last executing test programs: 12.922775987s ago: executing program 4 (id=171): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file7\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000000), 0xfffffffffffeffff, 0x68401) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f0000000940)=ANY=[@ANYRESDEC, @ANYBLOB="93df93d5ece574486b8098393feda539cccce1283083d5a2093d0093c69e1f08fe99d873ae822b2884bdb29a3762b946be187b72d911f098d397b5361f574f3a5bd41d476cbeb727804577ab06ba9ccd746084b1cc7482ef9e50614c17ad483fc6adf81b218b492d1019ca225952a4cf7758147f340021d5f36c75822562873c04b67a65bb03c0ca3ca6185e1adb2c63397adb4cdfbf5bb2dbef0146d775f89f938fa595659242f9205692e0737e9bf8"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, &(0x7f0000000900)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xb9, 0x9, 0x6, 0x68, 0xd}, 0x14f, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x20000009, 0x0, 0x0, 0x2, 0x4}]}}, 0x0, 0x26, 0x0, 0x0, 0x5265, 0x0, @void, @value}, 0x20) syz_usb_control_io$printer(r0, 0x0, 0x0) 9.074803057s ago: executing program 3 (id=185): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x2}}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002240)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATX(r1, &(0x7f00000023c0)={0x130, 0x0, r2, {0x5, 0x0, 0x0, '\x00', {0x34, 0xffffffff, 0x100000001, 0x5, r5, r6, 0x8000, '\x00', 0xb23, 0x7f, 0x80000000, 0x1000, {0x5, 0x2}, {0x8001, 0x9}, {0x6, 0xfffffff9}, {0xc031, 0x7}, 0x7fff, 0x3, 0xffff, 0x100}}}, 0x130) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000001c0)=0x9) write$dsp(r0, &(0x7f0000000140)='u', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x20) 7.75527189s ago: executing program 3 (id=190): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x4, 0x314100) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2275, &(0x7f00000018c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c0000000000c8f0954ae3189839b732cbe35ae01c8db6b1cf16060d79df7bd8c3cbff5f427d65aaf94c1e6271a1a1dcccc877b48927a8ae9b3d112c975485b671eaad28bf69d3186c94f8c8b69192f8940804d7afdcb3c6b967758cddf987cbf1e063201798ee411a14b49b028091e9fad58f746109ddd713a4ca8881c3db9b6aebda1a4b94dd6575b4deca67462dcab74621eae743e07aab8db33a3c40606eaed60f4a1a205c5363ac1aa83abb5fbe3e0c637df329f8323f2441568766cad5f58126455512000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000800260000000000"], 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000b80)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @random="6f327cf1da53"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x7, 0x20}}}, 0x38) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000468502110000000802110a00001000000002000000"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000008c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @random="d95e00", {0x7, 0x81}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x2200, 0xe, @default, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x6, 0x0, {0x3, 0xe, 0x0, 0x380}, 0x300, 0x7, 0x2}}, [{0xdd, 0xc, "50e49e472139184939af2c7b"}, {0xdd, 0xe6, "b78e4b788101dc0b94f61950730484913b735ee13f613da7182a19c7e3ba328cb508001188d141e54cbefa8690a7eb1bee65a94f13773164667033c732819d8b45555d61357228baaf5dcc4f2cbda8a80c93c0ab8784ca8b9e95e5e96975915498614d97c25a6d4cf829b55a396bcc5aae76e0788eddffa49369012df36bfa822e958223bb6d4c4309971edfd30a17cba950a688406cb17a45da0e8d16ad5568a470cf3df9cdae5b55194be5a4fe74adc1857957b39ea49a5ea34e506011b91d94244ff8ef53441529070f56c8dc1b22a5eeb6da935c6d995dec85ba994cb527cc5496360f2d"}, {0xdd, 0xab, "15b6b1a4a53cefca744f113ff489eec2269168c574c657761721107a4bbcb59b8aaa9d4746dffea0395203d2326fc6582b65cdf30b19a968c51b9a8c65b0055e8a9153f85b1a4fbdc14909525e41fa1c3e4e83bc331cb27e72bc72cf3c7edb4f7a767cfd2485d60c883b5e55203ce3b25ae35f4524eff5e399b1362fcd08e8173fe5a6a9b5b95bd4de200f590bb4f51319f7d1fe8443ae460e048dcdca2b21d321e51e0d9caaec15771b1d"}, {0xdd, 0xd4, "96534034c4a9ae9ec9ca21f4b9519c364691e5f6c5dae86550f44ec2470be10456232871f433db53913e06b568cb24abe75a72b21c7dcad61565e17c0bdfb9a9f632450b8821bc100ebd510827066979770e21d74b828747efd31a1564a46f0ac2fa8d32a58dfd7ef3afef9ed213fc64a39b0d383ef59c82766f077345ddc743f86c51ecfdb2a89b89fe9351334e579250ecd3dc4a4e4d80c4aa9d310a47ca546d77725216cf4694bf505fc8c713cbcee6c0f76078f13a31b9d7baa53dafefd36bf691e2d545e3c3e2b5a02b71aef06a2a58214a"}, {0xdd, 0x6, "3fd2fee191ae"}]}, 0x2bf) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 7.69100596s ago: executing program 4 (id=191): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e71, 0x200d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in6=@private0, 0x0, 0xfffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0x0, 0x0, 0x2, 0x3}, {{@in6=@empty, 0x4d5, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffd}}, 0xe8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xa6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) sendmsg$can_j1939(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x1d, r3, 0x1, {0x2, 0xf0, 0x3}, 0xfd}, 0x18, &(0x7f0000000500)={&(0x7f0000000440)="6605551a119c6a3193689d5798bc046755ec6f2e2504eddbffe43f6e8444866635f332f3d15604363a319275657edac8861a597f92927721ce1a40e79822509e8802e35f7e7bc878d2be84e59995965ea2fbbe75fc0ec88edc76ea2a89dac2bda125418ae7dc9525d3825fe873089fdf9ab0522688d006ca461a89330f864e3f95736b8715fe6a46b1bb65ed521070fd1109470d36547d6a2124a7b5272c9613", 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x3, "f395a9"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.83489424s ago: executing program 3 (id=199): r0 = gettid() r1 = epoll_create1(0x80000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x20, 0x7800, 0x0, 0x2, {{0x1a, 0x4, 0x1, 0x2b, 0x68, 0x68, 0x0, 0x80, 0x4, 0x0, @private=0xa010102, @empty, {[@noop, @ssrr={0x89, 0x1b, 0x1d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @local, @broadcast, @multicast2, @loopback]}, @cipso={0x86, 0xd, 0x3, [{0x7, 0x7, "6378fecc2c"}]}, @timestamp={0x44, 0x28, 0xfe, 0x0, 0x3, [0xfffffff3, 0x5, 0x34, 0x3, 0xffff, 0x3, 0x68853ce7, 0x4, 0x5]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffeb4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) epoll_pwait(r1, &(0x7f0000000380)=[{}], 0x1, 0x9, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) readv(r4, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.960856059s ago: executing program 3 (id=201): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000a55866a8001048c0357c1e6ecc96b2fb6d31f3262cadbf86ac31cd9eada4674251dd68dc997570d3d8a267fb20c1def44e1e80b7c2b3e75012c9b193548aa474e44812976b8dc526194089a08e5beeadccd4901d15a6b500a196f5655d1f418b6b6a29fd03c399eb1ee8836c2f5e5f135c7f87e3db2a2ab427dd137c0300fb992ecbef385361dfaa552f59963ad2a30dd118fdbd7325fff85f8d0a2c0a40497b82b559b54385f0c1f7570feda271a358fb2f7d28c988cf4397996707d371e4531a1a3ccd6d23bf57c6cba32e3245817a762e4f1dab16ac4c5cd390f731124fd4d542833438347ac01bbd9129b476155a916eb2617acfdc06a3d4be2525457b6839128588753595797425978aeb4ee9df32e5b812912537baf31093d8b1bb4ba5584567adb9d38f8f4d92ee05012af962e04165b4c6a373ef09e7886f485438fbd4a5b56d2cb70b823ed0b10c03e10e1b30b16081806051f3718a7b51a95fa38919efe7369d215443838c8a3a10a5b4ca4f2c11345e4d8f2b76eceb2017be734a0d1334311d6a53d0b28cfca1c8292b695ae67149449d44772683d7b56c6a9600000000000000"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r7 = memfd_create(&(0x7f0000000840)='/dou!,\xd0W\xe4\x9b;6\xdc\xb6\f\x00\x00\x00\x00\x00\x00\x03\x87:\xbe\xf1\xe9\xdb\xae\xb0\x0e\x00\x00\x00w\x1di\x04\xfd\xc5\xe1\xca\xc6jd\xfds\f\x00\x00\x00\x00\x00\x00\x00\xcc\"3,\xc0l\x9a+tL\x92\xbbs\xd0q\xc9\xe2\xa8;\xd6\xb5P\x13\xb8?\xefZ\xcc\x84\xa1\xb4\xad\x848\a\xe2y\xb7\v\xd6v\x00\xe9\xe1\x814X\xa5\x85\x018\x82\xf8\x01\x00\x00\x00\x86j\x83l\xe0\xd7\x8cEN\a\x00\x00\x00\x87z\xc3,\x99@\x8b\x7f\f\xb4\xa1\x811\xe2)(e:\xe3\xb6I\xaa\xccje\x06;\x9e\x8e\x0ep\xb4%\xcd\x8e\xb6\'\x8b$\xee\x8f\xdf\x12z\x99\x97\x03\x88m\b\xa4\xb2\xa9\x11g9\xd5\xbc\x1d2\xe1\xee\xde\xc6\xc2Q\xc3\x18\xc5`\xae\x00\x80a^\xbf\xb9\xeb\xc4\x191\xday\xfce\x84.\xb4\xb8(\x13\x8a\x9a+\xab_\xe3\xf5IQ\xa1msBG4\x98\xddm\xd5\x02\x87\xb8\x03\xb5\x03\xbaj\xe7~S\xd7\xeb-\x98\x1b\x8eq]\x16\x9b,l\x06\x00\x00\x00\x87[\xe7\xe0j\x1a{x\xe5\xd0\r\xb9?\xa4\x10\xdf3\xfa[c \x81\x13-4\xf2v\x80\x12\xea\xc1u\x01\x9bY\x91\xb6\xad\x8f\xb8\xc6\xfb\x91\x01#\xd7g<)\xc6!\xd0\x96#\xf9{\xd3o\xf1\xbdJwk\xe0\xbbL,\x19\x8c\xb7,Y\xb9\x8e\xe98\x1f3\xdfS\\\\{\xc0\xa1\xe8i\xe8\xbcvz\xc3\x90H\xdf\xf7W\x7f+\xca\x00\xfc\xed:\xf3\\\x0fVr\x9f=\xdf\xba\xdb\x16\x8bAy\xc6\xeb\xd1\x00\xea\xb8\xc0\xd1mj\xaa\xd5\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00~\xea\x03\x12\xa2q)\xa0kUJh\x8fy\x96\t\xb8\xa4\xdaW$\x00\x00\x00\x00\x95\x81l*\x872!\xc7\x18\x12\x8f\x1a\xfa\xe1\x85;4L\x81\xe0\x069\\\x1b&\xca\x904(wZ\xb6\x00s\x89\xb6\x9a\x80\x97\x85Y2/\x9c\xfa\xaf\xdeL\xedM\x8f\x97\xba\x00\xe6\xaf\a-`\xb7\xec@$\x9bb\x8b\x89i\x02\x88\xad~\xf6\x1b\x95\xd8\nv\xb8\xfaG\xd8\xa5\xa7\xe1W\xa1\x8b\xf2i&$\xab\xeb\x80_\x92\xf25\x90] \xbb\xc7\v{\xd2\xfe\x80\xb1\xaa\xd8\x94\xbc\x10\bl;\xe4\xe1s\x8f\x04f\x87\vX\x01\x1d\xa8\\\x02\xf0\xad+\x14\xd0\xa3\xdbF\x88\xfa\xedO\x8e\xf8]\xc3,Lt\x8b\x14 \x8an\x06<1qD\xf1Fn]\xcb\xe7\x0f1\x7f\x01\xcc6d\xee\xa78=\xe1\x86q\xe2k\xa6h/\xa5\xd7\x85\xcb\xcc\xbb]\x8e\xe5f]V*\xcd\xe4\xa8x\x06\xd9\xf9R\x91\xda\x14e\x8e\xb4\xc9q\xae\xe8U\xec\xd6T<\xe0\xb0\xac\xd9\xcf6A\x8e\xcca!\xb7\xfb\x97;\xea%L6\xd2}\xff4}\x8c+\xda5\x027P\xfd+w\xdc\xb7\xbe\xdfzVB', 0x2) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) fallocate(r7, 0x0, 0x0, 0x200401) fallocate(r7, 0x0, 0xe8a, 0x4) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x303102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 4.481651017s ago: executing program 4 (id=203): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x1, 0x2b00, 'syz1\x00', &(0x7f00000004c0)=['$\xd1'], 0x2}) 4.360025295s ago: executing program 4 (id=205): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J]\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000400)={0x24, "f7f0bfbd5d6cba34eecf03856eac0cd3e5c4112f9199a86391b433cd84011be96633656553a96e1ce6e04f51ebaf2f58eda0d59cb9b40c85eaa6502ace56efc1b1d3c9caac682065399cd8f8590d4f6319de1f238c033bd0e402d81bc9d244e8bb9a4e07732d38108dd2c9405f1453f17340433ef57f36bb7b762dba7ed57009"}) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000011ff03000001"], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000100), 0xfef0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "060e12a73f3adbca", "4bea0911722d68298c882268c45c184aa25aea2db954c616890ca823a30b58a7", "0173b0e9", "4149e38bea18beae"}, 0x38) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000002f9078ac1e0001e00000012001880b009c90780100000000000000dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d6a7710ebcf55344a104de43d0bc47291693c49ab6ee76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b54e3bc06c34c945e45e27e747494b407f256d9d"], 0x0) splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0) r5 = fsopen(&(0x7f0000000000)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYRES64], 0x8) 4.172346206s ago: executing program 0 (id=208): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[], 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', r4, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x4, {0xa, 0x4e20, 0x2a, @empty, 0x1}}}, 0x32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="800c00000000000000000000fedbdf251d01060008000900a6bbe82bc963e652a3cc5e80373bd0d3ceaac9becb5588d2bb3257837d5a94345b710f0ff254d2d21f61ec2f49ff2b3cee1199e7e6681ca6ddef128f2a6c75f05df9e5be5d65f041a620ee7b1d865c40bee48474c44edf88492d7748c94664f607b0ae2f0f268a77af8451d970fbd25403af374e38606493fbd77b40164d5b981a7d14b7045c3d109e9e79b1bffdd5420829a565f571515ac578c4f789b4aa2e2d8ffc936268de0a2062637960c96119f030f8", @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES32=r4, @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$tipc(r7, 0x0, 0x20000084) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES8=r5, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000000240)={r10}, &(0x7f00000000c0)=0x8) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r12, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x0, r11, 0x0}]) 4.031990349s ago: executing program 3 (id=209): r0 = getpid() socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59", 0x4f) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mknod$loop(&(0x7f0000000240)='./cgroup/pids.max\x00', 0x1000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r2, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r6, &(0x7f00000000c0)=r0, 0x12) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800009, 0x4010, r1, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 3.916127766s ago: executing program 1 (id=210): open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) syz_clone(0x20001000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000240)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_request={0x14}}}}}, 0x0) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.818886653s ago: executing program 1 (id=211): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x8000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)) (async) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) semget$private(0x0, 0x2, 0x120) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) 3.541878475s ago: executing program 1 (id=212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x8000000000000000}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380), &(0x7f0000000400)='./file1\x00', 0x8, 0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 3.36295893s ago: executing program 4 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x40}], 0x1, &(0x7f0000000440)={0x77359400}, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000280)={@local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x48, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000300)={&(0x7f0000000bc0)={{@host, 0xec}, {@local, 0x4}, 0x400, "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"}, 0x418, 0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) unshare(0x62040200) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x7f, 0x3, 0x4, 0x0, 0x9}) 3.233279913s ago: executing program 1 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0xff7c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x101000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r1, 0x2, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x12, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee1, 0x8030, 0xffffffffffffffff, 0xf8ef6000) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40142, 0x0) write$6lowpan_enable(r6, &(0x7f0000000400)='0', 0x1) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffff000}}}}, 0x298) r7 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000003140)='./file0/../file0/../file0\x00', 0x0, 0x20, 0x0) r8 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205647, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @p_u32=0x0}}) ioctl$MEDIA_IOC_G_TOPOLOGY(r7, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.40564481s ago: executing program 2 (id=216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x20}, 0x14}}, 0x0) 2.364431781s ago: executing program 1 (id=217): r0 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x80080, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}]}}}]}, 0x44}}, 