last executing test programs: 13.183232139s ago: executing program 0 (id=707): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x48c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x460, 0x2, [@TCA_BPF_ACT={0x45c, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x194, 0x5, 0x0, 0x0, {{0x7}, {0x84, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x7d, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd"}}]}, {0xec, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x128, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x1}}]}, {0xbd, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0xa0, 0x13, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x47, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 12.82267786s ago: executing program 0 (id=711): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8fcf"], 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000080)={0x7, 0x10, 0x85, 0x9, "b75fc47f994d6d4056b9b835c407dd0fcd70131cb1a8f007512701d3987e5821"}) setns(0xc9, 0x4000000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001d80)=ANY=[@ANYBLOB="741100001b0000042cbd7000fedbdf2504004400f110068004000080282a88a715a62694942dc901034fcb3190dbdf84254c735e57df19cddeaba1ff549fdd1a73461d61bfcfffbd409d7d59f234562e1ca123e6073d47fa278186af3d920d2b1f7fc6a7265699125e3439a4b1eb56bec4b0a4c5c7bd180f190f298e7161aa521fc56ee5c781935d877680f68d32184716e6d6480326f3658aa409b7f51e951275c3716e92bacf9c2d6165064bebc1deb2b4812da66b47c3339d4c5a6f7a83a8fa4f0b521ab6beb2c9b8ee5f38d4a8751024e5299d273205c6a5dd7785bf8cb3210b18f3af32262ec9c0ccfc29be59b53ae848f5cf22cfcd4c95323473407bb17810e454feab66f0895088a55f0c52020251feb9db81608e69c4754c2fa0f6d27f35bc5f7588b436af42f4e15f051d4299ef408f6a03c72155e3040d8aadfff1378640811d5f8c57df3839624bd25069e9b4f9e140ce707eb96234bab691e710fb6266cc755d914b5032eda59d058271a6e6579d75708ef8686a95bc2e7764aa086f415a5595d449eaf7a712df234d441017847a96406a5bc5f5ac7a353abe612506d3701acbca546db4f3636ff4016a089dd53fa5c8f56020dd24fe365227eca72e2b09820602662ba5e3be22a9d4f260bffc2fbee86b484751d85f32acdfd635b645236c0affd40d564f36ecb828085fc986615315ee42991863a1b7352a8ba0c7f6388e13d1ea0cb1f985d2451aa80d63122ce99e0381009aa54ee14618161c03f7bc27208d6386fee7949a8a32223266a9903f6b8450a67c8dab1a670c75ec70ad90524e5850c47f958e8725c9ab789c274afc9909d0dc971139feac27219b89b20355510e1ef690cac6bbc2b0063ec36fabc65c7572747bbb95bb432b1705d4b058a1c43bbf88444919e17aeac201e8880e390037d49d8ad5c1852640af04e01641bb34bdc44efa4cdb96d75da568634ecd989c517a92ffc21e82efbaa9905f36e89eda0299120c33e2c2e6f7ecb464463b22912f91d88d4f35dde818babae2525ab7346961d67a6a2075188228d95caaabad1114b6ca2ceb61abaf29969b1998238fb57bf48d84d942546bb658310b0fb96b2c602c598634a17f22516cc3c322c4f6a28d63b9d4431b5e052b41b34335fd82cdfe04e9468a9bb6a5a225d1648dd75a0038807964d643e603af02440f407adde8808dc3ebde59cf02d741bb5cf025f663899321643c714551af2a729a428e85b5e078e36bddf966b1942f3cfa22e4337a9225b4685d1b9ad886c50646641a5c68e691a28d52d4c7e16c22494169a66ec557160cd7ec2093d68f2963fec256102bb2762683b4036c7de75907cf30c32b2ae7a2ac80a45f2305606190e7fcac582cd26a03a7c9625a2690ff5cf6bf9bd1f7da1a887f9f2f582b2d28d13e5ce99a228f2e5782f4a05a347aa82fadcdc4767866816bbd8f5b56ad1a323370583eec84159cd1b1820f947b585e865d1591c06e928bd13d45574b5414b12cbff3e0ad61ebd5b4923475c73edb61f7f967a20881a10c5a387c7753deae01ef58c5e1ed4842d199dc068d78118e50c93a47ce8eafd28d3ebd71b19fe9abe4a5cd89dac4f9e48a2dc7b21eb75d68cb2d6a566aae12196777cb00778398d4c796e58b624fb8cb38a142147882a74d7235b4d7b669b4b8aa11381cd9fa908de4bf708c663f789633ae1d10ebcdbbf82bb2160217a81e4aa807f04970c51d84251d767af620a09c5b1e671560a34f1c653640409e7193eb5baf4dc1abdc45e991e8e505f99c08cb77a45e40255599db3109e780171d57e6dd28a35e8a77b8dae20b7d7a6561c8f2f8802ddc114a1057ab916a59f618ee1d28a8059445f68b680cc3cc983722ef006b1921722340630fcf937f19ab1416c3c14f1fb3aa8d4a66b5bea2a515b31c386b38459a28277d74491b877c5496693cd056731e5af92f69bf5cd9f4b2faeedb2c13735ff1d3f0566ea8c7927f7d525c9e5e71e21024e39f1b0f6367d937ad1602ad0166b61d26bea62b23bde5628739449d7786fb7b32a99281762fb49eea427c96ef91ebdcd2d14940b09682c9c80bb798ea8e563c7ce56bc5f5a487cd88972d14e5eaaf225a4cc020405bae71b2c651c47c82b038291422ac9a5b9c0758258ee80122888c486832d3518b74bff41ed84e917ed4fce4c33f2fcb3d9043cfce0c60dda6ca075f12e1b23b41a590486a9f78258dff16aa72e8938e17b122ea5921d07267ee6c868bc5038368692ffc0a88eab850cb4e6e8ce00df068b4cda4451a4443bf0ede08f295638b671b8d1a9da429c7a1f0d642afa8ba73c668d9ac050e81d983b3d6518ef01c716ab4218d7aac6959cbaa45e8a2822e9ca83fe06827113093e6aa4e0044961577056f5bd8b9713a2a79ba94cb27adfff105ab2da559d221a304ff0c098273cdc844bd647177813a07a031d587b77716c98b5a7cad52397f4a0946b4a44812d51c60539ae7f00ef8145d6e48f721e3a6aba2ab663ceb6794d8f40557869b4ad68351c451c00336c604db1d181a2d27a260b8caec5527ccf65f7c4b90f410755531e3e5af8d78d6fdaa4e6ce88c8530582d3261462ca489078e86304f3310a928d32c89450e46086f911d4333551873aa087d0471fa74afe62bdea6652a9f95c88e08860bb3816dbea2cd36c7b8ebfe12ddf1c8e380121ed105d9eb012ded4013136ade56f7d5ae13161e793f3f5e51bdb5a98da421f893cedc7c0c0d54b736014847bc56a3297630e33d74f4b4b60339ba8cb98c9344f1b6d553a137091543357b469b146a75b04640fefd2e76c9df4cc17b3fab3f9d8af599f874212cf55f3fa94808acd94bb1aa615b2d2953c057753df59700b0e99e105eca7a94079e4d0764910533a08189de1ad3703801181dc00638efae933d992558f0b7efea636dd838e38193f70dc0b785b6b8c8755fd56bfab9b16e47bb8cbbe75971c7354ca670b3dba3140c7e68058a3ebe5a6455bc43847034e16a9c2e0a911aaa8c9c88ecc5357c3cf990d3c2406500da8b2869cf61061f4c55dac0e24b646dd596d99a9d3a548381114e1f8b445f05f096741680cf2ac58dc9af18a5207a048b00cb0461d5251ed88aafaae34c1fa7cb7a9935c5266afc14609bbe6eb9eff21c7ce749198ea0d619d329376db958c529e3e6b2cfb6fbe41f481a78f789c9f3d44fbc66e650b7769ccc25ec07e4c0433e5cc4ae23fbe7e92971d3eb7c44910baa2d6eead5cf7bac5070ba2124c88a185f46bcb49d3e0c0fbfaa8c72a22ce31ae07abb74e5e605c39c60251577a1c689c63ea6617a376393602fe6308c0ac1cb6b5c108835f1cb4d53985f56b3a01855a269e918f352125f42e000731341fa8f9645f6af2c409448c1f4e4a16333e5ae33c4bac32b4c7dff6892205dc922bcb190cf9b9ebf0144eccfd9ceb0bd8c9ad155611b09f2ca6db6caaeb5d7271aca8f5423a61d3e54fcb30a9b0fb887363ebe38e0183fae6a522a90d3fe5e910e2ac50df51a2ffd532ff008c7e2097c108726b9d467e55cf77f69ba9ae64809739243c757d027c5e221d93a161dc88b0da8423213ae0e239bfa441bbec5b9bae360cc519313fab06b43a33fcd9a4a1c608206ff5ee37124905b3438e3b5acd8f91c2b50695cffea1984a82429203cb9e22ae14956439ac1a761446fdbfeb00a119a3aabf23406a023806c40397b97dbee66eef4be1d68fe72e7634e0482fd67126b93eaa907362057e31892e26189522e156ac7975e1370327884f755317ec6bb249d9d1d27279c6430ff9260a0e1154ed87479062f7109b9bbf55a16955a6ba5e60b998aaec17aa6a611cad62c1edcb15889eab9786360c3c4309575383dc21950e84bd4690504e4e68e2321a6c19ef60e0551355fea9003737b46e287c554e17d5dbd926f0520b17a007a08ba718c687882da3b6d51f7f0a7aea3ea2fc2e906123342fe180fe349bad2ceca68a805d98b2b47ebc9d9211a685704da8b09030b529e83e7a8fcffc5667508621b236530bf460e361c2bb6e5fda4f13ea217c682d6ff3106bc2aeb781dfe1195c80594cb54d9976fa15801880da9dd1425f8dc6cfa101b62a9f2377a1f37d30926a6c6f12bcbdaa65ea4752c67a2c31f5504b53648f5e4820c43f975f615e51d6ba9208d45eadb447fa15f00f7902e78912decd61a43d1898f6563d5070e8eba6d48fb84fb897582a2a2138c05e8f1ca4a4060d641efcee068a5a3f50c862579169b71a8c783ac0598945182e34f21447f70e35ba89fd5ecd31eecd5ef425514924552efb2d3bfd89c61cf8d6745af30dfe18b56f8cca68158aca5f3a4b24ab2a3b7f927c44b135b3dc67935744ba6cd29f9b72f9f9820621bc62c500a701fe7e307198b320b73eacc05f37f2e200feeab2596f874869ddf5ee20ed8bf38ba0e072d256ec40913df14e0c6e5bd39bcd64e82e8f497a66caa6a51c3442b4c77785e41585e73fa6fffd4ce8392ae581b89b5fea0e21c7b3536a648bef9d58bcce35c0ee7e018914c281dceeb5bba65f1e3cd75babac8f1dd104a20c5df6c38c9aa106c1b52c50e02eef18dd74a38561210b7d45a6618e5337cb9c3f9f7a597cb53539d6e754108862df3d8d81c7a03dc56f8dd57954565a1d32d35f8818176afc12594bfbcd021a5055eddd8a7cb4a59ea6ffeeb39fb4b5d6e9a1708769e311cdc4ebc92e4e0e2861ee4b96f6923392883f065d04a0f0f207d6042aa60c4986d4d8ec8f0c535f0ce804cabcaa0cc5052a7ad38e997e8ef9ee2f0edb66e80a929ca60378e0f7a4ec10b3055d2b5866223ead1f03437a107072beff82981b88c04257f535c7320df9235838c6b2b9c30270281624dabfdf6e118fbd393ea08b7bb37ac1a2f5f282bb252625c2ebc9dc6c96efb2290bddf499808520847095acbfab9e862400f935f617e684ca8d2894a4cefa2edd91562e071ace12908f7820c6038b67dc68532f38c92212eef609968b7215709d4b76b258b9370ed4dce325f204700186b9d7f21a921758c35f012b0ef40ee116bd9ffa1ab356ac1b2e0b55904c6336a83e6c270ce0010aea30d5e90fc661cae93d4d3afc3eec488ae7bf048b23f1f610e98cebc15b811b2c48eafe6ddecbd722398650bdda19f3880bae22265e5ecff289b6aa8c83b43c07b1db32fd909abec8e87dc21cf19b7d5497768d114c6a1cb17f883b56344f1692e9ecc5f592d1f3683fc0c4141adfcb0dd769cbb170b0a9bed7fb670e0ae1def53c20b18a5665c4312a4e6c60a10347034edf558d5d09c209055c6f228ace918ee044217a2483cd157d8b5000acbcf2c91d41f00c2aa30fa4b4c10d2df467a65bcb64f9d951537575fe300682932dbdf27c4eb654b132f3ee9ec48b74ea9625c4908332343eebdbad3338e5d31f4413a6ca128db5a00ad0a6430e802909dc3420cea37c869bb9b8dd19cccf6ec87c30aa549a52ae350048b24d4dc5adcb7c69ca5297fcc9fab1c76f653fe708f42ee0a3445055fa703817d2ef4ba0b103b7f77df4c053c0cd4e3d73923e7c81662524b361a4fcf0b27c53ed06e696240b4d3273f6db09055042c72152708a332c3869cc9f2373aace8f50ffcb8eddac18d59c650a9c6ee62c543f333d66f5552d19bd35dd36b34e2059deb528df2a8d13b660725bb4f1842a6c1d058325dce1e17a51399a790463c229c994577b748358e583b582d044603440c7da54942f1eadb190d4fc46e0ad4423067b7880eb3ba8c8f099bc58ab5d34635c0fcc935e0c0a0b1a965a3d32edd2c51fdca6692f0db9940ea0df6ec74cafced8720c71159ae72c6cb398ef7970120396113038f58880db5b36a3eb15c4b3b59d84290fa68ee4da4146bd788a014a0c388147674a89105cf23fa46f6f5a09615ed562e9566407afd315895a509023f3e67befb93b5c82610f65995aa4c3627d65912a41d2d50043c82a330b663cf74653a0be4e31d5c44764b2a79d814266a5b19a861c4ca7c60c6da8133cb2cd34fc46b8f9d7e3890969116f11102443d8ef12c722eaec2c18910b07e8e8d63dfe472d8c9dbe7c0130f81d3b16606ea745b581f9551b8f9f5313e35b1f4e91c510de0fafd5cb9239f07cb6dd05adc13713186430b9d4e19c3ee0800f400", @ANYRES32, @ANYBLOB="00000018005f8008002c00", @ANYRES32=0x0, @ANYBLOB="04006b8008001effc372fa6a00ac1414aa491150a9ed1c9efacc8fd15b96bba3d3a69cd23f3bc5222250f54ea0791d3e30260303bd0a1c8f5d0fc59ecd0f048af2803d8c30b63fffbf8e9c3bb2fb2eeffef9e417a1e1ab23fd0c0049800400808004000480"], 0x1174}], 0x1, 0x0, 0x0, 0x91}, 0x4010) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f0000000280), 0x0) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)}}], 0x1, 0x20080058) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x7f0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000080)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x30) sendto$inet(r4, &(0x7f0000000240)="f7", 0x1, 0x4008005, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) 11.122755724s ago: executing program 3 (id=713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 10.909701446s ago: executing program 3 (id=714): syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = mq_open(0x0, 0x1, 0x100, 0x0) mq_getsetattr(r2, &(0x7f0000019580)={0x1, 0x2, 0x5, 0x8000000000000000}, &(0x7f00000195c0)) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) memfd_create(0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000014) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000194c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000019480)={&(0x7f0000000280)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9a91, 0x4f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81fe0b26ce7c10aa}, 0x140c0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) 10.38028466s ago: executing program 3 (id=716): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 8.025259699s ago: executing program 4 (id=721): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x48c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x460, 0x2, [@TCA_BPF_ACT={0x45c, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x194, 0x5, 0x0, 0x0, {{0x7}, {0x84, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x7d, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd"}}]}, {0xec, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x128, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x1}}]}, {0xbd, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0xa0, 0x13, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x47, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.414471145s ago: executing program 4 (id=724): dup(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x109240, 0x145) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x48) r5 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, 0x0, 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) close(r1) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000380)=@generic={0x23, "57815cdeea606aeb193b04509c20a908416a6894dbcdedc04f4d1740915255ea7a525fcd051c2baeb891b39db12ae77e3dfdd8c494ebcd1924887a8d717e043c45f092fef269b355c4b3e1e009c70eb8ba22fc3ea5c2b1cdc7d01c9a2b2014472ea26339286f4a71b524f572bb370fb8389d0305cd38f475d64c33b51d23"}, 0x80, 0x0}}], 0x1, 0x4000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) clock_settime(0x8d71ca88fffffffd, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003b00010324bd8822ffdbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 6.940462305s ago: executing program 1 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 6.843415952s ago: executing program 1 (id=726): syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = mq_open(0x0, 0x1, 0x100, 0x0) mq_getsetattr(r2, &(0x7f0000019580)={0x1, 0x2, 0x5, 0x8000000000000000}, &(0x7f00000195c0)) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) memfd_create(0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000014) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000194c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000019480)={&(0x7f0000000280)={0x30, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9a91, 0x4f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81fe0b26ce7c10aa}, 0x140c0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 6.35507279s ago: executing program 2 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.333962994s ago: executing program 3 (id=728): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x80065c9}, 0xc) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_INSNLIST(r2, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0x0, 0x0, 0xa145, 0x7}]}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 6.322300889s ago: executing program 1 (id=729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.879373622s ago: executing program 4 (id=730): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001"], 0x0) 5.83181646s ago: executing program 0 (id=731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x5, 0xa, 0x3, 0x100}, 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x7, 0x0, 0x0, 0x3, 0x6, 0x4], 0x1, 0x1}, {0x3, [0x0, 0x7, 0x6, 0x1, 0x4, 0x4], 0x3c, 0x5}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4, 0x7fff, 0xf9f, 'pptp\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3, 0xd}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r6, 0xff, 0x24, &(0x7f0000002d80)="f0c460", 0x3) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 4.964695676s ago: executing program 1 (id=732): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a0000057f00090401000001022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000004c0)={0x40, 0x2, 0x5, "9039b80a3d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0xb, 0x2, "ba07"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r6, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000fffffffffffffffe000000000000000fffff000000000000002e79") sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r8 = gettid() tkill(r8, 0x7) r9 = signalfd(r1, &(0x7f0000000140)={[0x2c0]}, 0x8) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x945dce932fdd6bb8}, 0x20000000) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRES8=r2]) 4.935446051s ago: executing program 3 (id=733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.888596298s ago: executing program 0 (id=734): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x4000000) sendmsg$netlink(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001d80)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="00000018005f8008002c00", @ANYRES32=0x0, @ANYBLOB="04006b8008001effc372fa6a00ac1414aa491150a9ed1c9efacc8fd15b96bba3d3a69cd23f3bc5222250f54ea0791d3e30260303bd0a1c8f5d0fc59ecd0f048af2803d8c30b63fffbf8e9c3bb2fb2eeffef9e417a1e1ab23fd0c0049800400808004000480"], 0x1174}], 0x1, 0x0, 0x0, 0x91}, 0x4010) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x31, &(0x7f0000000280), 0x0) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)}}], 0x1, 0x20080058) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x7f0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x30) sendto$inet(r6, &(0x7f0000000240)="f7", 0x1, 0x4008005, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) 4.882779294s ago: executing program 2 (id=735): getrlimit(0x6, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_io_uring_setup(0x7b1d, &(0x7f0000000100)={0x0, 0xf40, 0x20, 0x3, 0xab}, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000000)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0xc0000103, 0x1fd}}], 0x20}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x6d) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/kvm/mmu_shadow_zapped\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='0', 0x1) 3.84933056s ago: executing program 4 (id=736): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d092880000000109021200010300000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.777172479s