last executing test programs: 5.564023173s ago: executing program 0 (id=1455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x39, 0x80000) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_destroy(r1) 5.357434046s ago: executing program 0 (id=1459): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.404378586s ago: executing program 0 (id=1478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 3.279884916s ago: executing program 0 (id=1481): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 3.172176964s ago: executing program 3 (id=1484): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f00000006c0)='wlan0\x00', &(0x7f0000000700)=@random="dc2f", 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf87000000000000a4070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080200000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.08231s ago: executing program 3 (id=1486): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff, 0x8, 0x4, 0x7, 0x6}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44) 2.754695344s ago: executing program 1 (id=1490): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) 2.279033281s ago: executing program 0 (id=1493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/udp6\x00') read$dsp(r2, &(0x7f00000002c0)=""/140, 0x8c) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000001600)={{0x2, 0x200, 0x385, 0xa49, 0x8, 0x9}, 0x8a, [0x10001, 0x7, 0x8, 0xffffffff, 0x0, 0x9, 0x9, 0x1, 0xc8, 0x0, 0xa, 0x4, 0x0, 0x735e, 0xffff, 0x9, 0x1, 0x5c8bbc62, 0xcf, 0x7, 0x6, 0x70, 0x8, 0xffffffff, 0x7, 0x46, 0xc179, 0xd95a, 0x4, 0xe, 0x7fffffff, 0x2, 0xfffffffb, 0x4, 0x7, 0xfffffffc, 0x1, 0x2, 0x7, 0x90e, 0x80000001, 0xce, 0x401, 0x0, 0x7, 0x1, 0xd119, 0x7, 0x80000000, 0x6c000, 0xf9e, 0xc, 0x5, 0x800, 0x5, 0x1, 0x7, 0x3, 0x3, 0x1, 0x7b49, 0x4, 0x3, 0x8000, 0x81, 0x4, 0x7, 0x5, 0x4, 0xa, 0x8, 0x7, 0xffff, 0xfa, 0x6, 0x8, 0xb, 0x424260ee, 0x0, 0x80000000, 0x4, 0x38, 0x155, 0x40, 0x4e59, 0xfffff5b4, 0x1, 0x1, 0x1, 0x8, 0x5, 0x401, 0x245, 0x9, 0xff, 0xe, 0x6, 0x0, 0x7, 0x318, 0xdaa1, 0x32a, 0x63e8, 0x80000001, 0x8, 0x994, 0x7, 0x101, 0x8, 0x0, 0x5, 0x400000, 0x4eb6, 0x48d, 0x101, 0x1, 0x2ac1, 0x2000, 0x10, 0xd0, 0xed, 0x9, 0x5, 0xda99, 0x1, 0x3, 0x881, 0x9, 0xffff, 0x0, 0xfffffec4, 0x2, 0x8, 0x6, 0x2, 0x5, 0x8, 0x0, 0x6, 0x22, 0x8, 0x2, 0xfffffff3, 0x8, 0x10, 0x7, 0x5, 0x1, 0xffffff80, 0xf, 0x8, 0x14, 0x0, 0x0, 0x101, 0x84, 0x7, 0x8, 0x4, 0x7, 0x3, 0x0, 0x2, 0x7, 0x6, 0x5, 0x0, 0x0, 0x7, 0x81, 0x7fff, 0x81, 0x401, 0x6e44a990, 0x2, 0x5, 0x7, 0x3, 0x10000, 0x6, 0x9, 0x1, 0x1, 0x5, 0x58, 0x37218b1d, 0x5, 0x1, 0x6, 0x101, 0x5, 0x7f, 0x581e, 0x1, 0x70fd, 0x6a5, 0xfffffffc, 0x1000, 0xe3fe, 0x80000000, 0xff, 0x0, 0x0, 0x2, 0xfffffffc, 0x93, 0x3, 0x0, 0x2, 0x8, 0x6d2, 0x9, 0xe, 0x6, 0x4, 0x4, 0xb2, 0x0, 0x8, 0x6, 0x10, 0x6, 0x6, 0x3, 0xe1, 0x6, 0x1000, 0x4, 0x1, 0x9, 0xfffffff9, 0x1ff, 0x80, 0x1000, 0xb, 0x2, 0x1, 0x3, 0x0, 0x80000000, 0x80000001, 0x4, 0x2, 0x9c, 0x4, 0x6, 0x1, 0x7ff, 0x8, 0x1, 0x2, 0x1000, 0xce, 0x7, 0x80000000, 0xa, 0x2, 0x400, 0x0, 0xd1, 0x80000001, 0xffffffff, 0x4, 0x63a, 0xb7d, 0x800, 0x2, 0x92, 0xb, 0x6, 0x2, 0xfffffffc, 0x7, 0x8000, 0x1, 0x3, 0xc, 0x7fffffff, 0x7ff, 0x5, 0x3ff, 0x1a9, 0xffff, 0xae2, 0x0, 0x7ff, 0x4, 0x9, 0x7b890c7a, 0x1, 0xfff, 0x5, 0x0, 0xe75, 0x1, 0xd874, 0x1, 0x7, 0x5, 0x7f, 0x80, 0x9, 0x2, 0x1, 0x0, 0x10, 0x7, 0x7ff, 0x149a, 0x34, 0x6, 0x3, 0x9, 0x9, 0x80000000, 0x6, 0x2, 0x1800, 0x10001, 0x6f6f, 0xffffffff, 0x200000, 0x6, 0xb6c, 0x0, 0x8, 0x2, 0xfffffffd, 0x4, 0x4, 0x9, 0x88f, 0x3, 0x2b67, 0xd42f, 0x1, 0xf6a, 0xb, 0xffff, 0x6, 0x5, 0x6, 0x7b, 0x4, 0x4, 0xdb2, 0x3, 0x4, 0x8, 0xfffffffe, 0x927, 0x3, 0x8000, 0x8000, 0x2, 0xbd3, 0x80000001, 0x8, 0x3ff, 0x1, 0xe, 0xb8ca, 0xd, 0x6, 0x4, 0x0, 0x9098, 0x9, 0x1, 0x8001, 0x1, 0x3ff, 0x4, 0x79c, 0xb5f2723, 0xfffffffa, 0x1, 0x7, 0x8, 0x76, 0x5, 0xfffffffe, 0x0, 0xb, 0x9, 0x8, 0x471, 0xffff51ec, 0x5, 0x1, 0x88e, 0x0, 0x401, 0x4, 0x10000, 0xfffffff8, 0x0, 0x7, 0x646, 0x100, 0x81, 0x78, 0x2aaf, 0xa1, 0xffffffd6, 0x5, 0xffff4751, 0xfb21, 0x1c00000, 0x3, 0x2, 0xfffffff1, 0x7671, 0x80, 0x9, 0x8, 0x8, 0xd6, 0x10001, 0x7, 0x5, 0x80000001, 0x80000000, 0x6, 0x4, 0x9, 0xbe3f, 0xd3f, 0x3ff, 0x9, 0x10000, 0x4, 0x5af, 0xff, 0x7f, 0x7, 0xde55, 0x1, 0x40003, 0x2, 0x9, 0x3, 0x6, 0x2df4, 0xff, 0x565, 0x9, 0x4, 0xb, 0xc2, 0xa1, 0x7fff, 0x9, 0x7cf, 0xd1c8, 0x7c2, 0x5, 0x9a03, 0x64d91404, 0xffffffff, 0xfffffffb, 0x10001, 0x4, 0x9, 0x3, 0xfffffc01, 0x5, 0x80, 0x4, 0x7, 0x7, 0x0, 0xf, 0x10, 0x4, 0x0, 0xfffffffe, 0x9, 0x3, 0x5, 0x0, 0x80000000, 0x4, 0x22a, 0x22c9bca, 0x2, 0xa18ea96, 0x9, 0xe68, 0x6, 0x7, 0x3, 0x3, 0x4, 0xb, 0x0, 0x7, 0x400, 0x7, 0x3, 0x0, 0x7, 0x6, 0x87, 0x23e6, 0x0, 0x8, 0x4, 0x9, 0x1, 0x5, 0x9, 0x9, 0x80, 0x2, 0x1, 0x14, 0x6, 0x9a, 0xfffffffc, 0x2, 0x10000, 0x8, 0xfffffffb, 0x1, 0x1, 0x9, 0xb57, 0x600, 0x2, 0x6, 0x100, 0x9, 0x8, 0x0, 0xd6c, 0x9, 0x80000001, 0x6, 0x7, 0xfffffff7, 0xf, 0x6, 0x3, 0xd, 0x0, 0xa, 0xb, 0xffff, 0x9f12, 0x9, 0x101, 0x0, 0x8, 0x5aee, 0x3, 0x101, 0xe4, 0x9, 0x6, 0x6, 0x9, 0x5, 0x9, 0x9, 0x401, 0x3, 0xc7b7, 0x1, 0x1000, 0x6, 0xf397, 0x38fac14f, 0x10001, 0x10000, 0x4, 0x6, 0x9, 0x5, 0x1810afde, 0x6, 0x7fffffff, 0x0, 0x80, 0xa, 0x7fffffff, 0x7ff, 0x6, 0x1ff, 0x9, 0xa03, 0xff, 0xfffffffd, 0x7a6, 0x8, 0x10001, 0x2, 0x25e0b9ee, 0x4, 0xbb, 0x3, 0xfffffeff, 0x3, 0xffffff5a, 0x2, 0x9, 0x1a19, 0x0, 0x9, 0x2fec, 0x3, 0x1, 0x8, 0x8000, 0x7, 0x2, 0x3, 0x8, 0x2, 0x5, 0x5da, 0x2, 0x8, 0x5, 0x81, 0x17, 0x7, 0xc, 0x9, 0x10000, 0x8, 0x7, 0x4, 0xa2fc, 0x2, 0x6, 0x6, 0x7, 0x6, 0x7, 0xfffffffe, 0x4, 0x8001, 0x81, 0x0, 0xff, 0xa5, 0xfffffffa, 0x7, 0x10000, 0x5, 0x0, 0x1, 0x2, 0x10000000, 0xb, 0x1492c008, 0x7, 0x0, 0x5, 0x7, 0x7fff, 0xfffffeff, 0x9, 0xfffffff5, 0x8, 0x2, 0x8, 0xd, 0x47, 0x9, 0x8, 0x6, 0x3, 0x80, 0x1, 0x10001, 0x7, 0x2, 0x200, 0x1, 0x9, 0x7f, 0x6, 0x9, 0x8, 0x4, 0x7fffffff, 0x2, 0x9, 0x5, 0x8, 0xe, 0x9, 0x400, 0x2, 0x2, 0x8, 0x101, 0x9, 0x2, 0xe, 0x8, 0x5, 0x8, 0xffffffff, 0x0, 0x101, 0x4, 0x10000, 0x0, 0x5c9, 0xcb6d, 0x2, 0xfffffffc, 0xf, 0x2, 0x2, 0x1, 0x4, 0x4, 0x5, 0x401, 0x6, 0xffffffff, 0x6, 0x2, 0x3, 0x7fff, 0x4, 0x3, 0x9, 0x3, 0x5, 0xe, 0x7, 0x7b0, 0x1, 0x3, 0x0, 0x4f, 0x80000001, 0x1, 0xfffffffd, 0xfffffffd, 0x0, 0x8, 0x7, 0x2, 0x4, 0x0, 0x80000001, 0x2, 0x40, 0x4, 0x7, 0xbf, 0x4a, 0x8, 0x1420, 0x84, 0x6, 0x3, 0x2b, 0xfff, 0x9, 0x7, 0xbb, 0x100, 0xa, 0x5, 0x4a3, 0x7, 0x7fffffff, 0xe7, 0x8000, 0x9, 0x2, 0xfffffffa, 0x0, 0x7, 0x400, 0x4, 0x9, 0x200, 0x176, 0xf, 0xffffffff, 0x1, 0x9, 0xc, 0xd, 0x8000, 0x3, 0x8, 0x2, 0x2, 0x286, 0x3, 0x1, 0x80000001, 0x5e, 0xd, 0x376, 0x8, 0x800, 0x2, 0x7f, 0x10, 0x1, 0x80, 0x0, 0x401, 0x0, 0x1, 0xf, 0x5, 0x401, 0xb7d, 0x4, 0x10001, 0x3, 0xa63d, 0xffff, 0xffffffff, 0x0, 0x4, 0x4, 0x3, 0x101, 0xa, 0xf, 0x76b, 0x2, 0xbd9e, 0x81, 0x4, 0x9, 0x7f, 0xfffffffa, 0xa, 0x8, 0x5, 0xffffffff, 0xfffffff7, 0x2, 0x2, 0x200, 0x8000, 0x11, 0x4, 0x8, 0x18, 0x6, 0x1f9, 0xe05d, 0x7, 0x8, 0x0, 0x10001, 0x8, 0x5, 0x1d18, 0x4, 0x2, 0x2, 0xfff, 0x1, 0xfffffff8, 0x9, 0x4, 0x9, 0xfffffffd, 0x1487, 0x10001, 0xfff, 0x4, 0x2, 0x5, 0x3, 0xffffffff, 0x1000, 0x2, 0xdb, 0x2, 0x101, 0x28000000, 0x1, 0x0, 0x0, 0x5, 0xfffffffe, 0x10001, 0x0, 0x81, 0x2, 0x1ff, 0x1ff, 0x3, 0x7, 0x0, 0x8, 0x8, 0x3, 0x1868, 0x81, 0x7, 0xfffffff6, 0x2, 0x91f, 0x3b0, 0x86, 0x5, 0x9, 0x2, 0xffff, 0x8, 0x4, 0xb, 0x1, 0x3, 0x7fffffff, 0x2, 0x3, 0x4, 0x401, 0x9, 0x8, 0x1d40, 0x7, 0xe, 0x1, 0x5, 0x2, 0xcbe, 0x1, 0x0, 0x1, 0x8, 0x7, 0x22, 0x8001, 0x6110d5bc, 0x5, 0xe, 0x47, 0x1, 0x9, 0x9, 0xac, 0x4, 0x9, 0x71ba, 0x1, 0x7, 0x1, 0x7, 0x75, 0x8d0, 0x5, 0xffff861b, 0x6, 0x40, 0xdba6, 0x10001, 0x80000001, 0x7fff, 0x8000, 0x0, 0x9, 0x1600000, 0x906, 0x3, 0x54d4, 0x10001, 0x3, 0x4, 0x0, 0x7, 0x7f, 0x2, 0x5, 0x58d2, 0x0, 0x7ef, 0x6, 0x3, 0x2, 0x0, 0x71d8, 0x0, 0xa05, 0x6ed0, 0x9dfa, 0x8000, 0x9, 0x5, 0x8280, 0x7fffffff, 0x81, 0xb8, 0x3, 0x2, 0x2, 0xfffffff7, 0x0, 0x3, 0xfe7, 0x3, 0x8, 0x101, 0xcc, 0x4, 0x3, 0x2, 0xde4, 0x3, 0x4, 0x8, 0x0, 0x4, 0xfffffffb, 0x2, 0x88c]}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000006c0)={0x4, 0x0, [{0xfff9ffff, 0x5f, &(0x7f0000000140)=""/95}, {0x8000000, 0xbb, &(0x7f0000000780)=""/187}, {0x8159000, 0xd9, &(0x7f0000000380)=""/217}, {0x0, 0xa9, &(0x7f0000000600)=""/169}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x6) setsockopt$inet_tcp_int(r7, 0x6, 0x17, &(0x7f0000000240)=0x7ffffbff, 0x4) 1.636992313s ago: executing program 4 (id=1499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.534745782s ago: executing program 4 (id=1500): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in=@rand_addr=0x64010102, 0xfffa, 0xffff, 0xfffb, 0xfffe, 0x2, 0x100, 0x0, 0x89}, {0x8000000000018001, 0x9c, 0x2, 0x0, 0x180000000, 0x8}, {0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x3, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d5, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3506, 0x0, 0x1, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000}, 0x1c) 1.404709427s ago: executing program 4 (id=1502): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r0, 0xae80, 0x0) 1.227238963s ago: executing program 1 (id=1503): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000bc0)="cc", 0x1}], 0x2}, 0x20008800) 1.226908712s ago: executing program 3 (id=1504): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]}) r0 = socket(0x1d, 0x2, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x185843, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) capset(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl1\x00', r5, 0x29, 0x0, 0xc7, 0x6, 0x16, @initdev={0xfe, 0x88, '\x00', 0xe2, 0x0}, @empty, 0x10, 0x1, 0x8, 0xfffffff9}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = mq_open(&(0x7f0000000340)='!sel`\xd1inu\xff\x7f\x95\x8d\xdf\xc4\xb3G\xb0M\xdan\xc0O\x18\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Z\x87\x1c\xddy3+\xa3\'&\x062\xbd-\xaf\xcdP\x9f\xe5Iv\xcc*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xe7l\x8d\xad\x81c', 0x6e93ebbbcc0884f2, 0x6c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r7, 0x0, 0x0, 0x5f8, 0x0) mq_timedsend(r7, 0x0, 0x0, 0xa, 0x0) 1.072633501s ago: executing program 1 (id=1505): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00001a0000000000000000000000010003"], 0xd0}}, 0x0) 973.101541ms ago: executing program 0 (id=1507): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x282, 0x0) sendfile(r0, r0, 0x0, 0x40008) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r1) syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000400)="3a4a0ae358207daac9403daf2e8dd5bee9", 0x11}], 0x1) 931.560079ms ago: executing program 2 (id=1508): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES16], 0xffc9) 842.83408ms ago: executing program 1 (id=1509): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x78d8b7aae58cf1e1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x4, 0x401, 0xb, 0x2}, {0x3, 0x0, 0x2000, 0x1000, 0x842, 0x9}, 0x5810, 0x8, 0x1a46}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x99300bd66d509cf0}]}}]}, 0x70}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 788.208927ms ago: executing program 1 (id=1510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 733.622513ms ago: executing program 2 (id=1511): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) 571.556333ms ago: executing program 1 (id=1512): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x810) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, 0x0, 0x84) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x2000008) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x9, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 421.896911ms ago: executing program 2 (id=1513): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 255.76166ms ago: executing program 2 (id=1514): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x800, 0x4, 0xc1, 0x9, 0x8, 0xbd, 0x0, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0x0, 0x9, 0x87, 0xa, 0x13, 0x7, 0x6, 0xffffffffffffffff}, {0x201, 0x8, 0xc, 0x27, 0x25, 0x9, 0x1, 0x16, 0x3e, 0x10, 0x0, 0x7, 0xfffffffffffffffc}], 0x2}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0x3fe, 0x0, 0x1000, 0x1, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x3, 0x2, 0x1, 0x0, 0x1aa], 0xeeee8000, 0x400}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 223.765822ms ago: executing program 3 (id=1515): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0x7, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 122.928013ms ago: executing program 4 (id=1516): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080), 0x0, 0x0, 0x1) 122.533487ms ago: executing program 3 (id=1517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x80}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x8884) 110.280508ms ago: executing program 4 (id=1518): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, 0x0) sendmmsg$unix(r0, &(0x7f0000008280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x38, 0x8001}}], 0x2, 0x80) 110.050444ms ago: executing program 2 (id=1519): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r1, 0x61646, 0x3020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x480) 83.450654ms ago: executing program 3 (id=1520): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x78d8b7aae58cf1e1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x4, 0x401, 0xb, 0x2}, {0x3, 0x0, 0x2000, 0x1000, 0x842, 0x9}, 0x5810, 0x8, 0x1a46}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x99300bd66d509cf0}]}}]}, 0x70}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 765.227µs ago: executing program 2 (id=1521): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0xef, 0x0, 0x0}) 0s ago: executing program 4 (id=1522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 285.842536][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 285.889014][ T5821] usb 4-1: Product: syz [ 285.911831][ T5821] usb 4-1: Manufacturer: syz [ 285.926462][ T5821] usb 4-1: SerialNumber: syz [ 285.951820][ T5821] usb 4-1: config 0 descriptor?? [ 285.963532][ T8430] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 286.040441][ T30] audit: type=1400 audit(1775475940.152:327): avc: denied { map } for pid=8442 comm="syz.1.688" path="socket:[17646]" dev="sockfs" ino=17646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.096995][ T30] audit: type=1400 audit(1775475940.152:328): avc: denied { read accept } for pid=8442 comm="syz.1.688" path="socket:[17646]" dev="sockfs" ino=17646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 286.227747][ T30] audit: type=1400 audit(1775475940.282:329): avc: denied { create } for pid=8440 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 286.258029][ T8449] netlink: 35 bytes leftover after parsing attributes in process `syz.1.688'. [ 286.391418][ T8453] 9pnet_virtio: no channels available for device syz [ 286.537786][ T30] audit: type=1400 audit(1775475940.562:330): avc: denied { write } for pid=8442 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.527126][ T30] audit: type=1400 audit(1775475940.962:331): avc: denied { write } for pid=8440 comm="syz.4.687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 288.276029][ T4844] usb 4-1: USB disconnect, device number 22 [ 288.587696][ T8472] tmpfs: Unknown parameter 'nr_inodås-gt1' [ 288.661903][ T30] audit: type=1400 audit(1775476198.784:332): avc: denied { ioctl } for pid=8471 comm="syz.4.693" path="socket:[17682]" dev="sockfs" ino=17682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.851781][ T30] audit: type=1400 audit(1775476198.784:333): avc: denied { bind } for pid=8471 comm="syz.4.