNumber: syz [ 581.805728][T15659] usb 5-1: USB disconnect, device number 34 [ 581.908544][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 581.919959][ T5958] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 581.934535][ T5958] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 581.958404][ T5958] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.971969][ T5958] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.981382][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.989553][ T5958] usb 4-1: Product: syz [ 581.994310][ T5958] usb 4-1: Manufacturer: syz [ 581.999967][ T5958] usb 4-1: SerialNumber: syz [ 582.646730][ T5940] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 582.647922][ T5940] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 582.727173][ T5940] usb 1-1: USB disconnect, device number 34 [ 583.292984][ T5958] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 583.365487][ T5958] usb 4-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 583.402680][ T5958] usb 4-1: USB disconnect, device number 39 [ 584.705691][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3932'. [ 585.277330][ T5958] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 585.440058][T17499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17499 comm=syz.3.3937 [ 585.503436][T17499] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3937'. [ 585.524220][ T5958] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.583791][ T5958] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 585.709290][ T5958] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 585.728253][ T5958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.863257][T17507] program syz.2.3939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.183210][ T5958] usb 1-1: config 0 descriptor?? [ 586.211423][ T5958] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 586.221635][ T5958] dvb-usb: bulk message failed: -22 (3/0) [ 586.236532][ T5958] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 586.253568][ T5958] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 586.260952][ T5958] usb 1-1: media controller created [ 586.282319][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 586.298882][ T5958] dvb-usb: bulk message failed: -22 (6/0) [ 586.305044][ T5958] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 586.316022][ T5958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 586.331156][ T5958] dvb-usb: schedule remote query interval to 150 msecs. [ 586.339561][ T5958] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 586.496206][ T5958] dvb-usb: bulk message failed: -22 (1/0) [ 586.508992][ T5958] dvb-usb: error while querying for an remote control event. [ 586.551738][ T5940] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 586.594641][T17514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17514 comm=syz.2.3942 [ 586.701538][T17515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.706023][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 586.711354][T17515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.715671][ T9] dvb-usb: error while querying for an remote control event. [ 586.889383][T17514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3942'. [ 586.978391][ T5940] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 587.003220][ T5940] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 587.014423][ T5940] usb 4-1: config 220 has no interface number 2 [ 587.057301][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 587.063291][ T9] dvb-usb: error while querying for an remote control event. [ 587.104594][ T5940] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 587.184860][ T5940] usb 4-1: config 220 interface 0 has no altsetting 0 [ 587.201316][ T5940] usb 4-1: config 220 interface 76 has no altsetting 0 [ 587.215351][ T5940] usb 4-1: config 220 interface 1 has no altsetting 0 [ 587.229038][ T5940] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 587.240812][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.251150][ T5940] usb 4-1: Product: syz [ 587.255312][ T5940] usb 4-1: Manufacturer: syz [ 587.260055][ T5940] usb 4-1: SerialNumber: syz [ 587.288601][ T30] audit: type=1326 audit(1754198361.140:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.315694][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 587.322451][ T30] audit: type=1326 audit(1754198361.140:6178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.353158][ T30] audit: type=1326 audit(1754198361.140:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.376908][ T9] dvb-usb: error while querying for an remote control event. [ 587.384646][ T30] audit: type=1326 audit(1754198361.140:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.408457][ T30] audit: type=1326 audit(1754198361.160:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.431849][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.438089][ T30] audit: type=1326 audit(1754198361.160:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.461753][ T30] audit: type=1326 audit(1754198361.170:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.465628][ T3788] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 587.485121][ C0] vkms_vblank_simulate: vblank timer overrun [ 587.518032][ T5940] usb 4-1: selecting invalid altsetting 0 [ 587.524144][ T5940] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 587.530981][ T5940] usb 4-1: No valid video chain found. [ 587.541004][ T5940] usb 