ago: executing program 2 (id=737): dup(0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa4e4, 0x14b302) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mq_open(&(0x7f00000013c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x42, 0x48, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x48) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x2b) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000053d2) syz_emit_ethernet(0x0, 0x0, 0x0) close(r1) sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000380)=@generic={0x23, "57815cdeea606aeb193b04509c20a908416a6894dbcdedc04f4d1740915255ea7a525fcd051c2baeb891b39db12ae77e3dfdd8c494ebcd1924887a8d717e043c45f092fef269b355c4b3e1e009c70eb8ba22fc3ea5c2b1cdc7d01c9a2b2014472ea26339286f4a71b524f572bb370fb8389d0305cd38f475d64c33b51d23"}, 0x80, 0x0}}], 0x1, 0x4000000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) clock_settime(0x8d71ca88fffffffd, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003b00010324bd8822ff"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 1.596032272s ago: executing program 0 (id=738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327d", 0x23}], 0x1}, 0x4005) 1.523893317s ago: executing program 1 (id=739): ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x4, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x7fff, 0x1, 0x9}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000100004e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x100000000000000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='name', &(0x7f00000000c0)='ceph\x00', 0x0) 1.512716891s ago: executing program 3 (id=740): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f0000000a40)=ANY=[], 0x0, 0x0}) 924.612673ms ago: executing program 2 (id=741): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 432.476435ms ago: executing program 4 (id=742): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x394, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x368, 0x2, [@TCA_BPF_ACT={0x364, 0x1, [@m_xt={0x198, 0x5, 0x0, 0x0, {{0x7}, {0x84, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x7d, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x128, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x1}}]}, {0xbd, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0xa0, 0x13, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x47, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x394}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 275.597233ms ago: executing program 0 (id=743): r0 = syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100a0320904000005ff00000007058102000200070582020002000705830200020007058402000200070586"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x40, 0x10, 0x30, {0x30, 0x2, "2d379fa588f65181441300be8bb1c0bc5a5c4cc307201bd9d8e468f6d01bfdd7f251026902153367a1a9cbd948da"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 267.565276ms ago: executing program 1 (id=744): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c0800"]) 254.55278ms ago: executing program 2 (id=745): add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603551c030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e", 0x63, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 187.509388ms ago: executing program 4 (id=746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x13f}}, 0x20) 0s ago: executing program 2 (id=747): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_usb_connect$sierra_net(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): onnect, device number 41 [ 156.613740][ T29] audit: type=1400 audit(1786397444.939:269): avc: denied { create } for pid=6680 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.634920][ T6681] syzkaller0: entered promiscuous mode [ 156.636153][ T29] audit: type=1400 audit(1786397444.959:270): avc: denied { ioctl } for pid=6680 comm="syz.0.285" path="socket:[11087]" dev="sockfs" ino=11087 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.640494][ T6681] syzkaller0: entered allmulticast mode [ 156.673319][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 156.694199][ T5711] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 156.718453][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.731157][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.732298][ T980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 156.741442][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.758541][ T5711] usb 4-1: config 0 descriptor?? [ 156.845291][ T5712] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 156.902439][ T980] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 156.915014][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.925176][ T980] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 156.939403][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 156.947962][ T980] usb 5-1: Product: syz [ 156.952209][ T980] usb 5-1: Manufacturer: syz [ 156.956836][ T5790] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 156.991973][ T5712] usb 2-1: device descriptor read/64, error -71 [ 157.071954][ T6371] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 157.111969][ T5790] usb 3-1: Using ep0 maxpacket: 8 [ 157.118291][ T5790] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 157.128242][ T5790] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 157.136424][ T5790] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 157.148055][ T5790] usb 3-1: config 0 has no interface number 0 [ 157.154220][ T5790] usb 3-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 157.165292][ T5790] usb 3-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 157.178473][ T5790] usb 3-1: config 0 interface 48 has no altsetting 0 [ 157.185190][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.195239][ T5790] usb 3-1: config 0 descriptor?? [ 157.223247][ T6371] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 157.233215][ T6371] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 157.241227][ T6371] usb 1-1: config 0 has no interface number 0 [ 157.242303][ T5712] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 157.247587][ T6371] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 157.268248][ T6371] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 157.279288][ T6371] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 157.291148][ T6371] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 157.299270][ T6371] usb 1-1: Product: syz [ 157.303464][ T6371] usb 1-1: SerialNumber: syz [ 157.310319][ T6371] usb 1-1: config 0 descriptor?? [ 157.319227][ T6371] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 157.328831][ T6371] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8 [ 157.375993][ T5711] usbhid 4-1:0.0: can't add hid device: -71 [ 157.383285][ T5711] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.398975][ T5711] usb 4-1: USB disconnect, device number 19 [ 157.406091][ T5712] usb 2-1: device descriptor read/64, error -71 [ 157.522375][ T5712] usb usb2-port1: attempt power cycle [ 157.580590][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.589025][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.596239][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.603344][ T6371] usb 1-1: USB disconnect, device number 42 [ 157.609262][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 157.609277][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 157.631677][ T5790] usb 3-1: USB disconnect, device number 24 [ 157.643467][ T6371] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 157.872008][ T5712] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 157.893612][ T5712] usb 2-1: device descriptor read/8, error -71 [ 158.142638][ T5712] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 158.163236][ T5712] usb 2-1: device descriptor read/8, error -71 [ 158.174686][ T6371] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 158.212259][ T5711] usb 5-1: USB disconnect, device number 14 [ 158.303588][ T5712] usb usb2-port1: unable to enumerate USB device [ 158.335864][ T6371] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 158.351387][ T29] audit: type=1400 audit(1786397446.669:271): avc: denied { write } for pid=6695 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.414225][ T6371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.470463][ T6371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.539428][ T6371] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.619306][ T6371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.838744][ T6371] usb 4-1: config 0 descriptor?? [ 159.598268][ T6371] usbhid 4-1:0.0: can't add hid device: -71 [ 159.627280][ T6371] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 159.656687][ T6702] syzkaller0: entered promiscuous mode [ 159.664770][ T6702] syzkaller0: entered allmulticast mode [ 159.920571][ T6371] usb 4-1: USB disconnect, device number 20 [ 160.170375][ T6713] x_tables: duplicate underflow at hook 3 [ 160.312192][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 160.342063][ T6371] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 160.607589][ T6371] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 160.670589][ T6371] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 160.745622][ T6371] usb 1-1: config 0 has no interface number 0 [ 160.834148][ T6371] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 160.960369][ T6371] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 161.087679][ T6371] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 161.235957][ T6371] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 161.307870][ T6371] usb 1-1: Product: syz [ 161.342406][ T6371] usb 1-1: SerialNumber: syz [ 161.360609][ T6371] usb 1-1: config 0 descriptor?? [ 161.377256][ T6371] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 161.424500][ T6371] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input9 [ 161.502510][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 161.528724][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 161.539473][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.550548][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.561004][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.571458][ T9] usb 2-1: config 0 descriptor?? [ 161.599896][ T29] audit: type=1400 audit(1786397449.919:272): avc: denied { read } for pid=6717 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.755383][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.762554][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.769728][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.776872][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.784021][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.791147][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.798984][ T6371] usb 1-1: USB disconnect, device number 43 [ 161.804942][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 161.820542][ T6371] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 161.994633][ T9] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 162.003340][ T9] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 162.122587][ T980] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 162.191103][ T9] ft260 0003:0403:6030.0007: failed to retrieve chip version [ 162.199122][ T9] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -32 [ 162.243664][ T29] audit: type=1400 audit(1786397450.569:273): avc: denied { mount } for pid=6729 comm="syz.2.305" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 162.267313][ T29] audit: type=1400 audit(1786397450.589:274): avc: denied { search } for pid=6729 comm="syz.2.305" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 162.290832][ T29] audit: type=1400 audit(1786397450.589:275): avc: denied { read write } for pid=6729 comm="syz.2.305" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 162.316287][ T29] audit: type=1400 audit(1786397450.589:276): avc: denied { open } for pid=6729 comm="syz.2.305" path="/55/nfsd/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 162.350385][ T980] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 162.367361][ T980] usb 4-1: config index 0 descriptor too short (expected 69, got 51) [ 162.389535][ T980] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.485333][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.507942][ T980] usb 4-1: Product: syz [ 162.515823][ T980] usb 4-1: Manufacturer: syz [ 162.537523][ T980] usb 4-1: SerialNumber: syz [ 162.559851][ T6730] NFSD: Failed to start, no listeners configured. [ 162.581593][ T980] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 162.692026][ T6371] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 162.853431][ T6371] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 162.881284][ T6371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.899112][ T6371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.909256][ T6738] syzkaller0: entered promiscuous mode [ 162.911458][ T6371] usb 5-1: config 0 descriptor?? [ 162.915721][ T6738] syzkaller0: entered allmulticast mode [ 162.944543][ T6371] pwc: Askey VC010 type 2 USB webcam detected. [ 163.050495][ T29] audit: type=1400 audit(1786397451.369:277): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 163.207204][ T980] usb 4-1: Scarlett Gen 2 USB request result cmd 0 was -71 [ 163.234664][ T980] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 163.262995][ T9] usb 2-1: USB disconnect, device number 25 [ 163.330632][ T980] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 163.351095][ T6371] pwc: recv_control_msg error -32 req 02 val 2b00 [ 163.371832][ T6371] pwc: recv_control_msg error -32 req 02 val 2700 [ 163.372154][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 163.372613][ T6371] pwc: recv_control_msg error -32 req 02 val 2c00 [ 163.373248][ T6371] pwc: recv_control_msg error -32 req 04 val 1000 [ 163.373773][ T6371] pwc: recv_control_msg error -32 req 04 val 1300 [ 163.376586][ T6371] pwc: recv_control_msg error -32 req 04 val 1400 [ 163.377047][ T6371] pwc: recv_control_msg error -32 req 02 val 2000 [ 163.377477][ T6371] pwc: recv_control_msg error -32 req 02 val 2100 [ 163.377715][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 163.377803][ T6371] pwc: recv_control_msg error -32 req 04 val 1500 [ 163.378025][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 163.378114][ T6371] pwc: recv_control_msg error -32 req 02 val 2500 [ 163.378351][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 163.378443][ T6371] pwc: recv_control_msg error -32 req 02 val 2400 [ 163.378716][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 163.654494][ T6371] pwc: recv_control_msg error -32 req 02 val 2600 [ 163.797278][ T980] usb 4-1: USB disconnect, device number 21 [ 163.820546][ T6371] pwc: recv_control_msg error -71 req 02 val 2900 [ 163.905975][ T6371] pwc: recv_control_msg error -71 req 02 val 2800 [ 163.960745][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 164.026162][ T6371] pwc: recv_control_msg error -71 req 04 val 1100 [ 164.146352][ T6371] pwc: recv_control_msg error -71 req 04 val 1200 [ 164.413082][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.424131][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.434142][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.452055][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.483445][ T6513] udevd[6513]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.484458][ T10] usb 3-1: config 0 descriptor?? [ 164.507407][ T6371] pwc: Registered as video103. [ 164.523422][ T6371] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 164.559882][ T6371] usb 5-1: USB disconnect, device number 15 [ 164.678664][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 164.811985][ T980] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 164.921522][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 164.929018][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 164.941827][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 164.952006][ T6371] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 164.960015][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 164.973765][ T980] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 164.974871][ T10] usb 3-1: USB disconnect, device number 25 [ 165.000304][ T980] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 165.018282][ T980] usb 4-1: config 0 has no interface number 0 [ 165.029448][ T980] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.053541][ T980] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 165.067013][ T980] usb 4-1: Product: syz [ 165.072205][ T980] usb 4-1: SerialNumber: syz [ 165.086071][ T980] usb 4-1: config 0 descriptor?? [ 165.108549][ T980] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 165.141090][ T6763] syzkaller0: entered promiscuous mode [ 165.152814][ T6371] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.163301][ T6763] syzkaller0: entered allmulticast mode [ 165.165805][ T6371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.181370][ T6371] usb 5-1: Product: syz [ 165.188241][ T6371] usb 5-1: Manufacturer: syz [ 165.192936][ T6371] usb 5-1: SerialNumber: syz [ 165.632460][ T980] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 165.778362][ T29] audit: type=1400 audit(1786397454.099:278): avc: denied { mount } for pid=6769 comm="syz.2.322" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 165.825838][ T29] audit: type=1400 audit(1786397454.139:279): avc: denied { search } for pid=6769 comm="syz.2.322" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.875815][ T29] audit: type=1400 audit(1786397454.139:280): avc: denied { search } for pid=6769 comm="syz.2.322" name="usb_gadget" dev="configfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.913006][ T29] audit: type=1400 audit(1786397454.149:281): avc: denied { search } for pid=6769 comm="syz.2.322" name="/" dev="configfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 166.091953][ T5704] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 166.241943][ T5704] usb 1-1: Using ep0 maxpacket: 32 [ 166.247560][ T5704] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 166.257883][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.269013][ T5704] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.278788][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.289993][ T6371] usb 5-1: USB disconnect, device number 16 [ 166.292595][ T5704] usb 1-1: config 0 descriptor?? [ 166.451947][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 166.602682][ T10] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 166.605397][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 166.605413][ T29] audit: type=1400 audit(1786397454.929:285): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 166.613371][ T10] usb 2-1: config index 0 descriptor too short (expected 69, got 51) [ 166.654136][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.665929][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.708335][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.761092][ T10] usb 2-1: Product: syz [ 166.788947][ T10] usb 2-1: Manufacturer: syz [ 166.795601][ T5704] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 166.803678][ T10] usb 2-1: SerialNumber: syz [ 166.808543][ T5704] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 166.808934][ T980] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 166.941373][ T10] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 167.027597][ T5704] ft260 0003:0403:6030.0008: failed to retrieve chip version [ 167.129423][ T5704] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -32 [ 167.161075][ T10] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 167.516783][ T980] ath9k_htc: Failed to initialize the device [ 167.525641][ T6371] usb 5-1: ath9k_htc: USB layer deinitialized [ 167.580820][ T5704] usb 4-1: USB disconnect, device number 22 [ 167.658607][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 167.710291][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 167.734429][ T10] usb 2-1: USB disconnect, device number 26 [ 167.776011][ T6513] udevd[6513]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.925371][ T6371] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 168.023917][ T6794] syzkaller0: entered promiscuous mode [ 168.030780][ T6794] syzkaller0: entered allmulticast mode [ 168.051436][ T29] audit: type=1400 audit(1786397456.369:286): avc: denied { name_bind } for pid=6795 comm="syz.1.332" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 168.051972][ T5704] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 168.131207][ T6371] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.141755][ T6371] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.167755][ T6371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.189653][ T6371] usb 5-1: config 0 descriptor?? [ 168.212229][ T6371] pwc: Askey VC010 type 2 USB webcam detected. [ 168.253491][ T5704] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 168.268498][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.282693][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.297917][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 168.306700][ T5704] usb 3-1: Product: syz [ 168.310885][ T5704] usb 3-1: Manufacturer: syz [ 168.431946][ T5712] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 168.535883][ T24] usb 3-1: USB disconnect, device number 26 [ 168.593880][ T5790] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 168.594386][ T5712] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 168.604272][ T6371] pwc: recv_control_msg error -32 req 02 val 2b00 [ 168.611792][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.618079][ T6371] pwc: recv_control_msg error -32 req 02 val 2700 [ 168.628667][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.635596][ T6371] pwc: recv_control_msg error -32 req 02 val 2c00 [ 168.651321][ T5712] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.664183][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.664679][ T6371] pwc: recv_control_msg error -32 req 04 val 1000 [ 168.674938][ T5712] usb 2-1: config 0 descriptor?? [ 168.684356][ T6371] pwc: recv_control_msg error -32 req 04 val 1300 [ 168.692477][ T6371] pwc: recv_control_msg error -32 req 04 val 1400 [ 168.699795][ T6371] pwc: recv_control_msg error -32 req 02 val 2000 [ 168.753028][ T5790] usb 4-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 168.763944][ T5790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.774461][ T5790] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.789579][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.802452][ T5790] ums-alauda 4-1:1.0: USB Mass Storage device detected [ 168.826770][ T5790] ums-alauda 4-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 168.826770][ T5790] Please send a copy of this message to and [ 168.857532][ T42] usb 1-1: USB disconnect, device number 44 [ 168.914497][ T6371] pwc: recv_control_msg error -71 req 04 val 1500 [ 168.930621][ T6371] pwc: recv_control_msg error -71 req 02 val 2500 [ 168.940566][ T6371] pwc: recv_control_msg error -71 req 02 val 2400 [ 168.947710][ T6371] pwc: recv_control_msg error -71 req 02 val 2600 [ 168.954786][ T6371] pwc: recv_control_msg error -71 req 02 val 2900 [ 168.961491][ T6371] pwc: recv_control_msg error -71 req 02 val 2800 [ 168.969458][ T6371] pwc: recv_control_msg error -71 req 04 val 1100 [ 168.976268][ T6371] pwc: recv_control_msg error -71 req 04 val 1200 [ 168.985510][ T6371] pwc: Registered as video103. [ 168.993117][ T6371] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 168.994610][ T5704] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 169.018444][ T6803] fuse: Bad value for 'fd' [ 169.038617][ T6371] usb 5-1: USB disconnect, device number 17 [ 169.038684][ T9] usb 4-1: USB disconnect, device number 23 [ 169.124935][ T5712] usbhid 2-1:0.0: can't add hid device: -71 [ 169.136479][ T5712] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 169.153280][ T5712] usb 2-1: USB disconnect, device number 27 [ 169.172609][ T5704] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 169.183171][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.194135][ T5704] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 169.210840][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 169.219128][ T5704] usb 3-1: Product: syz [ 169.223334][ T5704] usb 3-1: Manufacturer: syz [ 169.241981][ T42] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 169.392387][ T42] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.406733][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.415066][ T42] usb 1-1: Product: syz [ 169.419245][ T42] usb 1-1: Manufacturer: syz [ 169.423916][ T42] usb 1-1: SerialNumber: syz [ 169.446193][ T6371] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.745133][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 169.912803][ T5711] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 170.088289][ T5712] usb 1-1: USB disconnect, device number 45 [ 170.100268][ T5711] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 170.206524][ T5711] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 170.250893][ T5711] usb 4-1: config 0 has no interface number 0 [ 170.269742][ T5711] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.299324][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 170.308142][ T5711] usb 4-1: Product: syz [ 170.315201][ T5711] usb 4-1: SerialNumber: syz [ 170.373571][ T5711] usb 4-1: config 0 descriptor?? [ 170.497953][ T5711] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 170.522017][ T6371] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 170.676212][ T6371] ath9k_htc: Failed to initialize the device [ 170.693618][ T5712] usb 1-1: ath9k_htc: USB layer deinitialized [ 170.709050][ T9] usb 4-1: USB disconnect, device number 24 [ 170.749474][ T6824] netlink: 48 bytes leftover after parsing attributes in process `syz.4.341'. [ 170.874886][ T5711] usb 3-1: USB disconnect, device number 27 [ 171.152115][ T5712] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 171.352041][ T5712] usb 1-1: Using ep0 maxpacket: 32 [ 171.373273][ T5712] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 171.447181][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.515135][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.551741][ T5790] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 171.598753][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.882661][ T5712] usb 1-1: config 0 descriptor?? [ 172.221975][ T5790] usb 5-1: Using ep0 maxpacket: 32 [ 172.237291][ T29] audit: type=1400 audit(1786397460.559:287): avc: denied { bind } for pid=6833 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.268575][ T29] audit: type=1400 audit(1786397460.559:288): avc: denied { listen } for pid=6833 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 172.321970][ T980] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 172.331947][ T42] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 172.472056][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 172.480277][ T980] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 172.489602][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 172.495622][ T42] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 172.506032][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.516571][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.527614][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.535690][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.546722][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.555840][ T980] usb 4-1: config 0 descriptor?? [ 172.564001][ T980] pwc: Askey VC010 type 2 USB webcam detected. [ 172.584313][ T42] usb 2-1: config 0 descriptor?? [ 172.606466][ T5712] usbhid 1-1:0.0: can't add hid device: -71 [ 172.613545][ T5712] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 172.625511][ T5712] usb 1-1: USB disconnect, device number 46 [ 172.654409][ T24] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 172.664633][ T24] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.675600][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.691780][ T24] ums-alauda 3-1:1.0: USB Mass Storage device detected [ 172.703536][ T24] ums-alauda 3-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 172.703536][ T24] Please send a copy of this message to and [ 172.898201][ T6842] fuse: Bad value for 'fd' [ 172.905728][ T6371] usb 3-1: USB disconnect, device number 28 [ 172.966781][ T980] pwc: recv_control_msg error -32 req 02 val 2b00 [ 172.973982][ T980] pwc: recv_control_msg error -32 req 02 val 2700 [ 172.980939][ T980] pwc: recv_control_msg error -32 req 02 val 2c00 [ 172.988777][ T980] pwc: recv_control_msg error -32 req 04 val 1000 [ 172.996048][ T980] pwc: recv_control_msg error -32 req 04 val 1300 [ 173.004372][ T980] pwc: recv_control_msg error -32 req 04 val 1400 [ 173.013328][ T42] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 173.020457][ T42] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 173.027688][ T980] pwc: recv_control_msg error -32 req 02 val 2000 [ 173.203646][ T42] ft260 0003:0403:6030.0009: failed to retrieve chip version [ 173.211420][ T42] ft260 0003:0403:6030.0009: probe with driver ft260 failed with error -32 [ 173.235890][ T980] pwc: recv_control_msg error -71 req 04 val 1500 [ 173.244012][ T980] pwc: recv_control_msg error -71 req 02 val 2500 [ 173.250767][ T980] pwc: recv_control_msg error -71 req 02 val 2400 [ 173.258268][ T980] pwc: recv_control_msg error -71 req 02 val 2600 [ 173.265102][ T980] pwc: recv_control_msg error -71 req 02 val 2900 [ 173.272160][ T980] pwc: recv_control_msg error -71 req 02 val 2800 [ 173.278952][ T980] pwc: recv_control_msg error -71 req 04 val 1100 [ 173.286826][ T980] pwc: recv_control_msg error -71 req 04 val 1200 [ 173.296690][ T980] pwc: Registered as video103. [ 173.303753][ T980] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 173.319757][ T980] usb 4-1: USB disconnect, device number 25 [ 173.381953][ T6371] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 173.532639][ T6371] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 173.543352][ T6371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.554893][ T6371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.565199][ T6371] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.578417][ T6371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.590952][ T6371] usb 1-1: config 0 descriptor?? [ 173.604011][ T29] audit: type=1400 audit(1786397461.929:289): avc: denied { write } for pid=6850 comm="syz.2.351" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 174.009041][ T5790] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.019424][ T980] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 174.027841][ T5790] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 174.038787][ T6371] usbhid 1-1:0.0: can't add hid device: -71 [ 174.047821][ T6371] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 174.056746][ T5790] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 174.066027][ T5790] usb 5-1: can't read configurations, error -71 [ 174.072024][ T5712] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 174.084779][ T6371] usb 1-1: USB disconnect, device number 47 [ 174.099389][ T6859] netlink: 48 bytes leftover after parsing attributes in process `syz.4.354'. [ 174.183637][ T980] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.194869][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.206146][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.217646][ T980] usb 3-1: config 0 descriptor?? [ 174.234002][ T980] pwc: Askey VC010 type 2 USB webcam detected. [ 174.253491][ T5712] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.275081][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.294863][ T5712] usb 4-1: Product: syz [ 174.303569][ T5712] usb 4-1: Manufacturer: syz [ 174.312206][ T5712] usb 4-1: SerialNumber: syz [ 174.336372][ T5711] usb 2-1: USB disconnect, device number 28 [ 174.383752][ T5712] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.749648][ T980] pwc: recv_control_msg error -32 req 02 val 2b00 [ 174.759222][ T980] pwc: recv_control_msg error -32 req 02 val 2700 [ 174.770759][ T980] pwc: recv_control_msg error -32 req 02 val 2c00 [ 174.778176][ T980] pwc: recv_control_msg error -32 req 04 val 1000 [ 174.785203][ T980] pwc: recv_control_msg error -32 req 04 val 1300 [ 174.792991][ T980] pwc: recv_control_msg error -32 req 04 val 1400 [ 174.800189][ T980] pwc: recv_control_msg error -32 req 02 val 2000 [ 174.807601][ T980] pwc: recv_control_msg error -32 req 02 val 2100 [ 174.814648][ T980] pwc: recv_control_msg error -32 req 04 val 1500 [ 174.822075][ T5711] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 174.822280][ T980] pwc: recv_control_msg error -32 req 02 val 2500 [ 174.838173][ T980] pwc: recv_control_msg error -32 req 02 val 2400 [ 174.986919][ T5711] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 175.043034][ T5704] usb 4-1: USB disconnect, device number 26 [ 175.048785][ T980] pwc: recv_control_msg error -71 req 02 val 2900 [ 175.057648][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.071602][ T980] pwc: recv_control_msg error -71 req 02 val 2800 [ 175.074907][ T5711] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 175.100827][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 175.105624][ T980] pwc: recv_control_msg error -71 req 04 val 1100 [ 175.110776][ T5711] usb 2-1: Product: syz [ 175.120768][ T5711] usb 2-1: Manufacturer: syz [ 175.143874][ T980] pwc: recv_control_msg error -71 req 04 val 1200 [ 175.173237][ T980] pwc: Registered as video103. [ 175.199154][ T980] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 175.251639][ T980] usb 3-1: USB disconnect, device number 29 [ 175.379665][ T5711] usb 2-1: USB disconnect, device number 29 [ 175.491684][ T5712] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 175.503401][ T5712] ath9k_htc: Failed to initialize the device [ 175.520701][ T5704] usb 4-1: ath9k_htc: USB layer deinitialized [ 175.842000][ T5711] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 175.904899][ T6888] syzkaller0: entered promiscuous mode [ 175.922655][ T6888] syzkaller0: entered allmulticast mode [ 176.016780][ T5711] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 176.036018][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.053515][ T5711] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 176.089884][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 176.106874][ T5711] usb 2-1: Product: syz [ 176.119625][ T5711] usb 2-1: Manufacturer: syz [ 176.882123][ T5712] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 176.912024][ T5711] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 177.052972][ T5712] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 