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 288.961582][ T30] audit: type=1400 audit(1775476199.024:334): avc: denied { ioctl } for pid=8469 comm="syz.1.692" path="socket:[17371]" dev="sockfs" ino=17371 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.142685][ T8476] process 'syz.1.692' launched '/dev/fd/9' with NULL argv: empty string added [ 289.218670][ T30] audit: type=1400 audit(1775476199.274:335): avc: denied { execute } for pid=8469 comm="syz.1.692" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.242608][ T30] audit: type=1400 audit(1775476199.284:336): avc: denied { execute_no_trans } for pid=8469 comm="syz.1.692" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.183448][ T8494] 9pnet_virtio: no channels available for device syz [ 291.199154][ T8494] siw: device registration error -23 [ 292.515823][ T8499] qnx4: no qnx4 filesystem (no root dir). [ 292.964652][ T8503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 293.700458][ T30] audit: type=1400 audit(1775476203.814:337): avc: denied { bind } for pid=8504 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 294.134768][ T8509] FAULT_INJECTION: forcing a failure. [ 294.134768][ T8509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.290512][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.2.701 Not tainted syzkaller #0 PREEMPT(full) [ 294.290538][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.290548][ T8509] Call Trace: [ 294.290554][ T8509] [ 294.290561][ T8509] dump_stack_lvl+0x100/0x190 [ 294.290594][ T8509] should_fail_ex.cold+0x5/0xa [ 294.290619][ T8509] _copy_to_user+0x32/0xd0 [ 294.290642][ T8509] simple_read_from_buffer+0xcb/0x170 [ 294.290664][ T8509] proc_fail_nth_read+0x1af/0x230 [ 294.290691][ T8509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.290718][ T8509] ? rw_verify_area+0xce/0x6d0 [ 294.290743][ T8509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 294.290768][ T8509] vfs_read+0x1e4/0xb30 [ 294.290788][ T8509] ? __pfx_vfs_read+0x10/0x10 [ 294.290803][ T8509] ? __fget_files+0x215/0x3d0 [ 294.290828][ T8509] ? __fget_files+0x21f/0x3d0 [ 294.290854][ T8509] ksys_read+0x12a/0x250 [ 294.290870][ T8509] ? __pfx_ksys_read+0x10/0x10 [ 294.290894][ T8509] do_syscall_64+0x106/0xf80 [ 294.290909][ T8509] ? clear_bhb_loop+0x40/0x90 [ 294.290931][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.290949][ T8509] RIP: 0033:0x7fe0c315d04e [ 294.290969][ T8509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 294.290986][ T8509] RSP: 002b:00007fe0c411cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 294.291003][ T8509] RAX: ffffffffffffffda RBX: 00007fe0c411d6c0 RCX: 00007fe0c315d04e [ 294.291013][ T8509] RDX: 000000000000000f RSI: 00007fe0c411d0a0 RDI: 0000000000000003 [ 294.291023][ T8509] RBP: 00007fe0c411d090 R08: 0000000000000000 R09: 0000000000000000 [ 294.291033][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.291043][ T8509] R13: 00007fe0c3416038 R14: 00007fe0c3415fa0 R15: 00007ffc5adf0268 [ 294.291068][ T8509] [ 294.969635][ T8517] blktrace: Concurrent blktraces are not allowed on loop2 [ 295.360442][ T30] audit: type=1400 audit(1775476205.474:338): avc: denied { create } for pid=8521 comm="syz.0.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 295.684538][ T8526] bridge1: left promiscuous mode [ 295.693953][ T8526] bridge2: left promiscuous mode [ 295.699338][ T8526] bridge3: left promiscuous mode [ 295.704819][ T8526] bridge4: left promiscuous mode [ 295.710176][ T8526] bridge5: left promiscuous mode [ 295.818075][ T30] audit: type=1400 audit(1775476205.944:339): avc: denied { kexec_image_load } for pid=8528 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 295.993018][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 296.387529][ T30] audit: type=1400 audit(1775476206.514:340): avc: denied { ioctl } for pid=8521 comm="syz.0.705" path="socket:[18477]" dev="sockfs" ino=18477 ioctlcmd=0x550b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 296.569161][ T8546] 9pnet_virtio: no channels available for device syz [ 296.584163][ T8546] siw: device registration error -23 [ 298.109046][ T30] audit: type=1400 audit(1775476208.234:341): avc: denied { map } for pid=8552 comm="syz.4.713" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 298.667300][ T30] audit: type=1400 audit(1775476208.794:342): avc: denied { getopt } for pid=8555 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 298.820311][ T8560] tipc: Started in network mode [ 298.825377][ T8560] tipc: Node identity 4004, cluster identity 4711 [ 298.831841][ T8560] tipc: Node number set to 16388 [ 299.159336][ T8566] /dev/nullb0: Can't open blockdev [ 300.399342][ T8567] FAULT_INJECTION: forcing a failure. [ 300.399342][ T8567] name failslab, interval 1, probability 0, space 0, times 0 [ 300.412447][ T8567] CPU: 0 UID: 0 PID: 8567 Comm: syz.4.717 Not tainted syzkaller #0 PREEMPT(full) [ 300.412470][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 300.412478][ T8567] Call Trace: [ 300.412483][ T8567] [ 300.412488][ T8567] dump_stack_lvl+0x100/0x190 [ 300.412511][ T8567] should_fail_ex.cold+0x5/0xa [ 300.412525][ T8567] should_failslab+0xc2/0x120 [ 300.412537][ T8567] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 300.412555][ T8567] ? __alloc_skb+0x140/0x710 [ 300.412573][ T8567] __alloc_skb+0x140/0x710 [ 300.412588][ T8567] ? __pfx___alloc_skb+0x10/0x10 [ 300.412606][ T8567] tcp_stream_alloc_skb+0x34/0x660 [ 300.412621][ T8567] tcp_sendmsg_locked+0x1396/0x45e0 [ 300.412639][ T8567] ? irqentry_exit+0x180/0x670 [ 300.412651][ T8567] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 300.412665][ T8567] ? do_raw_spin_lock+0x128/0x260 [ 300.412679][ T8567] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 300.412694][ T8567] ? __local_bh_enable_ip+0x9e/0x120 [ 300.412710][ T8567] tcp_sendmsg+0x2e/0x50 [ 300.412722][ T8567] ? __pfx_tcp_sendmsg+0x10/0x10 [ 300.412733][ T8567] inet_sendmsg+0xb9/0x140 [ 300.412747][ T8567] __sys_sendto+0x446/0x4b0 [ 300.412761][ T8567] ? __pfx_inet_sendmsg+0x10/0x10 [ 300.412774][ T8567] ? __pfx___sys_sendto+0x10/0x10 [ 300.412799][ T8567] ? __pfx___schedule+0x10/0x10 [ 300.412818][ T8567] __x64_sys_sendto+0xe0/0x1c0 [ 300.412832][ T8567] ? do_syscall_64+0x95/0xf80 [ 300.412841][ T8567] ? lockdep_hardirqs_on+0x78/0x100 [ 300.412862][ T8567] do_syscall_64+0x106/0xf80 [ 300.412872][ T8567] ? clear_bhb_loop+0x40/0x90 [ 300.412886][ T8567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.412897][ T8567] RIP: 0033:0x7f49e399c819 [ 300.412907][ T8567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.412917][ T8567] RSP: 002b:00007f49e4849028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 300.412933][ T8567] RAX: ffffffffffffffda RBX: 00007f49e3c16090 RCX: 00007f49e399c819 [ 300.412940][ T8567] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000005 [ 300.412946][ T8567] RBP: 00007f49e4849090 R08: 0000000000000000 R09: 0000000000000000 [ 300.412952][ T8567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.412961][ T8567] R13: 00007f49e3c16128 R14: 00007f49e3c16090 R15: 00007ffca3d92808 [ 300.412975][ T8567] [ 301.810464][ T5916] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 301.921650][ T8591] 9pnet_virtio: no channels available for device syz [ 301.932905][ T8591] siw: device registration error -23 [ 302.960382][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 303.330417][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 303.370671][ T9] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 303.420435][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.651814][ T8595] syz_tun: entered allmulticast mode [ 303.691634][ T8595] syz_tun: left allmulticast mode [ 303.708138][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.735895][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 303.751227][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.761364][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 303.772418][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.781557][ T5916] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 303.789165][ T5916] usb 4-1: can't read configurations, error -71 [ 303.888194][ T9] usbtmc 2-1:16.0: bulk endpoints not found [ 304.023504][ T8601] blktrace: Concurrent blktraces are not allowed on loop8 [ 304.521523][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 304.780814][ T8587] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 304.922595][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.1.724'. [ 304.940278][ T8587] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.360793][ T8587] netlink: 14 bytes leftover after parsing attributes in process `syz.1.724'. [ 306.211544][ T8605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.416254][ T8632] syz_tun: entered allmulticast mode [ 306.845647][ T9] usb 2-1: USB disconnect, device number 20 [ 307.458211][ T8646] random: crng reseeded on system resumption [ 307.879990][ T8648] syz_tun: entered allmulticast mode [ 307.898852][ T8648] syz_tun: left allmulticast mode [ 309.061589][ T8664] FAULT_INJECTION: forcing a failure. [ 309.061589][ T8664] name failslab, interval 1, probability 0, space 0, times 0 [ 309.200437][ T8664] CPU: 0 UID: 0 PID: 8664 Comm: syz.3.743 Not tainted syzkaller #0 PREEMPT(full) [ 309.200462][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 309.200473][ T8664] Call Trace: [ 309.200478][ T8664] [ 309.200484][ T8664] dump_stack_lvl+0x100/0x190 [ 309.200517][ T8664] should_fail_ex.cold+0x5/0xa [ 309.200540][ T8664] ? tomoyo_encode2+0xfb/0x3c0 [ 309.200564][ T8664] should_failslab+0xc2/0x120 [ 309.200579][ T8664] __kmalloc_noprof+0xe0/0x850 [ 309.200594][ T8664] ? d_absolute_path+0x136/0x1b0 [ 309.200613][ T8664] tomoyo_encode2+0xfb/0x3c0 [ 309.200631][ T8664] tomoyo_encode+0x29/0x50 [ 309.200647][ T8664] tomoyo_realpath_from_path+0x18c/0x690 [ 309.200667][ T8664] tomoyo_path_perm+0x276/0x460 [ 309.200681][ T8664] ? tomoyo_path_perm+0x262/0x460 [ 309.200696][ T8664] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 309.200729][ T8664] security_inode_getattr+0x116/0x280 [ 309.200745][ T8664] vfs_statx+0x11f/0x3f0 [ 309.200759][ T8664] ? __pfx_vfs_statx+0x10/0x10 [ 309.200773][ T8664] ? __might_fault+0x111/0x140 [ 309.200789][ T8664] vfs_fstatat+0x77/0xe0 [ 309.200804][ T8664] __do_sys_newfstatat+0x9d/0x120 [ 309.200818][ T8664] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 309.200831][ T8664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.200851][ T8664] ? __pfx_ksys_write+0x10/0x10 [ 309.200865][ T8664] do_syscall_64+0x106/0xf80 [ 309.200874][ T8664] ? clear_bhb_loop+0x40/0x90 [ 309.200887][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.200899][ T8664] RIP: 0033:0x7f660139c819 [ 309.200908][ T8664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.200918][ T8664] RSP: 002b:00007f66022e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 309.200929][ T8664] RAX: ffffffffffffffda RBX: 00007f6601615fa0 RCX: 00007f660139c819 [ 309.200935][ T8664] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 309.200942][ T8664] RBP: 00007f66022e0090 R08: 0000000000000000 R09: 0000000000000000 [ 309.200948][ T8664] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 309.200954][ T8664] R13: 00007f6601616038 R14: 00007f6601615fa0 R15: 00007ffe77ef6288 [ 309.200967][ T8664] [ 309.200979][ T8664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 309.669482][ T8672] random: crng reseeded on system resumption [ 309.980818][ T5931] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 310.269092][ T5931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.496647][ T5931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 310.521299][ T5931] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 310.550608][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 310.558603][ T5931] usb 5-1: SerialNumber: syz [ 310.568195][ T8683] FAULT_INJECTION: forcing a failure. [ 310.568195][ T8683] name failslab, interval 1, probability 0, space 0, times 0 [ 310.630396][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.0.751 Not tainted syzkaller #0 PREEMPT(full) [ 310.630418][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 310.630429][ T8683] Call Trace: [ 310.630435][ T8683] [ 310.630441][ T8683] dump_stack_lvl+0x100/0x190 [ 310.630473][ T8683] should_fail_ex.cold+0x5/0xa [ 310.630496][ T8683] should_failslab+0xc2/0x120 [ 310.630514][ T8683] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 310.630538][ T8683] ? do_getname+0x35/0x390 [ 310.630559][ T8683] ? css_rstat_updated+0x1ce/0x5a0 [ 310.630585][ T8683] ? __pfx___handle_mm_fault+0x10/0x10 [ 310.630611][ T8683] do_getname+0x35/0x390 [ 310.630636][ T8683] do_sys_openat2+0xc5/0x1e0 [ 310.630659][ T8683] ? __pfx_do_sys_openat2+0x10/0x10 [ 310.630689][ T8683] __x64_sys_openat+0x12d/0x210 [ 310.630711][ T8683] ? __pfx___x64_sys_openat+0x10/0x10 [ 310.630736][ T8683] ? do_user_addr_fault+0x8d6/0x12f0 [ 310.630761][ T8683] do_syscall_64+0x106/0xf80 [ 310.630776][ T8683] ? clear_bhb_loop+0x40/0x90 [ 310.630797][ T8683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.630814][ T8683] RIP: 0033:0x7fd94455d04e [ 310.630830][ T8683] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 310.630846][ T8683] RSP: 002b:00007fd945517ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 310.630863][ T8683] RAX: ffffffffffffffda RBX: 00007fd94551a6c0 RCX: 00007fd94455d04e [ 310.630872][ T8683] RDX: 0000000000000002 RSI: 00007fd944631f88 RDI: ffffffffffffff9c [ 310.630881][ T8683] RBP: 00007fd94551a090 R08: 0000000000000000 R09: 0000000000000000 [ 310.630890][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000056 [ 310.630900][ T8683] R13: 0000200000000080 R14: 0000000000000003 R15: 00007ffffa38bcf8 [ 310.630927][ T8683] [ 310.632314][ T5931] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 310.830119][ T8671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.841577][ T8671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.870430][ T5931] usb-storage 5-1:1.0: USB Mass Storage device detected [ 310.896409][ T5931] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 310.909024][ T5931] scsi host1: usb-storage 5-1:1.0 [ 310.970378][ T4844] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.980820][ T5913] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 311.138696][ T4844] usb 2-1: config index 0 descriptor too short (expected 64776, got 68) [ 311.179925][ T4844] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 311.317835][ T5931] usb 5-1: USB disconnect, device number 30 [ 312.120385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 312.429552][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 312.436103][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.450411][ T4844] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 312.465734][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.483402][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.500483][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.531708][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 312.541064][ T4844] usb 2-1: config index 1 descriptor too short (expected 64776, got 68) [ 312.550395][ T4844] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 312.561707][ T4844] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 312.574570][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.595440][ T5913] usb 4-1: config 0 descriptor?? [ 312.605628][ T4844] usb 2-1: string descriptor 0 read error: -71 [ 312.625804][ T4844] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 312.637904][ T4844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.695844][ T4844] usb 2-1: can't set config #1, error -71 [ 312.818434][ T4844] usb 2-1: USB disconnect, device number 21 [ 313.637204][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 313.800834][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 313.832854][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 313.848827][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 313.917097][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 313.939261][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 313.963771][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 313.979598][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 314.031391][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 314.066310][ T5913] lg-g15 0003:046D:C22E.000B: unknown main item tag 0x0 [ 314.328735][ T5913] lg-g15 0003:046D:C22E.000B: hidraw0: USB HID v7f.7d Device [HID 046d:c22e] on usb-dummy_hcd.3-1/input0 [ 315.219104][ T8720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.759'. [ 315.228191][ T8720] openvswitch: netlink: Flow key attr not present in new flow. [ 315.472335][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.758'. [ 315.481410][ T8721] openvswitch: netlink: Flow actions attr not present in new flow. [ 315.810289][ T8723] ptrace attach