4-1: selecting invalid altsetting 0 [ 587.545604][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 587.546789][ T5940] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 587.557036][ T9] dvb-usb: error while querying for an remote control event. [ 587.562927][ T5940] usb 4-1: USB disconnect, device number 40 [ 587.640824][ T30] audit: type=1326 audit(1754198361.170:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.664566][ T30] audit: type=1326 audit(1754198361.170:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.688806][ T30] audit: type=1326 audit(1754198361.170:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17516 comm="syz.1.3943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 587.712388][ T3788] usb 3-1: Using ep0 maxpacket: 16 [ 587.728062][ T3788] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 587.767714][ T3788] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 587.791521][ T3788] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 587.867238][ T3788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.914724][T17528] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3946'. [ 587.934890][ T3788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.992114][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 587.998005][ T9] dvb-usb: error while querying for an remote control event. [ 588.005788][ T3788] usb 3-1: Product: syz [ 588.011160][ T3788] usb 3-1: Manufacturer: syz [ 588.020234][ T3788] usb 3-1: SerialNumber: syz [ 588.225946][ T5940] usb 1-1: USB disconnect, device number 35 [ 589.000963][ T5940] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 589.111274][ T3788] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 589.120935][ T3788] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 589.591849][ T3788] usb 3-1: USB disconnect, device number 33 [ 589.640767][T17543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3950'. [ 589.733936][T17543] can0: slcan on ptm0. [ 589.925231][T17538] can0 (unregistered): slcan off ptm0. [ 591.215150][T17559] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 591.803449][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 592.814244][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 592.830989][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 592.841468][ T9] usb 5-1: config 220 has no interface number 2 [ 592.847863][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 592.889701][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 592.906921][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 592.937784][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 592.959069][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 592.978204][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.996364][ T9] usb 5-1: Product: syz [ 593.014027][ T9] usb 5-1: Manufacturer: syz [ 593.035498][ T9] usb 5-1: SerialNumber: syz [ 593.175201][T17580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3962'. [ 593.330430][T17580] can0: slcan on ptm0. [ 593.350195][ T9] usb 5-1: selecting invalid altsetting 0 [ 593.370674][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 593.391087][ T9] usb 5-1: No valid video chain found. [ 593.408068][ T9] usb 5-1: selecting invalid altsetting 0 [ 593.421361][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 593.452181][ T9] usb 5-1: USB disconnect, device number 35 [ 594.404510][T17578] can0 (unregistered): slcan off ptm0. [ 594.950712][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 594.950728][ T30] audit: type=1326 audit(1754198368.794:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 595.081794][T14221] Bluetooth: hci0: command 0x0406 tx timeout [ 595.394554][ T30] audit: type=1326 audit(1754198368.794:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 595.489186][ T30] audit: type=1326 audit(1754198368.794:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 596.091080][ T30] audit: type=1326 audit(1754198368.794:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 596.114478][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.121885][ T30] audit: type=1326 audit(1754198368.794:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 596.145340][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.151881][ T30] audit: type=1326 audit(1754198368.794:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 596.181265][ T30] audit: type=1326 audit(1754198368.794:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 596.232328][ T30] audit: type=1326 audit(1754198368.794:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 596.277172][ T30] audit: type=1326 audit(1754198368.794:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 596.343743][ T30] audit: type=1326 audit(1754198368.794:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17604 comm="syz.3.3969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fd117f8eb69 code=0x7ffc0000 [ 596.463283][ T5940] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 596.652985][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 596.705869][T17632] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3978'. [ 596.773562][T17632] can0: slcan on ptm1. [ 596.833986][ T5940] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 596.844208][ T5940] usb 2-1: config 179 has no interface number 0 [ 596.987105][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 597.137273][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 597.175026][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 