0x8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) kexec_load(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x80000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0xe4a1be673b6eb22f) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6, 0x0, 0x7ff}, 0x18) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r7, &(0x7f0000000080)=""/75, 0x8e, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, 0x0, 0x0, 0x3}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) eventfd(0x100) r9 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0) read$alg(r9, &(0x7f00000001c0)=""/68, 0x44) unshare(0x20060000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.345234137s ago: executing program 2 (id=218): userfaultfd(0x80801) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) syz_usb_connect_ath9k(0x3, 0x1c, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0xffffffffff600000) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r1, &(0x7f0000000180)=""/243, 0xf3) 1.654988872s ago: executing program 2 (id=219): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001200)=0x11) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x8, 0x8f}, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='1\x00', 0xffffff4a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = syz_open_pts(r4, 0x801) r7 = dup3(r6, r4, 0x0) write$UHID_INPUT(r7, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1.374254668s ago: executing program 4 (id=220): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000001c0)={0x0, 0x378, 0xaa38, '\x00', &(0x7f0000000140)=0x3}) openat$incfs(r4, &(0x7f00000002c0)='.log\x00', 0x96003, 0x43) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000000c0)={0x30, 0x3, 0x1, 'queue1\x00', 0x8000}) 1.332361995s ago: executing program 3 (id=221): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000080)={0x0, 0x3, 0x86, {0x86, 0xd, "252d0ae5f0c23ca7100b421187830aa506ea4534f7bc2e5647266a736b1b897dcf2383dbf2b5c22495bb8c30bd929bf940a8d808c93bb1f5f5f1e5c74b12c357e08a0037d64dc49f0cf93e59a059299979497ffef8568798f794f9122786e31890f59ff3a24a7f1c2f77af7eb704e1b73cb889d15b069210eae451c1b2e375aa0e77531a"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x47, @string={0x47, 0x3, "27baa8b489ee95df82b2ed0531202fcb567cf98cd433126745cda96194e66c55c2430e85eebed65db1f55ae8665e76b6a588c280386965da999900f9cf6a1ffdc762dfef79"}}, 0x0, 0x0}, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0xa, 0x75, {0x75, 0x11, "2c7ce9a0f1fb15385ff31602ad7d8217d722a10f22a562424b98c428fd00d7e38e46d33e871c719f6b03b97572f7e0d6b6705b19aa8672a49eac56389441f626e3d5176933b8dac1709e1ad8d1e75acf68d9162ef0b8728b8c1650e9182e20e5250cded52a55b5833e084acbd7ba3dafef825c"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000100)={0x40, 0x3, 0x18, "920c25d02f0278093dc0a3a795910b0a9584a254cabaec46"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x8}}) 1.263304634s ago: executing program 2 (id=222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$NBD_CLEAR_SOCK(r1, 0x125f) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$NBD_DISCONNECT(r2, 0xab08) (async) ioctl$NBD_CLEAR_SOCK(r1, 0x125f) (async) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) 1.262728411s ago: executing program 1 (id=223): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x9000000}) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 1.019101021s ago: executing program 0 (id=224): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1c, &(0x7f0000000040)=[{0x280, 0x8, 0x9, 0x7f}, {0xff, 0x4, 0x8b, 0xd24c}, {0x7fff, 0xfe, 0x2, 0x401}, {0x1, 0x0, 0xca, 0xfffffffa}, {0x7, 0x9, 0x9, 0x4}, {0x8, 0x80, 0x0, 0x10000}, {0x3, 0x0, 0xd, 0x5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x22c}], 0x1) 1.008051076s ago: executing program 2 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open_by_handle_at(0xffffffffffffffff, &(0x7f00000021c0)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000303f0001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r5, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000040)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) read$FUSE(r1, &(0x7f0000005cc0)={0x2020}, 0x2020) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000002180)={@rand_addr=0x64010101, @rand_addr=0x64010102}) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) 972.283121ms ago: executing program 0 (id=226): socket$nl_rdma(0x10, 0x3, 0x14) 870.93046ms ago: executing program 0 (id=227): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setpgid(0x0, r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x1, 0x4, 0x50e8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf5, r6, 0x1, 0x0, 0x6, @remote}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2000c0c1) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000000) syz_emit_ethernet(0x56, &(0x7f00000008c0)={@local, @local, @void, {@canfd={0xd, {{0x3, 0x1, 0x0, 0x1}, 0x37, 0x0, 0x0, 0x0, "bb446dee5cd15567f1a507dab02dcca3c6eee7b20123a899d6f1fcb326736fe208ffcaf2f3d4ea704b74c021ca73fc79b5f24430ae368917a70fe46003ed1a07"}}}}, 0x0) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000c40)="a233d3", 0x3}], 0x1}}], 0x1, 0x804) r8 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x7806, 0x10, 0x0, 0x7, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x64, 0x0, 0x1, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@noop]}}}}}) recvfrom$packet(r8, &(0x7f00000000c0)=""/125, 0x7d, 0x1, &(0x7f0000000280)={0x11, 0x17, r9, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r4, 0x0, 0x20000004}, 0x20) 304.631674ms ago: executing program 0 (id=228): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe04a10a0015c00200142603600e120800080024000000a86286cf6c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db701000000400ad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) writev(r2, &(0x7f0000001700)=[{&(0x7f0000000240)="906a", 0x2}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x15f703, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000403f5f201d0650c16fce0102030109021b00010000100509043300011870fd00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xa8, &(0x7f0000000080)=ANY=[@ANYBLOB="a200004ef3b125948ef66b0ee0b3d41b1b", @ANYRES8=r7]) ftruncate(r6, 0xee72) sendfile(r5, r6, 0x0, 0x8000fffffffe) r9 = fcntl$dupfd(r5, 0x0, r6) r10 = dup3(r4, r9, 0x80000) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x19) mount$fuse(0x0, 0x0, 0x0, 0x80018, 0x0) 0s ago: executing program 2 (id=229): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0xb, 0x3, [{0x7, 0x5, "e0f493"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) connect$inet6(r4, 0x0, 0xd7cc5d556c3ede87) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x2000000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 44.081421][ T29] audit: type=1400 audit(1736794734.531:88): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 44.084517][ T5806] cgroup: Unknown subsys name 'net' [ 44.104204][ T29] audit: type=1400 audit(1736794734.531:89): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.131650][ T29] audit: type=1400 audit(1736794734.571:90): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 44.298896][ T5806] cgroup: Unknown subsys name 'cpuset' [ 44.305944][ T5806] cgroup: Unknown subsys name 'rlimit' [ 44.449348][ T29] audit: type=1400 audit(1736794734.901:91): avc: denied { setattr } for pid=5806 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.473064][ T29] audit: type=1400 audit(1736794734.901:92): avc: denied { create } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.498829][ T29] audit: type=1400 audit(1736794734.901:93): avc: denied { write } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.519290][ T29] audit: type=1400 audit(1736794734.901:94): avc: denied { read } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.535715][ T5809] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.539725][ T29] audit: type=1400 audit(1736794734.901:95): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 44.572974][ T29] audit: type=1400 audit(1736794734.901:96): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 44.596313][ T29] audit: type=1400 audit(1736794734.931:97): avc: denied { read } for pid=5482 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 45.364689][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.690475][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.710264][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.718925][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.727818][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.728219][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.735475][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.742553][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.756956][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.764628][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.764776][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.772593][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.786939][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.789320][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.794334][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.807976][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.808517][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.822369][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.829564][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.829827][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.841686][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.851210][ T5139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.856514][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.858351][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.866056][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.880233][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.881153][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.887255][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.901706][ T5139] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.903507][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 48.916843][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 49.077395][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 49.179384][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 49.204457][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.212365][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.219772][ T5817] bridge_slave_0: entered allmulticast mode [ 49.226144][ T5817] bridge_slave_0: entered promiscuous mode [ 49.264985][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 49.275990][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.283358][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.290890][ T5817] bridge_slave_1: entered allmulticast mode [ 49.297767][ T5817] bridge_slave_1: entered promiscuous mode [ 49.350970][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.362143][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.384320][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 49.416518][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.423582][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.431301][ T5824] bridge_slave_0: entered allmulticast mode [ 49.437925][ T5824] bridge_slave_0: entered promiscuous mode [ 49.461122][ T5817] team0: Port device team_slave_0 added [ 49.467188][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.474236][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.481427][ T5824] bridge_slave_1: entered allmulticast mode [ 49.488839][ T5824] bridge_slave_1: entered promiscuous mode [ 49.508185][ T5817] team0: Port device team_slave_1 added [ 49.524200][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.532934][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.540155][ T5829] bridge_slave_0: entered allmulticast mode [ 49.547902][ T5829] bridge_slave_0: entered promiscuous mode [ 49.556095][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.563214][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.570402][ T5829] bridge_slave_1: entered allmulticast mode [ 49.577099][ T5829] bridge_slave_1: entered promiscuous mode [ 49.601778][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.609139][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.635871][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.649169][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.670895][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.677885][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.703848][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.715754][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.738438][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.753437][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.772692][ T5824] team0: Port device team_slave_0 added [ 49.784365][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.791565][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.798779][ T5830] bridge_slave_0: entered allmulticast mode [ 49.805095][ T5830] bridge_slave_0: entered promiscuous mode [ 49.823072][ T5829] team0: Port device team_slave_0 added [ 49.829770][ T5824] team0: Port device team_slave_1 added [ 49.837014][ T5829] team0: Port device team_slave_1 added [ 49.847309][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 49.855835][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.864754][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.872125][ T5830] bridge_slave_1: entered allmulticast mode [ 49.879044][ T5830] bridge_slave_1: entered promiscuous mode [ 49.914755][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.921732][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.947811][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.960076][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.967241][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.993543][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.016463][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.025821][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.032848][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.059064][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.084500][ T5817] hsr_slave_0: entered promiscuous mode [ 50.090616][ T5817] hsr_slave_1: entered promiscuous mode [ 50.104713][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.117811][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.124742][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.150776][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.217837][ T5830] team0: Port device team_slave_0 added [ 50.227668][ T5829] hsr_slave_0: entered promiscuous mode [ 50.234031][ T5829] hsr_slave_1: entered promiscuous mode [ 50.240479][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.248345][ T5829] Cannot create hsr debugfs directory [ 50.253849][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.261419][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.268636][ T5816] bridge_slave_0: entered allmulticast mode [ 50.275001][ T5816] bridge_slave_0: entered promiscuous mode [ 50.293175][ T5830] team0: Port device team_slave_1 added [ 50.310006][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.317207][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.324276][ T5816] bridge_slave_1: entered allmulticast mode [ 