of "./syz-executor exec"[8727] was attempted by "./syz-executor exec"[8723] [ 316.145990][ T8733] random: crng reseeded on system resumption [ 316.991193][ T5913] usb 4-1: USB disconnect, device number 25 [ 318.048918][ T30] audit: type=1400 audit(1775477252.173:343): avc: denied { read write } for pid=8751 comm="syz.3.766" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.594511][ T30] audit: type=1400 audit(1775477252.173:344): avc: denied { open } for pid=8751 comm="syz.3.766" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 318.951536][ T8758] ptrace attach of "./syz-executor exec"[5805] was attempted by "./syz-executor exec"[8758] [ 318.970168][ T30] audit: type=1400 audit(1775477252.213:345): avc: denied { ioctl } for pid=8751 comm="syz.3.766" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 319.020822][ T8758] FAULT_INJECTION: forcing a failure. [ 319.020822][ T8758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.052546][ T8760] FAULT_INJECTION: forcing a failure. [ 319.052546][ T8760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.094215][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.3.770 Not tainted syzkaller #0 PREEMPT(full) [ 319.094230][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 319.094237][ T8760] Call Trace: [ 319.094241][ T8760] [ 319.094245][ T8760] dump_stack_lvl+0x100/0x190 [ 319.094267][ T8760] should_fail_ex.cold+0x5/0xa [ 319.094282][ T8760] strncpy_from_user+0x3b/0x2d0 [ 319.094296][ T8760] do_getname+0x78/0x390 [ 319.094312][ T8760] __x64_sys_rmdir+0x36/0x70 [ 319.094326][ T8760] do_syscall_64+0x106/0xf80 [ 319.094335][ T8760] ? clear_bhb_loop+0x40/0x90 [ 319.094349][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.094360][ T8760] RIP: 0033:0x7f660139c819 [ 319.094369][ T8760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.094380][ T8760] RSP: 002b:00007f66022e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 319.094390][ T8760] RAX: ffffffffffffffda RBX: 00007f6601615fa0 RCX: 00007f660139c819 [ 319.094397][ T8760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 319.094403][ T8760] RBP: 00007f66022e0090 R08: 0000000000000000 R09: 0000000000000000 [ 319.094409][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.094415][ T8760] R13: 00007f6601616038 R14: 00007f6601615fa0 R15: 00007ffe77ef6288 [ 319.094428][ T8760] [ 319.097411][ T8758] CPU: 0 UID: 0 PID: 8758 Comm: syz.0.769 Not tainted syzkaller #0 PREEMPT(full) [ 319.097431][ T8758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 319.097438][ T8758] Call Trace: [ 319.097442][ T8758] [ 319.097446][ T8758] dump_stack_lvl+0x100/0x190 [ 319.097466][ T8758] should_fail_ex.cold+0x5/0xa [ 319.097480][ T8758] _copy_to_user+0x32/0xd0 [ 319.097494][ T8758] simple_read_from_buffer+0xcb/0x170 [ 319.097507][ T8758] proc_fail_nth_read+0x1af/0x230 [ 319.097524][ T8758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.097540][ T8758] ? rw_verify_area+0xce/0x6d0 [ 319.097556][ T8758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 319.097572][ T8758] vfs_read+0x1e4/0xb30 [ 319.097583][ T8758] ? __pfx_vfs_read+0x10/0x10 [ 319.097593][ T8758] ? __fget_files+0x215/0x3d0 [ 319.097608][ T8758] ? __fget_files+0x21f/0x3d0 [ 319.097623][ T8758] ksys_read+0x12a/0x250 [ 319.097632][ T8758] ? __pfx_ksys_read+0x10/0x10 [ 319.097646][ T8758] do_syscall_64+0x106/0xf80 [ 319.097656][ T8758] ? clear_bhb_loop+0x40/0x90 [ 319.097669][ T8758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.097680][ T8758] RIP: 0033:0x7fd94455d04e [ 319.097689][ T8758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.097699][ T8758] RSP: 002b:00007fd945519fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 319.097708][ T8758] RAX: ffffffffffffffda RBX: 00007fd94551a6c0 RCX: 00007fd94455d04e [ 319.097715][ T8758] RDX: 000000000000000f RSI: 00007fd94551a0a0 RDI: 0000000000000003 [ 319.097721][ T8758] RBP: 00007fd94551a090 R08: 0000000000000000 R09: 0000000000000000 [ 319.097727][ T8758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.097733][ T8758] R13: 00007fd944816038 R14: 00007fd944815fa0 R15: 00007ffffa38bcf8 [ 319.097746][ T8758] [ 319.653383][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.767'. [ 319.664913][ T8764] openvswitch: netlink: Flow actions attr not present in new flow. [ 319.665890][ T8765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.768'. [ 320.156081][ T30] audit: type=1400 audit(1775477254.213:346): avc: denied { connect } for pid=8766 comm="syz.3.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 320.527045][ T8780] random: crng reseeded on system resumption [ 320.579490][ T5821] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 320.950460][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 320.962651][ T5821] usb 2-1: config 253 has an invalid interface number: 184 but max is 0 [ 321.396743][ T5821] usb 2-1: config 253 has no interface number 0 [ 321.450778][ T5821] usb 2-1: config 253 interface 184 has no altsetting 0 [ 321.481481][ T5821] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 321.520605][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.528660][ T5821] usb 2-1: Product: syz [ 321.534997][ T5821] usb 2-1: Manufacturer: syz [ 321.574942][ T5821] usb 2-1: SerialNumber: syz [ 321.593563][ T5821] go7007 2-1:253.184: probe with driver go7007 failed with error -12 [ 321.851547][ T8772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.300747][ T8772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.354313][ T10] usb 2-1: USB disconnect, device number 22 [ 322.400532][ T5916] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 322.645110][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 322.666409][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.688865][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.710426][ T5916] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 322.730417][ T5916] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 322.752402][ T5916] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.766569][ T5916] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.790394][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.873661][ T5916] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 323.201996][ T30] audit: type=1400 audit(1775477257.333:347): avc: denied { lock } for pid=8809 comm="syz.1.785" path="socket:[18989]" dev="sockfs" ino=18989 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 323.363621][ T8816] netlink: 'syz.0.786': attribute type 2 has an invalid length. [ 323.466275][ T8821] netlink: 'syz.0.786': attribute type 1 has an invalid length. [ 323.603514][ T8822] netlink: 'syz.2.780': attribute type 1 has an invalid length. [ 323.651792][ T8822] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.676063][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.780'. [ 323.697632][ T8808] sp0: Synchronizing with TNC [ 323.711802][ T8822] netlink: 14 bytes leftover after parsing attributes in process `syz.2.780'. [ 323.820439][ T30] audit: type=1400 audit(1775477257.473:348): avc: denied { bind } for pid=8811 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 323.840127][ T30] audit: type=1400 audit(1775477257.473:349): avc: denied { read } for pid=8811 comm="syz.3.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.931808][ T5916] usb 3-1: USB disconnect, device number 16 [ 325.409387][ T5931] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 325.684664][ T5916] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 325.850380][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 325.865586][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 325.871990][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.881912][ T5916] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.891723][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.903957][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.917302][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 325.926437][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.001402][ T5916] usbtmc 4-1:16.0: bulk endpoints not found [ 326.007492][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.021911][ T5931] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 326.438194][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 326.479151][ T5931] usb 1-1: Product: syz [ 326.491507][ T5931] usb 1-1: Manufacturer: syz [ 326.497905][ T5931] usb 1-1: SerialNumber: syz [ 326.529310][ T5931] usb 1-1: config 0 descriptor?? [ 326.560267][ T8856] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 326.626949][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.795'. [ 326.670969][ T8856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 326.769000][ T8834] fuse: Unknown parameter 'fd0x0000000000000007' [ 326.881873][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 327.399672][ T10] usb 1-1: USB disconnect, device number 16 [ 327.460887][ T5916] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 327.627731][ T8875] trusted_key: encrypted_key: insufficient parameters specified [ 327.726157][ T8877] netlink: 'syz.1.802': attribute type 62 has an invalid length. [ 327.772730][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 327.783439][ T5916] usb 5-1: config 1 has an invalid interface number: 49 but max is 1 [ 327.794629][ T5916] usb 5-1: config 1 has no interface number 1 [ 327.804677][ T5916] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 327.831504][ T5916] usb 5-1: too many endpoints for config 1 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 327.849121][ T5916] usb 5-1: config 1 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 327.870992][ T5916] usb 5-1: config 1 interface 0 has no altsetting 0 [ 327.883093][ T5916] usb 5-1: config 1 interface 49 has no altsetting 0 [ 327.898440][ T5916] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 327.920147][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.936304][ T5916] usb 5-1: Product: syz [ 327.944554][ T5916] usb 5-1: Manufacturer: syz [ 327.953589][ T5916] usb 5-1: SerialNumber: syz [ 328.048721][ T5859] usb 4-1: USB disconnect, device number 26 [ 328.182375][ T5916] smsusb:smsusb_probe: board id=8, interface number 0 [ 328.196066][ T5916] smsusb:smsusb_probe: board id=8, interface number 49 [ 328.212632][ T5916] usb 5-1: USB disconnect, device number 31 [ 328.597001][ T5859] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 328.898467][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 329.029141][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.054389][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.065295][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 329.103049][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 329.130130][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.145866][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.155450][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.167986][ T5859] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 329.343744][ T8899] FAULT_INJECTION: forcing a failure. [ 329.343744][ T8899] name failslab, interval 1, probability 0, space 0, times 0 [ 329.359176][ T8899] CPU: 1 UID: 0 PID: 8899 Comm: syz.2.809 Not tainted syzkaller #0 PREEMPT(full) [ 329.359198][ T8899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 329.359208][ T8899] Call Trace: [ 329.359214][ T8899] [ 329.359220][ T8899] dump_stack_lvl+0x100/0x190 [ 329.359254][ T8899] should_fail_ex.cold+0x5/0xa [ 329.359277][ T8899] ? tomoyo_encode2+0xfb/0x3c0 [ 329.359303][ T8899] should_failslab+0xc2/0x120 [ 329.359323][ T8899] __kmalloc_noprof+0xe0/0x850 [ 329.359347][ T8899] ? d_absolute_path+0x136/0x1b0 [ 329.359378][ T8899] tomoyo_encode2+0xfb/0x3c0 [ 329.359408][ T8899] tomoyo_encode+0x29/0x50 [ 329.359433][ T8899] tomoyo_realpath_from_path+0x18c/0x690 [ 329.359463][ T8899] tomoyo_path_number_perm+0x23c/0x580 [ 329.359484][ T8899] ? tomoyo_path_number_perm+0x22e/0x580 [ 329.359507][ T8899] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 329.359555][ T8899] ? find_held_lock+0x2b/0x80 [ 329.359574][ T8899] ? __fget_files+0x215/0x3d0 [ 329.359585][ T8899] ? hook_file_ioctl_common+0x146/0x410 [ 329.359600][ T8899] ? __fget_files+0x21f/0x3d0 [ 329.359614][ T8899] security_file_ioctl+0xd3/0x230 [ 329.359631][ T8899] __x64_sys_ioctl+0xb7/0x210 [ 329.359648][ T8899] do_syscall_64+0x106/0xf80 [ 329.359658][ T8899] ? clear_bhb_loop+0x40/0x90 [ 329.359672][ T8899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.359683][ T8899] RIP: 0033:0x7fe0c319c819 [ 329.359692][ T8899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.359702][ T8899] RSP: 002b:00007fe0c411d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.359713][ T8899] RAX: ffffffffffffffda RBX: 00007fe0c3415fa0 RCX: 00007fe0c319c819 [ 329.359720][ T8899] RDX: 0000000000000000 RSI: 00000000000007a6 RDI: 0000000000000003 [ 329.359726][ T8899] RBP: 00007fe0c411d090 R08: 0000000000000000 R09: 0000000000000000 [ 329.359732][ T8899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.359738][ T8899] R13: 00007fe0c3416038 R14: 00007fe0c3415fa0 R15: 00007ffc5adf0268 [ 329.359751][ T8899] [ 329.393847][ T8899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 329.457436][ T30] audit: type=1400 audit(1775477263.583:350): avc: denied { write } for pid=8889 comm="syz.1.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 329.676879][ T30] audit: type=1400 audit(1775477263.723:351): avc: denied { ioctl } for pid=8889 comm="syz.1.808" path="socket:[19689]" dev="sockfs" ino=19689 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 329.677154][ T8904] netlink: zone id is out of range [ 329.706985][ T8904] netlink: zone id is out of range [ 329.738733][ T30] audit: type=1400 audit(1775477263.863:352): avc: denied { append } for pid=8903 comm="syz.2.810" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 329.762937][ T8907] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 329.776955][ T8904] netlink: zone id is out of range [ 329.795245][ T8907] 8021q: adding VLAN 0 to HW filter on device bond4 [ 329.804073][ T8904] netlink: zone id is out of range [ 329.811701][ T8905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.818696][ T8904] netlink: zone id is out of range [ 329.825155][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.803'. [ 329.834624][ T8907] netlink: 14 bytes leftover after parsing attributes in process `syz.3.803'. [ 329.846240][ T8904] netlink: zone id is out of range [ 329.852356][ T8905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.858384][ T8904] netlink: zone id is out of range [ 329.863825][ T8904] netlink: zone id is out of range [ 329.869049][ T8904] netlink: zone id is out of range [ 329.874453][ T8905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 329.881689][ T8905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 329.888654][ T8904] netlink: zone id is out of range [ 329.972203][ T30] audit: type=1400 audit(1775477264.073:353): avc: denied { setopt } for pid=8903 comm="syz.2.810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 330.780416][ T5916] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 330.955414][ T5916] usb 2-1: Invalid ep0 maxpacket: 9 [ 331.090401][ T5916] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 331.174383][ T5821] usb 4-1: USB disconnect, device number 27 [ 331.252127][ T8928] netlink: 'syz.4.815': attribute type 62 has an invalid length. [ 331.322886][ T5916] usb 2-1: Invalid ep0 maxpacket: 9 [ 331.332908][ T5916] usb usb2-port1: attempt power cycle [ 331.476204][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 331.740704][ T5821] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 331.760630][ T5916] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 331.880662][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 331.881181][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 331.894025][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 331.972021][ T5821] usb 4-1: unable to get BOS descriptor or descriptor too short [ 331.988093][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 332.075263][ T5916] usb 2-1: Invalid ep0 maxpacket: 9 [ 332.109252][ T5821] usb 4-1: not running at top speed; connect