177.063003][ T5712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.073453][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.082556][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 177.091480][ T5712] usb 1-1: config 0 descriptor?? [ 177.105598][ T5712] pwc: Askey VC010 type 2 USB webcam detected. [ 177.168731][ T6900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.365'. [ 177.568077][ T5712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 177.583956][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 177.618186][ T5712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 177.628909][ T10] usb 2-1: USB disconnect, device number 30 [ 177.649323][ T5712] pwc: recv_control_msg error -32 req 04 val 1000 [ 177.676540][ T5712] pwc: recv_control_msg error -32 req 04 val 1300 [ 177.697962][ T5712] pwc: recv_control_msg error -32 req 04 val 1400 [ 177.713398][ T5712] pwc: recv_control_msg error -32 req 02 val 2000 [ 177.733478][ T5712] pwc: recv_control_msg error -32 req 02 val 2100 [ 177.749466][ T5712] pwc: recv_control_msg error -32 req 04 val 1500 [ 177.757915][ T5712] pwc: recv_control_msg error -32 req 02 val 2500 [ 177.771154][ T5712] pwc: recv_control_msg error -32 req 02 val 2400 [ 177.985862][ T5712] pwc: recv_control_msg error -71 req 02 val 2900 [ 178.018426][ T5712] pwc: recv_control_msg error -71 req 02 val 2800 [ 178.027838][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 178.038798][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 178.061720][ T5712] pwc: Registered as video103. [ 178.085635][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 178.126295][ T5712] usb 1-1: USB disconnect, device number 48 [ 178.217495][ T6923] syzkaller0: entered promiscuous mode [ 178.229537][ T6923] syzkaller0: entered allmulticast mode [ 178.272751][ T5757] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 178.364499][ T6925] x_tables: duplicate underflow at hook 3 [ 178.422381][ T5757] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 178.434362][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.442786][ T5757] usb 4-1: Product: syz [ 178.451992][ T5757] usb 4-1: Manufacturer: syz [ 178.462008][ T5757] usb 4-1: SerialNumber: syz [ 178.491621][ T6371] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 178.910686][ T5712] usb 4-1: USB disconnect, device number 27 [ 179.722438][ T6371] usb 4-1: Service connection timeout for: 256 [ 179.737346][ T5711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 179.751922][ T6371] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 179.776289][ T5711] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 179.796041][ T6371] ath9k_htc: Failed to initialize the device [ 179.819811][ T5711] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 179.835402][ T5712] usb 4-1: ath9k_htc: USB layer deinitialized [ 179.858664][ T5711] usb 5-1: can't read configurations, error -71 [ 180.101935][ T980] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 180.252598][ T5790] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 180.353317][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 180.365894][ T980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.377108][ T980] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 180.388163][ T980] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 180.417215][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 180.425638][ T980] usb 2-1: Product: syz [ 180.429965][ T980] usb 2-1: Manufacturer: syz [ 180.442700][ T5790] usb 1-1: Using ep0 maxpacket: 32 [ 180.452650][ T5790] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 180.475471][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.508242][ T5790] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.542434][ T5790] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.574861][ T5790] usb 1-1: config 0 interface 0 has no altsetting 0 [ 180.581624][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.601072][ T5790] usb 1-1: config 0 descriptor?? [ 180.738551][ T5790] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 180.899824][ T5757] usb 2-1: USB disconnect, device number 31 [ 180.958759][ T6961] syzkaller0: entered promiscuous mode [ 181.029259][ T6961] syzkaller0: entered allmulticast mode [ 181.370868][ T6965] x_tables: duplicate underflow at hook 3 [ 181.582233][ T5757] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 181.729936][ T29] audit: type=1400 audit(1786397470.049:290): avc: denied { create } for pid=6977 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.772776][ T5757] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 181.793465][ T5757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.821942][ T5757] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.841901][ T5757] usb 2-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 181.873049][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 181.881227][ T5757] usb 2-1: Product: syz [ 181.892056][ T5757] usb 2-1: Manufacturer: syz [ 182.083376][ T29] audit: type=1400 audit(1786397470.409:291): avc: denied { bind } for pid=6977 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.168641][ T29] audit: type=1400 audit(1786397470.489:292): avc: denied { accept } for pid=6977 comm="syz.2.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.215527][ T29] audit: type=1400 audit(1786397470.489:293): avc: denied { ioctl } for pid=6977 comm="syz.2.389" path="socket:[12883]" dev="sockfs" ino=12883 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 182.692148][ T5757] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 182.882024][ T5757] usb 5-1: Using ep0 maxpacket: 32 [ 182.927928][ T10] usb 1-1: USB disconnect, device number 49 [ 183.285410][ T5790] usb 2-1: USB disconnect, device number 32 [ 183.987555][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 184.010934][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 184.030593][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 184.043430][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 184.825770][ T7011] syzkaller0: entered promiscuous mode [ 184.831405][ T7011] syzkaller0: entered allmulticast mode [ 185.598850][ T5757] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.655537][ T5757] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 185.816810][ T5757] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 185.904988][ T5757] usb 5-1: can't read configurations, error -71 [ 186.562677][ T980] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 186.711924][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 186.722528][ T980] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 186.743596][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.761941][ T980] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.773042][ T5757] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 186.787149][ T980] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.797962][ T980] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.813109][ T980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 186.819715][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.829476][ T980] usb 4-1: config 0 descriptor?? [ 186.942684][ T5757] usb 5-1: Using ep0 maxpacket: 32 [ 186.950384][ T5757] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 186.976365][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.002103][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.029992][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.068483][ T5757] usb 5-1: config 0 descriptor?? [ 187.113836][ T7045] netlink: zone id is out of range [ 187.122236][ T7045] netlink: zone id is out of range [ 187.128409][ T7045] netlink: zone id is out of range [ 187.135742][ T7045] netlink: zone id is out of range [ 187.140999][ T7045] netlink: zone id is out of range [ 187.148501][ T7045] netlink: zone id is out of range [ 187.153867][ T7045] netlink: zone id is out of range [ 187.159114][ T7045] netlink: zone id is out of range [ 187.167068][ T7045] netlink: zone id is out of range [ 187.172960][ T7045] netlink: zone id is out of range [ 187.260934][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 187.274938][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 187.296847][ T980] usb 4-1: USB disconnect, device number 28 [ 188.090249][ T5757] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 188.156148][ T5757] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 188.223747][ T5757] ft260 0003:0403:6030.000A: failed to retrieve chip version [ 188.244419][ T5757] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -32 [ 188.253558][ T7050] syzkaller0: entered promiscuous mode [ 188.263880][ T7050] syzkaller0: entered allmulticast mode [ 188.885440][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.891759][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.657544][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 189.694223][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 189.706698][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 189.718278][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 190.211688][ T5711] usb 5-1: USB disconnect, device number 23 [ 190.417045][ T29] audit: type=1400 audit(1786397478.729:294): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 190.544339][ T29] audit: type=1400 audit(1786397478.859:295): avc: denied { map_create } for pid=7077 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.587896][ T29] audit: type=1400 audit(1786397478.859:296): avc: denied { map_read map_write } for pid=7077 comm="syz.2.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 190.762003][ T5790] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 190.965612][ T5790] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 191.052941][ T7088] syzkaller0: entered promiscuous mode [ 191.082188][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.125597][ T7088] syzkaller0: entered allmulticast mode [ 191.185604][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.338389][ T5790] usb 1-1: config 0 descriptor?? [ 191.455403][ T5790] pwc: Askey VC010 type 2 USB webcam detected. [ 191.997011][ T5790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 192.010640][ T5790] pwc: recv_control_msg error -32 req 02 val 2700 [ 192.048979][ T5790] pwc: recv_control_msg error -32 req 02 val 2c00 [ 192.077792][ T5790] pwc: recv_control_msg error -32 req 04 val 1000 [ 192.091384][ T5790] pwc: recv_control_msg error -32 req 04 val 1300 [ 192.161037][ T5790] pwc: recv_control_msg error -32 req 04 val 1400 [ 192.424840][ T5790] pwc: recv_control_msg error -32 req 02 val 2000 [ 192.443774][ T5790] pwc: recv_control_msg error -32 req 02 val 2100 [ 192.460205][ T5790] pwc: recv_control_msg error -32 req 04 val 1500 [ 192.473505][ T5790] pwc: recv_control_msg error -32 req 02 val 2500 [ 192.922161][ T5790] pwc: recv_control_msg error -71 req 02 val 2600 [ 192.930460][ T5790] pwc: recv_control_msg error -71 req 02 val 2900 [ 192.939200][ T5790] pwc: recv_control_msg error -71 req 02 val 2800 [ 192.946772][ T5790] pwc: recv_control_msg error -71 req 04 val 1100 [ 192.954230][ T5790] pwc: recv_control_msg error -71 req 04 val 1200 [ 192.964993][ T5790] pwc: Registered as video103. [ 192.978889][ T5790] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 193.011958][ T5790] usb 1-1: USB disconnect, device number 50 [ 194.192992][ T29] audit: type=1400 audit(1786397482.349:297): avc: denied { prog_load } for pid=7107 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.542174][ T5790] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 194.713909][ T5790] usb 1-1: Using ep0 maxpacket: 8 [ 194.722674][ T5790] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 194.747522][ T5790] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.774665][ T5790] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.809117][ T5790] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 194.895287][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.969152][ T5790] usb 1-1: Product: syz [ 195.000430][ T5790] usb 1-1: Manufacturer: syz [ 195.037183][ T5790] usb 1-1: SerialNumber: syz [ 195.929181][ T5790] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 195.940597][ T5790] usb 1-1: clock source 0 is not valid, cannot use [ 195.942274][ T7131] syzkaller0: entered promiscuous mode [ 195.948322][ T5790] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 195.976715][ T7131] syzkaller0: entered allmulticast mode [ 196.092722][ T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 196.397481][ T7139] fuse: Bad value for 'user_id' [ 196.402400][ T7139] fuse: Bad value for 'user_id' [ 196.423399][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 196.708133][ T29] audit: type=1400 audit(1786397484.839:298): avc: denied { mount } for pid=7136 comm="syz.2.437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 196.873273][ T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 197.011087][ T10] usb 4-1: config 0 has no interface number 0 [ 197.037787][ T10] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 197.052241][ T29] audit: type=1400 audit(1786397484.839:299): avc: denied { search } for pid=7136 comm="syz.2.437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 197.085578][ T29] audit: type=1400 audit(1786397484.849:300): avc: denied { read write } for pid=7136 comm="syz.2.437" name="set_event" dev="tracefs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 197.108682][ T29] audit: type=1400 audit(1786397484.849:301): avc: denied { open } for pid=7136 comm="syz.2.437" path="/88/trace/set_event" dev="tracefs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 197.163154][ T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.169353][ T29] audit: type=1400 audit(1786397485.489:302): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 197.174408][ T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 197.201254][ T10] usb 4-1: Product: syz [ 197.256136][ T10] usb 4-1: SerialNumber: syz [ 197.467964][ T9] usb 1-1: USB disconnect, device number 51 [ 197.920981][ T10] usb 4-1: config 0 descriptor?? [ 197.946879][ T10] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 197.985887][ T29] audit: type=1400 audit(1786397486.309:303): avc: denied { ioctl } for pid=7149 comm="syz.0.440" path="socket:[14167]" dev="sockfs" ino=14167 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.046833][ T29] audit: type=1400 audit(1786397486.309:304): avc: denied { bind } for pid=7149 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.075058][ T7152] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 198.091935][ T29] audit: type=1400 audit(1786397486.309:305): avc: denied { connect } for pid=7149 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.253154][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 198.391939][ T6371] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 199.533763][ T6371] usb 5-1: Using ep0 maxpacket: 32 [ 199.636872][ T6371] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 199.808978][ T6371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.952216][ T6371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.094010][ T6371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.107998][ T5790] usb 4-1: USB disconnect, device number 29 [ 200.152614][ T6371] usb 5-1: config 0 descriptor?? [ 200.160021][ T7170] syzkaller0: entered promiscuous mode [ 200.166064][ T7170] syzkaller0: entered allmulticast mode [ 200.225507][ T6371] usb 5-1: can't set config #0, error -71 [ 200.255223][ T6371] usb 5-1: USB disconnect, device number 24 [ 200.355138][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 200.649823][ T29] audit: type=1400 audit(1786397488.969:306): avc: denied { ioctl } for pid=7173 comm="syz.4.449" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 200.675511][ T7179] binder: 7173:7179 ioctl 402c5828 2000000003c0 returned -22 [ 201.072697][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 201.164110][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 201.170760][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 201.245109][ T5601] Bluetooth: hci1: command 0x0406 tx timeout [ 201.256741][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 201.331971][ T29] audit: type=1400 audit(1786397489.029:307): avc: denied { map } for pid=7173 comm="syz.4.449" path="socket:[14358]" dev="sockfs" ino=14358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 202.779650][ T5790] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 202.953954][ T29] audit: type=1400 audit(1786397490.409:308): avc: denied { prog_run } for pid=7182 comm="syz.3.