50.330788][ T5816] bridge_slave_1: entered promiscuous mode [ 50.355382][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.362495][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.388631][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.401145][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.408200][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.434316][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.454444][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.465849][ T5824] hsr_slave_0: entered promiscuous mode [ 50.472921][ T5824] hsr_slave_1: entered promiscuous mode [ 50.479110][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.486830][ T5824] Cannot create hsr debugfs directory [ 50.507961][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.550223][ T5830] hsr_slave_0: entered promiscuous mode [ 50.557324][ T5830] hsr_slave_1: entered promiscuous mode [ 50.563224][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.570991][ T5830] Cannot create hsr debugfs directory [ 50.584871][ T5816] team0: Port device team_slave_0 added [ 50.592093][ T5816] team0: Port device team_slave_1 added [ 50.641085][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.650272][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.676968][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.689504][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.696663][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.722769][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.830251][ T5816] hsr_slave_0: entered promiscuous mode [ 50.837155][ T5816] hsr_slave_1: entered promiscuous mode [ 50.843146][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.850816][ T5816] Cannot create hsr debugfs directory [ 50.863026][ T5817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.887698][ T5817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.897062][ T5819] Bluetooth: hci0: command tx timeout [ 50.903091][ T5817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.922887][ T5817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.948047][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.961495][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.977118][ T5819] Bluetooth: hci1: command tx timeout [ 50.980877][ T5834] Bluetooth: hci2: command tx timeout [ 50.982703][ T5819] Bluetooth: hci4: command tx timeout [ 50.988175][ T5828] Bluetooth: hci3: command tx timeout [ 51.003380][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.020233][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.052348][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 51.065646][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 51.081631][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 51.101786][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 51.132033][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.160037][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.168500][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.189468][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.239986][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.248386][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.262011][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.272353][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.302469][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.335097][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.347838][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.362136][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.376796][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.383946][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.398341][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.405401][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.419955][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.443814][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.450885][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.468800][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.484107][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.498825][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.505879][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.524801][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.531861][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.550209][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.558531][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.565574][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.600874][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.613185][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.624696][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 51.624707][ T29] audit: type=1400 audit(1736794742.071:111): avc: denied { sys_module } for pid=5817 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.678499][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.689709][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.696806][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.707704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.714752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.772951][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.809985][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.849953][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.857070][ T5882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.878515][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.885614][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.941577][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.970773][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.993862][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.064876][ T5817] veth0_vlan: entered promiscuous mode [ 52.073868][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.088012][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.118373][ T5817] veth1_vlan: entered promiscuous mode [ 52.133547][ T5830] veth0_vlan: entered promiscuous mode [ 52.164376][ T5830] veth1_vlan: entered promiscuous mode [ 52.187842][ T5829] veth0_vlan: entered promiscuous mode [ 52.213513][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.223958][ T5830] veth0_macvtap: entered promiscuous mode [ 52.235292][ T5829] veth1_vlan: entered promiscuous mode [ 52.244252][ T5817] veth0_macvtap: entered promiscuous mode [ 52.257197][ T5830] veth1_macvtap: entered promiscuous mode [ 52.275125][ T5817] veth1_macvtap: entered promiscuous mode [ 52.291787][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.338616][ T5829] veth0_macvtap: entered promiscuous mode [ 52.349204][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.360830][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.372442][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.380960][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.391215][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.400572][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.409381][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.418682][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.429303][ T5829] veth1_macvtap: entered promiscuous mode [ 52.440893][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.452290][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.463245][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.472169][ T5816] veth0_vlan: entered promiscuous mode [ 52.489053][ T5817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.499172][ T5817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.508083][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.516877][ T5817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.535579][ T5816] veth1_vlan: entered promiscuous mode [ 52.559281][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.570096][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.580994][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.591881][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.603192][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.612711][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.623261][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.633256][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.643759][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.654425][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.694600][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.703540][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.712559][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.721714][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.755359][ T5816] veth0_macvtap: entered promiscuous mode [ 52.770834][ T5824] veth0_vlan: entered promiscuous mode [ 52.790181][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.798419][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.819690][ T5816] veth1_macvtap: entered promiscuous mode [ 52.833191][ T5824] veth1_vlan: entered promiscuous mode [ 52.841061][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.851506][ T5824] veth0_macvtap: entered promiscuous mode [ 52.858449][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.878694][ T5824] veth1_macvtap: entered promiscuous mode [ 52.904767][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.916497][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.930528][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.941460][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.951515][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.962297][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.973261][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.982157][ T5828] Bluetooth: hci0: command tx timeout [ 52.984300][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.996355][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.002291][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.007041][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.020926][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.034050][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.044078][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.054531][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.065045][ T5828] Bluetooth: hci4: command tx timeout [ 53.065972][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.071054][ T5834] Bluetooth: hci1: command tx timeout [ 53.078084][ T5139] Bluetooth: hci3: command tx timeout [ 53.083300][ T5828] Bluetooth: hci2: command tx timeout [ 53.098131][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.106991][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.115679][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.124401][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.141558][ T5882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.149742][ T5882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.159424][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.170102][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.181147][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.191660][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.201740][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.212177][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.222587][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.233073][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.244200][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.256403][ T29] audit: type=1400 audit(1736794743.701:112): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/root/syzkaller.uncPwO/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 53.287184][ T29] audit: type=1400 audit(1736794743.701:113): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.288468][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.310882][ T29] audit: type=1400 audit(1736794743.711:114): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/root/syzkaller.uncPwO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.332550][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.356510][ T29] audit: type=1400 audit(1736794743.711:115): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.378905][ T29] audit: type=1400 audit(1736794743.711:116): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/root/syzkaller.uncPwO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.382387][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.416248][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.426067][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.426373][ T29] audit: type=1400 audit(1736794743.711:117): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/root/syzkaller.uncPwO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.438048][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.468520][ T29] audit: type=1400 audit(1736794743.711:118): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.474368][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.496956][ T29] audit: type=1400 audit(1736794743.801:119): avc: denied { mounton } for pid=5830 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 53.504102][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.526942][ T29] audit: type=1400 audit(1736794743.801:120): avc: denied { mount } for pid=5830 comm="syz-executor" name="/" dev="gadgetfs" ino=7052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 53.565734][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.583270][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 53.584157][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.605799][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.673276][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.682029][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.691095][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.700024][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.773956][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.805146][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.850139][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.858510][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.872626][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.880522][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.941617][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.952914][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.964420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.979314][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.293551][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 54.880858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 54.889667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.377856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.386895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 55.397649][ T5922] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.408151][ T5834] Bluetooth: hci0: command tx timeout [ 55.413522][ T5834] Bluetooth: hci3: command tx timeout [ 55.419350][ T5834] Bluetooth: hci4: command tx timeout [ 55.424711][ T5834] Bluetooth: hci1: command tx timeout [ 55.430472][ T5834] Bluetooth: hci2: command tx timeout [ 