to a high speed hub [ 332.172131][ T5821] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 332.192064][ T5821] usb 4-1: string descriptor 0 read error: -22 [ 332.198314][ T5821] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 332.215086][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.280394][ T5916] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 332.385270][ T5916] usb 2-1: Invalid ep0 maxpacket: 9 [ 332.508333][ T8945] hfsplus: unable to find HFS+ superblock [ 332.964584][ T5916] usb usb2-port1: unable to enumerate USB device [ 334.031369][ T5821] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 334.334632][ T5821] usb 4-1: USB disconnect, device number 28 [ 334.790771][ T8969] blktrace: Concurrent blktraces are not allowed on loop6 [ 335.667194][ T8982] netlink: 'syz.0.829': attribute type 62 has an invalid length. [ 335.974725][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.832'. [ 335.994193][ T5916] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 336.202556][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 336.311937][ T5916] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 336.323167][ T5916] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 17, changing to 8 [ 336.572329][ T8995] random: crng reseeded on system resumption [ 336.927610][ T5916] usb 3-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 336.940529][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.947136][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 336.956600][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.152018][ T5916] usb 3-1: config 0 descriptor?? [ 337.300616][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 337.580342][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 337.948809][ T9008] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.370181][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.453633][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.471042][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 338.481395][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 338.491913][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.510164][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 338.530434][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.623129][ T9] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 339.173352][ T9018] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 339.208613][ T9018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.228231][ T9018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.835'. [ 339.386727][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 339.404231][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 339.507102][ T9029] ubi31: attaching mtd0 [ 339.521256][ T9029] ubi31: scanning is finished [ 339.525964][ T9029] ubi31: empty MTD device detected [ 339.830561][ T5916] usb 3-1: USB disconnect, device number 17 [ 339.954704][ T9029] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 339.962815][ T9029] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 339.970112][ T9029] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 339.977810][ T9029] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 339.985289][ T9029] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 339.992158][ T9029] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 340.000200][ T9029] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2898077231 [ 340.010298][ T9029] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 340.036742][ T9038] ubi31: background thread "ubi_bgt31d" started, PID 9038 [ 340.513413][ T5859] usb 1-1: USB disconnect, device number 17 [ 340.620900][ T5931] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 340.780636][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 340.798414][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.068513][ T5931] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 341.100439][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.140481][ T5859] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 342.085871][ T5931] usb 2-1: config 0 descriptor?? [ 342.250366][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 342.261139][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 342.270988][ T5859] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 342.284492][ T5859] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice= 0.40 [ 342.293729][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.301813][ T5859] usb 4-1: Product: syz [ 342.306093][ T5859] usb 4-1: Manufacturer: syz [ 342.319781][ T5859] usb 4-1: SerialNumber: syz [ 343.038663][ T9077] net_ratelimit: 13 callbacks suppressed [ 343.038694][ T9077] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.088035][ T9086] random: crng reseeded on system resumption [ 344.626415][ T5916] usb 2-1: USB disconnect, device number 27 [ 345.360362][ T9104] syz_tun: entered allmulticast mode [ 345.377158][ T9104] syz_tun: left allmulticast mode [ 346.031752][ T9110] bridge1: left promiscuous mode [ 346.037178][ T9110] bridge2: left promiscuous mode [ 346.403137][ T5859] usb 4-1: USB disconnect, device number 29 [ 346.496146][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.632877][ T9117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.221185][ T9126] hfsplus: unable to find HFS+ superblock [ 347.630625][ T30] audit: type=1400 audit(1775477281.343:354): avc: denied { mounton } for pid=9120 comm="syz.0.868" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 348.770729][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 348.828042][ T9150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 348.834359][ T9150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 348.841098][ T9150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 348.847212][ T9150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 348.920941][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 348.930861][ T9154] syz_tun: entered allmulticast mode [ 348.954040][ T9154] syz_tun: left allmulticast mode [ 348.991470][ T4844] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 348.994847][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.192786][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.220439][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.230907][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.244790][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.260020][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.300334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 349.310332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 349.768962][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 349.781151][ T4844] usb 3-1: Using ep0 maxpacket: 8 [ 349.792443][ T9] usbtmc 5-1:16.0: can't read capabilities [ 349.801014][ T4844] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.811889][ T4844] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.832314][ T4844] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.869322][ T4844] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.889456][ T4844] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.900077][ T4844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.941459][ T9162] FAULT_INJECTION: forcing a failure. [ 349.941459][ T9162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.957959][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.3.879 Not tainted syzkaller #0 PREEMPT(full) [ 349.957982][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 349.957993][ T9162] Call Trace: [ 349.957998][ T9162] [ 349.958005][ T9162] dump_stack_lvl+0x100/0x190 [ 349.958039][ T9162] should_fail_ex.cold+0x5/0xa [ 349.958064][ T9162] _copy_from_user+0x2e/0xd0 [ 349.958086][ T9162] memdup_user+0x6b/0xe0 [ 349.958103][ T9162] strndup_user+0x78/0xe0 [ 349.958121][ T9162] __x64_sys_mount+0x136/0x310 [ 349.958146][ T9162] ? __pfx___x64_sys_mount+0x10/0x10 [ 349.958177][ T9162] do_syscall_64+0x106/0xf80 [ 349.958193][ T9162] ? clear_bhb_loop+0x40/0x90 [ 349.958215][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.958238][ T9162] RIP: 0033:0x7f660139c819 [ 349.958253][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.958270][ T9162] RSP: 002b:00007f66022e0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 349.958287][ T9162] RAX: ffffffffffffffda RBX: 00007f6601615fa0 RCX: 00007f660139c819 [ 349.958298][ T9162] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 349.958309][ T9162] RBP: 00007f66022e0090 R08: 00002000000003c0 R09: 0000000000000000 [ 349.958320][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.958329][ T9162] R13: 00007f6601616038 R14: 00007f6601615fa0 R15: 00007ffe77ef6288 [ 349.958352][ T9162] [ 350.255502][ T9164] 9pnet_virtio: no channels available for device syz [ 350.272551][ T9164] siw: device registration error -23 [ 350.426827][ T9142] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 350.516549][ T4844] usb 3-1: GET_CAPABILITIES returned 0 [ 350.579471][ T4844] usbtmc 3-1:16.0: can't read capabilities [ 350.607116][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.873'. [ 350.713788][ T9148] netlink: 'syz.2.875': attribute type 1 has an invalid length. [ 350.965274][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 350.971777][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 350.977759][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 350.983820][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 351.011471][ T9172] netlink: 14 bytes leftover after parsing attributes in process `syz.4.873'. [ 351.080077][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.875'. [ 351.109935][ T9142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.141588][ T9175] netlink: 14 bytes leftover after parsing attributes in process `syz.2.875'. [ 351.214713][ T9148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.238646][ T4844] usb 5-1: USB disconnect, device number 32 [ 351.318272][ T5859] usb 3-1: USB disconnect, device number 18 [ 351.514869][ T9179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 351.527992][ T9179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 351.568351][ T9179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 351.574609][ T9179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 351.777744][ T9187] hfsplus: unable to find HFS+ superblock [ 352.820850][ T9205] random: crng reseeded on system resumption [ 353.641716][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 353.645443][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 353.647778][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 353.780437][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 354.722122][ T9223] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 354.794918][ T9228] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 354.805386][ T30] audit: type=1400 audit(1775477544.921:355): avc: denied { mount } for pid=9222 comm="syz.1.894" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 355.230972][ T5859] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 355.560453][ T5859] usb 4-1: Using ep0 maxpacket: 8 [ 355.572444][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.587335][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.598615][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.610925][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.625124][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.636234][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.736785][ T30] audit: type=1400 audit(1775477801.867:356): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 357.043139][ T5859] usb 4-1: GET_CAPABILITIES returned 0 [ 357.049020][ T5859] usbtmc 4-1:16.0: can't read capabilities [ 357.246157][ T9259] hfsplus: unable to find HFS+ superblock [ 357.271738][ T9233] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 357.678485][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz.3.897'. [ 357.747140][ T9266] netlink: 14 bytes leftover after parsing attributes in process `syz.3.897'. [ 358.060074][ T9270] hfsplus: unable to find HFS+ superblock [ 358.252768][ T9233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 358.620809][ T5859] usb 4-1: USB disconnect, device number 30 [ 358.915578][ T5916] IPVS: starting estimator thread 0... [ 359.368521][ T9289] blktrace: Concurrent blktraces are not allowed on loop2 [ 359.406114][ T9286] bridge1: left promiscuous mode [ 359.411928][ T9286] bridge2: left promiscuous mode [ 359.417496][ T9286] bridge3: left promiscuous mode [ 359.426579][ T9286] bridge4: left promiscuous mode [ 359.730424][ T9277] IPVS: using max 42 ests per chain, 100800 per kthread [ 360.367620][ T9307] netlink: 'syz.3.913': attribute type 2 has an invalid length. [ 360.446171][ T9308] netlink: 'syz.3.913': attribute type 1 has an invalid length. [ 362.065534][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 362.532932][ T9334] qnx4: no qnx4 filesystem (no root dir). [ 364.007048][ T9349] blktrace: Concurrent blktraces are not allowed on loop2 [ 364.620562][ T9362] netlink: 'syz.3.928': attribute type 2 has an invalid length. [ 364.716305][ T9365] 9pnet_virtio: no channels available for device syz [ 364.737923][ T9365] siw: device registration error -23 [ 365.790754][ T9366] 9pnet_virtio: no channels available for device syz [ 366.766595][ T9362] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 367.584684][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'. [ 369.147496][ T9405] blktrace: Concurrent blktraces are not allowed on loop8 [ 369.914618][ T9412] netlink: zone id is out of range [ 369.919736][ T9412] netlink: zone id is out of range [ 369.925148][ T9412] netlink: zone id is out of range [ 369.930236][ T9412] netlink: zone id is out of range [ 369.936524][ T9412] netlink: zone id is out of range [ 369.941850][ T9412] netlink: zone id is out of range [ 369.947093][ T9412] netlink: zone id is out of range [ 369.953665][ T9412] netlink: zone id is out of range [ 369.977029][ T9412] netlink: zone id is out of range [ 370.055930][ T9412] netlink: zone id is out of range [ 370.184677][ T9417] syzkaller0: entered promiscuous mode [ 370.190288][ T9417] syzkaller0: entered allmulticast mode [ 370.640197][ T9424] 9pnet_virtio: no channels available for device syz [ 371.551406][ T30] audit: type=1400 audit(1775477817.677:357): avc: denied { append } for pid=9438 comm="syz.2.948" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 372.337681][ T9451] blktrace: Concurrent blktraces are not allowed on loop0 [ 372.751045][ T30] audit: type=1400 audit(1775477818.887:358): avc: denied { create } for pid=9453 comm="syz.4.