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 202.982443][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.991509][ T9] usb 1-1: Product: syz [ 202.996837][ T9] usb 1-1: Manufacturer: syz [ 203.001601][ T9] usb 1-1: SerialNumber: syz [ 203.065049][ T5711] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 203.112646][ T5790] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 203.135030][ T6371] usb 1-1: USB disconnect, device number 52 [ 203.146818][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.168367][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.194105][ T5790] usb 2-1: config 0 descriptor?? [ 203.215832][ T5790] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 203.301948][ T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 203.762025][ T10] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 204.025886][ T29] audit: type=1400 audit(1786397492.339:309): avc: denied { read write } for pid=7185 comm="syz.1.452" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 204.055710][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.071901][ T10] usb 4-1: Product: syz [ 204.080433][ T10] usb 4-1: Manufacturer: syz [ 204.101967][ T29] audit: type=1400 audit(1786397492.339:310): avc: denied { open } for pid=7185 comm="syz.1.452" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 204.122041][ T5711] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 204.135181][ T29] audit: type=1400 audit(1786397492.339:311): avc: denied { ioctl } for pid=7185 comm="syz.1.452" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 204.141892][ T10] usb 4-1: SerialNumber: syz [ 204.169141][ T5711] ath9k_htc: Failed to initialize the device [ 204.180202][ T6371] usb 1-1: ath9k_htc: USB layer deinitialized [ 204.657520][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 204.687453][ T10] usb 4-1: USB disconnect, device number 30 [ 205.624253][ T10] usblp0: removed [ 205.681463][ T980] usb 2-1: USB disconnect, device number 33 [ 207.249794][ T7220] syzkaller0: entered promiscuous mode [ 207.300173][ T7220] syzkaller0: entered allmulticast mode [ 208.612045][ T980] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 208.771940][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 208.795249][ T980] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 208.897790][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.028466][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.070810][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.187792][ T980] usb 3-1: config 0 descriptor?? [ 210.420801][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 210.428592][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.443047][ T980] usb 3-1: USB disconnect, device number 30 [ 210.871742][ T7246] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 211.146620][ T7254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.470'. [ 211.432978][ T980] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 211.782592][ T980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 211.800905][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.819016][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.831932][ T5711] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 211.851956][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.886685][ T980] usb 4-1: config 0 descriptor?? [ 212.013546][ T5711] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 212.051245][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.073110][ T5711] usb 3-1: Product: syz [ 212.085121][ T5711] usb 3-1: Manufacturer: syz [ 212.101676][ T5711] usb 3-1: SerialNumber: syz [ 212.890492][ T5711] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 212.911586][ T5711] usb 3-1: USB disconnect, device number 31 [ 212.918534][ T980] pyra 0003:1E7D:2CF6.000B: item fetching failed at offset 5/7 [ 212.927974][ T5711] usblp0: removed [ 212.956127][ T980] pyra 0003:1E7D:2CF6.000B: parse failed [ 212.989989][ T980] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -22 [ 213.029421][ T7269] syzkaller0: entered promiscuous mode [ 213.051158][ T7269] syzkaller0: entered allmulticast mode [ 213.752313][ T980] usb 4-1: USB disconnect, device number 31 [ 216.011985][ T5790] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 216.171985][ T5790] usb 3-1: Using ep0 maxpacket: 32 [ 216.187128][ T5790] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 216.202647][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.215143][ T5790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.225064][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.240889][ T5790] usb 3-1: config 0 descriptor?? [ 216.721587][ T5790] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 216.734212][ T5790] ft260 0003:0403:6030.000C: unknown main item tag 0x0 [ 217.039777][ T5790] ft260 0003:0403:6030.000C: failed to retrieve chip version [ 217.056917][ T5790] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -5 [ 217.850906][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 217.852809][ T7282] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 217.920344][ T7282] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 217.946937][ T7282] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 217.948963][ T29] audit: type=1400 audit(1786397506.269:312): avc: denied { firmware_load } for pid=7280 comm="syz.4.476" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 218.340766][ T10] usb 3-1: USB disconnect, device number 32 [ 218.481781][ T29] audit: type=1400 audit(1786397506.799:313): avc: denied { create } for pid=7300 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.994447][ T7318] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 220.733389][ T7334] syzkaller0: entered promiscuous mode [ 220.758642][ T7334] syzkaller0: entered allmulticast mode [ 221.002090][ T42] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 221.073151][ T5711] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 221.274044][ T42] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.296335][ T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.321602][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.343976][ T42] usb 4-1: config 0 descriptor?? [ 221.353071][ T5711] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.367250][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 221.376955][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.391404][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.411784][ T5711] usb 3-1: config 0 descriptor?? [ 221.425143][ T5711] pwc: Askey VC010 type 2 USB webcam detected. [ 221.501956][ T5790] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 221.662945][ T5790] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.674611][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.685126][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.696188][ T5790] usb 1-1: config 0 descriptor?? [ 221.708083][ T5790] pwc: Askey VC010 type 2 USB webcam detected. [ 221.776993][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 221.787337][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 221.803256][ T42] pwc: recv_control_msg error -32 req 02 val 2c00 [ 221.820769][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 221.834183][ T5711] pwc: recv_control_msg error -32 req 02 val 2b00 [ 221.837537][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 221.848919][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 221.848947][ T5711] pwc: recv_control_msg error -32 req 02 val 2700 [ 221.863504][ T5711] pwc: recv_control_msg error -32 req 02 val 2c00 [ 221.869299][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 221.870869][ T5711] pwc: recv_control_msg error -32 req 04 val 1000 [ 221.886708][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 221.902424][ T5711] pwc: recv_control_msg error -32 req 04 val 1300 [ 221.910261][ T5711] pwc: recv_control_msg error -32 req 04 val 1400 [ 221.917852][ T5711] pwc: recv_control_msg error -32 req 02 val 2000 [ 221.926178][ T5711] pwc: recv_control_msg error -32 req 02 val 2100 [ 221.935226][ T5711] pwc: recv_control_msg error -32 req 04 val 1500 [ 221.942573][ T5711] pwc: recv_control_msg error -32 req 02 val 2500 [ 222.062020][ T10] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 222.136717][ T5790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 222.158832][ T5711] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.201409][ T5711] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.228367][ T5711] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.251560][ T5711] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.261737][ T5711] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.275942][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 222.305564][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 222.341148][ T5711] pwc: Registered as video103. [ 222.360949][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 222.435466][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.436702][ T42] pwc: recv_control_msg error -71 req 02 val 2500 [ 222.465929][ T5711] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 222.629100][ T10] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 222.725267][ T42] pwc: recv_control_msg error -71 req 02 val 2400 [ 222.731800][ T5790] pwc: recv_control_msg error -32 req 02 val 2700 [ 222.738698][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.744316][ T5711] usb 3-1: USB disconnect, device number 33 [ 222.745679][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.758789][ T5790] pwc: recv_control_msg error -32 req 02 val 2c00 [ 222.766133][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.773253][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.779824][ T5790] pwc: recv_control_msg error -32 req 04 val 1000 [ 222.782919][ T10] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 222.786655][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.800448][ T42] videodev: could not get a free minor [ 222.806007][ T42] pwc: Failed to register as video device (-23). [ 222.812481][ T5790] pwc: recv_control_msg error -32 req 04 val 1300 [ 222.820255][ T42] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -23 [ 222.829545][ T5790] pwc: recv_control_msg error -32 req 04 val 1400 [ 222.836575][ T5790] pwc: recv_control_msg error -32 req 02 val 2000 [ 222.849912][ T42] usb 4-1: USB disconnect, device number 32 [ 222.856362][ T5790] pwc: recv_control_msg error -32 req 02 val 2100 [ 222.874871][ T5790] pwc: recv_control_msg error -32 req 04 val 1500 [ 222.883940][ T5790] pwc: recv_control_msg error -32 req 02 val 2500 [ 222.892706][ T5790] pwc: recv_control_msg error -32 req 02 val 2400 [ 223.110945][ T5790] pwc: recv_control_msg error -71 req 02 val 2900 [ 223.261714][ T5790] pwc: recv_control_msg error -71 req 02 val 2800 [ 223.269881][ T5790] pwc: recv_control_msg error -71 req 04 val 1100 [ 223.278986][ T5790] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.019116][ T10] usb 5-1: USB disconnect, device number 25 [ 224.057806][ T5790] pwc: Registered as video103. [ 224.066564][ T5790] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 224.115877][ T5790] usb 1-1: USB disconnect, device number 53 [ 224.156789][ T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 224.499371][ T10] garmin_gps 5-1:1.0: device disconnected [ 224.832047][ T5711] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 227.096089][ T5711] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 227.286006][ T5711] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 227.294110][ T5711] usb 2-1: config 0 has no interface number 0 [ 227.300236][ T5711] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 227.313794][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 227.331646][ T5711] usb 2-1: Product: syz [ 227.339410][ T5711] usb 2-1: SerialNumber: syz [ 227.354659][ T5711] usb 2-1: config 0 descriptor?? [ 227.388137][ T5711] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 227.514564][ T7400] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 227.541924][ T5712] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 227.595170][ T5711] usb 2-1: USB disconnect, device number 34 [ 227.671926][ T5712] usb 4-1: device descriptor read/64, error -71 [ 227.951800][ T5712] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 228.030004][ T7408] binder: 7404:7408 ioctl 402c5828 2000000003c0 returned -22 [ 228.289873][ T5712] usb 4-1: device descriptor read/64, error -71 [ 228.784166][ T5712] usb usb4-port1: attempt power cycle [ 229.712009][ T5712] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 229.754358][ T5712] usb 4-1: device descriptor read/8, error -71 [ 230.131301][ T2159] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 230.191949][ T5712] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 230.233058][ T5712] usb 4-1: device descriptor read/8, error -71 [ 230.369519][ T5712] usb usb4-port1: unable to enumerate USB device [ 230.397219][ T2159] usb 2-1: not running at top speed; connect to a high speed hub [ 230.566633][ T2159] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 230.638943][ T2159] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 230.660821][ T2159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.713562][ T2159] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 230.738173][ T2159] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 231.132150][ T5790] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 231.262008][ T7442] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 231.312155][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 231.395820][ T5790] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 231.485392][ T5790] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.514391][ T2159] usb 2-1: USB disconnect, device number 35 [ 231.548101][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.548575][ T2159] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 231.572903][ T2159] garmin_gps 2-1:1.0: device disconnected [ 231.614845][ T5790] usb 4-1: config 0 descriptor?? [ 231.646042][ T5790] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 231.706325][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 231.806771][ T29] audit: type=1400 audit(1786397520.129:314): avc: denied { bind } for pid=7452 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.132069][ T42] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 233.369927][ T42] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 233.975811][ T5711] usb 4-1: USB disconnect, device number 37 [ 234.218778][ T42] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 234.227222][ T42] usb 3-1: can't read configurations, error -61 [ 234.363715][ T42] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 234.565213][ T42] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 234.662634][ T42] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 235.139905][ T42] usb 3-1: can't read configurations, error -61 [ 235.150424][ T42] usb usb3-port1: attempt power cycle [ 235.391966][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 235.413805][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 235.424267][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 235.436044][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 235.653026][ T42] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 236.290257][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.538'. [ 236.354801][ T42] usb 3-1: device descriptor read/8, error -71 [ 236.362726][ T7493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.539'. [ 236.642640][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 236.832530][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 236.856554][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.962470][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.051514][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.185978][ T10] usb 4-1: config 0 descriptor?? [ 237.382009][ T980] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 237.390549][ T7504] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 237.701894][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 237.713765][ T980] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 237.729625][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.750748][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.765394][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.920991][ T980] usb 1-1: config 0 descriptor?? [ 238.141233][ T10] pyra 0003:1E7D:2CF6.000D: item fetching failed at offset 5/7 [ 238.161594][ T10] pyra 0003:1E7D:2CF6.000D: parse failed [ 238.176716][ T10] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -22 [ 238.435058][ T980] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 238.463303][ T980] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 238.629710][ T980] ft260 0003:0403:6030.000E: failed to retrieve chip version [ 238.646900][ T980] ft260 0003:0403:6030.000E: probe with driver ft260 failed with error -5 [ 238.671970][ T5712] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 238.772268][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 238.843666][ T5712] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 238.869010][ T5712] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 238.881279][ T42] usb 4-1: USB disconnect, device number 38 [ 238.888303][ T5712] usb 3-1: can't read configurations, error -61 [ 239.038444][ T5712] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 239.065171][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 239.086554][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 239.097358][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 239.109223][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 239.334242][ T5712] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 239.390846][ T5712] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 239.409203][ T5712] usb 3-1: can't read configurations, error -61 [ 239.468160][ T5712] usb usb3-port1: attempt power cycle [ 239.892035][ T5712] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 239.965960][ T5712] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 240.085817][ T5712] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 240.093614][ T10] usb 1-1: USB disconnect, device number 54 [ 240.123412][ T5712] usb 3-1: can't read configurations, error -61 [ 240.262209][ T5712] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 240.293126][ T5712] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 240.321367][ T5712] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 240.339100][ T5712] usb 3-1: can't read configurations, error -61 [ 240.369187][ T5712] usb usb3-port1: unable to enumerate USB device [ 240.552093][ T980] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 240.571977][ T42] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 240.744020][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 240.767624][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 240.786104][ T980] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 240.797327][ T42] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 240.808387][ T980] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 240.816037][ T980] usb 1-1: can't read configurations, error -61 [ 240.823945][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.835233][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.845360][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.856812][ T42] usb 2-1: config 0 descriptor?? [ 240.951972][ T980] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 241.161917][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 241.170164][ T980] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 241.181320][ T980] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 241.189724][ T980] usb 1-1: can't read configurations, error -61 [ 241.197688][ T980] usb usb1-port1: attempt power cycle [ 241.394412][ T42] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 241.402359][ T42] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 241.542068][ T980] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 241.562596][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 241.568190][ T980] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 241.578717][ T980] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 241.586461][ T980] usb 1-1: can't read configurations, error -61 [ 241.592932][ T42] ft260 0003:0403:6030.000F: failed to retrieve chip version [ 241.601386][ T42] ft260 0003:0403:6030.000F: probe with driver ft260 failed with error -5 [ 241.722744][ T980] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 241.742293][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 241.747857][ T980] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 241.758153][ T980] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 241.765764][ T980] usb 1-1: can't read configurations, error -61 [ 241.773231][ T980] usb usb1-port1: unable to enumerate USB device [ 241.871912][ T5712] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 242.045849][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 242.123421][ T5712] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 242.284576][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 242.320784][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 242.331295][ T5712] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 242.341561][ T5712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 242.357734][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.368741][ T5712] usb 3-1: config 0 descriptor?? [ 243.664383][ T42] usb 2-1: USB disconnect, device number 36 [ 244.560080][ T5712] usb 3-1: USB disconnect, device number 42 [ 244.601393][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'. [ 245.366409][ T7592] netlink: 72 bytes leftover after parsing attributes in process `syz.2.567'. [ 246.151918][ T2159] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 246.302062][ T2159] usb 3-1: Using ep0 maxpacket: 32 [ 246.310440][ T2159] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 246.322867][ T2159] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.333148][ T2159] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.346405][ T2159] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.368616][ T2159] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 246.404872][ T2159] usb 3-1: config 0 interface 0 has no altsetting 0 [ 246.437282][ T2159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.479214][ T2159] usb 3-1: config 0 descriptor?? [ 246.731946][ T980] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 246.793801][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 246.892859][ T980] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 246.903200][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.915450][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.927911][ T980] usb 1-1: config 0 descriptor?? [ 246.945711][ T980] pwc: Askey VC010 type 2 USB webcam detected. [ 246.962926][ T10] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 246.973951][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.985671][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.997864][ T10] usb 4-1: config 0 descriptor?? [ 247.016413][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 247.115476][ T2159] usbhid 3-1:0.0: can't add hid device: -71 [ 247.127728][ T2159] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 247.478444][ T2159] usb 3-1: USB disconnect, device number 43 [ 247.665314][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 247.683857][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 247.696042][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 247.707153][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 247.753345][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 247.764483][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 247.777558][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 247.796098][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 247.807532][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 247.819224][ T980] pwc: recv_control_msg error -32 req 02 val 2b00 [ 247.820353][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 247.848047][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 247.857017][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 247.870768][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 247.880705][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 248.112054][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 248.155067][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 248.218799][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 248.307406][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 248.396187][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 248.624867][ T980] pwc: recv_control_msg error -32 req 02 val 2700 [ 248.631927][ T980] pwc: recv_control_msg error -32 req 02 val 2c00 [ 248.638925][ T980] pwc: recv_control_msg error -32 req 04 val 1000 [ 248.645921][ T980] pwc: recv_control_msg error -32 req 04 val 1300 [ 248.652954][ T980] pwc: recv_control_msg error -32 req 04 val 1400 [ 248.660559][ T980] pwc: recv_control_msg error -32 req 02 val 2000 [ 248.669371][ T10] pwc: Registered as video103. [ 248.671390][ T980] pwc: recv_control_msg error -32 req 02 val 2100 [ 248.697539][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 248.728849][ T7632] syzkaller0: entered promiscuous mode [ 248.891727][ T980] pwc: recv_control_msg error -71 req 02 val 2500 [ 248.907585][ T7632] syzkaller0: entered allmulticast mode [ 248.910675][ T10] usb 4-1: USB disconnect, device number 39 [ 248.965048][ T980] pwc: recv_control_msg error -71 req 02 val 2400 [ 249.039979][ T980] pwc: recv_control_msg error -71 req 02 val 2600 [ 249.152113][ T7640] syzkaller0: entered promiscuous mode [ 249.158816][ T7640] syzkaller0: entered allmulticast mode [ 249.179018][ T980] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.210935][ T980] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.246751][ T980] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.282256][ T980] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.311924][ T980] pwc: Registered as video103. [ 249.348286][ T980] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 249.399188][ T980] usb 1-1: USB disconnect, device number 59 [ 249.475599][ T6513] udevd[6513]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 249.592118][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 249.592186][ T42] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 249.607411][ T29] audit: type=1400 audit(1786397537.919:315): avc: denied { write } for pid=7651 comm="syz.0.587" name="nullb" dev="configfs" ino=3457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.632699][ T29] audit: type=1400 audit(1786397537.919:316): avc: denied { add_name } for pid=7651 comm="syz.0.587" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.659777][ T29] audit: type=1400 audit(1786397537.919:317): avc: denied { create } for pid=7651 comm="syz.0.587" name="nullb1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 249.680988][ T29] audit: type=1400 audit(1786397537.959:318): avc: denied { read write } for pid=7651 comm="syz.0.587" name="size" dev="configfs" ino=16476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 249.706820][ T29] audit: type=1400 audit(1786397537.959:319): avc: denied { open } for pid=7651 comm="syz.0.587" path="/106/config/nullb/nullb1/size" dev="configfs" ino=16476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 249.751416][ T29] audit: type=1800 audit(1786397537.969:320): pid=7652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.587" name="size" dev="configfs" ino=16476 res=0 errno=0 [ 249.773220][ T5712] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 249.784624][ T42] usb 2-1: not running at top speed; connect to a high speed hub [ 249.790167][ T7652] null_blk: disk nullb1 created [ 249.797295][ T42] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 249.806617][ T29] audit: type=1800 audit(1786397537.979:321): pid=7652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.587" name="power" dev="configfs" ino=16477 res=0 errno=0 [ 249.822851][ T42] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 249.838991][ T10] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 249.851528][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.862277][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 249.872828][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 249.879061][ T42] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 249.891207][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.907683][ T10] ums-alauda 5-1:1.0: USB Mass Storage device detected [ 249.918760][ T42] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 249.926361][ T10] ums-alauda 5-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 249.926361][ T10] Please send a copy of this message to and [ 249.972489][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 250.045258][ T10] scsi host1: usb-storage 5-1:1.0 [ 250.119148][ T42] usb 2-1: USB disconnect, device number 37 [ 250.137744][ T42] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 250.160252][ T42] garmin_gps 2-1:1.0: device disconnected [ 250.161048][ T29] audit: type=1400 audit(1786397538.479:322): avc: denied { setcurrent } for pid=7644 comm="syz.4.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 250.188835][ T7645] fuse: Bad value for 'fd' [ 250.218242][ T10] usb 5-1: USB disconnect, device number 26 [ 250.306023][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.313579][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 251.765028][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 251.798612][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 251.810227][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 251.820731][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 252.759193][ T7677] x_tables: duplicate underflow at hook 3 [ 252.788220][ T5712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 253.440790][ T5712] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 253.628927][ T5712] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 253.636785][ T5712] usb 3-1: can't read configurations, error -71 [ 253.680838][ T7687] syzkaller0: entered promiscuous mode [ 253.686714][ T7687] syzkaller0: entered allmulticast mode [ 253.830268][ T7690] syzkaller0: entered promiscuous mode [ 253.852367][ T7690] syzkaller0: entered allmulticast mode [ 255.111960][ T5711] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 255.912063][ T42] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 255.912077][ T5711] usb 5-1: not running at top speed; connect to a high speed hub [ 255.941645][ T5711] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 255.962663][ T5711] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 255.983968][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.061679][ T5711] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 256.073457][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 256.095386][ T5711] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 256.294588][ T5790] usb 5-1: USB disconnect, device number 27 [ 256.308298][ T5790] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 256.323325][ T5790] garmin_gps 5-1:1.0: device disconnected [ 256.328571][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 257.379677][ T7728] x_tables: duplicate underflow at hook 3 [ 258.369982][ T7733] 9pnet_virtio: no channels available for device syz [ 258.589163][ T29] audit: type=1800 audit(1786397546.909:323): pid=7733 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.611" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 259.145645][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 259.169382][ T42] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 259.312922][ T7744] syzkaller0: entered promiscuous mode [ 259.357705][ T7744] syzkaller0: entered allmulticast mode [ 259.406731][ T42] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 259.414865][ T42] usb 3-1: can't read configurations, error -71 [ 259.792597][ T42] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 259.993702][ T42] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 260.008157][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.018579][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.034101][ T42] usb 3-1: config 0 descriptor?? [ 260.047302][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 260.341923][ T5790] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 260.451617][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 260.458983][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 260.466087][ T42] pwc: recv_control_msg error -32 req 02 val 2c00 [ 260.474446][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 260.481527][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 260.488823][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 260.495291][ T5790] usb 1-1: Using ep0 maxpacket: 16 [ 260.500922][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 260.508199][ T5790] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 260.517907][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 260.525555][ T5790] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 260.534332][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.546442][ T5790] usb 1-1: config 0 has no interface number 0 [ 260.552655][ T5790] usb 1-1: config 0 interface 143 has no altsetting 0 [ 260.563934][ T5790] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 260.581924][ T5790] usb 1-1: Product: syz [ 260.587660][ T5790] usb 1-1: SerialNumber: syz [ 260.604902][ T5790] usb 1-1: config 0 descriptor?? [ 260.633522][ T7763] syzkaller0: entered promiscuous mode [ 260.639036][ T7763] syzkaller0: entered allmulticast mode [ 260.734776][ T42] pwc: recv_control_msg error -71 req 02 val 2500 [ 260.762293][ T42] pwc: recv_control_msg error -71 req 02 val 2400 [ 260.762822][ T7767] x_tables: duplicate underflow at hook 3 [ 260.778387][ T42] pwc: recv_control_msg error -71 req 02 val 2600 [ 260.797363][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 260.809880][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 260.818313][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 260.833376][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 260.841517][ T42] pwc: Registered as video103. [ 260.857550][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 260.879963][ T42] usb 3-1: USB disconnect, device number 47 [ 261.142560][ T5711] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 261.352226][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 261.417005][ T5711] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 261.511601][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.542041][ T5711] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.564445][ T5711] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.576534][ T5711] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.590071][ T5711] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.597642][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.608791][ T5711] usb 5-1: config 0 descriptor?? [ 262.243789][ T5711] usbhid 5-1:0.0: can't add hid device: -71 [ 262.275465][ T5711] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 262.313599][ T5711] usb 5-1: USB disconnect, device number 28 [ 262.351926][ T42] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 263.175425][ T5790] usb 1-1: USB disconnect, device number 60 [ 263.332894][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 