56.134601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.143227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.151756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.212148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.231736][ T5929] sit0: entered promiscuous mode [ 56.239418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.556233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 56.667298][ T5929] netlink: 'syz.4.8': attribute type 1 has an invalid length. [ 56.685293][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 56.685307][ T29] audit: type=1400 audit(1736794747.131:180): avc: denied { ioctl } for pid=5932 comm="syz.3.9" path="socket:[8488]" dev="sockfs" ino=8488 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.867147][ T5929] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8'. [ 56.885689][ T29] audit: type=1400 audit(1736794747.321:181): avc: denied { read write } for pid=5932 comm="syz.3.9" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.910469][ T5929] syz.4.8 (5929) used greatest stack depth: 20880 bytes left [ 56.916662][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.036398][ T29] audit: type=1400 audit(1736794747.331:182): avc: denied { open } for pid=5932 comm="syz.3.9" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.141953][ T5933] binder: 5932:5933 ioctl c00c620f 20000680 returned -22 [ 57.169185][ T29] audit: type=1400 audit(1736794747.331:183): avc: denied { create } for pid=5932 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.265895][ T5949] FAULT_INJECTION: forcing a failure. [ 57.265895][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.279019][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz.1.12 Not tainted 6.13.0-rc7-syzkaller #0 [ 57.287780][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.297834][ T5949] Call Trace: [ 57.301109][ T5949] [ 57.304035][ T5949] dump_stack_lvl+0x16c/0x1f0 [ 57.308723][ T5949] should_fail_ex+0x497/0x5b0 [ 57.313410][ T5949] _copy_from_user+0x2e/0xd0 [ 57.317999][ T5949] copy_msghdr_from_user+0x99/0x160 [ 57.323196][ T5949] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 57.329010][ T5949] ___sys_sendmsg+0xff/0x1e0 [ 57.333600][ T5949] ? __pfx____sys_sendmsg+0x10/0x10 [ 57.338813][ T5949] ? __pfx_lock_release+0x10/0x10 [ 57.343839][ T5949] ? trace_lock_acquire+0x14e/0x1f0 [ 57.349053][ T5949] ? __fget_files+0x206/0x3a0 [ 57.353758][ T5949] __sys_sendmsg+0x16e/0x220 [ 57.358361][ T5949] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.363493][ T5949] do_syscall_64+0xcd/0x250 [ 57.368056][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.373959][ T5949] RIP: 0033:0x7fd586185d29 [ 57.378377][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.397987][ T5949] RSP: 002b:00007fd586eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.406405][ T5949] RAX: ffffffffffffffda RBX: 00007fd586376160 RCX: 00007fd586185d29 [ 57.414370][ T5949] RDX: 0000000000000800 RSI: 00000000200004c0 RDI: 0000000000000007 [ 57.422340][ T5949] RBP: 00007fd586eff090 R08: 0000000000000000 R09: 0000000000000000 [ 57.430305][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.438271][ T5949] R13: 0000000000000000 R14: 00007fd586376160 R15: 00007ffca215ecb8 [ 57.446261][ T5949] [ 57.457074][ T5828] Bluetooth: hci2: command tx timeout [ 57.463179][ T5828] Bluetooth: hci1: command tx timeout [ 57.468158][ T5834] Bluetooth: hci4: command tx timeout [ 57.471250][ T5828] Bluetooth: hci3: command tx timeout [ 57.475185][ T5139] Bluetooth: hci0: command tx timeout [ 57.483050][ T29] audit: type=1400 audit(1736794747.331:184): avc: denied { connect } for pid=5932 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.507092][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 57.518209][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.530014][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 57.542298][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 57.556014][ T8] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 57.565207][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.577796][ T8] usb 1-1: config 0 descriptor?? [ 57.584200][ T5922] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.592485][ T29] audit: type=1400 audit(1736794747.331:185): avc: denied { name_connect } for pid=5932 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 57.622985][ T29] audit: type=1400 audit(1736794747.331:186): avc: denied { listen } for pid=5932 comm="syz.3.9" lport=48487 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.647019][ T29] audit: type=1400 audit(1736794747.381:187): avc: denied { accept } for pid=5932 comm="syz.3.9" lport=48487 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.671471][ T29] audit: type=1400 audit(1736794747.591:188): avc: denied { ioctl } for pid=5932 comm="syz.3.9" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.716669][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 57.722718][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 57.857441][ T5908] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 57.896386][ T29] audit: type=1400 audit(1736794748.311:189): avc: denied { write } for pid=5952 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.041091][ T8] usb 1-1: USB disconnect, device number 2 [ 58.172648][ T5962] syz.0.16: attempt to access beyond end of device [ 58.172648][ T5962] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 58.310229][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 58.352760][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.393603][ T5962] syz.0.16: attempt to access beyond end of device [ 58.393603][ T5962] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 58.409086][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 58.419849][ T5962] syz.0.16: attempt to access beyond end of device [ 58.419849][ T5962] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 58.434041][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 58.443892][ T5962] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 58.454768][ T5962] UDF-fs: Scanning with blocksize 512 failed [ 58.464339][ T5908] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 58.481582][ T5908] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 58.489902][ T5908] usb 5-1: Manufacturer: syz [ 58.500918][ T5962] syz.0.16: attempt to access beyond end of device [ 58.500918][ T5962] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 58.524335][ T5908] usb 5-1: config 0 descriptor?? [ 58.584025][ T5962] syz.0.16: attempt to access beyond end of device [ 58.584025][ T5962] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 58.707100][ T5873] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.717872][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 58.741915][ T5962] syz.0.16: attempt to access beyond end of device [ 58.741915][ T5962] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 58.776814][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 58.796234][ T5962] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 58.856404][ T5962] UDF-fs: Scanning with blocksize 1024 failed [ 58.902406][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 58.917322][ T5873] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 58.946374][ T5873] usb 4-1: config 0 has no interface number 0 [ 59.012499][ T5873] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 59.042312][ T5962] syz.0.16: attempt to access beyond end of device [ 59.042312][ T5962] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 59.072866][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.094741][ T5873] usb 4-1: Product: syz [ 59.107154][ T5873] usb 4-1: Manufacturer: syz [ 59.111780][ T5873] usb 4-1: SerialNumber: syz [ 59.183574][ T6019] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 59.193031][ T6019] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 59.345653][ T5962] syz.0.16: attempt to access beyond end of device [ 59.345653][ T5962] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 59.371920][ T5908] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 59.393251][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 59.394120][ T5908] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 59.425214][ T5962] syz.0.16: attempt to access beyond end of device [ 59.425214][ T5962] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 59.443507][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 59.450502][ T5908] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 59.460375][ T5908] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 59.467745][ T5908] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 59.482086][ T5908] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 59.495315][ T5962] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 59.501796][ T5873] usb 4-1: config 0 descriptor?? [ 59.511361][ T5962] UDF-fs: Scanning with blocksize 2048 failed [ 59.519071][ T5962] syz.0.16: attempt to access beyond end of device [ 59.519071][ T5962] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 59.532810][ T5873] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 59.561500][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 59.583787][ T5908] usb 5-1: USB disconnect, device number 2 [ 59.602501][ T5962] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 59.612230][ T5962] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 59.620842][ T5962] UDF-fs: Scanning with blocksize 4096 failed [ 59.627823][ T5962] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 59.936515][ T6027] netlink: 'syz.0.19': attribute type 9 has an invalid length. [ 59.944160][ T6027] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.19'. [ 60.302406][ T973] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.332142][ T6025] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 60.340168][ T6025] netlink: 216 bytes leftover after parsing attributes in process `syz.3.15'. [ 60.349212][ T5965] netlink: 'syz.3.15': attribute type 1 has an invalid length. [ 60.357145][ T5965] netlink: 216 bytes leftover after parsing attributes in process `syz.3.15'. [ 60.370289][ T5965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 60.458641][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 60.471884][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.494784][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.749213][ T5873] gspca_spca1528: reg_w err -110 [ 60.776404][ T5873] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 60.781855][ T973] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 60.804546][ T5873] usb 4-1: USB disconnect, device number 2 [ 61.161405][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.171405][ T6039] vlan2: entered promiscuous mode [ 61.186979][ T973] usb 3-1: config 0 descriptor?? [ 61.194416][ T6039] vlan2: entered allmulticast mode [ 61.203493][ T6039] vlan0: entered allmulticast mode [ 61.232317][ T6039] veth0_vlan: entered allmulticast mode [ 61.246338][ T6039] vlan0: entered promiscuous mode [ 61.255890][ T6039] team0: Port device vlan2 added [ 61.396912][ T5873] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 61.509783][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 61.576400][ T5873] usb 1-1: Using ep0 maxpacket: 16 [ 61.636613][ T5872] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.686544][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 61.686560][ T29] audit: type=1400 audit(1736794752.141:217): avc: denied { setopt } for pid=6020 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.793715][ T5873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 61.804919][ T5873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 61.809768][ T6051] warning: `syz.1.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.817921][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 61.838312][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.866787][ T5873] usb 1-1: config 0 descriptor?? [ 61.905710][ T29] audit: type=1400 audit(1736794752.321:218): avc: denied { create } for pid=6041 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.965021][ T29] audit: type=1400 audit(1736794752.401:219): avc: denied { create } for pid=6020 comm="syz.2.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.991503][ T5872] usb 5-1: config 127 has an invalid interface number: 244 but max is 0 [ 62.011941][ T5872] usb 5-1: config 127 has no interface number 0 [ 62.024496][ T5872] usb 5-1: config 127 interface 244 altsetting 2 bulk endpoint 0xE has invalid maxpacket 32 [ 62.031919][ T29] audit: type=1400 audit(1736794752.461:220): avc: denied { create } for pid=6043 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.053940][ T5872] usb 5-1: config 127 interface 244 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 4 [ 62.053968][ T5872] usb 5-1: config 127 interface 244 has no altsetting 0 [ 62.073376][ T29] audit: type=1400 audit(1736794752.461:221): avc: denied { accept } for pid=6043 comm="syz.3.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 62.106818][ T5872] usb 5-1: New USB device found, idVendor=0f0d, idProduct=4bf1, bcdDevice=55.2b [ 62.129154][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.145507][ T5872] usb 5-1: Product: syz [ 62.154188][ T5872] usb 5-1: Manufacturer: syz [ 62.159905][ T5872] usb 5-1: SerialNumber: syz [ 62.171366][ T6046] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 62.189343][ T6046] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 62.244938][ T6055] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 62.378516][ T5873] logitech 0003:046D:C623.0002: item fetching failed at offset 0/3 [ 62.389921][ T5873] logitech 0003:046D:C623.0002: parse failed [ 62.396154][ T5873] logitech 0003:046D:C623.0002: probe with driver logitech failed with error -22 [ 62.521622][ T29] audit: type=1400 audit(1736794752.941:222): avc: denied { read } for pid=6054 comm="syz.3.26" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.136445][ T29] audit: type=1400 audit(1736794752.941:223): avc: denied { open } for pid=6054 comm="syz.3.26" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.159409][ T29] audit: type=1400 audit(1736794753.591:224): avc: denied { read } for pid=6058 comm="syz.1.27" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 63.182801][ T29] audit: type=1400 audit(1736794753.591:225): avc: denied { open } for pid=6058 comm="syz.1.27" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 63.206509][ T5872] usb 5-1: USB disconnect, device number 3 [ 63.225360][ T29] audit: type=1400 audit(1736794753.671:226): avc: denied { setcheckreqprot } for pid=6058 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.298535][ T973] usbhid 3-1:0.0: can't add hid device: -71 [ 63.304723][ T973] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 63.314519][ T973] usb 3-1: USB disconnect, device number 2 [ 63.624864][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 63.655472][ T6067] netlink: 48 bytes leftover after parsing attributes in process `syz.2.30'. [ 63.664806][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 63.683884][ T6067] vlan2: entered allmulticast mode [ 63.830534][ T5873] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 64.818622][ T5908] usb 1-1: USB disconnect, device number 3 [ 65.556153][ T5873] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.611799][ T5873] usb 2-1: not running at top speed; connect to a high speed hub [ 65.639974][ T5873] usb 