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 372.961747][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 372.976171][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.279075][ T9474] netlink: 'syz.1.959': attribute type 2 has an invalid length. [ 375.849903][ T9481] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 376.458901][ T9489] blktrace: Concurrent blktraces are not allowed on loop8 [ 377.314315][ T9503] 9pnet_virtio: no channels available for device syz [ 377.542742][ T9507] random: crng reseeded on system resumption [ 378.712090][ T9518] net_ratelimit: 36 callbacks suppressed [ 378.712121][ T9518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.023558][ T9520] netlink: zone id is out of range [ 379.057636][ T9520] netlink: zone id is out of range [ 379.180605][ T9520] netlink: zone id is out of range [ 379.210490][ T9520] netlink: zone id is out of range [ 379.641084][ T9520] netlink: zone id is out of range [ 379.647622][ T9520] netlink: zone id is out of range [ 379.653097][ T9520] netlink: zone id is out of range [ 379.659660][ T9520] netlink: zone id is out of range [ 379.666545][ T9520] netlink: zone id is out of range [ 382.091116][ T9557] hfsplus: unable to find HFS+ superblock [ 383.222542][ T9569] qnx4: no qnx4 filesystem (no root dir). [ 383.635573][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 383.644926][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 383.656112][ T9573] [U]  [ 385.977270][ T9586] random: crng reseeded on system resumption [ 387.601037][ T9602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 387.708666][ T5859] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 387.931835][ T9602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 387.991619][ T9602] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 388.101968][ T9602] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 388.165244][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short [ 388.187329][ T5859] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 388.248378][ T5859] usb 4-1: can't read configurations, error -71 [ 389.220932][ T9630] net_ratelimit: 14 callbacks suppressed [ 389.220951][ T9630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.641171][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 389.671357][ T9640] qnx4: no qnx4 filesystem (no root dir). [ 389.716254][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 389.725845][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 389.736574][ T9641] [U]  [ 389.960399][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 390.040541][ T5811] Bluetooth: hci3: command 0x0406 tx timeout [ 390.200896][ T5811] Bluetooth: hci4: command 0x0406 tx timeout [ 392.170280][ T9663] netlink: 'syz.3.1008': attribute type 62 has an invalid length. [ 393.925760][ T9681] blktrace: Concurrent blktraces are not allowed on loop4 [ 394.364283][ T9684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1013'. [ 395.999495][ T9695] hfsplus: unable to find HFS+ superblock [ 396.818402][ T9699] syz_tun: entered allmulticast mode [ 396.839702][ T9699] syz_tun: left allmulticast mode [ 398.445351][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 398.454752][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 398.465961][ T9724] [U]  [ 398.536219][ T9722] netlink: zone id is out of range [ 398.541454][ T9722] netlink: zone id is out of range [ 399.015605][ T9729] syz_tun: entered allmulticast mode [ 399.037073][ T9729] syz_tun: left allmulticast mode [ 399.040364][ T9722] netlink: zone id is out of range [ 399.314938][ T9730] netlink: 'syz.4.1027': attribute type 2 has an invalid length. [ 399.342936][ T9722] netlink: zone id is out of range [ 399.349238][ T9722] netlink: zone id is out of range [ 399.361719][ T9722] netlink: zone id is out of range [ 399.370576][ T9722] netlink: zone id is out of range [ 399.392748][ T9731] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 399.408874][ T9722] netlink: zone id is out of range [ 399.414196][ T9722] netlink: zone id is out of range [ 399.421425][ T9722] netlink: zone id is out of range [ 400.043844][ T9743] hfsplus: unable to find HFS+ superblock [ 400.753392][ T9746] syz_tun: entered allmulticast mode [ 400.799026][ T9746] syz_tun: left allmulticast mode [ 402.624221][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1038'. [ 403.783616][ T9784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1035'. [ 404.215233][ T9786] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 404.496224][ T9790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.510858][ T9790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.512910][ T9786] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 404.517236][ T9790] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.554450][ T9790] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 404.996162][ T9802] netlink: 'syz.0.1043': attribute type 1 has an invalid length. [ 405.093479][ T9805] netlink: 'syz.2.1047': attribute type 62 has an invalid length. [ 406.838399][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 406.838420][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 406.838760][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 406.962493][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 407.370469][ T5931] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 408.987440][ T9851] random: crng reseeded on system resumption [ 409.762157][ T5931] usb 3-1: unable to get BOS descriptor or descriptor too short [ 409.772052][ T5931] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 409.872311][ T5931] usb 3-1: can't read configurations, error -71 [ 411.515704][ T9882] hfsplus: unable to find HFS+ superblock [ 412.774368][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 412.784626][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 412.796066][ T9898] [U]  [ 413.673089][ T9906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 413.689314][ T9906] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.715999][ T9906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.749084][ T9906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 414.840408][ T5931] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 415.051675][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 415.212668][ T9920] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 415.219200][ T9920] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.225541][ T9920] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 415.237783][ T9920] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 415.270578][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 415.281957][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.319164][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 415.349510][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 415.370468][ T10] usb 5-1: Product: syz [ 415.374639][ T10] usb 5-1: Manufacturer: syz [ 415.379224][ T10] usb 5-1: SerialNumber: syz [ 415.462926][ T10] usb 5-1: config 0 descriptor?? [ 415.739441][ T9935] hfsplus: unable to find HFS+ superblock [ 416.596721][ T9932] syz_tun: entered allmulticast mode [ 416.632886][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 416.648251][ T5931] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 416.656500][ T5931] usb 1-1: can't read configurations, error -71 [ 416.763444][ T9932] syz_tun: left allmulticast mode [ 417.240698][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 417.246883][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 417.252947][ T5811] Bluetooth: hci1: command 0x0406 tx timeout [ 417.259049][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 417.333228][ T9951] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 417.510024][ T9951] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.587195][ T9963] 9pnet_virtio: no channels available for device syz [ 417.604034][ T9963] siw: device registration error -23 [ 417.657932][ T9954] bond7: (slave geneve2): making interface the new active one [ 417.677566][ T9954] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 418.864025][ T5931] usb 5-1: USB disconnect, device number 33 [ 419.489441][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 419.498733][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 419.509360][ T9977] [U]  [ 419.593092][ T9979] syz_tun: entered allmulticast mode [ 419.629620][ T9979] syz_tun: left allmulticast mode [ 419.663331][ T9974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.747486][ T9974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.821206][ T9974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 419.839931][ T9974] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 421.560431][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 421.802218][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 421.890926][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 421.890937][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 422.019006][T10007] net_ratelimit: 13 callbacks suppressed [ 422.019036][T10007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.807432][ T30] audit: type=1400 audit(1775478381.933:359): avc: denied { unlink } for pid=10033 comm="syz.0.1108" name="#1" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 424.173927][T10023] syzkaller0: entered promiscuous mode [ 424.179541][ T30] audit: type=1400 audit(1775478381.963:360): avc: denied { mount } for pid=10033 comm="syz.0.1108" name="/" dev="overlay" ino=1243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 424.214367][T10023] syzkaller0: entered allmulticast mode [ 424.302254][ T30] audit: type=1400 audit(1775478382.423:361): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 424.738552][T10032] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.747147][T10032] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.782762][T10032] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.865271][T10045] syz_tun: entered allmulticast mode [ 424.884904][T10045] syz_tun: left allmulticast mode [ 425.038922][T10032] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 425.510396][ T5913] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 425.522755][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 425.534574][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 425.545620][T10053] [U]  [ 425.700406][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 425.712274][ T5913] usb 4-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 425.731429][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 425.738236][ T5913] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 425.759649][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.062300][ T5913] usb 4-1: config 0 descriptor?? [ 426.156950][T10061] ucma_write: process 728 (syz.4.1116) changed security contexts after opening file descriptor, this is not allowed. [ 426.246161][T10061] tipc: MTU too low for tipc bearer [ 426.450653][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 426.529407][T10061] bridge_slave_0: left allmulticast mode [ 426.538075][T10069] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 426.543910][T10061] bridge_slave_0: left promiscuous mode [ 426.552001][ T5913] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 426.637394][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.961132][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 426.967197][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 427.005101][ T5913] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -38 [ 427.008025][T10061] bridge_slave_1: left allmulticast mode [ 427.019294][ T5913] usb 4-1: USB disconnect, device number 33 [ 427.045618][T10071] fido_id[10071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 427.061969][T10061] bridge_slave_1: left promiscuous mode [ 427.072533][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.085462][T10061] bond0: (slave bond_slave_0): Releasing backup interface [ 427.092317][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 427.103986][T10061] bond0: (slave bond_slave_1): Releasing backup interface [ 427.136643][T10061] team0: Port device team_slave_0 removed [ 427.144322][T10061] team0: Port device team_slave_1 removed [ 427.155890][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.163352][T10061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.171585][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.178933][T10061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.187087][T10061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 428.985339][T10088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 428.997006][T10088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.028394][T10088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.040806][T10088] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 431.000403][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 431.000407][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 431.080417][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 431.080473][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 431.333195][T10115] 9pnet_virtio: no channels available for device syz [ 431.342312][T10115] siw: device registration error -23 [ 432.506424][T10119] syzkaller0: entered promiscuous mode [ 432.630376][T10119] syzkaller0: entered allmulticast mode [ 433.061788][ T5913] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 433.326441][ T30] audit: type=1400 audit(1775478391.453:362): avc: denied { ioctl } for pid=10138 comm="syz.2.1141" path="socket:[25730]" dev="sockfs" ino=25730 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 433.340480][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 433.384072][ T5913] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 433.386112][ T30] audit: type=1400 audit(1775478391.453:363): avc: denied { bind } for pid=10138 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 433.422085][ T5913] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 433.439424][ T30] audit: type=1400 audit(1775478391.453:364): avc: denied { setopt } for pid=10138 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 433.459135][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.466392][ T30] audit: type=1400 audit(1775478391.453:365): avc: denied { write } for pid=10138 comm="syz.2.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 433.496564][ T5913] usb 4-1: Product: syz [ 433.502490][ T5913] usb 4-1: Manufacturer: syz [ 433.507439][ T5913] usb 4-1: SerialNumber: syz [ 433.515376][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 433.559184][ T5913] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 433.880464][ T30] audit: type=1400 audit(1775478391.713:366): avc: denied { create } for pid=10144 comm="syz.4.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 433.912831][ T30] audit: type=1400 audit(1775478391.713:367): avc: denied { read write } for pid=10144 comm="syz.4.1143" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 433.984314][ T30] audit: type=1400 audit(1775478391.713:368): avc: denied { open } for pid=10144 comm="syz.4.1143" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 434.013734][ T30] audit: type=1400 audit(1775478392.143:369): avc: denied { append } for pid=10151 comm="syz.1.1145" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 434.366825][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.373181][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.445728][ T5913] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 434.491308][T10171] loop8: detected capacity change from 0 to 7 [ 434.504505][ T5796] Dev loop8: unable to read RDB block 7 [ 434.513028][ T5913] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 434.537989][ T5796] loop8: unable to read partition table [ 434.561630][ T5913] usb 4-1: media controller created [ 434.568210][ T5796] loop8: partition table beyond EOD, truncated [ 434.598401][T10171] Dev loop8: unable to read RDB block 7 [ 434.606964][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 434.608535][T10171] loop8: unable to read partition table [ 434.660496][T10171] loop8: partition table beyond EOD, truncated [ 434.666783][T10171] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 435.335614][ T5913] usb 4-1: USB disconnect, device number 34 [ 435.451744][T10212] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 435.458314][T10212] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 435.500437][ T30] audit: type=1400 audit(1775478393.603:370): avc: denied { cmd } for pid=10215 comm="syz.4.1158" path="socket:[25799]" dev="sockfs" ino=25799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 435.509809][T10212] vhci_hcd vhci_hcd.0: Device attached [ 435.700595][ T5931] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 435.777517][ T5931] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 435.804325][ T30] audit: type=1400 audit(1775478393.873:371): avc: denied { listen } for pid=10224 comm="syz.4.1161" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 436.044064][T10225] sg_write: data in/out 33554392/14 bytes for SCSI command 0x6-- guessing data in; [ 436.044064][T10225] program syz.4.1161 not setting count and/or reply_len properly [ 436.084708][T10232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 436.352799][T10213] vhci_hcd: connection reset by peer [ 436.389370][ T49] vhci_hcd vhci_hcd.1: stop threads [ 436.395917][ T49] vhci_hcd vhci_hcd.1: release socket [ 436.408198][ T49] vhci_hcd vhci_hcd.1: disconnect device [ 436.440742][ T5916] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 436.610735][ T5916] usb 4-1: device descriptor read/64, error -71 [ 436.870388][ T5916] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 436.930094][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 436.940234][T10244] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1168'. [ 437.020377][ T5916] usb 4-1: device descriptor read/64, error -71 [ 437.152237][ T5916] usb usb4-port1: attempt power cycle [ 437.610389][ T5916] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 437.644518][ T5916] usb 4-1: device descriptor read/8, error -71 [ 437.900500][ T5916] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 437.970844][ T5916] usb 4-1: device descriptor read/8, error -71 [ 438.000578][ T4844] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 438.101852][ T5916] usb usb4-port1: unable to enumerate USB device [ 438.160327][ T4844] usb 1-1: Using ep0 maxpacket: 8 [ 438.166733][ T4844] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 438.177533][ T4844] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 438.231028][ T4844] usb 1-1: config 0 has no interface number 0 [ 438.340537][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 438.340555][ T30] audit: type=1400 audit(1775478396.393:387): avc: denied { ioctl } for pid=10271 comm="syz.2.1179" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x45a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 438.400364][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 438.427789][ T4844] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 438.483448][ T4844] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 438.517815][T10287] No such timeout policy "syz1" [ 438.533795][T10287] netlink: 'syz.1.1182': attribute type 8 has an invalid length. [ 438.547054][ T4844] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 438.596196][ T30] audit: type=1400 audit(1775478396.703:388): avc: denied { create } for pid=10278 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 438.650082][ T4844] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 438.663232][ T30] audit: type=1400 audit(1775478396.703:389): avc: denied { read } for pid=10278 comm="syz.1.