263.789981][ T7796] syzkaller0: entered promiscuous mode [ 263.825258][ T7796] syzkaller0: entered allmulticast mode [ 265.011844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 265.108172][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 265.124778][ T42] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 265.161920][ T42] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 265.201738][ T42] usb 3-1: can't read configurations, error -71 [ 265.213122][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 265.239886][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 265.256102][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 265.269618][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.636'. [ 268.784321][ T7841] 9pnet_virtio: no channels available for device syz [ 269.777374][ T29] audit: type=1800 audit(1786397557.949:324): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.644" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 269.808768][ T7849] syzkaller0: entered promiscuous mode [ 269.822029][ T7849] syzkaller0: entered allmulticast mode [ 269.993463][ T5711] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 270.172071][ T5711] usb 5-1: Using ep0 maxpacket: 32 [ 271.598987][ T5757] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 271.911947][ T5757] usb 4-1: Using ep0 maxpacket: 8 [ 271.917969][ T5757] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 272.745105][ T5757] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 272.769972][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.854343][ T5757] usb 4-1: Product: syz [ 272.904146][ T5757] usb 4-1: Manufacturer: syz [ 272.956823][ T5757] usb 4-1: SerialNumber: syz [ 273.004105][ T5757] ch9200 4-1:2.0: probe with driver ch9200 failed with error -22 [ 273.054457][ T5711] usb 5-1: unable to get BOS descriptor or descriptor too short [ 273.070408][ T5711] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 273.203663][ T5711] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 273.278185][ T5711] usb 5-1: can't read configurations, error -71 [ 274.075824][ T5712] usb 4-1: USB disconnect, device number 40 [ 274.414753][ T7911] 9pnet_virtio: no channels available for device syz [ 275.053777][ T29] audit: type=1800 audit(1786397563.369:325): pid=7911 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.666" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 275.613251][ T42] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 275.841882][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 275.941902][ T5790] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 275.982004][ T5712] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 276.146723][ T5712] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 276.258950][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.298334][ T5712] usb 3-1: Product: syz [ 276.322202][ T5712] usb 3-1: Manufacturer: syz [ 276.338637][ T5712] usb 3-1: SerialNumber: syz [ 276.521939][ T5790] usb 5-1: Using ep0 maxpacket: 16 [ 276.619542][ T5711] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 276.740340][ T5790] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 276.755681][ T5790] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 276.786181][ T5790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.798380][ T5790] usb 5-1: config 0 has no interface number 0 [ 276.807642][ T5790] usb 5-1: config 0 interface 143 has no altsetting 0 [ 276.817199][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 276.825960][ T5790] usb 5-1: Product: syz [ 276.830168][ T5790] usb 5-1: SerialNumber: syz [ 276.838381][ T5790] usb 5-1: config 0 descriptor?? [ 277.306878][ T5790] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 277.702941][ T2159] usb 3-1: USB disconnect, device number 50 [ 277.731917][ T5790] usb 4-1: Using ep0 maxpacket: 16 [ 277.738387][ T5790] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 277.751263][ T5790] usb 4-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 277.766583][ T5790] usb 4-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.787018][ T5790] usb 4-1: config 0 interface 0 has no altsetting 0 [ 277.795535][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.815564][ T5790] usb 4-1: config 0 descriptor?? [ 277.892275][ T5711] usb 3-1: Service connection timeout for: 256 [ 277.898603][ T5711] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 277.906913][ T5711] ath9k_htc: Failed to initialize the device [ 277.913264][ T2159] usb 3-1: ath9k_htc: USB layer deinitialized [ 278.038037][ T5790] usbhid 4-1:0.0: can't add hid device: -71 [ 278.056953][ T5790] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 278.070916][ T5790] usb 4-1: USB disconnect, device number 41 [ 278.805249][ T5711] usb 5-1: USB disconnect, device number 31 [ 278.821636][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 278.857982][ T42] usb 1-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice= 0.40 [ 278.913149][ T42] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 278.941868][ T42] usb 1-1: can't read configurations, error -71 [ 281.161888][ T2159] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 281.339758][ T2159] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 281.351327][ T2159] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.367170][ T2159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.380774][ T2159] usb 4-1: config 0 descriptor?? [ 281.395469][ T2159] pwc: Askey VC010 type 2 USB webcam detected. [ 281.633109][ T5704] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 281.728142][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 281.792730][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 281.802467][ T2159] pwc: recv_control_msg error -32 req 02 val 2b00 [ 281.810598][ T5704] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 281.829575][ T2159] pwc: recv_control_msg error -32 req 02 val 2700 [ 281.842818][ T2159] pwc: recv_control_msg error -32 req 02 val 2c00 [ 281.851402][ T5704] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 281.860487][ T2159] pwc: recv_control_msg error -32 req 04 val 1000 [ 281.880381][ T5704] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.914722][ T5704] usb 1-1: config 0 has no interface number 0 [ 281.921174][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 281.941485][ T5704] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.959458][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 281.970540][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 281.982324][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 282.167514][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 282.182770][ T2159] pwc: recv_control_msg error -71 req 04 val 1400 [ 282.190052][ T5704] usb 1-1: Product: syz [ 282.213399][ T5704] usb 1-1: SerialNumber: syz [ 282.215702][ T42] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 282.221277][ T2159] pwc: recv_control_msg error -71 req 02 val 2000 [ 282.328670][ T5704] usb 1-1: config 0 descriptor?? [ 282.339020][ T2159] pwc: recv_control_msg error -71 req 02 val 2100 [ 282.407586][ T2159] pwc: recv_control_msg error -71 req 04 val 1500 [ 282.470973][ T2159] pwc: recv_control_msg error -71 req 02 val 2500 [ 282.506198][ T2159] pwc: recv_control_msg error -71 req 02 val 2400 [ 282.534929][ T2159] pwc: recv_control_msg error -71 req 02 val 2600 [ 282.570422][ T2159] pwc: recv_control_msg error -71 req 02 val 2900 [ 282.638742][ T2159] pwc: recv_control_msg error -71 req 02 val 2800 [ 282.725334][ T2159] pwc: recv_control_msg error -71 req 04 val 1100 [ 283.344492][ T2159] pwc: recv_control_msg error -71 req 04 val 1200 [ 283.403689][ T2159] pwc: Registered as video103. [ 283.410339][ T2159] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 283.440592][ T2159] usb 4-1: USB disconnect, device number 42 [ 283.531915][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 284.307301][ T42] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 284.317472][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.328509][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.338315][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.356615][ T42] usb 3-1: config 0 descriptor?? [ 284.412906][ T5704] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 284.581121][ T42] usb 3-1: can't set config #0, error -71 [ 284.588641][ T42] usb 3-1: USB disconnect, device number 51 [ 284.600749][ T5704] usb 1-1: USB disconnect, device number 63 [ 286.209172][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 286.532128][ T29] audit: type=1400 audit(1786397574.829:326): avc: denied { write } for pid=8038 comm="syz.2.708" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 286.714902][ T6371] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 286.940214][ T29] audit: type=1400 audit(1786397574.829:327): avc: denied { open } for pid=8038 comm="syz.2.708" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.135981][ T6371] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 287.303117][ T29] audit: type=1400 audit(1786397574.839:328): avc: denied { ioctl } for pid=8038 comm="syz.2.708" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.593747][ T29] audit: type=1400 audit(1786397574.939:329): avc: denied { ioctl } for pid=8042 comm="syz.1.709" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.627863][ T6371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.646489][ T6371] usb 2-1: Product: syz [ 287.650756][ T29] audit: type=1400 audit(1786397575.959:330): avc: denied { read write } for pid=8051 comm="syz.0.711" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.679070][ T6371] usb 2-1: Manufacturer: syz [ 287.688006][ T6371] usb 2-1: SerialNumber: syz [ 287.788943][ T5790] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 287.812972][ T8053] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 288.211461][ T29] audit: type=1400 audit(1786397575.959:331): avc: denied { open } for pid=8051 comm="syz.0.711" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 288.331881][ T6371] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 288.533055][ T6371] usb 1-1: Using ep0 maxpacket: 16 [ 288.552521][ T6371] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 288.563374][ T6371] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 288.572201][ T6371] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.592547][ T6371] usb 1-1: config 0 has no interface number 0 [ 288.626192][ T5704] usb 2-1: USB disconnect, device number 38 [ 288.632182][ T6371] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.711865][ T6371] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 288.721126][ T6371] usb 1-1: Product: syz [ 288.945929][ T6371] usb 1-1: SerialNumber: syz [ 288.974632][ T6371] usb 1-1: config 0 descriptor?? [ 289.252026][ T5790] usb 2-1: Service connection timeout for: 256 [ 289.309741][ T29] audit: type=1400 audit(1786397577.629:332): avc: denied { allowed } for pid=8051 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 289.934644][ T5790] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 289.944081][ T5790] ath9k_htc: Failed to initialize the device [ 289.961377][ T5704] usb 2-1: ath9k_htc: USB layer deinitialized [ 291.282899][ T29] audit: type=1400 audit(1786397579.599:333): avc: denied { create } for pid=8077 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 291.310797][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.720'. [ 291.494495][ T2159] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 291.733971][ T2159] usb 4-1: Using ep0 maxpacket: 32 [ 291.797477][ T2159] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 291.897534][ T2159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.003334][ T2159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.143462][ T2159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.348791][ T2159] usb 4-1: config 0 descriptor?? [ 292.511969][ T2159] usb 4-1: can't set config #0, error -71 [ 292.519335][ T2159] usb 4-1: USB disconnect, device number 43 [ 293.033289][ T6371] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 293.075566][ T6371] usb 1-1: USB disconnect, device number 64 [ 293.265228][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 293.283206][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 293.293373][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 293.303377][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 293.314699][ T8105] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 294.220707][ T8116] x_tables: duplicate underflow at hook 3 [ 294.472676][ T5790] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 294.634993][ T5790] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 294.648375][ T5790] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 294.656565][ T5790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.667504][ T5790] usb 5-1: config 0 has no interface number 0 [ 294.671900][ T5711] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 294.673666][ T5790] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.698489][ T5790] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 294.707193][ T5790] usb 5-1: Product: syz [ 294.711372][ T5790] usb 5-1: SerialNumber: syz [ 294.722612][ T5790] usb 5-1: config 0 descriptor?? [ 294.782729][ T42] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 294.802505][ T6371] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 294.851998][ T5711] usb 2-1: Using ep0 maxpacket: 8 [ 294.857869][ T5711] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 294.868243][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.880263][ T5711] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 294.889727][ T5711] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.906124][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.915131][ T5711] usb 2-1: Product: syz [ 294.924085][ T5711] usb 2-1: Manufacturer: syz [ 294.929367][ T5711] usb 2-1: SerialNumber: syz [ 294.933553][ T42] usb 4-1: Using ep0 maxpacket: 32 [ 294.951766][ T42] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 294.951903][ T6371] usb 1-1: Using ep0 maxpacket: 16 [ 294.972179][ T5790] usb 5-1: USB disconnect, device number 32 [ 294.978530][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.991345][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.003877][ T6371] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 295.023777][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.035552][ T42] usb 4-1: config 0 descriptor?? [ 295.041083][ T6371] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 295.052236][ T6371] usb 1-1: config 0 has no interface number 0 [ 295.061438][ T6371] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 295.073711][ T6371] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 295.087899][ T6371] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 295.097951][ T6371] usb 1-1: Product: syz [ 295.103285][ T6371] usb 1-1: SerialNumber: syz [ 295.116761][ T6371] usb 1-1: config 0 descriptor?? [ 295.126164][ T6371] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 295.135634][ T6371] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input22 [ 295.338368][ T29] audit: type=1400 audit(1786397583.659:334): avc: denied { read write } for pid=8121 comm="syz.0.734" name="event4" dev="devtmpfs" ino=3278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 295.364757][ T8122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=8122 comm=syz.0.734 [ 295.366680][ T29] audit: type=1400 audit(1786397583.659:335): avc: denied { open } for pid=8121 comm="syz.0.734" path="/dev/input/event4" dev="devtmpfs" ino=3278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 295.401887][ T29] audit: type=1400 audit(1786397583.689:336): avc: denied { ioctl } for pid=8121 comm="syz.0.734" path="/dev/input/event4" dev="devtmpfs" ino=3278 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 295.567720][ T5711] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 295.584525][ T42] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 295.592025][ T42] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 295.595655][ T5711] usb 2-1: clock source 0 is not valid, cannot use [ 295.610479][ T5711] usb 2-1: 1:1: cannot get freq (v2/v3): err -32 [ 295.764221][ T42] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 296.188127][ T42] ft260 0003:0403:6030.0010: failed to retrieve system status [ 296.196821][ T42] ft260 0003:0403:6030.0010: probe with driver ft260 failed with error -32 [ 296.209917][ T5704] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 296.319404][ T8132] fuse: Bad value for 'user_id' [ 296.324385][ T8132] fuse: Bad value for 'user_id' [ 296.392250][ T5704] usb 5-1: Using ep0 maxpacket: 32 [ 296.419394][ T5704] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 296.462789][ T5704] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 296.497743][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.912891][ T8135] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 297.573480][ C1] cm109_urb_ctl_callback: 5 callbacks suppressed [ 297.573497][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.587215][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.594396][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.601560][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.609210][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.616709][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.623972][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.631123][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.638417][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.645590][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 