2-1: config 9 has an invalid interface number: 198 but max is 0 [ 65.651877][ T5873] usb 2-1: config 9 has no interface number 0 [ 65.665004][ T5873] usb 2-1: config 9 interface 198 has no altsetting 0 [ 65.678792][ T5873] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=34.be [ 65.692029][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.704575][ T5873] usb 2-1: Product: syz [ 65.712386][ T5873] usb 2-1: Manufacturer: syz [ 65.718423][ T5873] usb 2-1: SerialNumber: syz [ 65.800143][ T5908] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 66.046414][ T5860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.092715][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.511600][ T5908] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.524155][ T5908] usb 1-1: config 1 has no interface number 0 [ 66.532863][ T5908] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.544078][ T5908] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 66.556780][ T5908] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.565973][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.574070][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 66.582644][ T5860] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 66.590764][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.602384][ T5908] usb 1-1: Product: syz [ 66.606965][ T5860] usb 4-1: config 0 has no interface number 0 [ 66.613152][ T5908] usb 1-1: Manufacturer: syz [ 66.618110][ T5860] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 66.629027][ T5908] usb 1-1: SerialNumber: syz [ 66.636924][ T5860] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.655312][ T5860] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 66.671084][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.679631][ T5860] usb 4-1: Product: syz [ 66.683881][ T5860] usb 4-1: Manufacturer: syz [ 66.689354][ T5860] usb 4-1: SerialNumber: syz [ 66.715280][ T5860] usb 4-1: config 0 descriptor?? [ 66.723153][ T6104] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 66.734166][ T5860] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 66.742358][ T5860] usb 4-1: invalid MIDI in EP 0 [ 66.774344][ T5860] snd-usb-audio 4-1:0.16: probe with driver snd-usb-audio failed with error -22 [ 66.824904][ T973] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.832312][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.966283][ T973] usb 5-1: device descriptor read/64, error -71 [ 67.105227][ T5873] usb 2-1: USB disconnect, device number 2 [ 67.228785][ T6126] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 67.237020][ T6126] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 67.666416][ T973] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 68.159327][ T973] usb 5-1: device descriptor read/64, error -71 [ 68.344567][ T973] usb usb5-port1: attempt power cycle [ 68.471227][ T5908] cdc_ncm 1-1:1.1: bind() failure [ 68.481686][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 68.481699][ T29] audit: type=1400 audit(1736794758.931:251): avc: denied { bind } for pid=6132 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.495020][ T5908] usb 1-1: USB disconnect, device number 4 [ 68.519880][ T6133] Bluetooth: MGMT ver 1.23 [ 68.550042][ T29] audit: type=1400 audit(1736794758.971:252): avc: denied { write } for pid=6132 comm="syz.1.43" path="socket:[7987]" dev="sockfs" ino=7987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.716456][ T5872] usb 4-1: USB disconnect, device number 3 [ 69.322841][ T973] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.148151][ T973] usb 5-1: device descriptor read/8, error -71 [ 70.183197][ T6149] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.456285][ T5872] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 70.715871][ T5872] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 70.725572][ T6160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.919117][ T5872] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 70.935905][ T5872] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 71.027796][ T29] audit: type=1400 audit(1736794761.461:253): avc: denied { create } for pid=6162 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.115175][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.122354][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.256418][ T29] audit: type=1400 audit(1736794761.581:254): avc: denied { setopt } for pid=6162 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.698640][ T29] audit: type=1400 audit(1736794762.131:255): avc: denied { write } for pid=6165 comm="syz.3.53" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 72.196457][ T29] audit: type=1400 audit(1736794762.211:256): avc: denied { write } for pid=6165 comm="syz.3.53" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.266290][ T29] audit: type=1400 audit(1736794762.631:257): avc: denied { create } for pid=6170 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.296349][ T5872] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.305422][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.313487][ T5872] usb 1-1: Product: syz [ 72.317684][ T5872] usb 1-1: Manufacturer: syz [ 72.398553][ T5872] cdc_wdm 1-1:1.0: skipping garbage [ 72.403812][ T5872] cdc_wdm 1-1:1.0: skipping garbage [ 72.409096][ T5872] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 72.585149][ T6176] Cannot find set identified by id 0 to match [ 72.622137][ T6149] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8 sclass=netlink_xfrm_socket pid=6149 comm=syz.0.47 [ 72.684042][ T25] usb 1-1: USB disconnect, device number 5 [ 73.561315][ T29] audit: type=1400 audit(1736794764.011:258): avc: denied { shutdown } for pid=6190 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.724945][ T29] audit: type=1400 audit(1736794764.141:259): avc: denied { getopt } for pid=6190 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.891227][ T29] audit: type=1400 audit(1736794764.141:260): avc: denied { name_connect } for pid=6190 comm="syz.0.59" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.513974][ T29] audit: type=1400 audit(1736794764.141:261): avc: denied { write } for pid=6190 comm="syz.0.59" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.538107][ T29] audit: type=1400 audit(1736794764.241:262): avc: denied { create } for pid=6188 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 74.563734][ T29] audit: type=1400 audit(1736794764.251:263): avc: denied { ioctl } for pid=6188 comm="syz.1.58" path="socket:[8130]" dev="sockfs" ino=8130 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 74.588099][ T29] audit: type=1400 audit(1736794765.011:264): avc: denied { map } for pid=6190 comm="syz.0.59" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.613670][ T29] audit: type=1400 audit(1736794765.011:265): avc: denied { execute } for pid=6190 comm="syz.0.59" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.647855][ T29] audit: type=1400 audit(1736794765.071:266): avc: denied { setopt } for pid=6190 comm="syz.0.59" lport=39938 faddr=2001::2 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.916398][ T29] audit: type=1400 audit(1736794765.191:267): avc: denied { ioctl } for pid=6195 comm="syz.3.61" path="socket:[9125]" dev="sockfs" ino=9125 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.947658][ T5873] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.999544][ T6202] tty tty3: ldisc open failed (-12), clearing slot 2 [ 75.355874][ T6215] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 76.058666][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.060049][ T6219] fuse: Unknown parameter 'fd0x0000000000000007' [ 76.283612][ T970] cfg80211: failed to load regulatory.db [ 76.446553][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 76.463395][ T5908] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 76.486020][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.649221][ T5908] usb 3-1: Product: syz [ 76.653812][ T5908] usb 3-1: Manufacturer: syz [ 76.658579][ T5908] usb 3-1: SerialNumber: syz [ 76.665046][ T5908] usb 3-1: config 0 descriptor?? [ 76.847823][ T6235] ipvlan2: entered allmulticast mode [ 76.853326][ T6235] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 76.878305][ T6235] batman_adv: batadv0: Adding interface: ipvlan2 [ 76.884731][ T6235] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.910794][ T6235] batman_adv: batadv0: Interface activated: ipvlan2 [ 77.179506][ T5908] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 77.296297][ T970] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.296297][ T973] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.312524][ T5872] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 77.486334][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 77.558364][ T970] usb 5-1: config 0 has an invalid descriptor of length 209, skipping remainder of the config [ 77.577154][ T970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.595191][ T970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.810341][ T970] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 77.820273][ T970] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=4 [ 77.828423][ T970] usb 5-1: Manufacturer: syz [ 77.833356][ T970] usb 5-1: SerialNumber: syz [ 77.840306][ T970] usb 5-1: config 0 descriptor?? [ 77.841718][ T973] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 77.854822][ T973] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.865509][ T973] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.876360][ T5872] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.885117][ T5872] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 78.347387][ T5908] gspca_sonixj: reg_r err -110 [ 78.354711][ T5908] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 78.649096][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 78.649111][ T29] audit: type=1400 audit(1736794769.101:304): avc: denied { read write } for pid=6233 comm="syz.4.71" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.679569][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.712384][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.728024][ T29] audit: type=1400 audit(1736794769.141:305): avc: denied { open } for pid=6233 comm="syz.4.71" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.756306][ T6234] netlink: 168 bytes leftover after parsing attributes in process `syz.4.71'. [ 78.775092][ T5908] usb 5-1: USB disconnect, device number 8 [ 78.800602][ T29] audit: type=1400 audit(1736794769.211:306): avc: denied { create } for pid=6233 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.824234][ T29] audit: type=1400 audit(1736794769.211:307): avc: denied { setopt } for pid=6233 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.849911][ T29] audit: type=1400 audit(1736794769.211:308): avc: denied { write } for pid=6233 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 78.851171][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 78.873492][ T29] audit: type=1400 audit(1736794769.211:309): avc: denied { create } for pid=6233 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.878037][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 78.878066][ T5872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 78.922298][ T973] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.931395][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.939466][ T973] usb 1-1: Product: syz [ 78.940619][ T29] audit: type=1400 audit(1736794769.211:310): avc: denied { write } for pid=6233 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.943626][ T973] usb 1-1: Manufacturer: syz [ 78.943642][ T973] usb 1-1: SerialNumber: syz [ 78.979303][ T29] audit: type=1400 audit(1736794769.211:311): avc: denied { nlmsg_write } for pid=6233 comm="syz.4.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.263811][ T5872] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.273033][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.281265][ T5872] usb 4-1: Product: syz [ 79.284412][ T29] audit: type=1400 audit(1736794769.731:312): avc: denied { write } for pid=6244 comm="syz.1.74" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.285451][ T5872] usb 4-1: Manufacturer: syz [ 79.319052][ T29] audit: type=1400 audit(1736794769.761:313): avc: denied { ioctl } for pid=6244 comm="syz.1.74" path="socket:[10249]" dev="sockfs" ino=10249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.349523][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 79.356411][ T5872] cdc_wdm 4-1:1.0: skipping garbage [ 79.365936][ T5872] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 79.371954][ T5872] cdc_wdm 4-1:1.0: Unknown control protocol [ 79.428203][ T8] usb 4-1: USB disconnect, device number 4 [ 79.485014][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.501911][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.512570][ T6252] netlink: 168 bytes leftover after parsing attributes in process `syz.3.77'. [ 79.539407][ T973] usb 1-1: 0:2 : does not exist [ 79.564068][ T973] usb 1-1: USB disconnect, device number 6 [ 79.631474][ T6256] netlink: 76 bytes leftover after parsing attributes in process `syz.4.79'. [ 79.774457][ T970] usb 3-1: USB disconnect, device number 3 [ 79.807177][ T6120] udevd[6120]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.426381][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.687913][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 80.706372][ T970] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 80.706432][ T8] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 80.816547][ T8] usb 4-1: config 0 has no interface number 0 [ 80.829686][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 80.872789][ T970] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 80.882444][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.885601][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.983964][ T8] usb 4-1: Product: syz [ 80.988730][ T8] usb 4-1: Manufacturer: syz [ 80.997799][ T8] usb 4-1: SerialNumber: syz [ 81.009820][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 81.018626][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 81.111885][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.116882][ T8] usb 4-1: config 0 descriptor?? [ 81.154017][ T8] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 81.195113][ T970] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 81.204961][ T970] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 81.220421][ T970] usb 3-1: Manufacturer: syz [ 81.282200][ T970] usb 3-1: config 0 descriptor?? [ 81.292454][ T970] igorplugusb 3-1:0.0: endpoint incorrect [ 81.332140][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 81.360057][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 81.528382][ T6270] x_tables: duplicate underflow at hook 4 [ 81.545053][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 81.560463][ T973] usb 3-1: USB disconnect, device number 4 [ 81.586325][ T5908] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 81.695050][ T6292] can0: slcan on ttyS3. [ 81.757475][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 81.758777][ T970] usb 4-1: USB disconnect, device number 5 [ 81.784447][ T6292] can0 (unregistered): slcan off ttyS3. [ 81.795127][ T5908] usb 1-1: config 7 descriptor has 1 