597.286516][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 597.308437][ T5940] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 597.406863][ T5940] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 597.416149][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.432483][T17629] can0 (unregistered): slcan off ptm1. [ 597.477943][T17619] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 597.918541][ T5958] usb 2-1: USB disconnect, device number 30 [ 597.918660][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 597.933247][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 600.083067][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 600.083082][ T30] audit: type=1326 audit(1754198373.936:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 600.149501][ T30] audit: type=1326 audit(1754198373.936:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 600.212066][ T30] audit: type=1326 audit(1754198373.936:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 600.243669][ T30] audit: type=1326 audit(1754198373.936:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 600.287962][ T30] audit: type=1326 audit(1754198373.936:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 600.319222][ T30] audit: type=1326 audit(1754198373.936:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 600.342964][ T5940] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 600.357457][T17661] netlink: 'syz.0.3988': attribute type 12 has an invalid length. [ 600.365507][T17661] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3988'. [ 600.516861][ T30] audit: type=1326 audit(1754198373.936:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 600.576631][ T30] audit: type=1326 audit(1754198373.936:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 600.640413][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 600.658768][T17668] vxcan1: entered allmulticast mode [ 601.131850][ T5940] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 601.576766][ T30] audit: type=1326 audit(1754198374.026:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 601.603256][ T30] audit: type=1326 audit(1754198374.026:6232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17653 comm="syz.4.3986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aa78eb69 code=0x7ffc0000 [ 601.627838][ T5940] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 601.679833][ T5940] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 601.720712][ T5940] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.741602][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.761706][ T5940] usb 3-1: Product: syz [ 601.785041][ T5940] usb 3-1: Manufacturer: syz [ 601.831165][ T5940] usb 3-1: SerialNumber: syz [ 602.733942][T17684] netlink: 'syz.0.3996': attribute type 2 has an invalid length. [ 603.145169][ T5940] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 603.177762][ T5957] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 603.186440][ T5940] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 603.366395][ T5940] usb 3-1: USB disconnect, device number 34 [ 603.380299][ T5957] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 603.389780][ T5957] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 603.560907][ T5957] usb 1-1: config 220 has no interface number 2 [ 603.632486][ T5957] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 603.785827][ T5957] usb 1-1: config 220 interface 0 has no altsetting 0 [ 603.811372][ T5957] usb 1-1: config 220 interface 76 has no altsetting 0 [ 603.834421][ T5957] usb 1-1: config 220 interface 1 has no altsetting 0 [ 603.846065][ T7787] Bluetooth: hci2: Frame reassembly failed (-84) [ 603.876038][ T5957] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 603.885177][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.893303][ T5957] usb 1-1: Product: syz [ 603.897554][ T5957] usb 1-1: Manufacturer: syz [ 603.913691][ T5957] usb 1-1: SerialNumber: syz [ 604.027352][ T3788] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 604.131258][ T5957] usb 1-1: selecting invalid altsetting 0 [ 604.143151][ T5957] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 604.149545][ T5957] usb 1-1: No valid video chain found. [ 604.157425][ T5957] usb 1-1: selecting invalid altsetting 0 [ 604.163161][ T5957] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 604.173601][ T5957] usb 1-1: USB disconnect, device number 36 [ 604.177433][ T3788] usb 5-1: Using ep0 maxpacket: 16 [ 604.189349][ T3788] usb 5-1: config 40 has an invalid interface association descriptor of length 3, skipping [ 604.200126][ T3788] usb 5-1: config 40 has an invalid interface number: 243 but max is 2 [ 604.208455][ T3788] usb 5-1: config 40 has an invalid interface number: 6 but max is 2 [ 604.216512][ T3788] usb 5-1: config 40 has an invalid descriptor of length 41, skipping remainder of the config [ 604.227122][ T3788] usb 5-1: config 40 has no interface number 1 [ 604.233356][ T3788] usb 5-1: config 40 has no interface number 2 [ 604.242691][ T3788] usb 5-1: config 40 interface 0 altsetting 9 has an endpoint descriptor with address 0x53, changing to 0x3 [ 604.247224][ T5958] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 604.254184][ T3788] usb 5-1: config 40 interface 0 altsetting 9 endpoint 0x3 has an invalid bInterval 186, changing to 7 [ 604.282701][ T3788] usb 5-1: config 40 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 604.299876][ T3788] usb 5-1: config 40 interface 0 altsetting 9 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 604.311000][ T3788] usb 5-1: config 40 interface 0 altsetting 9 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 604.325765][ T3788] usb 5-1: config 40 interface 0 altsetting 9 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 604.342155][ T3788] usb 5-1: config 40 interface 0 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 604.352895][ T3788] usb 5-1: config 40 interface 0 altsetting 9 endpoint 0x4 has invalid wMaxPacketSize 0 [ 604.365508][ T3788] usb 5-1: config 40 interface 0 altsetting 9 endpoint 0xE has invalid maxpacket 991, setting to 64 [ 604.376477][ T3788] usb 5-1: config 40 interface 0 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 604.387271][ T3788] usb 5-1: config 40 interface 0 altsetting 9 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 604.437146][ T5958] usb 2-1: Using ep0 maxpacket: 8 [ 604.439486][ T3788] usb 5-1: config 40 interface 243 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.456762][ T3788] usb 5-1: too many endpoints for config 40 interface 6 altsetting 1: 127, using maximum allowed: 30 [ 604.470751][ T3788] usb 5-1: config 40 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 127 [ 604.484630][ T3788] usb 5-1: config 40 interface 0 has no altsetting 0 [ 604.485075][ T5958] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 604.491469][ T3788] usb 5-1: config 40 interface 243 has no altsetting 0 [ 604.508469][ T3788] usb 5-1: config 40 interface 6 has no altsetting 0 [ 604.527097][ T3788] usb 5-1: New USB device found, idVendor=10b8, idProduct=2383, bcdDevice=a0.01 [ 604.538721][ T3788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.538810][ T5958] usb 2-1: config 179 has no interface number 0 [ 604.546877][ T3788] usb 5-1: Product: ц [ 604.558210][ T3788] usb 5-1: Manufacturer: ㆻāꑬ앣춿㆐ﷵ醉铻牺녧༽蠱ㆭ⫳굡㿳孰톙艶 [ 604.569256][ T3788] usb 5-1: SerialNumber: syz [ 604.569643][ T5958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 604.617084][ T5958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 604.631875][ T5958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 604.643374][ T5958] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 604.846897][ T5958] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 604.854273][ T3788] dvb-usb: found a 'DiBcom STK9090M reference design' in cold state, will try to load a firmware [ 604.900810][ T5958] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 604.908286][ T3788] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 604.922288][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.941652][ T3788] dib0700: firmware download failed at 7 with -8 [ 604.943644][T17706] netlink: 'syz.2.4003': attribute type 12 has an invalid length. [ 604.958937][T17706] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.4003'. [ 604.969421][ T3788] dvb-usb: found a 'DiBcom STK9090M reference design' in cold state, will try to load a firmware [ 604.981698][T17697] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 604.990413][ T3788] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 605.002609][ T3788] dib0700: firmware download failed at 7 with -8 [ 605.019354][ T3788] dvb-usb: found a 'DiBcom STK9090M reference design' in cold state, will try to load a firmware [ 605.031432][ T3788] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 605.042201][ T3788] dib0700: firmware download failed at 7 with -8 [ 605.063417][ T3788] usb 5-1: USB disconnect, device number 36 [ 605.338702][ T5940] usb 2-1: USB disconnect, device number 31 [ 605.338713][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 605.338844][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 605.361432][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.796490][T15735] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 605.796501][T14221] Bluetooth: hci2: command 0x1003 tx timeout [ 606.325126][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 606.325143][ T30] audit: type=1400 audit(1754198380.149:6244): avc: denied { append } for pid=17724 comm="syz.1.4009" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 606.571157][ T30] audit: type=1400 audit(1754198380.410:6245): avc: denied { ioctl } for pid=17724 comm="syz.1.4009" path="socket:[55527]" dev="sockfs" ino=55527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 606.596469][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.615013][T17735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17735 comm=syz.2.4011 [ 606.640949][T17735] netlink: 'syz.2.4011': attribute type 1 has an invalid length. [ 607.064612][T17741] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 607.417396][ T30] audit: type=1326 audit(1754198381.280:6246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 607.440872][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.515572][ T3788] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 608.695044][ T3788] usb 3-1: Using ep0 maxpacket: 16 [ 608.700428][ T30] audit: type=1326 audit(1754198381.310:6247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 608.701508][ T3788] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 608.724131][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.782160][ T30] audit: type=1326 audit(1754198381.310:6248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 608.805632][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.842643][ T3788] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 608.883231][ T3788] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 608.883300][ T30] audit: type=1326 audit(1754198381.320:6249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 608.926328][ T30] audit: type=1326 audit(1754198381.330:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 609.220956][ T30] audit: type=1326 audit(1754198381.330:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 609.259448][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.276953][T17758] futex_wake_op: syz.3.4017 tries to shift op by -1; fix this program [ 609.291222][T17757] netlink: 'syz.4.4018': attribute type 12 has an invalid length. [ 609.401943][ T3788] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.411723][ T3788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.419818][ T3788] usb 3-1: Product: syz [ 609.419955][T17757] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.4018'. [ 609.433400][ T3788] usb 3-1: Manufacturer: syz [ 609.438240][ T30] audit: type=1326 audit(1754198381.330:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 609.461705][ T3788] usb 3-1: SerialNumber: syz [ 609.947426][ T30] audit: type=1326 audit(1754198381.330:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17746 comm="syz.1.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f808b18eb69 code=0x7ffc0000 [ 609.970910][ C0] vkms_vblank_simulate: vblank timer overrun [ 610.324200][ T5940] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 610.349759][ T3788] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 610.452262][ T3788] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 611.185024][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 611.246924][ T5940] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 611.426243][ T5940] usb 2-1: config 179 has no interface number 0 [ 611.453664][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 611.473032][ T3788] usb 3-1: USB disconnect, device number 35 [ 611.603676][ T31] INFO: task kworker/u8:11:6851 blocked for more than 144 seconds. [ 611.615990][ T31] Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 [ 611.632519][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.644835][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 611.681512][ T31] task:kworker/u8:11 state:D stack:25480 pid:6851 tgid:6851 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 611.694338][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 611.707267][ T5940] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 611.718810][ T5940] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 611.732567][ T5940] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 611.749550][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.779471][T17763] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 611.808378][ T31] Workqueue: netns cleanup_net [ 611.922033][ T31] Call Trace: [ 611.938994][ T31] [ 612.006600][ T31] __schedule+0x1190/0x5de0 [ 612.017811][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 612.031640][ T31] ? __pfx___schedule+0x10/0x10 [ 612.291742][ T3788] usb 2-1: USB disconnect, device number 32 [ 612.291775][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 612.305938][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 612.400063][ T31] ? find_held_lock+0x2b/0x80 [ 612.448799][ T31] ? schedule+0x2d7/0x3a0 [ 612.467528][ T31] schedule+0xe7/0x3a0 [ 612.495965][ T31] afs_cell_purge+0x41f/0x4f0 [ 612.525753][ T31] ? __try_to_del_timer_sync+0x115/0x170 [ 612.538381][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 612.565501][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 612.577833][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 612.601295][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 612.615513][ T31] afs_net_exit+0x83/0x140 [ 612.625606][ T31] ops_undo_list+0x2eb/0xab0 [ 612.637718][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 612.664431][ T31] ? cleanup_net+0x334/0x890 [ 612.676802][ T31] ? idr_destroy+0x62/0x2e0 [ 612.703934][ T31] cleanup_net+0x408/0x890 [ 612.868745][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 612.873850][ T31] ? rcu_is_watching+0x12/0xc0 [ 612.878749][ T31] process_one_work+0x9cc/0x1b70 [ 612.883857][ T31] ? __pfx_process_one_work+0x10/0x10 [ 613.002354][ T31] ? assign_work+0x1a0/0x250 [ 613.024760][ T31] worker_thread+0x6c8/0xf10 [ 613.047197][ T31] ? __pfx_worker_thread+0x10/0x10 [ 613.070362][ T31] kthread+0x3c5/0x780 [ 613.086403][ T31] ? __pfx_kthread+0x10/0x10 [ 613.120353][ T31] ? rcu_is_watching+0x12/0xc0 [ 613.140104][ T31] ? __pfx_kthread+0x10/0x10 [ 613.162056][ T31] ret_from_fork+0x5d7/0x6f0 [ 613.180662][ T31] ? __pfx_kthread+0x10/0x10 [ 613.197014][ T31] ret_from_fork_asm+0x1a/0x30 [ 613.214248][ T31] [ 613.250715][ T31] [ 613.250715][ T31] Showing all locks held in the system: [ 613.272181][ T31] 4 locks held by kworker/0:0/9: [ 613.292813][ T31] 1 lock held by khungtaskd/31: [ 613.308297][ T31] #0: ffffffff8e5c1120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 613.318653][ T31] 2 locks held by getty/5608: [ 613.329907][ T31] #0: ffff888036d4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 613.342691][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 613.356845][ T31] 3 locks held by kworker/u8:11/6851: [ 613.362760][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 613.422659][ T31] #1: ffffc9001c04fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 613.472414][ T31] #2: ffffffff90366870 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 613.499000][ T31] 3 locks held by kworker/u8:49/7783: [ 613.511415][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 613.533705][ T31] #1: ffffc90005ca7d10 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 613.546401][ T31] #2: ffffffff8e463490 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 613.562107][ T31] 4 locks held by syz.1.4009/17734: [ 613.568630][ T31] 2 locks held by syz.1.4019/17762: [ 613.573942][ T31] #0: ffff888058db0808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 613.585648][ T31] #1: ffffffff8e5cc6b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 613.603618][ T31] 2 locks held by syz.2.4022/17770: [ 613.608856][ T31] #0: ffff888146f1a118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x29e/0x420 [ 613.624648][ T31] #1: ffff88802bf762c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x46/0x2a0 [ 613.645747][ T31] 1 lock held by syz.3.4023/17776: [ 613.652534][ T31] #0: ffff8880527aa008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 613.692534][ T31] [ 613.695194][ T31] ============================================= [ 613.695194][ T31] [ 613.706902][ T31] NMI backtrace for cpu 0 [ 613.706918][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 613.706939][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.706950][ T31] Call Trace: [ 613.706956][ T31] [ 613.706963][ T31] dump_stack_lvl+0x116/0x1f0 [ 613.706992][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 613.707011][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 613.707036][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 613.707064][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 613.707086][ T31] watchdog+0xf0e/0x1260 [ 613.707111][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.707128][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 613.707153][ T31] ? __kthread_parkme+0x19e/0x250 [ 613.707180][ T31] ? __pfx_watchdog+0x10/0x10 [ 613.707198][ T31] kthread+0x3c5/0x780 [ 613.707216][ T31] ? __pfx_kthread+0x10/0x10 [ 613.707235][ T31] ? rcu_is_watching+0x12/0xc0 [ 613.707256][ T31] ? __pfx_kthread+0x10/0x10 [ 613.707275][ T31] ret_from_fork+0x5d7/0x6f0 [ 613.707291][ T31] ? __pfx_kthread+0x10/0x10 [ 613.707308][ T31] ret_from_fork_asm+0x1a/0x30 [ 613.707342][ T31] [ 613.707348][ T31] Sending NMI from CPU 0 to CPUs 1: [ 613.830486][ C1] NMI backtrace for cpu 1 [ 613.830499][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 613.830516][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.830524][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 613.830546][ C1] Code: 54 63 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 9b 17 00 fb f4 cc 0c 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 613.830558][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 613.830570][ C1] RAX: 0000000001f31bd1 RBX: 0000000000000001 RCX: ffffffff8b9273a9 [ 613.830579][ C1] RDX: 0000000000000000 RSI: ffffffff8de4c8fd RDI: ffffffff8c15fb80 [ 613.830587][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 613.830596][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 613.830604][ C1] R13: ffff88801e2ea440 R14: ffffffff90aad390 R15: 0000000000000000 [ 613.830613][ C1] FS: 0000000000000000(0000) GS:ffff8881247c8000(0000) knlGS:0000000000000000 [ 613.830627][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.830635][ C1] CR2: 0000200000031000 CR3: 000000000e380000 CR4: 00000000003526f0 [ 613.830644][ C1] Call Trace: [ 613.830656][ C1] [ 613.830661][ C1] default_idle+0x13/0x20 [ 613.830673][ C1] default_idle_call+0x6d/0xb0 [ 613.830685][ C1] do_idle+0x391/0x510 [ 613.830703][ C1] ? __pfx_do_idle+0x10/0x10 [ 613.830719][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 613.830735][ C1] cpu_startup_entry+0x4f/0x60 [ 613.830751][ C1] start_secondary+0x21d/0x2b0 [ 613.830770][ C1] ? __pfx_start_secondary+0x10/0x10 [ 613.830789][ C1] common_startup_64+0x13e/0x148 [ 613.830809][ C1] [ 614.003360][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.046799][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 614.053692][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(full) [ 614.065144][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.075197][ T31] Call Trace: [ 614.078469][ T31] [ 614.081396][ T31] dump_stack_lvl+0x3d/0x1f0 [ 614.085994][ T31] vpanic+0x6a3/0x780 [ 614.089980][ T31] ? __pfx_vpanic+0x10/0x10 [ 614.094492][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 614.100383][ T31] panic+0xca/0xd0 [ 614.104108][ T31] ? __pfx_panic+0x10/0x10 [ 614.108527][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 614.113902][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 614.120055][ T31] ? watchdog+0xd78/0x1260 [ 614.124468][ T31] ? watchdog+0xd6b/0x1260 [ 614.128880][ T31] watchdog+0xd89/0x1260 [ 614.133127][ T31] ? __pfx_watchdog+0x10/0x10 [ 614.137802][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 614.143010][ T31] ? __kthread_parkme+0x19e/0x250 [ 614.148038][ T31] ? __pfx_watchdog+0x10/0x10 [ 614.152712][ T31] kthread+0x3c5/0x780 [ 614.156775][ T31] ? __pfx_kthread+0x10/0x10 [ 614.161363][ T31] ? rcu_is_watching+0x12/0xc0 [ 614.166127][ T31] ? __pfx_kthread+0x10/0x10 [ 614.170716][ T31] ret_from_fork+0x5d7/0x6f0 [ 614.175299][ T31] ? __pfx_kthread+0x10/0x10 [ 614.179884][ T31] ret_from_fork_asm+0x1a/0x30 [ 614.184658][ T31] [ 614.187849][ T31] Kernel Offset: disabled [ 614.192172][ T31] Rebooting in 86400 seconds..