297.739927][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 297.749247][ T42] usb 1-1: USB disconnect, device number 65 [ 297.843152][ T24] usb 4-1: USB disconnect, device number 44 [ 297.851989][ T5704] usb 2-1: USB disconnect, device number 39 [ 297.897173][ T42] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 297.952573][ T8139] syzkaller0: entered promiscuous mode [ 298.016282][ T8139] syzkaller0: entered allmulticast mode [ 298.738438][ T5790] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 298.949622][ T24] usb 5-1: USB disconnect, device number 33 [ 298.984301][ T5790] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.997056][ T5790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.023698][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.039029][ T5790] usb 4-1: config 0 descriptor?? [ 299.079311][ T5790] pwc: Askey VC010 type 2 USB webcam detected. [ 299.460489][ T5790] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.467714][ T5790] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.471890][ T5704] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 299.474275][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 299.492646][ T5790] pwc: recv_control_msg error -32 req 02 val 2c00 [ 299.499839][ T5790] pwc: recv_control_msg error -32 req 04 val 1000 [ 299.506828][ T5790] pwc: recv_control_msg error -32 req 04 val 1300 [ 299.513847][ T5790] pwc: recv_control_msg error -32 req 04 val 1400 [ 299.520757][ T5790] pwc: recv_control_msg error -32 req 02 val 2000 [ 299.581873][ T42] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 299.642472][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 299.642874][ T5704] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 299.656412][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.664689][ T5704] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 299.668772][ T24] usb 2-1: Product: syz [ 299.681650][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 299.682785][ T24] usb 2-1: Manufacturer: syz [ 299.690663][ T5704] usb 1-1: Product: syz [ 299.695315][ T24] usb 2-1: SerialNumber: syz [ 299.699679][ T5704] usb 1-1: Manufacturer: syz [ 299.728389][ T5704] input: Samsung SUR40 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input23 [ 299.730669][ T5790] pwc: recv_control_msg error -71 req 04 val 1500 [ 299.747351][ T42] usb 5-1: Using ep0 maxpacket: 32 [ 299.758251][ T42] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 299.768852][ T5790] pwc: recv_control_msg error -71 req 02 val 2500 [ 299.769587][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.787409][ T5757] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 299.796752][ T5790] pwc: recv_control_msg error -71 req 02 val 2400 [ 299.807100][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.817032][ T5790] pwc: recv_control_msg error -71 req 02 val 2600 [ 299.823644][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.832248][ T5790] pwc: recv_control_msg error -71 req 02 val 2900 [ 299.841530][ T42] usb 5-1: config 0 descriptor?? [ 299.846676][ T5790] pwc: recv_control_msg error -71 req 02 val 2800 [ 299.856389][ T5790] pwc: recv_control_msg error -71 req 04 val 1100 [ 299.865682][ T5790] pwc: recv_control_msg error -71 req 04 val 1200 [ 299.874128][ T5790] pwc: Registered as video103. [ 299.882587][ T5790] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 299.938896][ T5790] usb 4-1: USB disconnect, device number 45 [ 299.946849][ T5704] videodev: could not get a free minor [ 299.960821][ T5704] sur40 1-1:1.0: Unable to register video subdevice. [ 299.974458][ T5704] sur40 1-1:1.0: probe with driver sur40 failed with error -23 [ 299.999749][ T5704] usb 1-1: USB disconnect, device number 66 [ 300.065278][ T5616] ================================================================== [ 300.073351][ T5616] BUG: KASAN: slab-use-after-free in sur40_open+0x46c/0x500 [ 300.080648][ T5616] Read of size 8 at addr ffff88807b51c000 by task udevd/5616 [ 300.087998][ T5616] [ 300.090317][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 300.090341][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 300.090360][ T5616] Call Trace: [ 300.090368][ T5616] [ 300.090375][ T5616] dump_stack_lvl+0x100/0x190 [ 300.090404][ T5616] print_report+0x13d/0x4b0 [ 300.090433][ T5616] ? __virt_addr_valid+0x239/0x430 [ 300.090460][ T5616] ? sur40_open+0x46c/0x500 [ 300.090485][ T5616] kasan_report+0xdf/0x1c0 [ 300.090513][ T5616] ? sur40_open+0x46c/0x500 [ 300.090536][ T5616] ? __pfx_sur40_open+0x10/0x10 [ 300.090557][ T5616] sur40_open+0x46c/0x500 [ 300.090578][ T5616] input_open_device+0x24c/0x3d0 [ 300.090601][ T5616] evdev_open+0x52f/0x690 [ 300.090629][ T5616] ? __pfx_evdev_open+0x10/0x10 [ 300.090656][ T5616] chrdev_open+0x234/0x6a0 [ 300.090677][ T5616] ? __pfx_chrdev_open+0x10/0x10 [ 300.090699][ T5616] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 300.090728][ T5616] do_dentry_open+0x6ab/0x14d0 [ 300.090747][ T5616] ? __pfx_chrdev_open+0x10/0x10 [ 300.090771][ T5616] vfs_open+0x82/0x3f0 [ 300.090795][ T5616] path_openat+0x2873/0x4280 [ 300.090823][ T5616] ? __pfx_path_openat+0x10/0x10 [ 300.090848][ T5616] do_file_open+0x20e/0x430 [ 300.090870][ T5616] ? __pfx_do_file_open+0x10/0x10 [ 300.090901][ T5616] ? alloc_fd+0x471/0x7a0 [ 300.090923][ T5616] ? do_getname+0x191/0x390 [ 300.090949][ T5616] do_sys_openat2+0x10f/0x1e0 [ 300.090974][ T5616] ? __pfx_do_sys_openat2+0x10/0x10 [ 300.091003][ T5616] __x64_sys_openat+0x12d/0x210 [ 300.091029][ T5616] ? __pfx___x64_sys_openat+0x10/0x10 [ 300.091060][ T5616] do_syscall_64+0x115/0x870 [ 300.091085][ T5616] ? clear_bhb_loop+0x70/0xc0 [ 300.091108][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.091129][ T5616] RIP: 0033:0x7f9b69ca7407 [ 300.091147][ T5616] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 300.091170][ T5616] RSP: 002b:00007fff8e81a8e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 300.091194][ T5616] RAX: ffffffffffffffda RBX: 00007f9b6a45a880 RCX: 00007f9b69ca7407 [ 300.091209][ T5616] RDX: 0000000000080000 RSI: 00005594d26d28f0 RDI: ffffffffffffff9c [ 300.091223][ T5616] RBP: 00005594d295efe0 R08: 0000000000000000 R09: 0000000000000000 [ 300.091235][ T5616] R10: 0000000000000000 R11: 0000000000000202 R12: 00005594a90d80c8 [ 300.091248][ T5616] R13: 00005594a90d80ce R14: 00007fff8e81aee0 R15: 00005594a90debcc [ 300.091269][ T5616] [ 300.091276][ T5616] [ 300.336035][ T5616] Allocated by task 5704: [ 300.340353][ T5616] kasan_save_stack+0x30/0x50 [ 300.345048][ T5616] kasan_save_track+0x14/0x30 [ 300.349717][ T5616] __kasan_kmalloc+0xaa/0xb0 [ 300.354297][ T5616] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 300.359663][ T5616] sur40_probe+0x1a8/0x1580 [ 300.364166][ T5616] usb_probe_interface+0x303/0x8f0 [ 300.369278][ T5616] really_probe+0x241/0xa60 [ 300.373771][ T5616] __driver_probe_device+0x20e/0x450 [ 300.379050][ T5616] driver_probe_device+0x4a/0x140 [ 300.384065][ T5616] __device_attach_driver+0x1df/0x320 [ 300.389440][ T5616] bus_for_each_drv+0x159/0x1e0 [ 300.394287][ T5616] __device_attach+0x1e4/0x4d0 [ 300.399046][ T5616] device_initial_probe+0xaf/0xd0 [ 300.404064][ T5616] bus_probe_device+0x64/0x160 [ 300.408813][ T5616] device_add+0x121d/0x1970 [ 300.413311][ T5616] usb_set_configuration+0xd97/0x1c60 [ 300.418676][ T5616] usb_generic_driver_probe+0xa1/0xe0 [ 300.424034][ T5616] usb_probe_device+0xef/0x400 [ 300.428785][ T5616] really_probe+0x241/0xa60 [ 300.433279][ T5616] __driver_probe_device+0x20e/0x450 [ 300.438551][ T5616] driver_probe_device+0x4a/0x140 [ 300.443568][ T5616] __device_attach_driver+0x1df/0x320 [ 300.448937][ T5616] bus_for_each_drv+0x159/0x1e0 [ 300.453784][ T5616] __device_attach+0x1e4/0x4d0 [ 300.458550][ T5616] device_initial_probe+0xaf/0xd0 [ 300.463574][ T5616] bus_probe_device+0x64/0x160 [ 300.468325][ T5616] device_add+0x121d/0x1970 [ 300.472822][ T5616] usb_new_device.part.0+0xcc2/0x1686 [ 300.478188][ T5616] hub_event.cold+0x1e3/0xe90 [ 300.482857][ T5616] process_one_work+0xa23/0x1940 [ 300.487792][ T5616] worker_thread+0x5ef/0xe50 [ 300.492370][ T5616] kthread+0x370/0x450 [ 300.496423][ T5616] ret_from_fork+0x72b/0xd50 [ 300.501005][ T5616] ret_from_fork_asm+0x1a/0x30 [ 300.505761][ T5616] [ 300.508063][ T5616] Freed by task 5704: [ 300.512018][ T5616] kasan_save_stack+0x30/0x50 [ 300.516685][ T5616] kasan_save_track+0x14/0x30 [ 300.521347][ T5616] kasan_save_free_info+0x3b/0x70 [ 300.526352][ T5616] __kasan_slab_free+0x5f/0x80 [ 300.531106][ T5616] kfree+0x22b/0x6c0 [ 300.534982][ T5616] sur40_probe+0xc36/0x1580 [ 300.539474][ T5616] usb_probe_interface+0x303/0x8f0 [ 300.544577][ T5616] really_probe+0x241/0xa60 [ 300.549066][ T5616] __driver_probe_device+0x20e/0x450 [ 300.554337][ T5616] driver_probe_device+0x4a/0x140 [ 300.559350][ T5616] __device_attach_driver+0x1df/0x320 [ 300.564710][ T5616] bus_for_each_drv+0x159/0x1e0 [ 300.569545][ T5616] __device_attach+0x1e4/0x4d0 [ 300.574298][ T5616] device_initial_probe+0xaf/0xd0 [ 300.579310][ T5616] bus_probe_device+0x64/0x160 [ 300.584062][ T5616] device_add+0x121d/0x1970 [ 300.588556][ T5616] usb_set_configuration+0xd97/0x1c60 [ 300.593915][ T5616] usb_generic_driver_probe+0xa1/0xe0 [ 300.599271][ T5616] usb_probe_device+0xef/0x400 [ 300.604022][ T5616] really_probe+0x241/0xa60 [ 300.608511][ T5616] __driver_probe_device+0x20e/0x450 [ 300.613786][ T5616] driver_probe_device+0x4a/0x140 [ 300.618807][ T5616] __device_attach_driver+0x1df/0x320 [ 300.624180][ T5616] bus_for_each_drv+0x159/0x1e0 [ 300.629018][ T5616] __device_attach+0x1e4/0x4d0 [ 300.633773][ T5616] device_initial_probe+0xaf/0xd0 [ 300.638789][ T5616] bus_probe_device+0x64/0x160 [ 300.643542][ T5616] device_add+0x121d/0x1970 [ 300.648041][ T5616] usb_new_device.part.0+0xcc2/0x1686 [ 300.653408][ T5616] hub_event.cold+0x1e3/0xe90 [ 300.658080][ T5616] process_one_work+0xa23/0x1940 [ 300.663006][ T5616] worker_thread+0x5ef/0xe50 [ 300.667581][ T5616] kthread+0x370/0x450 [ 300.671633][ T5616] ret_from_fork+0x72b/0xd50 [ 300.676216][ T5616] ret_from_fork_asm+0x1a/0x30 [ 300.680974][ T5616] [ 300.683277][ T5616] The buggy address belongs to the object at ffff88807b51c000 [ 300.683277][ T5616] which belongs to the cache kmalloc-4k of size 4096 [ 300.697401][ T5616] The buggy address is located 0 bytes inside of [ 300.697401][ T5616] freed 4096-byte region [ffff88807b51c000, ffff88807b51d000) [ 300.711097][ T5616] [ 300.713403][ T5616] The buggy address belongs to the physical page: [ 300.719803][ T5616] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b518 [ 300.728549][ T5616] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 300.737026][ T5616] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 300.744557][ T5616] page_type: f5(slab) [ 300.748521][ T5616] raw: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122 [ 300.757094][ T5616] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 300.765668][ T5616] head: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122 [ 300.774329][ T5616] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 300.782986][ T5616] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 300.791640][ T5616] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 300.800295][ T5616] page dumped because: kasan: bad access detected [ 300.806698][ T5616] page_owner tracks the page as allocated [ 300.812393][ T5616] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5087, tgid 5087 (v4l_id), ts 35775151577, free_ts 35227308491 [ 300.832440][ T5616] post_alloc_hook+0xfd/0x120 [ 300.837105][ T5616] get_page_from_freelist+0xf48/0x3530 [ 300.842551][ T5616] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 300.848693][ T5616] new_slab+0xa2/0x640 [ 300.852747][ T5616] refill_objects+0xe3/0x410 [ 300.857322][ T5616] __pcs_replace_empty_main+0x376/0x680 [ 300.862854][ T5616] __kmalloc_noprof+0x66d/0x820 [ 300.867706][ T5616] tomoyo_realpath_from_path+0xb6/0x690 [ 300.873236][ T5616] tomoyo_check_open_permission+0x2af/0x3c0 [ 300.879122][ T5616] tomoyo_file_open+0x6b/0x90 [ 300.883789][ T5616] security_file_open+0xb5/0x1e0 [ 300.888721][ T5616] do_dentry_open+0x588/0x14d0 [ 300.893471][ T5616] vfs_open+0x82/0x3f0 [ 300.897530][ T5616] path_openat+0x2873/0x4280 [ 300.902115][ T5616] do_file_open+0x20e/0x430 [ 300.906620][ T5616] do_sys_openat2+0x10f/0x1e0 [ 300.911299][ T5616] page last free pid 5071 tgid 5071 stack trace: [ 300.917884][ T5616] __free_frozen_pages+0x79f/0x1090 [ 300.923174][ T5616] qlist_free_all+0x47/0xf0 [ 300.927664][ T5616] kasan_quarantine_reduce+0x1a0/0x1f0 [ 300.933112][ T5616] __kasan_slab_alloc+0x69/0x90 [ 300.937952][ T5616] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 300.943400][ T5616] vm_area_alloc+0x1f/0x160 [ 300.947884][ T5616] __mmap_region+0x1033/0x2db0 [ 300.952631][ T5616] mmap_region+0x35d/0x620 [ 300.957032][ T5616] do_mmap+0xc63/0x12f0 [ 300.961176][ T5616] vm_mmap_pgoff+0x29e/0x470 [ 300.965757][ T5616] ksys_mmap_pgoff+0x3cb/0x610 [ 300.970511][ T5616] __x64_sys_mmap+0x125/0x190 [ 300.975182][ T5616] do_syscall_64+0x115/0x870 [ 300.979764][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.985645][ T5616] [ 300.987955][ T5616] Memory state around the buggy address: [ 300.993577][ T5616] ffff88807b51bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 301.001623][ T5616] ffff88807b51bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 301.009667][ T5616] >ffff88807b51c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 301.017705][ T5616] ^ [ 301.021750][ T5616] ffff88807b51c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 301.029792][ T5616] ffff88807b51c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 301.037830][ T5616] ================================================================== [ 301.088788][ T5757] usb 2-1: Service connection timeout for: 256 [ 301.095240][ T5757] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 301.104472][ T42] usbhid 5-1:0.0: can't add hid device: -71 [ 301.106796][ T29] audit: type=1400 audit(1786397589.419:337): avc: denied { read } for pid=4946 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 301.110617][ T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 301.145274][ T42] usb 5-1: USB disconnect, device number 34 [ 301.152958][ T5616] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 301.160160][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 301.169010][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 301.179065][ T5616] Call Trace: [ 301.182343][ T5616] [ 301.185274][ T5616] dump_stack_lvl+0x100/0x190 [ 301.189958][ T5616] vpanic+0x552/0x970 [ 301.193944][ T5616] ? __pfx_vpanic+0x10/0x10 [ 301.198451][ T5616] ? mark_held_locks+0x40/0x70 [ 301.203222][ T5616] ? sur40_open+0x46c/0x500 [ 301.207730][ T5616] panic+0xd1/0xe0 [ 301.211451][ T5616] ? __pfx_panic+0x10/0x10 [ 301.215867][ T5616] ? sur40_open+0x46c/0x500 [ 301.220348][ T5616] ? preempt_schedule_common+0x42/0xc0 [ 301.225785][ T5616] ? check_panic_on_warn+0x1f/0x90 [ 301.230958][ T5616] check_panic_on_warn.cold+0x19/0x34 [ 301.236305][ T5616] end_report.part.0+0x3a/0x90 [ 301.241048][ T5616] kasan_report.cold+0xe/0x18 [ 301.245702][ T5616] ? sur40_open+0x46c/0x500 [ 301.250180][ T5616] ? __pfx_sur40_open+0x10/0x10 [ 301.255004][ T5616] sur40_open+0x46c/0x500 [ 301.259309][ T5616] input_open_device+0x24c/0x3d0 [ 301.264223][ T5616] evdev_open+0x52f/0x690 [ 301.268544][ T5616] ? __pfx_evdev_open+0x10/0x10 [ 301.273402][ T5616] chrdev_open+0x234/0x6a0 [ 301.277828][ T5616] ? __pfx_chrdev_open+0x10/0x10 [ 301.282771][ T5616] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 301.289110][ T5616] do_dentry_open+0x6ab/0x14d0 [ 301.293857][ T5616] ? __pfx_chrdev_open+0x10/0x10 [ 301.298809][ T5616] vfs_open+0x82/0x3f0 [ 301.302865][ T5616] path_openat+0x2873/0x4280 [ 301.307433][ T5616] ? __pfx_path_openat+0x10/0x10 [ 301.312346][ T5616] do_file_open+0x20e/0x430 [ 301.316848][ T5616] ? __pfx_do_file_open+0x10/0x10 [ 301.321853][ T5616] ? alloc_fd+0x471/0x7a0 [ 301.326157][ T5616] ? do_getname+0x191/0x390 [ 301.330637][ T5616] do_sys_openat2+0x10f/0x1e0 [ 301.335295][ T5616] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.340475][ T5616] __x64_sys_openat+0x12d/0x210 [ 301.345305][ T5616] ? __pfx___x64_sys_openat+0x10/0x10 [ 301.350659][ T5616] do_syscall_64+0x115/0x870 [ 301.355234][ T5616] ? clear_bhb_loop+0x70/0xc0 [ 301.359896][ T5616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.365787][ T5616] RIP: 0033:0x7f9b69ca7407 [ 301.370181][ T5616] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 301.389768][ T5616] RSP: 002b:00007fff8e81a8e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 301.398165][ T5616] RAX: ffffffffffffffda RBX: 00007f9b6a45a880 RCX: 00007f9b69ca7407 [ 301.406116][ T5616] RDX: 0000000000080000 RSI: 00005594d26d28f0 RDI: ffffffffffffff9c [ 301.414064][ T5616] RBP: 00005594d295efe0 R08: 0000000000000000 R09: 0000000000000000 [ 301.422013][ T5616] R10: 0000000000000000 R11: 0000000000000202 R12: 00005594a90d80c8 [ 301.430046][ T5616] R13: 00005594a90d80ce R14: 00007fff8e81aee0 R15: 00005594a90debcc [ 301.437996][ T5616] [ 301.441207][ T5616] Kernel Offset: disabled [ 301.445509][ T5616] Rebooting in 86400 seconds..