excess byte, ignoring [ 81.807467][ T970] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 81.825550][ T5908] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 81.854895][ T970] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 81.879691][ T5908] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 81.889343][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.902899][ T970] quatech2 4-1:0.51: device disconnected [ 81.907730][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.931970][ T5908] usb 1-1: Product: syz [ 81.948151][ T5908] usb 1-1: Manufacturer: syz [ 81.961104][ T5908] usb 1-1: SerialNumber: syz [ 81.976986][ T5908] rndis_host 1-1:7.0: skipping garbage [ 81.985488][ T5908] usb 1-1: bad CDC descriptors [ 81.994550][ T5908] option 1-1:7.0: GSM modem (1-port) converter detected [ 82.066672][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 82.074156][ T8] usb 2-1: config 255 has too many interfaces: 232, using maximum allowed: 32 [ 82.083195][ T8] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 232 [ 82.117418][ T8] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 82.146272][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.154603][ T8] usb 2-1: Product: syz [ 82.164712][ T8] usb 2-1: Manufacturer: syz [ 82.180516][ T8] usb 2-1: SerialNumber: syz [ 82.192899][ T8] ftdi_sio 2-1:255.0: FTDI USB Serial Device converter detected [ 82.211653][ T8] usb 2-1: Detected FT232H [ 83.003487][ T8] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 83.166363][ T973] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 83.350703][ T973] usb 5-1: Using ep0 maxpacket: 32 [ 83.361830][ T973] usb 5-1: config 1 interface 0 has no altsetting 0 [ 83.707750][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 83.714029][ T29] audit: type=1400 audit(1736794774.101:379): avc: denied { ioctl } for pid=6332 comm="syz.2.94" path="socket:[9426]" dev="sockfs" ino=9426 ioctlcmd=0x8b26 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.772737][ T973] usb 5-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 83.818265][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.891159][ T8] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 83.969000][ T973] usb 5-1: Product: syz [ 83.996260][ T29] audit: type=1400 audit(1736794774.101:380): avc: denied { bind } for pid=6332 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.002044][ T973] usb 5-1: Manufacturer: syz [ 84.028135][ T973] usb 5-1: SerialNumber: syz [ 84.032948][ T6340] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 84.183811][ T29] audit: type=1400 audit(1736794774.631:381): avc: denied { map } for pid=6289 comm="syz.1.89" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.207671][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.216497][ T29] audit: type=1400 audit(1736794774.631:382): avc: denied { read write } for pid=6289 comm="syz.1.89" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 84.240908][ C1] vkms_vblank_simulate: vblank timer overrun [ 84.315380][ T973] usbhid 5-1:1.0: can't add hid device: -71 [ 84.321498][ T973] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 84.343255][ T973] usb 5-1: USB disconnect, device number 9 [ 84.352914][ T29] audit: type=1400 audit(1736794774.801:383): avc: denied { execute } for pid=6346 comm="syz.3.96" path="/18/cpu.stat" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.399485][ T29] audit: type=1400 audit(1736794774.851:384): avc: denied { read } for pid=6348 comm="syz.2.97" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.422284][ T29] audit: type=1400 audit(1736794774.851:385): avc: denied { open } for pid=6348 comm="syz.2.97" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.445560][ T29] audit: type=1400 audit(1736794774.851:386): avc: denied { ioctl } for pid=6348 comm="syz.2.97" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.493501][ T29] audit: type=1400 audit(1736794774.931:387): avc: denied { create } for pid=6346 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.513687][ T29] audit: type=1400 audit(1736794774.931:388): avc: denied { ioctl } for pid=6346 comm="syz.3.96" path="socket:[10527]" dev="sockfs" ino=10527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.750952][ T5871] usb 1-1: USB disconnect, device number 7 [ 84.757524][ T5871] option 1-1:7.0: device disconnected [ 85.189218][ T6348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.236731][ T973] usb 2-1: USB disconnect, device number 4 [ 85.266875][ T973] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 85.276594][ T973] ftdi_sio 2-1:255.0: device disconnected [ 85.524994][ T6372] netlink: 1268 bytes leftover after parsing attributes in process `syz.4.102'. [ 86.206268][ T5871] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 86.488041][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 86.499241][ T5871] usb 5-1: config 0 has an invalid interface number: 72 but max is 0 [ 86.505610][ T6393] process 'syz.1.112' launched '/dev/fd/6' with NULL argv: empty string added [ 86.507802][ T6387] No control pipe specified [ 86.516495][ T970] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 86.521008][ T5871] usb 5-1: config 0 has no interface number 0 [ 86.546459][ T5871] usb 5-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=4f.3e [ 86.555626][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.564076][ T5871] usb 5-1: Product: syz [ 86.568662][ T5871] usb 5-1: Manufacturer: syz [ 86.573258][ T5871] usb 5-1: SerialNumber: syz [ 86.582525][ T5871] usb 5-1: config 0 descriptor?? [ 86.591048][ T5871] ftdi_sio 5-1:0.72: FTDI USB Serial Device converter detected [ 86.610819][ T5871] ftdi_sio ttyUSB0: unknown device type: 0x4f3e [ 86.745558][ T970] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.758428][ T970] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.786019][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.808087][ T5908] usb 5-1: USB disconnect, device number 10 [ 86.816889][ T6398] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 86.858021][ T5908] ftdi_sio 5-1:0.72: device disconnected [ 86.964817][ T970] usb 3-1: config 0 descriptor?? [ 87.418347][ T970] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 87.439713][ T970] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input5 [ 87.883547][ T970] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 88.413740][ T970] usb 3-1: USB disconnect, device number 5 [ 88.642101][ T5871] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 88.755398][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 88.755414][ T29] audit: type=1400 audit(1736794779.201:440): avc: denied { setopt } for pid=6430 comm="syz.1.125" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.835289][ T5871] usb 5-1: not running at top speed; connect to a high speed hub [ 89.621952][ T6448] mmap: syz.1.125 (6448) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 89.811480][ T6450] capability: warning: `syz.0.123' uses deprecated v2 capabilities in a way that may be insecure [ 90.080712][ T5871] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 90.088862][ T5871] usb 5-1: config 95 has no interface number 0 [ 90.095042][ T5871] usb 5-1: config 95 interface 1 has no altsetting 0 [ 90.154531][ T5871] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 90.163916][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.318536][ T5871] usb 5-1: Product: syz [ 90.322732][ T5871] usb 5-1: Manufacturer: syz [ 90.327566][ T5871] usb 5-1: SerialNumber: syz [ 90.413311][ T973] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 90.596336][ T970] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 90.717192][ T6460] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 90.724740][ T6460] overlayfs: failed to set xattr on upper [ 90.730734][ T6460] overlayfs: ...falling back to redirect_dir=nofollow. [ 90.737677][ T6460] overlayfs: ...falling back to index=off. [ 90.743526][ T6460] overlayfs: ...falling back to uuid=null. [ 90.749455][ T6460] overlayfs: maximum fs stacking depth exceeded [ 90.847501][ T29] audit: type=1400 audit(1736794781.121:441): avc: denied { mount } for pid=6455 comm="syz.0.129" name="/" dev="hugetlbfs" ino=10733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 90.996331][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 91.099066][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.119900][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.144814][ T973] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 91.161313][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.172674][ T29] audit: type=1400 audit(1736794781.151:442): avc: denied { mounton } for pid=6455 comm="syz.0.129" path="/19/file1/bus" dev="hugetlbfs" ino=10736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 91.201572][ T973] usb 3-1: config 0 descriptor?? [ 91.261039][ T970] usb 4-1: config 0 has no interfaces? [ 91.277896][ T29] audit: type=1400 audit(1736794781.241:443): avc: denied { create } for pid=6455 comm="syz.0.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 91.318913][ T970] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=71.9f [ 91.349936][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.365538][ T970] usb 4-1: Product: syz [ 91.483155][ T970] usb 4-1: Manufacturer: syz [ 91.496224][ T970] usb 4-1: SerialNumber: syz [ 91.507478][ T29] audit: type=1400 audit(1736794781.851:444): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 91.541513][ T970] usb 4-1: config 0 descriptor?? [ 91.558325][ T5871] usb 5-1: USB disconnect, device number 11 [ 92.780993][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.812684][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.383780][ T5871] usb 3-1: USB disconnect, device number 6 [ 93.446103][ T6474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6474 comm=syz.0.134 [ 93.618372][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 93.756640][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 93.765802][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.838400][ T25] usb 2-1: config 0 descriptor?? [ 93.856254][ T25] gspca_main: sunplus-2.14.0 probing 041e:400b [ 93.892553][ T970] usb 4-1: USB disconnect, device number 6 [ 93.951858][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 93.983089][ T29] audit: type=1400 audit(1736794784.421:445): avc: denied { create } for pid=6484 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.021450][ T6490] netlink: 168 bytes leftover after parsing attributes in process `syz.0.138'. [ 94.381313][ T6496] block device autoloading is deprecated and will be removed. [ 94.433646][ T5908] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 94.656641][ T5908] usb 5-1: device descriptor read/64, error -71 [ 94.696502][ T25] gspca_sunplus: reg_w_riv err -110 [ 94.706893][ T25] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 94.826815][ T29] audit: type=1400 audit(1736794785.281:446): avc: denied { setopt } for pid=6482 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.966322][ T5908] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 94.988675][ T29] audit: type=1400 audit(1736794785.441:447): avc: denied { write } for pid=6500 comm="syz.2.140" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.034483][ T29] audit: type=1400 audit(1736794785.471:448): avc: denied { ioctl } for pid=6500 comm="syz.2.140" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.132808][ T29] audit: type=1400 audit(1736794785.481:449): avc: denied { audit_write } for pid=6500 comm="syz.2.140" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.156564][ T5908] usb 5-1: device descriptor read/64, error -71 [ 95.267911][ T5908] usb usb5-port1: attempt power cycle [ 95.268241][ T5871] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 95.436411][ T970] usb 2-1: USB disconnect, device number 5 [ 95.536452][ T29] audit: type=1400 audit(1736794785.991:450): avc: denied { create } for pid=6505 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.576595][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 95.585539][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.289512][ T5871] usb 1-1: config 0 has no interface number 0 [ 96.356402][ T5908] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 96.544165][ T5871] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 96.556288][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.556296][ T29] audit: type=1400 audit(1736794786.761:451): avc: denied { write } for pid=6503 comm="syz.3.141" name="mcfilter" dev="proc" ino=4026532823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 96.584288][ T5908] usb 5-1: device descriptor read/8, error -71 [ 96.609079][ T5871] usb 1-1: Product: syz [ 96.613264][ T5871] usb 1-1: Manufacturer: syz [ 96.621532][ T5871] usb 1-1: SerialNumber: syz [ 96.691400][ T5871] usb 1-1: config 0 descriptor?? [ 96.699381][ T5871] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 96.702215][ T29] audit: type=1400 audit(1736794787.151:452): avc: denied { create } for pid=6515 comm="syz.1.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 96.723841][ T6518] netlink: 68 bytes leftover after parsing attributes in process `syz.3.144'. [ 96.738250][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.3.144'. [ 96.856489][ T5908] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 96.878179][ T5908] usb 5-1: device descriptor read/8, error -71 [ 96.996956][ T5908] usb usb5-port1: unable to enumerate USB device [ 97.596495][ T29] audit: type=1400 audit(1736794787.721:453): avc: denied { setopt } for pid=6520 comm="syz.3.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.790851][ T5902] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.592648][ T5871] gspca_spca1528: reg_w err -110 [ 98.649546][ T5871] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110 [ 98.690041][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 98.738014][ T6540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6540 comm=syz.3.148 [ 98.963313][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 98.992200][ T5902] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 99.013881][ T5902] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 99.071430][ T5902] usb 2-1: config 1 has no interface number 0 [ 99.100311][ T5902] usb 2-1: too many endpoints for config 1 interface 3 altsetting 0: 255, using maximum allowed: 30 [ 99.135411][ T5902] usb 2-1: config 1 interface 3 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.165903][ T5139] Bluetooth: hci3: unexpected subevent 0x0e length: 28 > 15 [ 99.174247][ T5139] Bluetooth: hci3: Unable to find connection for dst cb:a6:f4:9c:00:2c sid 0xbc [ 99.187638][ T5902] usb 2-1: config 1 interface 3 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 99.213910][ T5902] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.225912][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 99.236417][ T29] audit: type=1400 audit(1736794789.571:454): avc: denied { create } for pid=6498 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.285232][ T5871] usb 1-1: USB disconnect, device number 8 [ 99.299981][ T29] audit: type=1400 audit(1736794789.571:455): avc: denied { connect } for pid=6498 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.823116][ T5902] usb 2-1: SerialNumber: syz [ 99.854099][ T29] audit: type=1400 audit(1736794789.841:456): avc: denied { watch watch_reads } for pid=6542 comm="syz.4.150" path="/28/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.091630][ T5902] usb 2-1: USB disconnect, device number 6 [ 100.213255][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 100.256338][ T5871] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 100.347825][ T29] audit: type=1400 audit(1736794790.801:457): avc: denied { create } for pid=6554 comm="syz.4.