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 438.682827][ T4844] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 438.698887][ T4844] usb 1-1: Product: syz [ 438.708724][ T4844] usb 1-1: Manufacturer: syz [ 438.724075][ T4844] usb 1-1: config 0 descriptor?? [ 439.110989][ T4844] usb 1-1: USB disconnect, device number 20 [ 439.225402][T10278] delete_channel: no stack [ 439.900356][ T5916] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 440.010373][ T4844] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 440.060349][ T5916] usb 2-1: Using ep0 maxpacket: 16 [ 440.076163][ T5916] usb 2-1: config 0 has no interfaces? [ 440.100111][ T5916] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 440.109199][ T5916] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.117293][ T5916] usb 2-1: Manufacturer: syz [ 440.132752][ T5916] usb 2-1: config 0 descriptor?? [ 440.171642][ T4844] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 440.213056][ T4844] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 440.223338][ T4844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.231566][ T4844] usb 1-1: Product: syz [ 440.235805][ T4844] usb 1-1: Manufacturer: syz [ 440.240601][ T4844] usb 1-1: SerialNumber: syz [ 440.251247][ T4844] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 440.349623][ T5859] usb 2-1: USB disconnect, device number 28 [ 440.675759][ T4844] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 440.699874][ T4844] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 440.709303][ T5809] Bluetooth: hci3: unexpected event for opcode 0x200c [ 440.716840][ T4844] usb 1-1: media controller created [ 440.732767][ T4844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 440.825057][ T4844] usb 1-1: USB disconnect, device number 21 [ 440.910497][ T5931] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 441.290237][ T30] audit: type=1400 audit(1775478399.403:390): avc: denied { module_request } for pid=10337 comm="syz.4.1202" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 441.317959][T10343] netlink: 'syz.2.1199': attribute type 21 has an invalid length. [ 441.325968][T10343] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1199'. [ 441.358105][T10343] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1199'. [ 441.368832][T10335] netlink: 'syz.2.1199': attribute type 21 has an invalid length. [ 441.376689][T10335] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1199'. [ 441.385999][T10335] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1199'. [ 441.861707][ T5916] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 442.030324][ T5916] usb 1-1: Using ep0 maxpacket: 32 [ 442.036946][ T5916] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 442.046817][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.088773][ T5916] usb 1-1: config 0 descriptor?? [ 442.300612][ T5916] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 442.320422][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 442.342281][ T5916] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 442.362038][ T5916] usb 1-1: media controller created [ 442.391028][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.501739][T10349] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 442.512023][ T5916] az6027: usb out operation failed. (-71) [ 442.521023][ T5916] az6027: usb out operation failed. (-71) [ 442.544159][ T5916] stb0899_attach: Driver disabled by Kconfig [ 442.573645][ T5916] az6027: no front-end attached [ 442.573645][ T5916] [ 442.610630][ T5916] az6027: usb out operation failed. (-71) [ 442.631119][ T5916] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 442.669971][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 442.712480][ T30] audit: type=1400 audit(1775478400.843:391): avc: denied { read } for pid=5165 comm="acpid" name="event4" dev="devtmpfs" ino=3129 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.740527][ T5916] dvb-usb: schedule remote query interval to 400 msecs. [ 442.762349][ T5916] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 442.811645][ T5916] usb 1-1: USB disconnect, device number 22 [ 442.850380][ T30] audit: type=1400 audit(1775478400.843:392): avc: denied { open } for pid=5165 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3129 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.972774][ T5916] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 443.008920][ T30] audit: type=1400 audit(1775478400.843:393): avc: denied { ioctl } for pid=5165 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3129 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 443.085348][T10367] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1210'. [ 443.132964][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 443.432339][ T30] audit: type=1326 audit(1775478401.553:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f660133db99 code=0x7ffc0000 [ 443.635291][T10375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.887229][ T30] audit: type=1326 audit(1775478401.553:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f660133db99 code=0x7ffc0000 [ 443.934445][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.956786][ T30] audit: type=1326 audit(1775478401.553:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f660133db99 code=0x7ffc0000 [ 444.181572][T10375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.236699][ T30] audit: type=1326 audit(1775478401.553:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 444.281315][ T30] audit: type=1326 audit(1775478401.553:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f660133db99 code=0x7ffc0000 [ 444.305006][ T30] audit: type=1326 audit(1775478401.553:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 444.489548][ T30] audit: type=1326 audit(1775478401.553:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 444.676682][ T30] audit: type=1326 audit(1775478401.553:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f660133db99 code=0x7ffc0000 [ 444.764796][ T5809] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 444.774576][ T5809] Bluetooth: hci3: Injecting HCI hardware error event [ 444.782310][ T5809] Bluetooth: hci3: hardware error 0x00 [ 444.810541][ T30] audit: type=1326 audit(1775478401.553:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f660133db99 code=0x7ffc0000 [ 444.842990][ T30] audit: type=1326 audit(1775478401.553:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 444.965917][T10388] pimreg: entered allmulticast mode [ 445.153435][T10390] syz_tun: left allmulticast mode [ 445.183971][T10387] pimreg: left allmulticast mode [ 445.890362][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 446.360419][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 446.950475][ T5809] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 446.981261][T10410] nvme_fabrics: missing parameter 'transport=%s' [ 447.160960][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 447.170171][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.178945][T10410] nvme_fabrics: missing parameter 'nqn=%s' [ 447.271492][ T9] usb 2-1: config 0 descriptor?? [ 447.540615][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 447.568951][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.649770][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 447.685258][ T9] usb 2-1: media controller created [ 447.725015][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.886255][T10429] erspan0: entered promiscuous mode [ 448.365069][T10440] xt_bpf: check failed: parse error [ 448.986286][T10448] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10448 comm=syz.4.1235 [ 449.414508][T10457] syzkaller0: entered promiscuous mode [ 449.420028][T10457] syzkaller0: entered allmulticast mode [ 450.061379][ T9] az6027: usb out operation failed. (-110) [ 450.138009][ T9] az6027: usb out operation failed. (-71) [ 450.159353][ T9] stb0899_attach: Driver disabled by Kconfig [ 450.179231][ T9] az6027: no front-end attached [ 450.179231][ T9] [ 450.211957][ T9] az6027: usb out operation failed. (-71) [ 450.224214][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 450.268958][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 450.288457][T10467] kvm: emulating exchange as write [ 450.312621][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 450.325913][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 450.334061][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 450.334071][ T30] audit: type=1400 audit(1775478408.453:530): avc: denied { setopt } for pid=10474 comm="syz.1.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 450.367484][ T9] usb 2-1: USB disconnect, device number 29 [ 450.823627][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 452.094370][T10509] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.124100][ T30] audit: type=1400 audit(1775478410.253:531): avc: denied { ioctl } for pid=10507 comm="syz.2.1255" path="socket:[27064]" dev="sockfs" ino=27064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 452.150172][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 452.171629][T10511] ip6gretap0: entered promiscuous mode [ 452.177428][T10511] macvtap1: entered promiscuous mode [ 452.244437][T10511] ip6gretap0: left promiscuous mode [ 452.535381][T10523] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 452.564404][T10523] bond8: (slave lo): Enslaving as an active interface with an up link [ 452.607634][T10523] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 452.951738][T10533] binder: BINDER_SET_CONTEXT_MGR already set [ 452.979720][T10533] binder: 10527:10533 ioctl 4018620d 200000000040 returned -16 [ 453.869449][T10544] syzkaller0: entered promiscuous mode [ 453.874991][T10544] syzkaller0: entered allmulticast mode [ 454.165524][ T30] audit: type=1400 audit(1775478412.243:532): avc: denied { write } for pid=10538 comm="syz.3.1263" path="socket:[27759]" dev="sockfs" ino=27759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 454.219213][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 454.779304][T10561] netlink: 'syz.0.1270': attribute type 2 has an invalid length. [ 455.030456][ T5931] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 455.200420][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 455.201516][ T5931] usb 2-1: config 0 has an invalid interface number: 202 but max is 1 [ 455.201532][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.201543][ T5931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 455.201555][ T5931] usb 2-1: config 0 has no interface number 0 [ 455.201569][ T5931] usb 2-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 455.201588][ T5931] usb 2-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 455.201602][ T5931] usb 2-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 455.201617][ T5931] usb 2-1: config 0 interface 202 has no altsetting 0 [ 455.203801][ T5931] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 455.203817][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.203829][ T5931] usb 2-1: Product: syz [ 455.203837][ T5931] usb 2-1: Manufacturer: syz [ 455.203845][ T5931] usb 2-1: SerialNumber: syz [ 455.205162][ T5931] usb 2-1: config 0 descriptor?? [ 455.219261][ T5931] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 455.410620][T10581] netlink: 'syz.4.1277': attribute type 10 has an invalid length. [ 455.433288][T10581] veth0_vlan: left promiscuous mode [ 455.434912][T10581] veth0_vlan: entered promiscuous mode [ 455.438083][T10581] team0: Device veth0_vlan failed to register rx_handler [ 455.647520][ T1077] usb 2-1: Failed to submit usb control message: -71 [ 455.647574][ T1077] usb 2-1: unable to send the bmi data to the device: -71 [ 455.647590][ T1077] usb 2-1: unable to get target info from device [ 455.647605][ T1077] usb 2-1: could not get target info (-71) [ 455.647743][ T4844] usb 2-1: USB disconnect, device number 30 [ 455.647801][ T1077] usb 2-1: could not probe fw (-71) [ 456.450392][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 456.511027][T10607] syzkaller0: entered promiscuous mode [ 456.519239][T10607] syzkaller0: entered allmulticast mode [ 456.680323][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 456.689961][ T9] usb 5-1: config 0 has no interfaces? [ 456.696755][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 456.705990][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.715700][ T9] usb 5-1: Manufacturer: syz [ 456.735307][ T9] usb 5-1: config 0 descriptor?? [ 456.806640][T10613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.018977][ T30] audit: type=1400 audit(1775478415.143:533): avc: denied { connect } for pid=10592 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 457.413766][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 457.583722][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 457.594115][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 457.602517][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.617082][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.644333][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 457.666563][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.699233][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 457.709596][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.937088][ T9] usb 1-1: usb_control_msg returned -32 [ 457.957275][ T9] usbtmc 1-1:16.0: can't read capabilities [ 458.168968][ T9] usb 1-1: USB disconnect, device number 23 [ 458.761252][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 458.858387][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'. [ 458.934232][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.982153][ T9] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 458.991630][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.014646][ T9] usb 2-1: Product: syz [ 459.020933][ T9] usb 2-1: Manufacturer: syz [ 459.029379][ T30] audit: type=1400 audit(1775478417.153:534): avc: denied { getopt } for pid=10657 comm="syz.2.