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 100.376674][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 100.385127][ T25] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 100.409066][ T25] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 100.436405][ T29] audit: type=1400 audit(1736794790.861:458): avc: denied { sys_admin } for pid=6554 comm="syz.4.154" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 100.465057][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 100.500195][ T25] usb 4-1: config 0 has no interface number 0 [ 100.547765][ T25] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.626151][ T25] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 100.680801][ T25] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.697947][ T25] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 100.707230][ T25] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 100.715288][ T25] usb 4-1: Product: syz [ 100.738110][ T25] usb 4-1: config 0 descriptor?? [ 100.745944][ T6551] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.857244][ T29] audit: type=1400 audit(1736794791.311:459): avc: denied { getopt } for pid=6572 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.897964][ T5871] usb 1-1: config 1 interface 0 has no altsetting 0 [ 100.906585][ T5871] usb 1-1: New USB device found, idVendor=05ac, idProduct=0215, bcdDevice= 0.40 [ 100.918139][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'. [ 100.927323][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.935539][ T5871] usb 1-1: Product: syz [ 100.939799][ T5871] usb 1-1: Manufacturer: syz [ 100.944395][ T5871] usb 1-1: SerialNumber: syz [ 101.013093][ T29] audit: type=1400 audit(1736794791.461:460): avc: denied { bind } for pid=6581 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.037275][ T29] audit: type=1400 audit(1736794791.461:461): avc: denied { accept } for pid=6581 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.072381][ T29] audit: type=1400 audit(1736794791.461:462): avc: denied { write } for pid=6581 comm="syz.1.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 101.097052][ T29] audit: type=1400 audit(1736794791.461:463): avc: denied { connect } for pid=6550 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.171347][ T5139] Bluetooth: hci1: Malformed LE Event: 0x0b [ 101.184032][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 101.311052][ T6590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6590 comm=syz.1.163 [ 101.769861][ T25] usb 4-1: USB disconnect, device number 7 [ 101.908096][ T6553] Zero length message leads to an empty skb [ 101.939436][ T5871] usbhid 1-1:1.0: can't add hid device: -71 [ 101.958820][ T5871] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 101.999526][ T5871] usb 1-1: USB disconnect, device number 9 [ 102.297848][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.029013][ T6606] Failed to initialize the IGMP autojoin socket (err -2) [ 103.779647][ T5908] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 103.788982][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.797240][ T5908] usb 2-1: Product: syz [ 103.801637][ T5908] usb 2-1: Manufacturer: syz [ 103.819954][ T6617] netlink: 156 bytes leftover after parsing attributes in process `syz.2.170'. [ 103.842218][ T5908] usb 2-1: SerialNumber: syz [ 103.867225][ T6618] mac80211_hwsim hwsim11 syzkaller0: renamed from wlan1 (while UP) [ 103.947529][ T5908] usb 2-1: config 0 descriptor?? [ 104.019909][ T5908] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 104.568488][ T6629] pim6reg1: entered promiscuous mode [ 104.574232][ T6629] pim6reg1: entered allmulticast mode [ 104.616883][ T6631] netlink: 168 bytes leftover after parsing attributes in process `syz.3.173'. [ 104.638515][ T5908] gspca_sunplus: reg_r err -110 [ 104.656342][ T5902] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 104.816284][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 104.828667][ T5902] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.837862][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.850352][ T5902] usb 5-1: Product: syz [ 104.856786][ T5902] usb 5-1: Manufacturer: syz [ 104.861435][ T5902] usb 5-1: SerialNumber: syz [ 104.876827][ T5902] usb 5-1: config 0 descriptor?? [ 104.906396][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.076760][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 105.083584][ T25] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.096263][ T25] usb 4-1: config 0 has no interface number 0 [ 105.097646][ T5902] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.104144][ T25] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 105.122014][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.131454][ T25] usb 4-1: Product: syz [ 105.135621][ T25] usb 4-1: Manufacturer: syz [ 105.141262][ T25] usb 4-1: SerialNumber: syz [ 105.147882][ T25] usb 4-1: config 0 descriptor?? [ 105.161640][ T25] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 105.240903][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 105.240917][ T29] audit: type=1400 audit(1736794795.691:471): avc: denied { create } for pid=6637 comm="syz.0.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.280190][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.293976][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.304464][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.358199][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.369301][ T25] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 105.372239][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.381369][ T25] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 105.416160][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.493339][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.503612][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.514352][ T6638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.530320][ T29] audit: type=1400 audit(1736794795.981:472): avc: denied { create } for pid=6643 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.552204][ T29] audit: type=1400 audit(1736794795.991:473): avc: denied { bind } for pid=6643 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.644560][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 105.663187][ T29] audit: type=1400 audit(1736794795.991:474): avc: denied { create } for pid=6643 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.687662][ T81] usb 4-1: USB disconnect, device number 8 [ 105.695980][ T81] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 105.755767][ T81] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 105.774094][ T81] quatech2 4-1:0.51: device disconnected [ 105.827641][ T29] audit: type=1400 audit(1736794796.281:475): avc: denied { ioctl } for pid=6643 comm="syz.2.176" path="socket:[9911]" dev="sockfs" ino=9911 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.908892][ T6650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.630300][ T8] usb 2-1: USB disconnect, device number 7 [ 107.297030][ T6665] 9pnet_fd: Insufficient options for proto=fd [ 107.455278][ T29] audit: type=1400 audit(1736794797.741:476): avc: denied { write } for pid=6659 comm="syz.3.180" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 107.811175][ T6673] can0: slcan on ttyS3. [ 107.883097][ T5902] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 107.913030][ T5902] usb 5-1: USB disconnect, device number 16 [ 107.977085][ T6673] can0 (unregistered): slcan off ttyS3. [ 108.963322][ T29] audit: type=1400 audit(1736794798.841:477): avc: denied { create } for pid=6686 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.069463][ T29] audit: type=1400 audit(1736794798.861:478): avc: denied { ioctl } for pid=6686 comm="syz.1.186" path="socket:[11223]" dev="sockfs" ino=11223 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.126424][ T29] audit: type=1400 audit(1736794799.501:479): avc: denied { read } for pid=6700 comm="syz.1.188" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.149632][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.272745][ T29] audit: type=1400 audit(1736794799.501:480): avc: denied { open } for pid=6700 comm="syz.1.188" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.296429][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.912182][ T5908] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 109.954205][ T6715] tipc: Started in network mode [ 109.972883][ T6715] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 110.007676][ T6715] tipc: Enabled bearer , priority 0 [ 110.027813][ T6712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.075049][ T6729] nvme_fabrics: unknown parameter or missing value ')' in ctrl creation request [ 110.094500][ T6707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.125577][ T6707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.170026][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 110.177909][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.202035][ T5908] usb 5-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.00 [ 110.235415][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.266143][ T5908] usb 5-1: config 0 descriptor?? [ 110.298527][ T6740] FAULT_INJECTION: forcing a failure. [ 110.298527][ T6740] name failslab, interval 1, probability 0, space 0, times 1 [ 110.311447][ T6740] CPU: 0 UID: 0 PID: 6740 Comm: syz.2.196 Not tainted 6.13.0-rc7-syzkaller #0 [ 110.320289][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.330437][ T6740] Call Trace: [ 110.333702][ T6740] [ 110.336624][ T6740] dump_stack_lvl+0x116/0x1f0 [ 110.341308][ T6740] should_fail_ex+0x497/0x5b0 [ 110.345981][ T6740] should_failslab+0xc2/0x120 [ 110.350655][ T6740] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 110.356040][ T6740] ? __send_signal_locked+0x159/0x12c0 [ 110.361517][ T6740] ? sig_get_ucounts+0x1c0/0x5b0 [ 110.366462][ T6740] __send_signal_locked+0x159/0x12c0 [ 110.371738][ T6740] ? __lock_task_sighand+0x146/0x340 [ 110.377011][ T6740] group_send_sig_info+0x2aa/0x300 [ 110.382135][ T6740] ? __pfx_group_send_sig_info+0x10/0x10 [ 110.387766][ T6740] ? __pfx_string+0x10/0x10 [ 110.392259][ T6740] bpf_send_signal_common+0x3d3/0x530 [ 110.397617][ T6740] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 110.403513][ T6740] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 110.409150][ T6740] ? trace_lock_acquire+0x14e/0x1f0 [ 110.414342][ T6740] ? bpf_trace_run4+0x1d6/0x5a0 [ 110.419185][ T6740] bpf_send_signal_thread+0x1a/0x30 [ 110.424373][ T6740] bpf_prog_7bb747c56a8bcba8+0x1e/0x26 [ 110.429815][ T6740] bpf_trace_run4+0x245/0x5a0 [ 110.434483][ T6740] ? __pfx_bpf_trace_run4+0x10/0x10 [ 110.439675][ T6740] ? find_held_lock+0x2d/0x110 [ 110.444430][ T6740] __bpf_trace_mmap_lock_acquire_returned+0x134/0x180 [ 110.451185][ T6740] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 110.458454][ T6740] ? trace_lock_acquire+0x14e/0x1f0 [ 110.463642][ T6740] ? lock_acquire+0x2f/0xb0 [ 110.468139][ T6740] __mmap_lock_do_trace_acquire_returned.part.0+0x20f/0x2d0 [ 110.475412][ T6740] ? __pfx___mmap_lock_do_trace_acquire_returned.part.0+0x10/0x10 [ 110.483223][ T6740] ? down_read+0xc9/0x330 [ 110.487547][ T6740] ? __pfx_down_read+0x10/0x10 [ 110.492309][ T6740] __mmap_lock_do_trace_acquire_returned+0x33/0x40 [ 110.498801][ T6740] __mm_populate+0x2ec/0x380 [ 110.503378][ T6740] ? __pfx___mm_populate+0x10/0x10 [ 110.508483][ T6740] ? up_write+0x1b2/0x520 [ 110.512803][ T6740] do_mlock+0x40a/0x7d0 [ 110.516957][ T6740] ? __fget_files+0x206/0x3a0 [ 110.521618][ T6740] ? __pfx_do_mlock+0x10/0x10 [ 110.526288][ T6740] ? fput+0x67/0x440 [ 110.530173][ T6740] ? ksys_write+0x1ba/0x250 [ 110.534662][ T6740] ? __pfx_ksys_write+0x10/0x10 [ 110.539503][ T6740] __x64_sys_mlock+0x59/0x80 [ 110.544079][ T6740] do_syscall_64+0xcd/0x250 [ 110.548575][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.554456][ T6740] RIP: 0033:0x7fb204985d29 [ 110.558861][ T6740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.578458][ T6740] RSP: 002b:00007fb20580d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 110.586853][ T6740] RAX: ffffffffffffffda RBX: 00007fb204b75fa0 RCX: 00007fb204985d29 [ 110.594809][ T6740] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020000000 [ 110.602762][ T6740] RBP: 00007fb20580d090 R08: 0000000000000000 R09: 0000000000000000 [ 110.610717][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.618671][ T6740] R13: 0000000000000000 R14: 00007fb204b75fa0 R15: 00007ffcd42f8048 [ 110.626637][ T6740] [ 110.629756][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.776267][ T5902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 110.852193][ T5908] nzxt-smart2 0003:1E71:200D.0004: hidraw0: USB HID v0.01 Device [HID 1e71:200d] on usb-dummy_hcd.4-1/input0 [ 110.929343][ T5902] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.939784][ T5902] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.950152][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.959259][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.972423][ T5902] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.981676][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.989731][ T5902] usb 2-1: Product: syz [ 110.993896][ T5902] usb 2-1: Manufacturer: syz [ 111.001846][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 111.006332][ T81] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 111.007101][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 111.021644][ T5902] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 111.027616][ T5902] cdc_wdm 2-1:1.0: Unknown control protocol [ 111.038249][ T5908] tipc: Node number set to 11578026 [ 111.100492][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 111.100502][ T29] audit: type=1400 audit(1736794801.551:486): avc: denied { read write } for pid=6747 comm="syz.3.199" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.130774][ T29] audit: type=1400 audit(1736794801.561:487): avc: denied { open } for pid=6747 comm="syz.3.199" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 111.167951][ T81] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 111.177199][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.186857][ T81] usb 3-1: config 0 descriptor?? [ 111.332984][ T6752] No control pipe specified [ 111.850092][ T29] audit: type=1400 audit(1736794801.791:488): avc: denied { accept } for pid=6735 comm="syz.1.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.851483][ T81] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 111.882293][ T81] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 111.891083][ T29] audit: type=1400 audit(1736794801.791:489): avc: denied { ioctl } for pid=6735 comm="syz.1.195" path="socket:[10131]" dev="sockfs" ino=10131 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.891138][ T81] [drm:udl_init] *ERROR* Selecting channel failed [ 111.951956][ T5902] usb 2-1: USB disconnect, device number 8 [ 111.964646][ T29] audit: type=1400 audit(1736794802.411:490): avc: denied { bind } for pid=6754 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.000627][ T81] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 112.008768][ T81] [drm] Initialized udl on minor 2 [ 112.018646][ T81] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 112.123853][ T81] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 112.139656][ T5908] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 112.142169][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.200'. [ 112.148597][ T5908] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 112.160124][ T6755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'. [ 112.168120][ T81] usb 3-1: USB disconnect, device number 7 [ 112.202276][ T6755] geneve2: entered promiscuous mode [ 112.212426][ T6755] geneve2: entered allmulticast mode [ 112.447859][ T5902] usb 5-1: USB disconnect, device number 17 [ 112.647861][ T6769] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 112.673793][ T6772] loop7: detected capacity change from 0 to 16384 [ 112.692353][ T29] audit: type=1400 audit(1737057203.143:491): avc: denied { write } for pid=6771 comm="syz.0.207" path="socket:[10162]" dev="sockfs" ino=10162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.720691][ T6773] ERROR: device name not specified. [ 112.742154][ T29] audit: type=1400 audit(1737057203.173:492): avc: denied { nlmsg_read } for pid=6771 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.916339][ T81] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 112.970722][ T6778] tipc: Enabled bearer , priority 0 [ 113.008328][ T6778] syzkaller0: entered promiscuous mode [ 113.013957][ T6778] syzkaller0: entered allmulticast mode [ 113.023743][ T6778] tipc: Resetting bearer [ 113.066485][ T5908] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.084141][ T6777] tipc: Resetting bearer [ 113.090018][ T81] usb 3-1: Using ep0 maxpacket: 8 [ 113.096963][ T81] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 113.115973][ T81] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.125585][ T81] usb 3-1: config 1 has no interface number 1 [ 113.134072][ T81] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.143896][ T81] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.152369][ T81] usb 3-1: Product: syz [ 113.156783][ T81] usb 3-1: Manufacturer: syz [ 113.161377][ T81] usb 3-1: SerialNumber: syz [ 113.206545][ T5908] usb 1-1: device descriptor read/64, error -71 [ 113.392377][ T81] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 113.406053][ T81] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 113.414011][ T81] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 113.433042][ T81] usb 3-1: 2:1 : invalid channels 0 [ 113.443324][ T29] audit: type=1400 audit(1737057203.893:493): avc: denied { mount } for pid=6789 comm="syz.1.212" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 113.485799][ T6790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.497492][ T6790] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 113.509503][ T29] audit: type=1400 audit(1737057203.933:494): avc: denied { unlink } for pid=6789 comm="syz.1.212" name="#3" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 113.525387][ T81] usb 3-1: USB disconnect, device number 8 [ 113.535353][ T29] audit: type=1400 audit(1737057203.993:495): avc: denied { mount } for pid=6789 comm="syz.1.212" name="/" dev="overlay" ino=287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 113.577296][ T5908] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 113.846264][ T5908] usb 1-1: device descriptor read/64, error -71 [ 113.878766][ T6480] udevd[6480]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.036306][ T5908] usb usb1-port1: attempt power cycle [ 114.122804][ T6800] Failed to initialize the IGMP autojoin socket (err -2) [ 114.427580][ T5908] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 114.495155][ T5908] usb 1-1: device descriptor read/8, error -71 [ 114.738362][ T5908] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 114.769278][ T5908] usb 1-1: device descriptor read/8, error -71 [ 114.886464][ T5908] usb usb1-port1: unable to enumerate USB device [ 115.439421][ T6777] tipc: Disabling bearer [ 115.449377][ T6817] can0: slcan on ttyS3. [ 115.562733][ T6818] can0 (unregistered): slcan off ttyS3. [ 115.742226][ T6832] block nbd2: NBD_DISCONNECT [ 115.864398][ T6832] block nbd2: NBD_DISCONNECT [ 115.917357][ T81] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 115.986422][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 116.077283][ T81] usb 5-1: Using ep0 maxpacket: 32 [ 116.087733][ T81] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 116.096208][ T81] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 116.176562][ T81] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.211933][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.268645][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 116.268675][ T29] audit: type=1400 audit(1737057206.723:502): avc: denied { listen } for pid=6847 comm="syz.2.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.277357][ T81] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 116.308028][ T25] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 116.364470][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.478517][ T29] audit: type=1400 audit(1737057206.883:503): avc: denied { create } for pid=6852 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.512025][ T25] usb 4-1: config 0 descriptor?? [ 116.517402][ T81] usb 5-1: config 1 has no interface number 0 [ 116.524521][ T81] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 116.552912][ T81] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.569540][ T29] audit: type=1400 audit(1737057206.913:504): avc: denied { write } for pid=6852 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.593601][ T81] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 116.724355][ T6864] netlink: 168 bytes leftover after parsing attributes in process `syz.0.228'. [ 116.803959][ T81] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 116.822531][ T81] snd_usb_pod 5-1:1.1: invalid control EP [ 116.832376][ T81] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 116.846440][ T81] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 116.862649][ T81] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 116.953262][ T25] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 116.972957][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input7 [ 117.019364][ T5873] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 117.029179][ T29] audit: type=1400 audit(1737057207.483:505): avc: denied { ioctl } for pid=6825 comm="syz.4.220" path="socket:[11726]" dev="sockfs" ino=11726 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.032942][ T81] usb 5-1: USB disconnect, device number 18 [ 117.129043][ T25] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 117.500448][ T5908] [ 117.500458][ T5908] ====================================================== [ 117.500466][ T5908] WARNING: possible circular locking dependency detected [ 117.500473][ T5908] 6.13.0-rc7-syzkaller #0 Not tainted [ 117.500483][ T5908] ------------------------------------------------------ [ 117.500489][ T5908] kworker/1:7/5908 is trying to acquire lock: [ 117.500500][ T5908] ffff88801b0990b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x72/0x310 [ 117.500544][ T5908] [ 117.500544][ T5908] but task is already holding lock: [ 117.500549][ T5908] ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 117.500589][ T5908] [ 117.500589][ T5908] which lock already depends on the new lock. [ 117.500589][ T5908] [ 117.500595][ T5908] [ 117.500595][ T5908] the existing dependency chain (in reverse order) is: [ 117.500600][ T5908] [ 117.500600][ T5908] -> #2 (console_lock){+.+.}-{0:0}: [ 117.500624][ T5908] console_lock+0x7a/0xa0 [ 117.500644][ T5908] con_flush_chars+0x5e/0x80 [ 117.500667][ T5908] n_tty_receive_buf_common+0xa99/0x1980 [ 117.500687][ T5908] tty_ldisc_receive_buf+0xa2/0x190 [ 117.500711][ T5908] tty_port_default_receive_buf+0x70/0xb0 [ 117.500727][ T5908] flush_to_ldisc+0x264/0x780 [ 117.500741][ T5908] process_one_work+0x9c5/0x1ba0 [ 117.500766][ T5908] worker_thread+0x6c8/0xf00 [ 117.500783][ T5908] kthread+0x2c1/0x3a0 [ 117.500804][ T5908] ret_from_fork+0x45/0x80 [ 117.500820][ T5908] ret_from_fork_asm+0x1a/0x30 [ 117.500843][ T5908] [ 117.500843][ T5908] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 117.500867][ T5908] down_write+0x93/0x200 [ 117.500891][ T5908] n_tty_flush_buffer+0x25/0x1b0 [ 117.500909][ T5908] tty_buffer_flush+0x236/0x310 [ 117.500924][ T5908] tty_ldisc_flush+0x64/0xe0 [ 117.500945][ T5908] tty_port_close_start+0x337/0x540 [ 117.500962][ T5908] tty_port_close+0x26/0x160 [ 117.500979][ T5908] tty_release+0x3a8/0x1410 [ 117.500993][ T5908] __fput+0x3f8/0xb60 [ 117.501013][ T5908] task_work_run+0x14e/0x250 [ 117.501028][ T5908] syscall_exit_to_user_mode+0x27b/0x2a0 [ 117.501050][ T5908] do_syscall_64+0xda/0x250 [ 117.501072][ T5908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.501095][ T5908] [ 117.501095][ T5908] -> #0 (&buf->lock){+.+.}-{4:4}: [ 117.501117][ T5908] __lock_acquire+0x249e/0x3c40 [ 117.501135][ T5908] lock_acquire.part.0+0x11b/0x380 [ 117.501153][ T5908] __mutex_lock+0x19b/0xa60 [ 117.501174][ T5908] tty_buffer_flush+0x72/0x310 [ 117.501188][ T5908] tty_ldisc_flush+0x64/0xe0 [ 117.501210][ T5908] __do_SAK+0x6a1/0x800 [ 117.501225][ T5908] vc_SAK+0x7f/0x310 [ 117.501245][ T5908] process_one_work+0x9c5/0x1ba0 [ 117.501261][ T5908] worker_thread+0x6c8/0xf00 [ 117.501278][ T5908] kthread+0x2c1/0x3a0 [ 117.501298][ T5908] ret_from_fork+0x45/0x80 [ 117.501314][ T5908] ret_from_fork_asm+0x1a/0x30 [ 117.501336][ T5908] [ 117.501336][ T5908] other info that might help us debug this: [ 117.501336][ T5908] [ 117.501342][ T5908] Chain exists of: [ 117.501342][ T5908] &buf->lock --> &tty->termios_rwsem --> console_lock [ 117.501342][ T5908] [ 117.501369][ T5908] Possible unsafe locking scenario: [ 117.501369][ T5908] [ 117.501373][ T5908] CPU0 CPU1 [ 117.501378][ T5908] ---- ---- [ 117.501382][ T5908] lock(console_lock); [ 117.501394][ T5908] lock(&tty->termios_rwsem); [ 117.501406][ T5908] lock(console_lock); [ 117.501418][ T5908] lock(&buf->lock); [ 117.501428][ T5908] [ 117.501428][ T5908] *** DEADLOCK *** [ 117.501428][ T5908] [ 117.501432][ T5908] 4 locks held by kworker/1:7/5908: [ 117.501443][ T5908] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 117.501484][ T5908] #1: ffffc900046ffd80 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 117.501526][ T5908] #2: ffffffff8e1a9040 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x13/0x310 [ 117.501568][ T5908] #3: ffff88805b85a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x1c/0xe0 [ 117.501614][ T5908] [ 117.501614][ T5908] stack backtrace: [ 117.501619][ T5908] CPU: 1 UID: 0 PID: 5908 Comm: kworker/1:7 Not tainted 6.13.0-rc7-syzkaller #0 [ 117.501639][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.501650][ T5908] Workqueue: events vc_SAK [ 117.501671][ T5908] Call Trace: [ 117.501676][ T5908] [ 117.501683][ T5908] dump_stack_lvl+0x116/0x1f0 [ 117.501706][ T5908] print_circular_bug+0x419/0x5d0 [ 117.501725][ T5908] check_noncircular+0x31a/0x400 [ 117.501749][ T5908] ? __pfx_check_noncircular+0x10/0x10 [ 117.501770][ T5908] ? lockdep_lock+0xc6/0x200 [ 117.501795][ T5908] ? __pfx_lockdep_lock+0x10/0x10 [ 117.501821][ T5908] __lock_acquire+0x249e/0x3c40 [ 117.501845][ T5908] ? __pfx___lock_acquire+0x10/0x10 [ 117.501866][ T5908] lock_acquire.part.0+0x11b/0x380 [ 117.501885][ T5908] ? tty_buffer_flush+0x72/0x310 [ 117.501903][ T5908] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 117.501922][ T5908] ? rcu_is_watching+0x12/0xc0 [ 117.501946][ T5908] ? trace_lock_acquire+0x14e/0x1f0 [ 117.501971][ T5908] ? __pfx___lock_acquire+0x10/0x10 [ 117.501989][ T5908] ? tty_buffer_flush+0x72/0x310 [ 117.502005][ T5908] ? lock_acquire+0x2f/0xb0 [ 117.502023][ T5908] ? tty_buffer_flush+0x72/0x310 [ 117.502040][ T5908] __mutex_lock+0x19b/0xa60 [ 117.502062][ T5908] ? tty_buffer_flush+0x72/0x310 [ 117.502079][ T5908] ? tty_buffer_flush+0x72/0x310 [ 117.502095][ T5908] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 117.502115][ T5908] ? __pfx___mutex_lock+0x10/0x10 [ 117.502138][ T5908] ? trace_lock_acquire+0x14e/0x1f0 [ 117.502162][ T5908] ? lock_acquire.part.0+0x11b/0x380 [ 117.502181][ T5908] ? tty_ldisc_flush+0x1c/0xe0 [ 117.502207][ T5908] ? ldsem_down_read_trylock+0x11b/0x180 [ 117.502229][ T5908] ? tty_buffer_flush+0x72/0x310 [ 117.502245][ T5908] tty_buffer_flush+0x72/0x310 [ 117.502262][ T5908] tty_ldisc_flush+0x64/0xe0 [ 117.502286][ T5908] __do_SAK+0x6a1/0x800 [ 117.502304][ T5908] ? lock_acquire+0x2f/0xb0 [ 117.502321][ T5908] ? vc_SAK+0x13/0x310 [ 117.502344][ T5908] vc_SAK+0x7f/0x310 [ 117.502364][ T5908] process_one_work+0x9c5/0x1ba0 [ 117.502387][ T5908] ? __pfx_kernfs_notify_workfn+0x10/0x10 [ 117.502410][ T5908] ? __pfx_process_one_work+0x10/0x10 [ 117.502428][ T5908] ? rcu_is_watching+0x12/0xc0 [ 117.502454][ T5908] ? assign_work+0x1a0/0x250 [ 117.502473][ T5908] worker_thread+0x6c8/0xf00 [ 117.502495][ T5908] ? __kthread_parkme+0x148/0x220 [ 117.502518][ T5908] ? __pfx_worker_thread+0x10/0x10 [ 117.502537][ T5908] kthread+0x2c1/0x3a0 [ 117.502558][ T5908] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.502578][ T5908] ? __pfx_kthread+0x10/0x10 [ 117.502600][ T5908] ret_from_fork+0x45/0x80 [ 117.502616][ T5908] ? __pfx_kthread+0x10/0x10 [ 117.502638][ T5908] ret_from_fork_asm+0x1a/0x30 [ 117.502667][ T5908] [ 117.503798][ T5908] tty tty1: SAK: killed process 6874 (syz.2.229): by fd#5 [ 117.503840][ T5908] tty tty1: SAK: killed process 6875 (syz.2.229): by fd#5 [ 117.503852][ T5908] tty tty1: SAK: killed process 6876 (syz.2.229): by fd#5 [ 117.503864][ T5908] tty tty1: SAK: killed process 6877 (syz.2.229): by fd#5 [ 117.503876][ T5908] tty tty1: SAK: killed process 6878 (syz.2.229): by fd#5 [ 117.503888][ T5908] tty tty1: SAK: killed process 6879 (syz.2.229): by fd#5 [ 117.503913][ T5908] tty tty1: SAK: killed process 6880 (syz.2.229): by fd#5 [ 117.627564][ T6881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.634113][ T5873] usb 1-1: Using ep0 maxpacket: 32 [ 117.638975][ T6881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.644395][ T5873] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.700270][ T973] usb 4-1: USB disconnect, device number 9 [ 117.701085][ T5873] usb 1-1: config 0 has no interface number 0 [ 118.270270][ T5873] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 118.279389][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.287408][ T5873] usb 1-1: Product: syz [ 118.291569][ T5873] usb 1-1: Manufacturer: syz [ 118.296145][ T5873] usb 1-1: SerialNumber: syz [ 118.301868][ T5873] usb 1-1: config 0 descriptor?? [ 118.308384][ T5873] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.939287][ T5873] usb 1-1: qt2_attach - failed to power on unit: -71 [ 119.947699][ T5873] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 119.958428][ T5873] usb 1-1: USB disconnect, device number 14