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 459.058818][ T9] usb 2-1: SerialNumber: syz [ 459.075323][ T9] usb 2-1: config 0 descriptor?? [ 459.598108][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 459.716439][ T5859] usb 5-1: USB disconnect, device number 34 [ 459.763528][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 459.780918][ T10] usb 1-1: config 0 has no interfaces? [ 459.787609][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 459.796689][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 459.807366][ T10] usb 1-1: Manufacturer: syz [ 459.808606][T10680] syzkaller0: entered promiscuous mode [ 459.824828][ T10] usb 1-1: config 0 descriptor?? [ 459.833563][T10680] syzkaller0: entered allmulticast mode [ 459.870498][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 460.050395][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 460.064150][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 460.076115][ T9] usb 3-1: config 0 has no interface number 0 [ 460.082314][ T9] usb 3-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30 [ 460.237268][ T9] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 460.240342][ T30] audit: type=1400 audit(1775478418.253:535): avc: denied { shutdown } for pid=10655 comm="syz.0.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 460.251348][ T9] usb 3-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 460.382978][ T9] usb 3-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235 [ 460.486974][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 460.509618][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 460.524289][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.535543][ T9] usb 3-1: Product: syz [ 460.542833][ T9] usb 3-1: Manufacturer: syz [ 460.554220][ T9] usb 3-1: SerialNumber: syz [ 460.576738][ T9] usb 3-1: config 0 descriptor?? [ 460.595667][ T9] f81534 3-1:0.12: unsupported endpoint max packet size [ 461.374022][ T10] usb 2-1: USB disconnect, device number 31 [ 461.498746][T10689] pimreg: entered allmulticast mode [ 461.505939][T10690] pimreg: left allmulticast mode [ 461.712334][ T5931] usb 3-1: USB disconnect, device number 21 [ 462.011251][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 462.060815][ T5931] usb 1-1: USB disconnect, device number 24 [ 462.320799][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 462.342243][ T10] usb 2-1: config 0 has no interfaces? [ 462.369820][ T10] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 462.378965][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.407822][ T10] usb 2-1: Product: syz [ 462.412214][ T10] usb 2-1: Manufacturer: syz [ 462.416805][ T10] usb 2-1: SerialNumber: syz [ 462.426784][ T10] usb 2-1: config 0 descriptor?? [ 462.610326][ T5931] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 462.815481][T10726] netlink: 'syz.2.1322': attribute type 1 has an invalid length. [ 462.830332][ T30] audit: type=1400 audit(1775478420.943:536): avc: denied { listen } for pid=10717 comm="syz.2.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 462.851159][T10724] Cannot find del_set index 286 as target [ 463.038512][T10724] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 463.051283][ T5931] usb 5-1: config 129 has an invalid interface number: 4 but max is 0 [ 463.070101][T10724] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 463.095207][ T5931] usb 5-1: config 129 has no interface number 0 [ 463.105534][ T5931] usb 5-1: config 129 interface 4 has no altsetting 0 [ 463.132999][ T5931] usb 5-1: New USB device found, idVendor=0403, idProduct=f458, bcdDevice= 0.7c [ 463.146347][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.158175][ T5931] usb 5-1: Product: syz [ 463.165213][ T5931] usb 5-1: Manufacturer: syz [ 463.174566][ T5931] usb 5-1: SerialNumber: syz [ 463.242627][ T4844] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 463.261002][ T5859] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 463.406943][ T5931] ftdi_sio 5-1:129.4: FTDI USB Serial Device converter detected [ 463.422328][ T5931] usb 5-1: Detected SIO [ 463.433537][ T5931] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 463.442661][ T4844] usb 4-1: Using ep0 maxpacket: 32 [ 463.447774][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 463.458951][ T5859] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 463.473932][ T4844] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 463.487564][ T5859] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 463.498820][ T4844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.518055][ T5931] usb 5-1: USB disconnect, device number 35 [ 463.524031][ T4844] usb 4-1: Product: syz [ 463.529422][ T5859] usb 3-1: config 0 interface 0 has no altsetting 0 [ 463.538967][ T5931] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 463.548337][ T4844] usb 4-1: Manufacturer: syz [ 463.555538][ T4844] usb 4-1: SerialNumber: syz [ 463.557404][ T5859] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 463.578216][ T4844] usb 4-1: config 0 descriptor?? [ 463.583704][ T5931] ftdi_sio 5-1:129.4: device disconnected [ 463.589429][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.602125][ T4844] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 463.615035][ T5859] usb 3-1: Product: syz [ 463.621916][ T5859] usb 3-1: Manufacturer: syz [ 463.626538][ T5859] usb 3-1: SerialNumber: syz [ 463.642914][ T5859] usb 3-1: config 0 descriptor?? [ 464.131783][ T5859] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 464.240422][ T5931] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 464.402024][ T5931] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 464.418611][ T4844] gspca_ov534_9: reg_w failed -71 [ 464.428320][ T5931] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 464.437672][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.445751][ T5931] usb 5-1: Product: syz [ 464.450009][ T5931] usb 5-1: Manufacturer: syz [ 464.454999][ T5931] usb 5-1: SerialNumber: syz [ 464.465908][ T5931] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 464.558621][ T9] usb 2-1: USB disconnect, device number 32 [ 464.710326][ T4844] gspca_ov534_9: Unknown sensor 0000 [ 464.710417][ T4844] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 464.761090][ T4844] usb 4-1: USB disconnect, device number 39 [ 464.872515][ T5931] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 464.885520][ T5931] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 464.895711][ T5931] usb 5-1: media controller created [ 464.913031][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.125599][ T5931] usb 5-1: USB disconnect, device number 36 [ 465.401194][ T4844] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 465.561881][ T4844] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.573766][ T4844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.585185][ T4844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 465.610425][ T4844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.624751][ T4844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.650525][ T4844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.665069][ T4844] usb 4-1: config 0 descriptor?? [ 466.047266][ T9] usb 3-1: USB disconnect, device number 22 [ 466.103359][ T4844] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 466.136808][T10764] netlink: 'syz.2.1335': attribute type 2 has an invalid length. [ 466.185552][ T30] audit: type=1400 audit(1775478424.313:537): avc: denied { listen } for pid=10765 comm="syz.1.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 466.207644][T10764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'. [ 466.275891][ T30] audit: type=1400 audit(1775478424.403:538): avc: denied { read } for pid=5475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 467.008183][T10794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1341'. [ 467.071985][ T10] usb 4-1: USB disconnect, device number 40 [ 467.121446][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 467.282617][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 467.289341][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 467.297934][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.315286][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 467.343795][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 467.371635][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.511123][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 467.523834][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.857882][ T9] usb 2-1: usb_control_msg returned -32 [ 467.863530][ T9] usbtmc 2-1:16.0: can't read capabilities [ 467.902480][T10811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 467.990348][ T5931] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 468.063206][ T9] usb 2-1: USB disconnect, device number 33 [ 468.131970][ T30] audit: type=1400 audit(1775478426.263:539): avc: denied { write } for pid=10819 comm="syz.0.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 468.188075][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 468.213644][ T5931] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 468.232268][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.244301][ T5931] usb 3-1: Product: syz [ 468.248473][ T5931] usb 3-1: Manufacturer: syz [ 468.255134][ T5931] usb 3-1: SerialNumber: syz [ 468.262675][ T5931] usb 3-1: config 0 descriptor?? [ 468.270871][ T5931] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 468.921709][T10848] xfrm1: entered allmulticast mode [ 469.372050][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 469.520328][ T10] usb 2-1: device descriptor read/64, error -71 [ 469.603188][ T5931] gspca_ov534_9: reg_w failed -71 [ 469.651841][T10859] netlink: 'syz.3.1358': attribute type 2 has an invalid length. [ 469.687259][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1358'. [ 469.760337][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 469.769391][T10861] xt_hashlimit: size too large, truncated to 1048576 [ 469.910366][ T10] usb 2-1: device descriptor read/64, error -71 [ 469.920329][ T5931] gspca_ov534_9: Unknown sensor 0000 [ 469.920376][ T5931] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 469.935631][ T5931] usb 3-1: USB disconnect, device number 23 [ 470.021003][ T10] usb usb2-port1: attempt power cycle [ 470.360780][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 470.381022][ T10] usb 2-1: device descriptor read/8, error -71 [ 470.531763][ T30] audit: type=1400 audit(1775478428.663:540): avc: denied { listen } for pid=10878 comm="syz.2.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 470.677776][T10885] No such timeout policy "syz1" [ 470.800386][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 471.162354][ T10] usb 2-1: device descriptor read/8, error -71 [ 471.270551][ T10] usb usb2-port1: unable to enumerate USB device [ 472.027551][T10896] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.490475][T10911] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 472.540548][T10911] veth0_vlan: left promiscuous mode [ 472.550937][T10911] veth0_vlan: entered promiscuous mode [ 472.562227][T10911] team0: Device veth0_vlan failed to register rx_handler [ 472.635481][T10913] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 472.690406][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 472.853798][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 472.865099][ T10] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 472.867031][T10930] syzkaller0: entered promiscuous mode [ 472.881444][T10930] syzkaller0: entered allmulticast mode [ 472.904442][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 473.067368][T10929] netlink: 424 bytes leftover after parsing attributes in process `syz.2.1380'. [ 473.077816][T10929] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 473.084991][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.114267][ T10] usb 2-1: Product: syz [ 473.128402][ T10] usb 2-1: Manufacturer: syz [ 473.141361][ T10] usb 2-1: SerialNumber: syz [ 473.397554][T10900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1371'. [ 473.555681][T10900] team0 (unregistering): Port device team_slave_0 removed [ 473.566472][T10900] team0 (unregistering): Port device team_slave_1 removed [ 473.970385][ T5931] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 474.132193][ T5931] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.144404][ T5931] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.167256][ T5931] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.189649][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.220257][T10953] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 474.233029][ T5931] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.489228][T10971] syzkaller0: entered promiscuous mode [ 474.509443][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'. [ 474.530102][ T30] audit: type=1400 audit(1775478432.653:541): avc: denied { connect } for pid=10967 comm="syz.0.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 474.546369][T10971] syzkaller0: entered allmulticast mode [ 474.625091][ T5931] usb 5-1: USB disconnect, device number 37 [ 475.260522][ T5808] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 475.418395][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 475.429441][ T5808] usb 3-1: device descriptor read/64, error -71 [ 475.720357][ T5808] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 475.860403][ T5808] usb 3-1: device descriptor read/64, error -71 [ 475.910065][ T10] usb 2-1: USB disconnect, device number 38 [ 475.980533][ T5808] usb usb3-port1: attempt power cycle [ 476.200334][T10991] netlink: 'syz.4.1398': attribute type 10 has an invalid length. [ 476.355646][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 476.370335][ T5808] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 476.396975][ T5808] usb 3-1: device descriptor read/8, error -71 [ 476.759537][ T5808] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 476.830693][T10681] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 476.854905][ T5808] usb 3-1: device descriptor read/8, error -71 [ 477.003181][ T5808] usb usb3-port1: unable to enumerate USB device [ 477.040741][T10681] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.098351][T10681] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 477.145529][T10681] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 477.183415][T10681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.265372][T10991] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 477.279277][T10681] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.537941][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.546388][ T5808] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 477.546802][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.638969][T11033] binder: 11030:11033 ioctl c0306201 200000000040 returned -14 [ 477.760382][ T30] audit: type=1326 audit(1775478435.863:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 477.802448][ T5808] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 477.814053][ T5808] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 477.823941][ T5808] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 477.833088][ T30] audit: type=1326 audit(1775478435.863:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f660135d04e code=0x7ffc0000 [ 477.866246][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.884713][T11024] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 477.922824][ T5808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.939772][ T30] audit: type=1326 audit(1775478435.863:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 478.053109][ T30] audit: type=1326 audit(1775478435.863:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 478.119598][ T30] audit: type=1326 audit(1775478435.863:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 478.228557][ T30] audit: type=1326 audit(1775478435.863:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 478.363645][ T30] audit: type=1326 audit(1775478435.863:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 478.465084][ T5931] usb 2-1: USB disconnect, device number 39 [ 478.485453][ T30] audit: type=1326 audit(1775478435.863:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f660135d04e code=0x7ffc0000 [ 478.584496][ T30] audit: type=1326 audit(1775478435.863:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11029 comm="syz.3.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660139c819 code=0x7ffc0000 [ 478.792281][T10681] usb 5-1: USB disconnect, device number 38 [ 479.061394][T11071] netlink: 'syz.1.1423': attribute type 10 has an invalid length. [ 479.582183][T11064] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 480.017199][T11098] binder: BINDER_SET_CONTEXT_MGR already set [ 480.024688][T11097] netlink: 'syz.3.1430': attribute type 10 has an invalid length. [ 480.038279][T11098] binder: 11095:11098 ioctl 4018620d 200000000040 returned -16 [ 480.180697][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 480.275324][T11101] syzkaller0: entered promiscuous mode [ 480.284222][T11101] syzkaller0: entered allmulticast mode [ 480.321526][T11101] tipc: Started in network mode [ 480.333856][T11101] tipc: Node identity 82618a2fbcb2, cluster identity 4711 [ 480.360643][T11101] tipc: Enabled bearer , priority 0 [ 480.379081][ T24] usb 1-1: config 0 has no interfaces? [ 480.386491][T11100] tipc: Resetting bearer [ 480.434718][ T24] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 480.451317][T11100] tipc: Disabling bearer [ 480.460821][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.483287][ T24] usb 1-1: Product: syz [ 480.492944][ T24] usb 1-1: Manufacturer: syz [ 480.497543][ T24] usb 1-1: SerialNumber: syz [ 480.531847][ T24] usb 1-1: config 0 descriptor?? [ 480.792477][T11134] netlink: 'syz.2.1443': attribute type 10 has an invalid length. [ 480.912901][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 481.054325][ T5808] usb 1-1: USB disconnect, device number 25 [ 481.122113][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.134408][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.145491][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 481.157807][ T24] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 481.166858][ T24] usb 5-1: Manufacturer: syz [ 481.225006][ T24] usb 5-1: config 0 descriptor?? [ 481.490341][ T5808] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 481.645459][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 481.670352][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.687090][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 481.727618][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.752062][ T5808] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.769203][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.784000][ T5808] usb 3-1: config 0 descriptor?? [ 481.822050][T11154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11154 comm=syz.0.1451 [ 482.043433][ T24] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 482.053834][ T24] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 482.062236][ T24] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 482.070567][ T24] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 482.078098][ T24] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 482.097488][ T24] usb 5-1: USB disconnect, device number 39 [ 482.103478][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 482.103490][ T30] audit: type=1400 audit(1775478440.233:555): avc: denied { bind } for pid=11168 comm="syz.3.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 482.214471][ T5808] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 482.460397][ T4844] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 482.623122][ T4844] usb 1-1: Using ep0 maxpacket: 32 [ 482.794658][ T4844] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 482.806312][ T4844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.826472][ T4844] usb 1-1: Product: syz [ 482.844861][ T4844] usb 1-1: Manufacturer: syz [ 482.852958][ T4844] usb 1-1: SerialNumber: syz [ 482.869318][ T4844] usb 1-1: config 0 descriptor?? [ 482.885421][ T4844] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 483.048865][ T5808] usb 3-1: USB disconnect, device number 28 [ 483.488000][ T4844] gspca_ov534_9: reg_w failed -71 [ 483.910821][ T4844] gspca_ov534_9: Unknown sensor 0000 [ 483.910898][ T4844] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 483.930813][ T4844] usb 1-1: USB disconnect, device number 26 [ 484.004399][T11223] netlink: 'syz.3.1475': attribute type 10 has an invalid length. [ 484.212255][ T30] audit: type=1400 audit(1775478442.333:556): avc: denied { name_connect } for pid=11226 comm="syz.3.1477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 484.303133][ T30] audit: type=1400 audit(1775478442.423:557): avc: denied { write } for pid=11227 comm="syz.4.1479" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 484.365680][T11240] netlink: 'syz.1.1483': attribute type 10 has an invalid length. [ 484.393949][T11243] erspan0: entered promiscuous mode [ 484.399935][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 484.414539][T11243] erspan0: left promiscuous mode [ 484.681245][T11250] netlink: 'syz.2.1487': attribute type 3 has an invalid length. [ 484.950348][ T4844] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 485.118794][ T4844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.130547][ T4844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.140631][ T4844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 485.157660][ T4844] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 485.180408][ T4844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.215217][ T4844] usb 4-1: config 0 descriptor?? [ 485.689587][ T4844] usbhid 4-1:0.0: can't add hid device: -71 [ 485.696451][ T4844] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 485.729253][ T4844] usb 4-1: USB disconnect, device number 41 [ 486.430839][T11293] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1504'. [ 486.442680][T11293] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.450361][T11293] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.677433][T11303] syzkaller0: entered promiscuous mode [ 486.684079][T11303] syzkaller0: entered allmulticast mode [ 486.912565][ T4844] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 487.105155][ T4844] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 487.117147][ T4844] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 487.202531][ T4844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.210629][ T4844] usb 1-1: Product: syz [ 487.214869][ T4844] usb 1-1: Manufacturer: syz [ 487.219431][ T4844] usb 1-1: SerialNumber: syz [ 487.251495][ T4844] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 487.454492][ T4844] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 487.466677][ T4844] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 487.478848][ T4844] usb 1-1: media controller created [ 487.515226][T11329] syzkaller0: entered promiscuous mode [ 487.520908][T11329] syzkaller0: entered allmulticast mode [ 487.538330][ T4844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.579627][T11331] ------------[ cut here ]------------ [ 487.586042][T11331] usb 1-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0 [ 487.595013][T11331] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x1573/0x1910, CPU#0: syz.2.1521/11331 [ 487.605650][T11331] Modules linked in: [ 487.609660][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.2.1521 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.620880][T11331] Tainted: [L]=SOFTLOCKUP [ 487.625182][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 487.636554][T11331] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 487.643928][T11331] Code: d2 74 5d 48 89 54 24 40 e8 cf 37 b7 fa 4c 89 ef e8 27 9d de fe 48 89 c6 48 8d 3d 5d d0 94 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 a3 37 b7 fa 89 ee bf ff 00 00 00 [ 487.663745][T11331] RSP: 0018:ffffc9000cf87610 EFLAGS: 00010287 [ 487.669915][T11331] RAX: ffffffff8c80f440 RBX: ffff88802c4ebd00 RCX: 0000000080001b80 [ 487.677974][T11331] RDX: ffff888083791e00 RSI: ffffffff8c80f440 RDI: ffffffff90e69000 [ 487.686106][T11331] RBP: ffff888029c00058 R08: 00000000000000c0 R09: 0000000000000000 [ 487.694268][T11331] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880781fb660 [ 487.702453][T11331] R13: ffff888029c000b0 R14: 0000000080001b80 R15: 00000000000000c0 [ 487.710608][T11331] FS: 00007fe0c411d6c0(0000) GS:ffff888124339000(0000) knlGS:0000000000000000 [ 487.719586][T11331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.726219][T11331] CR2: 0000001b2fa23ffc CR3: 0000000086d3c000 CR4: 00000000003526f0 [ 487.734241][T11331] Call Trace: [ 487.737818][T11331] [ 487.741011][T11331] ? __init_swait_queue_head+0xca/0x150 [ 487.746577][T11331] usb_start_wait_urb+0x10e/0x580 [ 487.751680][T11331] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 487.757236][T11331] ? __asan_memset+0x23/0x50 [ 487.761852][T11331] usb_control_msg+0x328/0x4b0 [ 487.766613][T11331] ? __pfx_usb_control_msg+0x10/0x10 [ 487.771901][T11331] ? kernel_text_address+0x8d/0x100 [ 487.777077][T11331] ? __kernel_text_address+0xd/0x30 [ 487.782282][T11331] gl861_ctrl_msg+0x1a5/0x4a0 [ 487.786947][T11331] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 487.792156][T11331] ? tomoyo_update_mount_acl+0x2b0/0x2b0 [ 487.797791][T11331] ? stack_trace_save+0x8e/0xc0 [ 487.802851][T11331] ? __pfx_stack_trace_save+0x10/0x10 [ 487.808207][T11331] ? stack_depot_save_flags+0x27/0x9d0 [ 487.813671][T11331] gl861_i2c_master_xfer+0x545/0x690 [ 487.818957][T11331] __i2c_transfer+0x5d9/0x17f0 [ 487.823715][T11331] ? __pfx___i2c_transfer+0x10/0x10 [ 487.828890][T11331] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 487.834489][T11331] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 487.840647][T11331] __i2c_smbus_xfer+0x5b7/0x1080 [ 487.845573][T11331] ? mark_held_locks+0x40/0x70 [ 487.850496][T11331] ? lockdep_hardirqs_on+0x78/0x100 [ 487.855678][T11331] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 487.861067][T11331] ? rt_mutex_slowtrylock+0x93/0x100 [ 487.866340][T11331] i2c_smbus_xfer+0x185/0x3c0 [ 487.871027][T11331] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 487.876035][T11331] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 487.881591][T11331] ? __might_fault+0xc5/0x140 [ 487.886246][T11331] ? __might_fault+0xc5/0x140 [ 487.890928][T11331] i2cdev_ioctl+0x3cf/0x830 [ 487.895407][T11331] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 487.900444][T11331] ? selinux_file_ioctl+0x139/0x290 [ 487.905624][T11331] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 487.910642][T11331] __x64_sys_ioctl+0x18e/0x210 [ 487.915409][T11331] do_syscall_64+0x106/0xf80 [ 487.919970][T11331] ? clear_bhb_loop+0x40/0x90 [ 487.924641][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.930528][T11331] RIP: 0033:0x7fe0c319c819 [ 487.934926][T11331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.954708][T11331] RSP: 002b:00007fe0c411d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.963367][T11331] RAX: ffffffffffffffda RBX: 00007fe0c3415fa0 RCX: 00007fe0c319c819 [ 487.971342][T11331] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000003 [ 487.979287][T11331] RBP: 00007fe0c3232c91 R08: 0000000000000000 R09: 0000000000000000 [ 487.987250][T11331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.995207][T11331] R13: 00007fe0c3416038 R14: 00007fe0c3415fa0 R15: 00007ffc5adf0268 [ 488.003178][T11331] [ 488.006172][T11331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 488.013424][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.2.1521 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.024325][T11331] Tainted: [L]=SOFTLOCKUP [ 488.028619][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 488.038645][T11331] Call Trace: [ 488.041897][T11331] [ 488.044801][T11331] dump_stack_lvl+0x100/0x190 [ 488.049462][T11331] vpanic+0x552/0x970 [ 488.053417][T11331] ? __pfx_vpanic+0x10/0x10 [ 488.057894][T11331] panic+0xd1/0xe0 [ 488.061587][T11331] ? __pfx_panic+0x10/0x10 [ 488.065981][T11331] check_panic_on_warn.cold+0x19/0x34 [ 488.071325][T11331] ? usb_submit_urb+0x1573/0x1910 [ 488.076324][T11331] __warn.cold+0x191/0x348 [ 488.080727][T11331] __report_bug+0x296/0x3d0 [ 488.085205][T11331] ? usb_submit_urb+0x1573/0x1910 [ 488.090203][T11331] ? __pfx___report_bug+0x10/0x10 [ 488.095201][T11331] ? mark_held_locks+0x40/0x70 [ 488.099944][T11331] report_bug_entry+0xe1/0x290 [ 488.104687][T11331] ? usb_submit_urb+0x157e/0x1910 [ 488.109685][T11331] handle_bug+0x1cd/0x2a0 [ 488.113987][T11331] exc_invalid_op+0x17/0x50 [ 488.118462][T11331] asm_exc_invalid_op+0x1a/0x20 [ 488.123293][T11331] RIP: 0010:usb_submit_urb+0x157e/0x1910 [ 488.128902][T11331] Code: d2 74 5d 48 89 54 24 40 e8 cf 37 b7 fa 4c 89 ef e8 27 9d de fe 48 89 c6 48 8d 3d 5d d0 94 09 48 8b 54 24 40 45 89 f8 44 89 f1 <67> 48 0f b9 3a e9 c7 ed ff ff e8 a3 37 b7 fa 89 ee bf ff 00 00 00 [ 488.148491][T11331] RSP: 0018:ffffc9000cf87610 EFLAGS: 00010287 [ 488.154527][T11331] RAX: ffffffff8c80f440 RBX: ffff88802c4ebd00 RCX: 0000000080001b80 [ 488.162481][T11331] RDX: ffff888083791e00 RSI: ffffffff8c80f440 RDI: ffffffff90e69000 [ 488.170423][T11331] RBP: ffff888029c00058 R08: 00000000000000c0 R09: 0000000000000000 [ 488.178367][T11331] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880781fb660 [ 488.186307][T11331] R13: ffff888029c000b0 R14: 0000000080001b80 R15: 00000000000000c0 [ 488.194269][T11331] ? __init_swait_queue_head+0xca/0x150 [ 488.199793][T11331] usb_start_wait_urb+0x10e/0x580 [ 488.204792][T11331] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 488.210327][T11331] ? __asan_memset+0x23/0x50 [ 488.214911][T11331] usb_control_msg+0x328/0x4b0 [ 488.219650][T11331] ? __pfx_usb_control_msg+0x10/0x10 [ 488.224911][T11331] ? kernel_text_address+0x8d/0x100 [ 488.230083][T11331] ? __kernel_text_address+0xd/0x30 [ 488.235255][T11331] gl861_ctrl_msg+0x1a5/0x4a0 [ 488.239919][T11331] ? __pfx_gl861_ctrl_msg+0x10/0x10 [ 488.245091][T11331] ? tomoyo_update_mount_acl+0x2b0/0x2b0 [ 488.250698][T11331] ? stack_trace_save+0x8e/0xc0 [ 488.255531][T11331] ? __pfx_stack_trace_save+0x10/0x10 [ 488.260878][T11331] ? stack_depot_save_flags+0x27/0x9d0 [ 488.266310][T11331] gl861_i2c_master_xfer+0x545/0x690 [ 488.271572][T11331] __i2c_transfer+0x5d9/0x17f0 [ 488.276311][T11331] ? __pfx___i2c_transfer+0x10/0x10 [ 488.281484][T11331] i2c_smbus_xfer_emulated+0x22a/0x10e0 [ 488.287014][T11331] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 488.292979][T11331] __i2c_smbus_xfer+0x5b7/0x1080 [ 488.297893][T11331] ? mark_held_locks+0x40/0x70 [ 488.302638][T11331] ? lockdep_hardirqs_on+0x78/0x100 [ 488.307814][T11331] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 488.313164][T11331] ? rt_mutex_slowtrylock+0x93/0x100 [ 488.318427][T11331] i2c_smbus_xfer+0x185/0x3c0 [ 488.323090][T11331] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 488.328087][T11331] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 488.333600][T11331] ? __might_fault+0xc5/0x140 [ 488.338251][T11331] ? __might_fault+0xc5/0x140 [ 488.342906][T11331] i2cdev_ioctl+0x3cf/0x830 [ 488.347382][T11331] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 488.352377][T11331] ? selinux_file_ioctl+0x139/0x290 [ 488.357553][T11331] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 488.362550][T11331] __x64_sys_ioctl+0x18e/0x210 [ 488.367299][T11331] do_syscall_64+0x106/0xf80 [ 488.371858][T11331] ? clear_bhb_loop+0x40/0x90 [ 488.376507][T11331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.382370][T11331] RIP: 0033:0x7fe0c319c819 [ 488.386756][T11331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.406333][T11331] RSP: 002b:00007fe0c411d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.414718][T11331] RAX: ffffffffffffffda RBX: 00007fe0c3415fa0 RCX: 00007fe0c319c819 [ 488.422660][T11331] RDX: 0000200000000180 RSI: 0000000000000720 RDI: 0000000000000003 [ 488.430601][T11331] RBP: 00007fe0c3232c91 R08: 0000000000000000 R09: 0000000000000000 [ 488.438542][T11331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.446482][T11331] R13: 00007fe0c3416038 R14: 00007fe0c3415fa0 R15: 00007ffc5adf0268 [ 488.454432][T11331] [ 488.457704][T11331] Kernel Offset: disabled [ 488.462001][T11331] Rebooting in 86400 seconds..